Re: [PULL 1/6] target/i386: do not expose ARCH_CAPABILITIES on AMD CPU

On 17.07.2025 18:23, Paolo Bonzini wrote: KVM emulates the ARCH_CAPABILITIES on x86 for both Intel and AMD cpus, although the IA32_ARCH_CAPABILITIES MSR is an Intel-specific MSR and it makes no sense to emulate it on AMD. As a consequence, VMs created on AMD with qemu -cpu host and using KVM wil

[Stable-7.2.19 17/26] migration: Don't sync volatile memory after migration completes

ram block writeback) Link: https://lore.kernel.org/r/1cc43f59-336f-4a12-84ad-db89e0a17...@akamai.com Signed-off-by: Peter Xu (cherry picked from commit 983899eab4939dc4dff67fa4d822c5b4df7eae21) Signed-off-by: Michael Tokarev diff --git a/migration/ram.c b/migration/ram.c index f25ebd9620..e3ab67a

[Stable-7.2.19 24/26] amd_iommu: Remove duplicated definitions

commit 5959b641c98b5ae9677e2c1d89902dac31b344d9) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index 15ed663001..c8d1a6d353 100644 --- a/hw/i386/amd_iommu.h +++ b/hw/i386/amd_iommu.h @@ -204,10 +204,6 @@ /* Completion Wait data size */ #define AMDVI_COMPLETION_DATA_SIZE8 -#

[Stable-7.2.19 22/26] amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE

Message-Id: <20250617150427.20585-6-alejandro.j.jime...@oracle.com> Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 123cf4bdd378f746dfa2f5415ba084148dded3e3) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index bc3a6eaa6d..1

[Stable-7.2.19 26/26] ui/vnc: Do not copy z_stream

cked from commit aef22331b5a4670f42638a5f63a26e93bf779aae) Signed-off-by: Michael Tokarev diff --git a/ui/vnc-enc-zlib.c b/ui/vnc-enc-zlib.c index 900ae5b30f..52e9193eab 100644 --- a/ui/vnc-enc-zlib.c +++ b/ui/vnc-enc-zlib.c @@ -48,21 +48,21 @@ void vnc_zlib_zfree(void *x, void *addr) static voi

[Stable-7.2.19 19/26] amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command

IOMMU") Signed-off-by: Alejandro Jimenez Reviewed-by: Vasant Hegde Message-Id: <20250617150427.20585-3-alejandro.j.jime...@oracle.com> Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit c63b8d1425ba8b3b08ee4f7346457fd8a7f12a24) Signed-off-by: Michae

[Stable-7.2.19 25/26] amd_iommu: Fix truncation of oldval in amdvi_writeq

cked from commit 5788929e05e18ed5f76dc8ade4210f022c9ba5a1) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.c b/hw/i386/amd_iommu.c index 0df9c1a232..09c7d3c560 100644 --- a/hw/i386/amd_iommu.c +++ b/hw/i386/amd_iommu.c @@ -127,7 +127,7 @@ static void amdvi_writeq(AMDVIState *s, hwaddr addr, uint64_t val) {

[Stable-7.2.19 23/26] amd_iommu: Fix the calculation for Device Table size

sant Hegde Message-Id: <20250617150427.20585-7-alejandro.j.jime...@oracle.com> Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 67d3077ee403472d45794399e97c9f329242fce9) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.c b/hw/i386/a

[Stable-7.2.19 18/26] amd_iommu: Fix Miscellaneous Information Register 0 encoding

chael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 091c7d7924f33781c2fb8e7297dc54971e0c3785) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index 1899e9aee1..a1913cd59d 100644 --- a/hw/i386/amd_iommu.h +++ b/hw/i386/amd_iommu.h

[Stable-7.2.19 20/26] amd_iommu: Update bitmasks representing DTE reserved fields

commit ff3dcb3bf652912466dcc1cd10d3267f185c212e) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.c b/hw/i386/amd_iommu.c index 1d1f734eca..f2da6348f6 100644 --- a/hw/i386/amd_iommu.c +++ b/hw/i386/amd_iommu.c @@ -823,9 +823,10 @@ static inline uint64_t amdvi_get_perms(uint64_t entry)

[Stable-7.2.19 v2 00/26] Patch Round-up for stable 7.2.19, freeze on 2025-07-21

The following patches are queued for QEMU stable v7.2.19: https://gitlab.com/qemu-project/qemu/-/commits/staging-7.2 Patch freeze is 2025-07-21, and the release is planned for 2025-07-23: https://wiki.qemu.org/Planning/7.2 Please respond here or CC qemu-sta...@nongnu.org on any additional p

[Stable-7.2.19 21/26] amd_iommu: Fix masks for various IOMMU MMIO Registers

n Signed-off-by: Michael S. Tsirkin (cherry picked from commit 108e10ff69099c3ebe147f505246be7c2ad2a499) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index ba9508fe5d..bc3a6eaa6d 100644 --- a/hw/i386/amd_iommu.h +++ b/hw/i386/amd_iommu.h @@ -68,34 +68,

