================================================
WARNING: lock held when returning to user space!
6.18.0-rc7-next-20251128 #1 Not tainted
------------------------------------------------
syz-executor.4/4616 is leaving the kernel with locks still held!
1 lock held by syz-executor.4/4616:
 #0: ffff888016eb0188 (&sb->s_type->i_mutex_key#18/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
audit: type=1326 audit(1764380824.463:96): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4621 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01edc58b19 code=0x7ffc0000
mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
audit: type=1326 audit(1764380824.467:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4621 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01edc58b19 code=0x7ffc0000
audit: type=1326 audit(1764380824.468:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4621 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f01edc58b19 code=0x7ffc0000
audit: type=1326 audit(1764380824.470:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4621 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01edc58b19 code=0x7ffc0000
mac80211_hwsim hwsim15 wlan1: left promiscuous mode
mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
mac80211_hwsim hwsim15 wlan1: left promiscuous mode
syz-executor.0 (4622) used greatest stack depth: 23200 bytes left