Hello, I've been working with my nanoBTS units again. But I've noticed some
crashes while using GPRS data.
I am currently using the newest git repo for everything. And a nanoBTS 1900 and
an iPhone.
Attached is the log of the crash. Please let me know if you need more
information.
Regards,
Pierre
osmo-sgsn:
<000f> sgsn_libgtp.c:432 GTP DATA IND from GGSN, length=52
<000f> sgsn_libgtp.c:432 GTP DATA IND from GGSN, length=52
<000f> sgsn_libgtp.c:432 GTP DATA IND from GGSN, length=1171
<000f> sgsn_libgtp.c:432 GTP DATA IND from GGSN, length=1171
<0010> gprs_ns.c:545 NSEI=101 Tns-alive expired more then 10 times, blocking
NS-VC
<000f> sgsn_libgtp.c:432 GTP DATA IND from GGSN, length=1171
<0010> gprs_ns.c:624 All NS-VCs for NSEI 101 are either dead or blocked!
Program received signal SIGABRT, Aborted.
0x00007ffff69b3445 in raise () from /lib/x86_64-linux-gnu/libc.so.6
osmo-nitb:
Failure Event Report Type=processing failure Severity=warning level failure
Probable cause= 03 00 01 Additional
Text=31357:WARN:BH_TRX_ROUTER_TR:rm_s_data_queue_entry.c#195:Pool 2 nearly full
Failure Event Report Type=processing failure Severity=warning level failure
Probable cause= 03 00 01 Additional
Text=31663:WARN:BH_TRX_ROUTER_TR:igki_sig.c#741:Pool 2 nearly full
(gdb) bt full
#0 0x00007ffff69b3445 in raise () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#1 0x00007ffff69b6bab in abort () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#2 0x00007ffff75a887b in talloc_abort (reason=<optimized out>) at talloc.c:167
No locals.
#3 0x00007ffff75a2253 in talloc_abort_double_free () at talloc.c:175
No locals.
#4 talloc_chunk_from_ptr (ptr=<optimized out>) at talloc.c:190
No locals.
#5 0x00007ffff75ad2e2 in talloc_chunk_from_ptr (ptr=0x9abc30) at talloc.c:188
pp = 0x9abc30 ""
tc = 0x9abbe0
#6 _talloc_free (ptr=0x9abc30) at talloc.c:517
No locals.
#7 talloc_free (ptr=0x9abc30) at talloc.c:990
No locals.
#8 0x00000000004062dc in sndcp_send_ud_frag (fs=0x7fffffffba00)
at gprs_sndcp.c:421
lle = 0x8a5af0
sne = 0x677490
fmsg = 0x9abc30
max_payload_len = <optimized out>
len = <optimized out>
rc = <optimized out>
more = 1
#9 sndcp_unitdata_req (msg=0x9b6550, lle=<optimized out>,
nsapi=<optimized out>, mmcontext=0x672b70) at gprs_sndcp.c:469
rc = 0
fs = {frag_nr = 1 '\001', msg = 0x9b6550,
next_byte = 0x9b6848 "rver: cafe\r\nContent-Length:
570\r\nX-XSS-Protection: 1; mode=block\r\nAlternate-Protocol:
80:quic,p=0.002\r\n\r\n\037\213\b", sne = 0x677490, mmcontext = 0x672b70}
#10 0x0000000000407f83 in cb_data_ind (lib=<optimized out>,
packet=0x7fffffffbb9c, len=1171) at sgsn_libgtp.c:484
pinfo = {mode = BSSGP_PAGING_PS, scope = BSSGP_PAGING_BSS_AREA,
raid = {mnc = 0, mcc = 0, lac = 0, rac = 0 '\000'}, bvci = 0,
imsi = 0x0, ptmsi = 0x0, drx_params = 0, qos = "\000\000"}
pdp = 0x6d2340
mm = 0x672b70
msg = 0x9b6550
#11 0x00007ffff77bdc3a in gtp_gpdu_ind (gsn=0x66b2f0, version=1,
peer=0x7fffffffdba0, fd=12, pack=0x7fffffffbb90, len=1183) at gtp.c:2712
hlen = <optimized out>
pdp = 0x7ffff79c5320
#12 0x00007ffff77be1fc in gtp_decaps1u (gsn=0x66b2f0) at gtp.c:3160
buffer = "2\377\004\227\000\000\000\001
*\000\000E\000\004\223\253\370\000\000\064\006\351,\255\302~\315\300\250\000\b\000P\302\\\373\355%\226\334\027N\357\200\030\001c
\342\000\000\001\001\b\n\030\233\252}\030\310\361RHTTP/1.1 200 OK\r\nP3P:
policyref=\"http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\";, CP=\"CURa
ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM"...
