131901 2014-04-19 14:45:49 -0700 REGRESSION(r167501): DYEBench times out 2014-04-21 21:59:10 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 rniwa webkit-unassigned barraclough ggaren kling mhahnenberg sam oldest_to_newest 1002279 0 rniwa 2014-04-19 14:45:49 -0700 Pass: http://build.webkit.org/builders/Apple%20Mavericks%20Release%20%28Perf%29/builds/1208 Crash: http://build.webkit.org/builders/Apple%20Mavericks%20Release%20%28Perf%29/builds/1209 1002287 1 mhahnenberg 2014-04-19 14:57:13 -0700 It'd be nice if DYEBench had crash reports. 1002299 2 rniwa 2014-04-19 16:16:58 -0700 Actually it's just timing out. Bisected the regression locally to a revision between r167501 and 167502. Since r167502 is a bmalloc change and bmalloc hasn't been enabled by default, 167501 should be the culprit. 1002302 3 rniwa 2014-04-19 16:58:43 -0700 Looks like everyone is waiting for everyone else. #8 0x000000010a87723a in DumpRenderTreeMain(int, char const**) at /Volumes/Data/webkit/Tools/DumpRenderTree/mac/DumpRenderTree.mm:1258 #9 0x00007fff8bf185fd in start () #10 0x00007fff8bf185fd in start () Thread 3Queue : com.apple.libdispatch-manager (serial) #0 0x00007fff82f61662 in kevent64 () #1 0x00007fff84c8943d in _dispatch_mgr_invoke at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/libdispatch/libdispatch-339.90.1/src/source.c:2278 #2 0x00007fff84c89152 in _dispatch_mgr_thread at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/libdispatch/libdispatch-339.90.1/src/source.c:2307 Thread 4 com.apple.NSURLConnectionLoader#0 0x00007fff82f5ca1a in mach_msg_trap () #1 0x00007fff82f5bd18 in mach_msg at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/xnu/xnu-2422.90.20/libsyscall/mach/mach_msg.c:103 #2 0x00007fff8e317155 in __CFRunLoopServiceMachPort at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/CF/CF-855.14/RunLoop.subproj/CFRunLoop.c:2344 #3 0x00007fff8e316779 in __CFRunLoopRun at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/CF/CF-855.14/RunLoop.subproj/CFRunLoop.c:2556 #4 0x00007fff8e3160b5 in CFRunLoopRunSpecific at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/CF/CF-855.14/RunLoop.subproj/CFRunLoop.c:2770 #5 0x00007fff8c6c7967 in +[NSURLConnection(Loader) _resourceLoadLoop:] at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/Foundation/Foundation-1056.13/URL.subproj/Connection.subproj/NSURLConnection.m:365 #6 0x00007fff8c6c776b in __NSThread__main__ at /SWE/OSX/Views/CabCPU/LaCrosse/Projects/Foundation/Foundation-1056.13/Soil.subproj/NSThread.m:1076 #7 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #8 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #9 0x00007fff82592fc9 in thread_start () Thread 5 JavaScriptCore::BlockFree#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x00007fff8f98ed43 in std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libcxx/libcxx-120/src/condition_variable.cpp:40 #3 0x000000010a9e3283 in JSC::BlockAllocator::blockFreeingThreadMain() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/BlockAllocator.cpp:146 #4 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #5 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #6 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #7 0x00007fff82592fc9 in thread_start () Thread 6 JavaScriptCore::Marking#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x00007fff8f98ed43 in std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libcxx/libcxx-120/src/condition_variable.cpp:40 #3 0x000000010ab399fb in void std::__1::condition_variable::wait<JSC::GCThread::waitForNextPhase()::$_1>(std::__1::unique_lock<std::__1::mutex>&, JSC::GCThread::waitForNextPhase()::$_1) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.9.xctoolchain/usr/bin/../lib/c++/v1/__mutex_base:376 #4 0x000000010ab399f0 in JSC::GCThread::waitForNextPhase() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:80 #5 0x000000010ab39a98 in JSC::GCThread::gcThreadMain() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:98 #6 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #7 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #8 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #9 0x00007fff82592fc9 in thread_start () Thread 7 JavaScriptCore::Marking#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x00007fff8f98ed43 in std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libcxx/libcxx-120/src/condition_variable.cpp:40 #3 0x000000010ab399fb in void