book3s_emulate.c 13.8 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
/*
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License, version 2, as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 *
 * Copyright SUSE Linux Products GmbH 2009
 *
 * Authors: Alexander Graf <agraf@suse.de>
 */

#include <asm/kvm_ppc.h>
#include <asm/disassemble.h>
#include <asm/kvm_book3s.h>
#include <asm/reg.h>
24
#include <asm/switch_to.h>
25
#include <asm/time.h>
26 27 28 29 30 31 32

#define OP_19_XOP_RFID		18
#define OP_19_XOP_RFI		50

#define OP_31_XOP_MFMSR		83
#define OP_31_XOP_MTMSR		146
#define OP_31_XOP_MTMSRD	178
33
#define OP_31_XOP_MTSR		210
34 35 36 37 38 39
#define OP_31_XOP_MTSRIN	242
#define OP_31_XOP_TLBIEL	274
#define OP_31_XOP_TLBIE		306
#define OP_31_XOP_SLBMTE	402
#define OP_31_XOP_SLBIE		434
#define OP_31_XOP_SLBIA		498
40
#define OP_31_XOP_MFSR		595
41
#define OP_31_XOP_MFSRIN	659
42
#define OP_31_XOP_DCBA		758
43 44 45 46 47 48 49
#define OP_31_XOP_SLBMFEV	851
#define OP_31_XOP_EIOIO		854
#define OP_31_XOP_SLBMFEE	915

/* DCBZ is actually 1014, but we patch it to 1010 so we get a trap */
#define OP_31_XOP_DCBZ		1010

50 51 52 53 54
#define OP_LFS			48
#define OP_LFD			50
#define OP_STFS			52
#define OP_STFD			54

A
Alexander Graf 已提交
55 56 57 58 59 60 61 62 63
#define SPRN_GQR0		912
#define SPRN_GQR1		913
#define SPRN_GQR2		914
#define SPRN_GQR3		915
#define SPRN_GQR4		916
#define SPRN_GQR5		917
#define SPRN_GQR6		918
#define SPRN_GQR7		919

64 65 66 67
/* Book3S_32 defines mfsrin(v) - but that messes up our abstract
 * function pointers, so let's just disable the define. */
#undef mfsrin

68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86
enum priv_level {
	PRIV_PROBLEM = 0,
	PRIV_SUPER = 1,
	PRIV_HYPER = 2,
};

static bool spr_allowed(struct kvm_vcpu *vcpu, enum priv_level level)
{
	/* PAPR VMs only access supervisor SPRs */
	if (vcpu->arch.papr_enabled && (level > PRIV_SUPER))
		return false;

	/* Limit user space to its own small SPR set */
	if ((vcpu->arch.shared->msr & MSR_PR) && level > PRIV_PROBLEM)
		return false;

	return true;
}

87 88 89 90
int kvmppc_core_emulate_op(struct kvm_run *run, struct kvm_vcpu *vcpu,
                           unsigned int inst, int *advance)
{
	int emulated = EMULATE_DONE;
91 92 93 94
	int rt = get_rt(inst);
	int rs = get_rs(inst);
	int ra = get_ra(inst);
	int rb = get_rb(inst);
95 96 97 98 99 100

	switch (get_op(inst)) {
	case 19:
		switch (get_xop(inst)) {
		case OP_19_XOP_RFID:
		case OP_19_XOP_RFI:
101 102
			kvmppc_set_pc(vcpu, vcpu->arch.shared->srr0);
			kvmppc_set_msr(vcpu, vcpu->arch.shared->srr1);
103 104 105 106 107 108 109 110 111 112 113
			*advance = 0;
			break;

