------------[ cut here ]------------ kernel BUG at lib/list_debug.c:53! invalid opcode: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 17549 Comm: syz-executor2 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid+0x78/0x90 lib/list_debug.c:51 RSP: 0018:ffffc900017e3b70 EFLAGS: 00010086 RAX: 0000000000000054 RBX: ffff880214152e70 RCX: ffffffff8123dede RDX: 0000000000000000 RSI: ffff88021fd136f8 RDI: ffff88021fd136f8 RBP: ffffc900017e3b70 R08: 0000000000000001 R09: 000000000000000c R10: ffffc900017e3ae8 R11: 000000000000000c R12: ffff8801fa2b94a0 R13: 0000000000000286 R14: dead000000000100 R15: ffffffff81473cd5 FS: 00007f43ee31b700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020003000 CR3: 000000000301e005 CR4: 00000000001606e0 DR0: 0000000020000008 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: __list_del_entry include/linux/list.h:117 [inline] list_del include/linux/list.h:125 [inline] __remove_wait_queue include/linux/wait.h:184 [inline] remove_wait_queue+0x20/0x60 kernel/sched/wait.c:51 ep_remove_wait_queue fs/eventpoll.c:595 [inline] ep_unregister_pollwait.isra.7+0x79/0x1f0 fs/eventpoll.c:613 ep_free+0x71/0x140 fs/eventpoll.c:830 ep_eventpoll_release+0x26/0x30 fs/eventpoll.c:862 __fput+0x120/0x270 fs/file_table.c:209 ____fput+0x15/0x20 fs/file_table.c:243 task_work_run+0xa3/0xe0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x3e6/0x1050 kernel/exit.c:869 do_group_exit+0x60/0x100 kernel/exit.c:972 get_signal+0x36c/0xad0 kernel/signal.c:2337 do_signal+0x23/0x670 arch/x86/kernel/signal.c:809 exit_to_usermode_loop+0x13c/0x160 arch/x86/entry/common.c:161 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline] syscall_return_slowpath+0x1b4/0x1e0 arch/x86/entry/common.c:264 entry_SYSCALL_64_fastpath+0x94/0x96 RIP: 0033:0x452a09 RSP: 002b:00007f43ee31ac58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 000000000071bea0 RCX: 0000000000452a09 RDX: 000000002007c000 RSI: 00000000c0306201 RDI: 0000000000000016 RBP: 0000000000000164 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ef200 R13: 00000000ffffffff R14: 00007f43ee31b6d4 R15: 0000000000000000 Code: 82 e8 85 dd ae ff 0f 0b 48 89 fe 48 c7 c7 08 34 e8 82 e8 74 dd ae ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 40 34 e8 82 e8 60 dd ae ff <0f> 0b 48 c7 c7 80 34 e8 82 e8 52 dd ae ff 0f 0b 90 90 90 90 90 RIP: __list_del_entry_valid+0x78/0x90 lib/list_debug.c:51 RSP: ffffc900017e3b70 ---[ end trace dbe40e322391a9fb ]---