Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 67 Comm: kworker/3:1 Not tainted 5.16.8-200.fc35.x86_64 #1
Hardware name: HP HP ProBook 440 G6/8537, BIOS R71 Ver. 01.08.03 07/17/2019
Workqueue: events hci_cmd_timeout [bluetooth]
RIP: 0010:__queue_work+0xe3/0x450
Code: 8b 36 40 f6 c6 04 75 cf 48 c1 ee 05 81 fe ff ff ff 7f 0f 84 95 00 00 00 48 c7 c7 30 dc e5 85 48 63 f6 e8 d0 ed 5d 00 48 89 c7 <49> 8b 07 48 85 ff 0f 84 d4 02 00 00 48 39 f8 74 75 48 89 7c 24 08
RSP: 0018:ffff9ea1402efe38 EFLAGS: 00010046
RAX: ffff8a1903b46c00 RBX: 000000000000002f RCX: 0000000000000000
RDX: ffff8a1900402da0 RSI: ffff8a1900402e50 RDI: ffff8a1903b46c00
RBP: ffff8a1902275800 R08: ffff8a1903b46c00 R09: ffffffff85e5dc30
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003
R13: 000000000002e548 R14: ffff8a190092e8b8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8a1a1f4c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000013ee10003 CR4: 00000000003706e0
Call Trace:
 <TASK>
 queue_work_on+0x38/0x40
 process_one_work+0x1e8/0x3c0
 worker_thread+0x50/0x3b0
 ? rescuer_thread+0x350/0x350
 kthread+0x16b/0x190
 ? set_kthread_struct+0x40/0x40
 ret_from_fork+0x22/0x30
 </TASK>
Modules linked in: snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE nf_conntrack_netlink nft_counter xt_addrtype nft_compat br_netfilter bridge stp llc overlay nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc vfat fat squashfs loop snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_hda_codec_hdmi soundwire_bus snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_hda_codec_realtek snd_soc_core snd_hda_codec_generic ledtrig_audio snd_compress ac97_bus intel_tcc_cooling x86_pkg_temp_thermal snd_pcm_dmaengine intel_powerclamp coretemp snd_hda_intel iwlmvm
 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec kvm_intel iTCO_wdt intel_pmc_bxt mac80211 iTCO_vendor_support mei_pxp mei_hdcp snd_hda_core kvm snd_hwdep libarc4 snd_seq intel_rapl_msr irqbypass snd_seq_device rapl btusb snd_pcm btrtl intel_cstate iwlwifi snd_timer intel_uncore btbcm pcspkr hp_wmi sparse_keymap platform_profile uvcvideo wmi_bmof snd btintel videobuf2_vmalloc i2c_i801 videobuf2_memops i2c_smbus soundcore videobuf2_v4l2 bluetooth cfg80211 videobuf2_common mei_me mei idma64 videodev processor_thermal_device_pci_legacy ecdh_generic processor_thermal_device joydev mc rfkill processor_thermal_rfim processor_thermal_mbox processor_thermal_rapl intel_rapl_common intel_soc_dts_iosf intel_pch_thermal int3403_thermal int340x_thermal_zone int3400_thermal hp_accel acpi_thermal_rel lis3lv02d wireless_hotkey acpi_pad zram ip_tables i915 hid_multitouch i2c_algo_bit ttm drm_kms_helper cec sdhci_pci cqhci crct10dif_pclmul crc32_pclmul crc32c_intel sdhci nvme drm
 ghash_clmulni_intel nvme_core r8169 mmc_core serio_raw ucsi_acpi typec_ucsi i2c_hid_acpi typec wmi i2c_hid video pinctrl_cannonlake ipmi_devintf ipmi_msghandler fuse
CR2: 0000000000000000