		default:
			emulated = EMULATE_FAIL;
			break;
		}
		break;
	case 31:
		switch (get_xop(inst)) {
		case OP_31_XOP_MFMSR:
114
			kvmppc_set_gpr(vcpu, rt, vcpu->arch.shared->msr);
115 116 117
			break;
		case OP_31_XOP_MTMSRD:
		{
118
			ulong rs_val = kvmppc_get_gpr(vcpu, rs);
119
			if (inst & 0x10000) {
120 121 122 123
				ulong new_msr = vcpu->arch.shared->msr;
				new_msr &= ~(MSR_RI | MSR_EE);
				new_msr |= rs_val & (MSR_RI | MSR_EE);
				vcpu->arch.shared->msr = new_msr;
124
			} else
125
				kvmppc_set_msr(vcpu, rs_val);
126 127 128
			break;
		}
		case OP_31_XOP_MTMSR:
129
			kvmppc_set_msr(vcpu, kvmppc_get_gpr(vcpu, rs));
130
			break;
131 132 133 134 135 136 137 138
		case OP_31_XOP_MFSR:
		{
			int srnum;

			srnum = kvmppc_get_field(inst, 12 + 32, 15 + 32);
			if (vcpu->arch.mmu.mfsrin) {
				u32 sr;
				sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
139
				kvmppc_set_gpr(vcpu, rt, sr);
140 141 142
			}
			break;
		}
143 144 145 146
		case OP_31_XOP_MFSRIN:
		{
			int srnum;

147
			srnum = (kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf;
148 149 150
			if (vcpu->arch.mmu.mfsrin) {
				u32 sr;
				sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
151
				kvmppc_set_gpr(vcpu, rt, sr);
152 153 154
			}
			break;
		}
155 156 157
		case OP_31_XOP_MTSR:
			vcpu->arch.mmu.mtsrin(vcpu,
				(inst >> 16) & 0xf,
158
				kvmppc_get_gpr(vcpu, rs));
159
			break;
160 161
		case OP_31_XOP_MTSRIN:
			vcpu->arch.mmu.mtsrin(vcpu,
162 163
				(kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf,
				kvmppc_get_gpr(vcpu, rs));
164 165 166 167 168
			break;
		case OP_31_XOP_TLBIE:
		case OP_31_XOP_TLBIEL:
		{
			bool large = (inst & 0x00200000) ? true : false;
169
			ulong addr = kvmppc_get_gpr(vcpu, rb);
170 171 172 173 174 175 176 177 178
			vcpu->arch.mmu.tlbie(vcpu, addr, large);
			break;
		}
		case OP_31_XOP_EIOIO:
			break;
		case OP_31_XOP_SLBMTE:
			if (!vcpu->arch.mmu.slbmte)
				return EMULATE_FAIL;

179
			vcpu->arch.mmu.slbmte(vcpu,
180 181
					kvmppc_get_gpr(vcpu, rs),
					kvmppc_get_gpr(vcpu, rb));
182 183 184 185 186
			break;
		case OP_31_XOP_SLBIE:
			if (!vcpu->arch.mmu.slbie)
				return EMULATE_FAIL;

187
			vcpu->arch.mmu.slbie(vcpu,
188
					kvmppc_get_gpr(vcpu, rb));
189 190 191 192 193 194 195 196 197 198 199
			break;
		case OP_31_XOP_SLBIA:
			if (!vcpu->arch.mmu.slbia)
				return EMULATE_FAIL;

			vcpu->arch.mmu.slbia(vcpu);
			break;
		case OP_31_XOP_SLBMFEE:
			if (!vcpu->arch.mmu.slbmfee) {
				emulated = EMULATE_FAIL;
			} else {
200
				ulong t, rb_val;
201

202 203 204
				rb_val = kvmppc_get_gpr(vcpu, rb);
				t = vcpu->arch.mmu.slbmfee(vcpu, rb_val);
				kvmppc_set_gpr(vcpu, rt, t);
205 206 207 208 209 210
			}
			break;
		case OP_31_XOP_SLBMFEV:
			if (!vcpu->arch.mmu.slbmfev) {
				emulated = EMULATE_FAIL;
			} else {
211
				ulong t, rb_val;
212

