This is reopen of JDK-7122737. I was unlucky to reproduce it with 110+ attempts, but now core file presences.

;; Using jvm: "/export/local/aurora/sandbox/sca/vmsqe/jdk/pit/8/fastdebug/linux-i586/jre/lib/i386/client/libjvm.so"
#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0xf6d6ef2d, pid=24584, tid=3807992688
#
# JRE version: Java(TM) SE Runtime Environment (8.0-b84) (build 1.8.0-ea-fastdebug-b84)
# Java VM: Java HotSpot(TM) Client VM (25.0-b26-internal-201304050410.amurillo.hs25-b26-snapshot-fastdebug compiled mode, sharing linux-x86 )
# Problematic frame:
# V [libjvm.so+0x605f2d] MarkSweep::follow_stack()+0x7d
#
# Core dump written. Default location: /export/local/aurora/sandbox/results/ResultDir/except007/core or core.24584
#
# If you would like to submit a bug report, please visit:
# http://bugreport.sun.com/bugreport/crash.jsp
#

--------------- T H R E A D ---------------

Current thread (0xf40db800): VMThread [stack: 0xe2f15000,0xe2f96000] [id=24596]

siginfo:si_signo=SIGSEGV: si_errno=0, si_code=1 (SEGV_MAPERR), si_addr=0x00000080;;

.... some info omitted ...

;;
Register to memory mapping:

EAX=0x80c0107c is pointing into metadata
EBX=
[error occurred during error reporting (printing register info), id 0xe0000000]

Stack: [0xe2f15000,0xe2f96000], sp=0xe2f94260, free space=508k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [libjvm.so+0x605f2d] MarkSweep::follow_stack()+0x7d;; MarkSweep::follow_stack()+0x7d
V [libjvm.so+0x6857b8] OopMapSet::all_do(frame const*, RegisterMap const*, OopClosure*, void (*)(oopDesc**, oopDesc**), OopClosure*)+0x608;; OopMapSet::all_do(frame const*, RegisterMap const*, OopClosure*, void (*)(oopDesc**, oopDesc**), OopClosure*)+0x608
V [libjvm.so+0x685902] OopMapSet::oops_do(frame const*, RegisterMap const*, OopClosure*)+0x32;; OopMapSet::oops_do(frame const*, RegisterMap const*, OopClosure*)+0x32
V [libjvm.so+0x37963f] frame::oops_do_internal(OopClosure*, CLDToOopClosure*, CodeBlobClosure*, RegisterMap*, bool)+0xcf;; frame::oops_do_internal(OopClosure*, CLDToOopClosure*, CodeBlobClosure*, RegisterMap*, bool)+0xcf
V [libjvm.so+0x7bc4d4] JavaThread::oops_do(OopClosure*, CLDToOopClosure*, CodeBlobClosure*)+0x1c4;; JavaThread::oops_do(OopClosure*, CLDToOopClosure*, CodeBlobClosure*)+0x1c4
V [libjvm.so+0x7c33fd] Threads::possibly_parallel_oops_do(OopClosure*, CLDToOopClosure*, CodeBlobClosure*)+0x5d;; Threads::possibly_parallel_oops_do(OopClosure*, CLDToOopClosure*, CodeBlobClosure*)+0x5d
V [libjvm.so+0x725228] SharedHeap::process_strong_roots(bool, bool, SharedHeap::ScanningOption, OopClosure*, CodeBlobClosure*, KlassClosure*)+0xc8;; SharedHeap::process_strong_roots(bool, bool, SharedHeap::ScanningOption, OopClosure*, CodeBlobClosure*, KlassClosure*)+0xc8
V [libjvm.so+0x3b3f58] G1MarkSweep::mark_sweep_phase1(bool&, bool)+0x78;; G1MarkSweep::mark_sweep_phase1(bool&, bool)+0x78
V [libjvm.so+0x3b4273] G1MarkSweep::invoke_at_safepoint(ReferenceProcessor*, bool)+0x113;; G1MarkSweep::invoke_at_safepoint(ReferenceProcessor*, bool)+0x113
V [libjvm.so+0x392382] G1CollectedHeap::do_collection(bool, bool, unsigned int)+0x822;; G1CollectedHeap::do_collection(bool, bool, unsigned int)+0x822
V [libjvm.so+0x395b3d] G1CollectedHeap::satisfy_failed_allocation(unsigned int, bool*)+0x1ad;; G1CollectedHeap::satisfy_failed_allocation(unsigned int, bool*)+0x1ad
V [libjvm.so+0x843b76] VM_G1CollectForAllocation::doit()+0x96;; VM_G1CollectForAllocation::doit()+0x96
V [libjvm.so+0x8426c2] VM_Operation::evaluate()+0x82;; VM_Operation::evaluate()+0x82
V [libjvm.so+0x83f56d] VMThread::evaluate_operation(VM_Operation*)+0xad;; VMThread::evaluate_operation(VM_Operation*)+0xad
V [libjvm.so+0x840bca] VMThread::loop()+0x65a;; VMThread::loop()+0x65a
V [libjvm.so+0x840e41] VMThread::run()+0xc1;; VMThread::run()+0xc1
V [libjvm.so+0x69cfb9] java_start(Thread*)+0x119;; java_start(Thread*)+0x119
C [libpthread.so.0+0x6725] start_thread+0xc5

JavaThread 0x08053c00 (nid = 24588) was being processed
Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
v ~RuntimeStub::fast_new_instance Runtime1 stub
J nsk.stress.except.except007.except007.run(Ljava/io/PrintStream;)I
J nsk.stress.except.except007.except007.run([Ljava/lang/String;Ljava/io/PrintStream;)I
J nsk.stress.except.except007.except007.main([Ljava/lang/String;)V
v ~StubRoutines::call_stub
VM_Operation (0xf673fb58): G1CollectForAllocation, mode: safepoint, requested by thread 0x08053c00