BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 PID: 15436 Comm: kworker/u33:0 Tainted: P        W  OE      6.7.11-200.fc39.x86_64 #1
Hardware name: Dell Inc. Dell G15 5515/061C1G, BIOS 1.6.0 03/14/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 31 e8 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb86ed316bcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff92776586eb08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff92776586eb00
RBP: ffffb86ed316bd00 R08: ffff92776586eb08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff92776586e000
R13: ffff92768eeadc00 R14: ffff927684256605 R15: ffff92776586e6d0
FS:  0000000000000000(0000) GS:ffff92797e880000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000032e61a000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_alias_return_thunk+0x5/0xfbef5
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 ? srso_alias_return_thunk+0x5/0xfbef5
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: tun rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nvidia_drm(POE) nft_ct nvidia_modeset(POE) nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nvidia_uvm(POE) ip_set nf_tables nfnetlink nvidia(POE) qrtr bnep sunrpc binfmt_misc snd_acp_legacy_mach snd_acp_mach snd_soc_nau8821 iwlmvm snd_soc_dmic snd_acp3x_pdm_dma snd_acp3x_rn snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_ctl_led mac80211 snd_hda_codec_realtek snd_sof_utils snd_hda_codec_generic intel_rapl_msr snd_soc_core snd_hda_codec_hdmi intel_rapl_common vfat fat libarc4 edac_mce_amd uvcvideo snd_hda_intel snd_compress kvm_amd uvc ac97_bus snd_intel_dspcfg dell_laptop videobuf2_vmalloc snd_pcm_dmaengine snd_intel_sdw_acpi videobuf2_memops snd_pci_ps videobuf2_v4l2 snd_hda_codec dell_wmi kvm
 videobuf2_common snd_rpl_pci_acp6x snd_hda_core snd_acp_pci snd_acp_legacy_common snd_hwdep btusb videodev iwlwifi snd_seq irqbypass snd_pci_acp6x btrtl btintel snd_seq_device btbcm dell_smbios btmtk snd_pci_acp5x rapl snd_pcm mc dcdbas ledtrig_audio pcspkr bluetooth snd_rn_pci_acp3x alienware_wmi sparse_keymap nvidia_wmi_ec_backlight dell_wmi_descriptor snd_timer wmi_bmof cfg80211 snd_acp_config snd_soc_acpi snd k10temp snd_pci_acp3x i2c_piix4 soundcore dell_rbtn cm32181 industrialio rfkill amd_pmc joydev loop zram amdgpu video amdxcp i2c_algo_bit drm_ttm_helper crct10dif_pclmul ttm crc32_pclmul crc32c_intel polyval_clmulni drm_exec polyval_generic gpu_sched nvme drm_suballoc_helper drm_buddy hid_multitouch ghash_clmulni_intel nvme_core drm_display_helper sha512_ssse3 r8169 ucsi_acpi sha256_ssse3 typec_ucsi sha1_ssse3 sp5100_tco ccp nvme_auth cec typec realtek i2c_hid_acpi wmi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 PID: 96179 Comm: kworker/u33:1 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 20NF0012US/20NF0012US, BIOS R11ET44W (1.24 ) 01/26/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 51 ea ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb80d4be13cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff984f26406b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff984f26406b00
RBP: ffffb80d4be13d00 R08: ffff984f26406b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff984f26406000
R13: ffff984f05527800 R14: ffff984f0f7b6405 R15: ffff984f264066d0
FS:  0000000000000000(0000) GS:ffff9855a0b40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000103aca000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 ? srso_return_thunk+0x5/0x5f
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput uhid xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp bridge stp llc rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter iptable_filter bnep qrtr uvcvideo btusb uvc btrtl videobuf2_vmalloc btintel videobuf2_memops videobuf2_v4l2 btbcm videobuf2_common btmtk videodev bluetooth mc sunrpc binfmt_misc snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp iwlmvm snd_sof snd_ctl_led snd_sof_utils snd_hda_codec_conexant intel_rapl_msr snd_soc_core snd_hda_codec_generic
 snd_hda_codec_hdmi intel_rapl_common mac80211 edac_mce_amd snd_compress snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi kvm_amd ac97_bus vfat snd_pcm_dmaengine fat libarc4 snd_hda_codec snd_pci_ps snd_rpl_pci_acp6x kvm snd_acp_pci snd_acp_legacy_common iwlwifi snd_hda_core snd_pci_acp6x irqbypass think_lmi snd_hwdep rapl firmware_attributes_class snd_seq pcspkr snd_pci_acp5x cfg80211 snd_seq_device snd_rn_pci_acp3x thinkpad_acpi snd_acp_config snd_pcm ledtrig_audio wmi_bmof k10temp acpi_cpufreq snd_soc_acpi platform_profile i2c_piix4 snd_timer snd_pci_acp3x snd rfkill soundcore i2c_scmi joydev loop zram amdgpu amdxcp crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_ttm_helper ttm drm_exec gpu_sched rtsx_pci_sdmmc ghash_clmulni_intel mmc_core drm_suballoc_helper nvme drm_buddy sha512_ssse3 sha256_ssse3 drm_display_helper sha1_ssse3 cec ucsi_acpi ccp nvme_core sp5100_tco video r8169 typec_ucsi realtek rtsx_pci typec nvme_auth wmi serio_raw target_core_mod
 scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 PID: 199592 Comm: kworker/u33:0 Tainted: G        W          6.7.11-200.fc39.x86_64 #1
Hardware name: Dell Inc. Inspiron 15 3515/04D48M, BIOS 1.16.0 11/13/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:msft_do_open+0x99/0x260 [bluetooth]
Code: 89 df 48 c7 45 00 00 00 00 00 0f b7 b3 08 17 00 00 c6 44 24 07 00 e8 36 ab fe ff 49 89 c4 48 3d 00 f0 ff ff 0f 87 5c 01 00 00 <83> 78 70 0a 0f 86 d7 00 00 00 4c 8b a8 d0 00 00 00 41 80 7d 01 00
RSP: 0018:ffff999709f73da0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffff8debb0394000 RCX: ffff8debb0394b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff8debb0394b00
RBP: ffff8dec1b9cc1e0 R08: ffff8debb0394b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000000
R13: ffffffffc174b340 R14: ffff8debe4af2a05 R15: ffff8debb03946d0
FS:  0000000000000000(0000) GS:ffff8dec48b40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000012025a000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? msft_do_open+0x99/0x260 [bluetooth]
 hci_dev_open_sync+0x68c/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep dell_laptop sunrpc binfmt_misc snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_ctl_led snd_soc_core rtw88_8821ce snd_hda_codec_realtek snd_compress rtw88_8821c ac97_bus snd_pcm_dmaengine intel_rapl_msr snd_hda_codec_generic snd_hda_codec_hdmi rtw88_pci snd_pci_ps intel_rapl_common rtw88_core edac_mce_amd snd_hda_intel snd_rpl_pci_acp6x btusb dell_wmi btrtl snd_intel_dspcfg snd_acp_pci uvcvideo snd_intel_sdw_acpi snd_acp_legacy_common btintel kvm_amd snd_hda_codec mac80211 uvc snd_pci_acp6x btbcm snd_hda_core dell_smm_hwmon videobuf2_vmalloc snd_pci_acp5x kvm dell_smbios videobuf2_memops
 libarc4 snd_hwdep vfat btmtk dcdbas irqbypass snd_seq fat snd_rn_pci_acp3x videobuf2_v4l2 snd_seq_device ledtrig_audio snd_acp_config bluetooth videobuf2_common rapl sparse_keymap videodev snd_soc_acpi snd_pcm dell_wmi_descriptor pcspkr wmi_bmof acpi_cpufreq dell_wmi_ddv mc cfg80211 snd_timer k10temp snd i2c_piix4 snd_pci_acp3x soundcore dell_rbtn rfkill joydev squashfs loop zram amdgpu video amdxcp i2c_algo_bit crct10dif_pclmul drm_ttm_helper crc32_pclmul crc32c_intel polyval_clmulni ttm polyval_generic drm_exec gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel drm_display_helper sha512_ssse3 nvme sha256_ssse3 hid_multitouch sha1_ssse3 nvme_core sp5100_tco cec ccp nvme_auth i2c_hid_acpi wmi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 PID: 1014 Comm: kworker/u35:2 Tainted: P           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ROG Strix G513IM_G513IM/G513IM, BIOS G513IM.319 09/08/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:msft_do_open+0x99/0x260 [bluetooth]
Code: 89 df 48 c7 45 00 00 00 00 00 0f b7 b3 08 17 00 00 c6 44 24 07 00 e8 36 ab fe ff 49 89 c4 48 3d 00 f0 ff ff 0f 87 5c 01 00 00 <83> 78 70 0a 0f 86 d7 00 00 00 4c 8b a8 d0 00 00 00 41 80 7d 01 00
RSP: 0018:ffffb16300e4fda0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffff8d8d09894000 RCX: ffff8d8d09894b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff8d8d09894b00
RBP: ffff8d8a53808360 R08: ffff8d8d09894b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000000
R13: ffffffffc1b6c340 R14: ffff8d8a45def405 R15: ffff8d8d098946d0
FS:  0000000000000000(0000) GS:ffff8d92c7880000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000001c6c56000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? msft_do_open+0x99/0x260 [bluetooth]
 hci_dev_open_sync+0x68c/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uhid uas usb_storage vhost_net vhost vhost_iotlb tap tun xt_CHECKSUM ipt_REJECT nf_nat_tftp nf_conntrack_tftp uinput veth xt_nat xt_conntrack rfcomm snd_seq_dummy snd_hrtimer xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc overlay vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) bnep sunrpc nvidia(POE) binfmt_misc r8153_ecm cdc_ether usbnet vfat fat snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci mt7921e snd_sof_xtensa_dsp snd_hda_codec_realtek mt7921_common snd_sof snd_hda_codec_generic mt792x_lib snd_hda_codec_hdmi mt76_connac_lib snd_sof_utils mt76 snd_hda_intel snd_soc_core snd_intel_dspcfg
 snd_intel_sdw_acpi snd_compress intel_rapl_msr ac97_bus snd_hda_codec snd_pcm_dmaengine mac80211 intel_rapl_common snd_pci_ps snd_rpl_pci_acp6x edac_mce_amd snd_acp_pci snd_hda_core snd_acp_legacy_common btusb snd_hwdep snd_pci_acp6x btrtl snd_seq btintel snd_seq_device kvm_amd btbcm btmtk snd_pcm libarc4 r8152 snd_pci_acp5x bluetooth kvm snd_timer snd_rn_pci_acp3x irqbypass mii snd_acp_config snd cfg80211 snd_soc_acpi asus_nb_wmi rapl wmi_bmof pcspkr i2c_piix4 k10temp soundcore snd_pci_acp3x asus_wireless amd_pmc joydev loop zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec gpu_sched drm_suballoc_helper drm_buddy drm_display_helper crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ccp cec nvme ghash_clmulni_intel nvme_core r8169 sha512_ssse3 hid_multitouch sha256_ssse3 ucsi_acpi sha1_ssse3 typec_ucsi serio_raw sp5100_tco typec realtek nvme_auth i2c_hid_acpi i2c_hid hid_asus asus_wmi ledtrig_audio sparse_keymap platform_profile rfkill video wmi ip6_tables ip_tables fuse
 videodev mc
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 183 Comm: kworker/u67:0 Tainted: G           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: ASUS System Product Name/ROG STRIX B550-I GAMING, BIOS 1004 08/13/2020
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 31 c8 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb468c0ad7cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffa05cc9f62b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffffa05cc9f62b00
RBP: ffffb468c0ad7d00 R08: ffffa05cc9f62b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffffa05cc9f62000
R13: ffffa05cd0423200 R14: ffffa05cdaa97005 R15: ffffa05cc9f626d0
FS:  0000000000000000(0000) GS:ffffa063ceb80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000135d16000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? _raw_spin_unlock_irq+0x15/0x30
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: mac80211(+) snd_hda_codec_hdmi intel_rapl_msr intel_rapl_common snd_hda_intel edac_mce_amd btusb snd_intel_dspcfg snd_intel_sdw_acpi libarc4 btrtl kvm_amd snd_hda_codec btintel vfat fat btbcm snd_hda_core kvm btmtk asus_ec_sensors snd_hwdep iwlwifi snd_seq irqbypass snd_seq_device snd_pcm snd_timer bluetooth rapl eeepc_wmi joydev snd cfg80211 asus_wmi ledtrig_audio sparse_keymap soundcore platform_profile pcspkr acpi_cpufreq wmi_bmof i2c_piix4 rfkill k10temp gpio_amdpt gpio_generic v4l2loopback(OE) videodev mc loop zram dm_crypt amdgpu hid_logitech_hidpp video crct10dif_pclmul crc32_pclmul amdxcp i2c_algo_bit crc32c_intel drm_ttm_helper polyval_clmulni ttm polyval_generic drm_exec gpu_sched drm_suballoc_helper ghash_clmulni_intel sha512_ssse3 uas drm_buddy nvme sha256_ssse3 drm_display_helper sha1_ssse3 igc usb_storage sp5100_tco nvme_core ccp cec nvme_auth wmi hid_logitech_dj hid_xpadneo(OE) ff_memless scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse i2c_dev
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 00000000000000d0
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 103 Comm: kworker/u17:0 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 20CLS0J900/20CLS0J900, BIOS N10ET28W (1.05 ) 01/23/2015
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_setup_combined+0xb5/0x790 [btintel]
Code: d0 07 00 00 48 8d 4c 24 63 ba 01 00 00 00 48 89 df be 05 fc 00 00 e8 aa 9b ea ff 49 89 c5 48 3d 00 f0 ff ff 0f 87 a2 02 00 00 <48> 8b 80 d0 00 00 00 0f b6 10 84 d2 0f 85 06 01 00 00 f0 80 8b 51
RSP: 0018:ffffb406c03e7d40 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffff89f7cd884000 RCX: ffff89f7cd884b08
RDX: 0000000000000000 RSI: 0000000000000216 RDI: ffff89f7cd884b00
RBP: ffffb406c03e7d74 R08: ffff89f7cd884b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000110 R12: 0000000000000000
R13: 0000000000000000 R14: ffff89f7c8e97205 R15: ffff89f7cd8846d0
FS:  0000000000000000(0000) GS:ffff89f8e6080000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000000000d0 CR3: 000000010cd88004 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_setup_combined+0xb5/0x790 [btintel]
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: mei_hdcp(+) mac80211(+) intel_pmc_bxt snd_intel_dspcfg iTCO_vendor_support snd_intel_sdw_acpi intel_rapl_common snd_hda_codec btusb uvc x86_pkg_temp_thermal videobuf2_vmalloc libarc4 intel_powerclamp videobuf2_memops coretemp videobuf2_v4l2 btrtl rapl snd_hda_core videobuf2_common iwlwifi btintel snd_hwdep think_lmi(+) intel_cstate btbcm btmtk snd_seq intel_uncore videodev snd_seq_device mc pcspkr binfmt_misc bluetooth firmware_attributes_class wmi_bmof i2c_i801 cfg80211 thinkpad_acpi mei_me snd_pcm intel_pch_thermal i2c_smbus ledtrig_audio mei platform_profile lpc_ich snd_timer rfkill snd soundcore joydev loop zram i915 crct10dif_pclmul rtsx_pci_sdmmc crc32_pclmul mmc_core crc32c_intel polyval_clmulni polyval_generic i2c_algo_bit ghash_clmulni_intel drm_buddy sha512_ssse3 ttm sha256_ssse3 e1000e drm_display_helper sha1_ssse3 rtsx_pci cec video wmi serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 00000000000000d0

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 PID: 212 Comm: kworker/u65:0 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. X570 AORUS ULTRA/X570 AORUS ULTRA, BIOS F37b 03/23/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 21 18 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffad5600adfcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000055555554 RDI: ffff91697ecb4180
RBP: ffffad5600adfd00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff915a880b6000
R13: ffff915a8dadc900 R14: ffff915a8d93f405 R15: ffff915a880b66d0
FS:  0000000000000000(0000) GS:ffff91697ec80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000010f5a6000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_alias_return_thunk+0x5/0xfbef5
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? srso_alias_return_thunk+0x5/0xfbef5
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: kvm_amd(+) snd_usbmidi_lib snd_hda_core snd_ump iwlwifi(+) snd_rawmidi snd_hwdep mc kvm btusb irqbypass btrtl snd_seq btintel btbcm btmtk rapl snd_seq_device cfg80211 bluetooth snd_pcm gigabyte_wmi pcspkr snd_timer wmi_bmof acpi_cpufreq snd mxm_wmi i2c_piix4 k10temp rfkill soundcore usblp joydev loop zram amdgpu video amdxcp drm_ttm_helper ttm drm_exec gpu_sched crct10dif_pclmul crc32_pclmul drm_suballoc_helper crc32c_intel drm_buddy polyval_clmulni polyval_generic igb drm_display_helper ghash_clmulni_intel nvme sha512_ssse3 sha256_ssse3 dca nvme_core ccp sha1_ssse3 cec i2c_algo_bit sp5100_tco nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 29467 Comm: kworker/u17:2 Tainted: G        W  OE      6.7.11-200.fc39.x86_64 #1
Hardware name: Dell Inc. Latitude 5400/0PD9KD, BIOS 1.25.0 07/05/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 61 e9 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb74350fbfcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff914507df8b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff914507df8b00
RBP: ffffb74350fbfd00 R08: ffff914507df8b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff914507df8000
R13: ffff91449d97c000 R14: ffff9144721e6205 R15: ffff914507df86d0
FS:  0000000000000000(0000) GS:ffff91491e400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000042c422005 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: dm_crypt xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nft_compat nf_nat_tftp nf_conntrack_tftp bridge stp llc pl2303 tun uas usb_storage uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 vboxnetadp(OE) vboxnetflt(OE) ip_set nf_tables nfnetlink vboxdrv(OE) qrtr bnep sunrpc binfmt_misc snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof vfat fat snd_sof_utils soundwire_generic_allocation soundwire_bus iwlmvm snd_hda_codec_hdmi snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core intel_tcc_cooling x86_pkg_temp_thermal snd_soc_sst_ipc intel_powerclamp snd_soc_sst_dsp mac80211 snd_ctl_led snd_soc_acpi_intel_match coretemp snd_soc_acpi dell_rbtn kvm_intel snd_soc_core spi_nor
 iTCO_wdt intel_pmc_bxt dell_laptop snd_compress mei_hdcp mei_pxp ee1004 mtd iTCO_vendor_support intel_rapl_msr snd_hda_codec_realtek libarc4 kvm snd_hda_codec_generic uvcvideo dell_smm_hwmon uvc ac97_bus snd_pcm_dmaengine videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common snd_hda_intel irqbypass snd_intel_dspcfg snd_intel_sdw_acpi btusb videodev iwlwifi snd_hda_codec dell_wmi rapl btrtl btintel snd_hda_core intel_cstate btbcm dell_smbios btmtk snd_hwdep snd_seq dcdbas bluetooth intel_uncore mc snd_seq_device cfg80211 dell_wmi_sysman ledtrig_audio processor_thermal_device_pci_legacy firmware_attributes_class snd_pcm dell_wmi_descriptor wmi_bmof processor_thermal_device intel_wmi_thunderbolt pcspkr mei_me snd_timer processor_thermal_wt_hint snd processor_thermal_rfim processor_thermal_rapl soundcore intel_rapl_common mei spi_intel_pci processor_thermal_wt_req i2c_i801 processor_thermal_power_floor spi_intel i2c_smbus rfkill processor_thermal_mbox idma64 intel_soc_dts_iosf intel_pch_thermal
 int3403_thermal int340x_thermal_zone joydev dell_smo8800 int3400_thermal intel_hid acpi_thermal_rel acpi_pad sparse_keymap squashfs loop zram i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic i2c_algo_bit drm_buddy ttm rtsx_pci_sdmmc ghash_clmulni_intel mmc_core drm_display_helper hid_multitouch sha512_ssse3 nvme sha256_ssse3 nvme_core sha1_ssse3 ucsi_acpi e1000e video typec_ucsi nvme_auth i2c_hid_acpi cec rtsx_pci i2c_hid typec wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 15 PID: 168168 Comm: kworker/u33:0 Tainted: P           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ROG Strix G733QR_G733QR/G733QR, BIOS G733QR.331 02/24/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 91 0f 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb86e17907cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9faa96ce4b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff9faa96ce4b00
RBP: ffffb86e17907d00 R08: ffff9faa96ce4b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000030 R12: ffff9faa96ce4000
R13: ffff9faca45cd900 R14: ffff9faac627a405 R15: ffff9faa96ce46d0
FS:  0000000000000000(0000) GS:ffff9fad5e9c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000021b3d2000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 ? srso_alias_return_thunk+0x5/0xfbef5