[Stable-7.2.19 16/26] linux-user: Hold the fd-trans lock across fork

y: Richard Henderson Signed-off-by: Richard Henderson Message-ID: <20250314124742.4965-1-geo...@ldpreload.com> (cherry picked from commit e4e839b2eeea5745c48ce47144c7842eb7cd455f) (Mjt: adjust context in linux/main.c for 7.2) Signed-off-by: Michael Tokarev diff --git a/linux-user/fd-trans.h

[Stable-10.0.3 47/65] linux-user: Use qemu_set_cloexec() to mark pidfd as FD_CLOEXEC

erry picked from commit d6390204c61e148488f034d1f79be35cd3318d93) Signed-off-by: Michael Tokarev diff --git a/linux-user/syscall.c b/linux-user/syscall.c index a8eea5dd52..3a25abfaca 100644 --- a/linux-user/syscall.c +++ b/linux-user/syscall.c @@ -6746,10 +6746,9 @@ static int do_fork(CPUArc

[Stable-10.0.3 54/65] amd_iommu: Fix masks for various IOMMU MMIO Registers

n Signed-off-by: Michael S. Tsirkin (cherry picked from commit 108e10ff69099c3ebe147f505246be7c2ad2a499) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index 60af62bef6..ef8dc726f1 100644 --- a/hw/i386/amd_iommu.h +++ b/hw/i386/amd_iommu.h @@ -68,34 +68,

[Stable-10.0.3 49/65] net: fix buffer overflow in af_xdp_umem_create()

ewed-by: Ilya Maximets Signed-off-by: Anastasia Belova Signed-off-by: Jason Wang (cherry picked from commit 110d0fa2d4d1f754242f6775baec43776a9adb35) Signed-off-by: Michael Tokarev diff --git a/net/af-xdp.c b/net/af-xdp.c index 01c5fb914e..d022534d76 100644 --- a/net/af-xdp.c +++ b/net/af-xd

[Stable-10.0.3 43/65] linux-user: Implement fchmodat2 syscall

Henderson Signed-off-by: Richard Henderson Message-ID: <20250710113123.1109461-1-peter.mayd...@linaro.org> (cherry picked from commit 6a3e132a1be8c9e649967a4eb341d00731be7f51) Signed-off-by: Michael Tokarev diff --git a/linux-user/syscall.c b/linux-user/syscall.c index 8bfe4912e1..9b39

[Stable-10.0.3 63/65] i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]

6b3) (Mjt: fixup for 10.0.x series due to missing v10.0.0-2217-gf985a1195b "i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16]") Signed-off-by: Michael Tokarev diff --git a/target/i386/cpu.c b/target/i386/cpu.c index 2c9517f56d..4603b2b98b 100644 --- a/target/i38

[Stable-10.0.3 52/65] amd_iommu: Fix Device ID decoding for INVALIDATE_IOTLB_PAGES command

IOMMU") Signed-off-by: Alejandro Jimenez Reviewed-by: Vasant Hegde Message-Id: <20250617150427.20585-3-alejandro.j.jime...@oracle.com> Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit c63b8d1425ba8b3b08ee4f7346457fd8a7f12a24) Signed-off-by: Michae

[Stable-10.0.3 57/65] amd_iommu: Remove duplicated definitions

commit 5959b641c98b5ae9677e2c1d89902dac31b344d9) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index 2e390f808d..04e3ad072e 100644 --- a/hw/i386/amd_iommu.h +++ b/hw/i386/amd_iommu.h @@ -206,10 +206,6 @@ /* Completion Wait data size */ #define AMDVI_COMPLETION_DATA_SIZE8 -#

[Stable-10.0.3 51/65] amd_iommu: Fix Miscellaneous Information Register 0 encoding

chael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 091c7d7924f33781c2fb8e7297dc54971e0c3785) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index 28125130c6..921f7e1a4f 100644 --- a/hw/i386/amd_iommu.h +++ b/hw/i386/amd_iommu.h

[Stable-10.0.3 61/65] vhost: Fix used memslot tracking when destroying a vhost device

denbrand Message-Id: <20250603111336.185-1-da...@redhat.com> Reviewed-by: Igor Mammedov Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 9f749129e2629b19f424df106c92c5a5647e396c) Signed-off-by: Michael Tokarev diff --git a/hw/virtio/vhost.c

[Stable-10.0.3 48/65] accel/kvm: Adjust the note about the minimum required kernel version

nce this is not actively maintained anymore. Fixes: 126e7f78036 ("kvm: require KVM_CAP_IOEVENTFD and KVM_CAP_IOEVENTFD_ANY_LENGTH") Signed-off-by: Thomas Huth Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Michael Tokarev Signed-off-by: Michael Tokarev (

[Stable-10.0.3 40/65] target/i386: fix TB exit logic in gen_movl_seg() when writing to SS

