fix: instruction guest-page fault in pmp

The PMP module was checking mock physical addresses from the instruction
cache address transaltion requests in the case of instruction guest-page
faults. This is is incorrect as the instruction guest-page fault takes
precedence and the physical address is not meaningful if the translation
did not succeed.

Author: ezelioli

core/pmp/src/pmp_data_if.sv

@@ -82,7 +82,8 @@ module pmp_data_if
     // fault, therefore do not change the exception type in case of double
     // exception
     if (icache_areq_i.fetch_valid) begin
-      if (icache_areq_o.fetch_exception.cause != riscv::INSTR_PAGE_FAULT) begin
+      if (icache_areq_o.fetch_exception.cause != riscv::INSTR_PAGE_FAULT
+        !(CVA6Cfg.RVH && icache_areq_o.fetch_exception.cause == riscv::INSTR_GUEST_PAGE_FAULT)) begin
         if (!match_any_execute_region || !pmp_if_allow) begin
           icache_areq_o.fetch_exception.cause = riscv::INSTR_ACCESS_FAULT;
           icache_areq_o.fetch_exception.valid = 1'b1;