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: exfat snd_usb_audio snd_usbmidi_lib snd_ump snd_rawmidi mc r8153_ecm cdc_ether usbnet r8152 uas usb_storage mii uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nvidia_drm(POE) nft_ct nvidia_modeset(POE) nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nvidia_uvm(POE) ip_set nf_tables nfnetlink qrtr nvidia(POE) bnep sunrpc binfmt_misc vfat fat iwlmvm snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt mac80211 snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_hda_codec_realtek snd_hda_codec_generic snd_sof_utils libarc4 snd_soc_core snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_compress snd_hda_codec ac97_bus snd_pcm_dmaengine snd_pci_ps snd_rpl_pci_acp6x snd_acp_pci snd_hda_core snd_acp_legacy_common snd_pci_acp6x snd_hwdep btusb snd_seq btrtl snd_seq_device btintel
 iwlwifi snd_pcm intel_rapl_msr btbcm intel_rapl_common btmtk snd_pci_acp5x bluetooth snd_rn_pci_acp3x snd_timer edac_mce_amd cfg80211 snd_acp_config snd snd_soc_acpi pcspkr rapl asus_nb_wmi wmi_bmof i2c_piix4 k10temp soundcore snd_pci_acp3x amd_pmc asus_wireless joydev squashfs loop zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm hid_asus asus_wmi drm_exec crct10dif_pclmul gpu_sched ledtrig_audio crc32_pclmul crc32c_intel drm_suballoc_helper sparse_keymap polyval_clmulni drm_buddy platform_profile polyval_generic drm_display_helper r8169 ghash_clmulni_intel nvme rfkill hid_multitouch sha512_ssse3 ucsi_acpi nvme_core sha256_ssse3 sha1_ssse3 typec_ucsi sp5100_tco ccp cec typec nvme_auth realtek video i2c_hid_acpi i2c_hid wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 12 PID: 606 Comm: kworker/u33:1 Not tainted 6.8.2-666.rog.fc39.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ROG Zephyrus G14 GA401QM_GA401QM/GA401QM, BIOS GA401QM.414 07/21/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 6e 24 26 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffff9ea400ae3cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8efb411caab0
RDX: 0000000000000000 RSI: 0000000000000206 RDI: ffff8efb411caaa8
RBP: ffff9ea400ae3d00 R08: ffff8efb411caab0 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff8efb411ca000
R13: ffff8efb415a0600 R14: ffff8efb6be30c05 R15: ffff8efb411ca6d0
FS:  0000000000000000(0000) GS:ffff8efe1e700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000045422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 ? __schedule+0x3f4/0x1530
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? finish_task_switch.isra.0+0x94/0x2f0
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_pcm_dmaengine snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_pci_ps intel_rapl_common snd_rpl_pci_acp6x snd_hda_codec edac_mce_amd snd_acp_pci snd_acp_legacy_common snd_hda_core kvm_amd btusb snd_pci_acp6x snd_hwdep vfat snd_seq btrtl libarc4 fat snd_seq_device btintel kvm btbcm iwlwifi btmtk bluetooth irqbypass snd_pcm snd_pci_acp5x cfg80211 asus_nb_wmi wmi_bmof rapl snd_timer snd_rn_pci_acp3x snd_acp_config pcspkr snd snd_soc_acpi k10temp soundcore i2c_piix4 snd_pci_acp3x asus_wireless joydev amd_pmc loop zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel polyval_clmulni gpu_sched polyval_generic nvme drm_suballoc_helper drm_buddy hid_asus nvme_core drm_display_helper ghash_clmulni_intel asus_wmi sha512_ssse3 ledtrig_audio hid_multitouch sha256_ssse3 ucsi_acpi sparse_keymap platform_profile sha1_ssse3 typec_ucsi ccp cec typec rfkill sp5100_tco nvme_auth i2c_hid_acpi video i2c_hid wmi ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 PID: 1143 Comm: kworker/u33:1 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: GIGABYTE AERO 17 YB/AERO 17 YB, BIOS FB07 05/27/2020
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 51 b2 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffa9ab00937cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff968ecb43ab08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff968ecb43ab00
RBP: ffffa9ab00937d00 R08: ffff968ecb43ab08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff968ecb43a000
R13: ffff968ec161ca00 R14: ffff968ec57b9405 R15: ffff968ecb43a6d0
FS:  0000000000000000(0000) GS:ffff969e3e340000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000104b7e001 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 ? __switch_to_asm+0x3e/0x70
 ? finish_task_switch.isra.0+0x94/0x2f0
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? ttwu_queue_wakelist+0xef/0x110
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: libarc4 snd_soc_acpi snd_hda_codec_generic snd_soc_core snd_hda_codec_hdmi snd_compress ac97_bus snd_pcm_dmaengine snd_hda_intel irqbypass snd_intel_dspcfg snd_intel_sdw_acpi rapl btusb snd_usb_audio(+) snd_hda_codec iwlwifi intel_cstate uvcvideo btrtl snd_usbmidi_lib snd_hda_core snd_ump spi_nor asus_wmi btintel uvc ucsi_ccg(+) iTCO_wdt vfat snd_rawmidi snd_hwdep typec_ucsi btbcm videobuf2_vmalloc intel_pmc_bxt ledtrig_audio snd_seq mei_hdcp mtd typec mei_pxp ee1004 pktcdvd iTCO_vendor_support btmtk videobuf2_memops fat videobuf2_v4l2 sparse_keymap cfg80211 intel_uncore snd_seq_device thunderbolt(+) bluetooth videobuf2_common wmi_bmof intel_wmi_thunderbolt platform_profile pcspkr videodev mei_me snd_pcm i2c_i801 spi_intel_pci i2c_smbus spi_intel mc mei snd_timer rfkill snd soundcore i2c_nvidia_gpu intel_pch_thermal acpi_pad acpi_tad joydev loop zram xfs hid_jabra i915 nouveau drm_ttm_helper drm_exec drm_gpuvm gpu_sched crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni
 i2c_algo_bit drm_buddy polyval_generic ttm nvme ghash_clmulni_intel sha512_ssse3 drm_display_helper nvme_core r8169 sha256_ssse3 sha1_ssse3 cec realtek nvme_auth i2c_hid_acpi i2c_hid mxm_wmi video wmi pinctrl_cannonlake serio_raw uas usb_storage ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 245628 Comm: kworker/u17:2 Tainted: G        W          6.7.11-100.fc38.x86_64 #1
Hardware name: LENOVO 20N2CTO1WW/20N2CTO1WW, BIOS N2IET99W (1.77 ) 07/15/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 51 0e 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0000:ffffa694a3ad7cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8c934d56eb08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff8c934d56eb00
RBP: ffffa694a3ad7d00 R08: ffff8c934d56eb08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000110 R12: ffff8c934d56e000
R13: ffff8c930a710400 R14: ffff8c9308798a05 R15: ffff8c934d56e6d0
FS:  0000000000000000(0000) GS:ffff8c9a5c600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000019c3de005 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: tun veth thunderbolt snd_usb_audio snd_usbmidi_lib snd_ump snd_rawmidi cdc_mbim cdc_wdm cdc_ncm uas cdc_ether usbnet usb_storage mii uinput nf_conntrack_netlink xt_addrtype br_netfilter snd_seq_dummy rfcomm snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib bridge nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 stp nft_reject llc nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security overlay ip_set nf_tables nfnetlink ip6table_filter iptable_filter qrtr bnep sunrpc btusb btrtl btintel btbcm btmtk uvcvideo bluetooth uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev mc snd_sof_pci_intel_cnl snd_sof_intel_hda_common binfmt_misc soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence
 snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation iwlmvm soundwire_bus snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi vfat intel_tcc_cooling snd_soc_core mac80211 fat x86_pkg_temp_thermal snd_hda_codec_hdmi intel_powerclamp coretemp spi_nor snd_compress kvm_intel iTCO_wdt snd_ctl_led ac97_bus intel_pmc_bxt snd_pcm_dmaengine snd_hda_codec_realtek snd_hda_codec_generic iTCO_vendor_support mei_hdcp kvm mtd mei_pxp ee1004 mei_wdt libarc4 irqbypass intel_rapl_msr snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi rapl snd_hda_codec iwlwifi intel_cstate snd_hda_core snd_hwdep snd_seq intel_uncore processor_thermal_device_pci_legacy cfg80211 i2c_i801 processor_thermal_device thinkpad_acpi pcspkr processor_thermal_wt_hint snd_seq_device think_lmi spi_intel_pci processor_thermal_rfim mei_me ledtrig_audio processor_thermal_rapl snd_pcm wmi_bmof intel_wmi_thunderbolt firmware_attributes_class
 platform_profile intel_rapl_common spi_intel processor_thermal_wt_req snd_timer idma64 i2c_smbus processor_thermal_power_floor mei processor_thermal_mbox rfkill intel_soc_dts_iosf intel_pch_thermal snd soundcore int3403_thermal int340x_thermal_zone int3400_thermal acpi_pad acpi_thermal_rel joydev loop zram dm_crypt i915 crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit polyval_clmulni rtsx_pci_sdmmc drm_buddy polyval_generic mmc_core nvme ghash_clmulni_intel ttm sha512_ssse3 e1000e nvme_core sha256_ssse3 drm_display_helper ucsi_acpi sha1_ssse3 typec_ucsi rtsx_pci typec nvme_auth cec video wmi pinctrl_cannonlake serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 26 PID: 1142 Comm: kworker/u67:1 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B550 AORUS MASTER/B550 AORUS MASTER, BIOS F14d 10/01/2021
Workqueue: hci1 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de e1 08 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffba0bc1963cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff93e7993cab08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff93e7993cab00
RBP: ffffba0bc1963d00 R08: ffff93e7993cab08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff93e7993ca000
R13: ffff93e78564d700 R14: ffff93e78dc31005 R15: ffff93e7993ca6d0
FS:  0000000000000000(0000) GS:ffff93ee9f080000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000105428000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_alias_return_thunk+0x5/0xfbef5
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? hci_cmd_work+0x121/0x1d0 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_usb_audio(+) snd_hda_codec(+) snd_usbmidi_lib kvm(+) snd_ump snd_rawmidi snd_hda_core mc btusb snd_hwdep btrtl snd_seq btintel btbcm snd_seq_device btmtk irqbypass cfg80211 snd_pcm bluetooth snd_timer rapl snd gigabyte_wmi wmi_bmof acpi_cpufreq pcspkr k10temp i2c_piix4 joydev rfkill soundcore gpio_amdpt gpio_generic loop zram amdgpu video amdxcp crct10dif_pclmul i2c_algo_bit crc32_pclmul drm_ttm_helper crc32c_intel polyval_clmulni ttm polyval_generic drm_exec gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel sha512_ssse3 drm_display_helper nvme sha256_ssse3 sha1_ssse3 ccp nvme_core r8169 sp5100_tco cec realtek nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 102 Comm: kworker/u33:0 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: Acer Extensa 215-22/Watford_DA, BIOS V1.19 08/10/2021
