BUG: sleeping function called from invalid context at net/bluetooth/hci_sync.c:169 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5064, name: kworker/u5:2 preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 4 locks held by kworker/u5:2/5064: #0: ffff888029351538 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2605 [inline] #0: ffff888029351538 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1400 kernel/workqueue.c:2703 #1: ffffc9000434fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2605 [inline] #1: ffffc9000434fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1400 kernel/workqueue.c:2703 #2: ffff888079ff0078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xc8/0xa90 net/bluetooth/hci_event.c:7036 #3: ffffffff8d32c420 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:303 [inline] #3: ffffffff8d32c420 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:749 [inline] #3: ffffffff8d32c420 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xd4/0xa90 net/bluetooth/hci_event.c:7037 CPU: 0 PID: 5064 Comm: kworker/u5:2 Not tainted 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 Workqueue: hci1 hci_rx_work Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106 __might_resched+0x5cf/0x780 kernel/sched/core.c:10187 __hci_cmd_sync_sk+0x7fc/0x1080 net/bluetooth/hci_sync.c:167 __hci_cmd_sync_status_sk net/bluetooth/hci_sync.c:248 [inline] __hci_cmd_sync_status net/bluetooth/hci_sync.c:274 [inline] hci_le_terminate_big_sync+0xd2/0x210 net/bluetooth/hci_sync.c:1673 hci_le_create_big_complete_evt+0x8d1/0xa90 net/bluetooth/hci_event.c:7073 hci_event_func net/bluetooth/hci_event.c:7635 [inline] hci_event_packet+0x90a/0x1360 net/bluetooth/hci_event.c:7690 hci_rx_work+0x453/0xaa0 net/bluetooth/hci_core.c:4094 process_one_work kernel/workqueue.c:2630 [inline] process_scheduled_works+0x90f/0x1400 kernel/workqueue.c:2703 worker_thread+0xa5f/0xff0 kernel/workqueue.c:2784 kthread+0x2d3/0x370 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 ------------[ cut here ]------------ Voluntary context switch within RCU read-side critical section! WARNING: CPU: 0 PID: 5064 at kernel/rcu/tree_plugin.h:320 rcu_note_context_switch+0xce4/0xfb0 kernel/rcu/tree_plugin.h:320 Modules linked in: CPU: 0 PID: 5064 Comm: kworker/u5:2 Tainted: G W 6.6.0-rc2-syzkaller-00414-g8a511e7efc5a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 Workqueue: hci1 hci_rx_work RIP: 0010:rcu_note_context_switch+0xce4/0xfb0 kernel/rcu/tree_plugin.h:320 Code: c7 02 00 00 41 80 3e 00 75 85 4c 89 ef e8 c4 15 fe ff e9 78 ff ff ff c6 05 b8 35 0e 0d 01 48 c7 c7 e0 f3 0b 8b e8 7c eb dc ff <0f> 0b e9 4c f4 ff ff 0f 0b 45 84 ed 0f 84 13 f4 ff ff e9 3c f4 ff RSP: 0018:ffffc9000434f1e0 EFLAGS: 00010046 RAX: 05b556cae9c19200 RBX: ffff888077cb043c RCX: 0000000000040000 RDX: ffffc90014ad8000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffc9000434f330 R08: ffffffff81543302 R09: 1ffff92000869d90 R10: dffffc0000000000 R11: fffff52000869d91 R12: ffff888077cb0000 R13: 0000000000000000 R14: 1ffff92000869e54 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020092030 CR3: 000000007bb60000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __schedule+0x347/0x4af0 kernel/sched/core.c:6595 schedule+0xc3/0x180 kernel/sched/core.c:6771 schedule_timeout+0x1bd/0x300 kernel/time/timer.c:2167 __hci_cmd_sync_sk+0x91b/0x1080 net/bluetooth/hci_sync.c:167 __hci_cmd_sync_status_sk net/bluetooth/hci_sync.c:248 [inline] __hci_cmd_sync_status net/bluetooth/hci_sync.c:274 [inline] hci_le_terminate_big_sync+0xd2/0x210 net/bluetooth/hci_sync.c:1673 hci_le_create_big_complete_evt+0x8d1/0xa90 net/bluetooth/hci_event.c:7073 hci_event_func net/bluetooth/hci_event.c:7635 [inline] hci_event_packet+0x90a/0x1360 net/bluetooth/hci_event.c:7690 hci_rx_work+0x453/0xaa0 net/bluetooth/hci_core.c:4094 process_one_work kernel/workqueue.c:2630 [inline] process_scheduled_works+0x90f/0x1400 kernel/workqueue.c:2703 worker_thread+0xa5f/0xff0 kernel/workqueue.c:2784 kthread+0x2d3/0x370 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304