Project

General

Profile

Bug #5207

Crash: ABRT on current master 945be910 with "Assert failed pdch != NULL encoding.cpp:561"

Added by iedemam about 2 months ago. Updated 11 days ago.

Status:
Feedback
Priority:
High
Assignee:
Target version:
-
Start date:
08/06/2021
Due date:
% Done:

0%

Spec Reference:

Description

Log Tail

<0008> tbf.cpp:629 TBF(TFI=0 TLLI=0xa61e886e DIR=DL STATE=ASSIGN EGPRS) poll timeout for FN=1741670, TS=6 (curr FN 1741705)
<0002> gprs_rlcmac_ts_alloc.cpp:776 No USF available
<0008> tbf.cpp:746 TBF(TFI=0 TLLI=0x79084bc3 DIR=UL STATE=NULL EGPRS) Timeslot Allocation failed: trx = 1, single_slot = 0
<0008> tbf_ul.cpp:151 MS(TLLI=0x79084bc3, IMSI=, TA=0, 12/12,) No PDCH resource
<0002> pdch_ul_controller.c:315 PDCH(bts=0,trx=1,ts=7) Expiring FN=1741735 but previous FN=1741727 is still reserved!
<0002> pdch_ul_controller.c:329 PDCH(bts=0,trx=1,ts=7) Timeout for registered POLL (FN=1741727): TBF(TFI=16 TLLI=0x7d48e015 DIR=UL STATE=ASSIGN)
<0008> tbf.cpp:629 TBF(TFI=16 TLLI=0x7d48e015 DIR=UL STATE=ASSIGN) poll timeout for FN=1741727, TS=7 (curr FN 1741735)
<0002> pdch_ul_controller.c:315 PDCH(bts=0,trx=1,ts=7) Expiring FN=1741735 but previous FN=1741731 is still reserved!
<0002> pdch_ul_controller.c:329 PDCH(bts=0,trx=1,ts=7) Timeout for registered POLL (FN=1741731): TBF(TFI=8 TLLI=0xa6d68f4d DIR=UL STATE=ASSIGN EGPRS)
<0008> tbf.cpp:629 TBF(TFI=8 TLLI=0xa6d68f4d DIR=UL STATE=ASSIGN EGPRS) poll timeout for FN=1741731, TS=7 (curr FN 1741735)
<0008> tbf.cpp:793 TBF(TFI=13 TLLI=0x78e3a2da DIR=DL STATE=ASSIGN EGPRS) releasing due to PACCH assignment timeout.
<0002> gprs_rlcmac_ts_alloc.cpp:776 No USF available
<0008> tbf.cpp:746 TBF(TFI=0 TLLI=0xca56ca00 DIR=UL STATE=NULL EGPRS) Timeslot Allocation failed: trx = 1, single_slot = 0
<0008> tbf_ul.cpp:151 MS(TLLI=0xca56ca00, IMSI=618010112478019, TA=0, 12/12,) No PDCH resource
<0008> tbf.cpp:793 TBF(TFI=0 TLLI=0x79084bc3 DIR=UL STATE=ASSIGN) releasing due to PACCH assignment timeout.
<0002> pdch_ul_controller.c:315 PDCH(bts=0,trx=1,ts=6) Expiring FN=1741748 but previous FN=1741722 is still reserved!
<0002> pdch_ul_controller.c:329 PDCH(bts=0,trx=1,ts=6) Timeout for registered POLL (FN=1741722): TBF(TFI=3 TLLI=0xa8318900 DIR=DL STATE=ASSIGN EGPRS)
