BUG: sleeping function called from invalid context at net/core/sock.c:3490
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4280, name: kworker/u5:5
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
5 locks held by kworker/u5:5/4280:
 #0: ffff8880535d9138 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #1: ffffc90004117d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8de9df48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:1784 [inline]
 #2: ffffffff8de9df48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_request_evt+0x6fe/0xb10 net/bluetooth/hci_event.c:3380
 #3: ffff8880729c0a20 (&conn->lock#2){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline]
 #3: ffff8880729c0a20 (&conn->lock#2){+.+.}-{2:2}, at: sco_conn_ready net/bluetooth/sco.c:1297 [inline]
 #3: ffff8880729c0a20 (&conn->lock#2){+.+.}-{2:2}, at: sco_connect_cfm+0x26d/0xad0 net/bluetooth/sco.c:1382
 #4: ffff88807d933130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1756 [inline]
 #4: ffff88807d933130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_ready net/bluetooth/sco.c:1310 [inline]
 #4: ffff88807d933130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x463/0xad0 net/bluetooth/sco.c:1382
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 1 PID: 4280 Comm: kworker/u5:5 Not tainted 6.1.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: hci4 hci_rx_work
Call Trace:
 <TASK>
 dump_stack_lvl+0x168/0x22e lib/dump_stack.c:106
 __might_resched+0x48d/0x610 kernel/sched/core.c:9966
 lock_sock_nested+0x59/0x100 net/core/sock.c:3490
 lock_sock include/net/sock.h:1756 [inline]
 sco_conn_ready net/bluetooth/sco.c:1310 [inline]
 sco_connect_cfm+0x463/0xad0 net/bluetooth/sco.c:1382
 hci_connect_cfm include/net/bluetooth/hci_core.h:1787 [inline]
 hci_conn_request_evt+0x768/0xb10 net/bluetooth/hci_event.c:3380
 hci_event_func net/bluetooth/hci_event.c:7345 [inline]
 hci_event_packet+0x7e9/0x1210 net/bluetooth/hci_event.c:7397
 hci_rx_work+0x3eb/0xd40 net/bluetooth/hci_core.c:4083
 process_one_work+0x898/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1250 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>