NetBSD 7 on amd64 panics

[John Klos <john%ziaspace.com@localhost>]

Hi,

I have an amd64 system (Intel Core i3) which has been stable for a couple 
of years doing NAT, IPv6 routing, email, web and so on. Since updating to 
NetBSD 7 in May, it's paniced six times now. The latest:

fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff809cc927 cs 8 rflags 10207 cr2 10000004f 
ilevel 4 rsp fffffe811cfd4ba0
curlwp 0xfffffe842df3b420 pid 0.3 lowest kstack 0xfffffe811cfd22c0
panic: trap
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x13c
snprintf() at netbsd:snprintf
startlwp() at netbsd:startlwp
alltraps() at netbsd:alltraps+0x96
ipf_frag_natknown() at netbsd:ipf_frag_natknown+0x3a
ipf_nat6_checkin() at netbsd:ipf_nat6_checkin+0xe6
ipf_check() at netbsd:ipf_check+0x82b
pfil_run_hooks() at netbsd:pfil_run_hooks+0xc4
ip6_input() at netbsd:ip6_input+0x307
ip6intr() at netbsd:ip6intr+0x4b
softint_dispatch() at netbsd:softint_dispatch+0x79
DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xfffffe811cfd4ff0
Xsoftintr() at netbsd:Xsoftintr+0x4f
--- interrupt ---
0:
cpu0: End traceback...
uvm_fault(0xfffffe842690b480, 0x0,
2) -> e
dumpifnagt atlo  dpeavg e 0f,a1u lt(o fifns ets=up2e1r2v6i7s1or, 
msoidzee=
4167952):
trap type 6 code 2 ridpu mpf fffffff805dc489 cs 8 rflags 10202 cr2 84 
ilevel 8 rsp fffffe811dd97e10
curlwp 0xfffffe8406cb7480 pid 2044.5 lowest kstack 0xfffffe811dd952c0
Skipping crash dump on recursive panic
panic: wddump: polled command has been queued
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x13c
snprintf() at netbsd:snprintf
wddump() at netbsd:wddump+0x282
dumpsys_seg() at netbsd:dumpsys_seg+0xc7
dump_seg_iter() at netbsd:dump_seg_iter+0xce
dodumpsys() at netbsd:dodumpsys+0x24c
dumpsys() at netbsd:dumpsys+0x1d
vpanic() at netbsd:vpanic+0x145
snprintf() at netbsd:snprintf
startlwp() at netbsd:startlwp
alltraps() at netbsd:alltraps+0x96
ipf_frag_natknown() at netbsd:ipf_frag_natknown+0x3a
ipf_nat6_checkin() at netbsd:ipf_nat6_checkin+0xe6
ipf_check() at netbsd:ipf_check+0x82b
pfil_run_hooks() at netbsd:pfil_run_hooks+0xc4
ip6_input() at netbsd:ip6_input+0x307
ip6intr() at netbsd:ip6intr+0x4b
softint_dispatch() at netbsd:softint_dispatch+0x79
DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xfffffe811cfd4ff0
Xsoftintr() at netbsd:Xsoftintr+0x4f
--- interrupt ---
0:
cpu0: End traceback...
rebooting...

Ideas? I've kept the crashdumps.

John