[srslte-users] Segmentation fault during LTE-UE Prach procedure
Ismael Gomez
ismael.gomez at softwareradiosystems.com
Tue Oct 10 15:29:00 UTC 2017
Please send the ue.log and output console to the list and we'll try to see
what happens.
thanks
On Tue, 10 Oct 2017 at 17:27 Liqun Liu <lliu at w2bi.com> wrote:
> Ismael,
>
>
> I tried the latest code in github today. the UE attempted attach without
> any plmn hard coding .
>
> But, the segmentation still there on the same line of code (
> srsLTE/lib/src/common/pdu.cc:463).
>
>
> Also, the RX AGC (comment RX gain in configure file) behave different in
> the new code base than version 2.
>
> In, version 2.0, AGC works fine. but in new release, UE detected the cell
> but not go forward. It feels UE is in a dead loop.
>
>
> we are ruing a commercial grade femto enb in our lab, so that we know the
> USIM security settings. Regular UEs work with enb without issue. we used
> imsi = 311480012345678
> imei = 353490069873319
> Liqun
>
>
> ------------------------------
> *From:* Ismael Gomez <ismael.gomez at softwareradiosystems.com>
> *Sent:* Saturday, October 7, 2017 4:21:42 PM
> *To:* Liqun Liu; Andre Puschmann;
> srslte-users at lists.softwareradiosystems.com
>
> *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
> procedure
> Hi Liqun,
>
> We've committed a hot-fix just today. I think the problem could be caused
> by not attaching a roaming PLMN. Can you try again please?
>
> Are you trying to attach to a commercial network? How have you configured
> the USIM settings?
>
> Regards
> Ismael
>
> On Fri, 6 Oct 2017 at 21:24 Liqun Liu <lliu at w2bi.com> wrote:
>
>>
>> Andre,
>>
>> I have all layers set to debug. But around line 200, log start to repeat
>> itself.
>>
>> Thanks,
>>
>> Liqun
>> -----Original Message-----
>> From: Andre Puschmann [mailto:andre.puschmann at softwareradiosystems.com]
>> Sent: Friday, October 06, 2017 3:03 PM
>> To: Liqun Liu <lliu at w2bi.com>;
>> srslte-users at lists.softwareradiosystems.com
>> Subject: Re: [srslte-users] Segmentation fault during LTE-UE Prach
>> procedure
>>
>> Hey,
>>
>> can you attach logs with PHY level set to info please.
>>
>> Thanks
>> Andre
>>
>> On 06/10/17 20:39, Liqun Liu wrote:
>> > Ismael,
>> >
>> >
>> >
>> > I tried the 17-09 version of lteue and get different result.
>> >
>> > In the older version, lteue will try to prach and get segmentation
>> fault.
>> >
>> > In the 17-09 version, lteue
>> >
>> >
>> >
>> > Fount cell: PCI=19, PRB=50, Ports=2, CFO=-1.4 Khz
>> >
>> > Fount PLMN: Id=311480, TAC=1
>> >
>> >
>> >
>> >
>> >
>> > Log also shows lteue get mib and sib1. But it just go to the cell
>> > search loop again and never try to do the PRACH procedure.
>> >
>> >
>> >
>> > Liqun
>> >
>> >
>> >
>> > *From:*Liqun Liu
>> > *Sent:* Wednesday, October 04, 2017 9:55 AM
>> > *To:* Ismael Gomez <ismael.gomez at softwareradiosystems.com>;
>> > srslte-users at lists.softwareradiosystems.com
>> > *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
>> > procedure
>> >
>> >
>> >
>> > Ismael,
>> >
>> >
>> >
>> > Sure. looking forward to test the new release.
>> >
>> > To add some background of test,
>> >
>> >
>> >
>> > LTE-UE attached to the Amarisoft enb. but crashed on a commercial eNB.
>> >
>> >
>> >
>> > Thanks,
>> >
>> >
>> >
>> > Liqun
>> >
>> > ----------------------------------------------------------------------
>> > --
>> >
>> > *From:*Ismael Gomez <ismael.gomez at softwareradiosystems.com
>> > <mailto:ismael.gomez at softwareradiosystems.com>>
>> > *Sent:* Wednesday, October 4, 2017 6:19:02 AM
>> > *To:* Liqun Liu; srslte-users at lists.softwareradiosystems.com
>> > <mailto:srslte-users at lists.softwareradiosystems.com>
>> > *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
>> > procedure
>> >
>> >
>> >
>> > Hi Li,
>> >
>> >
>> >
>> > We are going to release a new version this Friday. Probably the best
>> > is to wait and see if the bug is still present with that new version.
