(usagi-users 03881) Mobile IPv6 TunnelPayload => kernel panic

Hello,

I am trying to use IPsec to protect payload between HA and MN in Mobile 
IPv6 environment. I am running the latest 2.6.22.1 kernel with latest 
USAGI patchs, and linux-2.6-mip6 binaries from USAGI git tree.

Anyway, after the first packet is received by the Mobile Node, it just 
hangs and panic. I have c/p the panic output at the end of this message.

Any idea why this is happenning?

Thanks,
Sebastien.

=======================================================================
[  121.173395] BUG: unable to handle kernel NULL pointer dereference at 
virtual address 0000001c
[  121.173491]  printing eip:
[  121.173537] *pde = 00000000
[  121.173580] Oops: 0000 [#1]
[  121.173625] Modules linked in: binfmt_misc rfcomm l2cap bluetooth 
i915 drm ppdev speedstep_lib cpufreq_powersave cpufreq_stats 
cpufreq_ondemand freq_table cpufreq_conservative cpufreq_userspace ac 
sbs battery video container button dock deflate zlib_deflate twofish 
twofish_common camellia serpent blowfish ecb aes xcbc sha256 crypto_null 
netconsole sbp2 parport_pc lp parport fuse snd_hda_intel snd_pcm_oss 
snd_mixer_oss snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi 
sr_mod snd_seq_midi_event snd_seq snd_timer snd_seq_device cdrom snd 
pcspkr ata_generic serio_raw soundcore psmouse intel_agp snd_page_alloc 
shpchp pci_hotplug af_packet agpgart evdev ext3 jbd mbcache sg sd_mod 
usbhid hid ohci1394 ieee1394 e100 mii ahci ata_piix libata scsi_mod 
ehci_hcd uhci_hcd usbcore thermal processor fan capability commoncap
[  121.176386] CPU:    0
[  121.176387] EIP:    0060:[<c02d528d>]    Not tainted VLI
[  121.176388] EFLAGS: 00010202   (2.6.22-8-mip6 #1)
[  121.176525] EIP is at fib6_add_1+0x5d/0x3d0
[  121.176572] eax: 0000000c   ebx: f7cbac00   ecx: 0000000c   edx: 0000002f
[  121.176623] esi: fffffff4   edi: 00000000   ebp: c03dd780   esp: c03e9c30
[  121.176674] ds: 007b   es: 007b   fs: 0000  gs: 0000  ss: 0068
[  121.176724] Process swapper (pid: 0, ti=c03e8000 task=c03c12c0 
task.ti=c03e8000)
[  121.177519] Stack: 00000004 00000001 f7cbacb4 00000001 0000000c 
00000000 00000000 0000002f
[  121.177830]        f7cbac00 fffffff4 00000000 c03dd780 c02d5aa3 
00000080 000000b4 043ded00
[  121.178143]        00000286 00000004 c03e9c00 00000000 dfdc1000 
f7cbac00 00000000 00000000
[  121.178565] Call Trace:
[  121.178673]  [<c02d5aa3>] fib6_add+0x33/0x3c0
[  121.178775]  [<c02d1f19>] __ip6_ins_rt+0x29/0x50
[  121.178858]  [<c02d3b0c>] rt6_redirect+0x18c/0x220
[  121.178996]  [<c02d9019>] ndisc_rcv+0x739/0xc50
[  121.179079]  [<c01c9a91>] blkcipher_walk_done+0x81/0x250
[  121.179171]  [<c02b707e>] xfrm_policy_match+0x3e/0x50
[  121.179250]  [<c02b73fc>] xfrm_policy_lookup_bytype+0x14c/0x1b0
[  121.179337]  [<c025a6b1>] skb_checksum+0x51/0x2e0
[  121.179442]  [<c025d6a8>] __skb_checksum_complete_head+0x18/0x60
[  121.179529]  [<c02df0df>] icmpv6_rcv+0x46f/0x7c0
[  121.179614]  [<c02b9e80>] __xfrm_policy_check+0x230/0x880
[  121.179800]  [<c02ca993>] ip6_input+0x163/0x370
[  121.179899]  [<c02cb12a>] ipv6_rcv+0x1ba/0x2e0
[  121.179978]  [<f8932337>] packet_rcv_spkt+0x107/0x1c0 [af_packet]
[  121.180078]  [<c0260766>] netif_receive_skb+0x276/0x300
[  121.180171]  [<c0262532>] process_backlog+0x82/0x100
[  121.180260]  [<c0262726>] net_rx_action+0x96/0x1c0
[  121.180348]  [<c011c972>] __do_softirq+0x52/0xa0
[  121.180432]  [<c011ca05>] do_softirq+0x45/0x50
[  121.180510]  [<c0105659>] do_IRQ+0x39/0x70
[  121.180590]  [<c0301e2b>] schedule+0x27b/0x580
[  121.180674]  [<c010416f>] common_interrupt+0x23/0x28
[  121.180775]  [<c01022b1>] mwait_idle_with_hints+0x41/0x50
[  121.180863]  [<c01023f1>] cpu_idle+0x41/0x60
[  121.180935]  [<c03eab6f>] start_kernel+0x24f/0x2e0
[  121.181015]  [<c03ea450>] unknown_bootoption+0x0/0x260
[  121.181105]  =======================
[  121.181149] Code: 00 00 00 c7 44 24 04 01 00 00 00 89 0c 24 eb 13 8b 
4c 24 10 8b 59 08 85 db 0f 84 8e 00 00 00 89 5c 24 10 8b 4c 24 10 8b 44 
24 10 <8b> 49 10 89 4c 24 0c 03 4c 24 38 89 4c 24 14 0f b7 58 14 3b 5c
[  121.183006] EIP: [<c02d528d>] fib6_add_1+0x5d/0x3d0 SS:ESP 0068:c03e9c30
[  121.183237] Kernel panic - not syncing: Fatal exception in interrupt