: Paolo Bonzini (cherry picked from commit 0f1d6606c28d0ae81a1b311972c5c54e5e867bf0) Fixes: 0f1d6606c2 ("target/i386: do not trigger IRQ shadow for LSS" in 10.0.x) Signed-off-by: Michael Tokarev diff --git a/target/i386/tcg/translate.c b/target/i386/tcg/translate.c index 50cf56175f..7e590

[Stable-10.0.3 45/65] linux-user: Hold the fd-trans lock across fork

y: Richard Henderson Signed-off-by: Richard Henderson Message-ID: <20250314124742.4965-1-geo...@ldpreload.com> (cherry picked from commit e4e839b2eeea5745c48ce47144c7842eb7cd455f) Signed-off-by: Michael Tokarev diff --git a/linux-user/fd-trans.h b/linux-user/fd-trans.h index 910faaf237..e14f960

[Stable-10.0.3 41/65] target/arm: Don't enforce NSE, NS check for EL3->EL3 returns

44461dd243716) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/helper-a64.c b/target/arm/tcg/helper-a64.c index 9244848efe..be0935d194 100644 --- a/target/arm/tcg/helper-a64.c +++ b/target/arm/tcg/helper-a64.c @@ -653,15 +653,6 @@ void HELPER(exception_return)(CPUARMState *env, uin

[Stable-10.0.3 55/65] amd_iommu: Fix mask to retrieve Interrupt Table Root Pointer from DTE

Message-Id: <20250617150427.20585-6-alejandro.j.jime...@oracle.com> Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 123cf4bdd378f746dfa2f5415ba084148dded3e3) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.h b/hw/i386/amd_iommu.h index ef8dc726f1..2

[Stable-10.0.3 64/65] i386/cpu: Fix overflow of cache topology fields in CPUID.04H

Signed-off-by: Zhao Liu Link: https://lore.kernel.org/r/20250714080859.1960104-7-zhao1@intel.com Signed-off-by: Paolo Bonzini (cherry picked from commit 3e86124e7cb9b66e07fb992667865a308f16fcf2) Signed-off-by: Michael Tokarev diff --git a/target/i386/cpu.c b/target/i386/cpu.c index 4603b2b98b

[Stable-10.0.3 59/65] file-posix: Fix aio=threads performance regression after enablign FUA

Signed-off-by: Kevin Wolf (cherry picked from commit d402da1360c2240e81f0e5fc80ddbfc6238e0da8) Signed-off-by: Michael Tokarev diff --git a/block/file-posix.c b/block/file-posix.c index 56d1972d15..796553bafd 100644 --- a/block/file-posix.c +++ b/block/file-posix.c @@ -2484,9 +24

[Stable-10.0.3 44/65] linux-user: Check for EFAULT failure in nanosleep

from commit c4828cb8502d0b2adc39b9cde93df7d2886df897) Signed-off-by: Michael Tokarev diff --git a/linux-user/syscall.c b/linux-user/syscall.c index 9b397bac7e..a8eea5dd52 100644 --- a/linux-user/syscall.c +++ b/linux-user/syscall.c @@ -11639,10 +11639,14 @@ static abi_long do_syscall1(CPUArchState *cpu_env, int num, ab

[Stable-10.0.3 46/65] migration: Don't sync volatile memory after migration completes

ram block writeback) Link: https://lore.kernel.org/r/1cc43f59-336f-4a12-84ad-db89e0a17...@akamai.com Signed-off-by: Peter Xu (cherry picked from commit 983899eab4939dc4dff67fa4d822c5b4df7eae21) Signed-off-by: Michael Tokarev diff --git a/migration/ram.c b/migration/ram.c index 424df6d9f1..a0784d9

[Stable-10.0.3 65/65] i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]

Babu Moger Signed-off-by: Zhao Liu Link: https://lore.kernel.org/r/20250714080859.1960104-8-zhao1@intel.com Signed-off-by: Paolo Bonzini (cherry picked from commit 5d21ee453ad8e3f95f75e542cb3b35c5bb7cf23a) Signed-off-by: Michael Tokarev diff --git a/target/i386/cpu.c b/target/i386/c

[Stable-10.0.3 58/65] amd_iommu: Fix truncation of oldval in amdvi_writeq

cked from commit 5788929e05e18ed5f76dc8ade4210f022c9ba5a1) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.c b/hw/i386/amd_iommu.c index 06df344575..f773653487 100644 --- a/hw/i386/amd_iommu.c +++ b/hw/i386/amd_iommu.c @@ -140,7 +140,7 @@ static void amdvi_writeq(AMDVIState *s, hwaddr addr, uint64_t val) {

[Stable-10.0.3 62/65] ui/vnc: Do not copy z_stream

cked from commit aef22331b5a4670f42638a5f63a26e93bf779aae) Signed-off-by: Michael Tokarev diff --git a/ui/vnc-enc-zlib.c b/ui/vnc-enc-zlib.c index 900ae5b30f..52e9193eab 100644 --- a/ui/vnc-enc-zlib.c +++ b/ui/vnc-enc-zlib.c @@ -48,21 +48,21 @@ void vnc_zlib_zfree(void *x, void *addr) static voi

