BUG: kernel NULL pointer dereference, address: 0000000000000010
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 18 UID: 0 PID: 80722 Comm: kworker/u128:0 Tainted: G S      W  OE      6.11.6-200.fc40.x86_64 #1
Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
Hardware name: Dell Inc. Precision T7610/0NK70N, BIOS A18 09/11/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
Code: 07 52 9a cf 48 8b 3b 48 8d b3 e0 52 00 00 5b 5d 41 5c 41 5d 41 5e e9 40 a8 24 00 48 8b 47 38 4c 8b a0 38 01 00 00 48 8b 47 10 <45> 8b 6c 24 10 41 8b 74 24 0c 48 8b 40 68 4d 89 ee f3 4d 0f bc ed
RSP: 0018:ffff984a2ef2bd70 EFLAGS: 00010246
RAX: ffffffffc138c3c0 RBX: ffff8bb41f532000 RCX: 0000000000000000
RDX: ffff8b9514d8bf00 RSI: 0000000000000018 RDI: ffff8bb41f532000
RBP: ffff8b9514d8bf00 R08: 0000000000000018 R09: 0000000011000000
R10: 0000000000000000 R11: 0000000000000011 R12: 0000000000000000
R13: 0000000000000018 R14: ffffffffc15561a0 R15: ffff8b9514d8bf00
FS:  0000000000000000(0000) GS:ffff8bb36fb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000010 CR3: 0000003f6f42a001 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x179/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core mac80211 intel_rapl_msr intel_rapl_common sb_edac libarc4 binfmt_misc x86_pkg_temp_thermal snd_usb_audio intel_powerclamp cfg80211 coretemp snd_hda_codec_realtek snd_usbmidi_lib snd_hda_codec_generic snd_hda_codec_hdmi snd_ump kvm_intel snd_hda_scodec_component snd_rawmidi ses mc rfkill joydev snd_hda_intel enclosure kvm snd_intel_dspcfg dell_pc snd_intel_sdw_acpi pktcdvd snd_hda_codec dell_smbios dell_wmi_descriptor platform_profile snd_hda_core rapl dcdbas snd_hwdep snd_seq iTCO_wdt intel_pmc_bxt intel_cstate mei_hdcp mei_pxp mei_wdt iTCO_vendor_support dell_smm_hwmon snd_seq_device snd_pcm i2c_i801 mei_me snd_timer igb
 pcspkr intel_uncore e1000e snd i2c_smbus mei lpc_ich dca soundcore loop nfnetlink zram nouveau drm_ttm_helper ttm video gpu_sched i2c_algo_bit drm_gpuvm mpt3sas drm_exec mxm_wmi drm_display_helper crct10dif_pclmul crc32_pclmul crc32c_intel nvme polyval_clmulni raid_class polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 nvme_core sha1_ssse3 cec scsi_transport_sas nvme_auth wmi uas hid_microsoft usb_storage ff_memless ip6_tables ip_tables fuse
CR2: 0000000000000010

BUG: kernel NULL pointer dereference, address: 0000000000000010
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 UID: 0 PID: 95 Comm: kworker/u32:3 Tainted: G        W          6.11.3-200.fc40.x86_64 #1
Tainted: [W]=WARN
Hardware name: ASUS System Product Name/PRIME H610M-E D4, BIOS 3010 12/11/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
Code: 87 0c b4 c9 48 8b 3b 48 8d b3 e0 52 00 00 5b 5d 41 5c 41 5d 41 5e e9 40 68 0d 00 48 8b 47 38 4c 8b a0 38 01 00 00 48 8b 47 10 <45> 8b 6c 24 10 41 8b 74 24 0c 48 8b 40 68 4d 89 ee f3 4d 0f bc ed
RSP: 0018:ffffa312404a7d70 EFLAGS: 00010246
RAX: ffffffffc23273c0 RBX: ffff8d13d01ea000 RCX: 0000000000000000
RDX: ffff8d13cd7f3300 RSI: 0000000000000063 RDI: ffff8d13d01ea000
RBP: ffff8d13cd7f3300 R08: 0000000000000018 R09: 00000000ee441019
R10: 000000000000003b R11: 0000000000000011 R12: 0000000000000000
R13: 0000000000000063 R14: ffffffffc27231a0 R15: ffff8d13cd7f3300
FS:  0000000000000000(0000) GS:ffff8d172fc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000010 CR3: 000000002c42a000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? __smp_call_single_queue+0xc4/0x150
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_hdac_hda snd_soc_acpi_intel_match intel_rapl_msr soundwire_generic_allocation snd_soc_acpi intel_rapl_common soundwire_bus intel_uncore_frequency intel_uncore_frequency_common intel_tcc_cooling snd_soc_avs rtw88_8821cu rtw88_8821c snd_soc_hda_codec snd_hda_ext_core rtw88_usb snd_soc_core rtw88_core x86_pkg_temp_thermal intel_powerclamp snd_hda_codec_realtek snd_compress coretemp snd_hda_codec_generic ac97_bus kvm_intel snd_hda_codec_hdmi
 snd_hda_scodec_component snd_pcm_dmaengine mac80211 snd_hda_intel btusb snd_intel_dspcfg spi_nor ee1004 kvm snd_intel_sdw_acpi btrtl snd_hda_codec btintel snd_hda_core iTCO_wdt libarc4 btbcm intel_pmc_bxt mtd snd_hwdep iTCO_vendor_support btmtk snd_seq rapl snd_seq_device eeepc_wmi cfg80211 bluetooth asus_wmi intel_cstate snd_pcm sparse_keymap r8169 platform_profile snd_timer intel_uncore rfkill wmi_bmof pcspkr snd realtek mei_me i2c_i801 vfat soundcore spi_intel_pci i2c_smbus mei spi_intel idma64 fat intel_pmc_core intel_vsec pmt_telemetry joydev acpi_tad pmt_class acpi_pad loop nfnetlink zram amdgpu amdxcp i2c_algo_bit crct10dif_pclmul drm_ttm_helper crc32_pclmul ttm crc32c_intel polyval_clmulni polyval_generic drm_exec nvme gpu_sched drm_suballoc_helper ghash_clmulni_intel drm_buddy drm_display_helper sha512_ssse3 nvme_core cec sha256_ssse3 sha1_ssse3 nvme_auth vmd video wmi pinctrl_alderlake ip6_tables ip_tables fuse
CR2: 0000000000000010

BUG: kernel NULL pointer dereference, address: 0000000000000010
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 UID: 0 PID: 4221 Comm: kworker/u24:10 Tainted: G        W         -------  ---  6.11.0-63.fc41.x86_64 #1
Tainted: [W]=WARN
Hardware name: Dell Inc. Inspiron 570                 /, BIOS A06 03/29/2012
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
Code: 07 11 c3 ea 48 8b 3b 48 8d b3 e0 52 00 00 5b 5d 41 5c 41 5d 41 5e e9 c0 f6 dd ff 48 8b 47 38 4c 8b a0 38 01 00 00 48 8b 47 10 <45> 8b 6c 24 10 41 8b 74 24 0c 48 8b 40 68 4d 89 ee f3 4d 0f bc ed
RSP: 0018:ffff9b9386a9fd70 EFLAGS: 00010246
RAX: ffffffffc22173c0 RBX: ffff8fd3c3db2000 RCX: 0000000000000000
RDX: ffff8fd3c8185d00 RSI: 000000000000001b RDI: ffff8fd3c3db2000
RBP: ffff8fd3c8185d00 R08: 0000000000000018 R09: 0000000014000147
R10: 000000000000006a R11: 0000000000000011 R12: 0000000000000000
R13: 000000000000001b R14: ffffffffc22921a0 R15: ffff8fd3c8185d00
FS:  0000000000000000(0000) GS:ffff8fd5d3e80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000010 CR3: 0000000143d94000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x179/0x330
 worker_thread+0x252/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc rtw88_8821cu rtw88_8821c snd_hda_codec_realtek rtw88_usb snd_hda_codec_generic snd_hda_codec_hdmi rtw88_core snd_hda_scodec_component snd_hda_intel binfmt_misc snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec edac_mce_amd mac80211 snd_hda_core kvm_amd snd_hwdep ccp snd_seq snd_seq_device libarc4 kvm snd_pcm cfg80211 snd_timer snd at24 dell_pc dell_smbios dell_wmi_descriptor platform_profile dcdbas dell_smm_hwmon soundcore rfkill k10temp acpi_cpufreq pcspkr broadcom bcm_phy_ptp bcm_phy_lib i2c_piix4 i2c_smbus tg3 pktcdvd joydev loop nfnetlink zram amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon uas drm_ttm_helper usb_storage ttm video wmi i2c_algo_bit drm_suballoc_helper drm_display_helper serio_raw
 sp5100_tco cec ip6_tables ip_tables fuse
CR2: 0000000000000010

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 93 Comm: kworker/u48:2 Not tainted 6.10.7-200.fc40.x86_64 #1
Hardware name: Hewlett-Packard HP 255 15.6 inch G10 Notebook PC/8BA5, BIOS F.07 03/13/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb0f940473d38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb0f940473db8 RCX: 0000000000000000
RDX: ffff938456230900 RSI: ffffb0f940473de8 RDI: ffffb0f940473de8
RBP: 00000000000000c8 R08: ffff93860b280018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffb0f940473de8
R13: ffff938456232000 R14: ffff93860b280038 R15: ffff93844d2b0000
FS:  0000000000000000(0000) GS:ffff93874e500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000026f428000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? ieee802_11_parse_elems_full+0x38a/0x530 [mac80211]
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0xfbef5
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x179/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy rfcomm snd_hrtimer rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr snd_ctl_led bnep sunrpc snd_acp_legacy_mach snd_acp_mach snd_soc_nau8821 rtw89_8852be snd_acp3x_pdm_dma snd_soc_dmic snd_acp3x_rn rtw89_8852b snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir rtw89_pci snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp rtw89_core snd_sof snd_hda_codec_realtek snd_sof_utils snd_pci_ps snd_amd_sdw_acpi soundwire_amd snd_hda_codec_generic soundwire_generic_allocation soundwire_bus snd_hda_scodec_component snd_hda_codec_hdmi snd_soc_core snd_hda_intel mac80211 intel_rapl_msr snd_intel_dspcfg uvcvideo binfmt_misc snd_compress amd_atl ac97_bus snd_intel_sdw_acpi uvc videobuf2_vmalloc snd_pcm_dmaengine
 intel_rapl_common snd_hda_codec btusb videobuf2_memops videobuf2_v4l2 btrtl snd_rpl_pci_acp6x snd_acp_pci videobuf2_common edac_mce_amd btintel snd_acp_legacy_common snd_hda_core btbcm snd_hwdep uas snd_pci_acp6x btmtk videodev kvm_amd vfat libarc4 usb_storage fat bluetooth snd_seq mc snd_seq_device kvm cfg80211 snd_pci_acp5x snd_pcm snd_rn_pci_acp3x hp_wmi snd_acp_config rapl sparse_keymap snd_timer platform_profile snd snd_soc_acpi snd_pci_acp3x wmi_bmof rfkill soundcore pcspkr k10temp i2c_piix4 acpi_tad wireless_hotkey amd_pmc joydev loop nfnetlink zram amdgpu crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 amdxcp i2c_algo_bit sha256_ssse3 drm_ttm_helper ttm sha1_ssse3 drm_exec gpu_sched nvme drm_suballoc_helper drm_buddy drm_display_helper nvme_core ccp video hid_multitouch cec sp5100_tco nvme_auth i2c_hid_acpi wmi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000101
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 56 Comm: kworker/u8:3 Not tainted 6.10.8-200.fc40.x86_64 #1
Hardware name: GPU Company GWTC116-2/GPU Company, BIOS LC-BI-11.6-Y116GRX510-671-E 06/27/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x12/0x70
Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <66> f7 86 01 01 00 00 80 01 75 17 e8 1e 4c 09 00 48 89 ea 48 89 de
RSP: 0000:ffffb18d4021fd58 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8def9cd9f2e0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff8def9cd9f2e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000011 R12: 0000000000002000
R13: 0000000000000297 R14: ffffffffc18451a0 R15: ffff8def8d752a00
FS:  0000000000000000(0000) GS:ffff8defffd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000101 CR3: 000000010747e000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? enqueue_entity+0xd6/0x520
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x70
 queue_work_on+0x65/0x70
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uhid bnep snd_sof_pci_intel_apl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_sof_intel_hda_mlink snd_sof_intel_hda intel_pmc_bxt intel_telemetry_pltdrv intel_punit_ipc intel_telemetry_core x86_pkg_temp_thermal snd_sof_pci snd_sof_xtensa_dsp rtw88_8723du(+) intel_powerclamp mei_pxp coretemp mei_hdcp snd_sof rtw88_8723d rtw88_8723x snd_sof_utils soundwire_generic_allocation kvm_intel soundwire_bus rtw88_usb kvm rtw88_core snd_soc_avs btusb intel_rapl_msr uvcvideo btrtl snd_soc_hda_codec btintel uvc mac80211 snd_soc_skl videobuf2_vmalloc btbcm btmtk rapl libarc4 snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match videobuf2_memops cfg80211 rtsx_usb_ms intel_cstate memstick pcspkr snd_hda_codec_hdmi videobuf2_v4l2 snd_soc_acpi videobuf2_common sunrpc snd_hda_codec_realtek bluetooth snd_hda_codec_generic i2c_i801 snd_soc_core snd_hda_scodec_component videodev snd_compress ac97_bus snd_pcm_dmaengine i2c_smbus
 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep rfkill mc snd_seq mei_me mei snd_seq_device mxc4005 idma64 snd_pcm processor_thermal_device_pci_legacy processor_thermal_device processor_thermal_wt_hint processor_thermal_rfim processor_thermal_rapl intel_rapl_common processor_thermal_wt_req snd_timer processor_thermal_power_floor processor_thermal_mbox snd industrialio_triggered_buffer intel_soc_dts_iosf soundcore kfifo_buf industrialio goodix_ts binfmt_misc intel_pmc_core int3400_thermal intel_vsec intel_hid pmt_telemetry int3403_thermal int340x_thermal_zone soc_button_array sparse_keymap acpi_thermal_rel vfat pmt_class fat joydev loop nfnetlink zram i915 mmc_block crct10dif_pclmul crc32_pclmul i2c_algo_bit crc32c_intel drm_buddy ttm polyval_generic drm_display_helper sdhci_pci rtsx_usb_sdmmc ghash_clmulni_intel hid_multitouch cqhci sha512_ssse3 sdhci mmc_core sha256_ssse3 wdat_wdt sha1_ssse3 spi_pxa2xx_platform dw_dmac rtsx_usb cec i2c_hid_acpi i2c_hid video wmi
 pinctrl_geminilake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000101

