Patch already posted as it's the same patch for BZ 1545016.
Reproduced the issue on the following builds Build information, qemu-kvm-ma-2.10.0-21.el7.ppc64le kernel-3.10.0-842.el7.ppc64le (both host and guest) Steps,please refer to comment0 /usr/libexec/qemu-kvm -name test -machine pseries,accel=kvm,usb=off -m 4G -smp 4,sockets=1,cores=4,threads=1 -uuid 8aeab7e2-f341-4f8c-80e8-59e2968d85c2 -realtime mlock=off -rtc base=utc -device virtio-scsi-pci,bus=pci.0,id=scsi0,addr=0x3 -drive file=rhel75-ppc64le-virtio-scsi.qcow2,if=none,id=drive-scsi0-0-0-0,format=qcow2,cache=none -device scsi-hd,bus=scsi0.0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0,bootindex=1 -drive if=none,id=drive-scsi0-0-1-0,readonly=on -device scsi-cd,bus=scsi0.0,drive=drive-scsi0-0-1-0,bootindex=2,id=scsi0-0-1 -msg timestamp=on -device nec-usb-xhci -device usb-tablet,id=tablet1 -qmp tcp:0:5556,server,nowait -vnc :12 -chardev socket,id=serial_id_serial0,path=/tmp/SS,server,nowait -device spapr-vty,reg=0x30000000,chardev=serial_id_serial0 -monitor stdio -vga std -device usb-kbd -device virtio-net-pci,id=net0,netdev=netdev0,bus=pci.0,addr=0x9 -netdev tap,script=/etc/qemu-ifup,id=netdev0 -incoming tcp:0:5800 QEMU 2.10.0 monitor - type 'help' for more information (qemu) 2018-03-02T05:08:49.560146Z qemu-kvm: htab_load() bad index 2080344 (0+-2648 entries) in htab stream (htab_shift=25) 2018-03-02T05:08:49.560245Z qemu-kvm: error while loading state section id 542(spapr/htab) 2018-03-02T05:08:49.561228Z qemu-kvm: load of migration failed: Invalid argument
The backport has missed the GA window so it is not included in qemu-kvm-ma-2.10.0-21.el7.ppc64le
Marking as TestOnly, since the actual fix will come from the qemu-kvm-rhev code base via bug 1545016.
*** Bug 1552627 has been marked as a duplicate of this bug. ***
I've had discussions about this bug with Karen and Mirek. The only real use case in which this would be triggered is memory hotplug, which is not supported with qemu-kvm-ma (only qemu-kvm-rhev). The reproducer still works because it uses debugfs to manually trigger a resize, which is not a supported procedure. Therefore, closing as WONTFIX.