Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000045
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP PTI
CPU: 3 PID: 1501 Comm: krfcommd Tainted: G      D W  OE      6.0.12-300.fc37.x86_64 #1
Hardware name: LENOVO 80XH/LNVNB161216, BIOS 4WCN47WW 06/30/2020
RIP: 0010:hci_send_acl+0x4a/0x2f0 [bluetooth]
Code: 0c 4d 8b 8c 24 88 06 00 00 4c 89 4c 24 18 66 90 0f b7 da 8b 4d 70 2b 4d 74 c6 45 28 02 89 4d 70 41 89 cd c7 45 74 00 00 00 00 <41> 0f b6 51 43 84 d2 0f 84 0e 02 00 00 80 fa 01 0f 84 81 00 00 00
RSP: 0000:ffffa982c3463c80 EFLAGS: 00010202
RAX: ffff9904c337d200 RBX: 0000000000000000 RCX: 0000000000000008
RDX: 0000000000000000 RSI: ffff9904fba92700 RDI: ffff990625053680
RBP: ffff9904fba92700 R08: ffff990605b4e4c0 R09: 0000000000000002
R10: 0000000000000001 R11: 0000000000000003 R12: ffff990625053690
R13: 0000000000000008 R14: ffff9904fba92700 R15: ffff990625053680
FS:  0000000000000000(0000) GS:ffff99062ff80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000045 CR3: 000000010b4c0001 CR4: 00000000003706e0
Call Trace:
 <TASK>
 l2cap_chan_send+0x11f/0xc40 [bluetooth]
 ? remove_wait_queue+0x20/0x60
 ? _raw_spin_unlock_irqrestore+0x23/0x40
 ? preempt_count_add+0x6a/0xa0
 l2cap_sock_sendmsg+0x9a/0x100 [bluetooth]
 sock_sendmsg+0x5c/0x70
 rfcomm_send_frame+0x54/0x80 [rfcomm]
 rfcomm_send_disc.isra.0+0x70/0xa0 [rfcomm]
 rfcomm_run+0x8ec/0x1900 [rfcomm]
 ? _raw_spin_rq_lock_irqsave+0x20/0x20
 ? rfcomm_check_accept+0xa0/0xa0 [rfcomm]
 kthread+0xe6/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x1f/0x30
 </TASK>
Modules linked in: tls binfmt_misc uinput rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc snd_hda_codec_hdmi snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_hda_codec_realtek snd_soc_acpi intel_rapl_msr snd_soc_core snd_hda_codec_generic intel_rapl_common ledtrig_audio snd_compress ac97_bus snd_pcm_dmaengine intel_tcc_cooling rtl8821ae x86_pkg_temp_thermal intel_powerclamp btcoexist coretemp snd_hda_intel mei_pxp rtl_pci kvm_intel iTCO_wdt uvcvideo intel_pmc_bxt mei_hdcp videobuf2_vmalloc snd_intel_dspcfg iTCO_vendor_support rtlwifi vfat videobuf2_memops joydev snd_intel_sdw_acpi fat kvm snd_hda_codec snd_hda_core btusb mac80211
 btrtl videobuf2_v4l2 snd_hwdep snd_seq videobuf2_common irqbypass btbcm snd_seq_device btintel rapl btmtk libarc4 snd_pcm intel_cstate wmi_bmof bluetooth intel_wmi_thunderbolt cfg80211 intel_uncore snd_timer snd mei_me i2c_i801 pcspkr squashfs loop i2c_smbus soundcore mei intel_pch_thermal intel_xhci_usb_role_switch idma64 elan_i2c ideapad_laptop sparse_keymap platform_profile rfkill acpi_pad v4l2loopback(OE) videodev mc zram i915 drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel drm_display_helper polyval_clmulni polyval_generic serio_raw r8169 cec ghash_clmulni_intel ttm i2c_hid_acpi i2c_hid wmi video pinctrl_sunrisepoint ip6_tables ip_tables fuse
CR2: 0000000000000045