[7-STABLE] ping -s 4000 with ipsec panic

[Patrick Lamaizière]

[FreeBSD 7-STABLE/i386]

Hello,

I've got a 100 % reproductible panic with ipsec when using a 
'ping -s 4000'. It works without ipsec

My ipsec setup is very simple, i just use setkey:

/etc/ipsec.conf 
flush;
spdflush;
add 192.168.1.21 192.168.1.200 esp 1011 -E rijndael-cbc
"0123456789012345"; 
add 192.168.1.200 192.168.1.21 esp 1012 -E rijndael-cbc
"0123456789012345"; 
spdadd 192.168.1.200 192.168.1.21  any -P out ipsec
esp/transport//require;
spdadd 192.168.1.21 192.168.1.200 any -P in ipsec
esp/transport//require;

I tried to use des-cbc with the same panic.

--------------------

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x4100be00
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc079985e
stack pointer	        = 0x28:0xd61a0744
frame pointer	        = 0x28:0xd61a076c
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1175 (ping)
trap number		= 12
panic: page fault
Uptime: 9m5s
Physical memory: 503 MB
Dumping 87 MB: 72 56 40 24 8

#0  doadump () at pcpu.h:195
195	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc0556273 in boot (howto=260)
at /usr/src/sys/kern/kern_shutdown.c:418 #2  0xc055646f in panic
(fmt=Variable "fmt" is not available. )
at /usr/src/sys/kern/kern_shutdown.c:572 #3  0xc079b91c in trap_fatal
(frame=0xd61a0704, eva=1090567680) at /usr/src/sys/i386/i386/trap.c:899
#4  0xc079bba0 in trap_pfault (frame=0xd61a0704, usermode=0,
eva=1090567680) at /usr/src/sys/i386/i386/trap.c:812
#5  0xc079c529 in trap (frame=0xd61a0704)
at /usr/src/sys/i386/i386/trap.c:490 #6  0xc0789f2b in calltrap ()
at /usr/src/sys/i386/i386/exception.s:139 #7  0xc079985e in
generic_bcopy () at /usr/src/sys/i386/i386/support.s:498 #8  0xc1f7267e
in ?? () #9  0x8fb82d87 in ?? ()
#10 0x361fe9de in ?? ()
#11 0x39402686 in ?? ()
#12 0x00000fa0 in ?? ()
#13 0xc29cf380 in ?? ()
#14 0xc2ea9654 in ?? ()
#15 0x00000000 in ?? ()
#16 0xd61a095c in ?? ()
#17 0xc0700746 in crypto_invoke (cap=0x8, crp=0xd61a0950,
hint=-1616994916) at cryptodev_if.h:53
Previous frame inner to this frame (corrupt stack?)
(kgdb) 

-------------

Thansk, regards.