Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000053
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 28293 Comm: kworker/0:1 Not tainted 6.8.4-200.fc39.x86_64 #1
Hardware name: LENOVO 21A0000TGE/21A0000TGE, BIOS R1MET55W (1.25 ) 10/30/2023
Workqueue: events l2cap_info_timeout [bluetooth]
RIP: 0010:hci_send_acl+0x5c/0x2e0 [bluetooth]
Code: 1f 44 00 00 48 8b 44 24 18 48 89 44 24 08 48 8b 44 24 08 44 8b 6d 70 c6 45 28 02 44 2b 6d 74 c7 45 74 00 00 00 00 44 89 6d 70 <0f> b6 50 53 84 d2 0f 84 f9 01 00 00 80 fa 01 0f 85 6c 01 00 00 41
RSP: 0018:ffffbac98a86fd00 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff987990fe6800 RCX: ffff987985bc8000
RDX: 0000000000000000 RSI: ffff987981622a00 RDI: ffff987988091c40
RBP: ffff987981622a00 R08: ffffbac98a86fd64 R09: ffff9879e2f40bc0
R10: 0000000000000007 R11: 0000000000000000 R12: ffffffff9743c880
R13: 000000000000000c R14: 0000000000000000 R15: ffff987988091c40
FS:  0000000000000000(0000) GS:ffff987f91e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000053 CR3: 0000000527422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? kmem_cache_alloc_node+0x63/0x330
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? hci_send_acl+0x5c/0x2e0 [bluetooth]
 ? l2cap_send_cmd+0x247/0x250 [bluetooth]
 l2cap_send_conn_req+0x99/0xc0 [bluetooth]
 l2cap_conn_start+0x262/0x350 [bluetooth]
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? __mod_timer+0x115/0x360
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? queue_delayed_work_on+0x3d/0x50
 ? srso_alias_return_thunk+0x5/0xfbef5
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: ipmi_devintf ipmi_msghandler uinput rfcomm snd_seq_dummy snd_hrtimer wireguard curve25519_x86_64 libcurve25519_generic ip6_udp_tunnel udp_tunnel nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib ip_set qrtr sunrpc bnep snd_acp_legacy_mach snd_acp_mach snd_soc_nau8821 snd_acp3x_rn snd_soc_dmic snd_acp3x_pdm_dma snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_ctl_led snd_hda_codec_realtek mt7921e snd_sof_utils mt7921_common snd_hda_codec_generic snd_hda_codec_hdmi mt792x_lib intel_rapl_msr snd_soc_core intel_rapl_common mt76_connac_lib edac_mce_amd snd_hda_intel mt76 snd_compress snd_intel_dspcfg ac97_bus kvm_amd snd_pcm_dmaengine snd_intel_sdw_acpi binfmt_misc mac80211 snd_hda_codec snd_pci_ps uvcvideo kvm snd_rpl_pci_acp6x snd_acp_pci btusb snd_hda_core uvc videobuf2_vmalloc snd_acp_legacy_common videobuf2_memops btrtl videobuf2_v4l2 snd_pci_acp6x btintel
 snd_hwdep videobuf2_common vfat btbcm btmtk libarc4 snd_seq fat irqbypass bluetooth snd_seq_device videodev snd_pci_acp5x cfg80211 snd_pcm mc thinkpad_acpi rapl ledtrig_audio pcspkr snd_rn_pci_acp3x think_lmi platform_profile snd_timer snd_acp_config firmware_attributes_class wmi_bmof snd_soc_acpi snd snd_pci_acp3x k10temp rfkill i2c_piix4 soundcore i2c_scmi joydev nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_masq nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables nfnetlink loop zram amdgpu amdxcp i2c_algo_bit crct10dif_pclmul drm_ttm_helper crc32_pclmul crc32c_intel polyval_clmulni ttm polyval_generic drm_exec gpu_sched drm_suballoc_helper rtsx_pci_sdmmc ghash_clmulni_intel mmc_core drm_buddy sha512_ssse3 nvme drm_display_helper sha256_ssse3 ucsi_acpi sha1_ssse3 typec_ucsi nvme_core ccp r8169 rtsx_pci sp5100_tco cec typec nvme_auth realtek video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000053