Fixes and debug help for prove #VE support. I'm not in love with the sanity check implementation, but I also don't love the idea of plumbing in @kvm to the low level SPTE helpers. Not super well tested, but I wanted to get this posted asap in case someone wants to debug the unexpected #VEs we're seeing. Note, Isaku's patch needs his SoB. Isaku Yamahata (1): KVM: x86/mmu: Use SHADOW_NONPRESENT_VALUE for atomic zap in TDP MMU Sean Christopherson (8): KVM: nVMX: Initialize #VE info page for vmcs02 when proving #VE support KVM: nVMX: Always handle #VEs in L0 (never forward #VEs from L2 to L1) KVM: x86/mmu: Add sanity checks that KVM doesn't create EPT #VE SPTEs KVM: VMX: Dump VMCS on unexpected #VE KVM: x86/mmu: Print SPTEs on unexpected #VE KVM: VMX: Don't kill the VM on an unexpected #VE KVM: VMX: Enumerate EPT Violation #VE support in /proc/cpuinfo KVM: x86: Disable KVM_INTEL_PROVE_VE by default arch/x86/include/asm/kvm_host.h | 1 + arch/x86/include/asm/vmxfeatures.h | 2 +- arch/x86/kvm/Kconfig | 6 ++-- arch/x86/kvm/mmu/mmu.c | 45 ++++++++++++++++++++++++------ arch/x86/kvm/mmu/spte.h | 9 ++++++ arch/x86/kvm/mmu/tdp_iter.h | 2 ++ arch/x86/kvm/mmu/tdp_mmu.c | 2 +- arch/x86/kvm/vmx/nested.c | 5 ++++ arch/x86/kvm/vmx/vmx.c | 11 ++++++-- 9 files changed, 67 insertions(+), 16 deletions(-) base-commit: 4aad0b1893a141f114ba40ed509066f3c9bc24b0 -- 2.45.0.215.g3402c0e53f-goog