On Wed, Jun 22, 2016 at 04:33:18PM +0200, Paolo Bonzini wrote: > > > On 22/06/2016 16:24, Andrea Arcangeli wrote: > > Linux could not possibly crash instead if host phys bits > guest phys > > bits because it will never depend on GPF triggering if the must be > > zero bits of the guest pagetables are set. Linux won't ever try to set > > those bits and I'd be shocked if any other OS does. > > Well, KVM does. It sets _all_ bits up to 51, not just one, but still we > have a counterexample.
How can that crash? KVM doesn't use the host phys bits (or level1 host phys bits), the bit to set is hardcoded up to 51 and assumed no host would possibly fail at that. The concern in the KVM case is for nested virt as it is for an host in this regard. The scenario you are concerned about only happens if the bit set is not hardcoded to 51 but is in function of the host phys bits, which is not what KVM does.
