================================================
WARNING: lock held when returning to user space!
6.18.0-rc7-next-20251127 #1 Not tainted
------------------------------------------------
syz-executor.0/7796 is leaving the kernel with locks still held!
1 lock held by syz-executor.0/7796:
 #0: ffff888015e595c8 (&sb->s_type->i_mutex_key#19/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
Bluetooth: hci0: link tx timeout
Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
Bluetooth: hci0: link tx timeout
Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
Bluetooth: hci0: link tx timeout
Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
Bluetooth: hci0: link tx timeout
Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
Bluetooth: hci0: command 0x0406 tx timeout