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 12 Comm: kworker/u64:1 Not tainted 6.10.4-200.fc40.x86_64 #1
Hardware name: Micro-Star International Co., Ltd MS-7C02/B450 TOMAHAWK MAX (MS-7C02), BIOS 3.70 06/09/2020
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa7e0c012fd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa7e0c012fdb8 RCX: 0000000000000000
RDX: ffff88d9cb968900 RSI: ffffa7e0c012fde8 RDI: ffffa7e0c012fde8
RBP: 00000000000000c8 R08: ffff88d9f5b50018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffa7e0c012fde8
R13: ffff88d9cb96a000 R14: ffff88d9f5b50038 R15: ffff88d9c3e7c300
FS:  0000000000000000(0000) GS:ffff88dcce900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000010e42c000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? srso_return_thunk+0x5/0x5f
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x179/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb rtw88_core mac80211 libarc4 cfg80211 snd_hda_codec_realtek snd_hda_codec_generic btusb snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel btrtl snd_intel_dspcfg btintel snd_intel_sdw_acpi btbcm snd_hda_codec amd_atl btmtk snd_hda_core bluetooth snd_hwdep snd_seq intel_rapl_msr intel_rapl_common joydev snd_seq_device snd_pcm snd_timer edac_mce_amd snd rfkill kvm_amd r8169 soundcore kvm realtek i2c_piix4 wmi_bmof rapl pcspkr k10temp gpio_amdpt gpio_generic acpi_cpufreq loop nfnetlink zram uas usb_storage amdgpu video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul crc32c_intel drm_exec polyval_clmulni gpu_sched polyval_generic drm_suballoc_helper drm_buddy drm_display_helper ghash_clmulni_intel sha512_ssse3 sha256_ssse3 ccp sha1_ssse3 cec sp5100_tco wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000101
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 34 Comm: kworker/u8:2 Tainted: G           OE      6.10.4-200.fc40.x86_64 #1
Hardware name: Multilaser Industrial MLSH0R/PC270, BIOS GM116E_W.03.0x01 04/13/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x12/0x70
Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <66> f7 86 01 01 00 00 80 01 75 17 e8 5e 4b 09 00 48 89 ea 48 89 de
RSP: 0018:ffffa17bc0177d58 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff89cadf12f2e0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff89cadf12f2e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000011 R12: 0000000000002000
R13: 0000000000000297 R14: ffffffffc1acf1a0 R15: ffff89cacd9b6400
FS:  0000000000000000(0000) GS:ffff89cb3bd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000101 CR3: 0000000105d22000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x70
 queue_work_on+0x65/0x70
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8723du(+) snd_sof_pci rtw88_8723d snd_sof_xtensa_dsp rtw88_8723x vboxnetadp(OE) snd_sof intel_pmc_bxt vboxnetflt(OE) intel_telemetry_pltdrv intel_punit_ipc intel_telemetry_core uvcvideo rtw88_usb snd_sof_utils soundwire_generic_allocation soundwire_bus rtw88_core uvc vboxdrv(OE) x86_pkg_temp_thermal snd_soc_avs videobuf2_vmalloc intel_powerclamp videobuf2_memops snd_soc_hda_codec videobuf2_v4l2 mei_pxp videobuf2_common mei_hdcp videodev btusb snd_soc_skl coretemp qrtr btrtl mac80211 snd_soc_hdac_hda btintel kvm_intel libarc4 intel_rapl_msr kvm snd_hda_ext_core mc btbcm cfg80211 btmtk snd_soc_sst_ipc bluetooth snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi rapl snd_hda_intel intel_cstate snd_intel_dspcfg snd_soc_es8316 pcspkr snd_intel_sdw_acpi i2c_i801 i2c_smbus snd_soc_core snd_hda_codec idma64 snd_compress snd_hda_core mei_me mei ac97_bus snd_hwdep processor_thermal_device_pci_legacy processor_thermal_device snd_pcm_dmaengine processor_thermal_wt_hint
 processor_thermal_rfim processor_thermal_rapl intel_rapl_common processor_thermal_wt_req processor_thermal_power_floor processor_thermal_mbox snd_seq int340x_thermal_zone intel_soc_dts_iosf snd_seq_device snd_pcm nxp_nci_i2c nxp_nci nci rfkill_gpio snd_timer nfc sunrpc rfkill snd soundcore intel_pmc_core soc_button_array intel_vsec intel_hid int3400_thermal pmt_telemetry acpi_thermal_rel pmt_class sparse_keymap binfmt_misc joydev vfat fat loop nfnetlink zram i915 mmc_block crct10dif_pclmul crc32_pclmul i2c_algo_bit crc32c_intel drm_buddy ttm polyval_generic drm_display_helper ghash_clmulni_intel hid_multitouch sha512_ssse3 sdhci_pci cqhci sha256_ssse3 sdhci mmc_core sha1_ssse3 wdat_wdt spi_pxa2xx_platform dw_dmac cec i2c_hid_acpi i2c_hid video wmi pinctrl_geminilake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000101

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 20ba1e067 P4D 20ba1e067 PUD 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 57011 Comm: kworker/u48:7 Tainted: P           O       6.10.4-200.fc40.x86_64 #1
Hardware name: To Be Filled By O.E.M. B450 Steel Legend/B450 Steel Legend, BIOS P4.30 02/25/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb01c80f37d38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb01c80f37db8 RCX: 0000000000000000
RDX: ffff9aaf70b18900 RSI: ffffb01c80f37de8 RDI: ffffb01c80f37de8
RBP: 00000000000000c8 R08: ffff9ab1813c0018 R09: 00000000000001f8
R10: 0000000000000003 R11: 0000000000000002 R12: ffffb01c80f37de8
R13: ffff9aaf70b1a000 R14: ffff9ab1813c0038 R15: ffff9aaf03ac4e00
FS:  0000000000000000(0000) GS:ffff9ab60e700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000002c8346000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0xfbef5
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x179/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core mac80211 libarc4 cfg80211 ufs hfsplus hfs minix msdos jfs nls_ucs2_utils xfs tun uinput rfcomm snd_seq_dummy snd_hrtimer xt_nat xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype br_netfilter bridge stp llc overlay ip6t_REJECT ipt_REJECT xt_multiport xt_cgroup xt_mark xt_owner nft_compat nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nvidia_drm(PO) nvidia_modeset(PO) ip_set nvidia_uvm(PO) nf_tables qrtr bnep nvidia(PO) sunrpc binfmt_misc vfat fat btusb btrtl btintel btbcm btmtk snd_hda_codec_realtek bluetooth snd_hda_codec_generic uvcvideo snd_hda_scodec_component snd_hda_codec_hdmi uvc videobuf2_vmalloc rfkill intel_rapl_msr videobuf2_memops snd_hda_intel snd_usb_audio amd_atl snd_intel_dspcfg videobuf2_v4l2 snd_intel_sdw_acpi intel_rapl_common videobuf2_common
 snd_hda_codec snd_usbmidi_lib edac_mce_amd snd_ump snd_hda_core videodev uas snd_hwdep snd_rawmidi snd_seq kvm_amd snd_seq_device mc usb_storage kvm snd_pcm rapl wmi_bmof pcspkr snd_timer r8169 k10temp snd realtek i2c_piix4 soundcore joydev gpio_amdpt gpio_generic loop nfnetlink zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec crct10dif_pclmul gpu_sched crc32_pclmul crc32c_intel drm_suballoc_helper polyval_clmulni drm_buddy polyval_generic nvme ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 nvme_core ccp sha1_ssse3 cec sp5100_tco nvme_auth video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000100
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 8 PID: 844 Comm: kworker/u32:5 Tainted: G           O       6.5.6-300.fc39.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ZenBook UX425UA_UM425UA/UX425UA, BIOS UX425UA.301 04/01/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x1c/0x440
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 57 41 56 41 55 41 89 fd 41 54 49 89 f4 55 53 48 89 d3 48 83 ec 08 <f7> 86 00 01 00 00 00 80 01 00 0f 85 e0 02 00 00 e8 7f ac 08 00 45
RSP: 0018:ffffa4d001c77d58 EFLAGS: 00010092
RAX: 0000000000000297 RBX: ffff8e040a69eaa0 RCX: 0000000000000000
RDX: ffff8e040a69eaa0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: 00000000000000c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000000000
R13: 0000000000002000 R14: ffffffffc248e320 R15: ffff8e034ebcf000
FS:  0000000000000000(0000) GS:ffff8e063e800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000100 CR3: 00000002df222000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x1c/0x440
 ? srso_return_thunk+0x5/0x10
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput rfcomm bnep rtw88_8723du rtw88_8723d rtw88_usb rtw88_core mac80211 btusb btrtl btbcm libarc4 btintel btmtk cfg80211 bluetooth snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 vboxnetadp(O) vboxnetflt(O) ip_set vboxdrv(O) qrtr tun nf_tables nfnetlink snd_ctl_led binfmt_misc vfat fat snd_acp3x_pdm_dma snd_soc_dmic snd_acp3x_rn snd_sof_amd_rembrandt snd_sof_amd_renoir snd_sof_amd_acp snd_sof_pci snd_sof_xtensa_dsp intel_rapl_msr snd_hda_codec_realtek intel_rapl_common snd_sof snd_hda_codec_generic edac_mce_amd snd_hda_codec_hdmi uvcvideo snd_sof_utils kvm_amd snd_hda_intel uvc snd_intel_dspcfg videobuf2_vmalloc snd_intel_sdw_acpi snd_soc_core videobuf2_memops snd_hda_codec videobuf2_v4l2 snd_compress asus_nb_wmi ac97_bus videobuf2_common snd_pcm_dmaengine kvm snd_hda_core asus_wmi
 videodev snd_hwdep snd_pci_ps snd_rpl_pci_acp6x ledtrig_audio snd_pci_acp6x snd_seq mc snd_seq_device sparse_keymap platform_profile snd_pci_acp5x irqbypass snd_pcm rfkill rapl snd_timer pcspkr snd_rn_pci_acp3x wmi_bmof snd cm32181 snd_acp_config k10temp i2c_piix4 snd_soc_acpi soundcore snd_pci_acp3x industrialio amd_pmc joydev loop zram ax88796b amdgpu amdxcp iommu_v2 drm_buddy gpu_sched i2c_algo_bit drm_suballoc_helper rtsx_pci_sdmmc crct10dif_pclmul crc32_pclmul drm_display_helper crc32c_intel mmc_core polyval_clmulni asix polyval_generic usbnet cec phylink video ucsi_acpi drm_ttm_helper ghash_clmulni_intel hid_multitouch sha512_ssse3 typec_ucsi ccp mii ttm rtsx_pci sp5100_tco typec wmi i2c_hid_acpi i2c_hid serio_raw sunrpc be2iscsi bnx2i cnic uio cxgb4i cxgb4 tls cxgb3i cxgb3 mdio libcxgbi libcxgb qla4xxx iscsi_boot_sysfs iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi ip6_tables ip_tables fuse
CR2: 0000000000000100

