847717 - Intermittent ecma/Date/dst-offset-caching-8-of-8.js,object-aspect-ratio-1a.xhtml | Exited with code 11 during test run | application crashed [@ js::gc::FreeSpan::checkSpan() const]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=20306348&tree=Mozilla-Inbound

Ubuntu 12.04 x64 mozilla-inbound debug test jsreftest on 2013-03-04 11:52:37 PST for push cc1e0568c96a
slave: tst-linux64-ec2-360

11:56:57     INFO -  REFTEST TEST-START | file:///builds/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=ecma/Date/dst-offset-caching-8-of-8.js | 205 / 2887 (7%)
11:56:58     INFO -  ++DOMWINDOW == 10 (0x3c4c0e8) [serial = 415] [outer = 0x30935a8]
11:56:58     INFO -  563938: Cache DST offsets to improve SunSpider score
11:56:58     INFO -  Exhaustively testing timestamps [34, 39) of 39...
11:56:58     INFO -  Testing timestamp 34...
11:57:01     INFO -  Testing timestamp 35...
11:57:04     INFO -  Testing timestamp 36...
11:57:07     INFO -  Assertion failure: first - 1 <= last, at ../../../js/src/gc/Heap.h:318
11:57:07     INFO -  Testing timestamp 37...
11:57:07  WARNING -  TEST-UNEXPECTED-FAIL | file:///builds/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=ecma/Date/dst-offset-caching-8-of-8.js | Exited with code 11 during test run
11:57:07  WARNING -  This is a harness error.
11:57:07     INFO -  INFO | automation.py | Application ran for: 0:03:12.191937
11:57:07     INFO -  INFO | automation.py | Reading PID log: /tmp/tmpqjnbdHpidlog
11:57:14     INFO -  PROCESS-CRASH | file:///builds/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=ecma/Date/dst-offset-caching-8-of-8.js | application crashed [@ js::gc::FreeSpan::checkSpan() const]
11:57:14     INFO -  Crash dump filename: /tmp/tmpYd6qDq/minidumps/5cbbc47c-69a6-d102-30aeb779-4be660aa.dmp
11:57:14     INFO -  Operating system: Linux
11:57:14     INFO -                    0.0.0 Linux 3.2.0-23-generic #36-Ubuntu SMP Tue Apr 10 20:39:51 UTC 2012 x86_64
11:57:14     INFO -  CPU: amd64
11:57:14     INFO -       family 6 model 45 stepping 7
11:57:14     INFO -       1 CPU
11:57:14     INFO -  Crash reason:  SIGSEGV
11:57:14     INFO -  Crash address: 0x0
11:57:14     INFO -  Thread 7 (crashed)
11:57:14     INFO -   0  libxul.so!js::gc::FreeSpan::checkSpan() const [Heap.h:cc1e0568c96a : 318 + 0x0]
11:57:14     INFO -      rbx = 0x00007f006c72e828   r12 = 0x00007f0027604980
11:57:14     INFO -      r13 = 0x00007f004ce4fba0   r14 = 0x00007f004ce4fda0
11:57:14     INFO -      r15 = 0x00007f0027c57000   rip = 0x00007f00689b76eb
11:57:14     INFO -      rsp = 0x00007f004ce4fb70   rbp = 0x00007f004ce4fb80
11:57:14     INFO -      Found by: given as instruction pointer in context
11:57:14     INFO -   1  libxul.so!js::gc::ArenaHeader::checkSynchronizedWithFreeList() const [Heap.h:cc1e0568c96a : 202 + 0x7]
11:57:14     INFO -      rip = 0x00007f0068a3e958   rsp = 0x00007f004ce4fb90
11:57:14     INFO -      rbp = 0x00007f004ce4fbd0
11:57:14     INFO -      Found by: stack scanning
11:57:14     INFO -   2  libxul.so!bool js::gc::Arena::finalize<JSObject>(js::FreeOp*, js::gc::AllocKind, unsigned long) [Heap.h:cc1e0568c96a : 876 + 0x4]
11:57:14     INFO -      rip = 0x00007f0068a4c2da   rsp = 0x00007f004ce4fbe0
11:57:14     INFO -      rbp = 0x00007f004ce4fca0
11:57:14     INFO -      Found by: stack scanning
11:57:14     INFO -   3  libdl-2.15.so + 0x102f
11:57:14     INFO -      rip = 0x00007f006cf45030   rsp = 0x00007f004ce4fc78
11:57:14     INFO -      rbp = 0x00007f004ce4fca0
11:57:14     INFO -      Found by: stack scanning
11:57:14     INFO -   4  libxul.so!FinalizeArenas [jsgc.cpp:cc1e0568c96a : 412 + 0x12]
11:57:14     INFO -      rip = 0x00007f0068a5082e   rsp = 0x00007f004ce4fcb0
11:57:14     INFO -      rbp = 0x00007f004ce4fcf0
11:57:14     INFO -      Found by: stack scanning
11:57:14     INFO -   5  libxul.so!js::gc::ArenaLists::backgroundFinalize(js::FreeOp*, js::gc::ArenaHeader*, bool) [jsgc.cpp:cc1e0568c96a : 1389 + 0x4]
11:57:14     INFO -      rip = 0x00007f0068a51f77   rsp = 0x00007f004ce4fd00
11:57:14     INFO -      rbp = 0x00007f004ce4fd70
11:57:14     INFO -      Found by: stack scanning
11:57:14     INFO -   6  libc-2.15.so + 0x3b871f
11:57:14     INFO -      rip = 0x00007f006c72d720   rsp = 0x00007f004ce4fd48
11:57:14     INFO -      rbp = 0x00007f004ce4fd70
11:57:14     INFO -      Found by: stack scanning

