CLI with file_cache enabled: cannot run PHPStan on phpstan-src (PHP 8.4 and 8.5)

[ondrejmirtes]

Description

Steps to reproduce (at least on my machine):

OPCache configured like this:

[opcache]
opcache.enable=1
opcache.enable_cli=1
opcache.file_cache=/var/folders/7l/gnx_hkv509qbq30w2xvpsq240000gn/T/opcache-85
opcache.jit=tracing
opcache.optimization_level=0x7FFEBFFF
opcache.jit_buffer_size=128M

(the last three lines can be commented and the effect is the same). If I remove the opcache.file_cache line PHPStan finishes without any errors.

Run on the command line:

git clone https://github.com/phpstan/phpstan-src.git
cd phpstan-src
composer install
php bin/phpstan

This is the error I get most often:

 -- --------------------------------------------------------------------------
     Error
 -- --------------------------------------------------------------------------
     Internal error: Trait "Hoa\Event\Listens" not found while analysing file
     /Users/ondrej/Development/phpstan/src/Type/Regex/RegexGroupParser.php

The Hoa package is a bit outdated and weird and uses class_alias heavily so that might be what's breaking this.

Other times I get another weird error:

PHP Fatal error:  Uncaught TypeError: OndraM\CiDetector\Ci\BitbucketPipelines::isDetected(): Argument #1 ($env) must be of type OndraM\CiDetector\Env, OndraM\CiDetector\Env given, called in /Users/ondrej/Development/phpstan/vendor/ondram/ci-detector/src/CiDetector.php on line 103 and defined in /Users/ondrej/Development/phpstan/vendor/ondram/ci-detector/src/Ci/BitbucketPipelines.php:11

(when I re-run PHPStan, it fails on a different class from OndraM\CiDetector but otherwise the error message is the same)

Hopefully this is reproducible on other machines.

PHP Version

PHP 8.4.13 (cli) (built: Sep 23 2025 14:14:32) (NTS)
Copyright (c) The PHP Group
Built by Shivam Mathur
Zend Engine v4.4.13, Copyright (c) Zend Technologies
    with Zend OPcache v8.4.13, Copyright (c), by Zend Technologies

PHP 8.5.0-dev (cli) (built: Oct 18 2025 21:59:48) (NTS)
Copyright (c) The PHP Group
Built by Shivam Mathur
Zend Engine v4.5.0-dev, Copyright (c) Zend Technologies
    with Zend OPcache v8.5.0-dev, Copyright (c), by Zend Technologies

Operating System

macOS 15.7.1

[TimWolla]

(the last three lines can be commented and the effect is the same)

The title of the issue indicates “JIT”, the last three lines enable the JIT. To make sure we don't miss an important INI setting (e.g. by defaults set by the Homebrew setup): Can you please provide the php --ini=diff output for the minimal configuration that reproduces the error for you?

[ondrejmirtes]

So it might be an OPCache problem and not a JIT problem?

Here's the ini diff (I made sure PHPStan still crashes with these settings)

Non-default INI settings:
allow_url_include: "0" -> ""
auto_append_file: (none) -> ""
auto_prepend_file: (none) -> ""
enable_dl: "1" -> ""
error_reporting: (none) -> "30719"
extension_dir: "/opt/homebrew/Cellar/php@8.5/8.5.0_4/lib/php/20250925" -> "/opt/homebrew/lib/php/pecl/20250925"
html_errors: "1" -> "0"
ignore_repeated_errors: "0" -> ""
ignore_repeated_source: "0" -> ""
implicit_flush: "0" -> "1"
log_errors: "0" -> "1"
mail.add_x_header: "0" -> ""
mail.mixed_lf_and_crlf: "0" -> ""
max_execution_time: "30" -> "0"
memory_limit: "128M" -> "2G"
mysqli.default_host: (none) -> ""
mysqli.default_pw: (none) -> ""
mysqli.default_user: (none) -> ""
mysqlnd.collect_memory_statistics: "0" -> "1"
opcache.enable_cli: "0" -> "1"
opcache.file_cache: (none) -> "/var/folders/7l/gnx_hkv509qbq30w2xvpsq240000gn/T/opcache-85"
opcache.jit: "disable" -> "tracing"
opcache.jit_buffer_size: "64M" -> "128M"
openssl.cafile: (none) -> "/opt/homebrew/etc/openssl@3/cert.pem"
openssl.capath: (none) -> "/opt/homebrew/etc/openssl@3/certs"
pgsql.auto_reset_persistent: "0" -> ""
request_order: (none) -> "GP"
session.cookie_httponly: "0" -> ""
session.gc_divisor: "100" -> "1000"
short_open_tag: "1" -> ""
tidy.clean_output: "0" -> ""
unserialize_callback_func: (none) -> ""
user_dir: (none) -> ""
variables_order: "EGPCS" -> "GPCS"
zend.exception_ignore_args: "0" -> ""
zlib.output_compression: "0" -> ""

It crashes even when I remove:

opcache.jit: "disable" -> "tracing"
opcache.jit_buffer_size: "64M" -> "128M"

[ndossche]

How quickly does this reproduce? I can't run phpstan with default settings on a debug build because it goes OOM. I limit the number of maximum processes now but it takes ages to run. In any case, so far does not reproduce.

