[GIT PULL] KVM: x86: MMU changes for 7.3

[Sean Christopherson <seanjc@google.com>]

Two fixes for bugs in the lockless aging code, plus a related hardening in the
same code.

The following changes since commit a204badd8432f93b7e862e7dac6db0fe3d65f370:

  Merge branch 'kvm-chainsaw' into HEAD (2026-06-25 11:32:09 +0200)

are available in the Git repository at:

  https://github.com/kvm-x86/linux.git tags/kvm-x86-mmu-7.3

for you to fetch changes up to fb25ee778aae357da2c1a8dc1d240b6061482454:

  KVM: x86/mmu: Use CMPXCHG when clearing Accessed bit in the shadow MMU (2026-07-29 05:44:24 -0700)

----------------------------------------------------------------
KVM x86 MMU changes for 7.3

 - Fix a bug where KVM would walk a newly created rmap without holding the rmap
   lock (or mmu_lock) during aging.

 - Fix a bug where aging TDP MMU SPTEs could clobber FROZEN SPTEs.

----------------------------------------------------------------
Phil Rosenthal (1):
      KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk

Sean Christopherson (2):
      KVM: x86/mmu: Use CMPXCHG when clearing Accessed bit in TDP MMU
      KVM: x86/mmu: Use CMPXCHG when clearing Accessed bit in the shadow MMU

 arch/x86/kvm/mmu/mmu.c      | 58 +++++++++++++++++++++++++--------------------
 arch/x86/kvm/mmu/tdp_iter.h |  7 ++++++
 arch/x86/kvm/mmu/tdp_mmu.c  | 20 +++++++---------
 3 files changed, 48 insertions(+), 37 deletions(-)