Comment 61 for bug 187671

if im not mistaken (which i might), addressing under 64bit is of 40bit instead of 32bit, maybe you need to add another 00 to the address. try eith reserve=0x00ffb00000,0x00100000 instead...

i might be really wrong though ;)