peer = {sin_family = 2, sin_port = 26632, sin_addr = {
s_addr = 16777343}, sin_zero = "\000\000\000\000\000\000\000"}
peerlen = 16
status = <optimized out>
pheader = 0x7fffffffbb90
fd = 12
#13 0x00007ffff75a2a41 in osmo_select_main (polling=0) at select.c:158
flags = 1
ufd = 0x613540
tmp = 0x64f9f0
readset = {__fds_bits = {0 <repeats 16 times>}}
writeset = {__fds_bits = {0 <repeats 16 times>}}
exceptset = {__fds_bits = {0 <repeats 16 times>}}
work = 1
rc = <optimized out>
no_time = {tv_sec = 0, tv_usec = 0}
#14 0x0000000000402cec in main (argc=1, argv=0x7fffffffe148) at sgsn_main.c:384
ctrl = <optimized out>
dummy_network = {country_code = 5336, network_code = 63486,
name_long = 0x7ffff7de3a74 "\205\300t\210\351i\377\377\377\017\037",
name_short = 0x7ffff7dda410 "4\001", auth_policy = 3,
reject_cause = 0, a5_encryption = 10, neci = 0,
send_mm_info = -134348616, handover = {active = 32767,
win_rxlev_avg = 3628221240, win_rxqual_avg = 0,
win_rxlev_avg_neigh = 4158538398, pwr_interval = 32767,
pwr_hysteresis = 1, max_distance = 0}, stats = {chreq = {
total = 0x7fff00000038, no_channel = 0x7fffffffdfe0},
handover = {attempted = 0xffffffff, no_channel = 0x7ffff736b864,
timeout = 0x7ffff7de3a74, completed = 0x7fffffffdfb0,
failed = 0x7}, loc_upd_type = {attach = 0xa,
normal = 0x7ffff7fe00b8, periodic = 0xf63d4e2e,
detach = 0x7ffff7de429e}, loc_upd_resp = {
reject = 0x7ffff7fe2000, accept = 0x7fff0000002e}, paging = {
attempted = 0x7fffffffe040, detached = 0xffffffff,
completed = 0x7ffff6980ab4, expired = 0x7ffff6980ca8}, sms = {
submitted = 0x7fffffffe010, no_receiver = 0x7ffff7fe2358,
delivered = 0x7ffff698ce40, rp_err_mem = 0xd8424338,
rp_err_other = 0x0}, call = {mo_setup = 0x7ffff7fe0138,
mo_connect_ack = 0x7ffff7fe14d8, mt_setup = 0x4015c5,
mt_connect = 0x7ffff698d9f8}, chan = {rf_fail = 0x4006a8,
rll_err = 0x100000000}, bts = {oml_fail = 0x100000811,
rsl_fail = 0x1}}, mncc_state = 0x7ffff7ffe620,
mncc_recv = 0x7fffffffe080, upqueue = {next = 0xf63d4e2e,
prev = 0x7ffff7fe0138}, trans_list = {next = 0x7fffffffe0a0,
prev = 0x7ffff7ffe2c8}, bsc_api = 0x7ffff7de4523, num_bts = 0,
bts_list = {next = 0x7ffff7fe0138, prev = 0x100000001}, T3101 = 0,
T3103 = 0, T3105 = 1, T3107 = 0, T3109 = -134225208, T3111 = 32767,
T3113 = 0, T3115 = 0, T3117 = 1, T3119 = 0, T3122 = 0, T3141 = 0,
subscr_expire_timer = {node = {rb_parent_color = 140737332070976,
rb_right = 0x0, rb_left = 0x0}, list = {next = 0x0,
prev = 0x7ffff7ffe620}, timeout = {tv_sec = 8442531032,
tv_usec = 140737354014720}, active = 0, cb = 0x4015c5,
data = 0x7ffff6af0e40}, rrlp = {mode = 4137802032},
dtx_enabled = 32767, ctype_by_chreq = {4294967295, GSM_LCHAN_NONE,
2895997, GSM_LCHAN_NONE, GSM_LCHAN_PDTCH, GSM_LCHAN_NONE,
GSM_LCHAN_SDCCH, GSM_LCHAN_NONE, 2289912, GSM_LCHAN_NONE, 4239200,
GSM_LCHAN_NONE, GSM_LCHAN_NONE, GSM_LCHAN_NONE, 4203163,
GSM_LCHAN_NONE}, pag_any_tch = -147410944, bsc_data = 0x40afa5,
keep_subscr = 1, sms_queue = 0x40af60, ctrl = 0x0}
rc = <optimized out>
(gdb) list
294 struct ctrl_handle *ctrl;
295 struct gsm_network dummy_network;
296 int rc;
297
298 tall_bsc_ctx = talloc_named_const(NULL, 0, "osmo_sgsn");
299 tall_msgb_ctx = talloc_named_const(tall_bsc_ctx, 0, "msgb");
300
301 signal(SIGINT, &signal_handler);
302 signal(SIGABRT, &signal_handler);
303 signal(SIGUSR1, &signal_handler);
