If the collection set is empty and there are regions which can be promoted in place, then the init-update-refs safepoint will not retire TLABs. As a consequence, the update references phase may walk into unallocated memory and crash.