[srslte-users] Segmentation fault during LTE-UE Prach procedure
Ismael Gomez
ismael.gomez at softwareradiosystems.com
Tue Oct 10 15:31:00 UTC 2017
If you believe the logs are being interrupted earlier due to the segfault
(most likely) you can redirect them to stdout by setting filename = stdout
in [log] section in ue.conf. Also, I was just thinking that you should
disable AGC. It's not working properly and only required if you are very
far from the cell. Just set rx_gain=40 (or 50) ue.conf and should work for
most typical conditions.
thanks
On Tue, 10 Oct 2017 at 17:29 Ismael Gomez <
ismael.gomez at softwareradiosystems.com> wrote:
> Please send the ue.log and output console to the list and we'll try to see
> what happens.
>
> thanks
>
> On Tue, 10 Oct 2017 at 17:27 Liqun Liu <lliu at w2bi.com> wrote:
>
>> Ismael,
>>
>>
>> I tried the latest code in github today. the UE attempted attach without
>> any plmn hard coding .
>>
>> But, the segmentation still there on the same line of code (
>> srsLTE/lib/src/common/pdu.cc:463).
>>
>>
>> Also, the RX AGC (comment RX gain in configure file) behave different in
>> the new code base than version 2.
>>
>> In, version 2.0, AGC works fine. but in new release, UE detected the cell
>> but not go forward. It feels UE is in a dead loop.
>>
>>
>> we are ruing a commercial grade femto enb in our lab, so that we know the
>> USIM security settings. Regular UEs work with enb without issue. we used
>> imsi = 311480012345678
>> imei = 353490069873319
>> Liqun
>>
>>
>> ------------------------------
>> *From:* Ismael Gomez <ismael.gomez at softwareradiosystems.com>
>> *Sent:* Saturday, October 7, 2017 4:21:42 PM
>> *To:* Liqun Liu; Andre Puschmann;
>> srslte-users at lists.softwareradiosystems.com
>>
>> *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
>> procedure
>> Hi Liqun,
>>
>> We've committed a hot-fix just today. I think the problem could be caused
>> by not attaching a roaming PLMN. Can you try again please?
>>
>> Are you trying to attach to a commercial network? How have you configured
>> the USIM settings?
>>
>> Regards
>> Ismael
>>
>> On Fri, 6 Oct 2017 at 21:24 Liqun Liu <lliu at w2bi.com> wrote:
>>
>>>
>>> Andre,
>>>
>>> I have all layers set to debug. But around line 200, log start to repeat
>>> itself.
>>>
>>> Thanks,
>>>
>>> Liqun
>>> -----Original Message-----
>>> From: Andre Puschmann [mailto:andre.puschmann at softwareradiosystems.com]
>>> Sent: Friday, October 06, 2017 3:03 PM
>>> To: Liqun Liu <lliu at w2bi.com>;
>>> srslte-users at lists.softwareradiosystems.com
>>> Subject: Re: [srslte-users] Segmentation fault during LTE-UE Prach
>>> procedure
>>>
>>> Hey,
>>>
>>> can you attach logs with PHY level set to info please.
>>>
>>> Thanks
>>> Andre
>>>
>>> On 06/10/17 20:39, Liqun Liu wrote:
>>> > Ismael,
>>> >
>>> >
>>> >
>>> > I tried the 17-09 version of lteue and get different result.
>>> >
>>> > In the older version, lteue will try to prach and get segmentation
>>> fault.
>>> >
>>> > In the 17-09 version, lteue
>>> >
>>> >
>>> >
>>> > Fount cell: PCI=19, PRB=50, Ports=2, CFO=-1.4 Khz
>>> >
>>> > Fount PLMN: Id=311480, TAC=1
>>> >
>>> >
>>> >
>>> >
>>> >
>>> > Log also shows lteue get mib and sib1. But it just go to the cell
>>> > search loop again and never try to do the PRACH procedure.
>>> >
>>> >
>>> >
>>> > Liqun
>>> >
>>> >
>>> >
>>> > *From:*Liqun Liu
>>> > *Sent:* Wednesday, October 04, 2017 9:55 AM
>>> > *To:* Ismael Gomez <ismael.gomez at softwareradiosystems.com>;
>>> > srslte-users at lists.softwareradiosystems.com
>>> > *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
>>> > procedure
>>> >
>>> >
>>> >
>>> > Ismael,
>>> >
>>> >
>>> >
>>> > Sure. looking forward to test the new release.