std::__1::condition_variable::wait<JSC::GCThread::waitForNextPhase()::$_1>(std::__1::unique_lock<std::__1::mutex>&, JSC::GCThread::waitForNextPhase()::$_1) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.9.xctoolchain/usr/bin/../lib/c++/v1/__mutex_base:376 #4 0x000000010ab399f0 in JSC::GCThread::waitForNextPhase() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:80 #5 0x000000010ab39a98 in JSC::GCThread::gcThreadMain() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:98 #6 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #7 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #8 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #9 0x00007fff82592fc9 in thread_start () Thread 8 JavaScriptCore::Marking#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x00007fff8f98ed43 in std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libcxx/libcxx-120/src/condition_variable.cpp:40 #3 0x000000010ab399fb in void std::__1::condition_variable::wait<JSC::GCThread::waitForNextPhase()::$_1>(std::__1::unique_lock<std::__1::mutex>&, JSC::GCThread::waitForNextPhase()::$_1) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.9.xctoolchain/usr/bin/../lib/c++/v1/__mutex_base:376 #4 0x000000010ab399f0 in JSC::GCThread::waitForNextPhase() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:80 #5 0x000000010ab39a98 in JSC::GCThread::gcThreadMain() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:98 #6 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #7 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #8 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #9 0x00007fff82592fc9 in thread_start () Thread 9 JavaScriptCore::Marking#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x00007fff8f98ed43 in std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libcxx/libcxx-120/src/condition_variable.cpp:40 #3 0x000000010ab399fb in void std::__1::condition_variable::wait<JSC::GCThread::waitForNextPhase()::$_1>(std::__1::unique_lock<std::__1::mutex>&, JSC::GCThread::waitForNextPhase()::$_1) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.9.xctoolchain/usr/bin/../lib/c++/v1/__mutex_base:376 #4 0x000000010ab399f0 in JSC::GCThread::waitForNextPhase() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:80 #5 0x000000010ab39a98 in JSC::GCThread::gcThreadMain() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:98 #6 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #7 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #8 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #9 0x00007fff82592fc9 in thread_start () Thread 10 JavaScriptCore::Marking#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x00007fff8f98ed43 in std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libcxx/libcxx-120/src/condition_variable.cpp:40 #3 0x000000010ab399fb in void std::__1::condition_variable::wait<JSC::GCThread::waitForNextPhase()::$_1>(std::__1::unique_lock<std::__1::mutex>&, JSC::GCThread::waitForNextPhase()::$_1) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.9.xctoolchain/usr/bin/../lib/c++/v1/__mutex_base:376 #4 0x000000010ab399f0 in JSC::GCThread::waitForNextPhase() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:80 #5 0x000000010ab39a98 in JSC::GCThread::gcThreadMain() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:98 #6 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #7 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #8 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #9 0x00007fff82592fc9 in thread_start () Thread 11 JavaScriptCore::Marking#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x00007fff8f98ed43 in std::__1::condition_variable::wait(std::__1::unique_lock<std::__1::mutex>&) at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libcxx/libcxx-120/src/condition_variable.cpp:40 #3 0x000000010ab399fb in void std::__1::condition_variable::wait<JSC::GCThread::waitForNextPhase()::$_1>(std::__1::unique_lock<std::__1::mutex>&, JSC::GCThread::waitForNextPhase()::$_1) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.9.xctoolchain/usr/bin/../lib/c++/v1/__mutex_base:376 #4 0x000000010ab399f0 in JSC::GCThread::waitForNextPhase() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:80 #5 0x000000010ab39a98 in JSC::GCThread::gcThreadMain() at /Volumes/Data/webkit/Source/JavaScriptCore/heap/GCThread.cpp:98 #6 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #7 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #8 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #9 0x00007fff82592fc9 in thread_start () Thread 12 JSC Compilation Thread#0 0x00007fff82f60716 in __psynch_cvwait () #1 0x00007fff82590c3b in _pthread_cond_wait