Oh good grief.
VPC is apparently so broken that these instructions work *some* of the
time, which may include the first time, but not later. That is an
impressive level of cockup.
Given that, we should either just rip this code out, or detect VPC
(how?). The latter option can be done post-.27, of course; if so, we
should just force the bit off for now rather than doing it in the
alternatives code. The only reason for doing the latter at all would be
to mitigate the overhead of paravirt_ops and other dynamic patch sites.
It would also be the least impact for .27, I believe.
-hpa