>>> >
>>> > To add some background of test,
>>> >
>>> >
>>> >
>>> > LTE-UE attached to the Amarisoft enb. but crashed on a commercial eNB.
>>> >
>>> >
>>> >
>>> > Thanks,
>>> >
>>> >
>>> >
>>> > Liqun
>>> >
>>> > ----------------------------------------------------------------------
>>> > --
>>> >
>>> > *From:*Ismael Gomez <ismael.gomez at softwareradiosystems.com
>>> > <mailto:ismael.gomez at softwareradiosystems.com>>
>>> > *Sent:* Wednesday, October 4, 2017 6:19:02 AM
>>> > *To:* Liqun Liu; srslte-users at lists.softwareradiosystems.com
>>> > <mailto:srslte-users at lists.softwareradiosystems.com>
>>> > *Subject:* Re: [srslte-users] Segmentation fault during LTE-UE Prach
>>> > procedure
>>> >
>>> >
>>> >
>>> > Hi Li,
>>> >
>>> >
>>> >
>>> > We are going to release a new version this Friday. Probably the best
>>> > is to wait and see if the bug is still present with that new version.
>>> >
>>> >
>>> >
>>> > Thanks
>>> >
>>> >
>>> >
>>> > On Tue, 3 Oct 2017 at 23:00 Liqun Liu <lliu at w2bi.com
>>> > <mailto:lliu at w2bi.com>> wrote:
>>> >
>>> > Hi all,
>>> >
>>> >
>>> >
>>> > I experience this segmentation fault issue when lte-UE try to
>>> PRACH.
>>> > It looks likely the subheaders of pdu_msg was not initialized
>>> > properly. I went through archive and do not see anyone else has
>>> > similar issue. Can someone give some help?
>>> >
>>> >
>>> >
>>> >
>>> >
>>> > I attached the gdb log below
>>> >
>>> >
>>> >
>>> > Searching for cell...
>>> > Using Volk machine: avx2_64_mmx_orc
>>> > Found CELL ID: 19 CP: Normal , CFO: -0.6 KHz.
>>> > Trying to decode MIB...
>>> > - Cell ID: 19
>>> > - Nof ports: 2
>>> > - CP: Normal
>>> > - PRB: 50
>>> > - PHICH Length: Normal
>>> > - PHICH Resources: 1/6
>>> > - SFN: 0
>>> > MIB received BW=10 MHz
>>> > [New Thread 0x7fffc37fe700 (LWP 17177)]
>>> > Initializating cell configuration...
>>> > -- Asking for clock rate 23.040000 MHz...
>>> > -- Actually got clock rate 23.040000 MHz.
>>> > -- Performing timer loopback test... pass
>>> > Setting Sampling frequency 11.52 MHz
>>> > Setting TX/RX offset 120 samples, 10.42 us
>>> > SIB1 received, CellID=19, PLMN Id: MCC 311 MNC 480
>>> > SIB2 received
>>> > [Thread 0x7fffc37fe700 (LWP 17177) exited]
>>> > Random Access Transmission: seq=1, ra-rnti=0x4
>>> >
>>> > ------------------------------
>>> >
>>> > Thread 24 "srsue_debug" received signal SIGSEGV, Segmentation
>>> fault.
