Backtrace

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] SMP NOPTI
CPU: 0 UID: 0 PID: 133 Comm: kworker/u33:0 Tainted: G           OE       6.19.14-108.fc42.x86_64 #1 PREEMPT(lazy) 
Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: LENOVO 20N9000GBR/20N9000GBR, BIOS R0YET42W (1.25 ) 01/13/2020
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btrtl_download_firmware+0xb/0x100 [btrtl]
Code: e8 da 91 81 d9 bb f4 ff ff ff e9 3d ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 55 53 <48> 8b 06 48 89 fb 48 85 c0 74 79 0f b7 40 02 66 3d 03 87 0f 84 91
RSP: 0018:ffffcf1d404bbd08 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000802a0026
RDX: 00000000802a0027 RSI: 0000000000000000 RDI: ffff8b337c64c000
RBP: ffff8b337c64c000 R08: 0000000000000000 R09: ffffffffc17df0f8
R10: ffff8b33415b9c60 R11: fffffa3344056e40 R12: 0000000000000000
R13: ffff8b334a673a05 R14: 0000000000000000 R15: ffff8b337c64c500
FS:  0000000000000000(0000) GS:ffff8b3703ded000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000030042e004 CR4: 00000000003726f0
Call Trace:
 <TASK>
 btrtl_setup_realtek+0x30/0x80 [btrtl]
 btusb_setup_realtek+0x16/0x30 [btusb]
 hci_dev_setup_sync+0x63/0x400 [bluetooth]
 ? __cancel_work+0x39/0x110
 hci_dev_init_sync+0x36/0x1d0 [bluetooth]
 hci_dev_open_sync+0xae/0x360 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x4d/0x260 [bluetooth]
 ? lock_timer_base+0x7d/0xc0
 process_one_work+0x192/0x350
 worker_thread+0x196/0x300
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xfc/0x240
 ? __pfx_kthread+0x10/0x10
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x130/0x1a0
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) qrtr bnep sunrpc snd_hda_codec_intelhdmi snd_hda_codec_conexant snd_hda_codec_generic snd_hda_intel snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel snd_sof_intel_hda_sdw_bpt snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_intel_hda_mlink snd_sof_intel_hda snd_hda_codec_hdmi soundwire_cadence snd_sof_pci snd_sof_xtensa_dsp snd_sof intel_uncore_frequency intel_uncore_frequency_common snd_sof_utils snd_soc_acpi_intel_match intel_pmc_core_pltdrv intel_pmc_core snd_soc_acpi_intel_sdca_quirks soundwire_generic_allocation pmt_telemetry pmt_discovery snd_soc_sdw_utils pmt_class intel_pmc_ssram_telemetry intel_vsec snd_soc_acpi crc8 intel_tcc_cooling soundwire_bus x86_pkg_temp_thermal uvcvideo snd_soc_sdca intel_powerclamp uvc rtw88_8822be coretemp btusb videobuf2_vmalloc snd_soc_avs videobuf2_memops rtw88_8822b btmtk videobuf2_v4l2 btrtl btbcm videobuf2_common rtw88_pci snd_soc_hda_codec spi_nor iTCO_wdt btintel snd_hda_ext_core
 intel_pmc_bxt kvm_intel rtw88_core videodev ee1004 mtd iTCO_vendor_support mei_pxp mei_hdcp bluetooth intel_rapl_msr mc binfmt_misc snd_hda_codec kvm snd_hda_core mac80211 vfat fat snd_intel_dspcfg snd_intel_sdw_acpi snd_hwdep snd_soc_core irqbypass rapl snd_compress ac97_bus intel_cstate processor_thermal_device_pci_legacy intel_uncore processor_thermal_device snd_pcm_dmaengine pcspkr cfg80211 think_lmi processor_thermal_wt_hint platform_temperature_control snd_ctl_led processor_thermal_soc_slider firmware_attributes_class snd_seq r8169 wmi_bmof intel_wmi_thunderbolt processor_thermal_rfim snd_seq_device i2c_i801 processor_thermal_rapl spi_intel_pci snd_pcm realtek thinkpad_acpi intel_rapl_common spi_intel libarc4 mei_me i2c_smbus processor_thermal_wt_req processor_thermal_power_floor sparse_keymap snd_timer mei intel_pch_thermal platform_profile processor_thermal_mbox rfkill intel_soc_dts_iosf snd soundcore int3403_thermal int340x_thermal_zone int3400_thermal acpi_thermal_rel acpi_pad joydev loop
 nfnetlink zram lz4hc_compress lz4_compress i915 rtsx_pci_sdmmc nvme i2c_algo_bit ucsi_acpi mmc_core typec_ucsi drm_buddy nvme_core typec ttm nvme_keyring drm_display_helper nvme_auth ghash_clmulni_intel hkdf rtsx_pci thunderbolt cec intel_oc_wdt video pinctrl_cannonlake wmi serio_raw ntsync i2c_dev fuse uhid
CR2: 0000000000000000