6.0-BETA2 panic (m_tag_locate)

I've recently upgraded a 5.4-STABLE box to 6.0-BETA2 (as of August 16th 
or so), and since the upgrade, the machine has panicked every other day 
or so.  I can't seem to find what might be triggering it, but mentions 
(m_tag_locate +0x38 cmpl ...) in the panic (and looking for the 
instruction pointer in nm -n kernel | grep points to the same thing). 
Digging around, I found these files with related matches:

sys/dev/firewire/if_fwip.c:             mtag = m_tag_locate(m, 
MTAG_FIREWIRE, MTAG_FIREWIRE_HWADDR, 0);

sys/dev/usb/udbp.c:     if ((ptag = (struct ng_tag_prio 
*)m_tag_locate(m, NGM_GENERIC_COOKIE,

sys/kern/uipc_mbuf2.c:m_tag_locate(struct mbuf *m, u_int32_t cookie, int 
type, struct m_tag *t)

sys/kern/uipc_mbuf2.c:  KASSERT(m, ("m_tag_locate: null mbuf"));

sys/net/if_fwsubr.c:            mtag = m_tag_locate(m, MTAG_FIREWIRE, 
MTAG_FIREWIRE_HWADDR, NULL);

sys/net/if_fwsubr.c:            mtag = m_tag_locate(m, MTAG_FIREWIRE, 
MTAG_FIREWIRE_SENDER_EUID, 0);

sys/sys/mbuf.h:struct   m_tag   *m_tag_locate(struct mbuf *, u_int32_t, 
int, struct m_tag *);
sys/sys/mbuf.h:     NULL : m_tag_locate(m, MTAG_ABI_COMPAT, type, start));

uname:
FreeBSD hostname 6.0-BETA2 FreeBSD 6.0-BETA2 #1: Tue Aug 16 19:40:35 CDT 
2005     root_at_hostname:/usr/obj/usr/src/sys/GENERIC  i386

This is a box I'm able to try nearly anything on, so let me know what 
else I can do/provide.

Eric



-- 
------------------------------------------------------------------------
Eric Anderson        Sr. Systems Administrator        Centaur Technology
Anything that works is better than anything that doesn't.
------------------------------------------------------------------------