> > After much waffling, applied to kvm-x86 vmx. I ended up keeping the logic to > inject #UD on now-unexpected VMFUNC exits from L1, i.e. patch one does nothing > more than clear the control bit. I like the idea of clearing the control bit as > it more explicitly documents what's going on, but killing the VM on an unexpected > exit that KVM can gracefully handle seemed unnecessary. Glad to know that. Thanks! B.R. Yu