[srslte-users] Segmentation fault during LTE-UE Prach procedure
Liqun Liu
lliu at w2bi.com
Tue Oct 10 15:27:09 UTC 2017
Ismael,
I tried the latest code in github today. the UE attempted attach without any plmn hard coding .
But, the segmentation still there on the same line of code (srsLTE/lib/src/common/pdu.cc:463).
Also, the RX AGC (comment RX gain in configure file) behave different in the new code base than version 2.
In, version 2.0, AGC works fine. but in new release, UE detected the cell but not go forward. It feels UE is in a dead loop.
we are ruing a commercial grade femto enb in our lab, so that we know the USIM security settings. Regular UEs work with enb without issue. we used
imsi = 311480012345678
imei = 353490069873319
Liqun
________________________________
From: Ismael Gomez <ismael.gomez at softwareradiosystems.com>
Sent: Saturday, October 7, 2017 4:21:42 PM
To: Liqun Liu; Andre Puschmann; srslte-users at lists.softwareradiosystems.com
Subject: Re: [srslte-users] Segmentation fault during LTE-UE Prach procedure
Hi Liqun,
We've committed a hot-fix just today. I think the problem could be caused by not attaching a roaming PLMN. Can you try again please?
Are you trying to attach to a commercial network? How have you configured the USIM settings?
Regards
Ismael
On Fri, 6 Oct 2017 at 21:24 Liqun Liu <lliu at w2bi.com<mailto:lliu at w2bi.com>> wrote:
Andre,
I have all layers set to debug. But around line 200, log start to repeat itself.
Thanks,
Liqun
-----Original Message-----
From: Andre Puschmann [mailto:andre.puschmann at softwareradiosystems.com<mailto:andre.puschmann at softwareradiosystems.com>]
Sent: Friday, October 06, 2017 3:03 PM
To: Liqun Liu <lliu at w2bi.com<mailto:lliu at w2bi.com>>; srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>
Subject: Re: [srslte-users] Segmentation fault during LTE-UE Prach procedure
Hey,
can you attach logs with PHY level set to info please.
Thanks
Andre
On 06/10/17 20:39, Liqun Liu wrote:
> Ismael,
>
>
>
> I tried the 17-09 version of lteue and get different result.
>
> In the older version, lteue will try to prach and get segmentation fault.
>
> In the 17-09 version, lteue
>
>
>
> Fount cell: PCI=19, PRB=50, Ports=2, CFO=-1.4 Khz
>
> Fount PLMN: Id=311480, TAC=1
>
>
>
>
>
> Log also shows lteue get mib and sib1. But it just go to the cell
> search loop again and never try to do the PRACH procedure.
>
>
>
> Liqun
>
>
>
> *From:*Liqun Liu
> *Sent:* Wednesday, October 04, 2017 9:55 AM
> *To:* Ismael Gomez <ismael.gomez at softwareradiosystems.com<mailto:ismael.gomez at softwareradiosystems.com>>;
> srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>
> *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
> procedure
>
>
>
> Ismael,
>
>
>
> Sure. looking forward to test the new release.
>
> To add some background of test,
>
>
>
> LTE-UE attached to the Amarisoft enb. but crashed on a commercial eNB.
>
>
>
> Thanks,
>
>
>
> Liqun
>
> ----------------------------------------------------------------------
> --
>
> *From:*Ismael Gomez <ismael.gomez at softwareradiosystems.com<mailto:ismael.gomez at softwareradiosystems.com>
> <mailto:ismael.gomez at softwareradiosystems.com<mailto:ismael.gomez at softwareradiosystems.com>>>
> *Sent:* Wednesday, October 4, 2017 6:19:02 AM
> *To:* Liqun Liu; srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>
> <mailto:srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>>
> *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
> procedure
>
>
>
> Hi Li,
>
>
>
> We are going to release a new version this Friday. Probably the best
> is to wait and see if the bug is still present with that new version.
>
>
>
> Thanks
>
>
>
> On Tue, 3 Oct 2017 at 23:00 Liqun Liu <lliu at w2bi.com<mailto:lliu at w2bi.com>
> <mailto:lliu at w2bi.com<mailto:lliu at w2bi.com>>> wrote:
>
> Hi all,
>
>
>
> I experience this segmentation fault issue when lte-UE try to PRACH.
