Host: stt-mac-01, Intel Macmini5,3 2000 MHz, 8 cores, 4G, MacOSX / Mac OS X Unknown, x86_64 
Aurora: http://aurora.ru.oracle.com/functional/faces/RunDetails.xhtml?names=490933.8u20_VM_promotion-611#vm.gc%20%28tonga%29_gc/gctests/RememberedSet
hs_err: http://aurora-ds3.us.oracle.com:9502/runs%2F490933.8u20_VM_promotion-611/results/ResultDir/RememberedSet/hs_err_pid56128.log


[2014-05-22T06:02:57.09] #
[2014-05-22T06:02:57.09] # A fatal error has been detected by the Java Runtime Environment:
[2014-05-22T06:02:57.09] #
[2014-05-22T06:02:57.10] #  SIGSEGV (0xb) at pc=0x000000010ef836d1, pid=56128, tid=19715
[2014-05-22T06:02:57.10] #
[2014-05-22T06:02:57.10] # JRE version: Java(TM) SE Runtime Environment (8.0_20-b15) (build 1.8.0_20-ea-b15)
[2014-05-22T06:02:57.10] # Java VM: Java HotSpot(TM) 64-Bit Server VM (25.20-b15 compiled mode bsd-amd64 compressed oops)
[2014-05-22T06:02:57.10] # Problematic frame:
[2014-05-22T06:02:57.10] # V  [libjvm.dylib+0x3836d1]  ServiceUtil::visible_oop(oopDesc*)+0x39

Also bigapps/Kitchensink:

Host:  scaaa573.us.oracle.com, Solaris / Solaris 11, i86pc 
Aurora: http://aurora.ru.oracle.com/functional/faces/RunDetails.xhtml?names=490933.8u20_VM_promotion-269
hs_err: http://scaaa008.us.oracle.com:9502/runs%2F490933.8u20_VM_promotion-269/results/kitchensink/hs_err_pid28625.log

#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGSEGV (0xb) at pc=0xfffffd7e45df4554, pid=28625, tid=59
#
# JRE version: Java(TM) SE Runtime Environment (8.0_20-b15) (build 1.8.0_20-ea-b15)
# Java VM: Java HotSpot(TM) 64-Bit Server VM (25.20-b15 mixed mode solaris-amd64 )
# Problematic frame:
# V  [libjvm.so+0xee4554]  bool ServiceUtil::visible_oop(oopDesc*)+0x28
#
# Core dump written. Default location: /scratch/export/local/aurora/sandbox/results/kitchensink/core or core.28625
#
# If you would like to submit a bug report, please visit:
#   http://bugreport.sun.com/bugreport/crash.jsp
#

---------------  T H R E A D  ---------------

Current thread (0x0000000000894000):  JavaThread "Finalizer" daemon [_thread_in_vm, id=59, stack(0xfffffd7fc0312000,0xfffffd7fc0412000)]

siginfo: si_signo: 11 (SIGSEGV), si_code: 1 (SEGV_MAPERR), si_addr: 0xfffffd7e45df4554
Register to memory mapping:

RAX=0xfffffd7e4667c7a7: UseSharedSpaces+0x227 in /scratch/export/local/aurora/CommonData/jdk/jre/lib/amd64/server/libjvm.so at 0xfffffd7e44f10000
RBX=0x38fffffd7f12c2f6 is an unknown value
RCX=0xfffffd7e467782c0: _edata+0x1c51b in /scratch/export/local/aurora/CommonData/jdk/jre/lib/amd64/server/libjvm.so at 0xfffffd7e44f10000
RDX=0x38fffffd5e40780e is an unknown value
RSP=0xfffffd7fc0411570 is pointing into the stack for thread: 0x0000000000894000
RBP=0xfffffd7fc0411580 is pointing into the stack for thread: 0x0000000000894000
RSI=0xfffffd5eba65d1b1 is pointing into object: 0xfffffd5eba65d178
java.lang.ref.Finalizer 
 - klass: 'java/lang/ref/Finalizer'
RDI=0x38fffffd7f12c2f6 is an unknown value
R8 =0x000000000000082b is an unknown value
R9 =0xfffffd5f3e1bd830 is an oop
[I 
 - klass: {type array int}
 - length: 1
R10=0xfffffd7e461791ac: JVM_handle_solaris_signal+0xf17ac in /scratch/export/local/aurora/CommonData/jdk/jre/lib/amd64/server/libjvm.so at 0xfffffd7e44f10000
R11=0xfffffd7fed1ef060 is at entry_point+0 in (nmethod*)0xfffffd7fed1eee50
R12=0xfffffd5eba65d139 is pointing into object: 0xfffffd5eba65d138
java.lang.ref.Finalizer 
 - klass: 'java/lang/ref/Finalizer'
R13=0x00000000008947f8 is an unknown value
R14=0xfffffd5eba65d13b is pointing into object: 0xfffffd5eba65d138
java.lang.ref.Finalizer 
 - klass: 'java/lang/ref/Finalizer'
R15=0x0000000000894000 is a thread


Stack: [0xfffffd7fc0312000,0xfffffd7fc0412000],  sp=0xfffffd7fc0411570,  free space=1021k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V  [libjvm.so+0xee4554]  bool ServiceUtil::visible_oop(oopDesc*)+0x28
V  [libjvm.so+0x1141521]  void ObjectMonitor::enter(Thread*)+0x12d
V  [libjvm.so+0x130dc93]  void ObjectSynchronizer::fast_enter(Handle,BasicLock*,bool,Thread*)+0xe3
V  [libjvm.so+0x126937e]  void SharedRuntime::complete_monitor_locking_C(oopDesc*,BasicLock*,JavaThread*)+0x1d2
v  ~RuntimeStub::_complete_monitor_locking_Java
v  ~StubRoutines::call_stub
V  [libjvm.so+0xc9788a]  void JavaCalls::call_helper(JavaValue*,methodHandle*,JavaCallArguments*,Thread*)+0xa26
V  [libjvm.so+0xc940eb]  void JavaCalls::call_virtual(JavaValue*,KlassHandle,Symbol*,Symbol*,JavaCallArguments*,Thread*)+0x45b
V  [libjvm.so+0xc944d4]  void JavaCalls::call_virtual(JavaValue*,Handle,KlassHandle,Symbol*,Symbol*,Thread*)+0x60
V  [libjvm.so+0xdf13f0]  void thread_entry(JavaThread*,Thread*)+0xb8
V  [libjvm.so+0x1376c4c]  void JavaThread::run()+0x52c
V  [libjvm.so+0x11648f4]  java_start+0x99c
C  [libc.so.1+0x12257d]  _thrp_setup+0xa5
C  [libc.so.1+0x122820]  _lwp_start+0x0

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
v  ~RuntimeStub::_complete_monitor_locking_Java
J 954 C2 java.lang.ref.Finalizer.access$100(Ljava/lang/ref/Finalizer;Lsun/misc/JavaLangAccess;)V (6 bytes) @ 0xfffffd7fed1efaa4 [0xfffffd7fed1ef060+0xa44]
j  java.lang.ref.Finalizer$FinalizerThread.run()V+45
v  ~StubRoutines::call_stub

Hard to reproduce