Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 6441 Comm: kworker/u25:0 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: HP HP ProDesk 600 G5 MT/8596, BIOS R02 Ver. 02.03.02 11/05/2019
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:msft_do_open+0x99/0x260 [bluetooth]
Code: 89 df 48 c7 45 00 00 00 00 00 0f b7 b3 08 17 00 00 c6 44 24 07 00 e8 36 ab fe ff 49 89 c4 48 3d 00 f0 ff ff 0f 87 5c 01 00 00 <83> 78 70 0a 0f 86 d7 00 00 00 4c 8b a8 d0 00 00 00 41 80 7d 01 00
RSP: 0018:ffffbb1c0c75fda0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffff95adebc7a000 RCX: ffff95adebc7ab08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff95adebc7ab00
RBP: ffff95ad81150960 R08: ffff95adebc7ab08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000000
R13: ffffffffc0edd340 R14: ffff95ad80b1dc05 R15: ffff95adebc7a6d0
FS:  0000000000000000(0000) GS:ffff95ae9f4c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000001cd422003 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? msft_do_open+0x99/0x260 [bluetooth]
 hci_dev_open_sync+0x68c/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match rtw88_8821ce snd_soc_acpi rtw88_8821c rtw88_pci snd_hda_codec_hdmi snd_soc_core snd_hda_codec_conexant rtw88_core snd_hda_codec_generic snd_compress intel_rapl_msr ac97_bus intel_rapl_common intel_tcc_cooling snd_pcm_dmaengine ledtrig_audio x86_pkg_temp_thermal mac80211 snd_hda_intel intel_powerclamp coretemp snd_intel_dspcfg binfmt_misc btusb snd_intel_sdw_acpi kvm_intel joydev
 btrtl libarc4 snd_hda_codec btintel kvm snd_hda_core btbcm irqbypass vfat hp_wmi btmtk fat cfg80211 snd_hwdep snd_seq bluetooth snd_seq_device sparse_keymap rapl snd_pcm platform_profile snd_timer intel_cstate rfkill intel_uncore mei_wdt iTCO_wdt mei_hdcp mei_pxp spi_nor intel_pmc_bxt snd mtd iTCO_vendor_support mei_me ee1004 soundcore spi_intel_pci intel_pch_thermal wmi_bmof spi_intel mei pktcdvd i2c_i801 i2c_smbus pcspkr acpi_pad loop zram i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_buddy ttm ghash_clmulni_intel drm_display_helper sha512_ssse3 ucsi_acpi typec_ucsi e1000e sha256_ssse3 sha1_ssse3 serio_raw typec cec video wmi ip6_tables ip_tables fuse
CR2: 0000000000000070