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 11 Comm: kworker/u48:1 Not tainted 6.9.6-200.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B450 AORUS ELITE/B450 AORUS ELITE, BIOS F51 12/18/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffae1c4011fd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffae1c4011fdb8 RCX: 0000000000000000
RDX: ffff97f4a7f78900 RSI: ffffae1c4011fde8 RDI: ffffae1c4011fde8
RBP: 00000000000000c8 R08: ffff97f4a9ce0018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffae1c4011fde8
R13: ffff97f4a7f79fe0 R14: ffff97f4a9ce0038 R15: ffff97f489e34600
FS:  0000000000000000(0000) GS:ffff97fb7ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000005ba428000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? dev_vprintk_emit+0x181/0x1b0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb snd_hda_codec_realtek(+) rtw88_core ucsi_ccg(+) snd_hda_codec_generic typec_ucsi snd_hda_codec_hdmi snd_hda_scodec_component intel_rapl_msr typec uvcvideo(+) mac80211 snd_hda_intel snd_usb_audio(+) snd_intel_dspcfg snd_intel_sdw_acpi uvc amd_atl snd_hda_codec intel_rapl_common gspca_vc032x snd_usbmidi_lib gspca_main libarc4 snd_ump snd_hda_core videobuf2_vmalloc edac_mce_amd snd_rawmidi videobuf2_memops snd_hwdep snd_seq videobuf2_v4l2 snd_seq_device rapl k10temp i2c_piix4 videobuf2_common gigabyte_wmi wmi_bmof pcspkr cfg80211 snd_pcm acpi_cpufreq r8169 videodev snd_timer snd joydev gpio_amdpt rfkill mc soundcore i2c_nvidia_gpu realtek gpio_generic squashfs loop nfnetlink zram nouveau drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul video crc32c_intel polyval_clmulni gpu_sched polyval_generic i2c_algo_bit drm_gpuvm drm_exec mxm_wmi ghash_clmulni_intel sha512_ssse3 drm_display_helper sha256_ssse3 ccp sha1_ssse3 cec sp5100_tco wmi ip6_tables ip_tables
 fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 143 Comm: kworker/u48:4 Not tainted 6.9.6-200.fc40.x86_64 #1
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./A520M-HDV, BIOS P1.90 08/09/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffbdfb405e7d38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffbdfb405e7db8 RCX: 0000000000000000
RDX: ffff9c332a9a8900 RSI: ffffbdfb405e7de8 RDI: ffffbdfb405e7de8
RBP: 00000000000000c8 R08: ffff9c332abf0018 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000002 R12: ffffbdfb405e7de8
R13: ffff9c332a9a9fe0 R14: ffff9c332abf0038 R15: ffff9c33002e1500
FS:  0000000000000000(0000) GS:ffff9c362e400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000112e54000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0xfbef5
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb rtw88_core snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi mac80211 snd_hda_codec snd_hda_core intel_rapl_msr snd_hwdep snd_seq libarc4 intel_rapl_common snd_seq_device snd_pcm cfg80211 joydev rfkill snd_timer snd soundcore edac_mce_amd kvm_amd k10temp kvm rapl i2c_piix4 r8169 realtek gpio_amdpt gpio_generic pcspkr wmi_bmof squashfs loop nfnetlink zram amdgpu amdxcp crct10dif_pclmul i2c_algo_bit crc32_pclmul drm_ttm_helper crc32c_intel polyval_clmulni ttm polyval_generic drm_exec gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 ccp sha1_ssse3 cec sp5100_tco video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000101
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.9.6-200.fc40.x86_64 #1
Hardware name: GPU Company GWTC116-2/GPU Company, BIOS LC-BI-11.6-Y116GRX510-671-E 06/27/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x12/0x70
Code: 8b 0c 24 e9 90 fd ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <66> f7 86 01 01 00 00 80 01 75 17 e8 5e 57 09 00 48 89 ea 48 89 de
RSP: 0018:ffffbc8a80093d70 EFLAGS: 00010096
RAX: 0000000000000297 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff9362de19f2c0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff9362de19f2c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000011 R12: 0000000000002000
R13: 0000000000000018 R14: ffffffffc17b1320 R15: ffff9362c4fa1000
FS:  0000000000000000(0000) GS:ffff93633bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000101 CR3: 0000000104a22000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? ttwu_queue_wakelist+0x10c/0x190
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x70
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: intel_pmc_bxt qrtr uhid intel_telemetry_pltdrv snd_soc_sst_ipc intel_punit_ipc snd_soc_sst_dsp rtw88_8723du(+) snd_soc_acpi_intel_match rtw88_8723d bnep snd_soc_acpi intel_telemetry_core rtw88_usb x86_pkg_temp_thermal rtw88_core intel_powerclamp coretemp snd_soc_core mac80211 snd_hda_codec_hdmi snd_compress ac97_bus btusb kvm_intel snd_hda_codec_realtek snd_pcm_dmaengine snd_hda_codec_generic snd_hda_scodec_component btrtl snd_hda_intel btintel btbcm libarc4 snd_intel_dspcfg btmtk snd_intel_sdw_acpi mei_hdcp mei_pxp uvcvideo kvm intel_rapl_msr uvc videobuf2_vmalloc snd_hda_codec videobuf2_memops videobuf2_v4l2 bluetooth cfg80211 videobuf2_common snd_hda_core rtsx_usb_ms rapl videodev memstick intel_cstate snd_hwdep pcspkr i2c_i801 snd_seq i2c_smbus mc rfkill snd_seq_device mei_me snd_pcm processor_thermal_device_pci_legacy processor_thermal_device processor_thermal_wt_hint snd_timer processor_thermal_rfim processor_thermal_rapl snd intel_rapl_common idma64 sunrpc mei
 processor_thermal_wt_req processor_thermal_power_floor soundcore processor_thermal_mbox intel_soc_dts_iosf mxc4005 industrialio_triggered_buffer kfifo_buf goodix_ts industrialio intel_pmc_core int3403_thermal binfmt_misc int340x_thermal_zone soc_button_array intel_vsec int3400_thermal pmt_telemetry acpi_thermal_rel intel_hid pmt_class vfat sparse_keymap fat joydev loop nfnetlink zram i915 mmc_block crct10dif_pclmul crc32_pclmul crc32c_intel polyval_generic i2c_algo_bit drm_buddy ghash_clmulni_intel sdhci_pci ttm hid_multitouch rtsx_usb_sdmmc sha512_ssse3 cqhci sha256_ssse3 drm_display_helper sdhci mmc_core sha1_ssse3 wdat_wdt rtsx_usb i2c_hid_acpi spi_pxa2xx_platform dw_dmac cec i2c_hid video wmi pinctrl_geminilake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000101

BUG: kernel NULL pointer dereference, address: 0000000000000101
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 119 Comm: kworker/u32:4 Tainted: G           O       6.9.5-200.fc40.x86_64 #1
Hardware name: Hewlett-Packard HP Z230 Tower Workstation/1905, BIOS L51 v01.63 04/22/2020
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw_usb]
RIP: 0010:__queue_work+0x12/0x70
Code: 8b 0c 24 e9 90 fd ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <66> f7 86 01 01 00 00 80 01 75 17 e8 5e 57 09 00 48 89 ea 48 89 de
RSP: 0018:ffffa83b80457d60 EFLAGS: 00010096
RAX: 0000000000000297 RBX: 0000000000000000 RCX: ffffa83b80457d58
RDX: ffff9bbdb15a72c0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff9bbdb15a72c0 R08: 00000000000000bd R09: 0000000000000004
R10: 0000000000000000 R11: 0000000000000011 R12: 0000000000002000
R13: 0000000000000018 R14: 0000000000000000 R15: ffff9bbc4c842800
FS:  0000000000000000(0000) GS:ffff9bbf6e980000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000101 CR3: 0000000425428005 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x70
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x140/0x250 [rtw_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: snd_seq_midi snd_seq_midi_event snd_usb_audio snd_usbmidi_lib snd_ump snd_rawmidi mc rndis_host cdc_ether usbnet mii uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr rtw_8821au(O) rtw_8821a(O) sunrpc rtw_usb(O) rtw_core(O) binfmt_misc snd_hda_codec_realtek snd_hda_codec_generic intel_rapl_msr snd_hda_scodec_component snd_hda_codec_hdmi intel_rapl_common x86_pkg_temp_thermal intel_powerclamp snd_hda_intel coretemp snd_intel_dspcfg vfat snd_intel_sdw_acpi kvm_intel mei_wdt fat snd_hda_codec mac80211 iTCO_wdt mei_hdcp at24 mei_pxp intel_pmc_bxt snd_hda_core iTCO_vendor_support kvm snd_hwdep libarc4 pktcdvd cfg80211 snd_seq rapl snd_seq_device hp_wmi intel_cstate snd_pcm sparse_keymap wmi_bmof platform_profile intel_uncore rfkill i2c_i801 pcspkr mei_me i2c_smbus
 snd_timer e1000e snd mei lpc_ich soundcore joydev tpm_infineon loop nfnetlink zram i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic i2c_algo_bit drm_buddy video ghash_clmulni_intel ttm sha512_ssse3 sha256_ssse3 drm_display_helper sha1_ssse3 serio_raw cec wmi ip6_tables ip_tables fuse
CR2: 0000000000000101

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 189098 Comm: kworker/u64:1 Not tainted 6.8.9-200.fc39.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7D53/MPG X570S EDGE MAX WIFI (MS-7D53), BIOS 1.40 09/01/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa5d0da1bfd30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa5d0da1bfdb0 RCX: 0000000000000000
RDX: ffff960d522d8900 RSI: ffffa5d0da1bfde0 RDI: ffffa5d0da1bfde0
RBP: 00000000000000c8 R08: ffff9607fb800018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffa5d0da1bfde0
R13: ffff960d522d9fc0 R14: ffff9607fb800038 R15: ffff960d0ef6ba00
FS:  0000000000000000(0000) GS:ffff960dbe180000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000010ec3e000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4f0
 ? srso_return_thunk+0x5/0x5f
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core vhost_net vhost vhost_iotlb tap xt_CHECKSUM ipt_REJECT nf_nat_tftp nf_conntrack_tftp uinput rfcomm snd_seq_dummy snd_hrtimer xt_nat veth xt_conntrack xt_MASQUERADE nf_conntrack_netlink xt_addrtype nft_compat br_netfilter bridge stp llc nls_utf8 cifs cifs_arc4 nls_ucs2_utils cifs_md4 dns_resolver netfs tun overlay nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc binfmt_misc vfat fat iwlmvm mac80211 snd_hda_codec_hdmi snd_hda_intel uvcvideo libarc4 uvc videobuf2_vmalloc videobuf2_memops intel_rapl_msr snd_intel_dspcfg videobuf2_v4l2 snd_usb_audio intel_rapl_common snd_intel_sdw_acpi snd_hda_codec btusb edac_mce_amd videobuf2_common snd_usbmidi_lib btrtl iwlwifi snd_hda_core snd_ump btintel videodev snd_rawmidi snd_hwdep kvm_amd
 snd_seq btbcm btmtk snd_seq_device joydev mc kvm cfg80211 bluetooth snd_pcm irqbypass snd_timer rapl wmi_bmof pcspkr acpi_cpufreq snd rfkill soundcore i2c_piix4 k10temp loop zram hid_logitech_hidpp hid_logitech_dj amdgpu video amdxcp i2c_algo_bit drm_ttm_helper crct10dif_pclmul ttm crc32_pclmul crc32c_intel polyval_clmulni drm_exec polyval_generic gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel drm_display_helper sha512_ssse3 r8169 sha256_ssse3 cec ccp sha1_ssse3 sp5100_tco realtek wmi fuse i2c_dev
CR2: 0000000000000004

WARNING: CPU: 2 PID: 30 at drivers/net/wireless/realtek/rtw88/pci.c:1277 rtw_dbi_read8.constprop.0+0xa4/0xc0 [rtw88_pci]
 snd_hda_codec kvm videobuf2_vmalloc videobuf2_memops binfmt_misc btusb videobuf2_v4l2 snd_hda_core videobuf2_common snd_hwdep btrtl videodev snd_seq btbcm irqbypass btintel iTCO_wdt snd_seq_device intel_pmc_bxt btmtk rapl libarc4 mei_pxp snd_pcm mei_hdcp iTCO_vendor_support mc bluetooth intel_cstate vfat cfg80211 snd_timer intel_uncore fat snd intel_wmi_thunderbolt wmi_bmof i2c_i801 pcspkr ideapad_laptop mei_me soundcore i2c_smbus mei sparse_keymap platform_profile idma64 intel_pch_thermal rfkill int3400_thermal acpi_tad acpi_pad acpi_thermal_rel joydev loop zram dm_crypt i915 i2c_algo_bit drm_buddy ttm hid_rmi rmi_core drm_display_helper crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 cec i2c_hid_acpi i2c_hid video wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse
CPU: 2 PID: 30 Comm: ksoftirqd/2 Tainted: G        W          6.5.6-300.fc39.x86_64 #1
Hardware name: LENOVO 81MV/LNVNB161216, BIOS ASCN29WW 03/26/2019
RIP: 0010:rtw_dbi_read8.constprop.0+0xa4/0xc0 [rtw88_pci]
Code: 00 48 8b 40 58 ff d0 0f 1f 00 41 88 04 24 31 c0 5b 5d 41 5c c3 cc cc cc cc be 19 07 00 00 48 c7 c7 d0 5b 49 c1 e8 3c 2a c8 de <0f> 0b b8 fb ff ff ff 5b 5d 41 5c c3 cc cc cc cc 66 66 2e 0f 1f 84
RSP: 0018:ffff9ed9801afd60 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027
R10: 0000000000000003 R11: ffffffffa2345d28 R12: ffff9ed9801afd87
 ? exc_invalid_op+0x17/0x70
 ? __pfx_smpboot_thread_fn+0x10/0x10
 run_ksoftirqd+0x2c/0x40
 smpboot_thread_fn+0xd9/0x1d0
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 snd_hda_codec kvm videobuf2_vmalloc videobuf2_memops binfmt_misc btusb videobuf2_v4l2 snd_hda_core videobuf2_common snd_hwdep btrtl videodev snd_seq btbcm irqbypass btintel iTCO_wdt snd_seq_device intel_pmc_bxt btmtk rapl libarc4 mei_pxp snd_pcm mei_hdcp iTCO_vendor_support mc bluetooth intel_cstate vfat cfg80211 snd_timer intel_uncore fat snd intel_wmi_thunderbolt wmi_bmof i2c_i801 pcspkr ideapad_laptop mei_me soundcore i2c_smbus mei sparse_keymap platform_profile idma64 intel_pch_thermal rfkill int3400_thermal acpi_tad acpi_pad acpi_thermal_rel joydev loop zram dm_crypt i915 i2c_algo_bit drm_buddy ttm hid_rmi rmi_core drm_display_helper crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 cec i2c_hid_acpi i2c_hid video wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse
CPU: 2 PID: 30 Comm: ksoftirqd/2 Tainted: G        W          6.5.6-300.fc39.x86_64 #1
Hardware name: LENOVO 81MV/LNVNB161216, BIOS ASCN29WW 03/26/2019
RIP: 0010:rtw_dbi_read8.constprop.0+0xa4/0xc0 [rtw88_pci]
R13: ffff92f4068b7818 R14: 0000000100066a70 R15: ffff92f4068b7818
 ? __warn+0x81/0x130
 rtw_pci_napi_poll+0x13d/0x180 [rtw88_pci]
 ? __pfx_smpboot_thread_fn+0x10/0x10
 run_ksoftirqd+0x2c/0x40
 smpboot_thread_fn+0xd9/0x1d0
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>

