On 2/26/2020 12:57 PM, Sean Christopherson wrote: > Bummer. Using clear_cpu_cap() instead of setup_clear_cpu_cap() was me > being fancy and trying to allow KVM to identify the case where VMX is > available and configured on some CPUs but not all. I'll work on a fix. > Hmm. Right. For that to work, you'd need to make this disabling happen significantly later, and/or fix setup_pku to somehow honor this properly. But it looks like rdmsr is global and not tied to a given CPU anyways? Thanks, Jake