kern/52151: kernel panic in IPsec processing

[clare%csel.org@localhost]

	Note: There was a bad value `ciritical' for the field `Severity'.
	It was set to the default value of `serious'.

>Number:         52151
>Category:       kern
>Synopsis:       kernel panic in IPsec processing
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Apr 10 07:00:00 +0000 2017
>Originator:     DOYASHIKI Shinichi
>Release:        NetBSD 7.99.67 around 2017-04-10
>Organization:
	at home
>Environment:
System: NetBSD kotori.csel.org 7.99.67 NetBSD 7.99.67 (CONOHAVPS) #0: Mon Apr 10 05:28:09 JST 2017 clare%kanako.csel.org@localhost:/export/stage/hack/src/sys/arch/amd64/compile/CONOHAVPS amd64
Architecture: x86_64
Machine: amd64
>Description:
	kernel panic generated around IPsec processing.
>How-To-Repeat:
	1) setup IKE and IPsec ESP transport mode over IPv6.
	   I used racoon(8) for IKE.
	2) ping6 from remote site.
	3) see kernel panic as following:

panic: kernel diagnostic assertion "rw_lock_held(&in6_multilock)" failed: file "../../../../netine
t6/mld6.c", line 861
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x140
ch_voltag_convert_in() at netbsd:ch_voltag_convert_in
in6_lookup_multi() at netbsd:in6_lookup_multi+0x77
key_ismyaddr() at netbsd:key_ismyaddr+0x76
key_checkspidup.isra.19() at netbsd:key_checkspidup.isra.19+0x54
key_getspi() at netbsd:key_getspi+0x1c6
key_parse() at netbsd:key_parse+0x725
key_output() at netbsd:key_output+0x162
key_send_wrapper() at netbsd:key_send_wrapper+0x6c
sosend() at netbsd:sosend+0x76f
do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x272
do_sys_sendmsg() at netbsd:do_sys_sendmsg+0x85
sys_sendto() at netbsd:sys_sendto+0x5c
syscall() at netbsd:syscall+0x1d8
--- syscall (number 133) ---
730147105fba:
cpu0: End traceback...

>Fix:
	unknown