--- x/net/bluetooth/hci_event.c
+++ y/net/bluetooth/hci_event.c
@@ -6936,8 +6936,8 @@ static void hci_le_create_big_complete_e
 			continue;
 		}
 
-		hci_connect_cfm(conn, ev->status);
 		rcu_read_unlock();
+		hci_connect_cfm(conn, ev->status);
 		hci_conn_del(conn);
 		rcu_read_lock();
 	}