================================================================= ==184176==ERROR: AddressSanitizer: heap-use-after-free on address 0x5130000c1751 at pc 0xffff770089e8 bp 0xffff45614e90 sp 0xffff45614ea8 READ of size 1 at 0x5130000c1751 thread T17 (C1 CompilerThre) #0 0xffff770089e4 in CompileBroker::invoke_compiler_on_method(CompileTask*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:2377 #1 0xffff77009e48 in CompileBroker::compiler_thread_loop() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1975 #2 0xffff7822c9a4 in JavaThread::thread_main_inner() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:776 #3 0xffff78249c28 in JavaThread::run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:761 #4 0xffff7aa32ed8 in Thread::call_run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/thread.cpp:231 #5 0xffff798f4b50 in thread_native_entry /tmp/tone/run/jtreg/jdk-repo/src/hotspot/os/linux/os_linux.cpp:877 #6 0xffff8d840c24 in asan_thread_start ../../.././libsanitizer/asan/asan_interceptors.cpp:234 #7 0xffff8ce97f70 in start_thread (/lib64/libpthread.so.0+0x7f70) (BuildId: 0d3d7285cc0e5a0a08cdc7580b1719454ac2f2a8) #8 0xffff8cf58f98 in thread_start (/lib64/libc.so.6+0x28f98) (BuildId: aabb4443d2eba4b2527cdf66d7295d1d61db58b0) 0x5130000c1751 is located 273 bytes inside of 378-byte region [0x5130000c1640,0x5130000c17ba) freed by thread T17 (C1 CompilerThre) here: #0 0xffff8d8b632c in free ../../.././libsanitizer/asan/asan_malloc_linux.cpp:52 #1 0xffff7703fc18 in CHeapObjBase::operator delete(void*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/memory/allocation.hpp:172 #2 0xffff7703fc18 in CHeapObj<(MemTag)7>::operator delete(void*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/memory/allocation.hpp:217 #3 0xffff7703fc18 in DirectivesStack::release(DirectiveSet*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerDirectives.cpp:745 #4 0xffff77005870 in CompileBroker::invoke_compiler_on_method(CompileTask*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:2343 #5 0xffff77009e48 in CompileBroker::compiler_thread_loop() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1975 #6 0xffff7822c9a4 in JavaThread::thread_main_inner() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:776 #7 0xffff78249c28 in JavaThread::run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:761 #8 0xffff7aa32ed8 in Thread::call_run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/thread.cpp:231 #9 0xffff798f4b50 in thread_native_entry /tmp/tone/run/jtreg/jdk-repo/src/hotspot/os/linux/os_linux.cpp:877 #10 0xffff8d840c24 in asan_thread_start ../../.././libsanitizer/asan/asan_interceptors.cpp:234 #11 0xffff8cf58f98 in thread_start (/lib64/libc.so.6+0x28f98) (BuildId: aabb4443d2eba4b2527cdf66d7295d1d61db58b0) previously allocated by thread T1 here: #0 0xffff8d8b7448 in malloc ../../.././libsanitizer/asan/asan_malloc_linux.cpp:69 #1 0xffff798c9540 in os::malloc(unsigned long, MemTag, NativeCallStack const&) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/os.cpp:657 #2 0xffff760da738 in AllocateHeap(unsigned long, MemTag, NativeCallStack const&, AllocFailStrategy::AllocFailEnum) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/memory/allocation.cpp:41 #3 0xffff760da738 in AllocateHeap(unsigned long, MemTag, AllocFailStrategy::AllocFailEnum) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/memory/allocation.cpp:51 #4 0xffff7703c5ac in CHeapObjBase::operator new(unsigned long, MemTag) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/memory/allocation.hpp:127 #5 0xffff7703c5ac in CHeapObj<(MemTag)7>::operator new(unsigned long) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/memory/allocation.hpp:181 #6 0xffff7703c5ac in DirectiveSet::clone(DirectiveSet const*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerDirectives.cpp:616 #7 0xffff7704559c in DirectiveSetPtr::cloned() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerDirectives.cpp:359 #8 0xffff7704559c in DirectiveSet::compilecommand_compatibility_init(methodHandle const&) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerDirectives.cpp:431 #9 0xffff770499c8 in DirectiveSet::compilecommand_compatibility_init(methodHandle const&) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerDirectives.cpp:385 #10 0xffff770499c8 in DirectivesStack::getMatchingDirective(methodHandle const&, AbstractCompiler*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerDirectives.cpp:787 #11 0xffff77015cc0 in CompileTask::initialize(int, methodHandle const&, int, int, methodHandle const&, int, CompileTask::CompileReason, bool) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileTask.cpp:123 #12 0xffff76fff7fc in