Happened in nightly testing:
# Internal Error (/tmp/jprt/P1/140649.ap31282/source/src/share/vm/memory/blockOffsetTable.cpp:588), pid=26818, tid=15
# assert(_bottom<= addr && addr<_end) failed: addr must be covered by this Array

Stack Trace:
V [libjvm.so+0xd812bc] void VMError::report_and_die()+0x7e0;;
V [libjvm.so+0x4d2d58] void report_vm_error(const char*,int,const char*,const char*)+0x74;;
V [libjvm.so+0xd7fea8] void VMError::report(outputStream*)+0x9c0;;
V [libjvm.so+0xd812bc] void VMError::report_and_die()+0x7e0;;
V [libjvm.so+0x4d2d58] void report_vm_error(const char*,int,const char*,const char*)+0x74;;
V [libjvm.so+0x1ff4c0] HeapWord*BlockOffsetArrayNonContigSpace::block_start_careful(const void*)const+0xa4;;
V [libjvm.so+0x47d1a4] void CMSConcMarkingTask::do_scan_and_mark(int,CompactibleFreeListSpace*)+0x298;;
V [libjvm.so+0x47c808] void CMSConcMarkingTask::work(int)+0x114;;
V [libjvm.so+0xdbbb7c] void YieldingFlexibleGangWorker::loop()+0x158;;
V [libjvm.s o+0xb19d2c] java_start+0x264;;