================================================ WARNING: lock held when returning to user space! 6.18.0-rc7-next-20251128 #1 Not tainted ------------------------------------------------ syz-executor.7/5181 is leaving the kernel with locks still held! 1 lock held by syz-executor.7/5181: #0: ffff888015d98848 (&sb->s_type->i_mutex_key#26/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0 loop5: detected capacity change from 0 to 3504 loop7: detected capacity change from 0 to 128 ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root loop0: detected capacity change from 0 to 512 loop3: detected capacity change from 0 to 264192 loop7: detected capacity change from 0 to 264192 EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. ext4 filesystem being mounted at /syzkaller-testdir669451711/syzkaller.X4uHwi/25/file0 supports timestamps until 2038-01-19 (0x7fffffff) EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop0: detected capacity change from 0 to 264192 mac80211_hwsim hwsim15 wlan1: entered promiscuous mode mac80211_hwsim hwsim15 wlan1: left promiscuous mode loop3: detected capacity change from 0 to 264192 mac80211_hwsim hwsim15 wlan1: entered promiscuous mode loop5: detected capacity change from 0 to 3504 mac80211_hwsim hwsim15 wlan1: left promiscuous mode ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root