So it might be an OPCache problem and not a JIT problem?

If you disable JIT but it still reproduces with the file cache, then it's indeed an opcache issue.

[arnaud-lb]

I'm able to produce an assertion failure with 8.5, when running a second time:

gdb trace

php: ext/opcache/zend_accelerator_util_funcs.c:227: _zend_accel_class_hash_copy: Assertion `(0) || __builtin_expect(!!((zend_gc_refcount(&(ce->name)->gc)-1)/sizeof(void *) < (compiler_globals.map_ptr_last)), 1)' failed.

Program received signal SIGABRT, Aborted.
__pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
44	      return INTERNAL_SYSCALL_ERROR_P (ret) ? INTERNAL_SYSCALL_ERRNO (ret) : 0;
(gdb) bt
#0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
#1  0x00007ffff5281f63 in __pthread_kill_internal (threadid=<optimized out>, signo=6) at pthread_kill.c:89
#2  0x00007ffff5227f3e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#3  0x00007ffff520f6d0 in __GI_abort () at abort.c:77
#4  0x00007ffff520f639 in __assert_fail_base (fmt=<optimized out>, assertion=<optimized out>, file=<optimized out>, line=<optimized out>, function=<optimized out>) at assert.c:118
#5  0x0000000001420312 in _zend_accel_class_hash_copy (target=0x7c5ff23e02c0, source=0x41600000, call_observers=false) at ext/opcache/zend_accelerator_util_funcs.c:227
#6  0x00000000014205e1 in zend_accel_class_hash_copy (target=0x7c5ff23e02c0, source=0x41600000) at ext/opcache/zend_accelerator_util_funcs.c:240
#7  0x0000000001423512 in zend_accel_load_script (persistent_script=0x415ffec0, from_shared_memory=1) at ext/opcache/zend_accelerator_util_funcs.c:397
#8  0x000000000153820f in persistent_compile_file (file_handle=0x7bfff11a1d30, type=2) at ext/opcache/ZendAccelerator.c:2272
#9  0x0000000002f9966a in compile_filename (type=2, filename=0x7caff255a9d0) at Zend/zend_language_scanner.l:717
#10 0x0000000002b782e7 in zend_include_or_eval (inc_filename_zv=0x7bfff0deacc0, type=2) at Zend/zend_execute.c:5349
#11 0x0000000002d99a13 in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER () at Zend/zend_vm_execute.h:41907
#12 0x0000000002e6410e in execute_ex (ex=0x7bfff0deabe0) at Zend/zend_vm_execute.h:120189
#13 0x0000000002b25a2c in zend_call_function (fci=0x7bfff11a15a0, fci_cache=0x7bfff11a1550) at Zend/zend_execute_API.c:1010
#14 0x0000000002b27371 in zend_call_known_function (fn=0x408c7ce8, object=0x7d0ff23e5400, called_scope=0x408c2620, retval_ptr=0x0, param_count=1, params=0x7bfff1029040, named_params=0x0) at Zend/zend_execute_API.c:1104
#15 0x0000000001e84f80 in spl_perform_autoload (class_name=0x415ffc48, lc_name=0x40542138) at ext/spl/php_spl.c:442
#16 0x0000000002b292cd in zend_lookup_class_ex (name=0x415ffc48, key=0x40542138, flags=518) at Zend/zend_execute_API.c:1272
#17 0x0000000002b2bab4 in zend_fetch_class_by_name (class_name=0x415ffc48, key=0x40542138, fetch_type=518) at Zend/zend_execute_API.c:1795
#18 0x0000000002f29b9b in zend_do_link_class (ce=0x415f80c0, lc_parent_name=0x0, key=0x40535100) at Zend/zend_inheritance.c:3516
#19 0x0000000002a56615 in zend_bind_class_in_slot (class_table_slot=0x7edff24f03a0, lcname=0x415ffe30, lc_parent_name=0x0) at Zend/zend_compile.c:1330
#20 0x0000000002a56942 in do_bind_class (lcname=0x415ffe30, lc_parent_name=0x0) at Zend/zend_compile.c:1363
#21 0x0000000002bdc8f3 in ZEND_DECLARE_CLASS_SPEC_CONST_HANDLER () at Zend/zend_vm_execute.h:5895
#22 0x0000000002e50bd8 in execute_ex (ex=0x7bfff0deaaa0) at Zend/zend_vm_execute.h:116502
#23 0x0000000002b25a2c in zend_call_function (fci=0x7bfff11a08a0, fci_cache=0x7bfff11a0850) at Zend/zend_execute_API.c:1010
#24 0x0000000002b27371 in zend_call_known_function (fn=0x408c7ce8, object=0x7d0ff23e5400, called_scope=0x408c2620, retval_ptr=0x0, param_count=1, params=0x7bfff10288c0, named_params=0x0) at Zend/zend_execute_API.c:1104
