VM crashed with SIGSEGV VirtualMemoryTracker::add_reserved_region

Jdk 9 b40 - strange NMT failure:

./9b40/bin/java -version
java version "1.9.0-ea"
Java(TM) SE Runtime Environment (build 1.9.0-ea-b40)
Java HotSpot(TM) 64-Bit Server VM (build 1.9.0-ea-b40, mixed mode)

./9b40/bin/java -version -XX:NativeMemoryTracking=summary
#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007f2fd66f6773, pid=9232, tid=139843427251968
#
# JRE version: (9.0-b40) (build )
# Java VM: Java HotSpot(TM) 64-Bit Server VM (1.9.0-ea-b40 mixed mode linux-amd64 compressed oops)
# Problematic frame:
# V [libjvm.so+0xa12773] VirtualMemoryTracker::add_reserved_region(unsigned char*, unsigned long, NativeCallStack const&, MemoryType, bool)+0x93
#
# Core dump written. Default location: /export/home/gtee/tmp/jdk/core or core.9232
#
# An error report file with more information is saved as:
# /export/home/gtee/tmp/jdk/hs_err_pid9232.log
Phoning home...
Using server: 10.161.186.18, port 4711
#
# If you would like to submit a bug report, please visit:
# http://bugreport.java.com/bugreport/crash.jsp
#
Aborted (core dumped)

The same on 8u40 b16:

./8u40b16/bin/java -version
java version "1.8.0_40-ea"
Java(TM) SE Runtime Environment (build 1.8.0_40-ea-b16)
Java HotSpot(TM) 64-Bit Server VM (build 25.40-b20, mixed mode)

./8u40b16/bin/java -version -XX:NativeMemoryTracking=summary
#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007ff6bbcd1be7, pid=9886, tid=140697678300928
#
# JRE version: (8.0_40-b16) (build )
# Java VM: Java HotSpot(TM) 64-Bit Server VM (25.40-b20 mixed mode linux-amd64 compressed oops)
# Problematic frame:
# V [libjvm.so+0xaa4be7] VirtualMemoryTracker::add_reserved_region(unsigned char*, unsigned long, NativeCallStack const&, MemoryType, bool)+0x97
#
# Core dump written. Default location: /export/home/gtee/tmp/jdk/core or core.9886
#
# An error report file with more information is saved as:
# /export/home/gtee/tmp/jdk/hs_err_pid9886.log
Phoning home...
Using server: 10.161.186.18, port 4711
#
# If you would like to submit a bug report, please visit:
# http://bugreport.java.com/bugreport/crash.jsp
#
Aborted (core dumped)

Reproduced on Oracle linux 6.3 and 6.4, Ubuntu 14.04(x64)

Reproducible: always
No any core or hs_err attached due to easy to reproduce.

Behavior on Ubuntu (linux-i586):
./b16/bin/java -version
java version "1.8.0_40-ea"
Java(TM) SE Runtime Environment (build 1.8.0_40-ea-b16)
Java HotSpot(TM) Server VM (build 25.40-b20, mixed mode)

./b16/bin/java -version -XX:NativeMemoryTracking=summary
Segmentation fault (core dumped)
---
./b40/bin/java -version
java version "1.9.0-ea"
Java(TM) SE Runtime Environment (build 1.9.0-ea-b40)
Java HotSpot(TM) Server VM (build 1.9.0-ea-b40, mixed mode)

./b40/bin/java -version -XX:NativeMemoryTracking=summary
Segmentation fault (core dumped)