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_check_bdaddr+0x45/0x140 [btintel]
Code: 89 fd 48 83 ec 18 65 48 8b 04 25 28 00 00 00 48 89 44 24 10 31 c0 e8 2a f2 e5 ff 48 89 c3 48 3d 00 f0 ff ff 0f 87 8f 00 00 00 <83> 78 70 07 0f 85 ad 00 00 00 48 8b 80 d0 00 00 00 ba 03 00 00 00
RSP: 0018:ffffabc040413c68 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8d7103b1eb08
RDX: 0000000000000000 RSI: 0000000000000206 RDI: ffff8d7103b1eb00
RBP: ffff8d7103b1e000 R08: ffff8d7103b1eb08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000030 R12: ffff8d7103b1e000
R13: ffff8d7103f3fe20 R14: ffffabc040ca984a R15: ffffabc040ca9949
FS:  0000000000000000(0000) GS:ffff8d712b2c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000104eae000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x5f
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_check_bdaddr+0x45/0x140 [btintel]
 ? btintel_check_bdaddr+0x36/0x140 [btintel]
 ? btintel_exit_mfg+0x66/0xb0 [btintel]
 ? srso_return_thunk+0x5/0x5f
 btintel_legacy_rom_setup+0x78/0x5e0 [btintel]
 btintel_setup_combined+0x32e/0x790 [btintel]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_hda_codec ac97_bus videobuf2_memops(+) snd_hda_core videobuf2_v4l2 snd_pcm_dmaengine btusb mac80211 snd_pci_ps snd_rpl_pci_acp6x btrtl libarc4 binfmt_misc btintel videobuf2_common snd_acp_pci snd_hwdep snd_acp_legacy_common irqbypass snd_seq videodev snd_pci_acp6x btbcm snd_pci_acp5x btmtk snd_seq_device iwlwifi vfat snd_rn_pci_acp3x rapl snd_pcm fat mc bluetooth acer_wmi snd_timer pcspkr snd_acp_config sparse_keymap wmi_bmof cfg80211 acpi_cpufreq snd snd_soc_acpi soundcore i2c_amd_mp2_pci i2c_piix4 snd_pci_acp3x rfkill k10temp acer_wireless joydev loop zram amdgpu crct10dif_pclmul crc32_pclmul amdxcp i2c_algo_bit crc32c_intel polyval_clmulni polyval_generic drm_ttm_helper ttm drm_exec ghash_clmulni_intel gpu_sched nvme drm_suballoc_helper sha512_ssse3 drm_buddy nvme_core hid_multitouch drm_display_helper sha256_ssse3 r8169 sha1_ssse3 wdat_wdt ccp nvme_auth cec realtek sp5100_tco video wmi i2c_hid_acpi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 20327 Comm: kworker/u33:1 Tainted: G        W  OE      6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 21AB001PUS/21AB001PUS, BIOS R1QET29W (1.15 ) 11/19/2021
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:msft_do_open+0x99/0x260 [bluetooth]
Code: 89 df 48 c7 45 00 00 00 00 00 0f b7 b3 08 17 00 00 c6 44 24 07 00 e8 36 ab fe ff 49 89 c4 48 3d 00 f0 ff ff 0f 87 5c 01 00 00 <83> 78 70 0a 0f 86 d7 00 00 00 4c 8b a8 d0 00 00 00 41 80 7d 01 00
RSP: 0018:ffffb40e8b86fda0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffff9c7b241b2000 RCX: ffff9c7b241b2b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff9c7b241b2b00
RBP: ffff9c7a0b7b1000 R08: ffff9c7b241b2b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000000
R13: ffffffffc16d0340 R14: ffff9c7aacb12c05 R15: ffff9c7b241b26d0
FS:  0000000000000000(0000) GS:ffff9c7cdec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000003c422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? msft_do_open+0x99/0x260 [bluetooth]
 hci_dev_open_sync+0x68c/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 vboxnetadp(OE) vboxnetflt(OE) ip_set nf_tables nfnetlink vboxdrv(OE) qrtr tun bnep sunrpc binfmt_misc snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_ctl_led snd_sof snd_hda_codec_realtek snd_hda_codec_generic snd_sof_utils snd_hda_codec_hdmi rtw89_8852ae vfat snd_soc_core rtw89_8852a fat intel_rapl_msr snd_hda_intel rtw89_pci intel_rapl_common snd_intel_dspcfg snd_compress snd_usb_audio snd_intel_sdw_acpi ac97_bus rtw89_core edac_mce_amd snd_hda_codec snd_pcm_dmaengine snd_pci_ps snd_rpl_pci_acp6x uvcvideo snd_usbmidi_lib snd_acp_pci snd_hda_core snd_ump snd_acp_legacy_common kvm_amd uvc snd_rawmidi videobuf2_vmalloc snd_hwdep snd_pci_acp6x
 videobuf2_memops mac80211 videobuf2_v4l2 btusb snd_seq kvm btrtl btintel libarc4 videobuf2_common snd_seq_device btbcm irqbypass tps6598x btmtk videodev snd_pcm snd_pci_acp5x cfg80211 bluetooth rapl mc thinkpad_acpi pcspkr think_lmi snd_rn_pci_acp3x ledtrig_audio snd_timer platform_profile firmware_attributes_class snd_acp_config hid_sensor_accel_3d snd_soc_acpi snd hid_sensor_trigger i2c_piix4 snd_pci_acp3x hid_sensor_iio_common wmi_bmof rfkill k10temp soundcore industrialio_triggered_buffer kfifo_buf industrialio amd_pmc serial_multi_instantiate i2c_scmi joydev loop zram hid_multitouch amdgpu hid_sensor_hub amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec gpu_sched crct10dif_pclmul crc32_pclmul drm_suballoc_helper crc32c_intel rtsx_pci_sdmmc polyval_clmulni drm_buddy polyval_generic ghash_clmulni_intel mmc_core sha512_ssse3 drm_display_helper nvme sha256_ssse3 ccp amd_sfh ucsi_acpi cec sha1_ssse3 nvme_core typec_ucsi r8169 rtsx_pci sp5100_tco typec realtek nvme_auth video wmi i2c_hid_acpi i2c_hid
 serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 15 PID: 181 Comm: kworker/u33:0 Tainted: P        W  O       6.7.11-200.fc39.x86_64 #1
Hardware name: GIGABYTE G5 MF/G5 MF, BIOS FB10 08/04/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 41 c1 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0000:ffffac320185fcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8dff818e6b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff8dff818e6b00
RBP: ffffac320185fd00 R08: ffff8dff818e6b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff8dff818e6000
R13: ffff8dff8136c100 R14: ffff8dff98988605 R15: ffff8dff818e66d0
FS:  0000000000000000(0000) GS:ffff8e02fb5c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000002a5422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x503/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: nvidia_drm(PO+) nvidia_modeset(PO) nvidia_uvm(PO) nvidia(PO) bnep binfmt_misc vfat fat snd_sof_pci_intel_tgl snd_sof_intel_hda_common iwlmvm soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_hda_codec_realtek snd_sof_utils mac80211 snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi soundwire_generic_allocation snd_hda_codec_generic soundwire_bus ledtrig_audio snd_soc_core intel_uncore_frequency intel_uncore_frequency_common intel_tcc_cooling x86_pkg_temp_thermal intel_powerclamp snd_hda_codec_hdmi coretemp snd_compress libarc4 ac97_bus snd_pcm_dmaengine kvm_intel snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec kvm uvcvideo snd_hda_core irqbypass iwlwifi uvc snd_hwdep btusb btrtl rapl videobuf2_vmalloc btintel intel_cstate spi_nor snd_seq iTCO_wdt processor_thermal_device_pci btbcm videobuf2_memops intel_pmc_bxt processor_thermal_device pmt_telemetry mtd ee1004 intel_rapl_msr
 iTCO_vendor_support mei_hdcp mei_pxp pmt_class btmtk processor_thermal_wt_hint snd_seq_device videobuf2_v4l2 cfg80211 intel_uncore snd_pcm processor_thermal_rfim bluetooth processor_thermal_rapl videobuf2_common intel_rapl_common videodev snd_timer mei_me pcspkr i2c_i801 spi_intel_pci processor_thermal_wt_req mc mei i2c_smbus spi_intel snd idma64 rfkill processor_thermal_power_floor soundcore processor_thermal_mbox igen6_edac intel_vsec int3403_thermal int340x_thermal_zone int3400_thermal intel_hid acpi_thermal_rel acpi_pad sparse_keymap joydev loop zram i915 i2c_algo_bit drm_buddy nvme ttm sdhci_pci nvme_core drm_display_helper cqhci crct10dif_pclmul r8169 crc32_pclmul sdhci crc32c_intel polyval_clmulni hid_multitouch polyval_generic ghash_clmulni_intel mxm_wmi sha512_ssse3 mmc_core sha256_ssse3 sha1_ssse3 realtek nvme_auth cec i2c_hid_acpi video i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables nct6775_core hwmon_vid i2c_dev fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 PID: 1104 Comm: kworker/u25:1 Tainted: G           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 21CB00BFFR/21CB00BFFR, BIOS N3AET79W (1.44 ) 11/27/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de a1 57 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb9c5c0a3fcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff996ea3e8eb08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff996ea3e8eb00
RBP: ffffb9c5c0a3fd00 R08: ffff996ea3e8eb08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff996ea3e8e000
R13: ffff996e8a768600 R14: ffff996e82a6f005 R15: ffff996ea3e8e6d0
FS:  0000000000000000(0000) GS:ffff9971cf540000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000001cd422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x503/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 ? __switch_to_asm+0x3e/0x70
 ? finish_task_switch.isra.0+0x94/0x2f0
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc btusb btrtl gpio_ljca i2c_ljca spi_ljca btintel btbcm btmtk bluetooth usb_ljca snd_ctl_led snd_soc_skl_hda_dsp snd_soc_hdac_hdmi snd_sof_probes snd_soc_intel_hda_dsp_common binfmt_misc snd_hda_codec_hdmi vfat snd_hda_codec_realtek fat snd_hda_codec_generic snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda intel_uncore_frequency snd_sof_pci intel_uncore_frequency_common intel_tcc_cooling snd_sof_xtensa_dsp x86_pkg_temp_thermal iwlmvm intel_powerclamp snd_sof coretemp kvm_intel snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match iTCO_wdt snd_soc_acpi spi_nor mei_hdcp mac80211 soundwire_generic_allocation pmt_telemetry kvm mtd mei_pxp soundwire_bus intel_pmc_bxt pmt_class snd_soc_core iTCO_vendor_support intel_rapl_msr libarc4 snd_compress irqbypass ac97_bus snd_pcm_dmaengine rapl snd_hda_intel intel_cstate
