BUG: unable to handle page fault for address: fffffe731e066004
#PF: supervisor write access in kernel mode
#PF: error_code(0x0003) - permissions violation
PGD 272bbf067 P4D 272bbf067 PUD 272bb9067 PMD 272bb8067 PTE 800000026928b161
Oops: 0003 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 5022 Comm: kworker/2:1 Not tainted 6.2.8-200.fc37.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
Workqueue: events nf_tables_trans_destroy_work [nf_tables]
RIP: 0010:do_sync_core+0x24/0x30
Code: 90 90 90 90 90 90 0f 1f 44 00 00 eb 0b 0f 1f 00 0f 01 e8 c3 cc cc cc cc 8c d0 50 54 48 83 04 24 08 9c 8c c8 50 68 a6 ef 03 a3 <48> cf c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90
RSP: 0000:ffffaf774b7dfc48 EFLAGS: 00010092
RAX: 0000000000000010 RBX: 0000000000000246 RCX: 00000000fffffffa
RDX: 0000000000000001 RSI: ffffffffa53185a0 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff9f980006e3b8 R09: ffff9f980006e3b8
R10: ffffaf774b7dfd34 R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000001 R14: ffff9f99692b2f80 R15: ffff9f9969340000
FS:  0000000000000000(0000) GS:ffff9f9969280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffe731e066004 CR3: 0000000127010005 CR4: 00000000000306e0
Call Trace:
 <TASK>
 ? do_sync_core+0x26/0x30
 smp_call_function_many_cond+0x124/0x2f0
 ? __pfx_do_sync_core+0x10/0x10
 ? __pfx_do_sync_core+0x10/0x10
 on_each_cpu_cond_mask+0x3c/0x70
 text_poke_bp_batch+0xb7/0x300
 ? arch_jump_label_transform_queue+0x53/0x80
 text_poke_finish+0x1b/0x30
 arch_jump_label_transform_apply+0x16/0x30
 __static_key_slow_dec_cpuslocked.part.0+0x2f/0x40
 static_key_slow_dec+0x30/0x50
 __nf_unregister_net_hook+0xdd/0x1a0
 nf_unregister_net_hooks+0x64/0x90
 nf_defrag_ipv6_disable+0x4b/0x60 [nf_defrag_ipv6]
 nf_ct_netns_do_put+0xfd/0x120 [nf_conntrack]
 nft_obj_destroy+0x1b/0x50 [nf_tables]
 nf_tables_trans_destroy_work+0x2e3/0x330 [nf_tables]
 process_one_work+0x1c5/0x3c0
 worker_thread+0x4d/0x380
 ? _raw_spin_lock_irqsave+0x23/0x50
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe6/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: tls uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_intel8x0 snd_ac97_codec ac97_bus snd_seq snd_seq_device intel_rapl_msr intel_rapl_common snd_pcm rapl joydev snd_timer snd vboxguest i2c_piix4 soundcore pcspkr loop zram vmwgfx video wmi crc32c_intel e1000 sha512_ssse3 drm_ttm_helper ttm serio_raw ata_generic pata_acpi ip6_tables ip_tables fuse
CR2: fffffe731e066004

WARNING: CPU: 3 PID: 543 at drivers/net/wireless/mediatek/mt7601u/eeprom.h:118 mt7601u_eeprom_init+0x805/0x8e0 [mt7601u]
Modules linked in: mt7601u(+) mac80211 snd_hda_codec_hdmi libarc4 intel_rapl_msr snd_hda_codec_realtek snd_hda_codec_generic intel_rapl_common ledtrig_audio cfg80211 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec x86_pkg_temp_thermal intel_powerclamp coretemp iTCO_wdt rfkill intel_pmc_bxt snd_hda_core kvm_intel snd_hwdep snd_seq iTCO_vendor_support kvm joydev snd_seq_device snd_pcm gpio_ich snd_timer snd mei_hdcp mei_pxp at24 irqbypass soundcore lpc_ich i2c_i801 mei_me mei rapl intel_cstate pcspkr i2c_smbus intel_uncore loop zram hid_logitech_hidpp amdgpu hid_logitech_dj iommu_v2 drm_buddy gpu_sched radeon crct10dif_pclmul crc32_pclmul crc32c_intel drm_ttm_helper polyval_clmulni ttm polyval_generic video ghash_clmulni_intel sha512_ssse3 drm_display_helper r8169 cec wmi uas usb_storage ip6_tables ip_tables fuse
CPU: 3 PID: 543 Comm: (udev-worker) Tainted: G        W          6.2.8-200.fc37.x86_64 #1
Hardware name: Acer Aspire M3970/Aspire M3970, BIOS P02-A0 07/12/2011
RIP: 0010:mt7601u_eeprom_init+0x805/0x8e0 [mt7601u]
Code: ff 48 8b 83 08 06 00 00 c6 00 01 e9 b9 f9 ff ff 48 8b 7b 08 48 c7 c6 00 04 7b c1 e8 25 d0 2e e0 ba 20 00 00 00 e9 0b fa ff ff <0f> 0b 89 d1 83 e7 3f 83 e1 3f 0f 0b e9 e4 fd ff ff 0f 0b 89 f9 41
RSP: 0018:ffffb151404dfb30 EFLAGS: 00010292
RAX: ffff9e438a2bd228 RBX: ffff9e438559e080 RCX: 00000000000000f4
RDX: 00000000f4f4f4f4 RSI: 0000000000000001 RDI: 00000000f4f4f4f4
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000002
R13: ffff9e438410b900 R14: 0000000076010500 R15: ffff9e43892dd800
