================================================
WARNING: lock held when returning to user space!
6.18.0-rc7-next-20251127 #1 Not tainted
------------------------------------------------
syz-executor.2/6110 is leaving the kernel with locks still held!
1 lock held by syz-executor.2/6110:
 #0: ffff88800b388848 (&sb->s_type->i_mutex_key#26/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
Bluetooth: hci1: command 0x0c1a tx timeout
Bluetooth: hci4: command 0x0c1a tx timeout
Bluetooth: hci5: command 0x0c1a tx timeout
Bluetooth: hci3: command 0x0c1a tx timeout
Bluetooth: hci2: command 0x0c1a tx timeout
Bluetooth: hci0: command 0x0c1a tx timeout