Turning on Traffic Shaping causes crash

[thale]

I am testing OPNsense as a possible replacement for our existing router solution.  We operate multiple sites using IPSEC tunnels to connect the LANs at each site.  I am testing a dual-router setup on a lab network, with the OPNsense component being dual-router, with CARP addresses for WAN and LAN, state and configuration sync over a dedicated interface, and an IPSEC tunnel to another router "location" in the lab.

My testing of OPNsense has been going well, with IPSEC up and working and OPNsense handling the routing failover scenarios I've had time to throw at it so far.  Then yesterday, I enabled Traffic Shaping.  With Traffic Shaping configured, I'm experiencing repeated hard crashes.  The primary router will crash and, if left alone for awhile, the secondary router will eventually crash as well.  Both routers require a hard reset to make them operational again.  This morning I tried resetting everything and leaving it sit, essentially not driving any traffic over the IPSEC tunnels, and the routers stayed active.  I then started copying a file from one LAN to the other, and the routers both crashed again.

In the system log I see this repeated 15 times over a period of 47 minutes (with different memory addresses):
kernel: --- heap_extract: empty heap 0x0xfffff8002f8936f0

The next entry in the log is when I reset the router.

The console shows some additional information but my picture is too big to post at the moment.  I can try to address that if needed.

Is there a known bug affecting Traffic Shaping?  I looked through the issues and didn't see one listed.  Any suggestions on how to fix this?

[ky41083]

I found your issue, hopefully you're still watching this thread. Full details, including workaround, posted here:
https://forum.opnsense.org/index.php?topic=6350.0

The information you posted above helped me track it down and find a workaround much faster, so, thank you sir :)