Ran into CMS crash when testing fix for CR#6558100

HotSpot : 20070705083138.ysr.mustang-fastdebug
JDK : 6u3 b01

Relevant Flags : -d64 -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=1 -XX:+CMSMarkStackOverflowALot -XX:CMSMarkStackOverflowInterval=20 -XX:SuppressErrorAt=/referenceProcessor.cpp:488 -XX:+VerifyBeforeGC -XX:+VerifyDuringGC -XX:+VerifyAfterGC -XX:+ShowMessageBoxOnError -XX:+PrintGCDetails -XX:+PrintGCTimeStamps -XX:+DisableExplicitGC -Xmx192m

Error message :
-----------------------------------------------------------------------
Internal Error at concurrentMarkSweepGeneration.cpp:2861, pid=14414, tid=8
Error: ... aborting

Do you want to debug the problem?

To debug, run 'dbx - 14414'; then switch to thread 8
Enter 'yes' to launch dbx automatically (PATH must include dbx)
Otherwise, press RETURN to abort...
-----------------------------------------------------------------------

Stack trace :
-----------------------------------------------------------------------
(dbx) where
current thread: t@8
=>[1] ___nanosleep(0xfffffd7fe71fcf70, 0xfffffd7fe71fcf60, 0xfffffd7fff2ae191, 0xfffffd7fff2bdaaa, 0x0, 0x1), at 0xfffffd7fff2bcd6a
  [2] sleep(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7fff2ae1a5
  [3] os::message_box(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffdfb0e9a
  [4] VMError::show_message_box(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffe38904b
  [5] VMError::report_and_die(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffe38875f
  [6] report_fatal(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffd739b81
  [7] CMSCollector::verify_after_remark_work_1(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffd6cef06
  [8] CMSCollector::verify_after_remark(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffd6ce5a6
  [9] CMSCollector::checkpointRootsFinalWork(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffd6df314
  [10] CMSCollector::checkpointRootsFinal(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffd6de7bc
  [11] CMSCollector::do_CMS_operation(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffd6e8451
  [12] VM_CMS_Final_Remark::doit(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffe385a14
  [13] VM_Operation::evaluate(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffe3b5492
  [14] VMThread::evaluate_operation(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffe3b3923
  [15] VMThread::loop(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffe3b4097
  [16] VMThread::run(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffe3b354c
  [17] java_start(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7ffdfa789d
  [18] _thr_setup(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7fff2baa4b
  [19] _lwp_start(0x0, 0x0, 0x0, 0x0, 0x0, 0x0), at 0xfffffd7fff2bac80
-----------------------------------------------------------------------

stack trace when GC verification not turned on :
-----------------------------------------------------------------------
(dbx) where
current thread: t@5
dbx: read of 8 bytes at address bad1b000 failed -- No such file or directory
dbx: attempt to read frame failed -- cannot derive frame pointer
  [1] ___nanosleep(0xbad1a958, 0xbad1a960), at 0xbff30327
  [2] _sleep(0x64), at 0xbff24a23
  [3] os::message_box(0xbfb43c9a, 0xbfc7d678), at 0xbeccb816
  [4] VMError::show_message_box(0xbad1aaec, 0xbfc7d678, 0x7d0), at 0xbef58c09
  [5] VMError::report_and_die(0xbad1aaec), at 0xbef5825d
  [6] report_assertion_failure(0xbf37fbf0, 0x1c73, 0xbf37fbb0), at 0xbe6ede57
  [7] PushOrMarkClosure::do_oop(0xbad1abc4, 0xb08d5010), at 0xbe6c11a6
  [8] objArrayKlass::oop_oop_iterate_nv(0xb6c8e4f8, 0xbad1ac1c, 0xbad1abc4), at 0xbecac6ed
  [9] MarkFromRootsClosure::scanOopsInOop(0xbad1ad1c, 0xb08d4fe0), at 0xbe6bf240
  [10] MarkFromRootsClosure::do_bit(0xbad1ad1c, 0x3353f8), at 0xbe6be88f
  [11] BitMap::iterate(0x80ecd80, 0xbad1ad1c, 0x411e, 0x2c00000), at 0xbe47312a
  [12] CMSCollector::do_marking_st(0x80ecc68, 0x1), at 0xbe6b1dfe
  [13] CMSCollector::markFromRootsWork(0x80ecc68, 0x1), at 0xbe6afbab
  [14] CMSCollector::markFromRoots(0x80ecc68, 0x1), at 0xbe6af90a
  [15] CMSCollector::collect_in_background(0x80ecc68, 0x0), at 0xbe6aab03
  [16] ConcurrentMarkSweepThread::run(0x810d800), at 0xbe6c92f2
  [17] java_start(0x810d800), at 0xbecc5722
  [18] _thr_setup(0xbde70800), at 0xbff2fd36
=>[19] _lwp_start(), at 0xbff30020
  [20] 0x0(), at 0xffffffffffffffff
-----------------------------------------------------------------------