================================================
WARNING: lock held when returning to user space!
6.18.0-rc7-next-20251128 #1 Not tainted
------------------------------------------------
syz-executor.2/20781 is leaving the kernel with locks still held!
1 lock held by syz-executor.2/20781:
 #0: ffff888016b88f08 (&sb->s_type->i_mutex_key#23/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
Bluetooth: hci0: Opcode 0x0c1a failed: -4
Bluetooth: hci2: Opcode 0x0c1a failed: -4
Bluetooth: hci1: Opcode 0x0c1a failed: -4
Bluetooth: hci3: Opcode 0x0c1a failed: -4
Bluetooth: hci4: Opcode 0x0c1a failed: -4
Bluetooth: hci5: Opcode 0x0c1a failed: -4
Bluetooth: hci6: Opcode 0x0c1a failed: -4
Bluetooth: hci7: Opcode 0x0c1a failed: -4
Bluetooth: hci0: command 0x0c1a tx timeout
Bluetooth: hci7: command 0x0c1a tx timeout
Bluetooth: hci6: command 0x0c1a tx timeout
Bluetooth: hci5: command 0x0c1a tx timeout
Bluetooth: hci4: command 0x0c1a tx timeout
Bluetooth: hci3: command 0x0c1a tx timeout
Bluetooth: hci1: command 0x0c1a tx timeout
Bluetooth: hci2: command 0x0c1a tx timeout