panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/i386/kernel/sys/netinet/tcp_output.c:LINE

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: a25b408b Complete LOCAL_PEERCRED support. Cache pid of the..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=17d4a916a00000
dashboard link: https://syzkaller.appspot.com/bug?extid=af98caa175350030a1ad
userspace arch: i386

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+af98ca...@syzkaller.appspotmail.com

panic: mtx_lock() of spin mutex (null) @
/syzkaller/managers/i386/kernel/sys/netinet/tcp_output.c:337
cpuid = 1
time = 1414
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame
0xfffffe0020f67540
vpanic() at vpanic+0x1e0/frame 0xfffffe0020f675a0
panic() at panic+0x43/frame 0xfffffe0020f67600
__mtx_lock_flags() at __mtx_lock_flags+0x1fd/frame 0xfffffe0020f67660
tcp_output() at tcp_output+0x5ee/frame 0xfffffe0020f67820
tcp_usr_connect() at tcp_usr_connect+0x25c/frame 0xfffffe0020f67870
soconnectat() at soconnectat+0x183/frame 0xfffffe0020f678d0
kern_connectat() at kern_connectat+0x1ff/frame 0xfffffe0020f67930
sys_connect() at sys_connect+0xd9/frame 0xfffffe0020f67970
ia32_syscall() at ia32_syscall+0x452/frame 0xfffffe0020f67ab0
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0x81423bf
KDB: enter: panic
[ thread pid 14915 tid 100401 ]
Stopped at kdb_enter+0x6a: movq $0,kdb_why


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

syzbot has found a reproducer for the following crash on:

HEAD commit: 11c242c7 Remove tests for the deprecated algorithms in r34..
git tree: freebsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1158280ea00000

dashboard link: https://syzkaller.appspot.com/bug?extid=af98caa175350030a1ad
userspace arch: i386

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11933ea2a00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+af98ca...@syzkaller.appspotmail.com

panic: mtx_lock() of spin mutex (null) @
/syzkaller/managers/i386/kernel/sys/netinet/tcp_output.c:337

cpuid = 0
time = 1559307314

KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame

0xfffffe0020eb3540
vpanic() at vpanic+0x1e0/frame 0xfffffe0020eb35a0
panic() at panic+0x43/frame 0xfffffe0020eb3600
__mtx_lock_flags() at __mtx_lock_flags+0x1fd/frame 0xfffffe0020eb3660
tcp_output() at tcp_output+0x5ee/frame 0xfffffe0020eb3820
tcp_usr_connect() at tcp_usr_connect+0x25c/frame 0xfffffe0020eb3870
soconnectat() at soconnectat+0x183/frame 0xfffffe0020eb38d0
kern_connectat() at kern_connectat+0x1ff/frame 0xfffffe0020eb3930
sys_connect() at sys_connect+0xd9/frame 0xfffffe0020eb3970
ia32_syscall() at ia32_syscall+0x452/frame 0xfffffe0020eb3ab0

int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0x81423bf
KDB: enter: panic

[ thread pid 825 tid 100115 ]

[Mark Johnston]

#syz dup: panic: mtx_lock() of spin mutex (null) @ /syzkaller/managers/main/kernel/sys/netinet/tcp_output.c:LINE