BUG: kernel NULL pointer dereference, address: 0000000000000100
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 101 Comm: kworker/u64:4 Not tainted 6.6.9-200.fc39.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B450M DS3H/B450M DS3H-CF, BIOS F62 01/24/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x12/0x80
Code: 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <f7> 86 00 01 00 00 00 80 01 00 75 17 e8 0d d5 08 00 48 89 ea 48 89
RSP: 0018:ffffc90000477d68 EFLAGS: 00010096
RAX: 0000000000000297 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88811071ea60 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff88811071ea60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000002000
R13: 0000000000000018 R14: ffffffffc187f1a0 R15: ffff88810a0bf400
FS:  0000000000000000(0000) GS:ffff888236ac0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000100 CR3: 00000001024cc000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __pick_eevdf+0x16c/0x180
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x80
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c intel_rapl_msr vfat snd_hda_codec_realtek(+) rtw88_usb fat intel_rapl_common snd_hda_codec_generic ledtrig_audio rtw88_core snd_hda_codec_hdmi edac_mce_amd kvm_amd snd_hda_intel mac80211 snd_intel_dspcfg snd_intel_sdw_acpi kvm snd_hda_codec btusb irqbypass snd_hda_core btrtl snd_hwdep btintel snd_seq libarc4 snd_seq_device btbcm btmtk rapl gigabyte_wmi cfg80211 snd_pcm bluetooth pcspkr wmi_bmof acpi_cpufreq k10temp snd_timer rfkill i2c_piix4 snd soundcore gpio_amdpt joydev gpio_generic loop zram amdgpu hid_logitech_hidpp r8169 crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit polyval_clmulni drm_ttm_helper polyval_generic ttm drm_exec drm_suballoc_helper ghash_clmulni_intel amdxcp sha512_ssse3 drm_buddy gpu_sched sha256_ssse3 drm_display_helper sha1_ssse3 ccp cec sp5100_tco video wmi hid_logitech_dj ip6_tables ip_tables fuse
CR2: 0000000000000100

BUG: kernel NULL pointer dereference, address: 0000000000000100
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 34887 Comm: kworker/u8:11 Tainted: P           OE      6.6.8-200.fc39.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./B75M-D3V, BIOS F11 02/27/2013
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x12/0x80
Code: 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <f7> 86 00 01 00 00 00 80 01 00 75 17 e8 0d d5 08 00 48 89 ea 48 89
RSP: 0018:ffffc90000affd68 EFLAGS: 00010096
RAX: 0000000000000297 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8881450aea60 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff8881450aea60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000002000
R13: 0000000000000018 R14: ffffffffc3344320 R15: ffff888109835000
FS:  0000000000000000(0000) GS:ffff888215d80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000100 CR3: 0000000098222003 CR4: 00000000001706e0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x80
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uhid rfcomm snd_seq_dummy snd_hrtimer nvidia_drm(POE) nvidia_modeset(POE) nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep sunrpc binfmt_misc rtw88_8723du snd_hda_codec_realtek rtw88_8723d rtw88_usb vfat rtw88_core fat snd_hda_codec_generic ledtrig_audio nvidia(POE) snd_hda_codec_hdmi mac80211 intel_rapl_msr snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec iTCO_wdt mei_pxp intel_pmc_bxt libarc4 at24 mei_hdcp mei_wdt ppdev iTCO_vendor_support snd_hda_core cfg80211 intel_rapl_common snd_hwdep btusb x86_pkg_temp_thermal snd_seq intel_powerclamp coretemp btrtl snd_seq_device btintel rapl btbcm intel_cstate btmtk intel_uncore pktcdvd snd_pcm bluetooth i2c_i801 pcspkr snd_timer i2c_smbus rfkill snd lpc_ich soundcore mei_me parport_pc parport mei joydev loop zram
 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 serio_raw r8169 video wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CR2: 0000000000000100

BUG: kernel NULL pointer dereference, address: 000000000000000c
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 10 PID: 13491 Comm: kworker/u48:1 Tainted: G S      W          6.5.12-300.fc39.x86_64 #1
Hardware name: Default string Default string/E5-MR9A PRO, BIOS 5.11 12/06/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_fw_c2h_cmd_rx_irqsafe+0xa3/0xf0 [rtw88_core]
Code: 48 89 ee e8 ef c7 43 ea 48 8b 3b 48 8d b3 00 4a 00 00 5b 5d 41 5c e9 3c c5 23 00 48 8b 47 38 4c 8b a0 38 01 00 00 48 8b 47 10 <41> 8b 74 24 0c 48 8b 40 68 e8 ef 84 6e ea 48 8b 43 10 41 8b 34 24
RSP: 0018:ffffb1fb8090fd88 EFLAGS: 00010246
RAX: ffffffffc1936140 RBX: ffff99604bc5a060 RCX: 0000000000000000
RDX: ffff99610f163900 RSI: 0000000000000061 RDI: ffff99604bc5a060
RBP: ffff99610f163900 R08: 0000000000000001 R09: 000000001880be97
R10: 0000000000000058 R11: fefefefefefefeff R12: 0000000000000000
R13: 0000000000000061 R14: ffffffffc19221a0 R15: ffff99610f163900
FS:  0000000000000000(0000) GS:ffff996f7fc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000000c CR3: 0000000eb8222006 CR4: 00000000001706e0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_fw_c2h_cmd_rx_irqsafe+0xa3/0xf0 [rtw88_core]
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc rtw88_8821cu intel_rapl_msr rtw88_8821c intel_rapl_common rtw88_usb sb_edac rtw88_core x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel mac80211 kvm snd_usb_audio snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi ledtrig_audio snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_usbmidi_lib libarc4 vfat irqbypass snd_ump rapl fat snd_hda_core uvcvideo snd_rawmidi intel_cstate snd_hwdep cfg80211 uvc videobuf2_vmalloc snd_seq videobuf2_memops videobuf2_v4l2 videobuf2_common iTCO_wdt snd_seq_device intel_pmc_bxt gpio_ich iTCO_vendor_support snd_pcm videodev uas snd_timer mxm_wmi intel_uncore rfkill usb_storage snd pcspkr mc i2c_i801 lpc_ich soundcore i2c_smbus
 joydev loop zram amdgpu i2c_algo_bit drm_ttm_helper ttm video drm_suballoc_helper nvme amdxcp iommu_v2 drm_buddy crct10dif_pclmul gpu_sched crc32_pclmul crc32c_intel nvme_core polyval_clmulni drm_display_helper polyval_generic ghash_clmulni_intel r8169 cec serio_raw sha512_ssse3 nvme_common wmi ip6_tables ip_tables fuse
CR2: 000000000000000c

BUG: kernel NULL pointer dereference, address: 0000000000000100
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 526 Comm: kworker/u8:6 Not tainted 6.5.10-200.fc38.x86_64 #1
Hardware name: K.A.Technologies Limited TM1/To be filled by O.E.M., BIOS LC_BIOS_046_G8316_O 11/19/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x1c/0x440
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 57 41 56 41 55 41 89 fd 41 54 49 89 f4 55 53 48 89 d3 48 83 ec 08 <f7> 86 00 01 00 00 00 80 01 00 0f 85 e0 02 00 00 e8 7f ac 08 00 45
RSP: 0018:ffffaed2c04c7d58 EFLAGS: 00010092
RAX: 0000000000000297 RBX: ffff9e4aa177eaa0 RCX: 0000000000000000
RDX: ffff9e4aa177eaa0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: 00000000000000c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000000000
R13: 0000000000002000 R14: ffffffffc170a320 R15: ffff9e4a863e0500
FS:  0000000000000000(0000) GS:ffff9e4afbc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000100 CR3: 000000011c49a000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __wake_up_common_lock+0x8f/0xd0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x1c/0x440
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x1de/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: snd_sof_pci snd_sof_xtensa_dsp nf_tables nfnetlink rtw88_8723du(+) snd_sof rtw88_8723d snd_sof_utils rtw88_usb soundwire_generic_allocation qrtr rtw88_core soundwire_bus snd_soc_avs uvcvideo snd_soc_hda_codec uvc mac80211 videobuf2_vmalloc snd_soc_skl videobuf2_memops bnep videobuf2_v4l2 snd_soc_hdac_hda snd_hda_ext_core mei_hdcp mei_pxp libarc4 snd_soc_sst_ipc videobuf2_common intel_rapl_msr snd_soc_sst_dsp cfg80211 intel_pmc_bxt intel_telemetry_pltdrv intel_punit_ipc intel_telemetry_core x86_pkg_temp_thermal intel_powerclamp coretemp snd_soc_acpi_intel_match snd_soc_es8316 kvm_intel snd_soc_acpi kvm irqbypass btusb rapl videodev btrtl snd_hda_intel btbcm snd_soc_core intel_cstate sunrpc btintel binfmt_misc btmtk i2c_i801 snd_intel_dspcfg pcspkr bluetooth snd_intel_sdw_acpi snd_compress i2c_smbus processor_thermal_device_pci_legacy snd_hda_codec mc snd_hda_core snd_hwdep snd_seq ac97_bus snd_pcm_dmaengine processor_thermal_device processor_thermal_rfim snd_seq_device rfkill
 processor_thermal_mbox processor_thermal_rapl intel_rapl_common snd_pcm idma64 intel_soc_dts_iosf mei_me mei snd_timer snd vfat fat soundcore soc_button_array int3403_thermal intel_hid int340x_thermal_zone int3400_thermal acpi_thermal_rel sparse_keymap squashfs joydev loop zram i915 i2c_algo_bit drm_buddy ttm drm_display_helper sdhci_pci crct10dif_pclmul crc32_pclmul crc32c_intel hid_multitouch polyval_generic cqhci ghash_clmulni_intel sdhci r8152 sha512_ssse3 spi_pxa2xx_platform wdat_wdt mmc_core dw_dmac mii cec i2c_hid_acpi i2c_hid video wmi pinctrl_geminilake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000100

BUG: kernel NULL pointer dereference, address: 0000000000000100
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 14 PID: 5723 Comm: kworker/u64:0 Not tainted 6.5.8-200.fc38.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7B89/B450M MORTAR MAX (MS-7B89), BIOS 2.J0 06/29/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x1c/0x440
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 57 41 56 41 55 41 89 fd 41 54 49 89 f4 55 53 48 89 d3 48 83 ec 08 <f7> 86 00 01 00 00 00 80 01 00 0f 85 e0 02 00 00 e8 8f ac 08 00 45
RSP: 0018:ffffb7d955c47d58 EFLAGS: 00010092
RAX: 0000000000000297 RBX: ffff8aa95d28eaa0 RCX: 0000000000000000
RDX: ffff8aa95d28eaa0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: 00000000000000c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000000000
R13: 0000000000002000 R14: ffffffffc1a71320 R15: ffff8aa85583bf00
FS:  0000000000000000(0000) GS:ffff8aab6ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000100 CR3: 00000001060ea000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? ep_autoremove_wake_function+0x23/0x50
 ? srso_return_thunk+0x5/0x10
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x1c/0x440
 ? srso_return_thunk+0x5/0x10
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rfcomm bnep rtw88_8723du rtw88_8723d rtw88_usb rtw88_core mac80211 btusb btrtl btbcm libarc4 btintel btmtk cfg80211 bluetooth udf crc_itu_t snd_seq_dummy snd_hrtimer nfsv3 nfs_acl rpcsec_gss_krb5 auth_rpcgss nls_utf8 nfsv4 cifs nfs cifs_arc4 cifs_md4 dns_resolver lockd grace fscache netfs nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 rfkill ip_set nf_tables nfnetlink qrtr sunrpc binfmt_misc snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi ledtrig_audio intel_rapl_msr intel_rapl_common snd_hda_intel edac_mce_amd snd_intel_dspcfg snd_intel_sdw_acpi kvm_amd snd_hda_codec vfat snd_hda_core snd_ctxfi fat ppdev kvm snd_hwdep snd_seq snd_seq_device irqbypass snd_pcm snd_timer wmi_bmof snd rapl pcspkr soundcore acpi_cpufreq i2c_piix4 k10temp parport_pc joydev parport gpio_amdpt gpio_generic loop zram nouveau
 drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul video crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic mxm_wmi nvme ghash_clmulni_intel drm_display_helper sha512_ssse3 ccp nvme_core r8169 cec sp5100_tco nvme_common wmi ip6_tables ip_tables fuse
CR2: 0000000000000100

