...
A type-1 hypervisor (like Xen) is separated from the “host” kernel (Dom0 in Xen terminology) which is now treated like any other guest on the system. It is the hypervisor itself that controls the physical address map through the stage 2 mappingshttps://developer.arm.com/documentation/102142/0100/Stage-2-translation that map the guest physical address (called IPA in Arm speak) to the final PA.
...