[Bug ipa/65298] New: [5 Regression] lto1: ICE: in operator[], at vec.h:736 during LTO/PGO Firefox build

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65298

            Bug ID: 65298
           Summary: [5 Regression] lto1: ICE: in operator[], at vec.h:736
                    during LTO/PGO Firefox build
           Product: gcc
           Version: 5.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: ipa
          Assignee: unassigned at gcc dot gnu.org
          Reporter: trippels at gcc dot gnu.org

On x86_64 I get during final libxul lto WPA phase (-fprofile-use):

lto1: internal compiler error: in operator[], at vec.h:736
0xffc277 vec<tree_node*, va_heap, vl_embed>::operator[](unsigned int)
        ../../gcc/gcc/vec.h:736
0xffd678 vec<tree_node*, va_heap, vl_embed>::operator[](unsigned int)
        ../../gcc/gcc/vec.h:1184
0xffd678 vec<tree_node*, va_heap, vl_ptr>::operator[](unsigned int)
        ../../gcc/gcc/vec.h:1202
0xffd678 ipa_value_from_jfunc(ipa_node_params*, ipa_jump_func*)
        ../../gcc/gcc/ipa-cp.c:937
0x87b5ae evaluate_properties_for_edge
        ../../gcc/gcc/ipa-inline-analysis.c:950
0x87bd9b do_estimate_edge_time(cgraph_edge*)
        ../../gcc/gcc/ipa-inline-analysis.c:3747
0x100e03e estimate_edge_time
        ../../gcc/gcc/ipa-inline.h:313
0x100e03e can_inline_edge_p
        ../../gcc/gcc/ipa-inline.c:503
0x100e498 speculation_useful_p(cgraph_edge*, bool)
        ../../gcc/gcc/ipa-inline.c:1592
0x101b34e clone_inlined_nodes(cgraph_edge*, bool, bool, int*, int)
        ../../gcc/gcc/ipa-inline-transform.c:256
0x101b7fe inline_call(cgraph_edge*, bool, vec<cgraph_edge*, va_heap, vl_ptr>*,
int*, bool, bool*)
        ../../gcc/gcc/ipa-inline-transform.c:345
0x10140ed inline_small_functions
        ../../gcc/gcc/ipa-inline.c:1932
0x1014dba ipa_inline
        ../../gcc/gcc/ipa-inline.c:2320
0x1014dba execute
        ../../gcc/gcc/ipa-inline.c:2726
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.
lto-wrapper: fatal error: /var/tmp/gcc_test/usr/local/bin/g++ returned 1 exit
status

CXXFLAGS="-march=native -fno-semantic-interposition -flto=4
-fdevirtualize-at-ltrans -fprofile-use -fprofile-correction -ffunction-sections
-fdata-sections"