Hi Paolo, Just a gentle reminder from an old off-list email (here is a slightly revised version of it): Running kvm-unit-tests on bare-metal cause the VMCS shadow tests to fail with errors such as: FAIL: valid link pointer: field 6c22: VMREAD and VMWRITE permission: VMX_INST_ERROR (0) is as expected (12) Looking at the test code, I noticed a bug in vmcs_shadow_test_field(), which indicates there is both a bug in KVM and kvm-unit-tests. Apparently, when shadow-VMCS emulation is on, and when there is a VMREAD/VMWRITE error while L2 performs VMREAD/VMWRITE, the test expects the VMX_INST_ERROR field of VMCS12 to hold an error indication. But in fact, it is VMCS23 that is supposed to hold an error indication. This seems like a data leak between L1 and L2, although admittedly a very very minor one. Regards, Nadav