 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec intel_ipu6_isys(OE) intel_uncore snd_hda_core think_lmi(+) firmware_attributes_class videobuf2_dma_contig snd_hwdep wmi_bmof iwlwifi videobuf2_memops snd_seq videobuf2_v4l2 pcspkr videobuf2_common snd_seq_device processor_thermal_device_pci intel_ipu6_psys(OE) snd_pcm processor_thermal_device processor_thermal_wt_hint cfg80211 processor_thermal_rfim spi_intel_pci i2c_i801 processor_thermal_rapl snd_timer spi_intel thunderbolt idma64 i2c_smbus mei_me intel_rapl_common processor_thermal_wt_req intel_vsec thinkpad_acpi intel_ipu6(OE) nxp_nci_i2c processor_thermal_power_floor igen6_edac ledtrig_audio processor_thermal_mbox platform_profile nxp_nci mei_vsc(OE) snd nci mei intel_skl_int3472_tps68470 nfc soundcore int3403_thermal tps68470_regulator int340x_thermal_zone rfkill soc_button_array clk_tps68470 ov2740(OE) v4l2_fwnode int3400_thermal v4l2_async intel_hid intel_skl_int3472_discrete sparse_keymap acpi_pad acpi_thermal_rel acpi_tad joydev v4l2loopback(OE)
 videodev mc loop zram hid_sensor_hub intel_ishtp_hid i915 crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit polyval_clmulni drm_buddy polyval_generic nvme ttm ghash_clmulni_intel nvme_core drm_display_helper sha512_ssse3 ucsi_acpi typec_ucsi video hid_multitouch intel_ish_ipc sha256_ssse3 typec sha1_ssse3 intel_ishtp cec nvme_auth i2c_hid_acpi i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 926 Comm: kworker/u25:1 Tainted: P           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: GIGABYTE G5 GD/G5 GD, BIOS FB09 12/30/2021
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 41 c8 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffff9ab8c08b3cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff89fb91632b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff89fb91632b00
RBP: ffff9ab8c08b3d00 R08: ffff89fb91632b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff89fb91632000
R13: ffff89fb8e9f3300 R14: ffff89fb85ffba05 R15: ffff89fb916326d0
FS:  0000000000000000(0000) GS:ffff8a0abf4c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000104cda001 CR4: 0000000000f70ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 ? __switch_to_asm+0x3e/0x70
 ? finish_task_switch.isra.0+0x94/0x2f0
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? wakeup_preempt+0x5e/0x70
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nvidia_drm(POE+) nvidia_modeset(POE) ip_set nf_tables nfnetlink nvidia_uvm(POE) qrtr nvidia(POE) bnep sunrpc binfmt_misc vfat fat snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci iwlmvm snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match mac80211 intel_rapl_msr snd_soc_acpi soundwire_generic_allocation soundwire_bus intel_rapl_common intel_tcc_cooling snd_hda_codec_realtek snd_soc_core x86_pkg_temp_thermal intel_powerclamp snd_hda_codec_generic coretemp ledtrig_audio snd_compress snd_hda_codec_hdmi kvm_intel ac97_bus snd_pcm_dmaengine libarc4 snd_hda_intel uvcvideo snd_intel_dspcfg snd_intel_sdw_acpi kvm snd_hda_codec uvc
 videobuf2_vmalloc videobuf2_memops snd_hda_core iwlwifi videobuf2_v4l2 irqbypass videobuf2_common rapl snd_hwdep btusb snd_seq btrtl videodev intel_cstate spi_nor iTCO_wdt btintel snd_seq_device intel_pmc_bxt btbcm ee1004 mei_pxp snd_pcm mei_hdcp btmtk pmt_telemetry mtd iTCO_vendor_support pmt_class cfg80211 mc bluetooth intel_uncore snd_timer i2c_i801 spi_intel_pci pcspkr spi_intel snd mei_me i2c_smbus mei rfkill idma64 soundcore intel_vsec intel_hid sparse_keymap acpi_pad joydev loop zram i915 i2c_algo_bit drm_buddy crct10dif_pclmul sdhci_pci ttm crc32_pclmul crc32c_intel polyval_clmulni polyval_generic r8169 drm_display_helper ghash_clmulni_intel cqhci nvme sdhci hid_multitouch sha512_ssse3 sha256_ssse3 mmc_core nvme_core mxm_wmi sha1_ssse3 i2c_hid_acpi cec realtek nvme_auth i2c_hid video wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 4 PID: 39015 Comm: kworker/u17:0 Tainted: P           O       6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 20LAS5XW00/20LAS5XW00, BIOS N27ET51W (1.37 ) 08/22/2023
Workqueue: hci1 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de c1 ed ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffa8949d667cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff99c53cdaab08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff99c53cdaab00
RBP: ffffa8949d667d00 R08: ffff99c53cdaab08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff99c53cdaa000
R13: ffff99c79c432300 R14: ffff99c4c0b25a05 R15: ffff99c53cdaa6d0
FS:  0000000000000000(0000) GS:ffff99cc2f500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000064e422005 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: cdc_mbim cdc_wdm cdc_ncm cdc_ether usbnet r8152 ses enclosure scsi_transport_sas mii uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject 8021q garp nft_ct mrp stp llc nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nvidia_drm(PO) nvidia_modeset(PO) ip_set nf_tables nfnetlink nvidia_uvm(PO) qrtr bnep nvidia(PO) sunrpc rmi_smbus rmi_core snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl iwlmvm snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp intel_tcc_cooling x86_pkg_temp_thermal iTCO_wdt snd_soc_acpi_intel_match intel_powerclamp intel_pmc_bxt mei_hdcp mac80211 snd_soc_acpi iTCO_vendor_support snd_soc_core
 coretemp snd_hda_codec_hdmi ee1004 mei_pxp kvm_intel snd_ctl_led snd_hda_codec_realtek snd_compress intel_rapl_msr snd_hda_codec_generic libarc4 kvm ac97_bus snd_pcm_dmaengine snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi binfmt_misc irqbypass snd_hda_codec rapl iwlwifi snd_hda_core btusb btrtl intel_cstate snd_hwdep btintel snd_seq btbcm snd_seq_device intel_uncore pcspkr think_lmi btmtk intel_wmi_thunderbolt firmware_attributes_class wmi_bmof uvcvideo cfg80211 snd_pcm processor_thermal_device_pci_legacy bluetooth uvc thunderbolt videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 processor_thermal_device videobuf2_common i2c_i801 i2c_smbus processor_thermal_wt_hint snd_timer videodev mei_me processor_thermal_rfim thinkpad_acpi processor_thermal_rapl intel_rapl_common mei intel_pch_thermal ledtrig_audio mc processor_thermal_wt_req platform_profile processor_thermal_power_floor processor_thermal_mbox intel_xhci_usb_role_switch rfkill intel_soc_dts_iosf int3403_thermal snd soundcore int340x_thermal_zone
 int3400_thermal acpi_thermal_rel acpi_pad joydev loop zram dm_crypt vfat fat i915 crct10dif_pclmul nvme crc32_pclmul crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_buddy ghash_clmulni_intel uas sha512_ssse3 nvme_core ttm sha256_ssse3 usb_storage sha1_ssse3 e1000e drm_display_helper ucsi_acpi nvme_auth typec_ucsi cec typec video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 111 Comm: kworker/u17:0 Tainted: G     U             6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 23256CG/23256CG, BIOS G2ETA1WW (2.61 ) 04/22/2014
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btbcm_initialize+0xa2/0x590 [btbcm]
Code: 41 5f c3 cc cc cc cc 31 c9 31 d2 41 b8 10 27 00 00 be 01 10 00 00 48 89 df e8 9a 69 f5 ff 48 3d 00 f0 ff ff 0f 87 3b 04 00 00 <83> 78 70 09 74 38 48 c7 c6 00 f1 1c c1 48 85 db 74 04 48 8b 73 40
RSP: 0018:ffffbecc804dfd48 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffff968f0363a000 RCX: ffff968f0363ab08
RDX: 0000000000000000 RSI: 0000000000000202 RDI: ffff968f0363ab00
RBP: 0000000000000000 R08: ffff968f0363ab08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffffbecc804dfdbf
R13: ffff968f07fa6000 R14: 0000000000000000 R15: ffff968f0363a6d0
FS:  0000000000000000(0000) GS:ffff96920e200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000401422004 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btbcm_initialize+0xa2/0x590 [btbcm]
 ? btbcm_initialize+0x96/0x590 [btbcm]
 btbcm_finalize+0x1a/0x40 [btbcm]
 btbcm_setup_patchram+0x45/0xd90 [btbcm]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? _raw_spin_unlock_irq+0x15/0x30
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: binfmt_misc intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp snd_hda_codec_hdmi kvm_intel iTCO_wdt vfat mei_wdt mei_pxp mei_hdcp fat btusb kvm intel_pmc_bxt iTCO_vendor_support snd_ctl_led snd_hda_codec_realtek at24 snd_hda_codec_generic btrtl btintel btbcm irqbypass btmtk rapl snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi iwldvm intel_cstate intel_uncore snd_hda_codec bluetooth mac80211 uvcvideo uvc videobuf2_vmalloc snd_hda_core libarc4 videobuf2_memops snd_hwdep snd_seq videobuf2_v4l2 think_lmi firmware_attributes_class pcspkr snd_seq_device videobuf2_common snd_pcm videodev wmi_bmof iwlwifi thinkpad_acpi i2c_i801 ledtrig_audio snd_timer mc cfg80211 platform_profile i2c_smbus joydev mei_me snd lpc_ich mei rfkill soundcore tcp_bbr loop zram i915 sdhci_pci crct10dif_pclmul cqhci hid_logitech_hidpp i2c_algo_bit crc32_pclmul sdhci drm_buddy crc32c_intel polyval_clmulni ttm polyval_generic ghash_clmulni_intel e1000e mmc_core sha512_ssse3
 drm_display_helper sha256_ssse3 sha1_ssse3 cec video wmi serio_raw hid_logitech_dj scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath ledtrig_timer fuse i2c_dev
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 8 PID: 157 Comm: kworker/u35:0 Tainted: G        W          6.7.11-100.fc38.x86_64 #1
Hardware name: HP HP EliteBook 855 G7 Notebook PC/8760, BIOS S77 Ver. 01.01.02 07/21/2020
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 91 06 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb7650070fcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8e6d67a34180
RBP: ffffb7650070fd00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000110 R12: ffff8e68671ae000
R13: ffff8e64abc46a00 R14: ffff8e64919a4005 R15: ffff8e68671ae6d0
FS:  0000000000000000(0000) GS:ffff8e6d67a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000026078c000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x5f
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 ? __schedule+0x3f5/0x1420
