BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 19201 Comm: kworker/u64:9 Tainted: P           OE      6.8.9-200.fc39.x86_64 #1
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./B450M Pro4, BIOS P3.60 07/31/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffbf284a09fd30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffbf284a09fdb0 RCX: 0000000000000000
RDX: ffff96e552120900 RSI: ffffbf284a09fde0 RDI: ffffbf284a09fde0
RBP: 00000000000000c8 R08: ffff96e667880018 R09: 0000000000000008
R10: 0000000000000008 R11: 0000000000000008 R12: ffffbf284a09fde0
R13: ffff96e552121fc0 R14: ffff96e667880038 R15: ffff96e3ae71ed00
FS:  0000000000000000(0000) GS:ffff96e9fe280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000458db6000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4f0
 ? srso_return_thunk+0x5/0x5f
 ? load_balance+0x167/0x1290
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 ? rtw8822b_query_rx_desc+0x1b7/0x4a0 [rtw88_8822b]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core mac80211 libarc4 uinput veth xt_nat xt_conntrack xt_MASQUERADE nf_conntrack_netlink rfcomm xt_addrtype br_netfilter bridge stp llc snd_seq_dummy snd_hrtimer tun xt_comment nft_compat overlay nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr uhid bnep nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) xone_wired(OE) xone_gip_headset(OE) xone_gip_madcatz_strat(OE) xone_gip_gamepad(OE) ff_memless xone_gip_chatpad(OE) nvidia(POE) sunrpc binfmt_misc btusb btrtl raid1 btintel btbcm btmtk intel_rapl_msr snd_hda_codec_realtek bluetooth intel_rapl_common snd_hda_codec_generic snd_hda_codec_hdmi joydev edac_mce_amd snd_hda_intel kvm_amd snd_intel_dspcfg ucsi_ccg typec_ucsi snd_intel_sdw_acpi snd_hda_codec kvm snd_hda_core typec snd_hwdep snd_seq
 snd_seq_device snd_pcm irqbypass snd_timer rapl wmi_bmof k10temp acpi_cpufreq pcspkr snd soundcore i2c_nvidia_gpu video i2c_piix4 gpio_amdpt gpio_generic xone_dongle(OE) xone_gip(OE) cfg80211 rfkill loop zram hid_logitech_hidpp crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 r8169 sha256_ssse3 realtek sp5100_tco ccp sha1_ssse3 wmi hid_logitech_dj uas usb_storage ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 10 Comm: kworker/u48:0 Not tainted 6.9.8-200.fc40.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7D17/MAG B560M MORTAR WIFI (MS-7D17), BIOS 1.90 07/15/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb9af80103d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb9af80103db8 RCX: 0000000000000000
RDX: ffff9fc87e848900 RSI: ffffb9af80103de8 RDI: ffffb9af80103de8
RBP: 00000000000000c8 R08: ffff9fc87e8c0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffb9af80103de8
R13: ffff9fc87e849fe0 R14: ffff9fc87e8c0038 R15: ffff9fc841133c00
FS:  0000000000000000(0000) GS:ffff9fcf9db00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000125fa0005 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x17b/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) snd_intel_sdw_acpi intel_uncore_frequency(+) intel_uncore_frequency_common rtw88_usb snd_hda_codec intel_pmc_core_pltdrv(-) intel_tcc_cooling(-) rtw88_8822b rtw88_core x86_pkg_temp_thermal intel_powerclamp snd_hda_core coretemp snd_hwdep kvm_intel btusb spi_nor pktcdvd snd_seq iTCO_wdt btrtl mac80211 intel_pmc_bxt snd_seq_device mtd iTCO_vendor_support kvm mei_pxp mei_hdcp ee1004 btintel snd_pcm libarc4 btbcm rapl btmtk intel_cstate cfg80211 r8169 snd_timer bluetooth intel_uncore mxm_wmi wmi_bmof pcspkr snd spi_intel_pci mei_me i2c_i801 intel_pmc_core realtek i2c_smbus soundcore spi_intel rfkill mei intel_vsec pmt_telemetry acpi_tad acpi_pad joydev pmt_class loop nfnetlink zram amdgpu amdxcp i2c_algo_bit crct10dif_pclmul drm_ttm_helper crc32_pclmul ttm crc32c_intel polyval_clmulni polyval_generic drm_exec gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 sha1_ssse3 cec serio_raw video wmi pinctrl_tigerlake ip6_tables
 ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 11166 Comm: kworker/u32:8 Not tainted 6.9.8-200.fc40.x86_64 #1
Hardware name: Positivo Bahia - VAIO VJFE53F11X-XXXXXX/VJFE-IL, BIOS V1.021.X 01/08/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffff9d72ce08fd38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff9d72ce08fdb8 RCX: 0000000000000000
RDX: ffff9157d6e88900 RSI: ffff9d72ce08fde8 RDI: ffff9d72ce08fde8
RBP: 00000000000000c8 R08: ffff9157d6ed0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffff9d72ce08fde8
R13: ffff9157d6e89fe0 R14: ffff9157d6ed0038 R15: ffff9157c1a6f300
FS:  0000000000000000(0000) GS:ffff91586c200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000158428002 CR4: 0000000000770ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? ttwu_queue_wakelist+0x10c/0x190
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x17b/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc vfat fat snd_sof_pci_intel_icl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_hda_codec_hdmi snd_sof snd_sof_utils snd_soc_hdac_hda snd_soc_acpi_intel_match iwlmvm soundwire_generic_allocation snd_soc_acpi soundwire_bus snd_soc_avs snd_hda_codec_realtek snd_soc_hda_codec snd_hda_ext_core snd_hda_codec_generic snd_soc_core snd_hda_scodec_component mac80211 intel_uncore_frequency intel_uncore_frequency_common snd_compress intel_tcc_cooling x86_pkg_temp_thermal ac97_bus snd_pcm_dmaengine snd_hda_intel intel_powerclamp snd_intel_dspcfg iTCO_wdt snd_intel_sdw_acpi
 coretemp intel_pmc_bxt snd_hda_codec mei_pxp libarc4 kvm_intel iTCO_vendor_support spi_nor snd_hda_core mei_hdcp mtd intel_rapl_msr kvm snd_hwdep btusb snd_seq iwlwifi uvcvideo snd_seq_device btrtl snd_pcm uvc rapl processor_thermal_device_pci_legacy btintel videobuf2_vmalloc processor_thermal_device videobuf2_memops btbcm videobuf2_v4l2 intel_cstate rtsx_usb_ms r8169 snd_timer btmtk processor_thermal_wt_hint videobuf2_common intel_uncore pcspkr wmi_bmof cfg80211 memstick snd bluetooth videodev processor_thermal_rfim i2c_i801 processor_thermal_rapl mei_me intel_rapl_common realtek soundcore spi_intel_pci i2c_smbus processor_thermal_wt_req mei spi_intel processor_thermal_power_floor mc idma64 rfkill processor_thermal_mbox intel_soc_dts_iosf soc_button_array int3403_thermal int340x_thermal_zone intel_pmc_core intel_vsec int3400_thermal pmt_telemetry intel_hid acpi_thermal_rel acpi_tad acpi_pad pmt_class sparse_keymap joydev loop nfnetlink zram rtsx_usb_sdmmc rtsx_usb i915 i2c_algo_bit drm_buddy ttm
 crct10dif_pclmul nvme crc32_pclmul crc32c_intel polyval_clmulni polyval_generic drm_display_helper sdhci_pci nvme_core cqhci ghash_clmulni_intel sdhci spi_pxa2xx_platform hid_multitouch sha512_ssse3 sha256_ssse3 mmc_core sha1_ssse3 dw_dmac nvme_auth cec i2c_hid_acpi i2c_hid video wmi pinctrl_icelake serio_raw fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 12 Comm: kworker/u2:1 Not tainted 6.6.3-200.fc39.x86_64 #1
Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa318c006bd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa318c006bdb0 RCX: 0000000000000000
RDX: ffff947003308900 RSI: ffffa318c006bde0 RDI: ffffa318c006bde0
RBP: ffffa318c006bde0 R08: ffff947009200018 R09: 0000000000064301
R10: 0000000000000007 R11: 0000000000000007 R12: ffff94700330a060
R13: ffff947009200038 R14: ffffffffc0a8b360 R15: ffff947008b0ec00
FS:  0000000000000000(0000) GS:ffff94707dc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000001062000 CR4: 00000000000106f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x10
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_return_thunk+0x5/0x10
 ? rtw8822b_query_rx_desc+0x1a5/0x330 [rtw88_8822b]
 ? srso_return_thunk+0x5/0x10
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core sunrpc mac80211 libarc4 snd_intel8x0 snd_ac97_codec cfg80211 ac97_bus snd_seq snd_seq_device snd_pcm intel_rapl_msr binfmt_misc intel_rapl_common rfkill snd_timer pcspkr snd vboxguest i2c_piix4 soundcore joydev loop zram crct10dif_pclmul crc32_pclmul vmwgfx crc32c_intel polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 e1000 sha1_ssse3 drm_ttm_helper video ttm ata_generic pata_acpi wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 12 PID: 167 Comm: kworker/u80:3 Tainted: G           OE      6.10.4-200.fc40.x86_64 #1
Hardware name: ASUS System Product Name/ROG STRIX Z490-F GAMING, BIOS 3001 02/16/2024
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb1ef806d7d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb1ef806d7db8 RCX: 0000000000000000
RDX: ffff8b2236530900 RSI: ffffb1ef806d7de8 RDI: ffffb1ef806d7de8
RBP: 00000000000000c8 R08: ffff8b2238360018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffffb1ef806d7de8
R13: ffff8b2236532000 R14: ffff8b2238360038 R15: ffff8b220fabe200
FS:  0000000000000000(0000) GS:ffff8b294da00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000106f8e002 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2f0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x176/0x330
 worker_thread+0x266/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: kvm_intel(+) rtw88_8822bu(+) rtw88_usb snd_hwdep rtw88_8822b snd_seq kvm snd_seq_device rtw88_core btusb iTCO_wdt spi_nor snd_pcm btrtl intel_pmc_bxt btintel mei_hdcp mtd mei_pxp iTCO_vendor_support ee1004 rapl mac80211 snd_timer btbcm eeepc_wmi intel_cstate btmtk bluetooth mei_me intel_uncore asus_wmi igc snd i2c_i801 spi_intel_pci sparse_keymap platform_profile pcspkr intel_wmi_thunderbolt mei wmi_bmof spi_intel i2c_smbus libarc4 soundcore idma64 intel_pmc_core joydev intel_vsec pmt_telemetry pmt_class acpi_pad xone_dongle(OE+) xone_gip(OE) cfg80211 rfkill loop nfnetlink zram uas usb_storage crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni nvme mxm_wmi polyval_generic nvme_core ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 nvme_auth video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 3 PID: 478861 Comm: kworker/u16:14 Tainted: G           OE      6.9.6-100.fc39.x86_64 #1
Hardware name: Hewlett-Packard HP ProBook 4540s/17F6, BIOS 68IRR Ver. F.32 11/06/2012
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa02ca02f7d48 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa02ca02f7dc0 RCX: 0000000000000000
RDX: ffff94cabeb48900 RSI: ffffa02ca02f7df0 RDI: ffffa02ca02f7df0
RBP: 00000000000000c8 R08: ffff94cd01a50018 R09: 000000000000000b
R10: 000000000000000b R11: 000000000000000b R12: ffffa02ca02f7df0
R13: ffff94cabeb49fe0 R14: ffff94cd01a50038 R15: ffffffffc2cda360
FS:  0000000000000000(0000) GS:ffff94cdbfb80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001a6ab0003 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x173/0x590
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2de/0x4a0 [rtw88_8822b]
 rtw_usb_rx_handler+0x9e/0x1d0 [rtw88_usb]
 process_one_work+0x18e/0x3b0