#25 0x0000000001e84f80 in spl_perform_autoload (class_name=0x406b1758, lc_name=0x40535100) at ext/spl/php_spl.c:442
#26 0x0000000002b292cd in zend_lookup_class_ex (name=0x406b1758, key=0x40535100, flags=2560) at Zend/zend_execute_API.c:1272
#27 0x0000000002b2bab4 in zend_fetch_class_by_name (class_name=0x406b1758, key=0x40535100, fetch_type=2560) at Zend/zend_execute_API.c:1795
#28 0x0000000002f29596 in zend_do_link_class (ce=0x415e9ea0, lc_parent_name=0x40535100, key=0x40548120) at Zend/zend_inheritance.c:3502
#29 0x0000000002a56615 in zend_bind_class_in_slot (class_table_slot=0x7edff24f0380, lcname=0x415f7d50, lc_parent_name=0x40535100) at Zend/zend_compile.c:1330
#30 0x0000000002a56942 in do_bind_class (lcname=0x415f7d50, lc_parent_name=0x40535100) at Zend/zend_compile.c:1363
#31 0x0000000002bdc8f3 in ZEND_DECLARE_CLASS_SPEC_CONST_HANDLER () at Zend/zend_vm_execute.h:5895
#32 0x0000000002e50bd8 in execute_ex (ex=0x7bfff0dea960) at Zend/zend_vm_execute.h:116502
#33 0x0000000002b25a2c in zend_call_function (fci=0x7bfff119f9a0, fci_cache=0x7bfff119f950) at Zend/zend_execute_API.c:1010
#34 0x0000000002b27371 in zend_call_known_function (fn=0x408c7ce8, object=0x7d0ff23e5400, called_scope=0x408c2620, retval_ptr=0x0, param_count=1, params=0x7bfff1028140, named_params=0x0) at Zend/zend_execute_API.c:1104
#35 0x0000000001e84f80 in spl_perform_autoload (class_name=0x406b15f8, lc_name=0x40548120) at ext/spl/php_spl.c:442
#36 0x0000000002b292cd in zend_lookup_class_ex (name=0x406b15f8, key=0x40548120, flags=512) at Zend/zend_execute_API.c:1272
#37 0x0000000002b2bab4 in zend_fetch_class_by_name (class_name=0x406b15f8, key=0x40548120, fetch_type=512) at Zend/zend_execute_API.c:1795
#38 0x0000000002c14fca in ZEND_NEW_SPEC_CONST_UNUSED_HANDLER () at Zend/zend_vm_execute.h:11247
#39 0x0000000002e53d1e in execute_ex (ex=0x7bfff0dea160) at Zend/zend_vm_execute.h:117097
#40 0x0000000002b25a2c in zend_call_function (fci=0x7bfff12eb4e0, fci_cache=0x7bfff12eb490) at Zend/zend_execute_API.c:1010
#41 0x0000000001ffdc5b in zif_array_map (execute_data=0x7bfff0dea0f0, return_value=0x7bfff0dea0e0) at ext/standard/array.c:6809
#42 0x0000000002b8eb0c in ZEND_DO_ICALL_SPEC_RETVAL_USED_HANDLER () at Zend/zend_vm_execute.h:1421
#43 0x0000000002e4ce58 in execute_ex (ex=0x7bfff0de8820) at Zend/zend_vm_execute.h:115953
#44 0x0000000002e6a850 in zend_execute (op_array=0x7d0ff23e4b40, return_value=0x0) at Zend/zend_vm_execute.h:121436
#45 0x00000000030df5df in zend_execute_script (type=8, retval=0x0, file_handle=0x7bfff1616190) at Zend/zend.c:1977
#46 0x0000000002637140 in php_execute_script_ex (primary_file=0x7bfff1616190, retval=0x0) at main/main.c:2640
#47 0x000000000263766a in php_execute_script (primary_file=0x7bfff1616190) at main/main.c:2680
#48 0x00000000030e7cc4 in do_cli (argc=4, argv=0x7c3ff23e0150) at sapi/cli/php_cli.c:951
#49 0x00000000030eb5fa in main (argc=4, argv=0x7c3ff23e0150) at sapi/cli/php_cli.c:1362

The assertion originates from ZSTR_SET_CE_CACHE_EX(ce->name, ce, 0), in

php-src/ext/opcache/zend_accelerator_util_funcs.c

Lines 226 to 228 in bcd4be7

	if (ZSTR_HAS_CE_CACHE(ce->name)) {
	ZSTR_SET_CE_CACHE_EX(ce->name, ce, 0);
	}

ce->name is a string loaded from the file cache, which is not supposed to have a CE cache.

[arnaud-lb]

This is caused by a combination of factors:

• PHPStan fills the interned string buffer (this can be seen with -d opcache.error_log=/tmp/opcache.log -d opcache.log_verbosity_level=2), so some strings that are usually interned, are not in this case
• The file cache should remove the IS_STR_CLASS_NAME_MAP_PTR flag strings during persistence, but it doesn't for non-interned ones
• Therefore these strings will be considered to have a CE cache, but the index is bogus, which leads to these issues