This is a copy of 7155505 since that bug id was going to be used for other tracking purposes. Various GC related crashes are occurring with what look like stale oops in 64 bit only. Turning on -XX:+VerifyBeforeGC shows failures of this sort:

#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (instanceKlass.cpp:2408), pid=5760, tid=1107667264
# guarantee(false) failed: boom
#
# JRE version: 7.0_04-b16
# Java VM: Java HotSpot(TM) 64-Bit Server VM (23.0-b17 mixed mode linux-amd64 compressed oops)
# Failed to write core dump. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# /var/opt/sun/cacao2/instances/oem-ec/hs_err_pid5760.log
#
# If you would like to submit a bug report, please visit:
# http://bugreport.sun.com/bugreport/crash.jsp
#

Running with -XX:+VerifyRememberedSets indicates that it's missing card marks.

#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (cardTableRS.cpp:356), pid=8838, tid=1085045056
# guarantee(obj == NULL || (HeapWord*)obj >= _boundary) failed: pointer 0x00000006aba68610 at 0x00000007122d9c9c on clean card crosses boundary0x0000000712150000## JRE version: 7.0_02-b13
# Java VM: Java HotSpot(TM) 64-Bit Server VM (22.0-b10-never-hsx22 mixed mode linux-amd64 compressed oops)
# Core dump written. Default location: /var/opt/sun/cacao2/instances/oem-ec/core or core.8838
#
# An error report file with more information is saved as:
# /var/opt/sun/cacao2/instances/oem-ec/hs_err_pid8838.log
#
# If you would like to submit a bug report, please visit:
# http://bugreport.sun.com/bugreport/crash.jsp
#

It happens with different collectors but seems to be sensitive to GC heap size settings. Changing the max heap value will cause the problem to appear or disappear. Changing other flags like -XX:-UseCompressedOops or turning off TieredCompilation may cause it to disappear too.