<0008> tbf.cpp:629 TBF(TFI=3 TLLI=0xa8318900 DIR=DL STATE=ASSIGN EGPRS) poll timeout for FN=1741722, TS=6 (curr FN 1741748)
<0008> tbf.cpp:673 TBF(TFI=3 TLLI=0xa8318900 DIR=DL STATE=ASSIGN EGPRS) Timeout for polling PACKET CONTROL ACK for PACKET DOWNLINK ASSIGNMENT: |Assignment was on PACCH|No downlink ACK received yet|
<0002> pdch_ul_controller.c:315 PDCH(bts=0,trx=1,ts=6) Expiring FN=1741748 but previous FN=1741740 is still reserved!
<0002> pdch_ul_controller.c:329 PDCH(bts=0,trx=1,ts=6) Timeout for registered POLL (FN=1741740): TBF(TFI=0 TLLI=0xa61e886e DIR=DL STATE=ASSIGN EGPRS)
<0008> tbf.cpp:629 TBF(TFI=0 TLLI=0xa61e886e DIR=DL STATE=ASSIGN EGPRS) poll timeout for FN=1741740, TS=6 (curr FN 1741748)
<0008> tbf.cpp:793 TBF(TFI=0 TLLI=0xca56ca00 DIR=UL STATE=ASSIGN) releasing due to PACCH assignment timeout.
<0002> gprs_rlcmac_ts_alloc.cpp:776 No USF available
<0008> tbf.cpp:746 TBF(TFI=0 TLLI=0xad498656 DIR=UL STATE=NULL EGPRS) Timeslot Allocation failed: trx = 1, single_slot = 0
<0008> tbf_ul.cpp:151 MS(TLLI=0xad498656, IMSI=, TA=0, 12/12, UL) No PDCH resource
<0002> pdch_ul_controller.c:315 PDCH(bts=0,trx=1,ts=7) Expiring FN=1741757 but previous FN=1741744 is still reserved!
<0002> pdch_ul_controller.c:329 PDCH(bts=0,trx=1,ts=7) Timeout for registered POLL (FN=1741744): TBF(TFI=2 TLLI=0x7acf9d64 DIR=UL STATE=ASSIGN)
<0008> tbf.cpp:629 TBF(TFI=2 TLLI=0x7acf9d64 DIR=UL STATE=ASSIGN) poll timeout for FN=1741744, TS=7 (curr FN 1741757)
<0008> tbf.cpp:407 TBF(TFI=2 TLLI=0x7acf9d64 DIR=UL STATE=ASSIGN) N3105 exceeded MAX (8)
<0002> pdch_ul_controller.c:315 PDCH(bts=0,trx=1,ts=7) Expiring FN=1741757 but previous FN=1741748 is still reserved!
<0002> pdch_ul_controller.c:329 PDCH(bts=0,trx=1,ts=7) Timeout for registered POLL (FN=1741748): TBF(TFI=17 TLLI=0x786b9027 DIR=UL STATE=ASSIGN EGPRS)
<0008> tbf.cpp:629 TBF(TFI=17 TLLI=0x786b9027 DIR=UL STATE=ASSIGN EGPRS) poll timeout for FN=1741748, TS=7 (curr FN 1741757)
<0002> pdch_ul_controller.c:315 PDCH(bts=0,trx=1,ts=7) Expiring FN=1741757 but previous FN=1741753 is still reserved!
<0002> pdch_ul_controller.c:329 PDCH(bts=0,trx=1,ts=7) Timeout for registered POLL (FN=1741753): TBF(TFI=19 TLLI=0xad498656 DIR=UL STATE=ASSIGN EGPRS)
<0008> tbf.cpp:629 TBF(TFI=19 TLLI=0xad498656 DIR=UL STATE=ASSIGN EGPRS) poll timeout for FN=1741753, TS=7 (curr FN 1741757)

