Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000a84
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 18602 Comm: kworker/0:0 Not tainted 6.5.12-100.fc37.x86_64 #1
Hardware name: LENOVO 82HU/LNVNB161216, BIOS GJCN23WW 06/08/2021
Workqueue: events l2cap_info_timeout [bluetooth]
RIP: 0010:hci_send_acl+0x24/0x2e0 [bluetooth]
Code: 90 90 90 90 90 90 66 0f 1f 00 0f 1f 44 00 00 41 57 49 89 ff 41 56 41 89 d6 41 55 41 54 55 48 89 f5 53 48 83 ec 28 4c 8b 67 18 <49> 8b 84 24 88 06 00 00 48 89 44 24 18 0f 1f 44 00 00 48 89 44 24
RSP: 0018:ffffa7fc82b43d10 EFLAGS: 00010282
RAX: ffff9440f56f4000 RBX: ffff944377985800 RCX: ffff9440c0bc0000
RDX: 0000000000000000 RSI: ffff9440d792c800 RDI: ffff9440c83c7980
RBP: ffff9440d792c800 R08: 0000000000400001 R09: 000000000003c8b0
R10: 0000000000000007 R11: 0000000000000000 R12: 00000000000003fc
R13: ffff94439ba4d688 R14: 0000000000000000 R15: ffff9440c83c7980
FS:  0000000000000000(0000) GS:ffff9443bf600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000a84 CR3: 00000002f5222000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x77/0x170
 ? asm_exc_page_fault+0x26/0x30
 ? hci_send_acl+0x24/0x2e0 [bluetooth]
 ? srso_return_thunk+0x5/0x10
 ? l2cap_send_cmd+0x236/0x240 [bluetooth]
 l2cap_send_conn_req+0x99/0xc0 [bluetooth]
 l2cap_conn_start+0x267/0x340 [bluetooth]
 ? srso_return_thunk+0x5/0x10
 ? __mod_timer+0x2a6/0x3b0
 ? srso_return_thunk+0x5/0x10
 ? queue_delayed_work_on+0x3d/0x50
 ? srso_return_thunk+0x5/0x10
 process_one_work+0x1e2/0x3e0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: tls uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc binfmt_misc vfat fat snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_hda_codec_realtek snd_sof_pci mt7921e snd_sof_xtensa_dsp mt7921_common snd_hda_codec_generic ledtrig_audio snd_sof mt76_connac_lib snd_hda_codec_hdmi mt76 snd_hda_intel snd_sof_utils snd_intel_dspcfg snd_intel_sdw_acpi mac80211 snd_soc_core snd_hda_codec intel_rapl_msr intel_rapl_common uvcvideo squashfs snd_compress edac_mce_amd snd_hda_core ac97_bus uvc snd_pcm_dmaengine snd_hwdep videobuf2_vmalloc snd_pci_ps btusb videobuf2_memops snd_seq btrtl kvm_amd btbcm snd_rpl_pci_acp6x videobuf2_v4l2 snd_seq_device btintel snd_pci_acp6x btmtk snd_pci_acp5x libarc4 videobuf2_common snd_pcm kvm bluetooth
 videodev snd_rn_pci_acp3x irqbypass ideapad_laptop snd_timer snd_acp_config lenovo_ymc hid_sensor_accel_3d cfg80211 snd_soc_acpi mc rapl joydev sparse_keymap wmi_bmof pcspkr hid_sensor_trigger snd_pci_acp3x snd platform_profile hid_sensor_iio_common soundcore industrialio_triggered_buffer k10temp i2c_piix4 kfifo_buf industrialio rfkill soc_button_array loop zram amdgpu i2c_algo_bit drm_ttm_helper ttm drm_suballoc_helper amdxcp iommu_v2 crct10dif_pclmul crc32_pclmul drm_buddy crc32c_intel nvme gpu_sched polyval_clmulni sdhci_pci polyval_generic nvme_core drm_display_helper cqhci wacom sdhci video ghash_clmulni_intel ucsi_acpi hid_multitouch hid_sensor_hub sha512_ssse3 typec_ucsi serio_raw mmc_core ccp cec amd_sfh typec sp5100_tco nvme_common i2c_hid_acpi wmi i2c_hid scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000a84