PIC32MZ2048ECH100, FreeRTOS0.8b, MPLABX 2.05, XC32 compiler v1.31.
Exceptions occur after several thousand successful ISR cycles exclusively in uxListRemove(), called from xTaskRemoveFromEventList() (which is several call levels down from SemaphoreGiveFromISR()). Either general or TLB exceptions may result. The pxEventList->uxNumberOfItems seems to be corrupted (or becomes very large), resulting in a null pxItemToRemove->pvContainer passed to uxListRemove(), which causes the exception.
I try to read the number of items to see if it is growing slowly, or just suddenly explodes, but it seems to go from typically 1 to a very large number suddenly.