Fatal trap 12: page fault while in kernel mode

[binaryanomaly]

What causes this?

Code Select Expand

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0xa
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff80a790d2
stack pointer         = 0x0:0xfffffe0228dbf8e0
frame pointer         = 0x0:0xfffffe0228dbf9a0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 12 (irq260: virtio_pci1)

OPNsense failed hard. I had to reboot it twice.

This is on VM. Eeverything else on the host was fine.

[franco]

Without stack trace, firewall configuration and gateway monitor configuration: your guess is as good as anyone's.

It may be related to a pf bug we have surfaced using shared forwarding, see https://github.com/opnsense/src/issues/52


Cheers,
Franco

[binaryanomaly]

Ok. Where can I find them?

[Sky22019]

Hi there,

Just chipping in to say I am facing same issue and to bump this post in consequence.

Cheers!

[overture]

Im also getting this fault.

Also this:

PHP Warning:  in_array() expects parameter 2 to be array, null given in /usr/local/www/system_general.php on line 434

Also ever since the last update Zoom cant connect, even after disabling IDS/IPS and DNSEC

OPNsense 21.1.5-amd64
FreeBSD 12.1-RELEASE-p16-HBSD
OpenSSL 1.1.1k 25 Mar 2021

Fatal trap 1: privileged instruction fault while in kernel mode
cpuid = 3; apic id = 03
instruction pointer   = 0x20:0xffffffff80d23e40
stack pointer           = 0x28:0xfffffe004b809678
frame pointer           = 0x28:0xfffffe004b809750
code segment      = base 0x0, limit 0xfffff, type 0x1b
         = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags   = interrupt enabled, resume, IOPL = 0
current process      = 34707 (sysctl)
trap number      = 1
panic: privileged instruction fault
cpuid = 3
time = 1620042507
__HardenedBSD_version = 1200059 __FreeBSD_version = 1201000
version = FreeBSD 12.1-RELEASE-p16-HBSD #0  b531d3958f5(stable/21.1)-dirty: Tue Apr 20 11:00:08 CEST 2021
    root@sensey:/usr/obj/usr/src/amd64.amd64/sys/SMP
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe004b809380
vpanic() at vpanic+0x1a2/frame 0xfffffe004b8093d0
panic() at panic+0x43/frame 0xfffffe004b809430
trap_fatal() at trap_fatal+0x39c/frame 0xfffffe004b809490
trap() at trap+0x6c/frame 0xfffffe004b8095a0
calltrap() at calltrap+0x8/frame 0xfffffe004b8095a0
--- trap 0x1, rip = 0xffffffff80d23e40, rsp = 0xfffffe004b809678, rbp = 0xfffffe004b809750 ---
sysctl_sysctl_next() at sysctl_sysctl_next+0x20/frame 0xfffffe004b809750
sysctl_root_handler_locked() at sysctl_root_handler_locked+0x8b/frame 0xfffffe004b809790
sysctl_root() at sysctl_root+0x293/frame 0xfffffe004b809810
userland_sysctl() at userland_sysctl+0x17a/frame 0xfffffe004b8098c0
sys___sysctl() at sys___sysctl+0x5f/frame 0xfffffe004b809970
amd64_syscall() at amd64_syscall+0x364/frame 0xfffffe004b809ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe004b809ab0
--- syscall (202, FreeBSD ELF64, sys___sysctl), rip = 0x46f14e08cda, rsp = 0x700f97dd8e78, rbp = 0x700f97dd8eb0 ---
KDB: enter: panic