OPNsense 26.7 Kernel Panic with Zenarmor 2.6.2

Started by OPNDeciso, July 19, 2026, 07:38:32 PM

Previous topic - Next topic
Has anyone seen similar crashes on OPNsense 26.7, particularly when protecting a WireGuard interface with Zenarmor?

Dell OptiPlex 3010
Intel 82575EB NICs (igb)

OPNsense 26.7
FreeBSD 15.1
Zenarmor Engine 2.6.2
Suricata installed

Zenarmor configuration
Routed Mode (L3)
Emulated Netmap Driver
Protected interfaces: igb0 (LAN) and wg1 (WireGuard)

Panic consistently references:
generic_mbuf_dtor()
Fatal trap 12: page fault while in kernel mode

Prior to the panic I see:
generic_mbuf_dtor Error: no netmap adapter on device
generic_netmap_unregister Emulated adapter for igb0 deactivated
generic_netmap_dtor Emulated netmap adapter for igb0 destroyed

For additional testing I'll remove wg1 from Zenarmor protection.

Hi,

There is no known issue with WG interface.

Could you please provide the logs and configuration by following the steps outlined in the link below? I kindly request that you select all checkboxes. 
https://www.zenarmor.com/docs/support/reporting-bug␀;


I switched/rotated to one of my other homelab OPNsense boxes and haven't seen this condition. I'll send logs and configs if I do.

Yes I also have The Kernel Panic but i have my System on Opnsense 26.7.2_2.

I am seeing crashes on ZA as well.
Specifically this is happening when ZA has to route/process high amount of traffic (in my case ~2-2.5G/s) at its maximum it can do.
At least for me it doesn't look like is exclusive to WG as I am able to reproduce this issue on non VPN path as well.

I have already a ticket opened and I am working on capture the crash cores to sent to the support.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
N355 - i226-V | AQC113C | 16G | 500G - PROD

PRXMX
N5105 - i226-V | 2x8G | 512G - NODE #1
N100 - i226-V | 16G | 1T - NODE #2

I've already opened a ticket with Zenarmor. In my case, a kernel panic occurs whenever I try to start or restart the Zenarmor engine. I also suspect the netmap driver might be corrupted in the new OPNsense version 26.7.2.

Best Regards

I was able to reproduce this as well.

3 of 5 times when restaring ZA via GUI it crashed the whole FW with a kernel panic.

I mentioned that in my ticket additional to eastpect crashes. Provided crashlogs for both issues.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
N355 - i226-V | AQC113C | 16G | 500G - PROD

PRXMX
N5105 - i226-V | 2x8G | 512G - NODE #1
N100 - i226-V | 16G | 1T - NODE #2

The Zenarmor developers can't tell me what the problem is; it's likely something general related to OPNsense or Zenarmor. Let's see what else the developers come back with.

Best regards