BUG: unable to handle page fault for address: 000000025b800a11
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 1231 Comm: krfcommd Tainted: G        W          6.0.7-301.fc37.x86_64 #1
Hardware name: UNOWHY Y13G011S4EI/EM_IG116_200B_ENE_F_V2.0, BIOS V0.5.0_P1S0M2E0F2L6B0T0P2G00A0U0D671_ENE_7 08/16/2021
RIP: 0010:hci_send_acl+0x21/0x2f0 [bluetooth]
Code: cc cc 0f 1f 80 00 00 00 00 0f 1f 44 00 00 41 57 49 89 ff 41 56 41 55 41 54 55 48 89 f5 53 48 83 ec 28 4c 8b 67 18 89 54 24 0c <4d> 8b 8c 24 88 06 00 00 4c 89 4c 24 18 66 90 0f b7 da 8b 4d 70 2b
RSP: 0018:ffffabbc813c3ca0 EFLAGS: 00010286
RAX: ffff98c558b55c00 RBX: 000000000000000f RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff98c558ab4200 RDI: ffff98c509130e80
RBP: ffff98c558ab4200 R08: ffff98c55a90bcc0 R09: 0000000000000100
R10: ffff98c42fb6e680 R11: 0000000000000000 R12: 000000025b800389
R13: ffffabbc813c3de0 R14: ffff98c558ab4200 R15: ffff98c509130e80
FS:  0000000000000000(0000) GS:ffff98c57bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000025b800a11 CR3: 0000000162010000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 l2cap_chan_send+0x11f/0xc40 [bluetooth]
 ? remove_wait_queue+0x20/0x60
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 ? preempt_count_add+0x6a/0xa0
 l2cap_sock_sendmsg+0x9a/0x100 [bluetooth]
 sock_sendmsg+0x5c/0x70
 rfcomm_send_frame+0x54/0x80 [rfcomm]
 rfcomm_run+0x980/0x1900 [rfcomm]
 ? _raw_spin_rq_lock_irqsave+0x20/0x20
 ? rfcomm_check_accept+0xa0/0xa0 [rfcomm]
 kthread+0xe6/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x1f/0x30
 </TASK>
Modules linked in: tls uinput snd_seq_dummy rfcomm snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_soc_sof_es8336 snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_soc_dmic snd_sof_pci_intel_apl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_bus intel_pmc_bxt snd_soc_avs intel_telemetry_pltdrv intel_punit_ipc intel_telemetry_core snd_soc_hda_codec snd_soc_skl x86_pkg_temp_thermal snd_soc_hdac_hda intel_powerclamp snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp coretemp snd_soc_acpi_intel_match snd_soc_acpi sunrpc kvm_intel btusb snd_soc_core kvm iwlmvm mei_hdcp btrtl mei_pxp intel_rapl_msr btbcm
 binfmt_misc mac80211 snd_compress btintel ac97_bus irqbypass snd_pcm_dmaengine vfat rapl snd_hda_intel uvcvideo snd_intel_dspcfg fat snd_intel_sdw_acpi i2c_i801 snd_hda_codec btmtk libarc4 videobuf2_vmalloc intel_cstate bluetooth videobuf2_memops iwlwifi pcspkr snd_hda_core videobuf2_v4l2 i2c_smbus snd_hwdep videobuf2_common snd_seq videodev snd_seq_device cfg80211 joydev snd_pcm mc spi_pxa2xx_platform snd_timer dw_dmac snd rfkill idma64 soundcore mei_me processor_thermal_device_pci_legacy processor_thermal_device mei processor_thermal_rfim processor_thermal_mbox processor_thermal_rapl intel_rapl_common intel_soc_dts_iosf intel_hid soc_button_array int3403_thermal sparse_keymap int340x_thermal_zone int3400_thermal acpi_thermal_rel zram i915 mmc_block drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel drm_display_helper hid_multitouch sdhci_pci cec cqhci polyval_generic sdhci mmc_core serio_raw ghash_clmulni_intel wdat_wdt ttm i2c_hid_acpi i2c_hid video pinctrl_geminilake
 ip6_tables ip_tables fuse
CR2: 000000025b800a11

BUG: kernel NULL pointer dereference, address: 0000000000000043
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 1613 Comm: krfcommd Not tainted 6.0.7-301.fc37.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. TUF Gaming FX505DY_FX505DY/FX505DY, BIOS FX505DY.315 03/09/2020
RIP: 0010:hci_send_acl+0x4a/0x2f0 [bluetooth]
Code: 0c 4d 8b 8c 24 88 06 00 00 4c 89 4c 24 18 66 90 0f b7 da 8b 4d 70 2b 4d 74 c6 45 28 02 89 4d 70 41 89 cd c7 45 74 00 00 00 00 <41> 0f b6 51 43 84 d2 0f 84 0e 02 00 00 80 fa 01 0f 84 81 00 00 00
RSP: 0018:ffffb7be4a057ca0 EFLAGS: 00010202
RAX: ffff916f967af200 RBX: 0000000000000000 RCX: 0000000000000016
RDX: 0000000000000000 RSI: ffff916e41688100 RDI: ffff916f11f4f980
RBP: ffff916e41688100 R08: ffff916e402ddcc0 R09: 0000000000000000
R10: ffff916fb8503c80 R11: 0000000000000006 R12: ffff916f11f4fb10
R13: 0000000000000016 R14: ffff916e41688100 R15: ffff916f11f4f980
FS:  0000000000000000(0000) GS:ffff91715ef80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000043 CR3: 00000001162a6000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 l2cap_chan_send+0x11f/0xc40 [bluetooth]
 ? remove_wait_queue+0x20/0x60
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 ? preempt_count_add+0x6a/0xa0
 l2cap_sock_sendmsg+0x9a/0x100 [bluetooth]
 sock_sendmsg+0x5f/0x70
 rfcomm_send_frame+0x54/0x80 [rfcomm]
 rfcomm_run+0x980/0x1900 [rfcomm]
 ? _raw_spin_rq_lock_irqsave+0x20/0x20
 ? rfcomm_check_accept+0xa0/0xa0 [rfcomm]
 kthread+0xe9/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: tls binfmt_misc uinput rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc vfat fat rtw88_8821ce rtw88_8821c intel_rapl_msr intel_rapl_common rtw88_pci snd_hda_codec_realtek edac_mce_amd snd_hda_codec_generic snd_hda_codec_hdmi rtw88_core snd_hda_intel kvm_amd snd_intel_dspcfg mac80211 snd_intel_sdw_acpi btusb squashfs snd_hda_codec asus_nb_wmi kvm btrtl loop uvcvideo libarc4 snd_hda_core asus_wmi btbcm snd_hwdep videobuf2_vmalloc btintel ledtrig_audio irqbypass snd_seq btmtk videobuf2_memops sparse_keymap videobuf2_v4l2 rapl platform_profile wmi_bmof pcspkr i2c_piix4 k10temp videobuf2_common snd_seq_device bluetooth cfg80211 snd_pcm videodev joydev snd_timer mc snd soundcore rfkill asus_wireless
 acpi_cpufreq zram amdgpu nvme nvme_core drm_ttm_helper ttm iommu_v2 gpu_sched hid_multitouch drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_display_helper ccp ghash_clmulni_intel serio_raw cec sp5100_tco r8169 nvme_common wmi video i2c_hid_acpi i2c_hid ip6_tables ip_tables fuse
CR2: 0000000000000043