Hi Hans,
I got a new panic this morning (for which I have the dump) and one yesterday, but my dump space was limited and so I've lost it.

this is last page of ::msgbuf and i see lmrc in the stack so I presume it is related.

IP Filter: v4.1.9, running.
WARNING: lmrc0: command failed, status = 76, ex_status = 0, cdb[0] = 1b
WARNING: lmrc0: command failed, status = 76, ex_status = 0, cdb[0] = 1b
WARNING: lmrc0: command failed, status = 76, ex_status = 0, cdb[0] = 1b
WARNING: lmrc0: command failed, status = 76, ex_status = 0, cdb[0] = 1b
NOTICE: lmrc0: Drive 00(e252/Port 1I Box 0 Bay 0) Path 300062b20dde3640  reset (Type 03)
NOTICE: bge0: bge_check_copper: link now up speed 1000 duplex 2
NOTICE: bge0 link up, 1000 Mbps, full duplex

panic[cpu1]/thread=fffffe00f4f1fc20:
BAD TRAP: type=e (#pf Page fault) rp=fffffe00f4f1f7e0 addr=0 occurred in module "scsi" due to a NULL pointer dereference


sched:
#pf Page fault
Bad kernel fault at addr=0x0
pid=0, pc=0xfffffffff3908e2d, sp=0xfffffe00f4f1f8d0, eflags=0x10246
cr0: 8005003b<pg,wp,ne,et,ts,mp,pe>  cr4: 3626f8<smap,smep,osxsav,pcide,vmxe,xmme,fxsr,pge,mce,pae,pse,de>
cr2: 0
cr3: 8000000
cr8: 0

        rdi:                0 rsi:                1 rdx: fffffe00f4f1fc20
        rcx:                2  r8:       4c1224e968  r9:                0
        rax:                0 rbx:                0 rbp: fffffe00f4f1f920
        r10:       d5895e41ab r11: fffffe00f4f1fc20 r12:                0
        r13: fffffeb1dab77000 r14:                1 r15: fffffeb1daacc058
        fsb:                0 gsb: fffffeb1d4daf000  ds:               4b
         es:               4b  fs:                0  gs:              1c3
        trp:                e err:                0 rip: fffffffff3908e2d
         cs:               30 rfl:            10246 rsp: fffffe00f4f1f8d0
         ss:               38

fffffe00f4f1f6f0 unix:die+c0 ()
fffffe00f4f1f7d0 unix:trap+999 ()
fffffe00f4f1f7e0 unix:cmntrap+e9 ()
fffffe00f4f1f920 scsi:scsi_tgtmap_beginf+2d ()
fffffe00f4f1f940 scsi:scsi_hba_tgtmap_set_begin+16 ()
fffffe00f4f1fa90 lmrc:lmrc_phys_update_tgtmap+40 ()
fffffe00f4f1fad0 lmrc:lmrc_get_pd_list+5a ()
fffffe00f4f1faf0 lmrc:lmrc_phys_aen_handler+4d ()
fffffe00f4f1fb50 lmrc:lmrc_aen_handler+1eb ()
fffffe00f4f1fc00 genunix:taskq_thread+2a6 ()
fffffe00f4f1fc10 unix:thread_start+b ()

dumping to /dev/zvol/dsk/rpool/dump, offset 65536, content: kernel + curproc
NOTICE: ahci0: ahci_tran_reset_dport port 5 reset port
NOTICE: ahci0: ahci_tran_reset_dport port 6 reset port
>
> ::quit

Regards
Maurilio.