Usage of HugeTLBFS, UseLargePagesInMetaspace and huge SurvivorAlignmentInBytes (4k) cause crashes in CMBitMapClosure::do_bit:

#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007facc84f9ee5, pid=9980, tid=140377864763136
#
# JRE version: Java(TM) SE Runtime Environment (8.0_40-b09) (build 1.8.0_40-ea-fastdebug-b09)
# Java VM: Java HotSpot(TM) 64-Bit Server VM (25.40-b15-internal-201410152225.cccheung.jdk8u-hs-only-fastdebug mixed mode linux-amd64 compressed oops)
# Problematic frame:
# V [libjvm.so+0x3fbee5] oopDesc::size_given_klass(Klass*)+0x25
#
# Failed to write core dump. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# If you would like to submit a bug report, please visit:
# http://bugreport.sun.com/bugreport/crash.jsp
#
...
Stack: [0x00007fac44b37000,0x00007fac44c38000], sp=0x00007fac44c36930, free space=1022k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
V [libjvm.so+0x3fbee5] oopDesc::size_given_klass(Klass*)+0x25
V [libjvm.so+0x6c45b6] CMTask::scan_object(oop)+0xe6
V [libjvm.so+0x6cff7b] CMBitMapClosure::do_bit(unsigned long)+0x13b
V [libjvm.so+0x6c7593] CMTask::do_marking_step(double, bool, bool)+0x1073
V [libjvm.so+0x6d0d4b] CMConcurrentMarkingTask::work(unsigned int)+0x19b
V [libjvm.so+0x1027cf6] GangWorker::loop()+0x2b6
V [libjvm.so+0xd67988] java_start(Thread*)+0x108

Issue could be reproduced on linux (both 32 & 64 bit, both client and server, with mixed, comp and int mode) with 8u40 product & fastdebug bits starting from b11.
Issue could not be reproduced with jdk9-b35 and jdk8u40-b10.