 worker_thread+0x277/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: nft_reject_ipv4 nft_masq nf_nat_h323 nf_conntrack_h323 nf_nat_pptp nf_conntrack_pptp nf_nat_tftp nf_conntrack_tftp nf_nat_sip nf_conntrack_sip nf_nat_irc nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core binfmt_misc rfcomm snd_seq_dummy snd_hrtimer tun nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink vboxnetadp(OE) bnep vboxnetflt(OE) vboxdrv(OE) rt2800pci rt2800mmio rt2800lib uvcvideo intel_rapl_msr rt2x00pci uvc rt2x00mmio btusb iTCO_wdt videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 rt2x00lib btrtl intel_rapl_common intel_pmc_bxt btintel qrtr iTCO_vendor_support mei_hdcp mei_pxp btbcm x86_pkg_temp_thermal intel_powerclamp videobuf2_common coretemp btmtk bluetooth videodev uas mac80211 usb_storage kvm_intel mc snd_hda_codec_hdmi libarc4
 snd_ctl_led ledtrig_audio kvm snd_hda_codec_idt cfg80211 snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_seq rapl intel_cstate intel_uncore hp_wmi wmi_bmof sparse_keymap snd_seq_device platform_profile pcspkr snd_pcm eeprom_93cx6 rfkill jmb38x_ms sunrpc memstick mei_me snd_timer mei snd soundcore lpc_ich vfat fat hp_accel wireless_hotkey lis3lv02d pktcdvd joydev loop zram dm_crypt amdgpu amdxcp drm_exec gpu_sched i915 radeon crct10dif_pclmul sdhci_pci crc32_pclmul crc32c_intel polyval_clmulni polyval_generic cqhci drm_buddy drm_ttm_helper sdhci ttm drm_suballoc_helper i2c_algo_bit ghash_clmulni_intel sha512_ssse3 drm_display_helper sha256_ssse3 mmc_core r8169 sha1_ssse3 cec realtek video wmi serio_raw fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 7 PID: 121 Comm: kworker/u32:4 Not tainted 6.9.7-100.fc39.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./970A-DS3P, BIOS FB 10/31/2014
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa3fdc061bd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa3fdc061bdc0 RCX: 0000000000000000
RDX: ffff8b38130b0900 RSI: ffffa3fdc061bdf0 RDI: ffffa3fdc061bdf0
RBP: 00000000000000c8 R08: ffff8b3809d50018 R09: 0000000000000000
R10: 0000000000000006 R11: 0000000000000000 R12: ffffa3fdc061bdf0
R13: ffff8b38130b1fe0 R14: ffff8b3809d50038 R15: ffffffffc202d360
FS:  0000000000000000(0000) GS:ffff8b3b2ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000010ef98000 CR4: 00000000000406f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x173/0x590
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2de/0x4a0 [rtw88_8822b]
 rtw_usb_rx_handler+0x9e/0x1d0 [rtw88_usb]
 process_one_work+0x18e/0x3b0
 worker_thread+0x277/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic mac80211 snd_hda_scodec_component snd_hda_codec_hdmi snd_usb_audio snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_usbmidi_lib edac_mce_amd snd_ump snd_hda_core snd_rawmidi kvm_amd libarc4 mc snd_hwdep snd_seq ccp cfg80211 kvm snd_seq_device snd_pcm rfkill acpi_cpufreq snd_timer pcspkr snd fam15h_power k10temp soundcore i2c_piix4 loop zram amdgpu crct10dif_pclmul crc32_pclmul crc32c_intel video polyval_clmulni polyval_generic wmi amdxcp i2c_algo_bit drm_ttm_helper ttm drm_exec ghash_clmulni_intel gpu_sched drm_suballoc_helper sha512_ssse3 8139too drm_buddy sha256_ssse3 drm_display_helper r8169 sha1_ssse3 8139cp mii sp5100_tco cec realtek ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 11 Comm: kworker/u32:1 Not tainted 6.9.7-100.fc39.x86_64 #1
Hardware name: LENOVO 10A6A0RQLS/SHARKBAY, BIOS FBKTA5AUS 12/29/2014
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb3a7400cbd48 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb3a7400cbdc0 RCX: 0000000000000000
RDX: ffff9652c6460900 RSI: ffffb3a7400cbdf0 RDI: ffffb3a7400cbdf0
RBP: 00000000000000c8 R08: ffff9652c4ce0018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffb3a7400cbdf0
R13: ffff9652c6461fe0 R14: ffff9652c4ce0038 R15: ffffffffc12b61a0
FS:  0000000000000000(0000) GS:ffff9655cda80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000003fe428006 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x173/0x590
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0x9e/0x1d0 [rtw88_usb]
 process_one_work+0x18e/0x3b0
 worker_thread+0x277/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb rtw88_core mac80211 uvcvideo btusb btrtl btintel btbcm libarc4 cfg80211 btmtk uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common snd_usb_audio bluetooth videodev snd_hda_codec_realtek snd_usbmidi_lib snd_hda_codec_generic snd_hda_codec_hdmi snd_ump snd_rawmidi mc snd_hda_scodec_component snd_hda_intel snd_intel_dspcfg rfkill snd_intel_sdw_acpi snd_hda_codec joydev snd_hda_core mei_pxp snd_hwdep iTCO_wdt snd_seq intel_rapl_msr intel_rapl_common snd_seq_device mei_hdcp x86_pkg_temp_thermal mei_wdt intel_powerclamp snd_pcm intel_pmc_bxt iTCO_vendor_support at24 mei_me coretemp snd_timer pktcdvd snd rapl soundcore intel_cstate intel_uncore mei i2c_i801 i2c_smbus think_lmi firmware_attributes_class wmi_bmof lpc_ich pcspkr loop zram ums_realtek uas hid_logitech_hidpp usb_storage nouveau drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul gpu_sched crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_gpuvm drm_exec mxm_wmi
 ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 e1000e cec sha1_ssse3 video wmi hid_logitech_dj ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 94 Comm: kworker/u16:5 Tainted: G           OE      6.9.5-200.fc40.x86_64 #1
Hardware name: Dell Inc. Latitude 6430U/044GCP, BIOS A15 11/30/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffaa9640367d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffaa9640367db8 RCX: 0000000000000000
RDX: ffff9d76dd718900 RSI: ffffaa9640367de8 RDI: ffffaa9640367de8
RBP: 00000000000000c8 R08: ffff9d7822ed0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffaa9640367de8
R13: ffff9d76dd719fe0 R14: ffff9d7822ed0038 R15: ffff9d76e9325000
FS:  0000000000000000(0000) GS:ffff9d79ce280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000172428001 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct vboxnetadp(OE) vboxnetflt(OE) nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 vboxdrv(OE) ip_set nf_tables qrtr rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core mac80211 libarc4 intel_rapl_msr cfg80211 uvcvideo at24 mei_pxp mei_wdt snd_hda_codec_hdmi mei_hdcp intel_rapl_common uvc x86_pkg_temp_thermal videobuf2_vmalloc snd_hda_codec_idt intel_powerclamp videobuf2_memops videobuf2_v4l2 snd_hda_codec_generic coretemp iTCO_wdt videobuf2_common intel_pmc_bxt kvm_intel ppdev videodev iTCO_vendor_support snd_hda_intel dell_laptop mc dell_smm_hwmon snd_intel_dspcfg snd_intel_sdw_acpi kvm snd_hda_codec snd_hda_core dell_wmi snd_hwdep sunrpc rapl dell_smbios dcdbas snd_seq intel_cstate intel_uncore snd_seq_device dell_wmi_descriptor wmi_bmof snd_pcm sparse_keymap i2c_i801 pcspkr i2c_smbus mei_me
 snd_timer e1000e snd mei lpc_ich soundcore binfmt_misc parport_pc parport dell_rbtn rfkill joydev loop nfnetlink zram i915 sdhci_pci crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni cqhci polyval_generic sdhci i2c_algo_bit drm_buddy ttm ghash_clmulni_intel mmc_core sha512_ssse3 sha256_ssse3 sha1_ssse3 drm_display_helper cec video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 11 Comm: kworker/u48:1 Not tainted 6.9.6-200.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B450M DS3H/B450M DS3H-CF, BIOS F50 11/27/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb59c0011fd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb59c0011fdb8 RCX: 0000000000000000
RDX: ffff986f87578900 RSI: ffffb59c0011fde8 RDI: ffffb59c0011fde8
RBP: 00000000000000c8 R08: ffff986f98e00018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffffb59c0011fde8
R13: ffff986f87579fe0 R14: ffff986f98e00038 R15: ffff986f8b1bf600
FS:  0000000000000000(0000) GS:ffff98767ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000103916000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic mac80211 snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel intel_rapl_msr amd_atl snd_intel_dspcfg intel_rapl_common snd_intel_sdw_acpi snd_hda_codec edac_mce_amd snd_hda_core kvm_amd snd_hwdep libarc4 snd_seq kvm snd_seq_device cfg80211 snd_pcm snd_timer gigabyte_wmi wmi_bmof snd r8169 rfkill rapl pcspkr acpi_cpufreq k10temp realtek i2c_piix4 soundcore gpio_amdpt joydev gpio_generic loop nfnetlink zram amdgpu video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel gpu_sched polyval_clmulni drm_suballoc_helper polyval_generic drm_buddy nvme ghash_clmulni_intel drm_display_helper sha512_ssse3 nvme_core sha256_ssse3 ccp cec sha1_ssse3 sp5100_tco nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 11 Comm: kworker/u48:1 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B450M DS3H/B450M DS3H-CF, BIOS F50 11/27/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa7564011fd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa7564011fdb8 RCX: 0000000000000000
RDX: ffff9c21a0298900 RSI: ffffa7564011fde8 RDI: ffffa7564011fde8
RBP: 00000000000000c8 R08: ffff9c21a18a0018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffffa7564011fde8
R13: ffff9c21a0299fe0 R14: ffff9c21a18a0038 R15: ffff9c218c1a4800
FS:  0000000000000000(0000) GS:ffff9c2c6ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000105bd4000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c rtw88_usb rtw88_core snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi mac80211 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core uas ucsi_ccg snd_hwdep typec_ucsi intel_rapl_msr snd_seq libarc4 typec snd_seq_device usb_storage ledtrig_netdev amd_atl btusb snd_pcm cfg80211 intel_rapl_common btrtl btintel edac_mce_amd btbcm btmtk snd_timer gigabyte_wmi wmi_bmof rapl r8169 bluetooth snd pcspkr acpi_cpufreq i2c_piix4 k10temp realtek soundcore i2c_nvidia_gpu rfkill joydev gpio_amdpt gpio_generic loop nfnetlink zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 ccp sha1_ssse3 sp5100_tco wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 11 PID: 706 Comm: kworker/u48:11 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B760M DS3H/B760M DS3H, BIOS F14 09/15/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa38b81b37d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa38b81b37db8 RCX: 0000000000000000
RDX: ffff93062b830900 RSI: ffffa38b81b37de8 RDI: ffffa38b81b37de8
RBP: 00000000000000c8 R08: ffff930636930018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffa38b81b37de8
R13: ffff93062b831fe0 R14: ffff930636930038 R15: ffff930609be5f00
FS:  0000000000000000(0000) GS:ffff9309afd80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000106b96000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? dev_vprintk_emit+0x181/0x1b0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: coretemp(+) rtw88_8821cu(+) rtw88_8821c snd_hda_intel rtw88_usb snd_intel_dspcfg snd_usbmidi_lib btusb(+) kvm_intel snd_intel_sdw_acpi iwlmvm(+) rtw88_core snd_hda_codec spi_nor snd_ump btrtl iTCO_wdt intel_pmc_bxt ppdev snd_rawmidi btintel mtd iTCO_vendor_support snd_hda_core kvm mac80211 mc snd_hwdep iwlwifi btbcm snd_seq btmtk snd_seq_device rapl libarc4 bluetooth ledtrig_netdev joydev intel_cstate snd_pcm cfg80211 intel_uncore snd_timer gigabyte_wmi wmi_bmof snd pcspkr r8169 intel_pmc_core soundcore intel_vsec i2c_i801 parport_pc rfkill intel_hid pmt_telemetry spi_intel_pci realtek spi_intel i2c_smbus idma64 sparse_keymap acpi_pad parport pmt_class mei_me acpi_tad mei i2c_dev loop nfnetlink zram amdgpu amdxcp i2c_algo_bit drm_ttm_helper crct10dif_pclmul ttm crc32_pclmul crc32c_intel polyval_clmulni drm_exec polyval_generic gpu_sched drm_suballoc_helper drm_buddy ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 sha1_ssse3 cec video wmi pinctrl_alderlake ip6_tables
 ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 8 PID: 622 Comm: kworker/u64:8 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ASUS TUF Gaming F15 FX506LI_FX566LI/FX506LI, BIOS FX506LI.310 11/26/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffab1f81bf7d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffab1f81bf7db8 RCX: 0000000000000000
RDX: ffff9c77787a8900 RSI: ffffab1f81bf7de8 RDI: ffffab1f81bf7de8
RBP: 00000000000000c8 R08: ffff9c777a000018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffab1f81bf7de8
R13: ffff9c77787a9fe0 R14: ffff9c777a000038 R15: ffff9c777dbf3c00
FS:  0000000000000000(0000) GS:ffff9c794e200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000040b428004 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? sched_clock_cpu+0xf/0x1f0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core pktcdvd uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof iwlmvm snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl mac80211 snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc intel_uncore_frequency intel_uncore_frequency_common snd_soc_sst_dsp snd_soc_acpi_intel_match intel_tcc_cooling snd_soc_acpi x86_pkg_temp_thermal snd_hda_codec_realtek intel_powerclamp snd_soc_core snd_hda_codec_generic coretemp snd_hda_scodec_component kvm_intel snd_compress snd_hda_codec_hdmi ac97_bus
 libarc4 snd_pcm_dmaengine snd_hda_intel snd_intel_dspcfg uvcvideo kvm uvc snd_intel_sdw_acpi snd_hda_codec videobuf2_vmalloc videobuf2_memops snd_hda_core iwlwifi btusb processor_thermal_device_pci_legacy videobuf2_v4l2 ledtrig_netdev processor_thermal_device snd_hwdep videobuf2_common btrtl asus_nb_wmi snd_seq processor_thermal_wt_hint btintel spi_nor asus_wmi snd_seq_device rapl iTCO_wdt btbcm processor_thermal_rfim intel_pmc_bxt btmtk intel_cstate mei_hdcp mei_pxp iTCO_vendor_support videodev ee1004 mtd snd_pcm intel_rapl_msr r8169 processor_thermal_rapl sparse_keymap snd_timer bluetooth platform_profile cfg80211 intel_uncore wmi_bmof mc pcspkr mei_me intel_rapl_common realtek i2c_i801 snd mei spi_intel_pci processor_thermal_wt_req idma64 i2c_smbus processor_thermal_power_floor spi_intel rfkill processor_thermal_mbox soundcore int3403_thermal intel_soc_dts_iosf intel_pch_thermal int340x_thermal_zone intel_pmc_core intel_vsec int3400_thermal pmt_telemetry joydev acpi_pad asus_wireless acpi_thermal_rel
 pmt_class squashfs loop nfnetlink zram i915 nouveau nvme drm_ttm_helper gpu_sched crct10dif_pclmul crc32_pclmul nvme_core drm_gpuvm crc32c_intel polyval_clmulni drm_exec polyval_generic drm_buddy i2c_algo_bit ttm uas hid_multitouch ucsi_acpi ghash_clmulni_intel drm_display_helper mxm_wmi typec_ucsi sha512_ssse3 sha256_ssse3 usb_storage sha1_ssse3 cec typec nvme_auth i2c_hid_acpi i2c_hid video wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 15 PID: 22691 Comm: kworker/u64:27 Tainted: G        W          6.9.5-200.fc40.x86_64 #1
Hardware name: ASUSTeK COMPUTER INC. ASUS TUF Gaming F15 FX506LI_FX566LI/FX506LI, BIOS FX506LI.310 11/26/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb23c211e3d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffb23c211e3db8 RCX: 0000000000000000
RDX: ffff914a43708900 RSI: ffffb23c211e3de8 RDI: ffffb23c211e3de8
RBP: 00000000000000c8 R08: ffff914abee60018 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000002 R12: ffffb23c211e3de8
R13: ffff914a43709fe0 R14: ffff914abee60038 R15: ffff914a3eb3b800
FS:  0000000000000000(0000) GS:ffff914ace580000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000002e045a003 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: squashfs rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core pktcdvd uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof iwlmvm snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core mac80211 snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_codec_realtek snd_soc_acpi_intel_match snd_soc_acpi snd_hda_codec_generic snd_soc_core intel_uncore_frequency intel_uncore_frequency_common intel_tcc_cooling snd_hda_scodec_component x86_pkg_temp_thermal intel_powerclamp coretemp snd_hda_codec_hdmi snd_compress ac97_bus
 snd_pcm_dmaengine kvm_intel snd_hda_intel snd_intel_dspcfg libarc4 snd_intel_sdw_acpi snd_hda_codec snd_hda_core kvm processor_thermal_device_pci_legacy btusb snd_hwdep iwlwifi uvcvideo snd_seq btrtl processor_thermal_device btintel uvc iTCO_wdt snd_seq_device spi_nor processor_thermal_wt_hint videobuf2_vmalloc mei_hdcp btbcm videobuf2_memops processor_thermal_rfim btmtk intel_pmc_bxt ee1004 mei_pxp snd_pcm intel_rapl_msr mtd videobuf2_v4l2 rapl iTCO_vendor_support processor_thermal_rapl cfg80211 ledtrig_netdev mei_me bluetooth videobuf2_common intel_cstate snd_timer intel_rapl_common asus_nb_wmi videodev intel_uncore asus_wmi r8169 i2c_i801 snd processor_thermal_wt_req sparse_keymap mc spi_intel_pci platform_profile realtek mei processor_thermal_power_floor wmi_bmof processor_thermal_mbox spi_intel pcspkr idma64 soundcore i2c_smbus rfkill intel_soc_dts_iosf intel_pch_thermal int3403_thermal int340x_thermal_zone intel_pmc_core intel_vsec int3400_thermal joydev pmt_telemetry acpi_thermal_rel pmt_class
 asus_wireless acpi_pad loop nfnetlink zram i915 nouveau drm_ttm_helper gpu_sched drm_gpuvm drm_exec drm_buddy i2c_algo_bit ttm nvme crct10dif_pclmul crc32_pclmul crc32c_intel nvme_core drm_display_helper polyval_clmulni polyval_generic uas hid_multitouch ucsi_acpi ghash_clmulni_intel mxm_wmi sha512_ssse3 sha256_ssse3 typec_ucsi usb_storage sha1_ssse3 cec nvme_auth typec i2c_hid_acpi i2c_hid video wmi pinctrl_cannonlake serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 21 PID: 794 Comm: kworker/u96:13 Tainted: P S      W  OE      6.9.5-200.fc40.x86_64 #1
Hardware name: Apple Inc. MacPro6,1/Mac-F60DEB81FF30ACF6, BIOS 481.0.0.0.0 10/07/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0000:ffffa8dd015f7d38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa8dd015f7db8 RCX: 0000000000000000
RDX: ffff978220dc8900 RSI: ffffa8dd015f7de8 RDI: ffffa8dd015f7de8
RBP: 00000000000000c8 R08: ffff9782a6790018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffa8dd015f7de8
R13: ffff978220dc9fe0 R14: ffff9782a6790038 R15: ffff97820bad2400
FS:  0000000000000000(0000) GS:ffff97913fc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001b7428003 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: uinput vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc intel_rapl_msr intel_rapl_common sb_edac x86_pkg_temp_thermal intel_powerclamp rtw88_8822bu rtw88_usb snd_hda_codec_cirrus coretemp btusb rtw88_8822b snd_hda_codec_generic snd_hda_codec_hdmi vfat kvm_intel btrtl rtw88_core fat snd_hda_intel btintel snd_intel_dspcfg btbcm snd_intel_sdw_acpi wl(POE) btmtk kvm mac80211 snd_hda_codec bluetooth snd_hda_core snd_hwdep rapl snd_seq libarc4 snd_seq_device iTCO_wdt intel_pmc_bxt intel_cstate at24 iTCO_vendor_support applesmc snd_pcm thunderbolt cfg80211 intel_uncore pcspkr snd_timer i2c_i801 lpc_ich i2c_smbus mei_me snd tg3 ioatdma mei rfkill soundcore dca
 apple_gmux joydev apple_mfi_fastcharge loop nfnetlink zram amdxcp drm_exec gpu_sched drm_buddy hid_logitech_hidpp drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul crc32c_intel video polyval_clmulni polyval_generic wmi i2c_algo_bit nvme drm_suballoc_helper ghash_clmulni_intel drm_display_helper sha512_ssse3 nvme_core sha256_ssse3 sha1_ssse3 cec nvme_auth hid_logitech_dj ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 1762 Comm: kworker/u12:0 Not tainted 6.9.5-200.fc40.x86_64 #1
Hardware name: TOSHIBA Satellite L675D/NALAE, BIOS 1.70 08/02/2011
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffaef04424bd38 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffaef04424bdb8 RCX: 0000000000000000
RDX: ffff9508e93c0900 RSI: ffffaef04424bde8 RDI: ffffaef04424bde8
RBP: 00000000000000c8 R08: ffff9508e9010018 R09: 0000000000000007
R10: 0000000000000007 R11: 0000000000000002 R12: ffffaef04424bde8
R13: ffff9508e93c1fe0 R14: ffff9508e9010038 R15: ffff950883a45600
FS:  0000000000000000(0000) GS:ffff9509b8000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000103afa000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? search_module_extables+0x19/0x60
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x268/0x460 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x189/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xd2/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc binfmt_misc rtl8192ce rtl_pci rtl8192c_common uvcvideo uvc videobuf2_vmalloc snd_hda_codec_realtek rtlwifi videobuf2_memops snd_hda_codec_generic videobuf2_v4l2 snd_hda_codec_hdmi snd_hda_scodec_component mac80211 snd_hda_intel videobuf2_common snd_intel_dspcfg videodev snd_intel_sdw_acpi snd_hda_codec libarc4 mc snd_hda_core cfg80211 edac_mce_amd kvm_amd ccp pcspkr kvm k10temp toshiba_acpi i2c_piix4 snd_hwdep snd_seq snd_seq_device snd_pcm pktcdvd snd_timer sparse_keymap snd acpi_cpufreq ledtrig_netdev industrialio rfkill r8169 soundcore realtek joydev loop nfnetlink zram amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_ttm_helper ttm ums_realtek uas
 i2c_algo_bit drm_suballoc_helper usb_storage drm_display_helper sp5100_tco cec video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 7 PID: 121 Comm: kworker/u32:6 Tainted: G           OE      6.9.5-200.fc40.x86_64 #1
Hardware name: MSI MS-7A70/B250M PRO-VDH (MS-7A70), BIOS A.80 07/03/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffba0f8044fd38 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffba0f8044fdb8 RCX: 0000000000000000
RDX: ffff9c6933f58900 RSI: ffffba0f8044fde8 RDI: ffffba0f8044fde8
RBP: 00000000000000c8 R08: ffff9c6941690018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffba0f8044fde8
R13: ffff9c6933f59fe0 R14: ffff9c6941690038 R15: ffff9c6888466600
FS:  0000000000000000(0000) GS:ffff9c6dd6d80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000056e428003 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die_body.cold+0x19/0x27
 ? page_fault_oops+0x15a/0x2c0
 ? exc_page_fault+0x7e/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2e0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x186/0x340
 worker_thread+0x278/0x3b0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xcf/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core mac80211 libarc4 cfg80211 uas usb_storage uinput snd_seq_dummy snd_hrtimer vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) rfkill qrtr binfmt_misc vfat fat uvcvideo snd_soc_avs uvc videobuf2_vmalloc videobuf2_memops snd_soc_hda_codec snd_hda_codec_hdmi videobuf2_v4l2 snd_usb_audio snd_hda_ext_core videobuf2_common snd_soc_core videodev snd_usbmidi_lib snd_hda_codec_realtek snd_ump snd_hda_codec_generic snd_rawmidi snd_compress snd_hda_scodec_component ac97_bus mc intel_rapl_msr snd_pcm_dmaengine joydev intel_rapl_common intel_uncore_frequency intel_uncore_frequency_common snd_hda_intel snd_intel_dspcfg intel_tcc_cooling x86_pkg_temp_thermal snd_intel_sdw_acpi intel_powerclamp snd_hda_codec coretemp snd_hda_core kvm_intel snd_hwdep snd_seq snd_seq_device snd_pcm kvm iTCO_wdt pktcdvd intel_pmc_bxt ppdev snd_timer mei_hdcp iTCO_vendor_support mei_pxp ee1004 snd ledtrig_netdev rapl intel_cstate r8169 soundcore intel_uncore mei_me intel_pmc_core realtek