CompileBroker::create_compile_task(CompileQueue*, int, methodHandle const&, int, int, methodHandle const&, int, CompileTask::CompileReason, bool) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1639 #13 0xffff76fff7fc in CompileBroker::compile_method_base(methodHandle const&, int, int, methodHandle const&, int, CompileTask::CompileReason, bool, Thread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1326 #14 0xffff77002168 in CompileBroker::compile_method(methodHandle const&, int, int, methodHandle const&, int, CompileTask::CompileReason, DirectiveSet*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1487 #15 0xffff77003cdc in CompileBroker::compile_method(methodHandle const&, int, int, methodHandle const&, int, CompileTask::CompileReason, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1360 #16 0xffff76f1e2e8 in CompilationPolicy::compile(methodHandle const&, int, CompLevel, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilationPolicy.cpp:815 #17 0xffff76f21f20 in CompilationPolicy::method_invocation_event(methodHandle const&, methodHandle const&, CompLevel, nmethod*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilationPolicy.cpp:1151 #18 0xffff76f2a66c in CompilationPolicy::event(methodHandle const&, methodHandle const&, int, int, CompLevel, nmethod*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilationPolicy.cpp:736 #19 0xffff781207f8 in InterpreterRuntime::frequency_counter_overflow_inner(JavaThread*, unsigned char*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/interpreter/interpreterRuntime.cpp:1074 #20 0xffff78121054 in InterpreterRuntime::frequency_counter_overflow(JavaThread*, unsigned char*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/interpreter/interpreterRuntime.cpp:1023 #21 0xffff63be7e9c () #22 0xffff63be4d3c () #23 0xffff63be4d3c () #24 0xffff63be47fc () #25 0xffff63be47fc () #26 0xffff63be47fc () #27 0xffff63be47fc () #28 0xffff63be4d3c () #29 0xffff63be47fc () #30 0xffff63be47fc () #31 0xffff63be47fc () #32 0xffff63be0190 () #33 0xffff78184134 in JavaCalls::call_helper(JavaValue*, methodHandle const&, JavaCallArguments*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaCalls.cpp:415 #34 0xffff78189f00 in JavaCalls::call(JavaValue*, methodHandle const&, JavaCallArguments*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaCalls.cpp:323 #35 0xffff78189f00 in JavaCalls::call_static(JavaValue*, Klass*, Symbol*, Symbol*, JavaCallArguments*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaCalls.cpp:250 #36 0xffff7aa9a4a8 in call_initPhase2 /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/threads.cpp:322 #37 0xffff7aa9a4a8 in Threads::create_vm(JavaVMInitArgs*, bool*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/threads.cpp:771 Thread T17 (C1 CompilerThre) created by T12 (C1 CompilerThre) here: #0 0xffff8d8b0b58 in pthread_create ../../.././libsanitizer/asan/asan_interceptors.cpp:245 #1 0xffff798fc2a8 in os::create_thread(Thread*, os::ThreadType, unsigned long) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/os/linux/os_linux.cpp:1069 #2 0xffff77080bf8 in CompilerThread::CompilerThread(CompileQueue*, CompilerCounters*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerThread.cpp:33 #3 0xffff76fe2a38 in CompileBroker::make_thread(CompileBroker::ThreadType, _jobject*, CompileQueue*, AbstractCompiler*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:855 #4 0xffff76ffc85c in CompileBroker::possibly_add_compiler_threads(JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1115 #5 0xffff77009c90 in CompileBroker::compiler_thread_loop() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1987 #6 0xffff7822c9a4 in JavaThread::thread_main_inner() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:776 #7 0xffff78249c28 in JavaThread::run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:761 #8 0xffff7aa32ed8 in Thread::call_run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/thread.cpp:231 #9 0xffff798f4b50 in thread_native_entry /tmp/tone/run/jtreg/jdk-repo/src/hotspot/os/linux/os_linux.cpp:877 #10 0xffff8d840c24 in asan_thread_start ../../.././libsanitizer/asan/asan_interceptors.cpp:234 #11 0xffff8cf58f98 in thread_start (/lib64/libc.so.6+0x28f98) (BuildId: aabb4443d2eba4b2527cdf66d7295d1d61db58b0) Thread T12 (C1 CompilerThre) created by T9 (C1 CompilerThre) here: #0 0xffff8d8b0b58 in pthread_create ../../.././libsanitizer/asan/asan_interceptors.cpp:245 #1 0xffff798fc2a8 in os::create_thread(Thread*, os::ThreadType, unsigned long) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/os/linux/os_linux.cpp:1069 #2 0xffff77080bf8 in CompilerThread::CompilerThread(CompileQueue*, CompilerCounters*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerThread.cpp:33 #3 0xffff76fe2a38 in CompileBroker::make_thread(CompileBroker::ThreadType, _jobject*, CompileQueue*, AbstractCompiler*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:855 #4 0xffff76ffc85c in CompileBroker::possibly_add_compiler_threads(JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1115 #5 0xffff77009c90 in CompileBroker::compiler_thread_loop() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:1987 #6 0xffff7822c9a4 in JavaThread::thread_main_inner() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:776 #7 0xffff78249c28 in JavaThread::run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/javaThread.cpp:761 #8 0xffff7aa32ed8 in Thread::call_run() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/thread.cpp:231 #9 0xffff798f4b50 in thread_native_entry /tmp/tone/run/jtreg/jdk-repo/src/hotspot/os/linux/os_linux.cpp:877 #10 0xffff8d840c24 in asan_thread_start ../../.././libsanitizer/asan/asan_interceptors.cpp:234 #11 0xffff8cf58f98 in thread_start (/lib64/libc.so.6+0x28f98) (BuildId: aabb4443d2eba4b2527cdf66d7295d1d61db58b0) Thread T9 (C1 CompilerThre) created by T1 here: #0 0xffff8d8b0b58 in pthread_create ../../.././libsanitizer/asan/asan_interceptors.cpp:245 #1 0xffff798fc2a8 in os::create_thread(Thread*, os::ThreadType, unsigned long) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/os/linux/os_linux.cpp:1069 #2 0xffff77080bf8 in CompilerThread::CompilerThread(CompileQueue*, CompilerCounters*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compilerThread.cpp:33 #3 0xffff76fe2a38 in CompileBroker::make_thread(CompileBroker::ThreadType, _jobject*, CompileQueue*, AbstractCompiler*, JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:855 #4 0xffff76ff8c00 in CompileBroker::init_compiler_threads() /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:989 #5 0xffff76ffab70 in CompileBroker::compilation_init(JavaThread*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:683 #6 0xffff7aa9ad00 in Threads::create_vm(JavaVMInitArgs*, bool*) /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/runtime/threads.cpp:749 #7 0xffff7859c130 in JNI_CreateJavaVM_inner /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/prims/jni.cpp:3587 #8 0xffff7859c130 in JNI_CreateJavaVM /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/prims/jni.cpp:3678 #9 0xffff8d76145c in InitializeJVM /tmp/tone/run/jtreg/jdk-repo/src/java.base/share/native/libjli/java.c:1499 #10 0xffff8d76145c in JavaMain /tmp/tone/run/jtreg/jdk-repo/src/java.base/share/native/libjli/java.c:494 #11 0xffff8d76f748 in ThreadJavaMain /tmp/tone/run/jtreg/jdk-repo/src/java.base/unix/native/libjli/java_md.c:649 #12 0xffff8d840c24 in asan_thread_start ../../.././libsanitizer/asan/asan_interceptors.cpp:234 #13 0xffff8cf58f98 in thread_start (/lib64/libc.so.6+0x28f98) (BuildId: aabb4443d2eba4b2527cdf66d7295d1d61db58b0) Thread T1 created by T0 here: #0 0xffff8d8b0b58 in pthread_create ../../.././libsanitizer/asan/asan_interceptors.cpp:245 #1 0xffff8d7712a0 in CallJavaMainInNewThread /tmp/tone/run/jtreg/jdk-repo/src/java.base/unix/native/libjli/java_md.c:690 #2 0xffff8d76a6fc in ContinueInNewThread /tmp/tone/run/jtreg/jdk-repo/src/java.base/share/native/libjli/java.c:2333 #3 0xffff8d76c824 in JLI_Launch /tmp/tone/run/jtreg/jdk-repo/src/java.base/share/native/libjli/java.c:330 #4 0xaaaac3ad1d34 in main /tmp/tone/run/jtreg/jdk-repo/src/java.base/share/native/launcher/main.c:150 #5 0xffff8cf59ad4 in __libc_start_main (/lib64/libc.so.6+0x29ad4) (BuildId: aabb4443d2eba4b2527cdf66d7295d1d61db58b0) #6 0xaaaac3ad1fb4 in _start (/tmp/tone/run/jtreg/jdk-repo/build/linux-aarch64-server-fastdebug/jdk/bin/jmod+0x1fb4) SUMMARY: AddressSanitizer: heap-use-after-free /tmp/tone/run/jtreg/jdk-repo/src/hotspot/share/compiler/compileBroker.cpp:2377 in CompileBroker::invoke_compiler_on_method(CompileTask*) Shadow bytes around the buggy address: 0x5130000c1480: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x5130000c1500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x5130000c1580: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x5130000c1600: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x5130000c1680: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd =>0x5130000c1700: fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd 0x5130000c1780: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa 0x5130000c1800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x5130000c1880: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x5130000c1900: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x5130000c1980: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==184176==ABORTING