On Thu, 2023-01-19 at 21:36 +0000, Sean Christopherson wrote: > The least invasive idea I have is expand the TDP MMU's concept of "frozen" SPTEs > and freeze (a.k.a. lock) the SPTE (KVM's mirror) until the corresponding S-EPT > update completes. This will introduce another "having-to-wait while SPTE is frozen" problem I think, which IIUC means (one way is) you have to do some loop and retry, perhaps similar to yield_safe. > > The other idea is to scrap the mirror concept entirely, though I gotta imagine > that would provide pretty awful performance. Right. I don't think this is a good option.