[Stable-10.0.3 60/65] roms: re-remove execute bit from hppa-firmware*

Acked-by: Helge Deller Message-ID: <52d0edfbb9b2f63a866f0065a721f3a95da6f8ba.1747590860.git.crobi...@redhat.com> Signed-off-by: Philippe Mathieu-Daudé (cherry picked from commit a598090ebaeb930ce33c2df0d80d87da13be8848) Signed-off-by: Michael Tokarev diff --git a/pc-bios/hppa-firmware.im

[Stable-10.0.3 53/65] amd_iommu: Update bitmasks representing DTE reserved fields

commit ff3dcb3bf652912466dcc1cd10d3267f185c212e) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.c b/hw/i386/amd_iommu.c index de55074b21..69d69a9b2d 100644 --- a/hw/i386/amd_iommu.c +++ b/hw/i386/amd_iommu.c @@ -848,9 +848,10 @@ static inline uint64_t amdvi_get_perms(uint64_t entry)

[Stable-10.0.3 v2 00/65] Patch Round-up for stable 10.0.3, freeze on 2025-07-21

vid Hildenbrand: vhost: Fix used memslot tracking when destroying a vhost device 62 aef22331b5a4 Akihiko Odaki: ui/vnc: Do not copy z_stream 63 a62fef582995 Michael Tokarev: i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16] 64 3e86124e7cb9 Qian Wen: i386/cpu: Fix overflow of cach

[Stable-10.0.3 56/65] amd_iommu: Fix the calculation for Device Table size

sant Hegde Message-Id: <20250617150427.20585-7-alejandro.j.jime...@oracle.com> Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 67d3077ee403472d45794399e97c9f329242fce9) Signed-off-by: Michael Tokarev diff --git a/hw/i386/amd_iommu.c b/hw/i386/a

[Stable-10.0.3 50/65] virtio-net: Add queues for RSS during migration

one queue pair when realizing") Tested-by: Lei Yang Cc: qemu-sta...@nongnu.org Signed-off-by: Akihiko Odaki Signed-off-by: Jason Wang (cherry picked from commit adda0ad56bd28d5a809051cbd190fda5798ec4e4) Signed-off-by: Michael Tokarev diff --git a/hw/net/virtio-net.c b/hw/net/virtio-net.c inde

[Stable-10.0.3 42/65] hw/arm/fsl-imx8mp: Wire VIRQ and VFIQ

rom commit 930180f3b9a292639eb894f1ca846683834ed4b7) Signed-off-by: Michael Tokarev diff --git a/hw/arm/fsl-imx8mp.c b/hw/arm/fsl-imx8mp.c index 82edf61082..d775aa934a 100644 --- a/hw/arm/fsl-imx8mp.c +++ b/hw/arm/fsl-imx8mp.c @@ -356,6 +356,10 @@ static void fsl_imx8mp_realize(DeviceState *dev, Err

Re: [PATCH v4 00/27] refresh qemu-img options handling

On 15.07.2025 21:42, Kevin Wolf wrote: Am 31.05.2025 um 19:15 hat Michael Tokarev geschrieben: This is another iteration of this patch series, which tries to add missing command-line options, --help output, make it all more or less consistent, etc. I addressed (hopefully) all comments so far

Re: [PATCH v2 4/7] i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16]

On 17.07.2025 06:06, Zhao Liu wrote: Hi! Previous incarnation of this patch were Cc'd qemu-stable@, as it were supposed to be picked up for the stable qemu series. However, this incarnation is not Cc'd to stable, and, most importantly, it relies on a feature which was introduced after all relea

Re: [PATCH v2 4/7] i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16]

On 14.07.2025 11:08, Zhao Liu wrote: From: Chuang Xu When QEMU is started with: -cpu host,migratable=on,host-cache-info=on,l3-cache=off -smp 180,sockets=2,dies=1,cores=45,threads=2 On Intel platform: CPUID.01H.EBX[23:16] is defined as "max number of addressable IDs for logical processors in th

Re: [PATCH v3 0/7] esp.c: only allow ESP commands permitted in the current mode

On 11.07.2025 23:46, Mark Cave-Ayland wrote: This series contains a few minor tidy-ups along with an implementation of the logic to only allow ESP commands permitted in the current mode. The motivation is to fix GitLab issue #2464 which causes Windows NT MIPS to bluescreen on boot. Patches 1 to

Re: [PULL v2 01/13] ui/vnc: Do not copy z_stream

On 15.07.2025 09:32, marcandre.lur...@redhat.com wrote: From: Akihiko Odaki vnc_worker_thread_loop() copies z_stream stored in its local VncState to the persistent VncState, and the copied one is freed with deflateEnd() later. However, deflateEnd() refuses to operate with a copied z_stream and

Re: [PATCH v1] vhost: Fix used memslot tracking when destroying a vhost device

On 03.06.2025 14:13, David Hildenbrand wrote: When we unplug a vhost device, we end up calling vhost_dev_cleanup() where we do a memory_listener_unregister(). This memory_listener_unregister() call will end up disconnecting the listener from the address space through listener_del_address_space()

