net:tls sefltest caused an oops in scobee for lunar:generic-arm64k kernel

Trace
[ 1835.154044] hisi_sec2 0000:76:00.0: the number of entries in input scatterlist is bigger than SGL pool setting.

[ 1956.475063] Unable to handle kernel paging request at virtual address dead000000000122
[ 1956.482962] Mem abort info:
[ 1956.485744] ESR = 0x0000000096000044
[ 1956.489476] EC = 0x25: DABT (current EL), IL = 32 bits
[ 1956.494766] SET = 0, FnV = 0
[ 1956.497806] EA = 0, S1PTW = 0
[ 1956.500933] FSC = 0x04: level 0 translation fault
[ 1956.505788] Data abort info:
[ 1956.508655] ISV = 0, ISS = 0x00000044
[ 1956.512474] CM = 0, WnR = 1
[ 1956.515428] [dead000000000122] address between user and kernel address ranges
[ 1956.522533] Internal error: Oops: 0000000096000044 [#1] SMP
[ 1956.528083] Modules linked in: cfg80211 binfmt_misc nls_iso8859_1 onboard_usb_hub ipmi_ssif hisi_hpre hisi_sec2 ecdh_generic hisi_zip libcurve25519_generic hisi_qm hns_roce_hw_v2 acpi_ipmi ecc uacce authenc ipmi_si ipmi_devintf hisi_uncore_ddrc_pmu arm_spe_pmu ipmi_msghandler hisi_uncore_l3c_pmu hisi_uncore_hha_pmu hisi_uncore_pmu hisi_trng_v2 cppc_cpufreq dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua efi_pstore dmi_sysfs ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor xor_neon raid6_pq libcrc32c raid1 raid0 multipath linear ses enclosure realtek mlx5_ib ib_uverbs ib_core hclge hibmc_drm crct10dif_ce drm_vram_helper polyval_ce drm_ttm_helper polyval_generic ttm i2c_algo_bit ghash_ce mlx5_core drm_kms_helper syscopyarea sm4 mlxfw sysfillrect sha2_ce psample sysimgblt sha256_arm64 hisi_sas_v3_hw tls sha1_ce hns3 hisi_sas_main xhci_pci pci_hyperv_intf drm hnae3 xhci_pci_renesas libsas ahci
[ 1956.528174] scsi_transport_sas spi_dw_mmio spi_dw gpio_dwapb aes_neon_bs aes_neon_blk aes_ce_blk aes_ce_cipher
[ 1956.623600] CPU: 20 PID: 2172 Comm: kworker/u262:1 Tainted: G B 6.2.0-23-generic-64k #23-Ubuntu
[ 1956.633641] Hardware name: Huawei TaiShan 2280 V2/BC82AMDC, BIOS 2280-V2 CS V3.B160.01 01/15/2020
[ 1956.642470] Workqueue: 0000:76:00.0 qm_work_process [hisi_qm]
[ 1956.648206] pstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 1956.655136] pc : free_pcppages_bulk+0x1ac/0x320
[ 1956.659651] lr : free_pcppages_bulk+0x174/0x320
[ 1956.664160] sp : ffff80008e6afaa0
[ 1956.667460] x29: ffff80008e6afaa0 x28: ffff003ff78e0b80 x27: 0000000000000000
[ 1956.674565] x26: 00000000000001bd x25: 0000000000000000 x24: 000000000000000c
[ 1956.681669] x23: ffff003ff78e0b98 x22: ffff003ff78e0b80 x21: dead000000000100
[ 1956.688773] x20: ffffffc0085fe480 x19: 0000000000000001 x18: ffff80004bea0060
[ 1956.695877] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000010000
[ 1956.702981] x14: 0000000000000000 x13: 0000000000000f38 x12: 9ac69b4cde237290
[ 1956.710085] x11: 7f7f7f7f7f7f7f7f x10: 0000000000000000 x9 : ffffbe146b27be84
[ 1956.717188] x8 : ffff80008e6afb08 x7 : 0000000000000000 x6 : 0000000000000000
[ 1956.724292] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffffffc0085fe488
[ 1956.731396] x2 : dead000000000122 x1 : ffff003ff78e0b98 x0 : dead000000000122
[ 1956.738500] Call trace:
[ 1956.740937] free_pcppages_bulk+0x1ac/0x320
[ 1956.745102] free_unref_page_commit+0x170/0x270
[ 1956.749611] free_unref_page+0x1e8/0x2e0
[ 1956.753515] __folio_put+0x54/0xc0
[ 1956.756905] tls_decrypt_done+0x190/0x230 [tls]
[ 1956.761424] sec_aead_callback+0x130/0x240 [hisi_sec2]
[ 1956.766544] sec_req_cb+0xc4/0x2f0 [hisi_sec2]
[ 1956.770974] qm_poll_req_cb+0x88/0x1b0 [hisi_qm]
[ 1956.775576] qm_work_process+0x150/0x1cc [hisi_qm]
[ 1956.780350] process_one_work+0x244/0x4f0
[ 1956.784346] worker_thread+0x78/0x450
[ 1956.787992] kthread+0xf0/0x100
[ 1956.791123] ret_from_fork+0x10/0x20
[ 1956.794686] Code: d1002074 a9400061 f9401284 f9000420 (f9000001)
[ 1956.800755] ---[ end trace 0000000000000000 ]---
[ 1956.818443] pstore: crypto_comp_compress failed, ret = -22!
[ 1956.961204] note: kworker/u262:1[2172] exited with irqs disabled
[ 1956.967206] note: kworker/u262:1[2172] exited with preempt_count 3
[ 2016.984213] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 2016.990298] rcu: 35-...0: (4 GPs behind) idle=6ef4/1/0x4000000000000000 softirq=4849/4849 fqs=6370
[ 2016.999307] rcu: 53-...0: (2 GPs behind) idle=c644/1/0x4000000000000000 softirq=1484/1485 fqs=6371
[ 2017.008319] (detected by 0, t=15008 jiffies, g=226269, q=1901 ncpus=128)
[ 2017.015078] Task dump for CPU 35:
[ 2017.018380] task:kworker/35:0 state:R running task stack:0 pid:32035 ppid:2 flags:0x0000000a

Full log attached

Last test run is selftest net:tls. And from the trace tls_decrypt_done who triggers it.