I've only now caught the full trace of this bug that bit me many times over. The bug is non-deterministic, but happens often enough that I can be sure it's fixed if I don't see it in a week.
panic: m_copydata: len -7 < 0 kdb breakpoint at 1442b20 Stopped at Debugger+0x4: nop RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb> trace m_copydata(40006b5e680, e, fffffffffffffff9, 4000069b8c8, ffffffffffffff83, e0017b5c) at m_copydata+0xf0 wi_start(4000069a048, 0, 3b9aca00, 1, 0, 8) at wi_start+0x4b4 wihap_data_input(0, e0017cf8, 40006b5e680, 40006801810, 9, 4000680180e) at wihap_data_input+0x280 wi_rxeof(4000069a000, 0, e0017ec8, ff0000, 13de520, 1) at wi_rxeof+0x4cc wi_intr(4000069a000, 0, e0017ec8, 40006c4e000, 105ef60, 0) at wi_intr+0x3a8 sparc_interrupt(188adb0, e0018000, 1515550, 1886f88, 400006dda00, 182ec70) at sparc_interrupt+0x2a0 sched_idle(e0018000, 40006c40480, 1515b20, 40006c48000, 40000693020, deafbeef) at sched_idle+0x20c proc_trampoline(0, 0, 0, 0, 0, 0) at proc_trampoline+0x4 ddb> ps PID PPID PGRP UID S FLAGS WAIT COMMAND 14192 1697 14192 0 3 0x4082 ttyin ksh 1697 27965 1697 0 3 0x4180 select sshd 6049 1 6049 0 3 0x4082 ttyin getty 15676 1 15676 0 3 0x80 select cron 27965 1 27965 0 3 0x80 select sshd 27717 1 27717 0 3 0x40180 select lpd 10045 1 10045 77 3 0x180 poll dhcpd 23038 6691 23998 83 3 0x180 poll ntpd 6691 23998 23998 83 3 0x180 poll ntpd 23998 1 23998 0 3 0x80 poll ntpd 12814 9296 9296 74 3 0x180 bpf pflogd 9296 1 9296 0 3 0x80 netio pflogd 28022 27746 27746 73 3 0x180 poll syslogd 27746 1 27746 0 3 0x88 netio syslogd 32396 1 32396 77 3 0x180 poll dhclient 21107 1 26731 0 3 0x82 poll dhclient 11 0 0 0 3 0x100200 bored crypto 10 0 0 0 3 0x100200 aiodoned aiodoned 9 0 0 0 3 0x100200 syncer update 8 0 0 0 3 0x100200 cleaner cleaner 7 0 0 0 3 0x100200 reaper reaper 6 0 0 0 3 0x100200 pgdaemon pagedaemon 5 0 0 0 3 0x100200 pftm pfpurge 4 0 0 0 3 0x100200 bored syswq * 3 0 0 0 7 0x40100200 idle0 2 0 0 0 3 0x100200 kmalloc kmthread 1 0 1 0 3 0x4080 wait init 0 -1 0 0 3 0x80200 scheduler swapper console is /p...@1f,0/p...@1,1/e...@1/s...@14,400000:a Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. Copyright (c) 1995-2010 OpenBSD. All rights reserved. http://www.OpenBSD.org OpenBSD 4.7 (GENERIC) #258: Wed Mar 17 23:40:34 MDT 2010 dera...@sparc64.openbsd.org:/usr/src/sys/arch/sparc64/compile/GENERIC real mem = 402653184 (384MB) avail mem = 378126336 (360MB) mainbus0 at root: Sun Ultra 5/10 UPA/PCI (UltraSPARC-IIi 360MHz) cpu0 at mainbus0: SUNW,UltraSPARC-IIi (rev 9.1) @ 360 MHz cpu0: physical 16K instruction (32 b/l), 16K data (32 b/l), 256K external (64 b/l) psycho0 at mainbus0 addr 0xfffc4000: SUNW,sabre, impl 0, version 0, ign 7c0 psycho0: bus range 0-2, PCI bus 0 psycho0: dvma map c0000000-dfffffff pci0 at psycho0 ppb0 at pci0 dev 1 function 1 "Sun Simba PCI-PCI" rev 0x13 pci1 at ppb0 bus 1 ebus0 at pci1 dev 1 function 0 "Sun PCIO EBus2" rev 0x01 auxio0 at ebus0 addr 726000-726003, 728000-728003, 72a000-72a003, 72c000-72c003, 72f000-72f003 power0 at ebus0 addr 724000-724003 ivec 0x25 "SUNW,pll" at ebus0 addr 504000-504002 not configured sab0 at ebus0 addr 400000-40007f ivec 0x2b: rev 3.2 sabtty0 at sab0 port 0: console sabtty1 at sab0 port 1 comkbd0 at ebus0 addr 3083f8-3083ff ivec 0x29: no keyboard comms0 at ebus0 addr 3062f8-3062ff ivec 0x2a wsmouse0 at comms0 mux 0 lpt0 at ebus0 addr 3043bc-3043cb, 30015c-30015d, 700000-70000f ivec 0x22: polled clock1 at ebus0 addr 0-1fff: mk48t59 "flashprom" at ebus0 addr 0-fffff not configured audioce0 at ebus0 addr 200000-2000ff, 702000-70200f, 704000-70400f, 722000-722003 ivec 0x23 ivec 0x24: nvaddrs 0 audio0 at audioce0 hme0 at pci1 dev 1 function 1 "Sun HME" rev 0x01: ivec 0x7e1, address 08:00:20: nsphy0 at hme0 phy 1: DP83840 10/100 PHY, rev. 1 machfb0 at pci1 dev 2 function 0 "ATI Mach64" rev 0x5c machfb0: ATY,GT-C, 1152x900 wsdisplay0 at machfb0 mux 1 wsdisplay0: screen 0 added (std, sun emulation) pciide0 at pci1 dev 3 function 0 "CMD Technology PCI0646" rev 0x03: DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide0: using ivec 0x7e0 for native-PCI interrupt atapiscsi0 at pciide0 channel 0 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: <LG, CD-ROM CRD-8322B, 1.05> ATAPI 5/cdrom removable cd0(pciide0:0:0): using PIO mode 4, DMA mode 2 wd0 at pciide0 channel 1 drive 0: <IBM-DHEA-38451> wd0: 16-sector PIO, LBA, 8063MB, 16514064 sectors wd0(pciide0:1:0): using PIO mode 4, DMA mode 2 ppb1 at pci0 dev 1 function 0 "Sun Simba PCI-PCI" rev 0x13 pci2 at ppb1 bus 2 wi0 at pci2 dev 1 function 0 "Intersil PRISM2.5" rev 0x01: ivec 0x7d0 wi0: PRISM2.5 ISL3874A(Mini-PCI) (0x8013), Firmware 1.0.5 (primary), 1.3.4 (station), address 00:06:25: skc0 at pci2 dev 2 function 0 "Linksys EG1032" rev 0x12, Yukon (0x1): ivec 0x7d4 sk0 at skc0 port A: address 00:0c:41: eephy0 at sk0 phy 0: 88E1011 Gigabit PHY, rev. 3 vscsi0 at root scsibus1 at vscsi0: 256 targets softraid0 at root bootpath: /p...@1f,0/p...@1,1/i...@3,0/d...@2,0 root on wd0a swap on wd0b dump on wd0b