Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] SMP NOPTI
CPU: 14 UID: 0 PID: 114749 Comm: kworker/u65:0 Tainted: G           OE       6.19.14-108.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: ASUSTeK COMPUTER INC. ASUS TUF Gaming A15 FA506NFR_FA506NFR/FA506NFR, BIOS FA506NFR.300 03/21/2024
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btrtl_download_firmware+0xb/0x100 [btrtl]
Code: e8 da 11 cc c3 bb f4 ff ff ff e9 3d ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 55 53 <48> 8b 06 48 89 fb 48 85 c0 74 79 0f b7 40 02 66 3d 03 87 0f 84 91
RSP: 0018:ffffd33ecde67d08 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000802a0028
RDX: 00000000802a0029 RSI: 0000000000000000 RDI: ffff8c89ebdc2000
RBP: ffff8c89ebdc2000 R08: 0000000000000000 R09: ffffffffc0d370f8
R10: ffff8c88d87a5840 R11: fffff64e8461e940 R12: 0000000000000000
R13: ffff8c89e0b94005 R14: 0000000000000000 R15: ffff8c89ebdc2500
FS:  0000000000000000(0000) GS:ffff8c90972ed000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000007c842e000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 btrtl_setup_realtek+0x30/0x80 [btrtl]
 btusb_setup_realtek+0x16/0x30 [btusb]
 hci_dev_setup_sync+0x63/0x400 [bluetooth]
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? __cancel_work+0x39/0x110
 hci_dev_init_sync+0x36/0x1d0 [bluetooth]
 hci_dev_open_sync+0xae/0x360 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x4d/0x260 [bluetooth]
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? __schedule+0x2c0/0x5e0
 process_one_work+0x192/0x350
 worker_thread+0x196/0x300
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x130/0x1a0
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: apple_mfi_fastcharge nvidia_uvm(OE) uinput rfcomm snd_seq_dummy snd_hrtimer xt_conntrack xt_MASQUERADE bridge stp llc xt_set ip_set xt_addrtype nft_compat overlay nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr uhid bnep sunrpc binfmt_misc vfat fat nvidia_drm(OE) nvidia_modeset(OE) snd_soc_acp6x_mach snd_soc_dmic snd_acp6x_pdm_dma snd_sof_amd_acp70 snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci rtw89_8852be snd_sof_xtensa_dsp rtw89_8852b nvidia(OE) snd_sof rtw89_8852b_common snd_sof_utils rtw89_pci snd_pci_ps snd_soc_acpi_amd_match snd_amd_sdw_acpi amd_atl intel_rapl_msr soundwire_amd intel_rapl_common rtw89_core soundwire_generic_allocation soundwire_bus snd_hda_codec_alc269 snd_soc_sdca snd_hda_scodec_component snd_hda_codec_realtek_lib
 snd_hda_codec_nvhdmi snd_hda_codec_generic snd_hda_codec_hdmi snd_soc_core edac_mce_amd snd_hda_intel mac80211 snd_hda_codec uvcvideo btusb snd_compress kvm_amd ac97_bus btmtk snd_pcm_dmaengine snd_hda_core uvc videobuf2_vmalloc snd_rpl_pci_acp6x btrtl videobuf2_memops snd_acp_pci videobuf2_v4l2 btbcm snd_intel_dspcfg snd_amd_acpi_mach snd_acp_legacy_common snd_intel_sdw_acpi videobuf2_common btintel snd_hwdep snd_pci_acp6x asus_nb_wmi kvm spd5118 snd_seq videodev asus_armoury bluetooth cfg80211 snd_seq_device firmware_attributes_class asus_wmi snd_pcm snd_pci_acp5x irqbypass sparse_keymap r8169 mc rapl platform_profile snd_rn_pci_acp3x wmi_bmof snd_timer pcspkr snd_acp_config nvidia_wmi_ec_backlight drm_ttm_helper rfkill snd snd_soc_acpi i2c_piix4 realtek ttm snd_pci_acp3x libarc4 i2c_smbus soundcore k10temp amd_pmc joydev loop nfnetlink zram lz4hc_compress lz4_compress nvme nvme_core ucsi_acpi typec_ucsi typec nvme_keyring hid_multitouch nvme_auth thunderbolt ghash_clmulni_intel sp5100_tco hkdf video
 i2c_hid_acpi wmi i2c_hid serio_raw i2c_dev fuse
CR2: 0000000000000000