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uas usb_storage r8153_ecm cdc_ether usbnet vhost_net vhost vhost_iotlb tap tun rfcomm snd_seq_dummy snd_hrtimer xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_nat_tftp nf_conntrack_tftp nf_conntrack_netbios_ns nf_conntrack_broadcast bridge nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib stp nft_reject_inet llc nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security ip_set nf_tables nfnetlink ip6table_filter iptable_filter qrtr bnep sunrpc binfmt_misc vfat fat iwlmvm snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_ctl_led snd_hda_codec_realtek mac80211 snd_sof_utils snd_hda_codec_generic ledtrig_audio snd_soc_core snd_hda_codec_hdmi snd_compress ac97_bus intel_rapl_msr snd_hda_intel libarc4 snd_pcm_dmaengine intel_rapl_common
 snd_intel_dspcfg snd_pci_ps btusb snd_intel_sdw_acpi snd_usb_audio snd_rpl_pci_acp6x snd_hda_codec snd_acp_pci uvcvideo edac_mce_amd snd_usbmidi_lib btrtl snd_hda_core snd_acp_legacy_common snd_ump uvc snd_rawmidi videobuf2_vmalloc snd_pci_acp6x btintel snd_hwdep videobuf2_memops kvm_amd btbcm videobuf2_v4l2 btmtk videobuf2_common kvm snd_seq iwlwifi bluetooth videodev irqbypass snd_seq_device hp_wmi sparse_keymap rapl mc platform_profile snd_pcm wmi_bmof snd_pci_acp5x cfg80211 pcspkr acpi_cpufreq snd_timer snd_rn_pci_acp3x snd_acp_config snd i2c_piix4 snd_soc_acpi k10temp snd_pci_acp3x rfkill soundcore amd_pmc wireless_hotkey joydev loop zram dm_crypt r8152 mii amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel polyval_clmulni gpu_sched polyval_generic nvme drm_suballoc_helper drm_buddy nvme_core drm_display_helper ghash_clmulni_intel video sha512_ssse3 ucsi_acpi hid_multitouch sha256_ssse3 ccp sha1_ssse3 cec typec_ucsi nvme_auth sp5100_tco typec wmi
 i2c_hid_acpi i2c_hid serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 100 Comm: kworker/u17:0 Tainted: G          I        6.7.11-100.fc38.x86_64 #1
Hardware name: Acer Aspire M5-583P/MA50_HW, BIOS V2.25 11/28/2013
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_check_bdaddr+0x45/0x140 [btintel]
Code: 89 fd 48 83 ec 18 65 48 8b 04 25 28 00 00 00 48 89 44 24 10 31 c0 e8 2a 62 19 00 48 89 c3 48 3d 00 f0 ff ff 0f 87 8f 00 00 00 <83> 78 70 07 0f 85 ad 00 00 00 48 8b 80 d0 00 00 00 ba 03 00 00 00
RSP: 0000:ffffb1370048fc68 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9ace030d4b08
RDX: 0000000000000000 RSI: 0000000000000206 RDI: ffff9ace030d4b00
RBP: ffff9ace030d4000 R08: ffff9ace030d4b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000030 R12: ffff9ace030d4000
R13: ffff9ace07090a60 R14: ffffb137005d4690 R15: ffffb137005d478f
FS:  0000000000000000(0000) GS:ffff9ad053240000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000001037be001 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_check_bdaddr+0x45/0x140 [btintel]
 ? btintel_check_bdaddr+0x36/0x140 [btintel]
 ? btintel_exit_mfg+0x66/0xb0 [btintel]
 btintel_legacy_rom_setup+0x78/0x5e0 [btintel]
 btintel_setup_combined+0x32e/0x790 [btintel]
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: iTCO_wdt intel_pmc_bxt uvcvideo(+) iTCO_vendor_support mei_hdcp libarc4 kvm(+) snd_intel_dspcfg uvc snd_intel_sdw_acpi videobuf2_vmalloc snd_hda_codec iwlwifi videobuf2_memops btusb irqbypass snd_hda_core btrtl videobuf2_v4l2 btintel rapl btbcm btmtk videobuf2_common vfat intel_cstate fat snd_hwdep bluetooth intel_uncore videodev snd_seq cfg80211 snd_seq_device snd_pcm mei_me lpc_ich i2c_i801 acer_wmi pcspkr mei mc sparse_keymap wmi_bmof i2c_smbus snd_timer rfkill snd soundcore joydev loop zram i915 rtsx_pci_sdmmc mmc_core hid_logitech_hidpp crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic i2c_algo_bit ghash_clmulni_intel drm_buddy sha512_ssse3 ttm sha256_ssse3 drm_display_helper r8169 sha1_ssse3 rtsx_pci realtek cec video wmi hid_logitech_dj serio_raw uas hid_multitouch usb_storage scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#2] PREEMPT SMP NOPTI
CPU: 6 PID: 182 Comm: kworker/u33:0 Tainted: P      D    O       6.7.11-200.fc39.x86_64 #1
Hardware name: Dell Inc. Precision 3561/03T624, BIOS 1.29.0 01/31/2024
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 91 e4 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffb7a2c090bcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9e8a03de2b08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff9e8a03de2b00
RBP: ffffb7a2c090bd00 R08: ffff9e8a03de2b08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff9e8a03de2000
R13: ffff9e8a01e68e00 R14: ffff9e8a0749cc05 R15: ffff9e8a03de26d0
FS:  0000000000000000(0000) GS:ffff9e8d7f580000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000001f422005 CR4: 0000000000f70ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr nvidia(PO+) bnep sunrpc binfmt_misc snd_hda_codec_hdmi snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp iwlmvm snd_ctl_led snd_sof snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi soundwire_generic_allocation soundwire_bus snd_hda_codec_realtek mac80211 snd_soc_core snd_hda_codec_generic snd_compress ac97_bus x86_pkg_temp_thermal intel_powerclamp snd_pcm_dmaengine coretemp snd_hda_intel dell_rbtn kvm_intel snd_intel_dspcfg libarc4 snd_intel_sdw_acpi snd_hda_codec vfat fat dell_laptop snd_hda_core kvm snd_hwdep uvcvideo snd_seq dell_wmi snd_seq_device uvc processor_thermal_device_pci_legacy
 videobuf2_vmalloc iwlwifi processor_thermal_device videobuf2_memops videobuf2_v4l2 irqbypass processor_thermal_wt_hint snd_pcm btusb videobuf2_common spi_nor processor_thermal_rfim intel_rapl_msr btrtl iTCO_wdt btintel processor_thermal_rapl intel_pmc_bxt rapl videodev mtd mei_hdcp dell_smbios mei_pxp ee1004 btbcm iTCO_vendor_support snd_timer pmt_telemetry intel_rapl_common dcdbas intel_cstate btmtk pmt_class cfg80211 bluetooth intel_uncore dell_wmi_sysman ledtrig_audio mei_me dell_wmi_descriptor mc processor_thermal_wt_req processor_thermal_power_floor firmware_attributes_class snd i2c_i801 spi_intel_pci thunderbolt spi_intel i2c_smbus mei wmi_bmof idma64 pcspkr processor_thermal_mbox soundcore rfkill intel_soc_dts_iosf intel_vsec int3400_thermal int3403_thermal intel_hid acpi_thermal_rel int340x_thermal_zone joydev acpi_tad acpi_pad sparse_keymap loop zram dm_crypt hid_sensor_hub intel_ishtp_hid i915 nvme nvme_core nvme_auth i2c_algo_bit drm_buddy rtsx_pci_sdmmc crct10dif_pclmul ttm crc32_pclmul
 crc32c_intel mmc_core polyval_clmulni polyval_generic drm_display_helper ghash_clmulni_intel intel_ish_ipc hid_multitouch sha512_ssse3 ucsi_acpi video sha256_ssse3 e1000e typec_ucsi sha1_ssse3 rtsx_pci intel_ishtp typec cec vmd i2c_hid_acpi i2c_hid wmi pinctrl_tigerlake serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 126 Comm: kworker/u33:0 Tainted: G           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: HP HP Laptop 15-ef2xxx/887A, BIOS F.25 07/05/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:msft_do_open+0x99/0x260 [bluetooth]
Code: 89 df 48 c7 45 00 00 00 00 00 0f b7 b3 08 17 00 00 c6 44 24 07 00 e8 36 ab fe ff 49 89 c4 48 3d 00 f0 ff ff 0f 87 5c 01 00 00 <83> 78 70 0a 0f 86 d7 00 00 00 4c 8b a8 d0 00 00 00 41 80 7d 01 00
RSP: 0018:ffffacb2c061fda0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffff99c9a9e4a000 RCX: ffff99c9a9e4ab08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff99c9a9e4ab00
RBP: ffff99c989d6db40 R08: ffff99c9a9e4ab08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000000
R13: ffffffffc1f55340 R14: ffff99c989341005 R15: ffff99c9a9e4a6d0
FS:  0000000000000000(0000) GS:ffff99ca96680000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000014f422000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? msft_do_open+0x99/0x260 [bluetooth]
 hci_dev_open_sync+0x68c/0xba0 [bluetooth]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct vboxnetadp(OE) vboxnetflt(OE) nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink vboxdrv(OE) bnep qrtr uvcvideo uvc videobuf2_vmalloc btusb videobuf2_memops btrtl videobuf2_v4l2 videobuf2_common btintel btbcm btmtk videodev mc bluetooth sunrpc binfmt_misc snd_acp_legacy_mach snd_acp_mach snd_soc_nau8821 snd_soc_dmic snd_acp3x_pdm_dma snd_acp3x_rn snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_ctl_led snd_sof snd_hda_codec_realtek snd_sof_utils snd_hda_codec_generic vfat rtw88_8821ce snd_soc_core ledtrig_audio fat rtw88_8821c snd_hda_codec_hdmi intel_rapl_msr rtw88_pci intel_rapl_common snd_compress rtw88_core snd_hda_intel ac97_bus edac_mce_amd snd_pcm_dmaengine snd_intel_dspcfg snd_pci_ps snd_intel_sdw_acpi
 kvm_amd snd_hda_codec snd_rpl_pci_acp6x mac80211 snd_acp_pci snd_hda_core snd_acp_legacy_common kvm snd_hwdep snd_pci_acp6x snd_seq snd_seq_device libarc4 irqbypass hp_wmi sparse_keymap snd_pci_acp5x snd_pcm rapl platform_profile snd_rn_pci_acp3x cfg80211 wmi_bmof snd_timer pcspkr snd_acp_config snd_soc_acpi snd rfkill snd_pci_acp3x k10temp i2c_piix4 soundcore wireless_hotkey acpi_tad amd_pmc joydev squashfs loop zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec nvme crc32_pclmul gpu_sched crc32c_intel polyval_clmulni drm_suballoc_helper polyval_generic drm_buddy nvme_core drm_display_helper ghash_clmulni_intel hid_multitouch sha512_ssse3 sha256_ssse3 sha1_ssse3 ccp nvme_auth cec sp5100_tco video wmi i2c_hid_acpi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 15 PID: 207 Comm: kworker/u67:0 Tainted: G           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: System manufacturer System Product Name/TUF GAMING X570-PLUS (WI-FI), BIOS 4002 06/15/2021
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de e1 d5 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffafcf00bcfcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 000000000000000f RDI: ffff91c27edf4180
RBP: ffffafcf00bcfd00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff91b7af44e000
R13: ffff91b78b609d00 R14: ffff91b7af407a05 R15: ffff91b7af44e6d0
FS:  0000000000000000(0000) GS:ffff91c27edc0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000144642000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x5f
