For the last couple of weeks I have been getting semi-regular panic:
m_copydata on two separate Compaq machines running as firewalls and
IPSec gateways. Both are running 1.5.2 with IPsec enabled in an
otherwise generic kernel. Today, I cvs update'd to the latest
1.5.3_ALPHA sources and build a kernel with debugging support and
promptly got another panic:

(gdb) target kcore netbsd.58.core
panic: m_copydata
#0  0x100 in ?? ()
(gdb) bt
#0  0x100 in ?? ()
#1  0xc02aaecb in cpu_reboot (howto=256, bootstr=0x0)
    at ../../../../arch/i386/i386/machdep.c:1175
#2  0xc0193cfd in panic () at ../../../../kern/subr_prf.c:240
#3  0xc01a072a in m_copydata (m=0xc07de200, off=0, len=20, cp=0xca182d76 "")
    at ../../../../kern/uipc_mbuf.c:583
#4  0xc01cd926 in gif_encapcheck (m=0xc07de200, off=20, proto=41,
    arg=0xc07d16d8) at ../../../../net/if_gif.c:232
#5  0xc01f575c in encap4_input (m=0xc07de200)
    at ../../../../netinet/ip_encap.c:194
#6  0xc0219c05 in esp4_input (m=0xc07de200)
    at ../../../../netinet6/esp_input.c:436
#7  0xc01fa52c in ip_input (m=0xc07de200) at ../../../../netinet/ip_input.c:726
#8  0xc01f9eb4 in ipintr () at ../../../../netinet/ip_input.c:337
#9  0xc0101f8c in Xsoftnet ()
(gdb)

The machines run three IPsec tunnels (esp/transport) and have gif
interfaces configured that implement tunneling on top of the IPsec
connections.

Any ideas?


NetBSD 1.5.3_ALPHA (TUBE) #0: Fri Feb  1 11:16:05 EST 2002
    root@tube.wrede.org:/usr/src/sys/arch/i386/compile/TUBE
cpu0: Intel Pentium II/Celeron (Deschutes) (686-class), 348.21 MHz
total memory = 127 MB
avail memory = 114 MB
using 1659 buffers containing 6636 KB of memory
BIOS32 rev. 0 found at 0xec700
mainbus0 (root)
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled
pchb0 at pci0 dev 0 function 0
pchb0: Intel 82443BX Host Bridge/Controller (rev. 0x03)
ppb0 at pci0 dev 1 function 0: Intel 82443BX AGP Interface (rev. 0x03)
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled
vga1 at pci1 dev 0 function 0: Matrox MGA G200 AGP (rev. 0x03)
wsdisplay0 at vga1: console (80x25, vt100 emulation)
ex0 at pci0 dev 14 function 0: 3Com 3c905B-TX 10/100 Ethernet (rev. 0x30)
ex0: interrupting at irq 11
ex0: MAC address 00:50:04:74:71:52
exphy0 at ex0 phy 24: 3Com internal media interface
exphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
ex1 at pci0 dev 16 function 0: 3Com 3c905B-TX 10/100 Ethernet (rev. 0x30)
ex1: interrupting at irq 11
ex1: MAC address 00:50:04:74:71:23
exphy1 at ex1 phy 24: 3Com internal media interface
exphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pcib0 at pci0 dev 20 function 0
pcib0: Intel 82371AB PCI-to-ISA Bridge (PIIX4) (rev. 0x02)
pciide0 at pci0 dev 20 function 1: Intel 82371AB IDE controller (PIIX4) (rev. 0x01)
pciide0: bus-master DMA support present
pciide0: primary channel wired to compatibility mode
wd0 at pciide0 channel 0 drive 0: <FUJITSU MPG3102AT E>
wd0: drive supports 16-sector pio transfers, lba addressing
wd0: 9773 MB, 16383 cyl, 16 head, 63 sec, 512 bytes/sect x 20015856 sectors
wd0: 32-bit data port
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5
pciide0: primary channel interrupting at irq 14
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 (using DMA data transfers)
pciide0: secondary channel wired to compatibility mode
wd1 at pciide0 channel 1 drive 0: <FUJITSU MPG3102AT E>
wd1: drive supports 16-sector pio transfers, lba addressing
wd1: 9773 MB, 16383 cyl, 16 head, 63 sec, 512 bytes/sect x 20015856 sectors
wd1: 32-bit data port
wd1: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5
pciide0: secondary channel interrupting at irq 15
wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 (using DMA data transfers)
uhci0 at pci0 dev 20 function 2: Intel 82371AB USB Host Controller (PIIX4) (rev. 0x01)
uhci0: interrupting at irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
Intel 82371AB Power Management Controller (PIIX4) (miscellaneous bridge, revisio
n 0x02) at pci0 dev 20 function 3 not configured
isa0 at pcib0
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
pckbc0 at isa0 port 0x60-0x64
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
lpt0 at isa0 port 0x378-0x37b irq 7
pcppi0 at isa0 port 0x61
sysbeep0 at pcppi0
isapnp0 at isa0 port 0x279: ISA Plug 'n Play device support
npx0 at isa0 port 0xf0-0xff: using exception 16
fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB, 80 cyl, 2 head, 18 sec
isapnp0: no ISA Plug 'n Play devices found
biomask ff65 netmask ff65 ttymask ffe7
IPsec: Initialized Security Association Processing.
warning: double match for boot device (wd0, wd1)
boot device: wd0
root on wd0a dumps on wd0b
root file system type: ffs
IP Filter: v3.4.9 initialized.  Default = pass all, Logging = enabled
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 3 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)
wsmux1: connecting to wsdisplay0

-- 
    - aew