[PATCH 12/27] qemu-img: convert: refresh options/--help (short option change)

Add missing long options and --help output. Reorder options for consistency. Use -b for --backing, and recognize -B for backwards compatibility. Unfortunately we can't use -B to specify backing format. Signed-off-by: Michael Tokarev --- docs/tools/qemu-img.rst | 2 +- qemu-

[PATCH 14/27] qemu-img: map: refresh options/--help

Add missing long options and --help output, reorder options for consistency. While at it, remove unused option_index variable. Signed-off-by: Michael Tokarev --- qemu-img.c | 59 +++--- 1 file changed, 38 insertions(+), 21 deletions(-) diff

Re: [PATCH 14/27] qemu-img: map: refresh options/--help

On 15.07.2025 16:07, Kevin Wolf wrote: +" --start-offset OFFSET\n" -s, --start-offset +" --max-length LENGTH\n" -l, --max-length These are also undocumented. Lemme add some info for them.. /mjt

Re: [PATCH 1/1] qemu-img: add sub-command --remove-all to 'qemu-img bitmap'

On 14.07.2025 11:01, Michael Tokarev wrote: I'd very much love to add more commands/options to qemu-img *after* my big patchset to it is either accepted or rejected.  It's been in the queue for over the years, and I have to rebase it painfully after each change (thankfully there we

Re: [PATCH 1/1] qemu-img: add sub-command --remove-all to 'qemu-img bitmap'

On 07.07.2025 23:58, Denis V. Lunev via wrote: From time to time it is needed to remove all bitmaps from the image. Before this patch the process is not very convinient. One should perform qemu-img info and parse the output to obtain all names. After that one should sequentially call q

Re: [PATCH 3/3] hw/ppc: Add stub for pnv_chip_find_core()

Hi! Has this change been forgotten? Thanks, /mjt On 26.05.2025 14:51, Philippe Mathieu-Daudé wrote: On 26/5/25 13:48, Cédric Le Goater wrote: On 5/26/25 13:23, Philippe Mathieu-Daudé wrote: Since commit 9808ce6d5cb, building QEMU configured with '--without-default-devices' fails:    Undefi

Re: [PATCH] vfio, migration: save device parent pci config

Ping? Has this been forgotten? Thanks, /mjt On 05.06.2025 11:33, oen...@gmail.com wrote: From: Huguanshen Chen On arm64 virtualization platform, vfio-user devices lose their interrupts after migration to the destination. This issue occurs because qemu fails to deliver the msi device id to t

[PULL 3/6] accel/kvm: Adjust the note about the minimum required kernel version

nce this is not actively maintained anymore. Fixes: 126e7f78036 ("kvm: require KVM_CAP_IOEVENTFD and KVM_CAP_IOEVENTFD_ANY_LENGTH") Signed-off-by: Thomas Huth Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Michael Tokarev Signed-off-by: Michael Tokarev --- accel/kvm/kvm-all.c |

[PULL 4/6] docs/system/target-i386: Remove the sentence about RHEL 7 being supported

iu Reviewed-by: Michael Tokarev Signed-off-by: Michael Tokarev --- docs/system/target-i386.rst | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/docs/system/target-i386.rst b/docs/system/target-i386.rst index 43b09c79d6..2374391397 100644 --- a/docs/system/target-i386.rst ++

[PULL 6/6] docs/devel/tracing: Update trace.h creation rune to include SPDX

ption cases to checkpatch. Update the rune to include creating an SPDX line. Signed-off-by: Peter Maydell Reviewed-by: Michael Tokarev Signed-off-by: Michael Tokarev --- docs/devel/tracing.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/devel/tracing.rst b/docs/

[PULL 5/6] hw/uefi: Create and use trace.h wrapper header

7;t follow this pattern in hw/uefi/. Correct this by creating and using the trace.h wrapper header. Signed-off-by: Peter Maydell Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Michael Tokarev Signed-off-by: Michael Tokarev --- hw/uefi/trace.h | 2 ++ hw/uefi/var-service-core

[PULL 1/6] hw/usb/dev-hid: Support side and extra mouse buttons for usb-tablet

From: Thomas Lambertz The necessary plumbing for side- and extra mouse buttons to reach usb-tablet is already done. But the descriptor advertises three buttons max. Increase this to 5. Buttons are now identical to usb-mouse. Signed-off-by: Thomas Lambertz Signed-off-by: Michael Tokarev

[PULL 0/6] Trivial patches for 2025-07-13

The following changes since commit 9a4e273ddec3927920c5958d2226c6b38b543336: Merge tag 'pull-tcg-20250711' of https://gitlab.com/rth7680/qemu into staging (2025-07-13 01:46:04 -0400) are available in the Git repository at: https://gitlab.com/mjt0k/qemu.git tags/pull-trivial-patches for you

