It's also present in src/sys/netipsec/ipsec.c Almost certainly just a propagated bug into FAST_IPSEC. Do you fix it? (I don't have a -current tree at hand ATM) I don't have either a machine running current or commit privs, so no, I won't be checking in the change. Would you like me to file a PR?