Has anyone seen similar crashes on OPNsense 26.7, particularly when protecting a WireGuard interface with Zenarmor?
Dell OptiPlex 3010
Intel 82575EB NICs (igb)
OPNsense 26.7
FreeBSD 15.1
Zenarmor Engine 2.6.2
Suricata installed
Zenarmor configuration
Routed Mode (L3)
Emulated Netmap Driver
Protected interfaces: igb0 (LAN) and wg1 (WireGuard)
Panic consistently references:
generic_mbuf_dtor()
Fatal trap 12: page fault while in kernel mode
Prior to the panic I see:
generic_mbuf_dtor Error: no netmap adapter on device
generic_netmap_unregister Emulated adapter for igb0 deactivated
generic_netmap_dtor Emulated netmap adapter for igb0 destroyed
For additional testing I'll remove wg1 from Zenarmor protection.
Hi,
There is no known issue with WG interface.
Could you please provide the logs and configuration by following the steps outlined in the link below? I kindly request that you select all checkboxes.
https://www.zenarmor.com/docs/support/reporting-bug␀
I switched/rotated to one of my other homelab OPNsense boxes and haven't seen this condition. I'll send logs and configs if I do.
Yes I also have The Kernel Panic but i have my System on Opnsense 26.7.2_2.
I am seeing crashes on ZA as well.
Specifically this is happening when ZA has to route/process high amount of traffic (in my case ~2-2.5G/s) at its maximum it can do.
At least for me it doesn't look like is exclusive to WG as I am able to reproduce this issue on non VPN path as well.
I have already a ticket opened and I am working on capture the crash cores to sent to the support.
Regards,
S.
I've already opened a ticket with Zenarmor. In my case, a kernel panic occurs whenever I try to start or restart the Zenarmor engine. I also suspect the netmap driver might be corrupted in the new OPNsense version 26.7.2.
Best Regards
I was able to reproduce this as well.
3 of 5 times when restaring ZA via GUI it crashed the whole FW with a kernel panic.
I mentioned that in my ticket additional to eastpect crashes. Provided crashlogs for both issues.
Regards,
S.
The Zenarmor developers can't tell me what the problem is; it's likely something general related to OPNsense or Zenarmor. Let's see what else the developers come back with.
Best regards
Hi everyone,
Good news for those experiencing this exact kernel panic on OPNsense 26.7:
The root cause—a race condition in generic_mbuf_dtor() during Netmap generic adapter teardown (generic_netmap_dtor)— officially addressed by the OPNsense core team.
You can track the issue, patch status, and upcoming fixes directly on GitHub here:
👉 https://github.com/opnsense/src/issues/314
Thanks to the OPNsense team!
Oh thats nasty...
Thanks for providing the official ticket!
Regards,
S.