How to reproduce:
1) jdk fastdebug build
2) make test TEST=test/hotspot/jtreg/gc/shenandoah/TestJcmdHeapDump.java JTREG="VM_OPTIONS=-XX:-UseCompressedOops"
3) It failed intermittently. In my local test, it failed on Linux/AArch64 and Linux/x86_64. The failure probability is about 1/2 runs

Bisect result:
I tried to bisect. The bisect result is JDK-8365932.
Since it's an intermittent error, I ran 10 times in each step of bisecting.

I tried the following commits. Only commit a) can pass.
    a) d5803aa78a8, i.e. the commit before JDK-8365932
    b) c8656449c28, i.e. the commit of JDK-8365932
    c) d8a1c1d04ca, i.e. the latest commit in jdk26 branch
    d) 938bbd5b6, i.e. the latest commit in mainline

Here shows the snippet of error log.
Attached please find the full log of 938bbd5b6

#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (/home/haosun/local-work/local-jdk-src/src/hotspot/share/runtime/mutex.cpp:460), pid=2868605, tid=2868608
# assert(false) failed: Attempting to acquire lock ShenandoahRequestedGC_lock/safepoint-2 out of order with lock AOTHeapLoading_lock/safepoint-2 -- possible deadlock
#
# JRE version: OpenJDK Runtime Environment (27.0) (fastdebug build 27-internal-adhoc.haosun.local-jdk-src)
# Java VM: OpenJDK 64-Bit Server VM (fastdebug 27-internal-adhoc.haosun.local-jdk-src, mixed mode, sharing, tiered, compressed class ptrs, shenandoah gc, linux-aarch64)
# Problematic frame:
# V [libjvm.so+0x151624c] Mutex::check_rank(Thread*)+0x5fc
#
# Core dump will be written. Default location: Determined by the following: "/usr/share/apport/apport -p%p -s%s -c%c -d%d -P%P -u%u -g%g -- %E" (alternatively, falling back to /mnt/local-storage/haosun/work/local-build-fastdebug/test-support/jtreg_test_hotspot_jtreg_gc_shenandoah_TestJcmdHeapDump_java/scratch/5/core.2868605)
#
# If you would like to submit a bug report, please visit:
# https://bugreport.java.com/bugreport/crash.jsp
#