Hello,

now the complete trace from the last crash:

kernel: page fault trap, code=0
Stopped at netbsd:fr_checkicmp6matchingstate+0x95: movw 0x4(%edi),%bx
db{0}> trace
fr_checkicmp6matchingstate(cbadaa48,0,28,cbaddaa48,8) at 
netbsd:fr_checkicmp6matchingstate+0x95
fr_stlookup(cbadda48,c2affff8,cbadaa10,0,cbadda48) at 
netbsd:fr_stlookup+0x2c4
fr_checkstate(cbadaa48,cbadaa44,cbadaa48,1,6) at 
netbsd:fr_checkstate+0x21f
fr_check(c2afffd0,28,c1bc104c,1,cbadab50) at netbsd:fr_check+0x4bd
fr_check_wrapper6(0,cbadab50,c1bc104c,2,c1bc104c) at 
netbsd:fr_check_wrapper6+0x23
pfil_run_hooks(c091b120,cbadabdc,c1bc104c,2,6bd50e60) at 
netbsd:pfil_run_hooks+0x6e
ip6_output(c2afff00,0,cbadac98,4,0) at netbsd:ip6_output+0x891
icmp6_reflect(c2afff00,28,1,8000000,cb77f816) at 
netbsd:icmp6_reflect+0x287
icmp6_error(c2affb00,2,0,500,c2afff00) at netbsd:icmp6_error+0x1b8
ip6_forward(c2accf00,0,c1bc104c,1,c1ba1120) at netbsd:ip6_forward+0x47d
ip6_input(c2accf00,7,cbadaf50,202,42) at netbsd:ip6_input+0x495
ip6intr(cbad0010,30,10,80010010,cbad7000 at netbsd:ip6intr+0x86
DDB lost frame for netbsd:Xsoftnet+0x56, trying 0xcbadaf58
Xsoftnet() at netbsd:Xsoftnet+0x56


You can download the screenshot from http://139.18.25.35/dump.jpg



thank you for you efforts
Uwe