[PULL 2/6] docs: remove repeated word

From: Andrew Kreimer The word 'find' appears twice, remove the extra one. Signed-off-by: Andrew Kreimer Reviewed-by: Markus Armbruster Reviewed-by: Michael Tokarev Signed-off-by: Michael Tokarev --- docs/system/introduction.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletio

Re: [PATCH] net: fix buffer overflow in af_xdp_umem_create()

Ping? Thanks, /mjt On 02.06.2025 13:09, Ilya Maximets wrote: On 6/2/25 10:57 AM, Anastasia Belova wrote: s->pool has n_descs elements so maximum i should be n_descs - 1. Fix the upper bound. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: cb039ef3d9 ("net: add initi

Re: [PATCH 0/2] ui: fix VNC endian regression & improve tracing

On 04.06.2025 19:22, Daniel P. Berrangé wrote: Daniel P. Berrangé (2): ui: fix setting client_endian field defaults ui: add trace events for all client messages ui/trace-events | 14 + ui/vnc.c| 53 + 2 files changed,

Re: [Stable-10.0.3 00/39] Patch Round-up for stable 10.0.3, freeze on 2025-07-21

On 12.07.2025 00:51, Volker Rümelin wrote: Am 11.07.25 um 10:15 schrieb Michael Tokarev: The following patches are queued for QEMU stable v10.0.3: https://gitlab.com/qemu-project/qemu/-/commits/staging-10.0 Patch freeze is 2025-07-21, and the release is planned for 2025-07-23: https

[Stable-7.2.19 09/15] tcg: Fix constant propagation in tcg_reg_alloc_dup

rom commit 0d0fc3f4658937fb81fcc16a89738e83bd8d4795) Signed-off-by: Michael Tokarev diff --git a/tcg/tcg.c b/tcg/tcg.c index e7aa02c447..6c8f86ecb7 100644 --- a/tcg/tcg.c +++ b/tcg/tcg.c @@ -3491,7 +3491,7 @@ static void tcg_reg_alloc_dup(TCGContext *s, const TCGOp *op) if (its->val_type == T

[Stable-7.2.19 15/15] target/arm: Fix f16_dotadd vs nan selection

Henderson Message-id: 20250704142112.1018902-9-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit cfc688c00ade84f6b32c7814b52c217f1d3b5eb1) Signed-off-by: Michael Tokarev diff --git a/target/arm/sme_helper.c b/target/arm/sme_helper.c index fd5625c87e..e8b4ca38ff 10

[Stable-7.2.19 07/15] qemu-options.hx: Fix reversed description of icount sleep behavior

icked from commit e372214e663a4370fe064f7867f402eade37357e) Signed-off-by: Michael Tokarev diff --git a/qemu-options.hx b/qemu-options.hx index 2c00ceac83..9a2ddb7be7 100644 --- a/qemu-options.hx +++ b/qemu-options.hx @@ -4497,13 +4497,13 @@ SRST with actual performance. When the virt

[Stable-7.2.19 04/15] hw/core/qdev-properties-system: Add missing return in set_drive_helper()

na Ebner Message-ID: <20250523070211.280498-1-f.eb...@proxmox.com> Reviewed-by: Daniel P. Berrangé Reviewed-by: Kevin Wolf Signed-off-by: Kevin Wolf (cherry picked from commit eef2dd03f948a512499775043bdc0c5c88d8a2dd) Signed-off-by: Michael Tokarev diff --git a/hw/core/qdev-properties-sys

[Stable-7.2.19 08/15] linux-user/arm: Fix return value of SYS_cacheflush

(cherry picked from commit 5ad2b1f443a96444cf3e7a2fbe17aae696201012) Signed-off-by: Michael Tokarev diff --git a/linux-user/arm/cpu_loop.c b/linux-user/arm/cpu_loop.c index 85804c367a..f87e85c9e6 100644 --- a/linux-user/arm/cpu_loop.c +++ b/linux-user/arm/cpu_loop.c @@ -395,6 +395,7 @@ void

[Stable-7.2.19 10/15] target/arm: Correct KVM & HVF dtb_compatible value

7bd09a3e6) (Mjt: the change is in target/arm/kvm64.c, not ../kvm.c) Signed-off-by: Michael Tokarev diff --git a/target/arm/hvf/hvf.c b/target/arm/hvf/hvf.c index 047cb8fc50..dfce8181f9 100644 --- a/target/arm/hvf/hvf.c +++ b/target/arm/hvf/hvf.c @@ -489,7 +489,7 @@ static bool hvf_arm_get_ho

[Stable-7.2.19 13/15] target/arm: Fix 128-bit element ZIP, UZP, TRN

...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit e6ffd009c7710a8cc98094897fa0af609c114683) Signed-off-by: Michael Tokarev diff --git a/target/arm/translate-sve.c b/target/arm/translate-sve.c index 034e816491..02302abfbd 100644 --- a/target/arm/translate-sve.c +++ b/target/arm