 pcspkr i2c_i801 mei i2c_smbus intel_vsec intel_wmi_thunderbolt pmt_telemetry mxm_wmi parport_pc pmt_class parport acpi_pad loop nfnetlink i915 i2c_algo_bit drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ttm ghash_clmulni_intel drm_display_helper sha512_ssse3 sha256_ssse3 sha1_ssse3 cec video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 12 Comm: kworker/u64:1 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: System manufacturer System Product Name/ROG STRIX B450-F GAMING, BIOS 2202 04/10/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffff9d81c0127d30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffff9d81c0127db0 RCX: 0000000000000000
RDX: ffff8892c5818900 RSI: ffff9d81c0127de0 RDI: ffff9d81c0127de0
RBP: 00000000000000c8 R08: ffff8892ecbd0018 R09: 0000000000000140
R10: 0000000000000002 R11: 0000000000000002 R12: ffff9d81c0127de0
R13: ffff8892c5819fc0 R14: ffff8892ecbd0038 R15: ffff8892c4c08c00
FS:  0000000000000000(0000) GS:ffff8895ce300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000003f1428000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? srso_return_thunk+0x5/0x5f
 ? wakeup_preempt+0x61/0x70
 ? srso_return_thunk+0x5/0x5f
 ? load_balance+0x8a5/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 ? rtw8822b_query_rx_desc+0x1b7/0x4b0 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi mac80211 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_seq intel_rapl_msr snd_seq_device libarc4 asus_wmi_sensors snd_pcm intel_rapl_common eeepc_wmi cfg80211 asus_wmi snd_timer edac_mce_amd ledtrig_audio igb sparse_keymap snd uas platform_profile rapl mxm_wmi wmi_bmof pcspkr acpi_cpufreq k10temp soundcore dca i2c_piix4 nzxt_smart2 usb_storage rfkill joydev gpio_amdpt gpio_generic loop nfnetlink zram amdgpu video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul gpu_sched crc32c_intel polyval_clmulni drm_suballoc_helper polyval_generic drm_buddy nvme ghash_clmulni_intel sha512_ssse3 drm_display_helper nvme_core sha256_ssse3 ccp sha1_ssse3 cec sp5100_tco nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000101
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 80000002a7986067 P4D 80000002a7986067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 11077 Comm: kworker/u8:45 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: HP HP ProDesk 600 G3 SFF/82B4, BIOS P07 Ver. 02.16 03/29/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:__queue_work+0x12/0x80
Code: 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 54 41 89 fc 55 48 89 d5 53 48 89 f3 <66> f7 86 01 01 00 00 80 01 75 17 e8 ce 9c 09 00 48 89 ea 48 89 de
RSP: 0018:ffffaf41cc59bd68 EFLAGS: 00010096
RAX: 0000000000000297 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff9283c0bc72a0 RSI: 0000000000000000 RDI: 0000000000002000
RBP: ffff9283c0bc72a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000011 R12: 0000000000002000
R13: 0000000000000018 R14: ffffffffc123f320 R15: ffff9283cbf1b500
FS:  0000000000000000(0000) GS:ffff9283df400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000101 CR3: 0000000210436006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? __slab_free+0xdf/0x310
 ? asm_common_interrupt+0x26/0x40
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? __queue_work+0x12/0x80
 ? rtw_fw_c2h_cmd_rx_irqsafe+0x89/0x130 [rtw88_core]
 queue_work_on+0x3b/0x50
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uhid uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep snd_soc_avs snd_soc_hda_codec snd_hda_ext_core snd_soc_core snd_hda_codec_hdmi snd_hda_codec_conexant snd_hda_codec_generic intel_rapl_msr intel_rapl_common snd_compress ac97_bus intel_uncore_frequency intel_uncore_frequency_common snd_pcm_dmaengine intel_pmc_core_pltdrv intel_pmc_core snd_hda_intel rtw88_8723du rtw88_8821cu intel_vsec snd_intel_dspcfg rtw88_8821c rtw88_8723d snd_intel_sdw_acpi rtw88_usb pmt_telemetry rtw88_core pmt_class sunrpc snd_hda_codec intel_tcc_cooling btusb mac80211 x86_pkg_temp_thermal intel_powerclamp coretemp btrtl kvm_intel snd_hda_core btintel iTCO_wdt btbcm intel_pmc_bxt mei_pxp mei_wdt mei_hdcp ee1004 iTCO_vendor_support snd_hwdep btmtk snd_seq kvm bluetooth libarc4
 snd_seq_device cfg80211 snd_pcm irqbypass rapl hp_wmi intel_cstate sparse_keymap intel_uncore platform_profile snd_timer snd wmi_bmof pcspkr soundcore i2c_i801 rfkill i2c_smbus mei_me mei pktcdvd binfmt_misc vfat fat acpi_pad joydev loop nfnetlink zram i915 crct10dif_pclmul crc32_pclmul i2c_algo_bit crc32c_intel polyval_clmulni polyval_generic nvme nvme_core ghash_clmulni_intel drm_buddy sha512_ssse3 sha256_ssse3 ttm e1000e serio_raw drm_display_helper sha1_ssse3 nvme_auth video cec wmi ip6_tables ip_tables fuse
CR2: 0000000000000101

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 8000000179e3f067 P4D 8000000179e3f067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 750788 Comm: kworker/u8:2 Tainted: G     U     OE      6.8.9-300.fc40.x86_64 #1
Hardware name: Acer Aspire F5-573/Captain_SK  , BIOS V1.27 05/26/2017
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0000:ffff9dfd4190bd30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff9dfd4190bdb0 RCX: 0000000000000000
RDX: ffff907bf1668900 RSI: ffff9dfd4190bde0 RDI: ffff9dfd4190bde0
RBP: 00000000000000c8 R08: ffff907ad0f20018 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000002 R12: ffff9dfd4190bde0
R13: ffff907bf1669fc0 R14: ffff907ad0f20038 R15: ffff907b4440c400
FS:  0000000000000000(0000) GS:ffff907e01500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000179b62003 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? load_balance+0x303/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: usblp rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core squashfs uinput rfcomm snd_seq_dummy snd_hrtimer pktcdvd bnep vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) qrtr snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_soc_skl snd_soc_hdac_hda snd_hda_codec_hdmi snd_hda_ext_core sunrpc snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_ctl_led snd_soc_core ledtrig_audio intel_rapl_msr snd_hda_codec_realtek snd_compress ac97_bus snd_hda_codec_generic intel_rapl_common snd_pcm_dmaengine intel_tcc_cooling ath9k x86_pkg_temp_thermal intel_powerclamp snd_hda_intel coretemp kvm_intel snd_intel_dspcfg ath9k_common snd_intel_sdw_acpi ath9k_hw uvcvideo ee1004 iTCO_wdt snd_hda_codec kvm mei_hdcp intel_pmc_bxt mei_pxp iTCO_vendor_support uvc videobuf2_vmalloc videobuf2_memops ath3k
 videobuf2_v4l2 snd_hda_core btusb mac80211 videobuf2_common snd_hwdep irqbypass videodev libarc4 snd_seq btrtl rapl btintel snd_seq_device btbcm ath btmtk acer_wmi intel_wmi_thunderbolt snd_pcm intel_cstate mc intel_uncore bluetooth mmc_block pcspkr wmi_bmof sparse_keymap cfg80211 snd_timer snd platform_profile binfmt_misc rfkill soundcore i2c_i801 mei_me i2c_smbus mei idma64 intel_pch_thermal vfat intel_xhci_usb_role_switch fat intel_pmc_core acpi_pad intel_vsec pmt_telemetry pmt_class joydev loop nfnetlink zram i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_buddy ttm r8169 ghash_clmulni_intel hid_multitouch sha512_ssse3 rtsx_pci sha256_ssse3 drm_display_helper realtek sha1_ssse3 i2c_hid_acpi i2c_hid cec video wmi serio_raw uas usb_storage ip6_tables ip_tables fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 62883 Comm: kworker/u8:22 Tainted: G        W          6.8.9-300.fc40.x86_64 #1
Hardware name: HP HP Laptop 14-cf0xxx/84B2, BIOS F.73 11/18/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc281412bbd30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffc281412bbdb0 RCX: 0000000000000000
RDX: ffffa005f26c8900 RSI: ffffc281412bbde0 RDI: ffffc281412bbde0
RBP: 00000000000000c8 R08: ffffa00837870018 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000002 R12: ffffc281412bbde0
R13: ffffa005f26c9fc0 R14: ffffa00837870038 R15: ffffa0059d3c8d00
FS:  0000000000000000(0000) GS:ffffa00bced00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001ce428006 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables sunrpc qrtr bnep snd_sof_pci_intel_skl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils soundwire_generic_allocation soundwire_bus snd_soc_avs snd_soc_hda_codec snd_hda_codec_hdmi snd_soc_skl snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_ctl_led ledtrig_audio binfmt_misc snd_hda_codec_realtek rtw88_8822be rtw88_8822b snd_compress snd_hda_codec_generic rtw88_pci intel_uncore_frequency ac97_bus intel_uncore_frequency_common intel_tcc_cooling snd_pcm_dmaengine rtw88_core x86_pkg_temp_thermal
 intel_powerclamp snd_hda_intel coretemp snd_intel_dspcfg vfat snd_intel_sdw_acpi fat snd_hda_codec kvm_intel mac80211 snd_hda_core uvcvideo kvm iTCO_wdt mei_pxp mei_hdcp intel_pmc_bxt iTCO_vendor_support ee1004 uvc intel_rapl_msr btusb snd_hwdep libarc4 videobuf2_vmalloc snd_seq btrtl videobuf2_memops btintel irqbypass videobuf2_v4l2 rapl videobuf2_common btbcm snd_seq_device btmtk intel_cstate cfg80211 snd_pcm bluetooth hp_wmi videodev processor_thermal_device_pci_legacy intel_uncore processor_thermal_device sparse_keymap platform_profile processor_thermal_wt_hint wmi_bmof processor_thermal_rfim snd_timer intel_wmi_thunderbolt processor_thermal_rapl mc snd intel_rapl_common mei_me pcspkr i2c_i801 processor_thermal_wt_req rfkill i2c_smbus soundcore mei processor_thermal_power_floor processor_thermal_mbox intel_xhci_usb_role_switch idma64 intel_pch_thermal intel_soc_dts_iosf int3403_thermal int340x_thermal_zone intel_pmc_core intel_vsec pmt_telemetry int3400_thermal acpi_thermal_rel pmt_class acpi_pad
 wireless_hotkey joydev squashfs loop nfnetlink zram i915 crct10dif_pclmul nvme i2c_algo_bit crc32_pclmul drm_buddy crc32c_intel polyval_clmulni ttm polyval_generic nvme_core drm_display_helper r8169 ghash_clmulni_intel sha512_ssse3 hid_multitouch sha256_ssse3 realtek sha1_ssse3 nvme_auth i2c_hid_acpi cec i2c_hid video wmi serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 PID: 796 Comm: kworker/u32:16 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: ASRock H510M-H2/M.2 SE/H510M-H2/M.2 SE, BIOS P1.10 08/14/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa97240aa3d30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffa97240aa3db0 RCX: 0000000000000000
RDX: ffff9ce45c790900 RSI: ffffa97240aa3de0 RDI: ffffa97240aa3de0
RBP: 00000000000000c8 R08: ffff9ce44a7b0018 R09: 0000000000000100
R10: 0000000000000007 R11: 0000000000000001 R12: ffffa97240aa3de0
R13: ffff9ce45c791fc0 R14: ffff9ce44a7b0038 R15: ffff9ce441ab4b00
FS:  0000000000000000(0000) GS:ffff9ceb7fb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000010fe28006 CR4: 0000000000770ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? pick_eevdf+0x160/0x1a0
