Changing it afterwards doesn't make too much sense and will only result
in inconsistencies.
Reviewed-by: Radim Krčmář <rkrcmar@redhat.com>
Signed-off-by: David Hildenbrand <david@redhat.com>
Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>
 because of a quirk in the virtualization implementation (see the internals
 documentation when it pops into existence).
 
+Fails if any VCPU has already been created.
 
 4.41 KVM_SET_BOOT_CPU_ID
 
 
        case KVM_SET_IDENTITY_MAP_ADDR: {
                u64 ident_addr;
 
+               mutex_lock(&kvm->lock);
+               r = -EINVAL;
+               if (kvm->created_vcpus)
+                       goto set_identity_unlock;
                r = -EFAULT;
                if (copy_from_user(&ident_addr, argp, sizeof ident_addr))
-                       goto out;
+                       goto set_identity_unlock;
                r = kvm_vm_ioctl_set_identity_map_addr(kvm, ident_addr);
+set_identity_unlock:
+               mutex_unlock(&kvm->lock);
                break;
        }
        case KVM_SET_NR_MMU_PAGES: