JDK 9 64 bit(fastdebug & product) crash with following options "-XX:+AlwaysPreTouch -XX:+DumpSharedSpaces" starting with b139 on my Linux-x64 system:
java -XX:+AlwaysPreTouch -XX:+DumpSharedSpaces -version
Allocated shared space: 50577408 bytes at 0x0000000800000000
Loading classes to share ...
Loading classes to share: done.
Rewriting and linking classes ...
Rewriting and linking classes: done
Number of classes 1178
    instance classes = 1164
    obj array classes = 6
    type array classes = 8
Updating ConstMethods ... done.
Removing unshareable information ... done.
# To suppress the following error report, specify this argument
# after -XX: or in .hotspotrc: SuppressErrorAt=/g1PageBasedVirtualSpace.cpp:265
#
# A fatal error has been detected by the Java Runtime Environment:
#
# Internal Error (/HUDSON/workspace/9-2-build-linux-amd64-phase2/jdk9/5571/hotspot/src/share/vm/gc/g1/g1PageBasedVirtualSpace.cpp:265), pid=6703, tid=6781
# guarantee(pretouch_gang != NULL) failed: No pretouch gang specified.
#
# JRE version: (9.0+139) (fastdebug build )
# Java VM: Java HotSpot(TM) 64-Bit Server VM (fastdebug 9-ea+139, mixed mode, tiered, compressed oops, g1 gc, linux-amd64)
# Core dump will be written. Default location: Core dumps may be processed with "/usr/share/apport/apport %p %s %c %P" (or dumping to /home/ddmitriev/bundles/jdk-9/b139/jdk-9/fastdebug/bin/core.6703)
#
# An error report file with more information is saved as:
# /home/ddmitriev/bundles/jdk-9/b139/jdk-9/fastdebug/bin/hs_err_pid6703.log
Phoning home...
Using server: 10.161.186.18, port 4711
#
# If you would like to submit a bug report, please visit:
# http://bugreport.java.com/bugreport/crash.jsp
#

hs_err_pid6703.log is attached.

32 bit version works fine.

b139 contains several fixes in memory pretouch(JDK-8157952) and CDS(JDK-8078644). Probably one of these fixes introduces regression.

UPDATE: Failed guarantee was added as part of the fix for JDK-8157952 "Parallelize Memory Pretouch"