 ? __slab_free+0xdf/0x310
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2e2/0x4b0 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) x86_pkg_temp_thermal rtw88_usb intel_powerclamp rtw88_8822b coretemp snd_hda_codec_realtek(+) rtw88_core kvm_intel snd_hda_codec_generic snd_hda_codec_hdmi snd_usb_audio mac80211 snd_hda_intel snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec binfmt_misc snd_usbmidi_lib snd_ump snd_rawmidi snd_hda_core mc snd_hwdep snd_seq irqbypass snd_seq_device libarc4 vfat intel_cstate snd_pcm fat spi_nor cfg80211 jc42 snd_timer mtd iTCO_wdt mei_hdcp intel_pmc_bxt mei_pxp snd ee1004 iTCO_vendor_support spi_intel_pci mei_me i2c_i801 intel_uncore rfkill wmi_bmof mei pcspkr spi_intel i2c_smbus intel_pch_thermal soundcore joydev intel_pmc_core intel_vsec pmt_telemetry acpi_tad pmt_class acpi_pad loop nfnetlink zram nouveau drm_ttm_helper ttm gpu_sched crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit polyval_clmulni drm_gpuvm polyval_generic nvme drm_exec mxm_wmi drm_display_helper ghash_clmulni_intel nvme_core sha512_ssse3 r8169 sha256_ssse3 cec sha1_ssse3 nvme_auth realtek
 video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 145 Comm: kworker/u64:3 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. A320M-S2H/A320M-S2H-CF, BIOS F56g 12/25/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffbf02006c3d30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffbf02006c3db0 RCX: 0000000000000000
RDX: ffff9c7b3db80900 RSI: ffffbf02006c3de0 RDI: ffffbf02006c3de0
RBP: 00000000000000c8 R08: ffff9c7b095f0018 R09: 0000000000000005
R10: 0000000000000005 R11: 0000000000000002 R12: ffffbf02006c3de0
R13: ffff9c7b3db81fc0 R14: ffff9c7b095f0038 R15: ffff9c7b04ce2200
FS:  0000000000000000(0000) GS:ffff9c7e2e300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000107c28000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? load_balance+0x303/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0xfbef5
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu(+) rtw88_8821c snd_hda_codec_realtek(+) rtw88_usb snd_hda_codec_generic rtw88_core snd_hda_codec_hdmi intel_rapl_msr snd_hda_intel intel_rapl_common snd_intel_dspcfg snd_usb_audio(+) edac_mce_amd snd_intel_sdw_acpi mac80211 snd_hda_codec kvm_amd snd_usbmidi_lib snd_ump snd_hda_core snd_rawmidi snd_hwdep libarc4 mc kvm snd_seq snd_seq_device irqbypass cfg80211 snd_pcm snd_timer wmi_bmof gigabyte_wmi rapl acpi_cpufreq k10temp i2c_piix4 pcspkr rfkill snd joydev soundcore gpio_amdpt gpio_generic loop nfnetlink zram amdgpu video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel gpu_sched polyval_clmulni drm_suballoc_helper polyval_generic drm_buddy ghash_clmulni_intel nvme sha512_ssse3 drm_display_helper sha256_ssse3 sha1_ssse3 cec nvme_core ccp r8169 sp5100_tco realtek nvme_auth wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 6 PID: 709 Comm: kworker/u16:14 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: System manufacturer System Product Name/H170-PRO, BIOS 3805 05/16/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffaa0e00df7d30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffaa0e00df7db0 RCX: 0000000000000000
RDX: ffff9bab640a0900 RSI: ffffaa0e00df7de0 RDI: ffffaa0e00df7de0
RBP: 00000000000000c8 R08: 0000000000000000 R09: ffff9bab415ddc80
R10: 0000000000000011 R11: 000000000000005a R12: ffffaa0e00df7de0
R13: ffff9bab640a1fc0 R14: ffff9bab60d60042 R15: ffff9bab4158c600
FS:  0000000000000000(0000) GS:ffff9bae66100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000294428003 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? wakeup_preempt+0x5e/0x70
 ? load_balance+0x8a5/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) snd_hda_codec_generic rtw88_usb intel_rapl_msr rtw88_8822b intel_rapl_common snd_compress ac97_bus intel_tcc_cooling snd_pcm_dmaengine x86_pkg_temp_thermal rtw88_core intel_powerclamp snd_hda_intel coretemp snd_intel_dspcfg snd_intel_sdw_acpi kvm_intel snd_hda_codec mac80211 kvm snd_hda_core btusb snd_hwdep btrtl btintel snd_seq libarc4 iTCO_wdt intel_pmc_bxt irqbypass btbcm snd_seq_device iTCO_vendor_support ee1004 mei_wdt btmtk mei_pxp eeepc_wmi mei_hdcp rapl asus_wmi cfg80211 snd_pcm intel_cstate bluetooth ledtrig_audio i2c_i801 sparse_keymap snd_timer platform_profile intel_uncore wmi_bmof mxm_wmi snd pcspkr mei_me soundcore i2c_smbus mei rfkill intel_pmc_core intel_vsec pmt_telemetry pmt_class acpi_pad joydev loop nfnetlink zram i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic i2c_algo_bit drm_buddy ghash_clmulni_intel ttm sha512_ssse3 r8169 sha256_ssse3 drm_display_helper sha1_ssse3 realtek cec video wmi uas usb_storage ip6_tables
 ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 110a6f067 P4D 110a6f067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 9 PID: 1947 Comm: kworker/u256:2 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7B09/X399 GAMING PRO CARBON AC (MS-7B09), BIOS 1.D6 02/05/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffae45d1ffbd30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffae45d1ffbdb0 RCX: 0000000000000000
RDX: ffff8bb3c6858900 RSI: ffffae45d1ffbde0 RDI: ffffae45d1ffbde0
RBP: 00000000000000c8 R08: ffff8bb3c7120018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffae45d1ffbde0
R13: ffff8bb3c6859fc0 R14: ffff8bb3c7120038 R15: ffff8bb3991c2b00
FS:  0000000000000000(0000) GS:ffff8bba9b680000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000010fb2c000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rfcomm snd_seq_dummy snd_hrtimer xt_mark xt_connmark xt_comment nft_compat nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_intel rtw88_8821cu snd_intel_dspcfg intel_rapl_msr rtw88_8821c snd_intel_sdw_acpi btusb iwlmvm intel_rapl_common rtw88_usb btrtl snd_hda_codec edac_mce_amd rtw88_core btintel snd_hda_core btbcm snd_hwdep btmtk kvm_amd mac80211 snd_seq bluetooth snd_seq_device libarc4 kvm iwlwifi irqbypass snd_pcm cfg80211 rapl snd_timer wmi_bmof snd acpi_cpufreq mxm_wmi soundcore rfkill k10temp pcspkr i2c_piix4 joydev gpio_amdpt gpio_generic i2c_dev loop nfnetlink zram dm_crypt amdgpu video amdxcp drm_ttm_helper crct10dif_pclmul crc32_pclmul ttm crc32c_intel polyval_clmulni drm_exec
 polyval_generic gpu_sched nvme drm_suballoc_helper drm_buddy ghash_clmulni_intel sha512_ssse3 igb uas drm_display_helper nvme_core sha256_ssse3 dca usb_storage sha1_ssse3 cec ccp sp5100_tco nvme_auth i2c_algo_bit wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000010
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 5 PID: 7893 Comm: kworker/u24:2 Tainted: G S      W          6.8.9-300.fc40.x86_64 #1
Hardware name: To be filled by O.E.M. To be filled by O.E.M./X79, BIOS 4.6.5 06/06/2020
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
Code: 47 0e e3 f2 48 8b 3b 48 8d b3 e0 52 00 00 5b 5d 41 5c 41 5d 41 5e e9 a0 a3 05 00 48 8b 47 38 4c 8b a0 38 01 00 00 48 8b 47 10 <45> 8b 6c 24 10 41 8b 74 24 0c 48 8b 40 68 4d 89 ee f3 4d 0f bc ed
RSP: 0018:ffffb1d7cc22fd68 EFLAGS: 00010246
RAX: ffffffffc0b4f3c0 RBX: ffff9e212b4e9fc0 RCX: 0000000000000000
RDX: ffff9e244b0d5c00 RSI: 0000000000000093 RDI: ffff9e212b4e9fc0
RBP: ffff9e244b0d5c00 R08: 0000000000000003 R09: 00000000466641f2
R10: 0000000000000068 R11: 0000000000000011 R12: 0000000000000000
R13: 0000000000000093 R14: ffffffffc11f61a0 R15: ffff9e244b0d5c00
FS:  0000000000000000(0000) GS:ffff9e246fa80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000010 CR3: 0000000207428002 CR4: 00000000001706f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? search_bpf_extables+0x5f/0x80
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_fw_c2h_cmd_rx_irqsafe+0xaf/0x130 [rtw88_core]
 rtw_usb_rx_handler+0x1d2/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc binfmt_misc vfat fat intel_rapl_msr rtw88_8821cu rtw88_8821c intel_rapl_common sb_edac rtw88_usb x86_pkg_temp_thermal intel_powerclamp rtw88_core coretemp snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi kvm_intel mac80211 snd_usb_audio snd_hda_intel libarc4 snd_intel_dspcfg kvm snd_intel_sdw_acpi uvcvideo iTCO_wdt cfg80211 snd_hda_codec snd_usbmidi_lib intel_pmc_bxt uvc iTCO_vendor_support videobuf2_vmalloc snd_hda_core irqbypass snd_ump snd_rawmidi rapl snd_hwdep videobuf2_memops videobuf2_v4l2 snd_seq intel_cstate snd_seq_device videobuf2_common snd_pcm rfkill intel_uncore videodev i2c_i801 pcspkr snd_timer i2c_smbus lpc_ich mc snd joydev soundcore loop nfnetlink zram nouveau drm_ttm_helper
 crct10dif_pclmul ttm crc32_pclmul crc32c_intel polyval_clmulni video polyval_generic gpu_sched i2c_algo_bit drm_gpuvm ghash_clmulni_intel drm_exec sha512_ssse3 mxm_wmi sha256_ssse3 drm_display_helper r8169 sha1_ssse3 cec realtek wmi ip6_tables ip_tables fuse
CR2: 0000000000000010

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 12 Comm: kworker/u64:1 Tainted: G           OE      6.8.9-300.fc40.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7C37/MPG X570 GAMING PLUS (MS-7C37), BIOS A.60 11/06/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb0bf0011fd30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb0bf0011fdb0 RCX: 0000000000000000
RDX: ffff88c982c38900 RSI: ffffb0bf0011fde0 RDI: ffffb0bf0011fde0
RBP: 00000000000000c8 R08: ffff88c985960018 R09: 000000000000000b
R10: 000000000000000b R11: 0000000000000002 R12: ffffb0bf0011fde0
R13: ffff88c982c39fc0 R14: ffff88c985960038 R15: ffff88c94172a900
FS:  0000000000000000(0000) GS:ffff88d03e280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000732428000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? srso_return_thunk+0x5/0x5f
 ? __smp_call_single_queue+0xc6/0x150
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 ? rtw8822b_query_rx_desc+0x2e2/0x4b0 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b snd_hda_codec_realtek(+) kvm_amd(+) rtw88_core snd_hda_codec_generic snd_hda_codec_hdmi ccp snd_hda_intel snd_usb_audio(+) snd_intel_dspcfg mac80211 kvm snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_usbmidi_lib snd_ump irqbypass libarc4 snd_hwdep rapl snd_seq snd_rawmidi wmi_bmof uvcvideo snd_seq_device cfg80211 pcspkr uvc acpi_cpufreq snd_pcm k10temp videobuf2_vmalloc i2c_piix4 videobuf2_memops snd_timer videobuf2_v4l2 snd rfkill video videobuf2_common joydev soundcore squashfs v4l2loopback(OE) videodev mc loop dm_multipath nfnetlink zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic uas ghash_clmulni_intel usb_storage sha512_ssse3 sha256_ssse3 sha1_ssse3 r8169 sp5100_tco wmi realtek hid_cmedia wacom scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 14 PID: 11439 Comm: kworker/u56:13 Not tainted 6.8.9-300.fc40.x86_64 #1
Hardware name: MACHINIST /X99-MR9A PRO MAX, BIOS 5.11 04/29/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffabe908707d30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffabe908707db0 RCX: 0000000000000000
RDX: ffff8a6db8398900 RSI: ffffabe908707de0 RDI: ffffabe908707de0
RBP: 00000000000000c8 R08: ffff8a6d89c70018 R09: 0000000000000320
R10: 0000000000000003 R11: 0000000000000002 R12: ffffabe908707de0