BUG: kernel NULL pointer dereference, address: 0000000000000100
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 4 PID: 115 Comm: kworker/u64:3 Not tainted 6.5.5-200.fc38.x86_64 #1
Hardware name: System manufacturer System Product Name/PRIME B350M-A, BIOS 6042 04/28/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x1c/0x440
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 57 41 56 41 55 41 89 fd 41 54 49 89 f4 55 53 48 89 d3 48 83 ec 08 <f7> 86 00 01 00 00 00 80 01 00 0f 85 e0 02 00 00 e8 4f ac 08 00 45
RSP: 0018:ffffa7a2c0637d58 EFLAGS: 00010092
RAX: 0000000000000297 RBX: ffff904aaf006aa0 RCX: 0000000000000000
RDX: ffff904aaf006aa0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: 00000000000000c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000000000
R13: 0000000000002000 R14: ffffffffc18451a0 R15: ffff904a8d914b00
FS:  0000000000000000(0000) GS:ffff904d9eb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000100 CR3: 0000000116598000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x1c/0x440
 ? srso_return_thunk+0x5/0x10
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb rtw88_core snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_intel mac80211 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec intel_rapl_msr intel_rapl_common edac_mce_amd snd_hda_core snd_hwdep kvm_amd snd_seq libarc4 eeepc_wmi snd_seq_device asus_wmi kvm cfg80211 snd_pcm ledtrig_audio irqbypass sparse_keymap snd_timer rapl platform_profile snd wmi_bmof acpi_cpufreq pcspkr rfkill uas i2c_piix4 k10temp soundcore usb_storage gpio_amdpt joydev gpio_generic loop zram amdgpu i2c_algo_bit drm_ttm_helper ttm video drm_suballoc_helper amdxcp crct10dif_pclmul iommu_v2 crc32_pclmul crc32c_intel drm_buddy polyval_clmulni polyval_generic gpu_sched ghash_clmulni_intel sha512_ssse3 nvme drm_display_helper r8169 sp5100_tco nvme_core ccp cec nvme_common wmi hid_uclogic fuse
CR2: 0000000000000100

