pfSense » pfSense Packages

This is fixed in HAProxy 2.9.2: https://github.com/haproxy/haproxy/issues/2395#issuecomment-1889864836

Currently 2.9.1 is in the repo. I think the correct solution here is to update HAProxy, versus implementing the workaround.

Backtrace:

db:1:pfs> bt
Tracing pid 2 tid 100112 td 0xfffff8000582a000
kdb_enter() at kdb_enter+0x33/frame 0xfffffe0084fe38f0
panic() at panic+0x43/frame 0xfffffe0084fe3950
trap_fatal() at trap_fatal+0x40f/frame 0xfffffe0084fe39b0
trap_pfault() at trap_pfault+0x4f/frame 0xfffffe0084fe3a10
calltrap() at calltrap+0x8/frame 0xfffffe0084fe3a10
--- trap 0xc, rip = 0xffffffff80f246e2, rsp = 0xfffffe0084fe3ae0, rbp = 0xfffffe0084fe3b70 ---
tcp_m_copym() at tcp_m_copym+0x62/frame 0xfffffe0084fe3b70
tcp_default_output() at tcp_default_output+0x1294/frame 0xfffffe0084fe3d60
tcp_timer_rexmt() at tcp_timer_rexmt+0x53c/frame 0xfffffe0084fe3dc0
tcp_timer_enter() at tcp_timer_enter+0x101/frame 0xfffffe0084fe3e00
softclock_call_cc() at softclock_call_cc+0x12e/frame 0xfffffe0084fe3ec0
softclock_thread() at softclock_thread+0xe9/frame 0xfffffe0084fe3ef0
fork_exit() at fork_exit+0x7f/frame 0xfffffe0084fe3f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0084fe3f30
--- trap 0x462d6966, rip = 0x49462d7673, rsp = 0, rbp = 0x45442d6564 ---

Panic:

Fatal trap 12: page fault while in kernel mode
cpuid = 15; apic id = 0f
fault virtual address    = 0x1c
fault code        = supervisor read data, page not present
instruction pointer    = 0x20:0xffffffff80f246e2
stack pointer            = 0x0:0xfffffe0084fe3ae0
frame pointer            = 0x0:0xfffffe0084fe3b70
code segment        = base 0x0, limit 0xfffff, type 0x1b
            = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags    = interrupt enabled, resume, IOPL = 0
current process        = 2 (clock (15))
rdi: 0000000000000000 rsi: 0000000000000000 rdx: fffffe0084fe3cf8
rcx: 0000000000000000  r8: 000000000000011f  r9: 0000000000000000
rax: 0000000000000000 rbx: 0000000000000000 rbp: fffffe0084fe3b70
r10: 0000000000002067 r11: 000000000000e2d1 r12: 0000000000000000
r13: 000000000000011f r14: fffff801ef284540 r15: 0000000000000028
trap number        = 12
panic: page fault
cpuid = 15
time = 1714733480
KDB: enter: panic

I'm not sure this kernel panic is related to the zero-copy-forwarding issue in HAProxy 2.9.1.

The forum comments indicate that the new version, 2.9.7, addresses the issue that was raised in this Redmine. We can mark this ticket resolved.