R13: ffff8a6db8399fc0 R14: ffff8a6d89c70038 R15: ffff8a6deaae6600
FS:  0000000000000000(0000) GS:ffff8a731f900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000036e428002 CR4: 00000000003706f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? load_balance+0xbd0/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core mac80211 libarc4 cfg80211 uas usb_storage uinput snd_seq_dummy snd_hrtimer rfcomm nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr bnep sunrpc binfmt_misc vfat fat intel_rapl_msr intel_rapl_common intel_uncore_frequency intel_uncore_frequency_common x86_pkg_temp_thermal intel_powerclamp coretemp snd_hda_codec_realtek kvm_intel snd_hda_codec_generic snd_hda_codec_hdmi btusb btrtl btintel snd_usb_audio snd_hda_intel btbcm btmtk snd_intel_dspcfg kvm snd_usbmidi_lib snd_intel_sdw_acpi snd_ump snd_hda_codec snd_rawmidi bluetooth snd_hda_core mc snd_hwdep snd_seq irqbypass snd_seq_device iTCO_wdt snd_pcm rapl intel_pmc_bxt iTCO_vendor_support gpio_ich intel_cstate snd_timer i2c_i801 intel_uncore rfkill mxm_wmi pcspkr snd i2c_smbus lpc_ich soundcore joydev
 squashfs loop nfnetlink zram amdgpu hid_logitech_hidpp video amdxcp i2c_algo_bit drm_ttm_helper ttm crct10dif_pclmul drm_exec crc32_pclmul crc32c_intel gpu_sched polyval_clmulni polyval_generic drm_suballoc_helper ghash_clmulni_intel nvme drm_buddy sha512_ssse3 drm_display_helper sha256_ssse3 nvme_core r8169 sha1_ssse3 serio_raw cec realtek nvme_auth wmi hid_logitech_dj ip6_tables ip_tables fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 20 PID: 32896 Comm: kworker/u48:24 Tainted: G        W          6.8.9-300.fc40.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7D25/PRO Z690-A DDR4(MS-7D25), BIOS 1.H0 03/29/2024
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc06f4becbd30 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffc06f4becbdb0 RCX: 0000000000000000
RDX: ffff9c8bbc560900 RSI: ffffc06f4becbde0 RDI: ffffc06f4becbde0
RBP: 00000000000000c8 R08: ffff9c8bc6b60018 R09: 00000000000000a0
R10: 0000000000000005 R11: 0000000000000001 R12: ffffc06f4becbde0
R13: ffff9c8bbc561fc0 R14: ffff9c8bc6b60038 R15: ffff9c8ad06e3400
FS:  0000000000000000(0000) GS:ffff9c960f600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001a838e000 CR4: 0000000000f52ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? enqueue_hrtimer+0x42/0xa0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x1b7/0x4b0 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x16f/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: tun uas rndis_host cdc_ether usb_storage usbnet mii xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nft_compat nf_nat_tftp nf_conntrack_tftp bridge stp llc uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc binfmt_misc snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match intel_rapl_msr snd_soc_acpi intel_rapl_common soundwire_generic_allocation snd_hda_codec_realtek soundwire_bus intel_uncore_frequency intel_uncore_frequency_common intel_tcc_cooling snd_hda_codec_generic snd_soc_core snd_hda_codec_hdmi rtw88_8822bu rtw88_usb x86_pkg_temp_thermal intel_powerclamp rtw88_8822b
 snd_compress coretemp ac97_bus snd_pcm_dmaengine rtw88_core kvm_intel snd_hda_intel snd_intel_dspcfg snd_usb_audio snd_intel_sdw_acpi mac80211 kvm snd_hda_codec snd_usbmidi_lib snd_hda_core snd_ump snd_rawmidi mc snd_hwdep snd_seq vfat irqbypass libarc4 fat jc42 spi_nor rapl snd_seq_device iTCO_wdt intel_pmc_bxt intel_cstate cfg80211 mtd mei_hdcp mei_pxp ee1004 snd_pcm iTCO_vendor_support snd_timer mei_gsc snd mei_me i2c_i801 spi_intel_pci rfkill intel_pmc_core pcspkr spi_intel mei mxm_wmi i2c_smbus soundcore wmi_bmof intel_uncore serial_multi_instantiate joydev intel_vsec pmt_telemetry pmt_class acpi_pad acpi_tad loop nfnetlink zram xe drm_ttm_helper gpu_sched drm_suballoc_helper drm_gpuvm drm_exec i915 crct10dif_pclmul i2c_algo_bit crc32_pclmul drm_buddy crc32c_intel polyval_clmulni polyval_generic ttm nvme drm_display_helper ghash_clmulni_intel nvme_core sha512_ssse3 igc sha256_ssse3 cec sha1_ssse3 nvme_auth video wmi pinctrl_alderlake ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 8 PID: 38018 Comm: kworker/u64:2 Tainted: P        W  OE      6.8.9-300.fc40.x86_64 #1
Hardware name: Micro-Star International Co., Ltd MS-7B86/B450-A PRO MAX (MS-7B86), BIOS M.I1 03/22/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
Code: 48 89 44 24 28 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb69dc72a3d30 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb69dc72a3db0 RCX: 0000000000000000
RDX: ffff94539a800900 RSI: ffffb69dc72a3de0 RDI: ffffb69dc72a3de0
RBP: 00000000000000c8 R08: ffff94571d200018 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000002 R12: ffffb69dc72a3de0
R13: ffff94539a801fc0 R14: ffff94571d200038 R15: ffff9456b80fa400
FS:  0000000000000000(0000) GS:ffff945725600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000230428000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x174/0x540
 ? srso_return_thunk+0x5/0x5f
 ? load_balance+0x303/0x1390
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x5d/0x2d0 [rtw88_core]
 ? srso_return_thunk+0x5/0x5f
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x172/0x330
 worker_thread+0x273/0x3c0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: overlay xt_mark xt_cgroup xt_comment nft_compat snd_seq_dummy snd_hrtimer nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr nvidia(POE) sunrpc binfmt_misc vfat fat rtw88_8821cu rtw88_8821c rtw88_usb rtw88_core intel_rapl_msr snd_hda_codec_realtek intel_rapl_common snd_hda_codec_generic snd_hda_codec_hdmi snd_usb_audio edac_mce_amd snd_hda_intel mac80211 snd_intel_dspcfg snd_intel_sdw_acpi snd_usbmidi_lib kvm_amd snd_hda_codec snd_ump snd_hda_core libarc4 ppdev snd_rawmidi snd_hwdep kvm cfg80211 uvcvideo irqbypass snd_seq uvc rfkill rapl snd_seq_device wmi_bmof videobuf2_vmalloc videobuf2_memops snd_pcm videobuf2_v4l2 pcspkr videobuf2_common snd_timer k10temp i2c_piix4 videodev snd mc soundcore joydev parport_pc parport gpio_amdpt gpio_generic
 loop nfnetlink zram dm_crypt crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel nvme sha512_ssse3 r8169 sha256_ssse3 nvme_core sha1_ssse3 ccp realtek sp5100_tco nvme_auth video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#3] PREEMPT SMP NOPTI
CPU: 17 PID: 32185 Comm: kworker/u64:1 Tainted: P      D    OE      6.8.7-100.fc38.x86_64 #1
Hardware name: MouseComputer X570-PG4/X570-PG4, BIOS M4.20 08/17/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffa9dc97bc7d48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffa9dc97bc7db0 RCX: 0000000000000000
RDX: ffff91c9d67b8900 RSI: ffffa9dc97bc7de0 RDI: ffffa9dc97bc7de0
RBP: ffffa9dc97bc7de0 R08: ffff91cab7390018 R09: 000000000018edad
R10: 0000000000000008 R11: 0000000000000008 R12: ffff91c9d67b9fc0
R13: ffff91cab7390038 R14: ffffffffc0df8360 R15: ffff91cc470e4100
FS:  0000000000000000(0000) GS:ffff91d0dee40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000032a41a000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? update_load_avg+0x7e/0x7e0
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput ntfs3 rfcomm snd_seq_dummy snd_hrtimer sunrpc nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nvidia_drm(POE) nvidia_modeset(POE) nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nvidia_uvm(POE) ip_set nf_tables nfnetlink qrtr bnep nvidia(POE) binfmt_misc vfat fat snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_intel rtw88_8822bu snd_intel_dspcfg rtw88_usb snd_intel_sdw_acpi snd_usb_audio intel_rapl_msr rtw88_8822b snd_hda_codec intel_rapl_common uvcvideo rtw88_core edac_mce_amd uvc snd_usbmidi_lib snd_hda_core videobuf2_vmalloc btusb snd_ump videobuf2_memops btrtl kvm_amd snd_rawmidi videobuf2_v4l2 btintel snd_hwdep mac80211 videobuf2_common snd_seq btbcm snd_seq_device libarc4 kvm btmtk videodev snd_pcm irqbypass mc bluetooth wmi_bmof snd_timer cfg80211 rapl acpi_cpufreq snd pcspkr i2c_piix4 soundcore k10temp video rfkill joydev
 squashfs loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core ccp sha256_ssse3 sha1_ssse3 sp5100_tco nvme_auth wmi wacom hid_logitech_hidpp ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 2 PID: 11 Comm: kworker/u48:0 Not tainted 6.8.4-200.fc39.x86_64 #1
Hardware name: ASUS System Product Name/TUF GAMING B650M-E WIFI, BIOS 1616 05/16/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffba010013fd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffba010013fdb0 RCX: 0000000000000000
RDX: ffff91cac6820900 RSI: ffffba010013fde0 RDI: ffffba010013fde0
RBP: ffffba010013fde0 R08: ffff91cadb010018 R09: 0000000000000205
R10: 0000000000000004 R11: 0000000000000004 R12: ffff91cac6821fc0
R13: ffff91cadb010038 R14: ffffffffc11f8360 R15: ffff91cac1fba900
FS:  0000000000000000(0000) GS:ffff91d21da80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000005a7422000 CR4: 0000000000f50ef0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? autoremove_wake_function+0x32/0x60
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x171/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) vfat rtw88_usb fat rtw88_8822b rtw88_core snd_hda_codec_realtek(+) snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_intel mac80211 snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec intel_rapl_msr intel_rapl_common edac_mce_amd snd_hda_core snd_hwdep kvm_amd snd_seq libarc4 snd_seq_device asus_nb_wmi eeepc_wmi kvm cfg80211 snd_pcm asus_wmi snd_timer irqbypass ledtrig_audio snd sparse_keymap platform_profile rfkill rapl wmi_bmof pcspkr k10temp i2c_piix4 joydev soundcore gpio_amdpt gpio_generic loop zram dm_crypt nouveau drm_ttm_helper ttm crct10dif_pclmul crc32_pclmul gpu_sched crc32c_intel polyval_clmulni i2c_algo_bit polyval_generic drm_gpuvm nvme drm_exec ghash_clmulni_intel mxm_wmi sha512_ssse3 sha256_ssse3 drm_display_helper nvme_core ccp r8169 sha1_ssse3 sp5100_tco cec realtek nvme_auth video wmi fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 116 Comm: kworker/u16:4 Not tainted 6.6.14-200.fc39.x86_64 #1
Hardware name: BIOSTAR Group H410MH S2/H410MH S2, BIOS 5.19 01/11/2022
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc90000477d48 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffc90000477db0 RCX: 0000000000000000
RDX: ffff888128070900 RSI: ffffc90000477de0 RDI: ffffc90000477de0
RBP: ffffc90000477de0 R08: ffff888128440018 R09: 0000000000000407
R10: 0000000000000004 R11: 0000000000000004 R12: ffff888128072060
R13: ffff888128440038 R14: ffffffffc1ac5360 R15: ffff888100d3ca00
FS:  0000000000000000(0000) GS:ffff888462cc0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000103702001 CR4: 00000000003706e0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? clear_state_bit+0xf3/0x140
