I saw this crash in GHA testing for one of my PR - https://github.com/openjdk/jdk/pull/26764#issuecomment-3233848145

#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x0000000103bf9bbc, pid=12937, tid=29447
#
# JRE version: OpenJDK Runtime Environment (26.0) (build 26-internal-ashu-mehra-eb641188b3a0c241d95292a834404958c3e4e5dd)
# Java VM: OpenJDK 64-Bit Server VM (26-internal-ashu-mehra-eb641188b3a0c241d95292a834404958c3e4e5dd, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, bsd-aarch64)
# Problematic frame:
# V [libjvm.dylib+0x2f5bbc] void StackChunkFrameStream<(ChunkFrames)1>::next<RegisterMap>(RegisterMap*, bool)+0xbc
#

Back trace from error log:

Stack: [0x0000000170f80000,0x0000000171183000], sp=0x0000000171181890, free space=2054k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [libjvm.dylib+0x2f5bbc] void StackChunkFrameStream<(ChunkFrames)1>::next<RegisterMap>(RegisterMap*, bool)+0xbc
V [libjvm.dylib+0xa4bca0] stackChunkOopDesc::sender(frame const&, RegisterMap*)+0x15c
V [libjvm.dylib+0xb85524] vframeStream::vframeStream(oopDesc*, Handle)+0xc8
V [libjvm.dylib+0xb2009c] GetThreadSnapshotHandshakeClosure::do_thread(Thread*)+0x588
V [libjvm.dylib+0xb1f67c] ThreadSnapshotFactory::get_thread_snapshot(_jobject*, JavaThread*)+0x29c
V [libjvm.dylib+0x5dc720] JVM_CreateThreadSnapshot+0xa0
j jdk.internal.vm.ThreadSnapshot.create(Ljava/lang/Thread;)Ljdk/internal/vm/ThreadSnapshot;+0 java.base@26-internal
j jdk.internal.vm.ThreadSnapshot.of(Ljava/lang/Thread;)Ljdk/internal/vm/ThreadSnapshot;+1 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThread(Ljava/lang/Thread;Ljdk/internal/vm/ThreadDumper$JsonWriter;)Z+5 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreads(Ljdk/internal/vm/ThreadContainer;Ljdk/internal/vm/ThreadDumper$JsonWriter;)V+95 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreadsToJson(Ljdk/internal/vm/ThreadDumper$TextWriter;)V+64 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreadsToFile(Ljava/lang/String;ZZ)[B+62 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreadsToJson(Ljava/lang/String;Z)[B+24 java.base@26-internal
v ~StubRoutines::Stub Generator call_stub_stub 0x0000000114b44454
V [libjvm.dylib+0x4fc1b4] JavaCalls::call_helper(JavaValue*, methodHandle const&, JavaCallArguments*, JavaThread*)+0x3dc
V [libjvm.dylib+0x4fb6d0] JavaCalls::call_static(JavaValue*, Klass*, Symbol*, Symbol*, JavaCallArguments*, JavaThread*)+0xf0
V [libjvm.dylib+0x3893c8] ThreadDumpToFileDCmd::dumpToFile(Symbol*, Symbol*, char const*, bool, JavaThread*)+0xfc
V [libjvm.dylib+0x38d93c] DCmd::Executor::parse_and_execute(char const*, char, JavaThread*)+0x3a8
V [libjvm.dylib+0x14b10c] jcmd(AttachOperation*, attachStream*)+0xb8
V [libjvm.dylib+0x148fd8] AttachListenerThread::thread_entry(JavaThread*, JavaThread*)+0x37c
V [libjvm.dylib+0x510a30] JavaThread::thread_main_inner()+0x9c
V [libjvm.dylib+0xb140c4] Thread::call_run()+0xc8
V [libjvm.dylib+0x8adbfc] thread_native_entry(Thread*)+0x118
C [libsystem_pthread.dylib+0x6f94] _pthread_start+0x88
Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j jdk.internal.vm.ThreadSnapshot.create(Ljava/lang/Thread;)Ljdk/internal/vm/ThreadSnapshot;+0 java.base@26-internal
j jdk.internal.vm.ThreadSnapshot.of(Ljava/lang/Thread;)Ljdk/internal/vm/ThreadSnapshot;+1 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThread(Ljava/lang/Thread;Ljdk/internal/vm/ThreadDumper$JsonWriter;)Z+5 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreads(Ljdk/internal/vm/ThreadContainer;Ljdk/internal/vm/ThreadDumper$JsonWriter;)V+95 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreadsToJson(Ljdk/internal/vm/ThreadDumper$TextWriter;)V+64 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreadsToFile(Ljava/lang/String;ZZ)[B+62 java.base@26-internal
j jdk.internal.vm.ThreadDumper.dumpThreadsToJson(Ljava/lang/String;Z)[B+24 java.base@26-internal
v ~StubRoutines::Stub Generator call_stub_stub 0x0000000114b44454

I ran this test 1000 times on a macos system but it didn't recreate. Core dump is not available.