at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread_cond.c:516 #2 0x000000010ab2ddeb in JSC::DFG::Worklist::runThread(JSC::DFG::ThreadData*) at /Volumes/Data/webkit/Source/JavaScriptCore/dfg/DFGWorklist.cpp:275 #3 0x000000010adc53df in WTF::wtfThreadEntryPoint(void*) at /Volumes/Data/webkit/Source/WTF/wtf/ThreadingPthreads.cpp:168 #4 0x00007fff8258e899 in _pthread_body at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:629 #5 0x00007fff8258e72a in _pthread_start at /Network/Servers/xbsviews1.sd.apple.com/ifs/Views/Views100/Cab/Projects/libpthread/libpthread-53.1.4/src/pthread.c:654 #6 0x00007fff82592fc9 in thread_start () Thread 13 WebCore: LocalStorageThread 14 WebCore: LocalStorageThread 15 1002307 4 mhahnenberg 2014-04-19 17:29:15 -0700 When running with DRT on command line I get the following: CONSOLE MESSAGE: line 5780: TypeError: undefined is not an object (evaluating 'this.get('newTitle').trim') Seems like this could cause a timeout. I'll investigate more. 1002309 5 rniwa 2014-04-19 17:48:02 -0700 (In reply to comment #4) > When running with DRT on command line I get the following: > > CONSOLE MESSAGE: line 5780: TypeError: undefined is not an object (evaluating 'this.get('newTitle').trim') > > Seems like this could cause a timeout. I'll investigate more. That indeed appears to be the problem. I can reproduce it on Safari as well. It's erroring out inside an ember.js test. If I keep the inspector's console open, it doesn't hit that error so it ought be some JIT bug. 1002313 6 mhahnenberg 2014-04-19 18:01:38 -0700 (In reply to comment #5) > (In reply to comment #4) > > When running with DRT on command line I get the following: > > > > CONSOLE MESSAGE: line 5780: TypeError: undefined is not an object (evaluating 'this.get('newTitle').trim') > > > > Seems like this could cause a timeout. I'll investigate more. > > That indeed appears to be the problem. I can reproduce it on Safari as well. It's erroring out inside an ember.js test. If I keep the inspector's console open, it doesn't hit that error so it ought be some JIT bug. I can still repro when running with JSC_useJIT=0, so it seems unlikely it's a JIT problem unless it's related to the regular expression JIT (again, very unlikely). Maybe the inspector being open causes enough other random stuff to happen that we avoid hitting this particular bug. I'm going to try running in debug mode to see what happens. 1002324 7 mhahnenberg 2014-04-19 19:44:11 -0700 (In reply to comment #6) > (In reply to comment #5) > > (In reply to comment #4) > > > When running with DRT on command line I get the following: > > > > > > CONSOLE MESSAGE: line 5780: TypeError: undefined is not an object (evaluating 'this.get('newTitle').trim') > > > > > > Seems like this could cause a timeout. I'll investigate more. > > > > That indeed appears to be the problem. I can reproduce it on Safari as well. It's erroring out inside an ember.js test. If I keep the inspector's console open, it doesn't hit that error so it ought be some JIT bug. > > I can still repro when running with JSC_useJIT=0, so it seems unlikely it's a JIT problem unless it's related to the regular expression JIT (again, very unlikely). Maybe the inspector being open causes enough other random stuff to happen that we avoid hitting this particular bug. > > I'm going to try running in debug mode to see what happens. Debug build didn't reveal any additional info. I'm going to try adding some logging to Structure transition stuff and see if that tells us anything. 1002345 8 mhahnenberg 2014-04-19 22:29:32 -0700 I can catch the error in a debugger at the time it throws. It seems like the object in question has a Structure that is a descendent of a Structure that was the result of a delete transition. The current Structure and the ancestor Structure have different size property tables. My current theory is that we're somehow copying properties over incorrectly due to the resize of the property table when materializing. 1002365 9 mhahnenberg 2014-04-20 04:36:57 -0700 Ok, well I've been unsuccessful in fixing this so far, so I'm going to recommend that we roll out the bad change so that we don't lose too much coverage on DYEBench. 1002371 10 mhahnenberg 2014-04-20 04:47:31 -0700 (In reply to comment #9) > Ok, well I've been unsuccessful in fixing this so far, so I'm going to recommend that we roll out the bad change so that we don't lose too much coverage on DYEBench. Rolled out in http://trac.webkit.org/changeset/167564. 1002813 11 rniwa 2014-04-21 21:59:10 -0700 No longer seeing the hang.