> +static int vfio_ap_mdev_open(struct mdev_device *mdev) > +{ > + struct ap_matrix_mdev *matrix_mdev = mdev_get_drvdata(mdev); > + unsigned long events; > + int ret; > + > + matrix_mdev->group_notifier.notifier_call = vfio_ap_mdev_group_notifier; > + events = VFIO_GROUP_NOTIFY_SET_KVM; > + ret = vfio_register_notifier(mdev_dev(mdev), VFIO_GROUP_NOTIFY, > + &events, &matrix_mdev->group_notifier); > + > + ret = kvm_ap_configure_matrix(matrix_mdev->kvm, > + matrix_mdev->matrix); > + if (ret) > + return ret; > + > + ret = kvm_ap_enable_ie_mode(matrix_mdev->kvm); Can't this happen while the guest is already running? Or what hinders us from doing that? > + > + return ret; > +} > + > +static void vfio_ap_mdev_release(struct mdev_device *mdev) Thanks, David / dhildenb