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 19201 Comm: kworker/u64:9 Tainted: P           OE      6.8.9-200.fc39.x86_64 #1
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./B450M Pro4, BIOS P3.60 07/31/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffbf284a09fd30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffbf284a09fdb0 RCX: 0000000000000000
RDX: ffff96e552120900 RSI: ffffbf284a09fde0 RDI: ffffbf284a09fde0
RBP: 00000000000000c8 R08: ffff96e667880018 R09: 0000000000000008
R10: 0000000000000008 R11: 0000000000000008 R12: ffffbf284a09fde0
R13: ffff96e552121fc0 R14: ffff96e667880038 R15: ffff96e3ae71ed00
FS:  0000000000000000(0000) GS:ffff96e9fe280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000458db6000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4f0
 ? srso_return_thunk+0x5/0x5f
 ? load_balance+0x167/0x1290
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 ? rtw8822b_query_rx_desc+0x1b7/0x4a0 [rtw88_8822b]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core mac80211 libarc4 uinput veth xt_nat xt_conntrack xt_MASQUERADE nf_conntrack_netlink rfcomm xt_addrtype br_netfilter bridge stp llc snd_seq_dummy snd_hrtimer tun xt_comment nft_compat overlay nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr uhid bnep nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) xone_wired(OE) xone_gip_headset(OE) xone_gip_madcatz_strat(OE) xone_gip_gamepad(OE) ff_memless xone_gip_chatpad(OE) nvidia(POE) sunrpc binfmt_misc btusb btrtl raid1 btintel btbcm btmtk intel_rapl_msr snd_hda_codec_realtek bluetooth intel_rapl_common snd_hda_codec_generic snd_hda_codec_hdmi joydev edac_mce_amd snd_hda_intel kvm_amd snd_intel_dspcfg ucsi_ccg typec_ucsi snd_intel_sdw_acpi snd_hda_codec kvm snd_hda_core typec snd_hwdep snd_seq
 snd_seq_device snd_pcm irqbypass snd_timer rapl wmi_bmof k10temp acpi_cpufreq pcspkr snd soundcore i2c_nvidia_gpu video i2c_piix4 gpio_amdpt gpio_generic xone_dongle(OE) xone_gip(OE) cfg80211 rfkill loop zram hid_logitech_hidpp crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 r8169 sha256_ssse3 realtek sp5100_tco ccp sha1_ssse3 wmi hid_logitech_dj uas usb_storage ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 10 Comm: kworker/u48:0 Not tainted 6.9.8-200.fc40.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7D17/MAG B560M MORTAR WIFI (MS-7D17), BIOS 1.90 07/15/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb9af80103d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb9af80103db8 RCX: 0000000000000000
RDX: ffff9fc87e848900 RSI: ffffb9af80103de8 RDI: ffffb9af80103de8
RBP: 00000000000000c8 R08: ffff9fc87e8c0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffb9af80103de8
R13: ffff9fc87e849fe0 R14: ffff9fc87e8c0038 R15: ffff9fc841133c00
FS:  0000000000000000(0000) GS:ffff9fcf9db00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000125fa0005 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x17b/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) snd_intel_sdw_acpi intel_uncore_frequency(+) intel_uncore_frequency_common rtw88_usb snd_hda_codec intel_pmc_core_pltdrv(-) intel_tcc_cooling(-) rtw88_8822b rtw88_core x86_pkg_temp_thermal intel_powerclamp snd_hda_core coretemp snd_hwdep kvm_intel btusb spi_nor pktcdvd snd_seq iTCO_wdt btrtl mac80211 intel_pmc_bxt snd_seq_device mtd iTCO_vendor_support kvm mei_pxp mei_hdcp ee1004 btintel snd_pcm libarc4 btbcm rapl btmtk intel_cstate cfg80211 r8169 snd_timer bluetooth intel_uncore mxm_wmi wmi_bmof pcspkr snd spi_intel_pci mei_me i2c_i801 intel_pmc_core realtek i2c_smbus soundcore spi_intel rfkill mei intel_vsec pmt_telemetry acpi_tad acpi_pad joydev pmt_class loop nfnetlink zram amdgpu amdxcp i2c_algo_bit crct10dif_pclmul drm_ttm_helper crc32_pclmul ttm crc32c_intel polyval_clmulni polyval_generic drm_exec gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 sha1_ssse3 cec serio_raw video wmi pinctrl_tigerlake ip6_tables
 ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 11166 Comm: kworker/u32:8 Not tainted 6.9.8-200.fc40.x86_64 #1
Hardware name: Positivo Bahia - VAIO VJFE53F11X-XXXXXX/VJFE-IL, BIOS V1.021.X 01/08/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffff9d72ce08fd38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff9d72ce08fdb8 RCX: 0000000000000000
RDX: ffff9157d6e88900 RSI: ffff9d72ce08fde8 RDI: ffff9d72ce08fde8
RBP: 00000000000000c8 R08: ffff9157d6ed0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffff9d72ce08fde8
R13: ffff9157d6e89fe0 R14: ffff9157d6ed0038 R15: ffff9157c1a6f300
FS:  0000000000000000(0000) GS:ffff91586c200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000158428002 CR4: 0000000000770ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? ttwu_queue_wakelist+0x10c/0x190
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x17b/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc vfat fat snd_sof_pci_intel_icl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_hda_codec_hdmi snd_sof snd_sof_utils snd_soc_hdac_hda snd_soc_acpi_intel_match iwlmvm soundwire_generic_allocation snd_soc_acpi soundwire_bus snd_soc_avs snd_hda_codec_realtek snd_soc_hda_codec snd_hda_ext_core snd_hda_codec_generic snd_soc_core snd_hda_scodec_component mac80211 intel_uncore_frequency intel_uncore_frequency_common snd_compress intel_tcc_cooling x86_pkg_temp_thermal ac97_bus snd_pcm_dmaengine snd_hda_intel intel_powerclamp snd_intel_dspcfg iTCO_wdt snd_intel_sdw_acpi
 coretemp intel_pmc_bxt snd_hda_codec mei_pxp libarc4 kvm_intel iTCO_vendor_support spi_nor snd_hda_core mei_hdcp mtd intel_rapl_msr kvm snd_hwdep btusb snd_seq iwlwifi uvcvideo snd_seq_device btrtl snd_pcm uvc rapl processor_thermal_device_pci_legacy btintel videobuf2_vmalloc processor_thermal_device videobuf2_memops btbcm videobuf2_v4l2 intel_cstate rtsx_usb_ms r8169 snd_timer btmtk processor_thermal_wt_hint videobuf2_common intel_uncore pcspkr wmi_bmof cfg80211 memstick snd bluetooth videodev processor_thermal_rfim i2c_i801 processor_thermal_rapl mei_me intel_rapl_common realtek soundcore spi_intel_pci i2c_smbus processor_thermal_wt_req mei spi_intel processor_thermal_power_floor mc idma64 rfkill processor_thermal_mbox intel_soc_dts_iosf soc_button_array int3403_thermal int340x_thermal_zone intel_pmc_core intel_vsec int3400_thermal pmt_telemetry intel_hid acpi_thermal_rel acpi_tad acpi_pad pmt_class sparse_keymap joydev loop nfnetlink zram rtsx_usb_sdmmc rtsx_usb i915 i2c_algo_bit drm_buddy ttm
 crct10dif_pclmul nvme crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_display_helper sdhci_pci nvme_core cqhci ghash_clmulni_intel sdhci spi_pxa2xx_platform hid_multitouch sha512_ssse3 sha256_ssse3 mmc_core sha1_ssse3 dw_dmac nvme_auth cec i2c_hid_acpi i2c_hid video wmi pinctrl_icelake serio_raw fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 12 Comm: kworker/u2:1 Not tainted 6.6.3-200.fc39.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa318c006bd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa318c006bdb0 RCX: 0000000000000000
RDX: ffff947003308900 RSI: ffffa318c006bde0 RDI: ffffa318c006bde0
RBP: ffffa318c006bde0 R08: ffff947009200018 R09: 0000000000064301
R10: 0000000000000007 R11: 0000000000000007 R12: ffff94700330a060
R13: ffff947009200038 R14: ffffffffc0a8b360 R15: ffff947008b0ec00
FS:  0000000000000000(0000) GS:ffff94707dc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000001062000 CR4: 00000000000106f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x10
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_return_thunk+0x5/0x10
 ? rtw8822b_query_rx_desc+0x1a5/0x330 [rtw88_8822b]
 ? srso_return_thunk+0x5/0x10
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core sunrpc mac80211 libarc4 snd_intel8x0 snd_ac97_codec cfg80211 ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr binfmt_misc intel_rapl_common rfkill snd_timer pcspkr snd vboxguest i2c_piix4 soundcore joydev loop zram crct10dif_pclmul crc32_pclmul vmwgfx crc32c_intel polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 e1000 sha1_ssse3 drm_ttm_helper video ttm ata_generic pata_acpi wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 12 PID: 167 Comm: kworker/u80:3 Tainted: G           OE      6.10.4-200.fc40.x86_64 #1
Hardware name: ASUS System Product Name/ROG STRIX Z490-F GAMING, BIOS 3001 02/16/2024
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb1ef806d7d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb1ef806d7db8 RCX: 0000000000000000
RDX: ffff8b2236530900 RSI: ffffb1ef806d7de8 RDI: ffffb1ef806d7de8
RBP: 00000000000000c8 R08: ffff8b2238360018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffffb1ef806d7de8
R13: ffff8b2236532000 R14: ffff8b2238360038 R15: ffff8b220fabe200
FS:  0000000000000000(0000) GS:ffff8b294da00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000106f8e002 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: kvm_intel(+) rtw88_8822bu(+) rtw88_usb snd_hwdep rtw88_8822b snd_seq kvm snd_seq_device rtw88_core btusb iTCO_wdt spi_nor snd_pcm btrtl intel_pmc_bxt btintel mei_hdcp mtd mei_pxp iTCO_vendor_support ee1004 rapl mac80211 snd_timer btbcm eeepc_wmi intel_cstate btmtk bluetooth mei_me intel_uncore asus_wmi igc snd i2c_i801 spi_intel_pci sparse_keymap platform_profile pcspkr intel_wmi_thunderbolt mei wmi_bmof spi_intel i2c_smbus libarc4 soundcore idma64 intel_pmc_core joydev intel_vsec pmt_telemetry pmt_class acpi_pad xone_dongle(OE+) xone_gip(OE) cfg80211 rfkill loop nfnetlink zram uas usb_storage crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni nvme mxm_wmi polyval_generic nvme_core ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 nvme_auth video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 478861 Comm: kworker/u16:14 Tainted: G           OE      6.9.6-100.fc39.x86_64 #1
Hardware name: Hewlett-Packard HP ProBook 4540s/17F6, BIOS 68IRR Ver. F.32 11/06/2012
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa02ca02f7d48 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa02ca02f7dc0 RCX: 0000000000000000
RDX: ffff94cabeb48900 RSI: ffffa02ca02f7df0 RDI: ffffa02ca02f7df0
RBP: 00000000000000c8 R08: ffff94cd01a50018 R09: 000000000000000b
R10: 000000000000000b R11: 000000000000000b R12: ffffa02ca02f7df0
R13: ffff94cabeb49fe0 R14: ffff94cd01a50038 R15: ffffffffc2cda360
FS:  0000000000000000(0000) GS:ffff94cdbfb80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001a6ab0003 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x173/0x590
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2de/0x4a0 [rtw88_8822b]
 rtw_usb_rx_handler+0x9e/0x1d0 [rtw88_usb]
 process_one_work+0x18e/0x3b0
 worker_thread+0x277/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: nft_reject_ipv4 nft_masq nf_nat_h323 nf_conntrack_h323 nf_nat_pptp nf_conntrack_pptp nf_nat_tftp nf_conntrack_tftp nf_nat_sip nf_conntrack_sip nf_nat_irc nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core binfmt_misc rfcomm snd_seq_dummy snd_hrtimer tun nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink vboxnetadp(OE) bnep vboxnetflt(OE) vboxdrv(OE) rt2800pci rt2800mmio rt2800lib uvcvideo intel_rapl_msr rt2x00pci uvc rt2x00mmio btusb iTCO_wdt videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 rt2x00lib btrtl intel_rapl_common intel_pmc_bxt btintel qrtr iTCO_vendor_support mei_hdcp mei_pxp btbcm x86_pkg_temp_thermal intel_powerclamp videobuf2_common coretemp btmtk bluetooth videodev uas mac80211 usb_storage kvm_intel mc snd_hda_codec_hdmi libarc4
 snd_ctl_led ledtrig_audio kvm snd_hda_codec_idt cfg80211 snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_seq rapl intel_cstate intel_uncore hp_wmi wmi_bmof sparse_keymap snd_seq_device platform_profile pcspkr snd_pcm eeprom_93cx6 rfkill jmb38x_ms sunrpc memstick mei_me snd_timer mei snd soundcore lpc_ich vfat fat hp_accel wireless_hotkey lis3lv02d pktcdvd joydev loop zram dm_crypt amdgpu amdxcp drm_exec gpu_sched i915 radeon crct10dif_pclmul sdhci_pci crc32_pclmul crc32c_intel polyval_clmulni polyval_generic cqhci drm_buddy drm_ttm_helper sdhci ttm drm_suballoc_helper i2c_algo_bit ghash_clmulni_intel sha512_ssse3 drm_display_helper sha256_ssse3 mmc_core r8169 sha1_ssse3 cec realtek video wmi serio_raw fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 7 PID: 121 Comm: kworker/u32:4 Not tainted 6.9.7-100.fc39.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./970A-DS3P, BIOS FB 10/31/2014
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa3fdc061bd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa3fdc061bdc0 RCX: 0000000000000000
RDX: ffff8b38130b0900 RSI: ffffa3fdc061bdf0 RDI: ffffa3fdc061bdf0
RBP: 00000000000000c8 R08: ffff8b3809d50018 R09: 0000000000000000
R10: 0000000000000006 R11: 0000000000000000 R12: ffffa3fdc061bdf0
R13: ffff8b38130b1fe0 R14: ffff8b3809d50038 R15: ffffffffc202d360
FS:  0000000000000000(0000) GS:ffff8b3b2ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000010ef98000 CR4: 00000000000406f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x173/0x590
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2de/0x4a0 [rtw88_8822b]
 rtw_usb_rx_handler+0x9e/0x1d0 [rtw88_usb]
 process_one_work+0x18e/0x3b0
 worker_thread+0x277/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic mac80211 snd_hda_scodec_component snd_hda_codec_hdmi snd_usb_audio snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_usbmidi_lib edac_mce_amd snd_ump snd_hda_core snd_rawmidi kvm_amd libarc4 mc snd_hwdep snd_seq ccp cfg80211 kvm snd_seq_device snd_pcm rfkill acpi_cpufreq snd_timer pcspkr snd fam15h_power k10temp soundcore i2c_piix4 loop zram amdgpu crct10dif_pclmul crc32_pclmul crc32c_intel video polyval_clmulni polyval_generic wmi amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec ghash_clmulni_intel gpu_sched drm_suballoc_helper sha512_ssse3 8139too drm_buddy sha256_ssse3 drm_display_helper r8169 sha1_ssse3 8139cp mii sp5100_tco cec realtek ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 11 Comm: kworker/u32:1 Not tainted 6.9.7-100.fc39.x86_64 #1
Hardware name: LENOVO 10A6A0RQLS/SHARKBAY, BIOS FBKTA5AUS 12/29/2014
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb3a7400cbd48 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb3a7400cbdc0 RCX: 0000000000000000
RDX: ffff9652c6460900 RSI: ffffb3a7400cbdf0 RDI: ffffb3a7400cbdf0
RBP: 00000000000000c8 R08: ffff9652c4ce0018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffb3a7400cbdf0
R13: ffff9652c6461fe0 R14: ffff9652c4ce0038 R15: ffffffffc12b61a0
FS:  0000000000000000(0000) GS:ffff9655cda80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000003fe428006 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x173/0x590
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0x9e/0x1d0 [rtw88_usb]
 process_one_work+0x18e/0x3b0
 worker_thread+0x277/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb rtw88_core mac80211 uvcvideo btusb btrtl btintel btbcm libarc4 cfg80211 btmtk uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common snd_usb_audio bluetooth videodev snd_hda_codec_realtek snd_usbmidi_lib snd_hda_codec_generic snd_hda_codec_hdmi snd_ump snd_rawmidi mc snd_hda_scodec_component snd_hda_intel snd_intel_dspcfg rfkill snd_intel_sdw_acpi snd_hda_codec joydev snd_hda_core mei_pxp snd_hwdep iTCO_wdt snd_seq intel_rapl_msr intel_rapl_common snd_seq_device mei_hdcp x86_pkg_temp_thermal mei_wdt intel_powerclamp snd_pcm intel_pmc_bxt iTCO_vendor_support at24 mei_me coretemp snd_timer pktcdvd snd rapl soundcore intel_cstate intel_uncore mei i2c_i801 i2c_smbus think_lmi firmware_attributes_class wmi_bmof lpc_ich pcspkr loop zram ums_realtek uas hid_logitech_hidpp usb_storage nouveau drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul gpu_sched crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_gpuvm drm_exec mxm_wmi
 ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 e1000e cec sha1_ssse3 video wmi hid_logitech_dj ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 94 Comm: kworker/u16:5 Tainted: G           OE      6.9.5-200.fc40.x86_64 #1
Hardware name: Dell Inc. Latitude 6430U/044GCP, BIOS A15 11/30/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffaa9640367d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffaa9640367db8 RCX: 0000000000000000
RDX: ffff9d76dd718900 RSI: ffffaa9640367de8 RDI: ffffaa9640367de8
RBP: 00000000000000c8 R08: ffff9d7822ed0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffaa9640367de8
R13: ffff9d76dd719fe0 R14: ffff9d7822ed0038 R15: ffff9d76e9325000
FS:  0000000000000000(0000) GS:ffff9d79ce280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000172428001 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct vboxnetadp(OE) vboxnetflt(OE) nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 vboxdrv(OE) ip_set nf_tables qrtr rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core mac80211 libarc4 intel_rapl_msr cfg80211 uvcvideo at24 mei_pxp mei_wdt snd_hda_codec_hdmi mei_hdcp intel_rapl_common uvc x86_pkg_temp_thermal videobuf2_vmalloc snd_hda_codec_idt intel_powerclamp videobuf2_memops videobuf2_v4l2 snd_hda_codec_generic coretemp iTCO_wdt videobuf2_common intel_pmc_bxt kvm_intel ppdev videodev iTCO_vendor_support snd_hda_intel dell_laptop mc dell_smm_hwmon snd_intel_dspcfg snd_intel_sdw_acpi kvm snd_hda_codec snd_hda_core dell_wmi snd_hwdep sunrpc rapl dell_smbios dcdbas snd_seq intel_cstate intel_uncore snd_seq_device dell_wmi_descriptor wmi_bmof snd_pcm sparse_keymap i2c_i801 pcspkr i2c_smbus mei_me
 snd_timer e1000e snd mei lpc_ich soundcore binfmt_misc parport_pc parport dell_rbtn rfkill joydev loop nfnetlink zram i915 sdhci_pci crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni cqhci polyval_generic sdhci i2c_algo_bit drm_buddy ttm ghash_clmulni_intel mmc_core sha512_ssse3 sha256_ssse3 sha1_ssse3 drm_display_helper cec video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 11 Comm: kworker/u48:1 Not tainted 6.9.6-200.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B450M DS3H/B450M DS3H-CF, BIOS F50 11/27/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb59c0011fd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb59c0011fdb8 RCX: 0000000000000000
RDX: ffff986f87578900 RSI: ffffb59c0011fde8 RDI: ffffb59c0011fde8
RBP: 00000000000000c8 R08: ffff986f98e00018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffffb59c0011fde8
R13: ffff986f87579fe0 R14: ffff986f98e00038 R15: ffff986f8b1bf600
