Hi,
today I tried to configure ipsec on my linux workstation (with openswan) and 
it hanged just after the init had run /etc/rc.d/init.d/ipsec start. 
It was on linux-2.6.10-rc1-bk20, so I upgraded to 2.6.10-rc2-mm3 but it didn't 
make any difference. 

The alt-sysrq-p shows the following call trace:
xfrm_policy_insert
xfrm_netlink_rcv
netlink_data_ready
netlink_sendmsg
sock_aio_write
do_sync_write
sock_map_fd
sys_select
vfs_write
system_call

The full trace (with regs, etc) is available at 
http://www.iceni.pl/marcin/lockup.jpg 

.config attached. This hang is 100%-reproductible for me. I can attach 
openswan config if needed.

-- 
mg