Hi, > That could be still a guest physical address. Like on a bare metal > system with TrustZone, there could be physical memory that is not > accessible to the CPU. Hmm. Yes, maybe. We could use the dma address of the (first page of the) guest buffer. In case of a secure buffer the guest has no access to the guest buffer would be unused, but it would at least make sure that things don't crash in case someone tries to map & access the buffer. The host should be able to figure the corresponding host buffer from the guest buffer address. When running drm-misc-next you should be able to test whenever that'll actually work without any virtio-gpu driver changes. cheers, Gerd