FS:  0000000000000000(0000) GS:ffff98767ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000103916000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic mac80211 snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel intel_rapl_msr amd_atl snd_intel_dspcfg intel_rapl_common snd_intel_sdw_acpi snd_hda_codec edac_mce_amd snd_hda_core kvm_amd snd_hwdep libarc4 snd_seq kvm snd_seq_device cfg80211 snd_pcm snd_timer gigabyte_wmi wmi_bmof snd r8169 rfkill rapl pcspkr acpi_cpufreq k10temp realtek i2c_piix4 soundcore gpio_amdpt joydev gpio_generic loop nfnetlink zram amdgpu video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel gpu_sched polyval_clmulni drm_suballoc_helper polyval_generic drm_buddy nvme ghash_clmulni_intel drm_display_helper sha512_ssse3 nvme_core sha256_ssse3 ccp cec sha1_ssse3 sp5100_tco nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 11 Comm: kworker/u48:1 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B450M DS3H/B450M DS3H-CF, BIOS F50 11/27/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa7564011fd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa7564011fdb8 RCX: 0000000000000000
RDX: ffff9c21a0298900 RSI: ffffa7564011fde8 RDI: ffffa7564011fde8
RBP: 00000000000000c8 R08: ffff9c21a18a0018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffffa7564011fde8
R13: ffff9c21a0299fe0 R14: ffff9c21a18a0038 R15: ffff9c218c1a4800
FS:  0000000000000000(0000) GS:ffff9c2c6ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000105bd4000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb rtw88_core snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi mac80211 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core uas ucsi_ccg snd_hwdep typec_ucsi intel_rapl_msr snd_seq libarc4 typec snd_seq_device usb_storage ledtrig_netdev amd_atl btusb snd_pcm cfg80211 intel_rapl_common btrtl btintel edac_mce_amd btbcm btmtk snd_timer gigabyte_wmi wmi_bmof rapl r8169 bluetooth snd pcspkr acpi_cpufreq i2c_piix4 k10temp realtek soundcore i2c_nvidia_gpu rfkill joydev gpio_amdpt gpio_generic loop nfnetlink zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 ccp sha1_ssse3 sp5100_tco wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 11 PID: 706 Comm: kworker/u48:11 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B760M DS3H/B760M DS3H, BIOS F14 09/15/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa38b81b37d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa38b81b37db8 RCX: 0000000000000000
RDX: ffff93062b830900 RSI: ffffa38b81b37de8 RDI: ffffa38b81b37de8
RBP: 00000000000000c8 R08: ffff930636930018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffa38b81b37de8
R13: ffff93062b831fe0 R14: ffff930636930038 R15: ffff930609be5f00
FS:  0000000000000000(0000) GS:ffff9309afd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000106b96000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? dev_vprintk_emit+0x181/0x1b0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: coretemp(+) rtw88_8821cu(+) rtw88_8821c snd_hda_intel rtw88_usb snd_intel_dspcfg snd_usbmidi_lib btusb(+) kvm_intel snd_intel_sdw_acpi iwlmvm(+) rtw88_core snd_hda_codec spi_nor snd_ump btrtl iTCO_wdt intel_pmc_bxt ppdev snd_rawmidi btintel mtd iTCO_vendor_support snd_hda_core kvm mac80211 mc snd_hwdep iwlwifi btbcm snd_seq btmtk snd_seq_device rapl libarc4 bluetooth ledtrig_netdev joydev intel_cstate snd_pcm cfg80211 intel_uncore snd_timer gigabyte_wmi wmi_bmof snd pcspkr r8169 intel_pmc_core soundcore intel_vsec i2c_i801 parport_pc rfkill intel_hid pmt_telemetry spi_intel_pci realtek spi_intel i2c_smbus idma64 sparse_keymap acpi_pad parport pmt_class mei_me acpi_tad mei i2c_dev loop nfnetlink zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper crct10dif_pclmul ttm crc32_pclmul crc32c_intel polyval_clmulni drm_exec polyval_generic gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 sha1_ssse3 cec video wmi pinctrl_alderlake ip6_tables
 ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 8 PID: 622 Comm: kworker/u64:8 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ASUS TUF Gaming F15 FX506LI_FX566LI/FX506LI, BIOS FX506LI.310 11/26/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffab1f81bf7d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffab1f81bf7db8 RCX: 0000000000000000
RDX: ffff9c77787a8900 RSI: ffffab1f81bf7de8 RDI: ffffab1f81bf7de8
RBP: 00000000000000c8 R08: ffff9c777a000018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffab1f81bf7de8
R13: ffff9c77787a9fe0 R14: ffff9c777a000038 R15: ffff9c777dbf3c00
FS:  0000000000000000(0000) GS:ffff9c794e200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000040b428004 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? sched_clock_cpu+0xf/0x1f0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core pktcdvd uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof iwlmvm snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl mac80211 snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc intel_uncore_frequency intel_uncore_frequency_common snd_soc_sst_dsp snd_soc_acpi_intel_match intel_tcc_cooling snd_soc_acpi x86_pkg_temp_thermal snd_hda_codec_realtek intel_powerclamp snd_soc_core snd_hda_codec_generic coretemp snd_hda_scodec_component kvm_intel snd_compress snd_hda_codec_hdmi ac97_bus
 libarc4 snd_pcm_dmaengine snd_hda_intel snd_intel_dspcfg uvcvideo kvm uvc snd_intel_sdw_acpi snd_hda_codec videobuf2_vmalloc videobuf2_memops snd_hda_core iwlwifi btusb processor_thermal_device_pci_legacy videobuf2_v4l2 ledtrig_netdev processor_thermal_device snd_hwdep videobuf2_common btrtl asus_nb_wmi snd_seq processor_thermal_wt_hint btintel spi_nor asus_wmi snd_seq_device rapl iTCO_wdt btbcm processor_thermal_rfim intel_pmc_bxt btmtk intel_cstate mei_hdcp mei_pxp iTCO_vendor_support videodev ee1004 mtd snd_pcm intel_rapl_msr r8169 processor_thermal_rapl sparse_keymap snd_timer bluetooth platform_profile cfg80211 intel_uncore wmi_bmof mc pcspkr mei_me intel_rapl_common realtek i2c_i801 snd mei spi_intel_pci processor_thermal_wt_req idma64 i2c_smbus processor_thermal_power_floor spi_intel rfkill processor_thermal_mbox soundcore int3403_thermal intel_soc_dts_iosf intel_pch_thermal int340x_thermal_zone intel_pmc_core intel_vsec int3400_thermal pmt_telemetry joydev acpi_pad asus_wireless acpi_thermal_rel
 pmt_class squashfs loop nfnetlink zram i915 nouveau nvme drm_ttm_helper gpu_sched crct10dif_pclmul crc32_pclmul nvme_core drm_gpuvm crc32c_intel polyval_clmulni drm_exec polyval_generic drm_buddy i2c_algo_bit ttm uas hid_multitouch ucsi_acpi ghash_clmulni_intel drm_display_helper mxm_wmi typec_ucsi sha512_ssse3 sha256_ssse3 usb_storage sha1_ssse3 cec typec nvme_auth i2c_hid_acpi i2c_hid video wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 15 PID: 22691 Comm: kworker/u64:27 Tainted: G        W          6.9.5-200.fc40.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ASUS TUF Gaming F15 FX506LI_FX566LI/FX506LI, BIOS FX506LI.310 11/26/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb23c211e3d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb23c211e3db8 RCX: 0000000000000000
RDX: ffff914a43708900 RSI: ffffb23c211e3de8 RDI: ffffb23c211e3de8
RBP: 00000000000000c8 R08: ffff914abee60018 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000002 R12: ffffb23c211e3de8
R13: ffff914a43709fe0 R14: ffff914abee60038 R15: ffff914a3eb3b800
FS:  0000000000000000(0000) GS:ffff914ace580000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000002e045a003 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: squashfs rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core pktcdvd uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof iwlmvm snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core mac80211 snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_codec_realtek snd_soc_acpi_intel_match snd_soc_acpi snd_hda_codec_generic snd_soc_core intel_uncore_frequency intel_uncore_frequency_common intel_tcc_cooling snd_hda_scodec_component x86_pkg_temp_thermal intel_powerclamp coretemp snd_hda_codec_hdmi snd_compress ac97_bus
 snd_pcm_dmaengine kvm_intel snd_hda_intel snd_intel_dspcfg libarc4 snd_intel_sdw_acpi snd_hda_codec snd_hda_core kvm processor_thermal_device_pci_legacy btusb snd_hwdep iwlwifi uvcvideo snd_seq btrtl processor_thermal_device btintel uvc iTCO_wdt snd_seq_device spi_nor processor_thermal_wt_hint videobuf2_vmalloc mei_hdcp btbcm videobuf2_memops processor_thermal_rfim btmtk intel_pmc_bxt ee1004 mei_pxp snd_pcm intel_rapl_msr mtd videobuf2_v4l2 rapl iTCO_vendor_support processor_thermal_rapl cfg80211 ledtrig_netdev mei_me bluetooth videobuf2_common intel_cstate snd_timer intel_rapl_common asus_nb_wmi videodev intel_uncore asus_wmi r8169 i2c_i801 snd processor_thermal_wt_req sparse_keymap mc spi_intel_pci platform_profile realtek mei processor_thermal_power_floor wmi_bmof processor_thermal_mbox spi_intel pcspkr idma64 soundcore i2c_smbus rfkill intel_soc_dts_iosf intel_pch_thermal int3403_thermal int340x_thermal_zone intel_pmc_core intel_vsec int3400_thermal joydev pmt_telemetry acpi_thermal_rel pmt_class
 asus_wireless acpi_pad loop nfnetlink zram i915 nouveau drm_ttm_helper gpu_sched drm_gpuvm drm_exec drm_buddy i2c_algo_bit ttm nvme crct10dif_pclmul crc32_pclmul crc32c_intel nvme_core drm_display_helper polyval_clmulni polyval_generic uas hid_multitouch ucsi_acpi ghash_clmulni_intel mxm_wmi sha512_ssse3 sha256_ssse3 typec_ucsi usb_storage sha1_ssse3 cec nvme_auth typec i2c_hid_acpi i2c_hid video wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 21 PID: 794 Comm: kworker/u96:13 Tainted: P S      W  OE      6.9.5-200.fc40.x86_64 #1
Hardware name: Apple Inc. MacPro6,1/Mac-F60DEB81FF30ACF6, BIOS 481.0.0.0.0 10/07/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0000:ffffa8dd015f7d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa8dd015f7db8 RCX: 0000000000000000
RDX: ffff978220dc8900 RSI: ffffa8dd015f7de8 RDI: ffffa8dd015f7de8
RBP: 00000000000000c8 R08: ffff9782a6790018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffa8dd015f7de8
R13: ffff978220dc9fe0 R14: ffff9782a6790038 R15: ffff97820bad2400
FS:  0000000000000000(0000) GS:ffff97913fc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001b7428003 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc intel_rapl_msr intel_rapl_common sb_edac x86_pkg_temp_thermal intel_powerclamp rtw88_8822bu rtw88_usb snd_hda_codec_cirrus coretemp btusb rtw88_8822b snd_hda_codec_generic snd_hda_codec_hdmi vfat kvm_intel btrtl rtw88_core fat snd_hda_intel btintel snd_intel_dspcfg btbcm snd_intel_sdw_acpi wl(POE) btmtk kvm mac80211 snd_hda_codec bluetooth snd_hda_core snd_hwdep rapl snd_seq libarc4 snd_seq_device iTCO_wdt intel_pmc_bxt intel_cstate at24 iTCO_vendor_support applesmc snd_pcm thunderbolt cfg80211 intel_uncore pcspkr snd_timer i2c_i801 lpc_ich i2c_smbus mei_me snd tg3 ioatdma mei rfkill soundcore dca
 apple_gmux joydev apple_mfi_fastcharge loop nfnetlink zram amdxcp drm_exec gpu_sched drm_buddy hid_logitech_hidpp drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul crc32c_intel video polyval_clmulni polyval_generic wmi i2c_algo_bit nvme drm_suballoc_helper ghash_clmulni_intel drm_display_helper sha512_ssse3 nvme_core sha256_ssse3 sha1_ssse3 cec nvme_auth hid_logitech_dj ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 1762 Comm: kworker/u12:0 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: TOSHIBA Satellite L675D/NALAE, BIOS 1.70 08/02/2011
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffaef04424bd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffaef04424bdb8 RCX: 0000000000000000
RDX: ffff9508e93c0900 RSI: ffffaef04424bde8 RDI: ffffaef04424bde8
RBP: 00000000000000c8 R08: ffff9508e9010018 R09: 0000000000000007
R10: 0000000000000007 R11: 0000000000000002 R12: ffffaef04424bde8
R13: ffff9508e93c1fe0 R14: ffff9508e9010038 R15: ffff950883a45600
FS:  0000000000000000(0000) GS:ffff9509b8000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000103afa000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc binfmt_misc rtl8192ce rtl_pci rtl8192c_common uvcvideo uvc videobuf2_vmalloc snd_hda_codec_realtek rtlwifi videobuf2_memops snd_hda_codec_generic videobuf2_v4l2 snd_hda_codec_hdmi snd_hda_scodec_component mac80211 snd_hda_intel videobuf2_common snd_intel_dspcfg videodev snd_intel_sdw_acpi snd_hda_codec libarc4 mc snd_hda_core cfg80211 edac_mce_amd kvm_amd ccp pcspkr kvm k10temp toshiba_acpi i2c_piix4 snd_hwdep snd_seq snd_seq_device snd_pcm pktcdvd snd_timer sparse_keymap snd acpi_cpufreq ledtrig_netdev industrialio rfkill r8169 soundcore realtek joydev loop nfnetlink zram amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_ttm_helper ttm ums_realtek uas
 i2c_algo_bit drm_suballoc_helper usb_storage drm_display_helper sp5100_tco cec video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 7 PID: 121 Comm: kworker/u32:6 Tainted: G           OE      6.9.5-200.fc40.x86_64 #1
Hardware name: MSI MS-7A70/B250M PRO-VDH (MS-7A70), BIOS A.80 07/03/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffba0f8044fd38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffba0f8044fdb8 RCX: 0000000000000000
RDX: ffff9c6933f58900 RSI: ffffba0f8044fde8 RDI: ffffba0f8044fde8
RBP: 00000000000000c8 R08: ffff9c6941690018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffba0f8044fde8
R13: ffff9c6933f59fe0 R14: ffff9c6941690038 R15: ffff9c6888466600
FS:  0000000000000000(0000) GS:ffff9c6dd6d80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000056e428003 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core mac80211 libarc4 cfg80211 uas usb_storage uinput snd_seq_dummy snd_hrtimer vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) rfkill qrtr binfmt_misc vfat fat uvcvideo snd_soc_avs uvc videobuf2_vmalloc videobuf2_memops snd_soc_hda_codec snd_hda_codec_hdmi videobuf2_v4l2 snd_usb_audio snd_hda_ext_core videobuf2_common snd_soc_core videodev snd_usbmidi_lib snd_hda_codec_realtek snd_ump snd_hda_codec_generic snd_rawmidi snd_compress snd_hda_scodec_component ac97_bus mc intel_rapl_msr snd_pcm_dmaengine joydev intel_rapl_common intel_uncore_frequency intel_uncore_frequency_common snd_hda_intel snd_intel_dspcfg intel_tcc_cooling x86_pkg_temp_thermal snd_intel_sdw_acpi intel_powerclamp snd_hda_codec coretemp snd_hda_core kvm_intel snd_hwdep snd_seq snd_seq_device snd_pcm kvm iTCO_wdt pktcdvd intel_pmc_bxt ppdev snd_timer mei_hdcp iTCO_vendor_support mei_pxp ee1004 snd ledtrig_netdev rapl intel_cstate r8169 soundcore intel_uncore mei_me intel_pmc_core realtek
 pcspkr i2c_i801 mei i2c_smbus intel_vsec intel_wmi_thunderbolt pmt_telemetry mxm_wmi parport_pc pmt_class parport acpi_pad loop nfnetlink i915 i2c_algo_bit drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ttm ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 sha1_ssse3 cec video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 12 Comm: kworker/u64:1 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: System manufacturer System Product Name/ROG STRIX B450-F GAMING, BIOS 2202 04/10/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffff9d81c0127d30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffff9d81c0127db0 RCX: 0000000000000000
RDX: ffff8892c5818900 RSI: ffff9d81c0127de0 RDI: ffff9d81c0127de0
RBP: 00000000000000c8 R08: ffff8892ecbd0018 R09: 0000000000000140
R10: 0000000000000002 R11: 0000000000000002 R12: ffff9d81c0127de0
R13: ffff8892c5819fc0 R14: ffff8892ecbd0038 R15: ffff8892c4c08c00
FS:  0000000000000000(0000) GS:ffff8895ce300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000003f1428000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? srso_return_thunk+0x5/0x5f
 ? wakeup_preempt+0x61/0x70
 ? srso_return_thunk+0x5/0x5f
 ? load_balance+0x8a5/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 ? rtw8822b_query_rx_desc+0x1b7/0x4b0 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi mac80211 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_seq intel_rapl_msr snd_seq_device libarc4 asus_wmi_sensors snd_pcm intel_rapl_common eeepc_wmi cfg80211 asus_wmi snd_timer edac_mce_amd ledtrig_audio igb sparse_keymap snd uas platform_profile rapl mxm_wmi wmi_bmof pcspkr acpi_cpufreq k10temp soundcore dca i2c_piix4 nzxt_smart2 usb_storage rfkill joydev gpio_amdpt gpio_generic loop nfnetlink zram amdgpu video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul gpu_sched crc32c_intel polyval_clmulni drm_suballoc_helper polyval_generic drm_buddy nvme ghash_clmulni_intel sha512_ssse3 drm_display_helper nvme_core sha256_ssse3 ccp sha1_ssse3 cec sp5100_tco nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000101
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 80000002a7986067 P4D 80000002a7986067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 11077 Comm: kworker/u8:45 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: HP HP ProDesk 600 G3 SFF/82B4, BIOS P07 Ver. 02.16 03/29/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x12/0x80
Code: 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <66> f7 86 01 01 00 00 80 01 75 17 e8 ce 9c 09 00 48 89 ea 48 89 de
RSP: 0018:ffffaf41cc59bd68 EFLAGS: 00010096
RAX: 0000000000000297 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff9283c0bc72a0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff9283c0bc72a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000011 R12: 0000000000002000
R13: 0000000000000018 R14: ffffffffc123f320 R15: ffff9283cbf1b500
FS:  0000000000000000(0000) GS:ffff9283df400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000101 CR3: 0000000210436006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? __slab_free+0xdf/0x310
 ? asm_common_interrupt+0x26/0x40
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x80
 ? rtw_fw_c2h_cmd_rx_irqsafe+0x89/0x130 [rtw88_core]
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uhid uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep snd_soc_avs snd_soc_hda_codec snd_hda_ext_core snd_soc_core snd_hda_codec_hdmi snd_hda_codec_conexant snd_hda_codec_generic intel_rapl_msr intel_rapl_common snd_compress ac97_bus intel_uncore_frequency intel_uncore_frequency_common snd_pcm_dmaengine intel_pmc_core_pltdrv intel_pmc_core snd_hda_intel rtw88_8723du rtw88_8821cu intel_vsec snd_intel_dspcfg rtw88_8821c rtw88_8723d snd_intel_sdw_acpi rtw88_usb pmt_telemetry rtw88_core pmt_class sunrpc snd_hda_codec intel_tcc_cooling btusb mac80211 x86_pkg_temp_thermal intel_powerclamp coretemp btrtl kvm_intel snd_hda_core btintel iTCO_wdt btbcm intel_pmc_bxt mei_pxp mei_wdt mei_hdcp ee1004 iTCO_vendor_support snd_hwdep btmtk snd_seq kvm bluetooth libarc4
 snd_seq_device cfg80211 snd_pcm irqbypass rapl hp_wmi intel_cstate sparse_keymap intel_uncore platform_profile snd_timer snd wmi_bmof pcspkr soundcore i2c_i801 rfkill i2c_smbus mei_me mei pktcdvd binfmt_misc vfat fat acpi_pad joydev loop nfnetlink zram i915 crct10dif_pclmul crc32_pclmul i2c_algo_bit crc32c_intel polyval_clmulni polyval_generic nvme nvme_core ghash_clmulni_intel drm_buddy sha512_ssse3 sha256_ssse3 ttm e1000e serio_raw drm_display_helper sha1_ssse3 nvme_auth video cec wmi ip6_tables ip_tables fuse
CR2: 0000000000000101