213 214 215
				rb_val = kvmppc_get_gpr(vcpu, rb);
				t = vcpu->arch.mmu.slbmfev(vcpu, rb_val);
				kvmppc_set_gpr(vcpu, rt, t);
216 217
			}
			break;
218 219 220
		case OP_31_XOP_DCBA:
			/* Gets treated as NOP */
			break;
221 222
		case OP_31_XOP_DCBZ:
		{
223 224
			ulong rb_val = kvmppc_get_gpr(vcpu, rb);
			ulong ra_val = 0;
225
			ulong addr, vaddr;
226
			u32 zeros[8] = { 0, 0, 0, 0, 0, 0, 0, 0 };
A
Alexander Graf 已提交
227 228
			u32 dsisr;
			int r;
229

230 231
			if (ra)
				ra_val = kvmppc_get_gpr(vcpu, ra);
232

233
			addr = (ra_val + rb_val) & ~31ULL;
234
			if (!(vcpu->arch.shared->msr & MSR_SF))
235
				addr &= 0xffffffff;
236
			vaddr = addr;
237

A
Alexander Graf 已提交
238 239
			r = kvmppc_st(vcpu, &addr, 32, zeros, true);
			if ((r == -ENOENT) || (r == -EPERM)) {
240 241 242
				struct kvmppc_book3s_shadow_vcpu *svcpu;

				svcpu = svcpu_get(vcpu);
A
Alexander Graf 已提交
243
				*advance = 0;
244
				vcpu->arch.shared->dar = vaddr;
245
				svcpu->fault_dar = vaddr;
A
Alexander Graf 已提交
246 247 248 249 250 251 252

				dsisr = DSISR_ISSTORE;
				if (r == -ENOENT)
					dsisr |= DSISR_NOHPTE;
				else if (r == -EPERM)
					dsisr |= DSISR_PROTFAULT;

253
				vcpu->arch.shared->dsisr = dsisr;
254 255
				svcpu->fault_dsisr = dsisr;
				svcpu_put(svcpu);
A
Alexander Graf 已提交
256

257 258 259 260 261 262 263 264 265 266 267 268 269 270
				kvmppc_book3s_queue_irqprio(vcpu,
					BOOK3S_INTERRUPT_DATA_STORAGE);
			}

			break;
		}
		default:
			emulated = EMULATE_FAIL;
		}
		break;
	default:
		emulated = EMULATE_FAIL;
	}

271 272 273
	if (emulated == EMULATE_FAIL)
		emulated = kvmppc_emulate_paired_single(run, vcpu);

274 275 276
	return emulated;
}

277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296
void kvmppc_set_bat(struct kvm_vcpu *vcpu, struct kvmppc_bat *bat, bool upper,
                    u32 val)
{
	if (upper) {
		/* Upper BAT */
		u32 bl = (val >> 2) & 0x7ff;
		bat->bepi_mask = (~bl << 17);
		bat->bepi = val & 0xfffe0000;
		bat->vs = (val & 2) ? 1 : 0;
		bat->vp = (val & 1) ? 1 : 0;
		bat->raw = (bat->raw & 0xffffffff00000000ULL) | val;
	} else {
		/* Lower BAT */
		bat->brpn = val & 0xfffe0000;
		bat->wimg = (val >> 3) & 0xf;
		bat->pp = val & 3;
		bat->raw = (bat->raw & 0x00000000ffffffffULL) | ((u64)val << 32);
	}
}

297
static struct kvmppc_bat *kvmppc_find_bat(struct kvm_vcpu *vcpu, int sprn)
A
Alexander Graf 已提交
298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318
{
	struct kvmppc_vcpu_book3s *vcpu_book3s = to_book3s(vcpu);
	struct kvmppc_bat *bat;

	switch (sprn) {
	case SPRN_IBAT0U ... SPRN_IBAT3L:
		bat = &vcpu_book3s->ibat[(sprn - SPRN_IBAT0U) / 2];
		break;
	case SPRN_IBAT4U ... SPRN_IBAT7L:
		bat = &vcpu_book3s->ibat[4 + ((sprn - SPRN_IBAT4U) / 2)];
		break;
	case SPRN_DBAT0U ... SPRN_DBAT3L:
		bat = &vcpu_book3s->dbat[(sprn - SPRN_DBAT0U) / 2];
		break;
	case SPRN_DBAT4U ... SPRN_DBAT7L:
		bat = &vcpu_book3s->dbat[4 + ((sprn - SPRN_DBAT4U) / 2)];
		break;
	default:
		BUG();
	}

