I think the EPT violation happens*after* the cr3 write. So the instruction to beDoh, you're correct. I think my mind wandered into thinking about what would
emulated is not "cr3 write". The emulation will queue fault into guest though,
recursive EPT violation happens since the cr3 exceeds maxphyaddr limit.
happen with PDPTRs and forgot to get back to normal MOV CR3.
So yeah, the only way to correctly handle this would be to intercept CR3 loads.
I'm guessing that would have a noticeable impact on guest performance.
Paolo, I'll leave this one for you to decide, we have pretty much written off
allow_smaller_maxphyaddr:-)