FS:  00007f419fe2cb40(0000) GS:ffff9e44b7580000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bc7b26f160 CR3: 0000000104e2c004 CR4: 00000000000606e0
Call Trace:
 <TASK>
 mt7601u_init_hardware+0x445/0x4c0 [mt7601u]
 mt7601u_probe+0x220/0x2a0 [mt7601u]
 usb_probe_interface+0xe2/0x2f0
 really_probe+0x1b9/0x410
 __driver_probe_device+0x78/0x170
 driver_probe_device+0x1f/0x90
 __driver_attach+0xce/0x1c0
 ? __pfx___driver_attach+0x10/0x10
 bus_for_each_dev+0x87/0xd0
 bus_add_driver+0x13e/0x230
 driver_register+0x77/0x120
 usb_register_driver+0x88/0x150
 ? __pfx_init_module+0x10/0x10 [mt7601u]
 do_one_initcall+0x59/0x230
 do_init_module+0x4a/0x210
 __do_sys_init_module+0x17f/0x1b0
 do_syscall_64+0x5b/0x80
 ? syscall_exit_to_user_mode_prepare+0x18e/0x1c0
 ? syscall_exit_to_user_mode+0x17/0x40
 ? do_syscall_64+0x67/0x80
 ? __irq_exit_rcu+0x3d/0x140
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f41a011000e
Code: 48 8b 0d 25 5e 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 af 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d f2 5d 0c 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc36af0168 EFLAGS: 00000246 ORIG_RAX: 00000000000000af
RAX: ffffffffffffffda RBX: 000055a5856a4a70 RCX: 00007f41a011000e
RDX: 00007f41a05c1453 RSI: 0000000000084206 RDI: 000055a5864bd340
RBP: 00007f41a05c1453 R08: 000055a58569f910 R09: 00007ffc36aec216
R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000020000
R13: 000055a585693100 R14: 0000000000000000 R15: 000055a5856a4fe0
 </TASK>

WARNING: CPU: 5 PID: 39169 at net/core/dev_addr_lists.c:517 dev_addr_check.cold+0x43/0x74
Modules linked in: exfat uas usb_storage tls uinput rfcomm snd_seq_dummy snd_hrtimer nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc vfat fat edac_mce_amd kvm_amd ccp snd_hda_codec_realtek btusb 88XXau(OE) btrtl snd_hda_codec_generic eeepc_wmi kvm ledtrig_audio btbcm asus_wmi uvcvideo snd_hda_codec_hdmi btintel videobuf2_vmalloc sparse_keymap irqbypass btmtk videobuf2_memops platform_profile videobuf2_v4l2 snd_hda_intel pcspkr video bluetooth wmi_bmof mxm_wmi snd_intel_dspcfg snd_usb_audio fam15h_power k10temp snd_intel_sdw_acpi cfg80211 snd_usbmidi_lib videobuf2_common snd_hda_codec videodev snd_rawmidi joydev mc ecdh_generic snd_hda_core rfkill snd_seq i2c_piix4 snd_hwdep snd_seq_device snd_pcm snd_timer snd soundcore acpi_cpufreq zram amdgpu
 hid_logitech_hidpp crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel r8169 drm_ttm_helper sp5100_tco hid_logitech_dj ttm iommu_v2 gpu_sched wmi ip6_tables ip_tables ipmi_devintf ipmi_msghandler fuse
CPU: 5 PID: 39169 Comm: kworker/5:1 Tainted: G        W  OE     5.17.1-300.fc36.x86_64 #1
Hardware name: To be filled by O.E.M. To be filled by O.E.M./M5A99FX PRO R2.0, BIOS 2501 04/07/2014
Workqueue: usb_hub_wq hub_event
RIP: 0010:dev_addr_check.cold+0x43/0x74
Code: 01 e8 7b bd f9 ff 0f 0b 48 c7 c5 7b bd 67 9c 80 3b 00 75 27 48 c7 c6 86 bd 67 9c 48 89 ea 48 c7 c7 58 d9 70 9c e8 57 bd f9 ff <0f> 0b e9 41 5b db ff 48 8b 2c d5 c0 86 36 9c eb d4 be 25 00 00 00
RSP: 0018:ffffaeba45f6bba8 EFLAGS: 00010296
RAX: 0000000000000041 RBX: ffff933d3592e000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff9c665115 RDI: 00000000ffffffff
RBP: ffffffff9c67be6c R08: 0000000000000000 R09: ffffaeba45f6b9e8
R10: ffffaeba45f6b9e0 R11: ffffffff9cf45588 R12: ffff933d3592e050
R13: ffffffffc15e9bd0 R14: 0000000000000006 R15: ffff933e7bb42030
FS:  0000000000000000(0000) GS:ffff93439ed40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f25e1fe4cc0 CR3: 00000001bc364000 CR4: 00000000000406e0
Call Trace:
 <TASK>
 dev_addr_flush+0xe/0x30
 free_netdev+0x82/0x190
 rtw_os_ndev_free+0x3b/0x50 [88XXau]
 rtw_resume_common+0x23c/0x3d0 [88XXau]
 usb_unbind_interface+0x8f/0x270
 ? kernfs_find_ns+0x35/0xc0
 __device_release_driver+0x24c/0x260
 device_release_driver+0x23/0x30
 bus_remove_device+0xd8/0x140
 device_del+0x18b/0x3f0
 ? kobject_put+0x91/0x1b0
 usb_disable_device+0xb7/0x1d0
 usb_disconnect+0xe3/0x2e0
 hub_event+0xce3/0x1930
 ? queue_delayed_work_on+0x39/0x50
 process_one_work+0x1c7/0x380
 worker_thread+0x4d/0x380
 ? _raw_spin_lock_irqsave+0x25/0x50
 ? process_one_work+0x380/0x380
 kthread+0xe9/0x110
 ? kthread_complete_and_exit+0x20/0x20
 ret_from_fork+0x22/0x30
 </TASK>