KVM: arm64: BUG on failure to drop host privileges In pKVM mode we should never fail to drop host privileges but, if we do, we could be in an inconsistent state: 1. static key is flipped but we haven't completed initialisation 2. only a subset of CPUs may have dropped host privileges In this scenario, BUG is the only sensible action. Signed-off-by: Keir Fraser <keirf@google.com>