> It looks likely the subheaders of pdu_msg was not initialized
> properly. I went through archive and do not see anyone else has
> similar issue. Can someone give some help?
>
>
>
>
>
> I attached the gdb log below
>
>
>
> Searching for cell...
> Using Volk machine: avx2_64_mmx_orc
> Found CELL ID: 19 CP: Normal , CFO: -0.6 KHz.
> Trying to decode MIB...
> - Cell ID: 19
> - Nof ports: 2
> - CP: Normal
> - PRB: 50
> - PHICH Length: Normal
> - PHICH Resources: 1/6
> - SFN: 0
> MIB received BW=10 MHz
> [New Thread 0x7fffc37fe700 (LWP 17177)]
> Initializating cell configuration...
> -- Asking for clock rate 23.040000 MHz...
> -- Actually got clock rate 23.040000 MHz.
> -- Performing timer loopback test... pass
> Setting Sampling frequency 11.52 MHz
> Setting TX/RX offset 120 samples, 10.42 us
> SIB1 received, CellID=19, PLMN Id: MCC 311 MNC 480
> SIB2 received
> [Thread 0x7fffc37fe700 (LWP 17177) exited]
> Random Access Transmission: seq=1, ra-rnti=0x4
>
> ------------------------------
>
> Thread 24 "srsue_debug" received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 0x7fffd97fa700 (LWP 17157)]
> 0x000000000050091e in srslte::sch_subh::get_payload_size (this=0x0)
> at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
> 459 return nof_bytes;
> (gdb) backtrace
> #0 0x000000000050091e in srslte::sch_subh::get_payload_size
> (this=0x0) at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
> #1 0x00000000004ffe7b in srslte::sch_pdu::write_packet
> (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
> /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
> #2 0x00000000004c9567 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
> payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:253
> #3 0x00000000004c9db8 in srsue::mux::msg3_get (this=0x7ffff1a5f618,
> payload=0x4c93800 "", pdu_sz=117) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
> #4 0x00000000004d43ee in
> srsue::ul_harq_entity::ul_harq_process::run_tti
> (this=0x7ffff1a60bf8, tti_tx=1945, grant=0x7fffd97f9720,
> action=0x7fffd97f9c40)
> at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
> #5 0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
> (this=0x7ffff1a60a68, tti=1941, grant=0x7fffd97f9720,
> action=0x7fffd97f9c40) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
> #6 0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
> (this=0x7ffff1a60a68, grant=..., action=0x7fffd97f9c40) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
> #7 0x00000000004c6bf2 in srsue::mac::new_grant_ul
> (this=0x7ffff1a5f4a8, grant=..., action=0x7fffd97f9c40) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
> #8 0x00000000004d81e9 in srsue::phch_worker::work_imp
> (this=0x7ffff7f1b010) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
> #9 0x00000000005054bb in srslte::thread_pool::worker::run_thread
> (this=0x7ffff7f1b010) at
> /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
> #10 0x00000000004c7f28 in thread::thread_function_entry
> (_this=0x7ffff7f1b010) at
> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
> #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffd97fa700) at
> pthread_create.c:333
> #12 0x00007ffff61273dd in clone () at
> ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
> (gdb) frame 0
> #0 0x000000000050091e in srslte::sch_subh::get_payload_size
> (this=0x0) at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
> 459 return nof_bytes;
> (gdb) print this
> $1 = (srslte::sch_subh * const) 0x0
> (gdb) frame 1
> #1 0x00000000004ffe7b in srslte::sch_pdu::write_packet
> (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
> /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
> 229 printf("SUBH %d is_sdu=%d, payload=%d\n", i,
> subheaders[i].is_sdu(), subheaders[i].get_payload_size());
> (gdb) print i
> $2 = 0
> (gdb) print subheaders[0]
> Cannot access memory at address 0x0
> (gdb) print subheaders
> $3 = std::vector of length 0, capacity 0
>
>
>
> comment out /srsLTE/lib/src/common/pdu.cc:459 \, run again and get
> similar error
>
>
>
> Searching for cell...
