8<--- cut here ---
Unable to handle kernel NULL pointer dereference at virtual address 00000000 when write
[00000000] *pgd=80000080004003, *pmd=00000000
Internal error: Oops: a05 [#1] SMP ARM
Modules linked in:
CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Workqueue: nvmet-zbd-wq nvmet_bdev_zone_zmgmt_recv_work
PC is at mmiocpy+0x50/0x330 arch/arm/lib/copy_template.S:107
LR is at 0x0
pc : [<81b3cc30>]    lr : [<00000000>]    psr: 20000013
sp : df879d5c  ip : 00000000  fp : df879dac
r10: 00001000  r9 : 00000000  r8 : 00000000
r7 : 0000fa40  r6 : 00000000  r5 : 00000000  r4 : 00000000
r3 : 000003e8  r2 : 00000f60  r1 : 869e1020  r0 : 00000000
Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
Control: 30c5387d  Table: 867ec780  DAC: 00000000
Register r0 information: NULL pointer
Register r1 information: non-slab/vmalloc memory
Register r2 information: non-paged memory
Register r3 information: non-paged memory
Register r4 information: NULL pointer
Register r5 information: NULL pointer
Register r6 information: NULL pointer
Register r7 information: non-paged memory
Register r8 information: NULL pointer
Register r9 information: NULL pointer
Register r10 information: non-paged memory
Register r11 information: 2-page vmalloc region starting at 0xdf878000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766
Register r12 information: NULL pointer
Process kworker/1:0 (pid: 23, stack limit = 0xdf878000)
Stack: (0xdf879d5c to 0xdf87a000)
9d40:                                                                00001000
9d60: 00000000 0000fa40 83352400 00000000 86b0e1c8 80cfe3d0 00000001 869e1000
9d80: 60000013 868881d0 86888188 86b0e0d8 0000fa40 00000001 00000000 86c402b8
9da0: df879ddc df879db0 80cfe5c0 80cfe2d8 0000fa40 6e8cdcaa 00000000 868881d0
9dc0: 86c40298 83352580 0000fa40 00000001 df879e0c df879de0 80cfa01c 80cfe538
9de0: 60000013 86c40298 df879e0c 86c40348 00000000 86c40298 86889180 86c4002c
9e00: df879e2c df879e10 80cfa464 80cf9ebc 86c40348 00000000 867fbe00 00000000
9e20: df879e5c df879e30 80ce4cc0 80cfa3e8 8317a4c0 86c4002c 83579400 86c40348
9e40: 86c40430 ffffffe0 00000000 86c402b8 df879e74 df879e60 80ce4ff8 80ce4c6c
9e60: 83579400 83579400 df879ef4 df879e78 80cf28e4 80ce4ff0 000003e8 80cf2560
9e80: df879e98 82d05da8 00000000 00000000 000003e8 00000000 86c40348 00000000
9ea0: 0000fa40 00000000 000003e8 00000000 000003e8 00000000 00000000 00000000
9ec0: 86c40430 6e8cdcaa 8022cc00 83115480 86c40430 84217a00 ddde5000 01800000
9ee0: 8317a4c0 84217a05 df879f4c df879ef8 802772b8 80cf270c 831154b0 831154b0
9f00: df879f34 df879f10 802739e0 80966f18 86c40430 00000000 ddde5020 00000000
9f20: 8317a4c0 83115480 ddde5000 ddde5020 82a03d80 8317a4c0 831154b0 ddde5000
9f40: df879f84 df879f50 80277f64 802770fc 82a03d80 ddde505c 802803bc 83111200
9f60: 8317a4c0 80277df8 83115480 83115400 df819d10 00000000 df879fac df879f88
9f80: 802827b4 80277e04 83111200 80282698 00000000 00000000 00000000 00000000
9fa0: 00000000 df879fb0 80200114 802826a4 00000000 00000000 00000000 00000000
9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
Call trace: 
[<80cfe2cc>] (fcloop_fcp_copy_data) from [<80cfe5c0>] (fcloop_fcp_op+0x94/0x1dc drivers/nvme/target/fcloop.c:906)
 r10:86c402b8 r9:00000000 r8:00000001 r7:0000fa40 r6:86b0e0d8 r5:86888188
 r4:868881d0
[<80cfe52c>] (fcloop_fcp_op) from [<80cfa01c>] (nvmet_fc_transfer_fcp_data+0x16c/0x200 drivers/nvme/target/fc.c:2307)
 r9:00000001 r8:0000fa40 r7:83352580 r6:86c40298 r5:868881d0 r4:00000000
[<80cf9eb0>] (nvmet_fc_transfer_fcp_data) from [<80cfa464>] (__nvmet_fc_fcp_nvme_cmd_done drivers/nvme/target/fc.c:2493 [inline])
[<80cf9eb0>] (nvmet_fc_transfer_fcp_data) from [<80cfa464>] (nvmet_fc_fcp_nvme_cmd_done+0x88/0xc8 drivers/nvme/target/fc.c:2514)
 r8:86c4002c r7:86889180 r6:86c40298 r5:00000000 r4:86c40348
[<80cfa3dc>] (nvmet_fc_fcp_nvme_cmd_done) from [<80ce4cc0>] (__nvmet_req_complete+0x60/0x384 drivers/nvme/target/core.c:800)
 r7:00000000 r6:867fbe00 r5:00000000 r4:86c40348
[<80ce4c60>] (__nvmet_req_complete) from [<80ce4ff8>] (nvmet_req_complete+0x14/0x88 drivers/nvme/target/core.c:812)
 r10:86c402b8 r9:00000000 r8:ffffffe0 r7:86c40430 r6:86c40348 r5:83579400
 r4:86c4002c r3:8317a4c0
[<80ce4fe4>] (nvmet_req_complete) from [<80cf28e4>] (nvmet_bdev_zone_zmgmt_recv_work+0x1e4/0x2bc drivers/nvme/target/zns.c:308)
 r5:83579400 r4:83579400
[<80cf2700>] (nvmet_bdev_zone_zmgmt_recv_work) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322)
 r10:84217a05 r9:8317a4c0 r8:01800000 r7:ddde5000 r6:84217a00 r5:86c40430
 r4:83115480
[<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline])
[<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486)
 r10:ddde5000 r9:831154b0 r8:8317a4c0 r7:82a03d80 r6:ddde5020 r5:ddde5000
 r4:83115480
[<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436)
 r10:00000000 r9:df819d10 r8:83115400 r7:83115480 r6:80277df8 r5:8317a4c0
 r4:83111200
[<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137)
Exception stack(0xdf879fb0 to 0xdf879ff8)
9fa0:                                     00000000 00000000 00000000 00000000
9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
9fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:83111200
Code: f5d1f05c f5d1f07c e8b15378 e2522020 (e8a05378) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	f5d1f05c 	pld	[r1, #92]	@ 0x5c
   4:	f5d1f07c 	pld	[r1, #124]	@ 0x7c
   8:	e8b15378 	ldm	r1!, {r3, r4, r5, r6, r8, r9, ip, lr}
   c:	e2522020 	subs	r2, r2, #32
* 10:	e8a05378 	stmia	r0!, {r3, r4, r5, r6, r8, r9, ip, lr} <-- trapping instruction