>Number:         29787
>Category:       kern
>Synopsis:       recurrent kernel panics on a i386 router with 2 wm nics

As a follow up I managed to catch one of those panics (now with NetBSD
3.99.3 (RADIX) #20: Wed Apr 6 22:19:54 MEST 2005) in ddb:

  panic: m_copym: m == 0, len 1 [!COPYALL]
  Stopped at      netbsd:cpu_Debugger+0x4:        popl    %ebp
  db> bt
  cpu_Debugger(c03f82e8,c04ebb54,c04ebbe8,c011b3f4,c181204c) at netbsd:cpu_Debugge
  r+0x4
  panic(c041fbc0,1,0,0,0) at netbsd:panic+0x12b
  m_copym0(0,3c,1,1,0) at netbsd:m_copym0+0x490
  m_copym(c1d46900,3c,382,1,c22a1a64) at netbsd:m_copym+0x2c
  tcp_build_datapkt(c22bd44c,c22a1a64,1d7c,382,28) at netbsd:tcp_build_datapkt+0x2
  0c
  tcp_output(c22bd44c,c04ebcb8,0,110d7eb0,c22bd44c) at netbsd:tcp_output+0x119c
  tcp_sack_newack(c22bd44c,cb069822,14,cb069822,c22b6c00) at netbsd:tcp_sack_newac
  k+0x106
  tcp_input(c22b6c00,14,6,1,c181204c) at netbsd:tcp_input+0x191f
  ip_input(c22b6c00,0,0,7,0) at netbsd:ip_input+0x5d3
  ipintr(c04e0010,30,10,80010010,c04e8000) at netbsd:ipintr+0x7b
  DDB lost frame for netbsd:Xsoftnet+0x41, trying 0xc04ebe70
  Xsoftnet() at netbsd:Xsoftnet+0x41
  0x246:
  db>