3 ms·

But trivially provable termination is really nice property if you don't want to need your hypervisor to trust every guest kernel.