G1: assert(pre_val->is_oop_or_null(true)) in G1SATBCardTableModRefBS::write_ref_field_pre_work

Application crashes in compiled code after 12 minutes:

# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (/export/HUDSON/workspace/jdk7-2-build-solaris-amd64-product/jdk7/hotspot/src/share/vm/gc_implementation/g1/g1SATBCardTableModRefBS.cpp:50), pid=806, tid=37
# assert(pre_val->is_oop_or_null(true)) failed: Error
#
# JRE version: 7.0-b136
# Java VM: Java HotSpot(TM) 64-Bit Server VM (21.0-b06-fastdebug mixed mode solaris-amd64 compressed oops)

Current thread (0x0000000011e52000): JavaThread "[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'" daemon [_thread_in_vm, id=37, stack(0xfffffd7dd206d000,0xfffffd7dd216d000)]

Stack: [0xfffffd7dd206d000,0xfffffd7dd216d000], sp=0xfffffd7dd2169bb0, free space=1010k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [libjvm.so+0x25e8c9e] void VMError::report(outputStream*)+0x8c6;; void VMError::report(outputStream*)+0x8c6
V [libjvm.so+0x25e9ddd] void VMError::report_and_die()+0x4fd;; void VMError::report_and_die()+0x4fd
V [libjvm.so+0xe2f723] void report_vm_error(const char*,int,const char*,const char*)+0x55f;; void report_vm_error(const char*,int,const char*,const char*)+0x55f
V [libjvm.so+0x1048d45] void G1SATBCardTableModRefBS::write_ref_field_pre_work(unsigned*,oop)+0xa7d;; void G1SATBCardTableModRefBS::write_ref_field_pre_work(unsigned*,oop)+0xa7d
V [libjvm.so+0x670b07] void oop_store<unsigned>(__type_0*,oop)+0xff;; void oop_store<unsigned>(__type_0*,oop)+0xff
V [libjvm.so+0x2200afc] void Reflection::array_set(jvalue*,arrayOop,int,BasicType,Thread*)+0xa14;; void Reflection::array_set(jvalue*,arrayOop,int,BasicType,Thread*)+0xa14
V [libjvm.so+0x178d26f] JVM_SetArrayElement+0xdc3;; JVM_SetArrayElement+0xdc3
C [libjava.so+0x10c5d] Java_java_lang_reflect_Array_set+0x11;; Java_java_lang_reflect_Array_set+0x11
J java.lang.reflect.Array.set(Ljava/lang/Object;ILjava/lang/Object;)V

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
J java.lang.reflect.Array.set(Ljava/lang/Object;ILjava/lang/Object;)V
J weblogic.descriptor.internal.AbstractDescriptorBeanHelper._extendArray(Ljava/lang/Object;Ljava/lang/Class;Ljava/lang/Object;)Ljava/lang/Object;
j weblogic.j2ee.descriptor.wl.WeblogicEjbJarBeanImpl.addWeblogicEnterpriseBean(Lweblogic/j2ee/descriptor/wl/WeblogicEnterpriseBeanBean;)V+40
...