319
	return bat;
320 321
}

322
int kvmppc_core_emulate_mtspr(struct kvm_vcpu *vcpu, int sprn, ulong spr_val)
323 324 325 326 327
{
	int emulated = EMULATE_DONE;

	switch (sprn) {
	case SPRN_SDR1:
328 329
		if (!spr_allowed(vcpu, PRIV_HYPER))
			goto unprivileged;
330
		to_book3s(vcpu)->sdr1 = spr_val;
331 332
		break;
	case SPRN_DSISR:
333
		vcpu->arch.shared->dsisr = spr_val;
334 335
		break;
	case SPRN_DAR:
336
		vcpu->arch.shared->dar = spr_val;
337 338
		break;
	case SPRN_HIOR:
339
		to_book3s(vcpu)->hior = spr_val;
340 341 342 343 344
		break;
	case SPRN_IBAT0U ... SPRN_IBAT3L:
	case SPRN_IBAT4U ... SPRN_IBAT7L:
	case SPRN_DBAT0U ... SPRN_DBAT3L:
	case SPRN_DBAT4U ... SPRN_DBAT7L:
345 346 347 348
	{
		struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);

		kvmppc_set_bat(vcpu, bat, !(sprn % 2), (u32)spr_val);
349 350 351
		/* BAT writes happen so rarely that we're ok to flush
		 * everything here */
		kvmppc_mmu_pte_flush(vcpu, 0, 0);
A
Alexander Graf 已提交
352
		kvmppc_mmu_flush_segments(vcpu);
353
		break;
354
	}
355
	case SPRN_HID0:
356
		to_book3s(vcpu)->hid[0] = spr_val;
357 358
		break;
	case SPRN_HID1:
359
		to_book3s(vcpu)->hid[1] = spr_val;
360 361
		break;
	case SPRN_HID2:
362
		to_book3s(vcpu)->hid[2] = spr_val;
363
		break;
A
Alexander Graf 已提交
364 365 366 367 368 369 370 371 372 373 374 375
	case SPRN_HID2_GEKKO:
		to_book3s(vcpu)->hid[2] = spr_val;
		/* HID2.PSE controls paired single on gekko */
		switch (vcpu->arch.pvr) {
		case 0x00080200:	/* lonestar 2.0 */
		case 0x00088202:	/* lonestar 2.2 */
		case 0x70000100:	/* gekko 1.0 */
		case 0x00080100:	/* gekko 2.0 */
		case 0x00083203:	/* gekko 2.3a */
		case 0x00083213:	/* gekko 2.3b */
		case 0x00083204:	/* gekko 2.4 */
		case 0x00083214:	/* gekko 2.4e (8SE) - retail HW2 */
376 377 378 379
		case 0x00087200:	/* broadway */
			if (vcpu->arch.hflags & BOOK3S_HFLAG_NATIVE_PS) {
				/* Native paired singles */
			} else if (spr_val & (1 << 29)) { /* HID2.PSE */
A
Alexander Graf 已提交
380 381 382 383 384 385 386 387
				vcpu->arch.hflags |= BOOK3S_HFLAG_PAIRED_SINGLE;
				kvmppc_giveup_ext(vcpu, MSR_FP);
			} else {
				vcpu->arch.hflags &= ~BOOK3S_HFLAG_PAIRED_SINGLE;
			}
			break;
		}
		break;
388
	case SPRN_HID4:
A
Alexander Graf 已提交
389
	case SPRN_HID4_GEKKO:
390
		to_book3s(vcpu)->hid[4] = spr_val;
391 392
		break;
	case SPRN_HID5:
393
		to_book3s(vcpu)->hid[5] = spr_val;
394 395 396 397 398
		/* guest HID5 set can change is_dcbz32 */
		if (vcpu->arch.mmu.is_dcbz32(vcpu) &&
		    (mfmsr() & MSR_HV))
			vcpu->arch.hflags |= BOOK3S_HFLAG_DCBZ32;
		break;
399 400 401 402 403 404
	case SPRN_PURR:
		to_book3s(vcpu)->purr_offset = spr_val - get_tb();
		break;
	case SPRN_SPURR:
		to_book3s(vcpu)->spurr_offset = spr_val - get_tb();
		break;
A
Alexander Graf 已提交
405 406 407 408 409 410 411 412 413 414
	case SPRN_GQR0:
	case SPRN_GQR1:
	case SPRN_GQR2:
	case SPRN_GQR3:
	case SPRN_GQR4:
	case SPRN_GQR5:
	case SPRN_GQR6:
	case SPRN_GQR7:
		to_book3s(vcpu)->gqr[sprn - SPRN_GQR0] = spr_val;
		break;
415 416 417 418 419 420
	case SPRN_ICTC:
	case SPRN_THRM1:
	case SPRN_THRM2:
	case SPRN_THRM3:
	case SPRN_CTRLF:
	case SPRN_CTRLT:
A
Alexander Graf 已提交
421
	case SPRN_L2CR:
422
	case SPRN_DSCR:
A
Alexander Graf 已提交
423 424 425 426 427 428 429
	case SPRN_MMCR0_GEKKO:
	case SPRN_MMCR1_GEKKO:
	case SPRN_PMC1_GEKKO:
	case SPRN_PMC2_GEKKO:
	case SPRN_PMC3_GEKKO:
	case SPRN_PMC4_GEKKO:
	case SPRN_WPAR_GEKKO:
430
		break;
431
unprivileged:
432 433 434 435 436 437 438 439 440 441 442
	default:
		printk(KERN_INFO "KVM: invalid SPR write: %d\n", sprn);
#ifndef DEBUG_SPR
		emulated = EMULATE_FAIL;
#endif
		break;
	}

