ping6 -f panic with mpsafenet=1

	I contacted a panic on current with debug.mpsafenet=1.
- - - - - - - - - - 
# ping6 -f othermachine
 (about 1-5sec after...)
panic: free: address 0xc0819200(0xc0819000) has not been allocated.

cpuid = 0
KDB: enter: panic
[thread 100012]
Stopped at      kdb_enter+0x30: leave
db> gdb
Step to enter the remote GDB backend.
db> s
- - - - - - - - - - 

	So I did gdb6 -k.  I got following result:
- - - - - - - - - - 
# gdb6 -k /boot/kernel.NADESICO/kernel.debug 
GNU gdb 20040720 [GDB v6.x for FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-portbld-freebsd5.2"...target remote:65535
(kgdb) target remote:XXXXX
Remote debugging using :XXXXX
0xc0569201 in kdb_enter (msg=???)
    at /export/home/nork/p4/src/sys/kern/subr_kdb.c:241
241     }
warning: Unable to find dynamic linker breakpoint function.
GDB will be unable to debug shared library initializers
and track explicitly loaded dynamic code.
warning: shared library handler failed to enable breakpoint
(kgdb) where
#0  0xc0569201 in kdb_enter (msg=???)
    at /export/home/nork/p4/src/sys/kern/subr_kdb.c:241
#1  0xc053bff5 in free (addr=0x1, type=???)
    at /export/home/nork/p4/src/sys/kern/kern_malloc.c:334
#2  0xc0635bd5 in _key_delsp (sp=0xc0819200)
    at /export/home/nork/p4/src/sys/netipsec/key.c:1311
#3  0xc0635918 in key_delsp (sp=0x100)
    at /export/home/nork/p4/src/sys/netipsec/key.c:1225
#4  0xc06356a4 in _key_freesp (spp=0xe3a6ebf4, where=???, tag=???)
    at /export/home/nork/p4/src/sys/netipsec/key.c:1098
#5  0xc0631265 in ipsec6_in_reject (m=0xc2d0f600, inp=???)
    at /export/home/nork/p4/src/sys/netipsec/ipsec.c:1476
#6  0xc0619d3a in ip6_input (m=0xc2d0f600)
    at /export/home/nork/p4/src/sys/netinet6/ip6_input.c:813
#7  0xc05d5ef9 in netisr_processqueue (ni=0xc0811904)
    at /export/home/nork/p4/src/sys/net/netisr.c:234
#8  0xc05d63c9 in swi_net (dummy=0x0)
    at /export/home/nork/p4/src/sys/net/netisr.c:341
#9  0xc052e188 in ithread_loop (arg=0xc2704b80)
    at /export/home/nork/p4/src/sys/kern/kern_intr.c:546
#10 0xc052ce60 in fork_exit (callout=0xc052dfd0 <ithread_loop>, arg=???, 
    frame=???) at /export/home/nork/p4/src/sys/kern/kern_fork.c:820
#11 0xc070845c in fork_trampoline ()
    at /export/home/nork/p4/src/sys/i386/i386/exception.s:209
- - - - - - - - - - 

# Oops, I heared INET6 with FAST_IPSEC is not good.
# I'll try to use INET6 with KAME_IPSEC.




	And I noticed about xmms behavior.  xmms is BGM player and is
	not forcused (out of screen by WindowMaker), then xmms cannot
	play *next* music.  But I give forcus to xmms, as soon as xmms
	is re-playing BGM. 

               | libpthread | libthr | libc_r
---------------+------------+--------+--------
w/o PREEMPTION |    NG      |   NG   |  OK
w/  PREEMPTION |    NG      |   NG   |  OK

	I think that KSE has a problem.