> Using Volk machine: avx2_64_mmx_orc
> Found CELL ID: 19 CP: Normal , CFO: -0.7 KHz.
> Trying to decode MIB...
> - Cell ID: 19
> - Nof ports: 2
> - CP: Normal
> - PRB: 50
> - PHICH Length: Normal
> - PHICH Resources: 1/6
> - SFN: 0
> MIB received BW=10 MHz
> [New Thread 0x7fffc37fe700 (LWP 3125)]
> Initializating cell configuration...
> -- Asking for clock rate 23.040000 MHz...
> -- Actually got clock rate 23.040000 MHz.
> -- Performing timer loopback test... pass
> Setting Sampling frequency 11.52 MHz
> Setting TX/RX offset 120 samples, 10.42 us
> SIB1 received, CellID=19, PLMN Id: MCC 311 MNC 480
> SIB2 received
> [Thread 0x7fffc37fe700 (LWP 3125) exited]
> Random Access Transmission: seq=1, ra-rnti=0x9
>
> ------------------------------
> Random Access Transmission: seq=2, ra-rnti=0x4
>
> Thread 26 "srsue_debug_rad" received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 0x7fffcbfff700 (LWP 3106)]
> 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
> (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
> pdu_len_bytes=117, is_ulsch=true)
> at
> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
> 173 subheaders[i].parent = this;
> (gdb) backtrace
> #0 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
> (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
> pdu_len_bytes=117, is_ulsch=true)
> at
> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
> #1 0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
> (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
> is_ulsch=true)
> at
> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
> #2 0x00000000004c8d11 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
> payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:167
> #3 0x00000000004c9db8 in srsue::mux::msg3_get (this=0x7ffff1a5f618,
> payload=0x4c90500 "", pdu_sz=117) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
> #4 0x00000000004d43ee in
> srsue::ul_harq_entity::ul_harq_process::run_tti
> (this=0x7ffff1a60bf8, tti_tx=3905, grant=0x7fffcbffe720,
> action=0x7fffcbffec40)
> at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
> #5 0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
> (this=0x7ffff1a60a68, tti=3901, grant=0x7fffcbffe720,
> action=0x7fffcbffec40) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
> #6 0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
> (this=0x7ffff1a60a68, grant=..., action=0x7fffcbffec40) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
> #7 0x00000000004c6bf2 in srsue::mac::new_grant_ul
> (this=0x7ffff1a5f4a8, grant=..., action=0x7fffcbffec40) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
> #8 0x00000000004d81e9 in srsue::phch_worker::work_imp
> (this=0x7ffff7f3aa98) at
> /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
> #9 0x0000000000505211 in srslte::thread_pool::worker::run_thread
> (this=0x7ffff7f3aa98) at
> /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
> #10 0x00000000004c7f28 in thread::thread_function_entry
> (_this=0x7ffff7f3aa98) at
> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
> #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffcbfff700) at
> pthread_create.c:333
> #12 0x00007ffff61273dd in clone () at
> ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
> (gdb) frame 0
> #0 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
> (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
> pdu_len_bytes=117, is_ulsch=true)
> at
> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
> 173 subheaders[i].parent = this;
> (gdb) print i
> $1 = 0
> (gdb) print subheaders
> $2 = std::vector of length 0, capacity 0
> (gdb) frame 1
> #1 0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
> (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
> is_ulsch=true)
> at
> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
> 78 init_(payload, pdu_len_bytes, is_ulsch);
>
> thanks,
>
>
>
> Liqun
>
>
>
> _______________________________________________
> srslte-users mailing list
> srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>
> <mailto:srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>>
> http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>
>
>
> _______________________________________________
> srslte-users mailing list
> srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>
> http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>
_______________________________________________
srslte-users mailing list
srslte-users at lists.softwareradiosystems.com<mailto:srslte-users at lists.softwareradiosystems.com>
http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.srsran.com/pipermail/srsran-users/attachments/20171010/432c776a/attachment.htm>
More information about the srsran-users
mailing list