	return emulated;
}

443
int kvmppc_core_emulate_mfspr(struct kvm_vcpu *vcpu, int sprn, ulong *spr_val)
444 445 446 447
{
	int emulated = EMULATE_DONE;

	switch (sprn) {
A
Alexander Graf 已提交
448 449 450 451
	case SPRN_IBAT0U ... SPRN_IBAT3L:
	case SPRN_IBAT4U ... SPRN_IBAT7L:
	case SPRN_DBAT0U ... SPRN_DBAT3L:
	case SPRN_DBAT4U ... SPRN_DBAT7L:
452 453 454 455
	{
		struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);

		if (sprn % 2)
456
			*spr_val = bat->raw >> 32;
457
		else
458
			*spr_val = bat->raw;
459

A
Alexander Graf 已提交
460
		break;
461
	}
462
	case SPRN_SDR1:
463 464
		if (!spr_allowed(vcpu, PRIV_HYPER))
			goto unprivileged;
465
		*spr_val = to_book3s(vcpu)->sdr1;
466 467
		break;
	case SPRN_DSISR:
468
		*spr_val = vcpu->arch.shared->dsisr;
469 470
		break;
	case SPRN_DAR:
471
		*spr_val = vcpu->arch.shared->dar;
472 473
		break;
	case SPRN_HIOR:
474
		*spr_val = to_book3s(vcpu)->hior;
475 476
		break;
	case SPRN_HID0:
477
		*spr_val = to_book3s(vcpu)->hid[0];
478 479
		break;
	case SPRN_HID1:
480
		*spr_val = to_book3s(vcpu)->hid[1];
481 482
		break;
	case SPRN_HID2:
A
Alexander Graf 已提交
483
	case SPRN_HID2_GEKKO:
484
		*spr_val = to_book3s(vcpu)->hid[2];
485 486
		break;
	case SPRN_HID4:
A
Alexander Graf 已提交
487
	case SPRN_HID4_GEKKO:
488
		*spr_val = to_book3s(vcpu)->hid[4];
489 490
		break;
	case SPRN_HID5:
491
		*spr_val = to_book3s(vcpu)->hid[5];
492
		break;
493
	case SPRN_CFAR:
494
	case SPRN_DSCR:
495
		*spr_val = 0;
496
		break;
497 498 499 500 501 502
	case SPRN_PURR:
		*spr_val = get_tb() + to_book3s(vcpu)->purr_offset;
		break;
	case SPRN_SPURR:
		*spr_val = get_tb() + to_book3s(vcpu)->purr_offset;
		break;
A
Alexander Graf 已提交
503 504 505 506 507 508 509 510
	case SPRN_GQR0:
	case SPRN_GQR1:
	case SPRN_GQR2:
	case SPRN_GQR3:
	case SPRN_GQR4:
	case SPRN_GQR5:
	case SPRN_GQR6:
	case SPRN_GQR7:
511
		*spr_val = to_book3s(vcpu)->gqr[sprn - SPRN_GQR0];
A
Alexander Graf 已提交
512
		break;
513 514 515 516 517
	case SPRN_THRM1:
	case SPRN_THRM2:
	case SPRN_THRM3:
	case SPRN_CTRLF:
	case SPRN_CTRLT:
A
Alexander Graf 已提交
518 519 520 521 522 523 524 525
	case SPRN_L2CR:
	case SPRN_MMCR0_GEKKO:
	case SPRN_MMCR1_GEKKO:
	case SPRN_PMC1_GEKKO:
	case SPRN_PMC2_GEKKO:
	case SPRN_PMC3_GEKKO:
	case SPRN_PMC4_GEKKO:
	case SPRN_WPAR_GEKKO:
526
		*spr_val = 0;
527 528
		break;
	default:
529
unprivileged:
530 531 532 533 534 535 536 537 538 539
		printk(KERN_INFO "KVM: invalid SPR read: %d\n", sprn);
#ifndef DEBUG_SPR
		emulated = EMULATE_FAIL;
#endif
		break;
	}

