Octane Assertion failed J9ConstProvenanceGraph.cpp:410 VMState: 0x0005ff0b known object place koi=-1 out of bounds

[pshipton]

http://vmfarm.rtp.raleigh.ibm.com/job_output.php?id=116933327
[Linux PPC LE 64bit] 80 SVT_Apps_1.SVT_Octane
rtv-rhel8le-cuda-1

50x grinder 1/50 failure rate (2 other jobs failed with "Octane failed to run")

Assertion failed at /tmp/bld_105845/bld_linux_ppc-64_cmprssptrs_le/compiler/../compiler/env/J9ConstProvenanceGraph.cpp:410: 0 <= koi && koi < knot->getEndIndex()
VMState: 0x0005ff0b
	known object place koi=-1 out of bounds (331)
compiling jdk/nashorn/internal/scripts/Script$Recompilation$232$11133AA$crypto.bnpMultiplyTo(Ljdk/nashorn/internal/runtime/ScriptFunction;Ljava/lang/Object;Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object; at level: warm

[pshipton]

@zl-wang @hzongaro fyi

[pshipton]

fyi #19102

[zl-wang]

@rmnattas crashed during processing relocation records

[rmnattas]

The file J9ConstProvenanceGraph.cpp was added recently by @jdmpapin.
Still early in investigating it but maybe a high-level of what it's trying to do might help as it seems the PR #22813 adding this mentions that the new type is unused for now.

JIT Dumps ends during RA of a branch instruction

                               [    0x7ffe4ffae5b0]     31      b       Label L0164     
 PRE: [&GPR_    0x7ffe4ffab1c0 : gr30] [&GPR_    0x7ffe4ffab230 : gr24] [&GPR_    0x7ffe4ffab2a0 : gr20] [&GPR_    0x7ffe4ffab310 : gr19] [&GPR_    0x7ffe4ffad810 : gr31] 
POST: [&GPR_    0x7ffe4ffab1c0 : gr30] [&GPR_    0x7ffe4ffab230 : gr24] [&GPR_    0x7ffe4ffab2a0 : gr20] [&GPR_    0x7ffe4ffab310 : gr19] [&GPR_    0x7ffe4ffad810 : gr31] 
 PRE: [&GPR_    0x7ffe4ffab1c0 : gr30] [&GPR_    0x7ffe4ffab230 : gr24] [&GPR_    0x7ffe4ffab2a0 : gr20] [&GPR_    0x7ffe4ffab310 : gr19] [&GPR_    0x7ffe4ffad810 : gr31] 
POST: [&GPR_    0x7ffe4ffab1c0 : gr30] [&GPR_    0x7ffe4ffab230 : gr24] [&GPR_    0x7ffe4ffab2a0 : gr20] [&GPR_    0x7ffe4ffab310 : gr19] [&GPR_    0x7ffe4ffad810 : gr31] 
&GPR_    0x7ffe4ffab1c0(4/4)=gr30! 

[rmnattas]

The callpath is the following:

#17 0x00007fffbc4f7a04 in J9::ConstProvenanceGraph::assertValidPlace(J9::ConstProvenanceGraph::Place) () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so                                                          
#18 0x00007fffbc4f7c54 in J9::ConstProvenanceGraph::addEdgeImpl(J9::ConstProvenanceGraph::Place, J9::ConstProvenanceGraph::Place) () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so                              
#19 0x00007fffbc52ac14 in TR_J9VMBase::mutableCallSiteEpoch(TR::Compilation*, int) () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so                                                                             
#20 0x00007fffbc6e0460 in TR_CHTable::commitVirtualGuard(TR_VirtualGuard*, List<TR_VirtualGuardSite>&, TR_PersistentCHTable*, TR::Compilation*) () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so                
#21 0x00007fffbc6e1820 in TR_CHTable::commit(TR::Compilation*) () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so                                                                                                 
#22 0x00007fffbc4c958c in TR::CompilationInfoPerThreadBase::compile(J9VMThread*, TR::Compilation*, TR_ResolvedMethod*, TR_J9VMBase&, TR_OptimizationPlan*, TR::SegmentAllocator const&) ()    from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so
#23 0x00007fffbc4c9d4c in TR::CompilationInfoPerThreadBase::wrappedCompile(J9PortLibrary*, void*) () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so                                                              
#24 0x00007fffbd3e23d4 in omrsig_protect () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9prt29.so                                                                                                                       
#25 0x00007fffbc4c7678 in TR::CompilationInfoPerThreadBase::compile(J9VMThread*, TR_MethodToBeCompiled*, J9::J9SegmentProvider&) () from /bluebird/builds/bld_105845/sdk/xl6480/jre/lib/ppc64le/compressedrefs/libj9jit29.so                               

Looking at #19 TR_J9VMBase::mutableCallSiteEpoch(TR::Compilation*, int)

   TR::KnownObjectTable::Index result = TR::KnownObjectTable::UNKNOWN;
   if (mh != 0)
      {
      result = knot->getOrCreateIndex(mh);
      }

   J9::ConstProvenanceGraph *cpg = comp->constProvenanceGraph();
   cpg->addEdge(cpg->knownObject(mcs), cpg->knownObject(result));

May result on the 2nd argument of addEdge index to be -1 if mh == 0.