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: vfat(+) kvm_amd(+) snd_hda_intel fat libarc4 snd_usb_audio(+) snd_intel_dspcfg kvm snd_usbmidi_lib btusb snd_intel_sdw_acpi snd_ump iwlwifi snd_hda_codec btrtl eeepc_wmi irqbypass snd_rawmidi asus_wmi snd_hda_core btintel mc btbcm snd_hwdep btmtk rapl snd_seq ledtrig_audio cfg80211 snd_seq_device sparse_keymap bluetooth platform_profile snd_pcm pcspkr wmi_bmof snd_timer acpi_cpufreq k10temp i2c_piix4 snd soundcore video rfkill joydev razermouse(OE+) squashfs loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 r8169 sha256_ssse3 sha1_ssse3 nvme_core sp5100_tco ccp nvme_auth realtek wmi uas usb_storage ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 191 Comm: kworker/u33:0 Tainted: G        W I        6.8.2-300.fc40.x86_64 #1
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Z170 Pro4S, BIOS P7.50 01/23/2018
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4b/0xf0 [btintel]
Code: 00 00 00 48 89 6c 24 08 48 89 f5 48 8d 4c 24 07 be a6 fc 00 00 c6 44 24 07 01 e8 f0 55 15 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffa144007afcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff946f21fc4ab0
RDX: 0000000000000000 RSI: 0000000000000206 RDI: ffff946f21fc4aa8
RBP: ffffa144007afd00 R08: ffff946f21fc4ab0 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffffad464880 R12: ffff946f21fc4000
R13: ffff946f028eeae0 R14: ffff946f11155405 R15: ffff946f21fc46d0
FS:  0000000000000000(0000) GS:ffff947662a80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 000000052a422006 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x530
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4b/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3c/0x110 [btintel]
 btintel_setup_combined+0x4f9/0x780 [btintel]
 hci_dev_open_sync+0x100/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x4f/0x260 [bluetooth]
 process_one_work+0x178/0x340
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec iwlwifi snd_hda_core btusb irqbypass btrtl snd_hwdep btintel snd_seq rapl btbcm iTCO_wdt btmtk intel_pmc_bxt iTCO_vendor_support ee1004 snd_seq_device intel_cstate cfg80211 bluetooth snd_pcm i2c_i801 intel_pmc_core snd_timer intel_uncore i2c_smbus pcspkr intel_vsec joydev rfkill snd pmt_telemetry soundcore intel_pch_thermal pmt_class acpi_pad loop nfnetlink zram i915 nouveau cdc_mbim cdc_wdm cdc_ncm cdc_ether usbnet drm_ttm_helper gpu_sched crct10dif_pclmul crc32_pclmul crc32c_intel drm_gpuvm polyval_clmulni drm_exec drm_buddy i2c_algo_bit polyval_generic ghash_clmulni_intel ttm sha512_ssse3 nvme sha256_ssse3 e1000e nvme_core drm_display_helper mxm_wmi r8152 sha1_ssse3 cec nvme_auth mii video wmi ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 186 Comm: kworker/u35:0 Tainted: P           OE      6.8.2-250.vanilla.fc39.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ASUS TUF Gaming A15 FA506ICB_FA506ICB/FA506ICB, BIOS FA506ICB.304 04/11/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:msft_do_open+0x99/0x260 [bluetooth]
Code: 89 df 48 c7 45 00 00 00 00 00 0f b7 b3 b0 16 00 00 c6 44 24 07 00 e8 46 a8 fe ff 49 89 c4 48 3d 00 f0 ff ff 0f 87 5c 01 00 00 <83> 78 70 0a 0f 86 d7 00 00 00 4c 8b a8 d0 00 00 00 41 80 7d 01 00
RSP: 0018:ffffbd71c0957da0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: ffffa0d441d06000 RCX: ffffa0d441d06ab0
RDX: 0000000000000000 RSI: 0000000000000206 RDI: ffffa0d441d06aa8
RBP: ffffa0d40ff2acc0 R08: ffffa0d441d06ab0 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000000
R13: ffffffffc1799300 R14: ffffa0d50fde1405 R15: ffffa0d441d066d0
FS:  0000000000000000(0000) GS:ffffa0d6df4c0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000052422000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? msft_do_open+0x99/0x260 [bluetooth]
 hci_dev_open_sync+0x68c/0xba0 [bluetooth]
 ? __schedule+0x3f4/0x1530
 ? srso_return_thunk+0x5/0x5f
 ? kfree+0x29f/0x2f0
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: exfat uas usb_storage rfcomm snd_seq_dummy snd_hrtimer vboxnetadp(OE) vboxnetflt(OE) nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib vboxdrv(OE) nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) nvidia(POE) binfmt_misc vfat fat snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_hda_codec_realtek snd_sof_utils snd_hda_codec_generic snd_hda_codec_hdmi intel_rapl_msr mt7921e intel_rapl_common snd_soc_core snd_hda_intel uvcvideo mt7921_common edac_mce_amd snd_intel_dspcfg mt792x_lib btusb snd_intel_sdw_acpi uvc btrtl mt76_connac_lib snd_compress videobuf2_vmalloc ac97_bus snd_hda_codec btintel kvm_amd snd_pcm_dmaengine videobuf2_memops mt76 videobuf2_v4l2 snd_pci_ps btbcm videobuf2_common
 snd_rpl_pci_acp6x snd_acp_pci btmtk kvm mac80211 snd_hda_core videodev bluetooth snd_acp_legacy_common snd_hwdep snd_pci_acp6x asus_nb_wmi snd_seq asus_wmi mc irqbypass snd_pci_acp5x libarc4 ledtrig_audio snd_seq_device sparse_keymap snd_rn_pci_acp3x rapl platform_profile snd_pcm wmi_bmof pcspkr snd_acp_config cfg80211 k10temp snd_soc_acpi snd_timer snd snd_pci_acp3x i2c_piix4 rfkill soundcore asus_wireless amd_pmc joydev squashfs loop zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper crct10dif_pclmul crc32_pclmul ttm crc32c_intel polyval_clmulni drm_exec polyval_generic gpu_sched nvme drm_suballoc_helper drm_buddy drm_display_helper nvme_core ghash_clmulni_intel sha512_ssse3 r8169 video hid_multitouch sha256_ssse3 ucsi_acpi typec_ucsi sha1_ssse3 ccp sp5100_tco cec typec nvme_auth realtek wmi i2c_hid_acpi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#2] PREEMPT SMP NOPTI
CPU: 6 PID: 209 Comm: kworker/u41:0 Tainted: G      D            6.7.11-200.fc39.x86_64 #1
Hardware name: LENOVO 82RF/LNVNB161216, BIOS J2CN46WW 09/28/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 61 f1 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffff9e9e40977cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8afd81c3cb08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff8afd81c3cb00
RBP: ffff9e9e40977d00 R08: ffff8afd81c3cb08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff8afd81c3c000
R13: ffff8afd905bdc00 R14: ffff8afd88c01405 R15: ffff8afd81c3c6d0
FS:  0000000000000000(0000) GS:ffff8b050f780000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000734422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x503/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc binfmt_misc vfat fat snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci iwlmvm snd_sof_xtensa_dsp snd_sof snd_sof_utils intel_uncore_frequency intel_uncore_frequency_common snd_soc_hdac_hda intel_tcc_cooling x86_pkg_temp_thermal snd_hda_ext_core intel_powerclamp snd_hda_codec_realtek snd_soc_acpi_intel_match mac80211 snd_soc_acpi soundwire_generic_allocation soundwire_bus snd_hda_codec_generic ledtrig_audio snd_soc_core coretemp snd_hda_codec_hdmi kvm_intel snd_compress ac97_bus snd_pcm_dmaengine libarc4 snd_hda_intel kvm snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core uvcvideo iwlwifi btusb irqbypass snd_hwdep btrtl snd_seq
 processor_thermal_device_pci uvc btintel videobuf2_vmalloc rapl spi_nor processor_thermal_device btbcm videobuf2_memops iTCO_wdt snd_seq_device processor_thermal_wt_hint videobuf2_v4l2 btmtk pmt_telemetry intel_cstate intel_pmc_bxt processor_thermal_rfim snd_pcm mtd mei_hdcp mei_pxp intel_rapl_msr pmt_class iTCO_vendor_support processor_thermal_rapl videobuf2_common snd_timer bluetooth cfg80211 intel_uncore ideapad_laptop videodev snd pcspkr intel_rapl_common thunderbolt mei_me sparse_keymap i2c_i801 spi_intel_pci processor_thermal_wt_req mc platform_profile processor_thermal_power_floor mei nvidia_wmi_ec_backlight wmi_bmof spi_intel soundcore intel_vsec idma64 i2c_smbus igen6_edac processor_thermal_mbox rfkill int3403_thermal int340x_thermal_zone int3400_thermal joydev acpi_pad acpi_tad acpi_thermal_rel squashfs loop zram i915 nouveau(+) drm_ttm_helper drm_exec drm_gpuvm crct10dif_pclmul nvme crc32_pclmul gpu_sched crc32c_intel polyval_clmulni polyval_generic mxm_wmi nvme_core i2c_algo_bit drm_buddy
 r8169 ttm hid_multitouch ucsi_acpi ghash_clmulni_intel drm_display_helper sha512_ssse3 typec_ucsi sha256_ssse3 sha1_ssse3 cec typec realtek nvme_auth i2c_hid_acpi i2c_hid video wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 204ff5067 P4D 204ff5067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 269 Comm: kworker/u69:0 Tainted: P           OE      6.8.2-300.fc40.x86_64 #1
Hardware name: System manufacturer System Product Name/ROG STRIX B450-I GAMING, BIOS 4901 07/25/2022
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4b/0xf0 [btintel]
Code: 00 00 00 48 89 6c 24 08 48 89 f5 48 8d 4c 24 07 be a6 fc 00 00 c6 44 24 07 01 e8 f0 65 0c 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffbfbc00d47cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9ebe48628ab0
RDX: 0000000000000000 RSI: 0000000000000206 RDI: ffff9ebe48628aa8
RBP: ffffbfbc00d47d00 R08: ffff9ebe48628ab0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff9ebe48628000
R13: ffffbfbc00d47d46 R14: ffff9ebf77edf405 R15: ffff9ebe486286d0
FS:  0000000000000000(0000) GS:ffff9ec16ea80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000001cf796000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x530
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4b/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3c/0x110 [btintel]
 btintel_setup_combined+0x2a5/0x780 [btintel]
 ? srso_return_thunk+0x5/0x5f
 hci_dev_open_sync+0x103/0xba0 [bluetooth]
 ? __schedule+0x3e9/0x1530
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x4f/0x260 [bluetooth]
 process_one_work+0x17b/0x340
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: hid_xpadneo(OE) uhid uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) qrtr bnep sunrpc nvidia(POE) binfmt_misc vfat fat iwlmvm mac80211 libarc4 snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core iwlwifi btusb snd_hwdep btrtl snd_seq btintel snd_seq_device btbcm btmtk eeepc_wmi asus_wmi intel_rapl_msr snd_pcm joydev asus_wmi_sensors cfg80211 bluetooth ledtrig_audio intel_rapl_common sparse_keymap snd_timer platform_profile snd xpad edac_mce_amd video soundcore i2c_piix4 rfkill ff_memless pcspkr apple_mfi_fastcharge acpi_cpufreq k10temp rapl gpio_amdpt wmi_bmof gpio_generic loop nfnetlink zram hid_apple crct10dif_pclmul
 crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel igb sha512_ssse3 nvme_core ccp sha256_ssse3 sha1_ssse3 dca sp5100_tco i2c_algo_bit nvme_auth wmi ip6_tables ip_tables fuse i2c_dev
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#2] PREEMPT SMP NOPTI
CPU: 19 PID: 263 Comm: kworker/u67:0 Tainted: G      D W          6.7.11-200.fc39.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B550 AORUS MASTER/B550 AORUS MASTER, BIOS F12 01/18/2021
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de c1 13 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffaed980e07cd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9b55c10dab08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff9b55c10dab00
RBP: ffffaed980e07d00 R08: ffff9b55c10dab08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff9b55c10da000
R13: ffff9b55c5e98700 R14: ffff9b5617970605 R15: ffff9b55c10da6d0
FS:  0000000000000000(0000) GS:ffff9b64beec0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000108e82000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 ? srso_alias_return_thunk+0x5/0xfbef5
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 ? srso_alias_return_thunk+0x5/0xfbef5
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: libarc4 intel_rapl_msr ledtrig_audio intel_rapl_common snd_usb_audio(+) snd_hda_codec_hdmi snd_hda_intel edac_mce_amd snd_usbmidi_lib snd_intel_dspcfg snd_intel_sdw_acpi snd_ump snd_hda_codec kvm_amd btusb snd_rawmidi iwlwifi snd_hda_core btrtl mc btintel snd_hwdep kvm btbcm snd_seq btmtk irqbypass snd_seq_device cfg80211 bluetooth snd_pcm rapl snd_timer wmi_bmof gigabyte_wmi acpi_cpufreq pcspkr i2c_piix4 snd k10temp rfkill soundcore joydev gpio_amdpt gpio_generic loop zram hid_steam hid_logitech_hidpp ff_memless amdgpu r8169 realtek crct10dif_pclmul video crc32_pclmul amdxcp crc32c_intel i2c_algo_bit polyval_clmulni drm_ttm_helper polyval_generic ttm drm_exec gpu_sched ghash_clmulni_intel sha512_ssse3 drm_suballoc_helper sha256_ssse3 sha1_ssse3 drm_buddy nvme drm_display_helper nvme_core ccp cec sp5100_tco nvme_auth wmi hid_logitech_dj ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 172 Comm: kworker/u65:0 Tainted: P           OE      6.7.11-200.fc39.x86_64 #1
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./B550 Phantom Gaming 4/ac, BIOS P1.80 02/23/2021
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de 91 2c 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffa18dc07bfcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8e28c117eb08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff8e28c117eb00
RBP: ffffa18dc07bfd00 R08: ffff8e28c117eb08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff8e28c117e000
R13: ffff8e28c31c7b00 R14: ffff8e28ce2de005 R15: ffff8e28c117e6d0
FS:  0000000000000000(0000) GS:ffff8e2fdeb80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 0000000127094000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x503/0x790 [btintel]
 hci_dev_open_sync+0x105/0xba0 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? srso_alias_return_thunk+0x5/0xfbef5
 process_one_work+0x17f/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nvidia_drm(POE+) vboxnetadp(OE) vboxnetflt(OE) nvidia_modeset(POE) nf_tables nfnetlink nvidia_uvm(POE) vboxdrv(OE) qrtr nvidia(POE) bnep sunrpc binfmt_misc vfat fat iwlmvm mac80211 snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi libarc4 snd_hda_intel snd_intel_dspcfg intel_rapl_msr snd_intel_sdw_acpi snd_hda_codec intel_rapl_common snd_hda_core iwlwifi edac_mce_amd snd_hwdep btusb snd_seq btrtl kvm_amd snd_seq_device btintel btbcm btmtk snd_pcm kvm bluetooth cfg80211 snd_timer snd joydev soundcore video rfkill irqbypass wmi_bmof gpio_amdpt i2c_piix4 k10temp rapl pcspkr acpi_cpufreq gpio_generic loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel nvme sha512_ssse3 r8169 sha256_ssse3
 nvme_core ccp sha1_ssse3 sp5100_tco realtek nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 16 PID: 209 Comm: kworker/u41:0 Not tainted 6.7.11-200.fc39.x86_64 #1
Hardware name: Dell Inc. Dell G15 5520/05J7DY, BIOS 1.23.0 02/06/2024
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 de b1 3c 00 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0018:ffffa2ac0098bcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff933f41f7eb08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff933f41f7eb00
RBP: ffffa2ac0098bd00 R08: ffff933f41f7eb08 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000100 R12: ffff933f41f7e000
R13: ffff933f4e56ac00 R14: ffff933f715c7e05 R15: ffff933f41f7e6d0
FS:  0000000000000000(0000) GS:ffff9342bf600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000001002f4000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x503/0x790 [btintel]
 hci_dev_open_sync+0x102/0xba0 [bluetooth]
 ? __pfx_hci_dev_open_sync+0x10/0x10 [bluetooth]
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x17c/0x350
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_compress ac97_bus snd_hda_codec_hdmi snd_pcm_dmaengine kvm_intel(+) snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi mei_hdcp processor_thermal_device_pci(+) snd_hda_codec kvm uvcvideo processor_thermal_device btusb iwlwifi(+) uvc videobuf2_vmalloc videobuf2_memops snd_hda_core btrtl videobuf2_v4l2 iTCO_wdt mei_pxp snd_hwdep intel_pmc_bxt processor_thermal_wt_hint dell_laptop processor_thermal_rfim spi_nor iTCO_vendor_support videobuf2_common btintel processor_thermal_rapl snd_seq intel_rapl_msr irqbypass btbcm intel_rapl_common dell_wmi btmtk rapl mtd videodev snd_seq_device i2c_i801 mei_me processor_thermal_wt_req intel_cstate snd_pcm dell_smbios snd_timer dell_wmi_sysman(+) dcdbas bluetooth cfg80211 intel_uncore pcspkr snd spi_intel_pci alienware_wmi processor_thermal_power_floor dell_wmi_ddv thunderbolt mc firmware_attributes_class ledtrig_audio dell_wmi_descriptor mei wmi_bmof nvidia_wmi_ec_backlight spi_intel i2c_smbus rfkill soundcore processor_thermal_mbox idma64 igen6_edac
 int3403_thermal int340x_thermal_zone intel_hid int3400_thermal acpi_tad acpi_thermal_rel sparse_keymap acpi_pad joydev squashfs loop zram typec_displayport i915 i2c_algo_bit nvme crct10dif_pclmul drm_buddy crc32_pclmul crc32c_intel ttm polyval_clmulni nvme_core polyval_generic drm_display_helper r8169 hid_multitouch ucsi_acpi ghash_clmulni_intel sha512_ssse3 typec_ucsi sha256_ssse3 sha1_ssse3 cec typec realtek nvme_auth video i2c_hid_acpi i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000070

BUG: kernel NULL pointer dereference, address: 0000000000000070
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 94 Comm: kworker/u9:0 Tainted: G        W          6.7.11-201.fsync.fc39.x86_64 #1
Hardware name: LENOVO 20FE0011AU/20FE0011AU, BIOS N1GETA9W (1.88 ) 02/01/2023
Workqueue: hci0 hci_power_on [bluetooth]
RIP: 0010:btintel_read_debug_features+0x4d/0xf0 [btintel]
Code: 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 31 c0 48 8d 4c 24 07 c6 44 24 07 01 e8 4e 3f f0 ff 48 89 c3 48 3d 00 f0 ff ff 77 49 <83> 78 70 13 75 67 48 8b 80 d0 00 00 00 be 02 00 00 00 48 89 df 48
RSP: 0000:ffffa97f0049fcd0 EFLAGS: 00010207
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff91d687c3eb08
RDX: 0000000000000000 RSI: 0000000000000212 RDI: ffff91d687c3eb00
RBP: ffffa97f0049fd00 R08: ffff91d687c3eb08 R09: 0000000000000000
R10: ffff91d687b63128 R11: 0000000000000000 R12: ffff91d687c3e000
R13: ffff91d68831a500 R14: ffff91d68905a205 R15: ffff91d687c3e6d0
FS:  0000000000000000(0000) GS:ffff91d9b2580000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000070 CR3: 00000001094fe002 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __timer_delete_sync+0x7d/0xe0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? btintel_read_debug_features+0x4d/0xf0 [btintel]
 btintel_register_devcoredump_support.isra.0+0x3e/0x110 [btintel]
 btintel_setup_combined+0x2ab/0x790 [btintel]
 hci_dev_open_sync+0x102/0xb90 [bluetooth]
 ? enqueue_task.isra.0+0x91/0x130
 hci_dev_do_open+0x23/0x60 [bluetooth]
 hci_power_on+0x51/0x260 [bluetooth]
 ? lock_timer_base+0x61/0x80
 process_one_work+0x1b2/0x390
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs intel_rapl_msr iTCO_wdt intel_pmc_bxt iTCO_vendor_support ee1004 snd_soc_hda_codec snd_soc_skl mei_hdcp mei_pxp snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match intel_rapl_common snd_soc_acpi intel_tcc_cooling snd_soc_core snd_hda_codec_hdmi snd_ctl_led snd_hda_codec_conexant x86_pkg_temp_thermal snd_hda_codec_generic snd_compress ac97_bus snd_pcm_dmaengine iwlmvm intel_powerclamp snd_hda_intel coretemp mac80211 kvm_intel kvm snd_intel_dspcfg libarc4 binfmt_misc snd_intel_sdw_acpi irqbypass snd_hda_codec rapl intel_cstate intel_uncore uvcvideo snd_hda_core snd_hwdep uvc snd_seq btusb btrtl videobuf2_vmalloc snd_seq_device pcspkr videobuf2_memops iwlwifi videobuf2_v4l2 snd_pcm videobuf2_common btintel think_lmi(+) firmware_attributes_class
 videodev i2c_i801 btbcm vfat btmtk fat snd_timer wmi_bmof bluetooth cfg80211 mc i2c_smbus mei_me mei thinkpad_acpi hid_sensor_als hid_sensor_magn_3d hid_sensor_gyro_3d ledtrig_audio hid_sensor_accel_3d rfkill hid_sensor_trigger snd hid_sensor_iio_common industrialio_triggered_buffer kfifo_buf industrialio soundcore intel_pch_thermal intel_xhci_usb_role_switch legion_laptop platform_profile joydev loop zram hid_sensor_hub intel_ishtp_hid i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic rtsx_pci_sdmmc ghash_clmulni_intel mmc_core sha512_ssse3 nvme i2c_algo_bit drm_buddy sha256_ssse3 e1000e sha1_ssse3 ttm nvme_core nvme_auth drm_display_helper rtsx_pci intel_ish_ipc cec intel_ishtp video wmi serio_raw wacom ip6_tables ip_tables fuse
CR2: 0000000000000070