Comment 1

[Phil Ringnalda (:philor)]

This'll go well, since this is apparently "whatever test happens to be running in jsreftest or reftest (and probably crashtest) on the Ubuntu VMs when we GC under some circumstances."

https://tbpl.mozilla.org/php/getParsedLog.php?id=20352704&tree=Mozilla-Inbound
https://tbpl.mozilla.org/php/getParsedLog.php?id=20355250&tree=Mozilla-Inbound

Comment 2

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=20360282&tree=Mozilla-Inbound
Ubuntu 12.04 x64 mozilla-inbound debug test reftest on 2013-03-05 16:38:22
slave: tst-linux64-ec2-358

16:55:20  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362530462113/189/text-overflow/atomic-under-marker.html | Exited with code 11 during test run
16:55:26     INFO -  PROCESS-CRASH | http://localhost:4444/1362530462113/189/text-overflow/atomic-under-marker.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
16:55:27    ERROR - Return code: 1

Comment 3

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=20369215&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-06 00:46:45
slave: tst-linux32-ec2-051

00:49:52  WARNING -  TEST-UNEXPECTED-FAIL | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-basic-i/basi3p04.html | Exited with code 11 during test run
00:50:02     INFO -  PROCESS-CRASH | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-basic-i/basi3p04.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
00:50:03    ERROR - Return code: 1

Comment 4

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=20371665&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-06 03:14:00
slave: tst-linux32-ec2-364

03:15:50  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362568514018/10/reftest-sanity/font-download.html | Exited with code 11 during test run
03:16:01     INFO -  PROCESS-CRASH | http://localhost:4444/1362568514018/10/reftest-sanity/font-download.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
03:16:02    ERROR - Return code: 1

Comment 5

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=20378825&tree=Mozilla-Inbound
Ubuntu 12.04 x64 mozilla-inbound debug test reftest on 2013-03-06 06:53:25
slave: tst-linux64-ec2-044

07:13:14     INFO -  REFTEST TEST-UNEXPECTED-FAIL | http://localhost:4444/1362581667478/214/font-face/src-list-2.html | This test left crash dumps behind, but we weren't expecting it to!
07:13:14  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362581667478/214/font-face/src-list-2-ref.html | Exited with code 11 during test run
07:13:21     INFO -  PROCESS-CRASH | http://localhost:4444/1362581667478/214/font-face/src-list-2-ref.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
07:13:23    ERROR - Return code: 1

