(XEN) Assertion 'oc > 0' failed at mm.c:628
(XEN) ----[ Xen-4.11-rcnb0  x86_64  debug=y   Not tainted ]----
(XEN) CPU:    1
(XEN) RIP:    e008:[<ffff82d080284a22>] mm.c#dec_linear_entries+0x12/0x20
(XEN) RFLAGS: 0000000000010246   CONTEXT: hypervisor (d14v3)
(XEN) rax: ffffffffffff0000   rbx: 4400000000000001   rcx: 0000000000189b0d
(XEN) rdx: 0400000000000000   rsi: 0000000000000008   rdi: ffff82e0031349c0
(XEN) rbp: ffff82e0031361a0   rsp: ffff8301bf15fc08   r8:  0000000000000000
(XEN) r9:  0000000000000200   r10: 0000000000000000   r11: 0000000000000000
(XEN) r12: ffff82e0031349c0   r13: 0000000000000000   r14: 10ffffffffffffff
(XEN) r15: 1000000000000000   cr0: 0000000080050033   cr4: 00000000000026e4
(XEN) cr3: 00000001b98de000   cr2: 00000000cd9ffe80
(XEN) fsb: 00000000c0e02000   gsb: 0000000000000000   gss: 0000000000000000
(XEN) ds: 0011   es: 0011   fs: 0031   gs: 0011   ss: 0000   cs: e008
(XEN) Xen code around <ffff82d080284a22> (mm.c#dec_linear_entries+0x12/0x20):
(XEN)  c1 47 1e 66 85 c0 7f 02 <0f> 0b c3 66 66 2e 0f 1f 84 00 00 00 00 00 41 54
(XEN) Xen stack trace from rsp=ffff8301bf15fc08:
(XEN)    ffff82d080288e3e 0000000000800063 ffff8301bf15ffff 4c00000000000002
(XEN)    ffff82e0031361a0 ffff82e0031349c0 ffff8301b970e000 0000000000000001
(XEN)    ffff82004000b000 0200000000000000 ffff82d08028945f 00000000000001fd
(XEN)    ffff82e0031349c0 ffff82d080288869 0000000000189a4e 0000000000000000
(XEN)    ffff8301bf15ffff 4400000000000001 ffff82e0031349c0 0000000000000000
(XEN)    00ffffffffffffff 10ffffffffffffff 1000000000000000 ffff82d080288e07
(XEN)    0000000101000206 ffff8301bf15ffff 4400000000000002 0000000000189a4e
(XEN)    ffff82e0031349c0 0000000000000000 ffff8301b970e000 ffff82008000c000
(XEN)    0000000000000000 ffff82d08028949f ffff82d0802906cd ffff8300bf9be000
(XEN)    00000001802a7eb2 ffff8301b970e000 0000000000000000 ffff8301b970e000
(XEN)    0000000000000007 ffff8300bf9be000 00007ff000000000 0000000000000000
(XEN)    ffff8301b970e000 ffff82e0031ab060 ffff82d0804b0058 ffff82d0804b0060
(XEN)    000000000018d583 000000000018d583 0000000000000004 0000000000189a4e
(XEN)    00000000cd9c9ce4 ffff82008000c018 0000000000000001 00000000cd9c9af4
(XEN)    ffff82d080386b30 0000000000000001 ffff8301bf15ffff ffff82d080295190
(XEN)    ffff8301bf15fe14 00000001ffffffff ffff82008000c000 0000000000000000
(XEN)    00007ff000000000 000000048036b1d8 cd7cc00000189a4e ffff8301bf15fef8
(XEN)    ffff8300bf9be000 00000000000001a0 00000000deadf00d 0000000000000004
(XEN)    00000000deadf00d ffff82d0803672fa ffff82d000007ff0 ffff82d000000000
(XEN)    ffff82d000000001 ffff82d0cd9c9ae8 ffff82d08036b1e4 ffff82d08036b1d8
(XEN) Xen call trace:
(XEN)    [<ffff82d080284a22>] mm.c#dec_linear_entries+0x12/0x20
(XEN)    [<ffff82d080288e3e>] mm.c#_put_page_type+0x13e/0x340
(XEN)    [<ffff82d08028945f>] mm.c#put_page_from_l2e+0xdf/0x110
(XEN)    [<ffff82d080288869>] free_page_type+0x2f9/0x790
(XEN)    [<ffff82d080288e07>] mm.c#_put_page_type+0x107/0x340
(XEN)    [<ffff82d08028949f>] put_page_type_preemptible+0xf/0x10
(XEN)    [<ffff82d0802906cd>] do_mmuext_op+0x73d/0x1810
(XEN)    [<ffff82d080295190>] compat_mmuext_op+0x430/0x450
(XEN)    [<ffff82d0803672fa>] pv_hypercall+0x3aa/0x430
(XEN)    [<ffff82d08036b1e4>] entry_int82+0x74/0xc0
(XEN)    [<ffff82d08036b1d8>] entry_int82+0x68/0xc0
(XEN)    [<ffff82d08036b1e4>] entry_int82+0x74/0xc0
(XEN)    [<ffff82d08036b1d8>] entry_int82+0x68/0xc0
(XEN)    [<ffff82d08036b1e4>] entry_int82+0x74/0xc0
(XEN)    [<ffff82d08036b1d8>] entry_int82+0x68/0xc0
(XEN)    [<ffff82d08036b1e4>] entry_int82+0x74/0xc0
(XEN)    [<ffff82d080368b6e>] do_entry_int82+0x1e/0x20
(XEN)    [<ffff82d08036b221>] entry_int82+0xb1/0xc0