Original found by this test:

$ CONF=linux-x86_64-server-fastdebug make images test TEST=java/lang/ScopedValue/StressStackOverflow.java TEST_VM_OPTS="-XX:+UseShenandoahGC"

STDOUT:
#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (/home/shipilev/shipilev-jdk/src/hotspot/share/gc/shenandoah/shenandoahMarkBitMap.cpp:127), pid=36594, tid=36748
# assert(ShenandoahHeap::heap()->is_in(addr)) failed: Trying to access bitmap 0x00007f0d180d17e0 for address 0x0000000000000000 not in the heap.
#
# JRE version: OpenJDK Runtime Environment (22.0) (fastdebug build 22-internal-adhoc.shipilev.shipilev-jdk)
# Java VM: OpenJDK 64-Bit Server VM (fastdebug 22-internal-adhoc.shipilev.shipilev-jdk, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, shenandoah gc, linux-amd64)
# Problematic frame:
# V [libjvm.so+0x156c625] ShenandoahMarkBitMap::check_mark(HeapWordImpl**) const+0x125
#

Stack: [0x00007f53342f4000,0x00007f53343f4000], sp=0x00007f53343f2650, free space=1017k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [libjvm.so+0x156c625] ShenandoahMarkBitMap::check_mark(HeapWordImpl**) const+0x125 (shenandoahMarkBitMap.cpp:127)
V [libjvm.so+0x158a8e9] ShenandoahSATBMarkQueueSet::filter(SATBMarkQueue&)+0x5b9 (shenandoahMarkBitMap.inline.hpp:94)
V [libjvm.so+0x149ac13] SATBMarkQueueSet::flush_queue(SATBMarkQueue&)+0x13 (satbMarkQueue.cpp:225)
V [libjvm.so+0xceb146] HandshakeOperation::do_handshake(JavaThread*)+0x46 (handshake.cpp:326)
V [libjvm.so+0xcedde0] VM_HandshakeAllThreads::doit()+0x5e0 (handshake.cpp:662)
V [libjvm.so+0x17ef99e] VM_Operation::evaluate()+0x21e (vmOperations.cpp:71)
V [libjvm.so+0x181171a] VMThread::evaluate_operation(VM_Operation*)+0x15a (vmThread.cpp:281)
V [libjvm.so+0x18123ee] VMThread::inner_execute(VM_Operation*)+0x22e (vmThread.cpp:435)
V [libjvm.so+0x181272c] VMThread::loop()+0x6c (vmThread.cpp:502)
V [libjvm.so+0x1812862] VMThread::run()+0x92 (vmThread.cpp:175)
V [libjvm.so+0x171994f] Thread::call_run()+0x12f (thread.cpp:217)
V [libjvm.so+0x135105e] thread_native_entry(Thread*)+0x11e (os_linux.cpp:783)