[GIT PULL] KVM (mostly s390) fixes for Linux 7.2-rc7

[Paolo Bonzini]

Linus,

The following changes since commit 848acc8ffe1b7cd5f1bf427b93069becfebc2c9d:

  Merge tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux (2026-08-03 12:26:51 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/virt/kvm/kvm.git tags/for-linus

for you to fetch changes up to 5ec42d57655c690234c14aece6dd3f209778c1d8:

  KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (2026-08-07 09:26:45 +0200)

----------------------------------------------------------------
s390:
- fix a lot of small bugs and races

x86:
- fix missing locking related to KVM_CAP_MOVE_ENC_CONTEXT_FROM

- warn on creating a new page table that is the child of an invalid one,
  and limit damage before it's too late

- disable use of INVLPGA when NPT is enabled, because it doesn't seem
  to flush TLBs correctly

----------------------------------------------------------------
Claudio Imbrenda (13):
      KVM: s390: Fix unlikely NULL gmap dereference
      KVM: s390: Do not free SCA if it was not allocated
      KVM: s390: Fix kvm_s390_vcpu_unsetup_cmma()
      KVM: s390: Fix overclearing ESCA in case of error
      KVM: s390: ucontrol: Fix sca_clear_ext_call()
      KVM: s390: Fix leaking of PGM_ADDRESSING to userspace
      KVM: s390: Fix race in __do_essa()
      KVM: s390: cmma: Fix dirty tracking when removing memslot
      KVM: s390: ucontrol: Add missing locking around gmap_remove_child()
      KVM: s390: Free the mmu cache when kvm_arch_vcpu_create() fails
      KVM: s390: Return -EINTR if a signal is pending while faulting-in
      KVM: s390: Fix ordering when adding to SCA
      KVM: s390: Fix cleanup in kvm_s390_pv_create_cpu()

Eric Farman (10):
      s390/vfio_ccw: Free all memory if cp_init() fails
      s390/vfio_ccw: Limit the number of channel program segments
      s390/vfio_ccw: Fix out of bounds check on CCW array
      s390/vfio_ccw: Ensure first IDAW remains constant
      s390/vfio_ccw: Calculate idal length based on idaw type
      s390/vfio_ccw: Ensure index for read/write regions are within range
      s390/vfio_ccw: Cancel existing workqueues
      s390/vfio_ccw: Move cp cleanup out of not operational
      s390/vfio_ccw: Selectively expand io_mutex
      s390/vfio_ccw: Implement a crw lock

Paolo Bonzini (3):
      KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled
      Merge tag 'kvm-s390-master-7.2-3' of https://git.kernel.org/pub/scm/linux/kernel/git/kvms390/linux into HEAD
      KVM: SVM: Serialize accesses to the owner and mirror list with separate lock

Sean Christopherson (1):
      KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

 arch/s390/include/asm/kvm_host.h    |   1 +
 arch/s390/kvm/dat.c                 |  23 +++++--
 arch/s390/kvm/dat.h                 |   2 +-
 arch/s390/kvm/faultin.c             |   6 +-
 arch/s390/kvm/interrupt.c           |  19 ++++--
 arch/s390/kvm/kvm-s390.c            | 125 +++++++++++++++++++++++-------------
 arch/s390/kvm/priv.c                |  10 +--
 arch/s390/kvm/pv.c                  |  43 +++++++------
 arch/x86/include/asm/kvm_host.h     |   2 +-
 arch/x86/kvm/hyperv.c               |   7 +-
 arch/x86/kvm/mmu/mmu.c              |   5 +-
 arch/x86/kvm/svm/sev.c              |  34 +++++++---
 arch/x86/kvm/svm/svm.c              |  27 ++++++--
 arch/x86/kvm/svm/svm.h              |   1 +
 arch/x86/kvm/vmx/main.c             |   4 +-
 arch/x86/kvm/vmx/vmx.c              |   2 +-
 arch/x86/kvm/vmx/x86_ops.h          |   2 +-
 drivers/s390/cio/vfio_ccw_async.c   |  16 +++++
 drivers/s390/cio/vfio_ccw_chp.c     |  31 +++++++--
 drivers/s390/cio/vfio_ccw_cp.c      |  74 +++++++++++++++------
 drivers/s390/cio/vfio_ccw_cp.h      |  10 +++
 drivers/s390/cio/vfio_ccw_drv.c     |  21 +++++-
 drivers/s390/cio/vfio_ccw_fsm.c     |   8 ++-
 drivers/s390/cio/vfio_ccw_ops.c     |  39 +++++++++--
 drivers/s390/cio/vfio_ccw_private.h |  10 ++-
 25 files changed, 379 insertions(+), 143 deletions(-)