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 8000000179e3f067 P4D 8000000179e3f067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 750788 Comm: kworker/u8:2 Tainted: G     U     OE      6.8.9-300.fc40.x86_64 #1
Hardware name: Acer Aspire F5-573/Captain_SK  , BIOS V1.27 05/26/2017
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0000:ffff9dfd4190bd30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff9dfd4190bdb0 RCX: 0000000000000000
RDX: ffff907bf1668900 RSI: ffff9dfd4190bde0 RDI: ffff9dfd4190bde0
RBP: 00000000000000c8 R08: ffff907ad0f20018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffff9dfd4190bde0
R13: ffff907bf1669fc0 R14: ffff907ad0f20038 R15: ffff907b4440c400
FS:  0000000000000000(0000) GS:ffff907e01500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000179b62003 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? load_balance+0x303/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: usblp rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core squashfs uinput rfcomm snd_seq_dummy snd_hrtimer pktcdvd bnep vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) qrtr snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_codec_hdmi snd_hda_ext_core sunrpc snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_ctl_led snd_soc_core ledtrig_audio intel_rapl_msr snd_hda_codec_realtek snd_compress ac97_bus snd_hda_codec_generic intel_rapl_common snd_pcm_dmaengine intel_tcc_cooling ath9k x86_pkg_temp_thermal intel_powerclamp snd_hda_intel coretemp kvm_intel snd_intel_dspcfg ath9k_common snd_intel_sdw_acpi ath9k_hw uvcvideo ee1004 iTCO_wdt snd_hda_codec kvm mei_hdcp intel_pmc_bxt mei_pxp iTCO_vendor_support uvc videobuf2_vmalloc videobuf2_memops ath3k
 videobuf2_v4l2 snd_hda_core btusb mac80211 videobuf2_common snd_hwdep irqbypass videodev libarc4 snd_seq btrtl rapl btintel snd_seq_device btbcm ath btmtk acer_wmi intel_wmi_thunderbolt snd_pcm intel_cstate mc intel_uncore bluetooth mmc_block pcspkr wmi_bmof sparse_keymap cfg80211 snd_timer snd platform_profile binfmt_misc rfkill soundcore i2c_i801 mei_me i2c_smbus mei idma64 intel_pch_thermal vfat intel_xhci_usb_role_switch fat intel_pmc_core acpi_pad intel_vsec pmt_telemetry pmt_class joydev loop nfnetlink zram i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_buddy ttm r8169 ghash_clmulni_intel hid_multitouch sha512_ssse3 rtsx_pci sha256_ssse3 drm_display_helper realtek sha1_ssse3 i2c_hid_acpi i2c_hid cec video wmi serio_raw uas usb_storage ip6_tables ip_tables fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 62883 Comm: kworker/u8:22 Tainted: G        W          6.8.9-300.fc40.x86_64 #1
Hardware name: HP HP Laptop 14-cf0xxx/84B2, BIOS F.73 11/18/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc281412bbd30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffc281412bbdb0 RCX: 0000000000000000
RDX: ffffa005f26c8900 RSI: ffffc281412bbde0 RDI: ffffc281412bbde0
RBP: 00000000000000c8 R08: ffffa00837870018 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000002 R12: ffffc281412bbde0
R13: ffffa005f26c9fc0 R14: ffffa00837870038 R15: ffffa0059d3c8d00
FS:  0000000000000000(0000) GS:ffffa00bced00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001ce428006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables sunrpc qrtr bnep snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_hda_codec_hdmi snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_ctl_led ledtrig_audio binfmt_misc snd_hda_codec_realtek rtw88_8822be rtw88_8822b snd_compress snd_hda_codec_generic rtw88_pci intel_uncore_frequency ac97_bus intel_uncore_frequency_common intel_tcc_cooling snd_pcm_dmaengine rtw88_core x86_pkg_temp_thermal
 intel_powerclamp snd_hda_intel coretemp snd_intel_dspcfg vfat snd_intel_sdw_acpi fat snd_hda_codec kvm_intel mac80211 snd_hda_core uvcvideo kvm iTCO_wdt mei_pxp mei_hdcp intel_pmc_bxt iTCO_vendor_support ee1004 uvc intel_rapl_msr btusb snd_hwdep libarc4 videobuf2_vmalloc snd_seq btrtl videobuf2_memops btintel irqbypass videobuf2_v4l2 rapl videobuf2_common btbcm snd_seq_device btmtk intel_cstate cfg80211 snd_pcm bluetooth hp_wmi videodev processor_thermal_device_pci_legacy intel_uncore processor_thermal_device sparse_keymap platform_profile processor_thermal_wt_hint wmi_bmof processor_thermal_rfim snd_timer intel_wmi_thunderbolt processor_thermal_rapl mc snd intel_rapl_common mei_me pcspkr i2c_i801 processor_thermal_wt_req rfkill i2c_smbus soundcore mei processor_thermal_power_floor processor_thermal_mbox intel_xhci_usb_role_switch idma64 intel_pch_thermal intel_soc_dts_iosf int3403_thermal int340x_thermal_zone intel_pmc_core intel_vsec pmt_telemetry int3400_thermal acpi_thermal_rel pmt_class acpi_pad
 wireless_hotkey joydev squashfs loop nfnetlink zram i915 crct10dif_pclmul nvme i2c_algo_bit crc32_pclmul drm_buddy crc32c_intel polyval_clmulni ttm polyval_generic nvme_core drm_display_helper r8169 ghash_clmulni_intel sha512_ssse3 hid_multitouch sha256_ssse3 realtek sha1_ssse3 nvme_auth i2c_hid_acpi cec i2c_hid video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 PID: 796 Comm: kworker/u32:16 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: ASRock H510M-H2/M.2 SE/H510M-H2/M.2 SE, BIOS P1.10 08/14/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa97240aa3d30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa97240aa3db0 RCX: 0000000000000000
RDX: ffff9ce45c790900 RSI: ffffa97240aa3de0 RDI: ffffa97240aa3de0
RBP: 00000000000000c8 R08: ffff9ce44a7b0018 R09: 0000000000000100
R10: 0000000000000007 R11: 0000000000000001 R12: ffffa97240aa3de0
R13: ffff9ce45c791fc0 R14: ffff9ce44a7b0038 R15: ffff9ce441ab4b00
FS:  0000000000000000(0000) GS:ffff9ceb7fb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000010fe28006 CR4: 0000000000770ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? pick_eevdf+0x160/0x1a0
 ? __slab_free+0xdf/0x310
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2e2/0x4b0 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) x86_pkg_temp_thermal rtw88_usb intel_powerclamp rtw88_8822b coretemp snd_hda_codec_realtek(+) rtw88_core kvm_intel snd_hda_codec_generic snd_hda_codec_hdmi snd_usb_audio mac80211 snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec binfmt_misc snd_usbmidi_lib snd_ump snd_rawmidi snd_hda_core mc snd_hwdep snd_seq irqbypass snd_seq_device libarc4 vfat intel_cstate snd_pcm fat spi_nor cfg80211 jc42 snd_timer mtd iTCO_wdt mei_hdcp intel_pmc_bxt mei_pxp snd ee1004 iTCO_vendor_support spi_intel_pci mei_me i2c_i801 intel_uncore rfkill wmi_bmof mei pcspkr spi_intel i2c_smbus intel_pch_thermal soundcore joydev intel_pmc_core intel_vsec pmt_telemetry acpi_tad pmt_class acpi_pad loop nfnetlink zram nouveau drm_ttm_helper ttm gpu_sched crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit polyval_clmulni drm_gpuvm polyval_generic nvme drm_exec mxm_wmi drm_display_helper ghash_clmulni_intel nvme_core sha512_ssse3 r8169 sha256_ssse3 cec sha1_ssse3 nvme_auth realtek
 video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 145 Comm: kworker/u64:3 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. A320M-S2H/A320M-S2H-CF, BIOS F56g 12/25/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffbf02006c3d30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffbf02006c3db0 RCX: 0000000000000000
RDX: ffff9c7b3db80900 RSI: ffffbf02006c3de0 RDI: ffffbf02006c3de0
RBP: 00000000000000c8 R08: ffff9c7b095f0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffbf02006c3de0
R13: ffff9c7b3db81fc0 R14: ffff9c7b095f0038 R15: ffff9c7b04ce2200
FS:  0000000000000000(0000) GS:ffff9c7e2e300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000107c28000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? load_balance+0x303/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0xfbef5
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c snd_hda_codec_realtek(+) rtw88_usb snd_hda_codec_generic rtw88_core snd_hda_codec_hdmi intel_rapl_msr snd_hda_intel intel_rapl_common snd_intel_dspcfg snd_usb_audio(+) edac_mce_amd snd_intel_sdw_acpi mac80211 snd_hda_codec kvm_amd snd_usbmidi_lib snd_ump snd_hda_core snd_rawmidi snd_hwdep libarc4 mc kvm snd_seq snd_seq_device irqbypass cfg80211 snd_pcm snd_timer wmi_bmof gigabyte_wmi rapl acpi_cpufreq k10temp i2c_piix4 pcspkr rfkill snd joydev soundcore gpio_amdpt gpio_generic loop nfnetlink zram amdgpu video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel gpu_sched polyval_clmulni drm_suballoc_helper polyval_generic drm_buddy ghash_clmulni_intel nvme sha512_ssse3 drm_display_helper sha256_ssse3 sha1_ssse3 cec nvme_core ccp r8169 sp5100_tco realtek nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000004