kvm [21972]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 device eql entered promiscuous mode BUG: unable to handle kernel NULL pointer dereference at (null) IP: __list_del_entry_valid+0x29/0x90 lib/list_debug.c:48 PGD 0 P4D 0 Oops: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 22002 Comm: syz-executor2 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid+0x29/0x90 lib/list_debug.c:48 RSP: 0018:ffffc90000f77bf8 EFLAGS: 00010207 RAX: 0000000000000000 RBX: ffff88020f97e810 RCX: dead000000000200 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88020f97e800 RBP: ffffc90000f77bf8 R08: ffffffff81603d3e R09: 0000000000000004 R10: ffffc90000f77bf8 R11: 0000000000000004 R12: ffff88020f97e800 R13: ffff8801fc8b3800 R14: ffff880215604200 R15: ffff880215604200 FS: 0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000000301e003 CR4: 00000000001626e0 Call Trace: __list_del_entry include/linux/list.h:117 [inline] list_del_init include/linux/list.h:159 [inline] cuse_channel_release+0x3a/0xe0 fs/fuse/cuse.c:542 __fput+0x120/0x270 fs/file_table.c:209 ____fput+0x15/0x20 fs/file_table.c:243 task_work_run+0xa3/0xe0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x3e6/0x1050 kernel/exit.c:869 do_group_exit+0x60/0x100 kernel/exit.c:972 get_signal+0x36c/0xad0 kernel/signal.c:2337 do_signal+0x23/0x670 arch/x86/kernel/signal.c:809 exit_to_usermode_loop+0x13c/0x160 arch/x86/entry/common.c:161 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline] syscall_return_slowpath+0x1b4/0x1e0 arch/x86/entry/common.c:264 entry_SYSCALL_64_fastpath+0x94/0x96 RIP: 0033:0x452a09 RSP: 002b:00007fa0b7a2bce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000071bf80 RCX: 0000000000452a09 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000071bf80 RBP: 000000000071bf80 R08: 00000000000000aa R09: 000000000071bf58 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000a2f7ff R14: 00007fa0b7a2c9c0 R15: 0000000000000002 Code: 00 00 55 48 8b 07 48 b9 00 01 00 00 00 00 ad de 48 8b 57 08 48 89 e5 48 39 c8 74 27 48 b9 00 02 00 00 00 00 ad de 48 39 ca 74 2c <48> 8b 32 48 39 fe 75 35 48 8b 50 08 48 39 f2 75 40 b8 01 00 00 RIP: __list_del_entry_valid+0x29/0x90 lib/list_debug.c:48 RSP: ffffc90000f77bf8 CR2: 0000000000000000 ---[ end trace db6373607af6bd8a ]---