Simply allow the guest to fault back in balloon pages. In theory VIRTIO_BALLOON_F_MUST_TELL_HOST allowed an implementation to create the page only if asked, but in practice it wasn't used that way. And as a balloon implementation might not support that feature, such behaviour couldn't be relied upon anyway.