Biographical profiler crashes on trivial program

The following testcase from #11627 (closed) crashes when run with -hb:

import Data.List
main = print $ length $ show (foldl' (*) 1 [1..100000] :: Integer)

For instance,

$ ghc-stage2 T11627.hs -prof -O -debug
$ ./T11627 +RTS -DS -hb
T11627: internal error: ASSERTION FAILED: file rts/LdvProfile.c, line 48

    (GHC version 8.9.0.20190618 for x86_64_unknown_linux)
    Please report this as a GHC bug:  https://www.haskell.org/ghc/reportabug
Aborted

This was discussed in !1118 (closed), which sought to remove the traversal of the nursery from the LDV profiler's census. However, the above crash appears to be due to us walking to an object living in a nursery killed in a previous nursery collection.