>> >
>> >
>> >
>> > Thanks
>> >
>> >
>> >
>> > On Tue, 3 Oct 2017 at 23:00 Liqun Liu <lliu at w2bi.com
>> > <mailto:lliu at w2bi.com>> wrote:
>> >
>> > Hi all,
>> >
>> >
>> >
>> > I experience this segmentation fault issue when lte-UE try to PRACH.
>> > It looks likely the subheaders of pdu_msg was not initialized
>> > properly. I went through archive and do not see anyone else has
>> > similar issue. Can someone give some help?
>> >
>> >
>> >
>> >
>> >
>> > I attached the gdb log below
>> >
>> >
>> >
>> > Searching for cell...
>> > Using Volk machine: avx2_64_mmx_orc
>> > Found CELL ID: 19 CP: Normal , CFO: -0.6 KHz.
>> > Trying to decode MIB...
>> > - Cell ID: 19
>> > - Nof ports: 2
>> > - CP: Normal
>> > - PRB: 50
>> > - PHICH Length: Normal
>> > - PHICH Resources: 1/6
>> > - SFN: 0
>> > MIB received BW=10 MHz
>> > [New Thread 0x7fffc37fe700 (LWP 17177)]
>> > Initializating cell configuration...
>> > -- Asking for clock rate 23.040000 MHz...
>> > -- Actually got clock rate 23.040000 MHz.
>> > -- Performing timer loopback test... pass
>> > Setting Sampling frequency 11.52 MHz
>> > Setting TX/RX offset 120 samples, 10.42 us
>> > SIB1 received, CellID=19, PLMN Id: MCC 311 MNC 480
>> > SIB2 received
>> > [Thread 0x7fffc37fe700 (LWP 17177) exited]
>> > Random Access Transmission: seq=1, ra-rnti=0x4
>> >
>> > ------------------------------
>> >
>> > Thread 24 "srsue_debug" received signal SIGSEGV, Segmentation fault.
>> > [Switching to Thread 0x7fffd97fa700 (LWP 17157)]
>> > 0x000000000050091e in srslte::sch_subh::get_payload_size (this=0x0)
>> > at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>> > 459 return nof_bytes;
>> > (gdb) backtrace
>> > #0 0x000000000050091e in srslte::sch_subh::get_payload_size
>> > (this=0x0) at
>> /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>> > #1 0x00000000004ffe7b in srslte::sch_pdu::write_packet
>> > (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
>> > #2 0x00000000004c9567 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
>> > payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:253
>> > #3 0x00000000004c9db8 in srsue::mux::msg3_get (this=0x7ffff1a5f618,
>> > payload=0x4c93800 "", pdu_sz=117) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
>> > #4 0x00000000004d43ee in
>> > srsue::ul_harq_entity::ul_harq_process::run_tti
>> > (this=0x7ffff1a60bf8, tti_tx=1945, grant=0x7fffd97f9720,
>> > action=0x7fffd97f9c40)
>> > at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
>> > #5 0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
>> > (this=0x7ffff1a60a68, tti=1941, grant=0x7fffd97f9720,
>> > action=0x7fffd97f9c40) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
>> > #6 0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
>> > (this=0x7ffff1a60a68, grant=..., action=0x7fffd97f9c40) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
>> > #7 0x00000000004c6bf2 in srsue::mac::new_grant_ul
>> > (this=0x7ffff1a5f4a8, grant=..., action=0x7fffd97f9c40) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
>> > #8 0x00000000004d81e9 in srsue::phch_worker::work_imp
>> > (this=0x7ffff7f1b010) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
>> > #9 0x00000000005054bb in srslte::thread_pool::worker::run_thread
>> > (this=0x7ffff7f1b010) at
>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
>> > #10 0x00000000004c7f28 in thread::thread_function_entry
>> > (_this=0x7ffff7f1b010) at
>> >
>> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
>> > #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffd97fa700) at
>> > pthread_create.c:333
>> > #12 0x00007ffff61273dd in clone () at
>> > ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
>> > (gdb) frame 0
>> > #0 0x000000000050091e in srslte::sch_subh::get_payload_size
>> > (this=0x0) at
>> /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>> > 459 return nof_bytes;
>> > (gdb) print this
>> > $1 = (srslte::sch_subh * const) 0x0
>> > (gdb) frame 1
>> > #1 0x00000000004ffe7b in srslte::sch_pdu::write_packet
>> > (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
>> > 229 printf("SUBH %d is_sdu=%d, payload=%d\n", i,
>> > subheaders[i].is_sdu(), subheaders[i].get_payload_size());
>> > (gdb) print i
>> > $2 = 0
>> > (gdb) print subheaders[0]
>> > Cannot access memory at address 0x0
>> > (gdb) print subheaders
>> > $3 = std::vector of length 0, capacity 0
>> >
>> >
>> >
>> > comment out /srsLTE/lib/src/common/pdu.cc:459 \, run again and get
>> > similar error
>> >
>> >
>> >
>> > Searching for cell...
