[PATCH v3 0/8] KVM: arm64: Fixes for guest CPU feature trapping and enabling

[Fuad Tabba <tabba@google.com>]

Hi,

This series contains several fixes for guest feature trapping and
enabling, as well as a bit of tidying up.

Changes from v2 [1]:
- Instead of a FAR_MASK, introduce a helper FAR_TO_FIPA_OFFSET() to
  extract the offset (Oliver)
- Expanded capability check in pKVM to include the VM type, since
  certain capabilities are restricted for all VM types in pKVM, whereas
  others are restricted for only protected VMs.
- Do not allow KVM_CAP_ARM_MTE for any VM type in pKVM
- Restrict which VM IOCTLs are allowed in pKVM based on the allowed
  capabilities for that VM (Oliver)
- Remove unnecessary checks for VM type when setting/getting arch timer
  state (Oliver)
- Based on Linux 6.18-rc5.

Cheers,
/fuad

[1] https://lore.kernel.org/all/20251106144418.2847443-1-tabba@google.com/

Fuad Tabba (8):
  KVM: arm64: Fix Trace Buffer trapping for protected VMs
  KVM: arm64: Fix Trace Buffer trap polarity for protected VMs
  KVM: arm64: Fix MTE flag initialization for protected VMs
  KVM: arm64: Introduce helper to calculate fault IPA offset
  KVM: arm64: Include VM type when checking VM capabilities in pKVM
  KVM: arm64: Do not allow KVM_CAP_ARM_MTE for any guest in pKVM
  KVM: arm64: Check whether a VM IOCTL is allowed in pKVM
  KVM: arm64: Prevent host from managing timer offsets for protected VMs

 arch/arm64/include/asm/kvm_arm.h         |  2 ++
 arch/arm64/include/asm/kvm_pkvm.h        | 33 +++++++++++++++++++++---
 arch/arm64/kvm/arch_timer.c              | 18 +++++++++----
 arch/arm64/kvm/arm.c                     |  7 +++--
 arch/arm64/kvm/hyp/nvhe/pkvm.c           | 20 +++++++-------
 arch/arm64/kvm/hyp/vgic-v2-cpuif-proxy.c |  2 +-
 arch/arm64/kvm/inject_fault.c            |  2 +-
 arch/arm64/kvm/mmu.c                     |  4 +--
 8 files changed, 64 insertions(+), 24 deletions(-)


base-commit: e9a6fb0bcdd7609be6969112f3fbfcce3b1d4a7c
-- 
2.51.2.1041.gc1ab5b90ca-goog