On 09/01/2018 21:16, Jim Mattson wrote: > This doesn't look right to me. pt_disable_intercept_for_msr calls > either vmx_disable_intercept_for_msr or vmx_enable_intercept_for_msr, > both of which only change vmx_msr_bitmap_legacy > and vmx_msr_bitmap_longmode. Neither of these MSR permission bitmaps is > likely to be the one in use by L1 (which is more likely to be using the > mode-appropriate x2apic or x2apic_apicv bitmap). Moreover, these changes > affect all of the VMs that are using those MSR permission bitmaps. Yeah, I replied this morning with something like this, on the thread about removing the longmode bitmaps. Paolo