Backtrace

Assert failed pdch != NULL encoding.cpp:561
backtrace() returned 14 addresses
/usr/lib64/libosmocore.so.17(osmo_panic+0xbb) [0x7ffff6c9c2db]
/etc/osmocom/osmo-pcu-dbg2() [0x42b002]
/etc/osmocom/osmo-pcu-dbg2() [0x42bf13]
/etc/osmocom/osmo-pcu-dbg2() [0x41a51d]
/etc/osmocom/osmo-pcu-dbg2() [0x433927]
/etc/osmocom/osmo-pcu-dbg2() [0x411418]
/etc/osmocom/osmo-pcu-dbg2() [0x431399]
/etc/osmocom/osmo-pcu-dbg2() [0x431585]
/usr/lib64/libosmocore.so.17(+0xf78c) [0x7ffff6c8e78c]
/usr/lib64/libosmocore.so.17(osmo_select_main+0x6) [0x7ffff6c8e836]
/etc/osmocom/osmo-pcu-dbg2() [0x406bf5]
/lib64/libc.so.6(__libc_start_main+0xf1) [0x7ffff60e0391]
/etc/osmocom/osmo-pcu-dbg2() [0x406eaa]

Program received signal SIGABRT, Aborted.
0x00007ffff60f27ff in raise () from /lib64/libc.so.6
#0  0x00007ffff60f27ff in raise () from /lib64/libc.so.6
#1  0x00007ffff60f3bfa in abort () from /lib64/libc.so.6
#2  0x00007ffff6c9c2e0 in osmo_panic () from /usr/lib64/libosmocore.so.17
#3  0x000000000042b002 in gen_freq_params (freq_params=<optimized out>, tbf=<optimized out>) at encoding.cpp:561
#4  0x000000000042bf13 in Encoding::write_packet_uplink_assignment (block=block@entry=0x88c090, old_tfi=<optimized out>, old_downlink=<optimized out>, tlli=<optimized out>, use_tlli=<optimized out>, tbf=tbf@entry=0xbde630, poll=1 '\001', rrbp=0 '\000', alpha=10 '\n', gamma=15 '\017', ta_idx=-1 '\377', use_egprs=true) at encoding.cpp:677
#5  0x000000000041a51d in gprs_rlcmac_tbf::create_ul_ass (this=this@entry=0x8499e0, fn=fn@entry=1741783, ts=ts@entry=7 '\a') at tbf.cpp:1021
#6  0x0000000000433927 in sched_select_ctrl_msg (block_nr=<optimized out>, tbfs=<synthetic pointer>, fn=1741783, pdch=0x7af720) at gprs_rlcmac_sched.cpp:204
#7  gprs_rlcmac_rcv_rts_block (bts=bts@entry=0x7ad200, trx=1 '\001', ts=<optimized out>, fn=1741783, block_nr=<optimized out>) at gprs_rlcmac_sched.cpp:486
#8  0x000000000040ff30 in pcu_rx_rts_req_pdtch (bts=bts@entry=0x7ad200, trx=<optimized out>, ts=<optimized out>, fn=<optimized out>, block_nr=<optimized out>) at pcu_l1_if.cpp:468
#9  0x0000000000411418 in pcu_rx_rts_req (rts_req=0x7fffffffe324, bts=0x7ad200) at pcu_l1_if.cpp:503
#10 pcu_rx (pcu_prim=pcu_prim@entry=0x7fffffffe320, pcu_prim_length=<optimized out>) at pcu_l1_if.cpp:1000
#11 0x0000000000431399 in pcu_sock_read (bfd=<optimized out>) at osmobts_sock.c:156
#12 0x0000000000431585 in pcu_sock_cb (bfd=0x6974e0 <pcu_sock_state>, flags=3) at osmobts_sock.c:211
#13 0x00007ffff6c8e78c in ?? () from /usr/lib64/libosmocore.so.17
#14 0x00007ffff6c8e836 in osmo_select_main () from /usr/lib64/libosmocore.so.17
#15 0x0000000000406bf5 in main (argc=1, argv=0x7fffffffecd8) at pcu_main.cpp:329
$1 = {si_signo = 6, si_errno = 0, si_code = -6, _sifields = {_pad = {17959, 0 <repeats 27 times>}, _kill = {si_pid = 17959, si_uid = 0}, _timer = {si_tid = 17959, si_overrun = 0, si_sigval = {sival_int = 0, sival_ptr = 0x0}}, _rt = {si_pid = 17959, si_uid = 0, si_sigval = {sival_int = 0, sival_ptr = 0x0}}, _sigchld = {si_pid = 17959, si_uid = 0, si_status = 0, si_utime = 0, si_stime = 0}, _sigfault = {si_addr = 0x4627, _addr_lsb = 0, _addr_bnd = {_lower = 0x0, _upper = 0x0}}, _sigpoll = {si_band = 17959, si_fd = 0}}}

History

#1 Updated by laforge about 2 months ago

  • Assignee set to neels

#2 Updated by laforge 11 days ago

  • Assignee changed from neels to pespin

#3 Updated by pespin 11 days ago

  • Status changed from New to Feedback
  • Assignee changed from pespin to iedemam

Same as #5205, let's ask iedemam if he stills sees it with recent versions of osmo-pcu after FSM refactoring was merged (end of August).

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 48.8 MB)