>>> > [Switching to Thread 0x7fffd97fa700 (LWP 17157)]
>>> > 0x000000000050091e in srslte::sch_subh::get_payload_size (this=0x0)
>>> > at /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>>> > 459 return nof_bytes;
>>> > (gdb) backtrace
>>> > #0 0x000000000050091e in srslte::sch_subh::get_payload_size
>>> > (this=0x0) at
>>> /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>>> > #1 0x00000000004ffe7b in srslte::sch_pdu::write_packet
>>> > (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
>>> > #2 0x00000000004c9567 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
>>> > payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:253
>>> > #3 0x00000000004c9db8 in srsue::mux::msg3_get
>>> (this=0x7ffff1a5f618,
>>> > payload=0x4c93800 "", pdu_sz=117) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
>>> > #4 0x00000000004d43ee in
>>> > srsue::ul_harq_entity::ul_harq_process::run_tti
>>> > (this=0x7ffff1a60bf8, tti_tx=1945, grant=0x7fffd97f9720,
>>> > action=0x7fffd97f9c40)
>>> > at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
>>> > #5 0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
>>> > (this=0x7ffff1a60a68, tti=1941, grant=0x7fffd97f9720,
>>> > action=0x7fffd97f9c40) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
>>> > #6 0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
>>> > (this=0x7ffff1a60a68, grant=..., action=0x7fffd97f9c40) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
>>> > #7 0x00000000004c6bf2 in srsue::mac::new_grant_ul
>>> > (this=0x7ffff1a5f4a8, grant=..., action=0x7fffd97f9c40) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
>>> > #8 0x00000000004d81e9 in srsue::phch_worker::work_imp
>>> > (this=0x7ffff7f1b010) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
>>> > #9 0x00000000005054bb in srslte::thread_pool::worker::run_thread
>>> > (this=0x7ffff7f1b010) at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
>>> > #10 0x00000000004c7f28 in thread::thread_function_entry
>>> > (_this=0x7ffff7f1b010) at
>>> >
>>> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
>>> > #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffd97fa700) at
>>> > pthread_create.c:333
>>> > #12 0x00007ffff61273dd in clone () at
>>> > ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
>>> > (gdb) frame 0
>>> > #0 0x000000000050091e in srslte::sch_subh::get_payload_size
>>> > (this=0x0) at
>>> /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:459
>>> > 459 return nof_bytes;
>>> > (gdb) print this
>>> > $1 = (srslte::sch_subh * const) 0x0
>>> > (gdb) frame 1
>>> > #1 0x00000000004ffe7b in srslte::sch_pdu::write_packet
>>> > (this=0x7ffff1a5f708, log_h=0x7ffff1abf5e0) at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/pdu.cc:229
>>> > 229 printf("SUBH %d is_sdu=%d, payload=%d\n", i,
>>> > subheaders[i].is_sdu(), subheaders[i].get_payload_size());
>>> > (gdb) print i
>>> > $2 = 0
>>> > (gdb) print subheaders[0]
>>> > Cannot access memory at address 0x0
>>> > (gdb) print subheaders
>>> > $3 = std::vector of length 0, capacity 0
>>> >
>>> >
>>> >
>>> > comment out /srsLTE/lib/src/common/pdu.cc:459 \, run again and get
>>> > similar error
>>> >
>>> >
>>> >
>>> > Searching for cell...
>>> > Using Volk machine: avx2_64_mmx_orc
>>> > Found CELL ID: 19 CP: Normal , CFO: -0.7 KHz.
>>> > Trying to decode MIB...
>>> > - Cell ID: 19
>>> > - Nof ports: 2
>>> > - CP: Normal
>>> > - PRB: 50
>>> > - PHICH Length: Normal
>>> > - PHICH Resources: 1/6
>>> > - SFN: 0
>>> > MIB received BW=10 MHz
>>> > [New Thread 0x7fffc37fe700 (LWP 3125)]
>>> > Initializating cell configuration...
>>> > -- Asking for clock rate 23.040000 MHz...
>>> > -- Actually got clock rate 23.040000 MHz.
>>> > -- Performing timer loopback test... pass
>>> > Setting Sampling frequency 11.52 MHz
>>> > Setting TX/RX offset 120 samples, 10.42 us
>>> > SIB1 received, CellID=19, PLMN Id: MCC 311 MNC 480
>>> > SIB2 received
>>> > [Thread 0x7fffc37fe700 (LWP 3125) exited]
>>> > Random Access Transmission: seq=1, ra-rnti=0x9
>>> >
>>> > ------------------------------
>>> > Random Access Transmission: seq=2, ra-rnti=0x4
>>> >
>>> > Thread 26 "srsue_debug_rad" received signal SIGSEGV, Segmentation
>>> fault.
