On 02/16/2018 07:10 AM, David Woodhouse wrote: > On Fri, 2018-02-16 at 12:04 +0100, Paolo Bonzini wrote: >> On 16/02/2018 11:21, David Woodhouse wrote: >>> Even if the guest doesn't have/support IBRS_ALL, and is frobbing the >>> (now emulated) MSR on every kernel entry/exit, that's *still* going to >>> be a metric shitload faster than what it *thought* it was doing. Is there any indication/log to the admin that VM doesn't know about IBRS_ALL and is constantly uselessly writing to an emulated MSR? While it's probably true that the overhead in time is similar to (or better than) an actual IBRS MSR write, if the admin/user knows the VM needs updating, then there's a fighting chance that they might do so. Jon.