	return emulated;
}

540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584
u32 kvmppc_alignment_dsisr(struct kvm_vcpu *vcpu, unsigned int inst)
{
	u32 dsisr = 0;

	/*
	 * This is what the spec says about DSISR bits (not mentioned = 0):
	 *
	 * 12:13		[DS]	Set to bits 30:31
	 * 15:16		[X]	Set to bits 29:30
	 * 17			[X]	Set to bit 25
	 *			[D/DS]	Set to bit 5
	 * 18:21		[X]	Set to bits 21:24
	 *			[D/DS]	Set to bits 1:4
	 * 22:26			Set to bits 6:10 (RT/RS/FRT/FRS)
	 * 27:31			Set to bits 11:15 (RA)
	 */

	switch (get_op(inst)) {
	/* D-form */
	case OP_LFS:
	case OP_LFD:
	case OP_STFD:
	case OP_STFS:
		dsisr |= (inst >> 12) & 0x4000;	/* bit 17 */
		dsisr |= (inst >> 17) & 0x3c00; /* bits 18:21 */
		break;
	/* X-form */
	case 31:
		dsisr |= (inst << 14) & 0x18000; /* bits 15:16 */
		dsisr |= (inst << 8)  & 0x04000; /* bit 17 */
		dsisr |= (inst << 3)  & 0x03c00; /* bits 18:21 */
		break;
	default:
		printk(KERN_INFO "KVM: Unaligned instruction 0x%x\n", inst);
		break;
	}

	dsisr |= (inst >> 16) & 0x03ff; /* bits 22:31 */

	return dsisr;
}

ulong kvmppc_alignment_dar(struct kvm_vcpu *vcpu, unsigned int inst)
{
	ulong dar = 0;
585 586
	ulong ra = get_ra(inst);
	ulong rb = get_rb(inst);
587 588 589 590 591 592 593 594 595 596 597 598 599

	switch (get_op(inst)) {
	case OP_LFS:
	case OP_LFD:
	case OP_STFD:
	case OP_STFS:
		if (ra)
			dar = kvmppc_get_gpr(vcpu, ra);
		dar += (s32)((s16)inst);
		break;
	case 31:
		if (ra)
			dar = kvmppc_get_gpr(vcpu, ra);
600
		dar += kvmppc_get_gpr(vcpu, rb);
601 602 603 604 605 606 607 608
		break;
	default:
		printk(KERN_INFO "KVM: Unaligned instruction 0x%x\n", inst);
		break;
	}

	return dar;
}