[Stable-7.2.19 05/15] hw/loongarch/virt: Fix big endian support with MCFG table

cked from commit 9c55c03c05c1899521ff0c991b9296633d759890) Signed-off-by: Michael Tokarev diff --git a/hw/loongarch/acpi-build.c b/hw/loongarch/acpi-build.c index 7d5f5a757d..5959d3b88e 100644 --- a/hw/loongarch/acpi-build.c +++ b/hw/loongarch/acpi-build.c @@ -393,8 +393,8 @@ static void acpi_build(AcpiBuildTables *table

[Stable-7.2.19 14/15] target/arm: Fix PSEL size operands to tcg_gen_gvec_ands

y: Richard Henderson Message-id: 20250704142112.1018902-8-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit 3801c5b75ffc60957265513338e8fd5f8b6ce8a1) Signed-off-by: Michael Tokarev diff --git a/target/arm/translate-sve.c b/target/arm/translate-sve.c index 02302abfbd..

[Stable-7.2.19 11/15] target/arm: Fix SME vs AdvSIMD exception priority

.1018902-2-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit f9b0f69304071384b12912bf9dd78e9ffd261cec) (Mjt: compensate for target/arm/translate-a64.c => target/arm/tcg/ files move by v7.2.0-1632-gf0984d4040c3) Signed-off-by: Michael Tokarev diff --git a/target/arm/tr

[Stable-7.2.19 12/15] target/arm: Fix sve_access_check for SME

-3-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit b4b2e070f41dd8774a70c6186141678558d79a38) (Mjt: compensate for target/arm/translate-a64.c => target/arm/tcg/ files move by v7.2.0-1632-gf0984d4040c3) Signed-off-by: Michael Tokarev diff --git a/target/

[Stable-7.2.19 03/15] audio: fix SIGSEGV in AUD_get_buffer_size_out()

public AUD_*_out() and audio_*_out() functions handle this case. Reviewed-by: Marc-André Lureau Signed-off-by: Volker Rümelin Message-Id: <20250515054429.7385-2-vr_q...@t-online.de> (cherry picked from commit 5ddd6c8dc849b4af44bd06840c9133d64e62c27c) Signed-off-by: Michael Tokarev diff -

[Stable-7.2.19 06/15] hw/arm/virt: Check bypass iommu is not set for iommu-map DT property

dc60d) Signed-off-by: Michael Tokarev diff --git a/hw/arm/virt.c b/hw/arm/virt.c index b871350856..5bf58ff550 100644 --- a/hw/arm/virt.c +++ b/hw/arm/virt.c @@ -1390,9 +1390,12 @@ static void create_virtio_iommu_dt_bindings(VirtMachineState *vms) qemu_fdt_setprop_cell(ms->fdt, node, "

[Stable-7.2.19 00/15] Patch Round-up for stable 7.2.19, freeze on 2025-07-21

The following patches are queued for QEMU stable v7.2.19: https://gitlab.com/qemu-project/qemu/-/commits/staging-7.2 Patch freeze is 2025-07-21, and the release is planned for 2025-07-23: https://wiki.qemu.org/Planning/7.2 Please respond here or CC qemu-sta...@nongnu.org on any additional p

[Stable-7.2.19 01/15] hw/misc/aspeed_hace: Ensure HASH_IRQ is always set to prevent firmware hang

Le Goater Link: https://lore.kernel.org/qemu-devel/20250515081008.583578-4-jamin_...@aspeedtech.com Signed-off-by: Cédric Le Goater (cherry picked from commit fb8e59abbe46957cd599bb9aa9221fad1e4e989e) Signed-off-by: Michael Tokarev diff --git a/hw/misc/aspeed_hace.c b/hw/misc/aspeed_hace.c i

[Stable-7.2.19 02/15] vhost: Don't set vring call if guest notifier is unused

el S. Tsirkin (cherry picked from commit a9403bfcd93025df7b1924d0cf34fbc408955b33) Signed-off-by: Michael Tokarev diff --git a/hw/pci/pci.c b/hw/pci/pci.c index 2f450f6a72..c389172f27 100644 --- a/hw/pci/pci.c +++ b/hw/pci/pci.c @@ -1484,7 +1484,7 @@ static void pci_update_mappings(PCIDevice *d)

[Stable-10.0.3 08/39] ui/vnc.c: replace big endian flag with byte order value

Signed-off-by: Daniel P. Berrangé (cherry picked from commit 7ed96710e82c385c6cfc3d064eec7dde20f0f3fd) Signed-off-by: Michael Tokarev diff --git a/ui/vnc-enc-tight.c b/ui/vnc-enc-tight.c index 41f559eb83..f8aaa8f346 100644 --- a/ui/vnc-enc-tight.c +++ b/ui/vnc-enc-tight.c @@ -150,7 +150,7

