Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x360
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff80e785f7
stack pointer = 0x28:0xfffffe0025b9f9a0
frame pointer = 0x28:0xfffffe0025b9fa00
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (swi1: netisr 0)
db:0:kdb.enter.default> bt
Tracing pid 12 tid 100028 td 0xfffff8000424e580
swi_net() at swi_net+0x167/frame 0xfffffe0025b9fa00
ithread_loop() at ithread_loop+0x1a7/frame 0xfffffe0025b9fa70
fork_exit() at fork_exit+0x83/frame 0xfffffe0025b9fab0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0025b9fab0
The crash is in netisr so the change you made could be related. Though I don't see how it would be related to either miniupnpd or pimd specifically.
Probably nothing that can be done there except to change that dispatch method back to the default for now. Eventually when we move 2.5.0 up to 12-STABLE you might try again.
Also, you will want to delete that attachment. The message buffer in the textdump had large chunks of your config.xml and you probably don't want all that info out there.
EDIT: I removed the attachment files from the backend. I didn't edit your post to remove the links.