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x1a5/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x171/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) x86_pkg_temp_thermal(+) snd_hda_codec_realtek(+) intel_powerclamp rtw88_usb snd_hda_codec_generic coretemp rtw88_8822b ledtrig_audio snd_hda_codec_hdmi kvm_intel rtw88_core snd_hda_intel iTCO_wdt intel_pmc_bxt snd_usb_audio(+) iTCO_vendor_support uvcvideo snd_intel_dspcfg kvm mac80211 snd_intel_sdw_acpi ee1004 snd_usbmidi_lib mei_pxp mei_hdcp uvc snd_hda_codec btusb irqbypass videobuf2_vmalloc videobuf2_memops snd_ump videobuf2_v4l2 btrtl snd_rawmidi snd_hda_core videobuf2_common btintel libarc4 btbcm btmtk rapl videodev snd_seq i2c_i801 snd_hwdep intel_cstate snd_seq_device cfg80211 bluetooth intel_uncore snd_pcm wmi_bmof pcspkr i2c_smbus mei_me snd_timer mc snd mei rfkill soundcore idma64 joydev acpi_tad acpi_pad squashfs loop zram amdgpu crct10dif_pclmul crc32_pclmul i2c_algo_bit crc32c_intel drm_ttm_helper polyval_clmulni ttm polyval_generic drm_exec drm_suballoc_helper amdxcp ghash_clmulni_intel drm_buddy gpu_sched sha512_ssse3 e1000e drm_display_helper sha256_ssse3
 sha1_ssse3 serio_raw cec video wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 11205 Comm: kworker/u32:12 Not tainted 6.6.8-200.fc39.x86_64 #1
Hardware name: HP HP 245 G8 Notebook PC/879E, BIOS F.62 04/23/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc9000b92fd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffc9000b92fdb0 RCX: 0000000000000000
RDX: ffff888082928900 RSI: ffffc9000b92fde0 RDI: ffffc9000b92fde0
RBP: ffffc9000b92fde0 R08: ffff888008ea0018 R09: 000000000000028a
R10: 0000000000000004 R11: 0000000000000004 R12: ffff88808292a060
R13: ffff888008ea0038 R14: ffffffffc1c95360 R15: ffff88800b55a100
FS:  0000000000000000(0000) GS:ffff88811eec0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000002afc000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x10
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_return_thunk+0x5/0x10
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_sof_amd_renoir intel_rapl_msr snd_sof_amd_acp intel_rapl_common snd_sof_pci edac_mce_amd snd_sof_xtensa_dsp sunrpc rtw88_8822bu kvm_amd snd_sof rtw88_usb snd_ctl_led rtw88_8822ce snd_hda_codec_realtek snd_sof_utils snd_hda_codec_generic rtw88_8822b rtw88_8822c ledtrig_audio snd_hda_codec_hdmi rtw88_pci kvm snd_hda_intel snd_intel_dspcfg snd_soc_core uvcvideo rtw88_core btusb uvc snd_compress snd_intel_sdw_acpi btrtl videobuf2_vmalloc snd_hda_codec ac97_bus snd_pcm_dmaengine btintel videobuf2_memops irqbypass snd_pci_ps snd_rpl_pci_acp6x btbcm videobuf2_v4l2 snd_pci_acp6x rapl btmtk mac80211 videobuf2_common snd_pci_acp5x snd_hda_core videodev hp_wmi
 libarc4 sparse_keymap snd_hwdep wmi_bmof platform_profile bluetooth snd_seq snd_rn_pci_acp3x snd_seq_device mc snd_acp_config pcspkr acpi_cpufreq cfg80211 snd_soc_acpi i2c_piix4 k10temp snd_pcm snd_pci_acp3x snd_timer snd rfkill soundcore binfmt_misc wireless_hotkey vfat fat joydev loop zram amdgpu crct10dif_pclmul crc32_pclmul crc32c_intel i2c_algo_bit drm_ttm_helper polyval_clmulni ttm polyval_generic drm_exec drm_suballoc_helper amdxcp drm_buddy ghash_clmulni_intel gpu_sched sha512_ssse3 sha256_ssse3 sha1_ssse3 drm_display_helper nvme nvme_core cec sp5100_tco ccp r8169 nvme_common video hid_multitouch i2c_hid_acpi wmi i2c_hid serio_raw ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 12 Comm: kworker/u64:1 Not tainted 6.6.8-100.fc38.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. B650 AORUS ELITE AX/B650 AORUS ELITE AX, BIOS FC 11/08/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc9000011bd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffc9000011bdb0 RCX: 0000000000000000
RDX: ffff88810bf78900 RSI: ffffc9000011bde0 RDI: ffffc9000011bde0
RBP: ffffc9000011bde0 R08: ffff88814f6e0018 R09: 0000000000000205
R10: 0000000000000004 R11: 0000000000000004 R12: ffff88810bf7a060
R13: ffff88814f6e0038 R14: ffffffffc1a6b360 R15: ffff888102eeb100
FS:  0000000000000000(0000) GS:ffff889018380000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000d31222000 CR4: 0000000000f50ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_alias_return_thunk+0x5/0x7f
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0x7f
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc1/0x1e0 [rtw88_usb]
 process_one_work+0x171/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe5/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x31/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb snd_hda_codec_realtek(+) rtw88_8822b snd_hda_codec_generic rtw88_core ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi intel_rapl_msr mac80211 snd_usb_audio(+) snd_hda_codec intel_rapl_common snd_usbmidi_lib uvcvideo edac_mce_amd snd_ump snd_hda_core btusb snd_rawmidi btrtl uvc snd_hwdep videobuf2_vmalloc libarc4 btintel snd_seq videobuf2_memops btbcm btmtk videobuf2_v4l2 cfg80211 snd_seq_device videobuf2_common kvm bluetooth snd_pcm videodev snd_timer irqbypass rfkill mc snd joydev rapl gigabyte_wmi wmi_bmof pcspkr k10temp i2c_piix4 soundcore loop zram hid_logitech_hidpp amdgpu hid_logitech_dj i2c_algo_bit drm_ttm_helper ttm drm_exec crct10dif_pclmul drm_suballoc_helper crc32_pclmul crc32c_intel amdxcp polyval_clmulni drm_buddy polyval_generic ghash_clmulni_intel nvme gpu_sched sha512_ssse3 sha256_ssse3 drm_display_helper uas sha1_ssse3 nvme_core ccp usb_storage r8169 sp5100_tco cec video nvme_common wmi ip6_tables ip_tables
 fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 2 PID: 35148 Comm: kworker/u16:2 Not tainted 6.6.8-200.fc39.x86_64 #1
Hardware name: Dell Inc. Precision Tower 5810/0HHV7N, BIOS A27 06/25/2018
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc9000975fd48 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffc9000975fdb0 RCX: 0000000000000000
RDX: ffff888123060900 RSI: ffffc9000975fde0 RDI: ffffc9000975fde0
RBP: ffffc9000975fde0 R08: ffff8885012f0018 R09: 00000000000032b3
R10: 0000000000000005 R11: 0000000000000005 R12: ffff888123062060
R13: ffff8885012f0038 R14: ffffffffc1068360 R15: ffff8882dbe41100
FS:  0000000000000000(0000) GS:ffff88880fc80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000046222004 CR4: 00000000003706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? __smp_call_single_queue+0xad/0x120
 ? ttwu_queue_wakelist+0xef/0x110
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr sunrpc rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core mac80211 intel_rapl_msr intel_rapl_common intel_uncore_frequency libarc4 intel_uncore_frequency_common sb_edac cfg80211 snd_hda_codec_realtek snd_hda_codec_generic x86_pkg_temp_thermal intel_powerclamp ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec rfkill coretemp snd_hda_core snd_hwdep kvm_intel joydev snd_seq snd_seq_device snd_pcm snd_timer kvm binfmt_misc snd irqbypass soundcore dell_smm_hwmon intel_wmi_thunderbolt vfat fat rapl intel_cstate dell_smbios wmi_bmof dcdbas dell_wmi_descriptor iTCO_wdt intel_pmc_bxt mei_wdt iTCO_vendor_support intel_uncore pktcdvd mei_me i2c_i801 mei i2c_smbus lpc_ich
 pcspkr loop zram nouveau crct10dif_pclmul drm_ttm_helper crc32_pclmul ttm crc32c_intel polyval_clmulni polyval_generic video drm_exec nvme ghash_clmulni_intel gpu_sched igb mxm_wmi sha512_ssse3 drm_display_helper sha256_ssse3 e1000e sha1_ssse3 nvme_core cec dca i2c_algo_bit nvme_common wmi ums_realtek uas usb_storage ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 22 PID: 12 Comm: kworker/u64:1 Tainted: G           OE      6.6.2-201.fc39.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7B84/B450M PRO-M2 V2 (MS-7B84), BIOS 4.A0 06/15/2020
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc9000011fd48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffc9000011fdb0 RCX: 0000000000000000
RDX: ffff88812ab20900 RSI: ffffc9000011fde0 RDI: ffffc9000011fde0
RBP: ffffc9000011fde0 R08: ffff88813cac0018 R09: 0000000000005057
R10: 0000000000000006 R11: 0000000000000006 R12: ffff88812ab22060
R13: ffff88813cac0038 R14: ffffffffc0d2d360 R15: ffff888105101700
FS:  0000000000000000(0000) GS:ffff8887fef80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000011db98000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x10
 ? ttwu_queue_wakelist+0xef/0x110
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_return_thunk+0x5/0x10
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core mac80211 libarc4 cfg80211 uvcvideo uvc videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common rfkill sunrpc binfmt_misc vfat fat snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg intel_rapl_msr snd_intel_sdw_acpi snd_usb_audio intel_rapl_common snd_hda_codec edac_mce_amd snd_usbmidi_lib snd_hda_core snd_ump kvm_amd snd_hwdep snd_rawmidi snd_seq snd_seq_device snd_pcm kvm irqbypass snd_timer rapl wmi_bmof snd video i2c_piix4 gpio_amdpt soundcore acpi_cpufreq k10temp pcspkr gpio_generic v4l2loopback(OE) videodev mc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 ccp r8169 sp5100_tco wmi scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables nct6775 nct6775_core hwmon_vid dm_multipath analog gameport joydev fuse i2c_dev
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 PID: 12 Comm: kworker/u64:1 Not tainted 6.6.2-201.fc39.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7A34/B350 TOMAHAWK (MS-7A34), BIOS 1.OR 11/29/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffc90000117d48 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffc90000117db0 RCX: 0000000000000000
RDX: ffff888106600900 RSI: ffffc90000117de0 RDI: ffffc90000117de0
RBP: ffffc90000117de0 R08: ffff88811f6b0018 R09: 0000000000003fcf
R10: 0000000000000006 R11: 0000000000000006 R12: ffff888106602060
R13: ffff88811f6b0038 R14: ffffffffc0c77360 R15: ffff88810bd75b00
FS:  0000000000000000(0000) GS:ffff88840eb40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000104864000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_return_thunk+0x5/0x10
 ? check_preempt_curr+0x61/0x70
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_return_thunk+0x5/0x10
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x174/0x340
 worker_thread+0x27b/0x3a0
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb intel_rapl_msr rtw88_8822b intel_rapl_common snd_hda_codec_realtek rtw88_core edac_mce_amd snd_hda_codec_generic vfat fat ledtrig_audio snd_hda_codec_hdmi kvm_amd mac80211 snd_hda_intel snd_usb_audio(+) uvcvideo snd_intel_dspcfg libarc4 uvc ppdev snd_intel_sdw_acpi snd_usbmidi_lib kvm snd_hda_codec cfg80211 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 snd_hda_core snd_ump snd_rawmidi snd_hwdep irqbypass snd_seq videobuf2_common rapl snd_seq_device rfkill snd_pcm videodev snd_timer pcspkr video wmi_bmof acpi_cpufreq k10temp i2c_piix4 snd mc joydev soundcore parport_pc gpio_amdpt parport gpio_generic loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel ccp sha512_ssse3 hid_plantronics sp5100_tco r8169 wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 8 PID: 702 Comm: kworker/u64:12 Tainted: G           OE      6.5.10-200.fc38.x86_64 #1
Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./B450 Gaming-ITX/ac, BIOS P3.70 11/18/2019
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb389c058fd58 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb389c058fdc0 RCX: 0000000000000000
RDX: ffff9784eb1f8900 RSI: ffffb389c058fdf0 RDI: ffffb389c058fdf0
RBP: ffffb389c058fdf0 R08: ffff9784ebba0018 R09: 0000000000000205