Comment 6

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20385250&tree=Firefox
Ubuntu 12.04 mozilla-central debug test xpcshell on 2013-03-06 09:18:15
slave: tst-linux32-ec2-341

10:04:47  WARNING -  TEST-UNEXPECTED-FAIL | /builds/slave/test/build/tests/xpcshell/tests/services/common/tests/unit/test_storageservice_client.js | test failed (with xpcshell return code: -11), see following log:
10:05:24     INFO -  PROCESS-CRASH | /builds/slave/test/build/tests/xpcshell/tests/services/common/tests/unit/test_storageservice_client.js | application crashed [@ js::gc::FreeSpan::checkSpan() const]
10:21:29    ERROR - Return code: 1

Comment 7

[Phil Ringnalda (:philor)]

Actually, since those two don't have other suggestions, they can fall back on signature searching.

https://tbpl.mozilla.org/php/getParsedLog.php?id=20389719&tree=Mozilla-Aurora

Comment 8

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=20412276&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-07 01:13:58
slave: tst-linux32-ec2-314

01:48:39  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362647734163/200/font-face/download-1-notref.html | Exited with code 11 during test run
01:48:51     INFO -  PROCESS-CRASH | http://localhost:4444/1362647734163/200/font-face/download-1-notref.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
01:48:53    ERROR - Return code: 1

Comment 9

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20424937&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-07 08:44:21
slave: tst-linux32-ec2-026

09:41:23  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362674768504/392/fixed-text-2.html?ref | Exited with code 11 during test run
09:41:34     INFO -  PROCESS-CRASH | http://localhost:4444/1362674768504/392/fixed-text-2.html?ref | application crashed [@ js::gc::FreeSpan::checkSpan() const]
09:41:37    ERROR - Return code: 1

Comment 10

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=20425826&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-07 09:27:23
slave: tst-linux32-ec2-065

10:03:56  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362677607446/223/font-face/src-list-format-7.html | Exited with code 11 during test run
10:04:07     INFO -  PROCESS-CRASH | http://localhost:4444/1362677607446/223/font-face/src-list-format-7.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
10:04:09    ERROR - Return code: 1

Comment 11

[Legacy TBPL/Treeherder Robot]

jwalker%mozilla.com
https://tbpl.mozilla.org/php/getParsedLog.php?id=20427639&tree=Fx-Team
Ubuntu 12.04 fx-team debug test reftest on 2013-03-07 10:10:41
slave: tst-linux32-ec2-026

10:50:26  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362679957704/271/font-face/507960-1-bad-sfnt-version-ttf.html | Exited with code 11 during test run
10:50:37     INFO -  PROCESS-CRASH | http://localhost:4444/1362679957704/271/font-face/507960-1-bad-sfnt-version-ttf.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
10:50:40    ERROR - Return code: 1

Comment 12

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20439054&tree=Mozilla-Inbound
Ubuntu 12.04 x64 mozilla-inbound debug test reftest on 2013-03-07 15:52:02
slave: tst-linux64-ec2-057

16:17:04  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362700401319/235/font-face/prop-order-over-rule-order-1a.html | Exited with code 11 during test run
16:17:12     INFO -  PROCESS-CRASH | http://localhost:4444/1362700401319/235/font-face/prop-order-over-rule-order-1a.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
16:17:14    ERROR - Return code: 1

Comment 13

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20439539&tree=Fx-Team
Ubuntu 12.04 fx-team debug test reftest on 2013-03-07 15:55:13
slave: tst-linux32-ec2-323

16:27:53  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362700910678/184/text-overflow/marker-shadow-ref.html | Exited with code 11 during test run
16:28:03     INFO -  PROCESS-CRASH | http://localhost:4444/1362700910678/184/text-overflow/marker-shadow-ref.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
16:28:06    ERROR - Return code: 1

Comment 14

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20440510&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-07 16:51:23
slave: tst-linux32-ec2-038

