The above is the log from the patched kernel. At this time, it was called with nomodeset, but it shouldn't matter. The bug happens right after modprobe of ucsi_acpi module. As far as I understand, the second Oops ("BUG: unable to handle page fault for address: ffffc90040715100") happened at reading a byte value via ACPI_GET8(logical_addr_ptr) in acpi_ex_system_memory_space_handler().