================================================
WARNING: lock held when returning to user space!
6.18.0-rc7-next-20251128 #1 Not tainted
------------------------------------------------
syz-executor.3/8834 is leaving the kernel with locks still held!
1 lock held by syz-executor.3/8834:
 #0: ffff888018b315c8 (&sb->s_type->i_mutex_key#20/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
Bluetooth: hci3: Malformed Event: 0x13