The crash happens in JNI code and is reproducible with all PKCS11 backends that support SunTlsKeyMaterial. Example crash report:

#
# A fatal error has been detected by the Java Runtime Environment:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x00007ffb6ed3abba, pid=18548, tid=2760
#
# JRE version: Java(TM) SE Runtime Environment (25.0) (build 25-internal-adhoc.daniel.jdk)
# Java VM: Java HotSpot(TM) 64-Bit Server VM (25-internal-adhoc.daniel.jdk, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, windows-amd64)
# Problematic frame:
# V [jvm.dll+0x48abba] jni_GetObjectField+0xea

the crash is caused by a mismatch between the mechanism and the parameter object type. Reproducer based on the existing PKCS11Test attached.