When using EPT, why does kvm intercept MOV to/from CR3 when paging is disabled in the guest? It doesn't seem necessary to me, but perhaps I am missing something. I'm referring to this code in ept_update_paging_mode_cr0(): exec_controls_setbit(vmx, CPU_BASED_CR3_LOAD_EXITING | CPU_BASED_CR3_STORE_EXITING); Thanks!