ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
Oops: general protection fault, probably for non-canonical address 0xc149fe89493e8b49: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 1298 Comm: aoe_tx0 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:tty_write_room+0x6a/0x90 drivers/tty/tty_ioctl.c:69
Code: c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 5e 51 f4 fc 4d 8b 36 4d 85 f6 74 16 e8 f1 81 94 fc 48 89 df 4d 89 f3 5b 41 5e 41 5f <41> ff e3 cc 66 90 e8 db 81 94 fc b8 00 08 00 00 5b 41 5e 41 5f c3
RSP: 0018:ffffc90003f7f838 EFLAGS: 00010293
RAX: ffffffff852b3bef RBX: ffff888086aca570 RCX: ffff888026ec3c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88806b054000
RBP: 0000000000000020 R08: ffff88806475ce1f R09: 1ffff1100c8eb9c3
R10: dffffc0000000000 R11: c149fe89493e8b49 R12: ffff88806475cdb0
R13: dffffc0000000000 R14: ffff888086aca500 R15: ffff88806475ce08
FS:  0000000000000000(0000) GS:ffff888126100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f73c1610717 CR3: 0000000031678000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 handle_tx+0x163/0x610 drivers/net/caif/caif_serial.c:212
 __netdev_start_xmit include/linux/netdevice.h:5203 [inline]
 netdev_start_xmit include/linux/netdevice.h:5212 [inline]
 xmit_one net/core/dev.c:3776 [inline]
 dev_hard_start_xmit+0x2ff/0x880 net/core/dev.c:3792
 __dev_queue_xmit+0x1adf/0x3a70 net/core/dev.c:4629
 dev_queue_xmit include/linux/netdevice.h:3350 [inline]
 tx+0x6b/0x190 drivers/block/aoe/aoenet.c:62
 kthread+0x1cd/0x3e0 drivers/block/aoe/aoecmd.c:1237
 kthread+0x70e/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:tty_write_room+0x6a/0x90 drivers/tty/tty_ioctl.c:69
Code: c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 5e 51 f4 fc 4d 8b 36 4d 85 f6 74 16 e8 f1 81 94 fc 48 89 df 4d 89 f3 5b 41 5e 41 5f <41> ff e3 cc 66 90 e8 db 81 94 fc b8 00 08 00 00 5b 41 5e 41 5f c3
RSP: 0018:ffffc90003f7f838 EFLAGS: 00010293
RAX: ffffffff852b3bef RBX: ffff888086aca570 RCX: ffff888026ec3c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88806b054000
RBP: 0000000000000020 R08: ffff88806475ce1f R09: 1ffff1100c8eb9c3
R10: dffffc0000000000 R11: c149fe89493e8b49 R12: ffff88806475cdb0
R13: dffffc0000000000 R14: ffff888086aca500 R15: ffff88806475ce08
FS:  0000000000000000(0000) GS:ffff888126100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f73c1610717 CR3: 0000000031678000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	c1 e8 03             	shr    $0x3,%eax
   3:	42 80 3c 38 00       	cmpb   $0x0,(%rax,%r15,1)
   8:	74 08                	je     0x12
   a:	4c 89 f7             	mov    %r14,%rdi
   d:	e8 5e 51 f4 fc       	call   0xfcf45170
  12:	4d 8b 36             	mov    (%r14),%r14
  15:	4d 85 f6             	test   %r14,%r14
  18:	74 16                	je     0x30
  1a:	e8 f1 81 94 fc       	call   0xfc948210
  1f:	48 89 df             	mov    %rbx,%rdi
  22:	4d 89 f3             	mov    %r14,%r11
  25:	5b                   	pop    %rbx
  26:	41 5e                	pop    %r14
  28:	41 5f                	pop    %r15
* 2a:	41 ff e3             	jmp    *%r11 <-- trapping instruction
  2d:	cc                   	int3
  2e:	66 90                	xchg   %ax,%ax
  30:	e8 db 81 94 fc       	call   0xfc948210
  35:	b8 00 08 00 00       	mov    $0x800,%eax
  3a:	5b                   	pop    %rbx
  3b:	41 5e                	pop    %r14
  3d:	41 5f                	pop    %r15
  3f:	c3                   	ret