KVM: s390: intercepts for privileged instructions