[GIT PULL] KVM changes for Linux 7.1-rc4

[Paolo Bonzini]

Linus,

The following changes since commit 6d35786de28116ecf78797a62b84e6bf3c45aa5a:

  Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm (2026-05-03 15:25:47 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/virt/kvm/kvm.git tags/for-linus

for you to fetch changes up to 2d5d3fc593c9b7e41bee86175d7b9e11f470072e:

  KVM: VMX: introduce module parameter to disable CET (2026-05-13 15:38:22 +0200)

----------------------------------------------------------------
Arm:

* Add the pKVM side of the workaround for ARM's erratum 4193714, provided
  that the EL3 firmware does its part of the job. KVM will refuse to
  initialise otherwise.

- Correctly handle 52bit VAs for guest EL2 stage-1 translations when
  running under NV with E2H==0.

* Correctly deal with permission faults in guest_memfd memslots.

* Fix the steal-time selftest after the infrastructure was reworked.

* Make sure the host cannot pass a non-sensical clock update to the
  EL2 tracing infrastructure.

* Appoint Steffen Eiden as a reviewer in anticipation of the KVM/s390
  ability to run arm64 guests, which will inevitably lead to arm64
  code being directly used on s390.

* Make sure that EL2 is configured with both exception entry and exit
  being Context Synchronization Events.

* Handle the current vcpu being NULL on EL2 panic.

* Fix the selftest_vcpu memcache being empty at the point of donation or
  sharing.

* Check that the memcache has enough capacity before engaging on the
  share/donate path.

* Fix __deactivate_fgt() to use its parameter rather than a variable
  in the macro context.

s390:

* Fix array overrun with large amounts of PCI devices.

x86:

* Never use L0's PAUSE loop exiting while L2 is running, since it's
  unlikely that a nested guest will help solving the hypervisor's
  spinlock contention

* Fix emulation of MOVNTDQA.

* Fix typo in Xen hypercall tracepoint

* Add back an optimization that was left behind when recently
  fixing a bug.

* Add module parameter to disable CET, whose implementation seems
  to have issues.  For now it remains enabled by default.

Generic:

* Reject offset causing an unsigned overflow in kvm_reset_dirty_gfn()

Documentation:

* Update stale links

Selftests:

* Fix guest_memfd_test with host page size > guest page size.

----------------------------------------------------------------
Aaron Sacks (1):
      KVM: Reject wrapped offset in kvm_reset_dirty_gfn()

Alexandru Elisei (1):
      KVM: arm64: Handle permission faults with guest_memfd

Fuad Tabba (6):
      KVM: arm64: Make EL2 exception entry and exit context-synchronization events
      KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
      KVM: arm64: Fix __deactivate_fgt macro parameter typo
      KVM: arm64: Seed pkvm_ownership_selftest vcpu memcache
      KVM: arm64: Pre-check vcpu memcache for host->guest share
      KVM: arm64: Pre-check vcpu memcache for host->guest donate

James Morse (1):
      KVM: arm64: Work around C1-Pro erratum 4193714 for protected guests

Junrui Luo (1):
      KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic

Matthew Rosato (1):
      KVM: s390: pci: Fix aisb calculation

Mostafa Saleh (1):
      KVM: arm64: Remove potential UB on nvhe tracing clock update

Ninad Naik (1):
      Documentation: kvm: update links in the references section of AMD Memory Encryption

Paolo Bonzini (4):
      Merge tag 'kvmarm-fixes-7.1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into HEAD
      KVM: x86: use again the flush argument of __link_shadow_page()
      Merge tag 'kvm-s390-master-7.1-1' of git://git.kernel.org/pub/scm/linux/kernel/git/kvms390/linux into HEAD
      KVM: VMX: introduce module parameter to disable CET

Qiang Ma (1):
      KVM: x86: Fix Xen hypercall tracepoint argument assignment

Sean Christopherson (3):
      KVM: nSVM: Never use L0's PAUSE loop exiting while L2 is running
      KVM: selftests: Ensure gmem file sizes are multiple of host page size
      KVM: x86: Swap the dst and src operand for MOVNTDQA

Sebastian Ott (1):
      KVM: selftests: arm64: Fix steal_time test after UAPI refactoring

Steffen Eiden (1):
      MAINTAINERS: Add Steffen as reviewer for KVM/arm64

Wei-Lin Chang (1):
      KVM: arm64: nv: Consider the DS bit when translating TCR_EL2

 .../virt/kvm/x86/amd-memory-encryption.rst         |  8 ++--
 MAINTAINERS                                        |  1 +
 arch/arm64/include/asm/kvm_nested.h                |  1 +
 arch/arm64/include/asm/sysreg.h                    |  2 +-
 arch/arm64/kvm/arm.c                               | 21 ++++++++++
 arch/arm64/kvm/hyp/include/hyp/switch.h            |  2 +-
 arch/arm64/kvm/hyp/nvhe/clock.c                    |  3 ++
 arch/arm64/kvm/hyp/nvhe/mem_protect.c              | 47 +++++++++++++++++++++-
 arch/arm64/kvm/hyp/nvhe/pkvm.c                     | 16 +++++++-
 arch/arm64/kvm/hyp/vhe/switch.c                    |  3 +-
 arch/arm64/kvm/mmu.c                               | 29 +++++++++----
 arch/s390/kvm/interrupt.c                          |  3 +-
 arch/s390/kvm/pci.c                                | 10 ++---
 arch/x86/kvm/emulate.c                             |  2 +-
 arch/x86/kvm/mmu/mmu.c                             | 23 ++++++++++-
 arch/x86/kvm/svm/nested.c                          | 43 +++++++-------------
 arch/x86/kvm/svm/svm.c                             | 15 ++++++-
 arch/x86/kvm/trace.h                               |  2 +-
 arch/x86/kvm/vmx/capabilities.h                    |  1 +
 arch/x86/kvm/vmx/vmx.c                             | 17 +++++++-
 include/linux/arm-smccc.h                          |  6 +++
 tools/testing/selftests/kvm/guest_memfd_test.c     |  9 ++++-
 tools/testing/selftests/kvm/steal_time.c           |  2 +
 virt/kvm/dirty_ring.c                              |  3 +-
 24 files changed, 204 insertions(+), 65 deletions(-)