Use target_phys_addr_t, not target_ulong.