R10: 0000000000000004 R11: 0000000000000004 R12: ffff9784eb1fa0a0
R13: ffff9784ebba0038 R14: ffffffffc12c9360 R15: ffff9784c3262a00
FS:  0000000000000000(0000) GS:ffff9787cec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000003d5222000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_return_thunk+0x5/0x10
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb iwlmvm(+) rtw88_8822b squashfs rtw88_core ucsi_ccg(+) snd_hda_codec_realtek typec_ucsi snd_hda_codec_generic mac80211 snd_hda_codec_hdmi typec ledtrig_audio intel_rapl_msr snd_hda_intel intel_rapl_common snd_intel_dspcfg snd_intel_sdw_acpi edac_mce_amd libarc4 iwlwifi rapl snd_usb_audio wmi_bmof btusb btrtl snd_hda_codec btbcm snd_usbmidi_lib btintel pcspkr acpi_cpufreq k10temp video i2c_piix4 btmtk snd_hda_core i2c_nvidia_gpu bluetooth snd_ump snd_hwdep snd_rawmidi snd_seq_device gpio_amdpt gpio_generic nfsd xone_gip_headset(OE) auth_rpcgss nfs_acl lockd grace sunrpc loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni igb polyval_generic nvme ghash_clmulni_intel dca i2c_algo_bit sha512_ssse3 sp5100_tco nvme_core wmi nvme_common xone_wired(OE) snd_pcm snd_timer snd soundcore xone_gip_guitar(OE) xone_gip_gamepad(OE) ff_memless xone_gip_chatpad(OE) xone_dongle(OE) cfg80211 xone_gip(OE) rfkill kvm_amd ccp kvm irqbypass ip6_tables ip_tables analog
 gameport joydev fuse videodev mc
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 9 PID: 138 Comm: kworker/u32:3 Not tainted 6.5.10-200.fc38.x86_64 #1
Hardware name: INTEL X99/X99, BIOS 5.11 01/30/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffab82c05ffd58 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffab82c05ffdc0 RCX: 0000000000000000
RDX: ffff9a93b0b20900 RSI: ffffab82c05ffdf0 RDI: ffffab82c05ffdf0
RBP: ffffab82c05ffdf0 R08: ffff9a93af550018 R09: fffffffffffff962
R10: 0000000000000003 R11: 0000000000000003 R12: ffff9a93b0b220a0
R13: ffff9a93af550038 R14: ffffffffc1c00360 R15: ffff9a9381550200
FS:  0000000000000000(0000) GS:ffff9a9adfe40000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000109f46005 CR4: 00000000003706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? need_active_balance+0x51/0x180
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x1a5/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b coretemp(+) snd_hda_codec_realtek(+) rtw88_core kvm_intel snd_hda_codec_generic snd_hda_codec_hdmi ledtrig_audio snd_hda_intel mac80211 snd_intel_dspcfg snd_intel_sdw_acpi kvm snd_hda_codec iwlwifi btusb snd_hda_core snd_hwdep btrtl snd_seq btbcm irqbypass libarc4 btintel iTCO_wdt rapl btmtk intel_pmc_bxt snd_seq_device intel_cstate iTCO_vendor_support cfg80211 bluetooth snd_pcm mxm_wmi i2c_i801 intel_uncore pcspkr snd_timer snd i2c_smbus rfkill soundcore lpc_ich joydev squashfs loop zram amdgpu amdxcp iommu_v2 drm_buddy gpu_sched hid_logitech_hidpp radeon drm_ttm_helper ttm crct10dif_pclmul nvme crc32_pclmul video crc32c_intel i2c_algo_bit polyval_clmulni drm_suballoc_helper polyval_generic nvme_core drm_display_helper ghash_clmulni_intel sha512_ssse3 r8169 serio_raw cec nvme_common wmi hid_logitech_dj ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 999e4067 P4D 999e4067 PUD 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 20 PID: 18101 Comm: kworker/u64:10 Tainted: P        W  OE      6.5.8-200.fc38.x86_64 #1
Hardware name: MouseComputer X570-PG4/X570-PG4, BIOS M4.20 08/17/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffadb892c0fd58 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffadb892c0fdc0 RCX: 0000000000000000
RDX: ffff8c752b058900 RSI: ffffadb892c0fdf0 RDI: ffffadb892c0fdf0
RBP: ffffadb892c0fdf0 R08: ffff8c7553560018 R09: 0000000000001968
R10: 0000000000000005 R11: 0000000000000005 R12: ffff8c752b05a0a0
R13: ffff8c7553560038 R14: ffffffffc0df7360 R15: ffff8c75063de500
FS:  0000000000000000(0000) GS:ffff8c7c1ef00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 0000000077472000 CR4: 0000000000750ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? srso_alias_return_thunk+0x5/0x7f
 ? __mutex_lock.constprop.0+0x10f/0x6a0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0x7f
 ? rtw8822b_query_rx_desc+0x1a5/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: ntfs3 uas usb_storage rfcomm snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nvidia_drm(POE) nvidia_modeset(POE) nf_tables nfnetlink nvidia_uvm(POE) qrtr bnep sunrpc nvidia(POE) binfmt_misc vfat fat snd_hda_codec_realtek rtw88_8822bu rtw88_usb snd_hda_codec_generic rtw88_8822b snd_hda_codec_hdmi ledtrig_audio rtw88_core snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi mac80211 snd_usb_audio snd_hda_codec snd_usbmidi_lib intel_rapl_msr snd_hda_core snd_ump intel_rapl_common snd_rawmidi snd_hwdep uvcvideo edac_mce_amd btusb snd_seq btrtl uvc btbcm videobuf2_vmalloc snd_seq_device libarc4 kvm_amd videobuf2_memops btintel videobuf2_v4l2 btmtk snd_pcm kvm videobuf2_common cfg80211 bluetooth snd_timer videodev irqbypass snd rapl acpi_cpufreq video pcspkr wmi_bmof i2c_piix4 k10temp rfkill
 mc soundcore joydev loop zram crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel nvme_core sha512_ssse3 ccp sp5100_tco nvme_common wmi hid_logitech_hidpp hid_lg_g15 ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 4 PID: 785 Comm: kworker/u64:13 Tainted: P           OE      6.5.8-200.fc38.x86_64 #1
Hardware name: MouseComputer X570-PG4/X570-PG4, BIOS M4.20 08/17/2021
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffbaabc0fd3d58 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffbaabc0fd3dc0 RCX: 0000000000000000
RDX: ffff8da444e90900 RSI: ffffbaabc0fd3df0 RDI: ffffbaabc0fd3df0
RBP: ffffbaabc0fd3df0 R08: ffff8da4bfaa0018 R09: 00000000000032b3
R10: 0000000000000005 R11: 0000000000000005 R12: ffff8da444e920a0
R13: ffff8da4bfaa0038 R14: ffffffffc0f5b360 R15: ffff8da444279c00
FS:  0000000000000000(0000) GS:ffff8dab5eb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001844be000 CR4: 0000000000750ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_alias_return_thunk+0x5/0x7f
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: uinput snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nvidia_drm(POE) sunrpc nvidia_modeset(POE) nvidia_uvm(POE) nf_tables nfnetlink qrtr nvidia(POE) bnep binfmt_misc vfat fat rtw88_8822bu rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic mac80211 snd_hda_codec_hdmi ledtrig_audio uvcvideo snd_hda_intel intel_rapl_msr snd_intel_dspcfg intel_rapl_common snd_usb_audio snd_intel_sdw_acpi uvc videobuf2_vmalloc edac_mce_amd videobuf2_memops snd_hda_codec videobuf2_v4l2 btusb videobuf2_common kvm_amd snd_usbmidi_lib libarc4 snd_hda_core snd_ump btrtl snd_rawmidi snd_hwdep btbcm kvm btintel videodev snd_seq cfg80211 snd_seq_device btmtk irqbypass snd_pcm bluetooth mc rapl snd_timer wmi_bmof snd pcspkr acpi_cpufreq rfkill i2c_piix4 k10temp video soundcore joydev
 loop zram ccp crct10dif_pclmul crc32_pclmul crc32c_intel nvme polyval_clmulni polyval_generic nvme_core ghash_clmulni_intel sha512_ssse3 sp5100_tco nvme_common wmi hid_logitech_hidpp hid_lg_g15 ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 8 PID: 772 Comm: kworker/u64:6 Tainted: P           OE      6.5.8-200.fc38.x86_64 #1
Hardware name: Micro-Star International Co., Ltd. MS-7C35/MEG X570 UNIFY (MS-7C35), BIOS A.G0 04/29/2023
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffb66280a93d58 EFLAGS: 00010216
RAX: 0000000000000000 RBX: ffffb66280a93dc0 RCX: 0000000000000000
RDX: ffff94ba494e0900 RSI: ffffb66280a93df0 RDI: ffffb66280a93df0
RBP: ffffb66280a93df0 R08: ffff94ba4f5a0018 R09: 000000000031bd1e
R10: 0000000000000008 R11: 0000000000000008 R12: ffff94ba494e20a0
R13: ffff94ba4f5a0038 R14: ffffffffc4dee360 R15: ffff94ba536d5d00
FS:  0000000000000000(0000) GS:ffff94c92ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 000000012e52c000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? srso_return_thunk+0x5/0x10
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b rtw88_core snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi mac80211 snd_usb_audio snd_hda_intel snd_intel_dspcfg intel_rapl_msr snd_intel_sdw_acpi intel_rapl_common snd_hda_codec snd_usbmidi_lib edac_mce_amd snd_ump snd_hda_core snd_rawmidi iwlwifi mc snd_hwdep kvm_amd btusb snd_seq btrtl libarc4 ccp snd_seq_device btbcm btintel snd_pcm btmtk ucsi_ccg cfg80211 kvm snd_timer bluetooth joydev typec_ucsi snd typec soundcore i2c_piix4 irqbypass k10temp pcspkr usblp i2c_nvidia_gpu rfkill acpi_cpufreq wmi_bmof rapl loop zram nvidia_drm(POE) nvidia_modeset(POE) nvidia(POE) hid_logitech_hidpp hid_logitech_dj crct10dif_pclmul nvme crc32_pclmul crc32c_intel polyval_clmulni mxm_wmi polyval_generic ghash_clmulni_intel nvme_core sha512_ssse3 video sp5100_tco r8169 nvme_common wmi ip6_tables ip_tables fuse
CR2: 0000000000000004

BUG: kernel NULL pointer dereference, address: 0000000000000004
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 0 PID: 66 Comm: kworker/u32:2 Tainted: G          I        6.5.5-200.fc38.x86_64 #1
Hardware name: System manufacturer System Product Name/P6T DELUXE V2, BIOS 1202    12/22/2010
Workqueue: rtw88_usb: rx wq rtw_usb_rx_handler [rtw88_usb]
RIP: 0010:rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
Code: 48 89 44 24 20 31 c0 48 83 e7 f8 48 c7 01 00 00 00 00 48 c7 41 28 00 00 00 00 48 29 f9 83 c1 30 c1 e9 03 f3 48 ab 48 8b 42 18 <8b> 48 04 0f b7 43 1c 66 81 e1 ff 1f 66 25 00 e0 09 c8 66 89 43 1c
RSP: 0018:ffffbdfa402c3d58 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffffbdfa402c3dc0 RCX: 0000000000000000
RDX: ffff9e7b4efc8900 RSI: ffffbdfa402c3df0 RDI: ffffbdfa402c3df0
RBP: ffffbdfa402c3df0 R08: ffff9e7b48b60018 R09: 000000000009ec98
R10: 0000000000000008 R11: 0000000000000008 R12: ffff9e7b4efca0a0
R13: ffff9e7b48b60038 R14: ffffffffc1a81360 R15: ffff9e7b4afdbd00
FS:  0000000000000000(0000) GS:ffff9e7d73a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001fc222000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? rtw_rx_fill_rx_status+0x59/0x260 [rtw88_core]
 ? rtw8822b_query_rx_desc+0x2b3/0x330 [rtw88_8822b]
 rtw_usb_rx_handler+0xc4/0x1e0 [rtw88_usb]
 process_one_work+0x1e1/0x3f0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x34/0x50
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>
Modules linked in: rtw88_8822bu(+) rtw88_usb rtw88_8822b snd_hda_codec_hdmi rtw88_core intel_powerclamp snd_hda_intel coretemp kvm_intel snd_intel_dspcfg snd_intel_sdw_acpi mac80211 snd_hda_codec kvm btusb btrtl libarc4 snd_hda_core btbcm iTCO_wdt snd_hwdep btintel intel_pmc_bxt irqbypass iTCO_vendor_support btmtk intel_cstate cfg80211 snd_seq snd_seq_device bluetooth intel_uncore snd_pcm joydev acpi_cpufreq pcspkr mxm_wmi rfkill i2c_i801 snd_timer i2c_smbus lpc_ich snd soundcore i7core_edac i5500_temp asus_atk0110 loop zram amdgpu i2c_algo_bit drm_ttm_helper ttm video drm_suballoc_helper amdxcp iommu_v2 drm_buddy gpu_sched drm_display_helper firewire_ohci crc32c_intel sha512_ssse3 serio_raw firewire_core sky2 cec pata_marvell crc_itu_t wmi ata_generic pata_acpi ip6_tables ip_tables fuse
CR2: 0000000000000004