>> > Using Volk machine: avx2_64_mmx_orc
>> > Found CELL ID: 19 CP: Normal , CFO: -0.7 KHz.
>> > Trying to decode MIB...
>> > - Cell ID: 19
>> > - Nof ports: 2
>> > - CP: Normal
>> > - PRB: 50
>> > - PHICH Length: Normal
>> > - PHICH Resources: 1/6
>> > - SFN: 0
>> > MIB received BW=10 MHz
>> > [New Thread 0x7fffc37fe700 (LWP 3125)]
>> > Initializating cell configuration...
>> > -- Asking for clock rate 23.040000 MHz...
>> > -- Actually got clock rate 23.040000 MHz.
>> > -- Performing timer loopback test... pass
>> > Setting Sampling frequency 11.52 MHz
>> > Setting TX/RX offset 120 samples, 10.42 us
>> > SIB1 received, CellID=19, PLMN Id: MCC 311 MNC 480
>> > SIB2 received
>> > [Thread 0x7fffc37fe700 (LWP 3125) exited]
>> > Random Access Transmission: seq=1, ra-rnti=0x9
>> >
>> > ------------------------------
>> > Random Access Transmission: seq=2, ra-rnti=0x4
>> >
>> > Thread 26 "srsue_debug_rad" received signal SIGSEGV, Segmentation
>> fault.
>> > [Switching to Thread 0x7fffcbfff700 (LWP 3106)]
>> > 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>> > (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>> > pdu_len_bytes=117, is_ulsch=true)
>> > at
>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>> > 173 subheaders[i].parent = this;
>> > (gdb) backtrace
>> > #0 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>> > (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>> > pdu_len_bytes=117, is_ulsch=true)
>> > at
>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>> > #1 0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
>> > (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
>> > is_ulsch=true)
>> > at
>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
>> > #2 0x00000000004c8d11 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
>> > payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:167
>> > #3 0x00000000004c9db8 in srsue::mux::msg3_get (this=0x7ffff1a5f618,
>> > payload=0x4c90500 "", pdu_sz=117) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
>> > #4 0x00000000004d43ee in
>> > srsue::ul_harq_entity::ul_harq_process::run_tti
>> > (this=0x7ffff1a60bf8, tti_tx=3905, grant=0x7fffcbffe720,
>> > action=0x7fffcbffec40)
>> > at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
>> > #5 0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
>> > (this=0x7ffff1a60a68, tti=3901, grant=0x7fffcbffe720,
>> > action=0x7fffcbffec40) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
>> > #6 0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
>> > (this=0x7ffff1a60a68, grant=..., action=0x7fffcbffec40) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
>> > #7 0x00000000004c6bf2 in srsue::mac::new_grant_ul
>> > (this=0x7ffff1a5f4a8, grant=..., action=0x7fffcbffec40) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
>> > #8 0x00000000004d81e9 in srsue::phch_worker::work_imp
>> > (this=0x7ffff7f3aa98) at
>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
>> > #9 0x0000000000505211 in srslte::thread_pool::worker::run_thread
>> > (this=0x7ffff7f3aa98) at
>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
>> > #10 0x00000000004c7f28 in thread::thread_function_entry
>> > (_this=0x7ffff7f3aa98) at
>> >
>> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
>> > #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffcbfff700) at
>> > pthread_create.c:333
>> > #12 0x00007ffff61273dd in clone () at
>> > ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
>> > (gdb) frame 0
>> > #0 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>> > (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>> > pdu_len_bytes=117, is_ulsch=true)
>> > at
>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>> > 173 subheaders[i].parent = this;
>> > (gdb) print i
>> > $1 = 0
>> > (gdb) print subheaders
>> > $2 = std::vector of length 0, capacity 0
>> > (gdb) frame 1
>> > #1 0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
>> > (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
>> > is_ulsch=true)
>> > at
>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
>> > 78 init_(payload, pdu_len_bytes, is_ulsch);
>> >
>> > thanks,
>> >
>> >
>> >
>> > Liqun
>> >
>> >
>> >
>> > _______________________________________________
>> > srslte-users mailing list
>> > srslte-users at lists.softwareradiosystems.com
>> > <mailto:srslte-users at lists.softwareradiosystems.com>
>> > http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>> >
>> >
>> >
>> > _______________________________________________
>> > srslte-users mailing list
>> > srslte-users at lists.softwareradiosystems.com
>> > http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>> >
>>
>> _______________________________________________
>> srslte-users mailing list
>> srslte-users at lists.softwareradiosystems.com
>> http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.srsran.com/pipermail/srsran-users/attachments/20171010/bffe2e52/attachment.htm>
More information about the srsran-users
mailing list