assert failed: unexpected yanked node，可能与JIT有关

**一、缺陷信息**

**内核信息：**
```bash
$ uname -a
Linux localhost.localdomain 4.19.90-2112.8.0.0131.oe1.aarch64 #1 SMP Fri Dec 31 19:53:20 UTC 2021 aarch64 aarch64 aarch64 GNU/Linux
```

**缺陷归属组件：**
根据崩溃位置，我们猜测是JIT编译器的C2编译部分(`opto/loopopts.cpp`)可能存在缺陷。
在使用`-Xint`参数关闭JIT编译后，崩溃无法复现。

**缺陷归属的版本：**
1.8.0_412-internal-fastdebug (在仓库中获取的源代码，编译得到fastdebug版本)

**缺陷简述：**
当我们使用bishengjdk-8的fastdebug版本运行测试代码的时候，JVM会崩溃，崩溃信息的概括如下。
我们尝试使用GitHub上jdk8u仓库编译的fastdebug版本进行测试，这个问题也能触发。
在jdk8u上发现的崩溃情况已经报告到OpenJDK的issue系统。
在使用`-Xint`参数关闭JIT编译后，bishengjdk-8和jdk8u的崩溃均无法复现。

```txt
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  Internal Error (/home/TEMP/jdks/bishengjdk-8/hotspot/src/share/vm/opto/postaloc.cpp:139), pid=1002400, tid=0x0000fffac261f1e0
#  assert(false) failed: unexpected yanked node
#
# JRE version: OpenJDK Runtime Environment (8.0_412) (build 1.8.0_412-internal-fastdebug-temp_2024_07_09_22_17-b00)
# Java VM: OpenJDK 64-Bit Server VM (25.412-b00-fastdebug mixed mode linux-aarch64 compressed oops)
# Core dump will be written, saved as:
#  /home/TEMP/proj/core or core.1002400        
#  or /var/lib/systemd/coredump/* (process core dumps by systemd-coredump)        
#  or /var/lib/apport/coredump/* (process core dumps by apport)        
#  or /var/spool/abrt/* (process core dumps by abrt-hook-ccpp)        
#  or other name defined in /proc/sys/kernel/core_pattern
#
# If you would like to submit a bug report, please visit:
#   http://bugreport.java.com/bugreport/crash.jsp
#

---------------  T H R E A D  ---------------

Current thread (0x0000fffd2c2e1000):  JavaThread "C2 CompilerThread0" daemon [_thread_in_native, id=1002533, stack(0x0000fffac2420000,0x0000fffac2620000)]

Stack: [0x0000fffac2420000,0x0000fffac2620000],  sp=0x0000fffac261a540,  free space=2025k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V  [libjvm.so+0x1144e60]  VMError::report_and_die()+0x290
V  [libjvm.so+0x6e90a8]  report_vm_error(char const*, int, char const*, char const*)+0x70
V  [libjvm.so+0xee4b34]  PhaseChaitin::yank_if_dead_recurse(Node*, Node*, Block*, Node_List*, Node_List*) [clone .part.50]+0x124
V  [libjvm.so+0xeeaad8]  PhaseChaitin::post_allocate_copy_removal()+0xef0
V  [libjvm.so+0x527e30]  PhaseChaitin::Register_Allocate()+0x7b8
V  [libjvm.so+0x64c1fc]  Compile::Code_Gen()+0x28c
V  [libjvm.so+0x64f8b0]  Compile::Compile(ciEnv*, C2Compiler*, ciMethod*, int, bool, bool, bool)+0xfe8
V  [libjvm.so+0x4e3918]  C2Compiler::compile_method(ciEnv*, ciMethod*, int)+0xf0
V  [libjvm.so+0x65bf80]  CompileBroker::invoke_compiler_on_method(CompileTask*)+0x720
V  [libjvm.so+0x65d920]  CompileBroker::compiler_thread_loop()+0x540
V  [libjvm.so+0x10b34dc]  JavaThread::thread_main_inner()+0x234
V  [libjvm.so+0x10b37b0]  JavaThread::run()+0x250
V  [libjvm.so+0xe4fa5c]  java_start(Thread*)+0x104
C  [libpthread.so.0+0x878c]
C  [libc.so.6+0xd51bc]
```

**【问题复现步骤】**
1. path/to/bishengjdk-8/bin/javac -source 8 -target 8 -cp . Test.java
2. path/to/bishengjdk-8/bin/java Test

**【实际结果】**

程序正常执行时，应该是在运行一段时间后正常退出。但是实际情况是JVM会崩溃，并在命令行里有如下报错：
```txt
==============================================
orig_old:
 180	addP_reg_imm	=== _  272  279  [[]] Test:NotNull+16 *  Oop:Test:NotNull+16 *
old:
 180	addP_reg_imm	=== _  272  279  [[]] Test:NotNull+16 *  Oop:Test:NotNull+16 *
# To suppress the following error report, specify this argument
# after -XX: or in .hotspotrc:  SuppressErrorAt=/postaloc.cpp:139
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  Internal Error (/home/TEMP/jdks/bishengjdk-8/hotspot/src/share/vm/opto/postaloc.cpp:139), pid=1002400, tid=0x0000fffac261f1e0
#  assert(false) failed: unexpected yanked node
#
# JRE version: OpenJDK Runtime Environment (8.0_412) (build 1.8.0_412-internal-fastdebug-temp_2024_07_09_22_17-b00)
# Java VM: OpenJDK 64-Bit Server VM (25.412-b00-fastdebug mixed mode linux-aarch64 compressed oops)
# Core dump will be written, saved as:
#  /home/TEMP/proj/core or core.1002400        
#  or /var/lib/systemd/coredump/* (process core dumps by systemd-coredump)        
#  or /var/lib/apport/coredump/* (process core dumps by apport)        
#  or /var/spool/abrt/* (process core dumps by abrt-hook-ccpp)        
#  or other name defined in /proc/sys/kernel/core_pattern
#
# An error report file with more information is saved as:
# /home/TEMP/proj/hs_err_pid1002400.log
#
# Compiler replay data is saved as:
# /home/TEMP/proj/replay_pid1002400.log
#
# If you would like to submit a bug report, please visit:
#   http://bugreport.java.com/bugreport/crash.jsp
#
Current thread is 281452468105696
Dumping core ...
```

**【其他相关附件信息】**

测试用例的java代码、class文件以及更加详细的hs_err、replay文件在附件(https://gitee.com/qeryu_qsy/jdk-issues-attachments/tree/master/aarch64-may-jit-Test0735-20240711)中。

GVP openEuler/bishengjdk-8
关闭

内容风险标识

评论 (1)

GVPopenEuler/bishengjdk-8关闭

内容风险标识