947ec0d002dc ("Bluetooth: fix use-after-free in accessing skb after sending it")
2615fd9a7c25 ("Bluetooth: hci_sync: Fix overwriting request callback")
63298d6e752f ("Bluetooth: hci_core: Cancel request on command timeout")