* *bsd*/sys/netinet*/in*_pcb.c: call ipsec_init_policy() from   within in*_pcballoc(), not from PRU_ATTACH logic.  it is to make   the allocation of ipsec policy struct prior to making inpcb available   to the world (don't show incomplete inpcb to others).   can lead to panic(), as reported on stable@freebsd.
* *bsd*/sys/netinet*/in*_pcb.c: call ipsec_init_policy() from
  within in*_pcballoc(), not from PRU_ATTACH logic.  it is to make
  the allocation of ipsec policy struct prior to making inpcb available
  to the world (don't show incomplete inpcb to others).
  can lead to panic(), as reported on stable@freebsd.

MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame