CMS: Crash at CompactibleFreeListSpace::forward

A crash was observed on Solaris 10u8 with Java HotSpot(TM) Server VM (16.0-b13) for solaris-sparc JRE (1.6.0_18-b07), built on Dec 17 2009 14:12:56.

The fatal error log called hs_err_pid20105.log is attached to this CR.

(dbx) where -l -v
current thread: t@7
  [1] libc.so.1:__lwp_kill(0x0, 0x6, 0x0, 0x6, 0xffbffeff, 0x0), at 0xff24d1e4
  [2] libc.so.1:raise(0x6, 0x0, 0xff2b50d0, 0xff22c928, 0xffffffff, 0x6), at 0xff1e654c
  [3] libc.so.1:abort(0x5def8, 0x1, 0xfeb33728, 0xee930, 0xff2b34d8, 0x0), at 0xff1c1bac
  [4] libjvm.so:os::abort(0x1, 0xfee13fc4, 0x1, 0xfedfa000, 0x19fc4, 0x19c00), at 0xfeb293a4
  [5] libjvm.so:VMError::report_and_die(0xfee38714, 0xfee2b778, 0x1, 0xfee3e340, 0xfee13f9c, 0x0), at 0xfec4c050
  [6] libjvm.so:JVM_handle_solaris_signal(0xb, 0x5ee7f318, 0x5ee7f060, 0xb1400, 0x84800, 0x28), at 0xfe5c0c2c
  [7] libc.so.1:__sighndlr(0xb, 0x5ee7f318, 0x5ee7f060, 0xfe5c0168, 0x0, 0x1), at 0xff24961c
  ---- called from signal handler with signal 11 (SIGSEGV) ------
=>[8] libjvm.so:CompactibleFreeListSpace::forward(0x379e6fe0, 0xd75d8cf8, 0x5ee7f52c, 0xfee3add4, 0x379e6fe0, 0x74048), at 0xfe800424
  [9] libjvm.so:CompactibleFreeListSpace::prepare_for_compaction(0xc0008, 0x5ee7f52c, 0x379e6fe0, 0xfe801d84, 0x86fa8fd0, 0xfe801fec), at 0xfe804630
  [10] libjvm.so:Generation::prepare_for_compaction(0x4b7b0, 0x5ee7f52c, 0xfe80446c, 0xfee26b04, 0xfe822a3c, 0xfee27978), at 0xfe8c0b20
  [11] libjvm.so:GenCollectedHeap::prepare_for_compaction(0x61ae8, 0xfed028e5, 0x0, 0x61aec, 0x4, 0x1), at 0xfe8b9f70
  [12] libjvm.so:GenMarkSweep::invoke_at_safepoint(0x1, 0xfee2622c, 0xfee34000, 0x61ae8, 0xfee3b800, 0xfee34000), at 0xfe8badd4
  [13] libjvm.so:CMSCollector::do_compaction_work(0x86e08, 0xc0008, 0x0, 0x1, 0x87148, 0x717c8), at 0xfe82449c
  [14] libjvm.so:CMSCollector::acquire_control_and_collect(0x86e08, 0x7bdd0, 0xfee27c00, 0xfbc00000, 0x1, 0x1), at 0xfe823f7c
  [15] libjvm.so:ConcurrentMarkSweepGeneration::collect(0x86e08, 0x0, 0x0, 0x4, 0x0, 0x1), at 0xfe823c34
  [16] libjvm.so:GenCollectedHeap::do_collection(0x61ae8, 0x717c8, 0x61b3c, 0x4, 0x1, 0x1), at 0xfe8b8040
  [17] libjvm.so:GenCollectorPolicy::satisfy_failed_allocation(0x5dc78, 0x4, 0x61ae8, 0xfedf116a, 0x0, 0xa), at 0xfe7ff9a8
  [18] libjvm.so:VM_GenCollectForAllocation::doit(0x5489edd4, 0x61ae8, 0x9, 0x8, 0x62d28, 0x62cf8), at 0xfec4cb30
  [19] libjvm.so:VM_Operation::evaluate(0x5489edd4, 0x59f88, 0xfedfa000, 0xfee, 0x7f7415, 0x3d400), at 0xfe5e0024
  [20] libjvm.so:VMThread::evaluate_operation(0x59f88, 0x5489edd4, 0x86088, 0x7f7415, 0x86090, 0xfedfa000), at 0xfec4f7b4
  [21] libjvm.so:VMThread::loop(0x0, 0x40530, 0x31ab0, 0x1, 0xfee4e4c8, 0x64de8), at 0xfec4fd4c
  [22] libjvm.so:VMThread::run(0x84800, 0x3c800, 0xfee3693c, 0xfedfa000, 0x3c93c, 0x3c800), at 0xfe65f7d8
  [23] libjvm.so:java_start(0x84800, 0x5887, 0xfedfa000, 0xfed469bd, 0x71888, 0xfee466ec), at 0xfeb28440

(dbx) regs
current thread: t@7
current frame: [8]
g0-g3 0x00000000 0xfee38a88 0x00061aec 0x00000000
g4-g7 0xfe84acb0 0x00014000 0x00000000 0xfee82a00
o0-o3 0x00000000 0x00050000 0x62800000 0xfe8d8ce4
o4-o7 0xfee3add4 0xfee4b000 0x5ee7f398 0xfe800400
l0-l3 0x00001010 0x379e6fe0 0x18815c0c 0x379e6fe4
l4-l7 0x379e6fe1 0xfe806e20 0x0005da98 0x00000000
i0-i3 0x379e6fe0 0xd75d8cf8 0x5ee7f52c 0xfee3add4
i4-i7 0x379e6fe0 0x00074048 0x5ee7f400 0xfe804630
y 0x00000000
psr 0xfe401006
pc 0xfe800424:forward+0x98 ld [0], %g1
npc 0xfe800428:forward+0x9c ba forward+0xb8 ! 0xfe800444