>>> > [Switching to Thread 0x7fffcbfff700 (LWP 3106)]
>>> > 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>>> > (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>>> > pdu_len_bytes=117, is_ulsch=true)
>>> > at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>>> > 173 subheaders[i].parent = this;
>>> > (gdb) backtrace
>>> > #0 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>>> > (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>>> > pdu_len_bytes=117, is_ulsch=true)
>>> > at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>>> > #1 0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
>>> > (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
>>> > is_ulsch=true)
>>> > at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
>>> > #2 0x00000000004c8d11 in srsue::mux::pdu_get (this=0x7ffff1a5f618,
>>> > payload=0x7ffff1a5f682 "", pdu_sz=117, tx_tti=0, pid=0) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:167
>>> > #3 0x00000000004c9db8 in srsue::mux::msg3_get
>>> (this=0x7ffff1a5f618,
>>> > payload=0x4c90500 "", pdu_sz=117) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mux.cc:348
>>> > #4 0x00000000004d43ee in
>>> > srsue::ul_harq_entity::ul_harq_process::run_tti
>>> > (this=0x7ffff1a60bf8, tti_tx=3905, grant=0x7fffcbffe720,
>>> > action=0x7fffcbffec40)
>>> > at /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:250
>>> > #5 0x00000000004d3c0e in srsue::ul_harq_entity::run_tti
>>> > (this=0x7ffff1a60a68, tti=3901, grant=0x7fffcbffe720,
>>> > action=0x7fffcbffec40) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:143
>>> > #6 0x00000000004d39ba in srsue::ul_harq_entity::new_grant_ul
>>> > (this=0x7ffff1a60a68, grant=..., action=0x7fffcbffec40) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/ul_harq.cc:119
>>> > #7 0x00000000004c6bf2 in srsue::mac::new_grant_ul
>>> > (this=0x7ffff1a5f4a8, grant=..., action=0x7fffcbffec40) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/mac/mac.cc:316
>>> > #8 0x00000000004d81e9 in srsue::phch_worker::work_imp
>>> > (this=0x7ffff7f3aa98) at
>>> > /home/w2bi/CLionProjects/srsLTE/srsue/src/phy/phch_worker.cc:247
>>> > #9 0x0000000000505211 in srslte::thread_pool::worker::run_thread
>>> > (this=0x7ffff7f3aa98) at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/src/common/thread_pool.cc:61
>>> > #10 0x00000000004c7f28 in thread::thread_function_entry
>>> > (_this=0x7ffff7f3aa98) at
>>> >
>>> /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/threads.h:73
>>> > #11 0x00007ffff7bc16ba in start_thread (arg=0x7fffcbfff700) at
>>> > pthread_create.c:333
>>> > #12 0x00007ffff61273dd in clone () at
>>> > ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
>>> > (gdb) frame 0
>>> > #0 0x00000000004c3539 in srslte::pdu<srslte::sch_subh>::init_
>>> > (this=0x7ffff1a5f708, buffer_tx_ptr=0x7ffff1a5f682 "",
>>> > pdu_len_bytes=117, is_ulsch=true)
>>> > at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:173
>>> > 173 subheaders[i].parent = this;
>>> > (gdb) print i
>>> > $1 = 0
>>> > (gdb) print subheaders
>>> > $2 = std::vector of length 0, capacity 0
>>> > (gdb) frame 1
>>> > #1 0x00000000004ca1e3 in srslte::pdu<srslte::sch_subh>::init_tx
>>> > (this=0x7ffff1a5f708, payload=0x7ffff1a5f682 "", pdu_len_bytes=117,
>>> > is_ulsch=true)
>>> > at
>>> > /home/w2bi/CLionProjects/srsLTE/lib/include/srslte/common/pdu.h:78
>>> > 78 init_(payload, pdu_len_bytes, is_ulsch);
>>> >
>>> > thanks,
>>> >
>>> >
>>> >
>>> > Liqun
>>> >
>>> >
>>> >
>>> > _______________________________________________
>>> > srslte-users mailing list
>>> > srslte-users at lists.softwareradiosystems.com
>>> > <mailto:srslte-users at lists.softwareradiosystems.com>
>>> > http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>>> >
>>> >
>>> >
>>> > _______________________________________________
>>> > srslte-users mailing list
>>> > srslte-users at lists.softwareradiosystems.com
>>> > http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>>> >
>>>
>>> _______________________________________________
>>> srslte-users mailing list
>>> srslte-users at lists.softwareradiosystems.com
>>> http://www.softwareradiosystems.com/mailman/listinfo/srslte-users
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.srsran.com/pipermail/srsran-users/attachments/20171010/52947cc0/attachment.htm>
More information about the srsran-users
mailing list