Bug #3746
closedSending RTP stream with unconfigured AMR mode crashes OS
0%
Description
If I send an RTP stream with an unconfigured AMR mode to the osmo-bts on my sysmoBTS 1002, the unit crashes and resets.
------------[ cut here ]------------
WARNING: CPU: 0 PID: -821874208 at /home/yoctopyrobuild/system-images/build.sysmobts/tmp/work-shared/sysmobts-v2/kernel-source/kernel/sched/core.c:3151 preempt_count_add+0xec/0x134
DEBUG_LOCKS_WARN_ON((preempt_count() < 0))Modules linked in:
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
Unhandled fault: page domain fault (0x01b) at 0x4711e430
end of output of serial terminal
Related issues
Updated by laforge almost 5 years ago
- Status changed from New to Feedback
- Assignee set to 4368
keith, can you please elaborate on how to reproduce this? Thanks! Do you mean you're sending an AMR mode in RTP which is not part of the active set of AMR modes as permitted for the given logical channel?
Updated by pespin almost 5 years ago
May be related to the known bug where sysmobts kernel crashes when receiving AMR octet-aligned (or the other one, whichever is not supported by superfemto fw).
Updated by pespin almost 5 years ago
Possibly related to OS#4002, SYS#4063.
Fix for SYS#4063: https://gerrit.osmocom.org/#/c/osmo-bts/+/6351/
Updated by pespin almost 5 years ago
- Related to Bug #4002: AMR defaults to bandwidth-efficient mode added
Updated by keith almost 5 years ago
laforge wrote:
Do you mean you're sending an AMR mode in RTP which is not part of the active set of AMR modes as permitted for the given logical channel?
Yes, that's what i remember observing, however, you're right, I can't reproduce it now, and neither can I reproduce it by sending BE mode AMR to the bts. - That would make sense, given that https://gerrit.osmocom.org/#/c/osmo-bts/+/6351/ has been merged for a while now.
As I have been running so many versions of osmo-bts on different hardware over the last 4 months, and I neglected to include info here on which version, I would just go ahead and close this ticket.
I suspect what I refer to was happening with a rather old osmo-bts but I wouldn't really see the point in going back now to verify if it was actually an AMR mode or BE as pespin says.
I do have a memory of having seen "AMR CMI X not part of AMR MR set" before this crash, but I didn't log it here so let's just close this.
thanks!
k