16:55:21  WARNING -  TEST-UNEXPECTED-FAIL | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-filtering/f03n0g08.html | Exited with code 11 during test run
16:55:31     INFO -  PROCESS-CRASH | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-filtering/f03n0g08.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
16:55:33    ERROR - Return code: 1

Comment 15

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=20442147&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-07 17:37:48
slave: tst-linux32-ec2-021

17:47:05  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362706894591/55/size-8x8.png | Exited with code 11 during test run
17:47:17     INFO -  PROCESS-CRASH | http://localhost:4444/1362706894591/55/size-8x8.png | application crashed [@ js::gc::FreeSpan::checkSpan() const]
17:47:18    ERROR - Return code: 1

Comment 16

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=20454648&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-08 03:13:48
slave: tst-linux32-ec2-027

03:52:21  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362741337050/250/font-face/insert-rule-1b.html | Exited with code 11 during test run
03:52:33     INFO -  PROCESS-CRASH | http://localhost:4444/1362741337050/250/font-face/insert-rule-1b.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
03:52:36    ERROR - Return code: 1

Comment 17

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20465549&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-08 10:27:52
slave: tst-linux32-ec2-330

10:35:58  WARNING -  TEST-UNEXPECTED-FAIL | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-gamma/g05n0g16.html | Exited with code 11 during test run
10:36:08     INFO -  PROCESS-CRASH | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-gamma/g05n0g16.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
10:36:10    ERROR - Return code: 1

Comment 18

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=20465549&tree=Mozilla-Inbound
Ubuntu 12.04 mozilla-inbound debug test reftest on 2013-03-08 10:27:52
slave: tst-linux32-ec2-330

10:35:58  WARNING -  TEST-UNEXPECTED-FAIL | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-gamma/g05n0g16.html | Exited with code 11 during test run
10:36:08     INFO -  PROCESS-CRASH | file:///builds/slave/test/build/tests/reftest/tests/image/test/reftest/pngsuite-gamma/g05n0g16.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
10:36:10    ERROR - Return code: 1

Comment 19

[Ryan VanderMeulen [:RyanVM]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=20466776&tree=Mozilla-Inbound

Comment 20

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20470295&tree=Mozilla-Inbound
Ubuntu 12.04 x64 mozilla-inbound debug test reftest on 2013-03-08 12:48:16
slave: tst-linux64-ec2-037

13:09:10  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1362775844658/235/font-face/prop-order-over-rule-order-1a.html | Exited with code 11 during test run
13:09:16     INFO -  PROCESS-CRASH | http://localhost:4444/1362775844658/235/font-face/prop-order-over-rule-order-1a.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
13:09:18    ERROR - Return code: 1

Comment 21

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=20529997&tree=Mozilla-Aurora
Ubuntu 12.04 x64 mozilla-aurora debug test reftest on 2013-03-11 11:28:29
slave: tst-linux64-ec2-016

12:03:31  WARNING -  TEST-UNEXPECTED-FAIL | http://localhost:4444/1363027030630/349/indic-shaping/bengali-2-ref.html | Exited with code 11 during test run
12:03:38     INFO -  PROCESS-CRASH | http://localhost:4444/1363027030630/349/indic-shaping/bengali-2-ref.html | application crashed [@ js::gc::FreeSpan::checkSpan() const]
12:03:40    ERROR - Return code: 1

Comment 22

[Ryan VanderMeulen [:RyanVM]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=20627976&tree=Mozilla-Aurora

Comment 23

[Ryan VanderMeulen [:RyanVM]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=20656816&tree=Mozilla-Aurora

Jeff, we're hitting this pretty regularly on m-c and Aurora across a range of tests. Can you take a look please?

Comment 24

[Jeff Walden [:Waldo]]

As comment 1 notes, whatever's happening here is some sort of generic GC issue, that only happens to finally fall over at some point during this test or a few others.  I could perhaps try to figure something out, but it'd be better to ask someone more knowledgeable about backtracking GC skidmarks into proximate causes.

Comment 25

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

I think this might be fixed by bug 848587. I guess I'll ask to backport that.