[Stable-10.0.3 10/39] ui/vnc: fix tight palette pixel encoding for 8/16-bpp formats

ed-by: Philippe Mathieu-Daudé Signed-off-by: Daniel P. Berrangé (cherry picked from commit 63d320909220a90647c484263ae5e2f26eb54587) Signed-off-by: Michael Tokarev diff --git a/ui/vnc-enc-tight.c b/ui/vnc-enc-tight.c index a5bdc19ebb..25c7b2c788 100644 --- a/ui/vnc-enc-tight.c +++ b/ui/vnc-enc-ti

[Stable-10.0.3 34/39] target/arm: Fix SME vs AdvSIMD exception priority

.1018902-2-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit f9b0f69304071384b12912bf9dd78e9ffd261cec) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/translate-a64.c b/target/arm/tcg/translate-a64.c index f6e88eb5f7..aebf313e38 100644 --- a/target/arm/tcg/tra

[Stable-10.0.3 37/39] target/arm: Fix PSEL size operands to tcg_gen_gvec_ands

y: Richard Henderson Message-id: 20250704142112.1018902-8-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit 3801c5b75ffc60957265513338e8fd5f8b6ce8a1) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/translate-sve.c b/target/arm/tcg/translate-sve.c index

[Stable-10.0.3 12/39] vhost: Don't set vring call if guest notifier is unused

el S. Tsirkin (cherry picked from commit a9403bfcd93025df7b1924d0cf34fbc408955b33) Signed-off-by: Michael Tokarev diff --git a/hw/pci/pci.c b/hw/pci/pci.c index 2844ec5556..503a897528 100644 --- a/hw/pci/pci.c +++ b/hw/pci/pci.c @@ -1719,7 +1719,7 @@ static void pci_update_mappings(PCIDevice *d)

[Stable-10.0.3 11/39] hw/arm: Add missing psci_conduit to NPCM8XX SoC boot info

nongnu.org Cc: Hao Wu Cc: Peter Maydell Signed-off-by: Guenter Roeck Message-id: 20250315142050.3642741-1-li...@roeck-us.net Reviewed-by: Peter Maydell Signed-off-by: Peter Maydell (cherry picked from commit e6bc01777e5a4b6ecf3414b21a2d7b4846bf4817) Signed-off-by: Michael Tokarev diff --gi

[Stable-10.0.3 36/39] target/arm: Fix 128-bit element ZIP, UZP, TRN

...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit e6ffd009c7710a8cc98094897fa0af609c114683) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/translate-sve.c b/target/arm/tcg/translate-sve.c index d23be477b4..40d3a032d6 100644 --- a/target/arm/tcg/translate-sve.c +++ b

[Stable-10.0.3 39/39] target/arm: Fix bfdotadd_ebf vs nan selection

-by: Peter Maydell Message-id: 20250704142112.1018902-10-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit bf020eaa6741711902a425016e2c7585f222562d) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/vec_helper.c b/target/arm/tcg/vec_helper.c index

[Stable-10.0.3 06/39] ui/gtk: Update scales in fixed-scale mode when rendering GL area

fixes this issue. Signed-off-by: Weifeng Liu Message-ID: <20250511073337.876650-5-weifeng.li...@gmail.com> Acked-by: Gerd Hoffmann Acked-by: Marc-André Lureau (cherry picked from commit 8fb072472c38cb1778c5b0bebf535a8b13533857) Signed-off-by: Michael Tokarev diff --git a/ui/gtk-gl-area.c

[Stable-10.0.3 35/39] target/arm: Fix sve_access_check for SME

-3-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit b4b2e070f41dd8774a70c6186141678558d79a38) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/translate-a64.c b/target/arm/tcg/translate-a64.c index aebf313e38..8d3a8d7a25 100644 --- a/target/arm/tcg

[Stable-10.0.3 17/39] audio: fix size calculation in AUD_get_buffer_size_out()

picked from commit ccb4fec0e5f233cb61a83b3af59ae11716ea06c0) Signed-off-by: Michael Tokarev diff --git a/audio/audio.c b/audio/audio.c index 70ef22b1a4..3f5baf0cc6 100644 --- a/audio/audio.c +++ b/audio/audio.c @@ -909,6 +909,10 @@ int AUD_get_buffer_size_out(SWVoiceOut *sw) return 0; } +if (audio_get_

[Stable-10.0.3 18/39] hw/audio/asc: fix SIGSEGV in asc_realize()

Signed-off-by: Volker Rümelin Reviewed-by: Mark Cave-Ayland Message-Id: <20250515054429.7385-4-vr_q...@t-online.de> (cherry picked from commit d009f26a54f573468be721590a19350c224bc730) Signed-off-by: Michael Tokarev diff --git a/hw/audio/asc.c b/hw/audio/asc.c index cc205bf063..b7d0fd8acd

[Stable-10.0.3 00/39] Patch Round-up for stable 10.0.3, freeze on 2025-07-21

The following patches are queued for QEMU stable v10.0.3: https://gitlab.com/qemu-project/qemu/-/commits/staging-10.0 Patch freeze is 2025-07-21, and the release is planned for 2025-07-23: https://wiki.qemu.org/Planning/10.0 Please respond here or CC qemu-sta...@nongnu.org on any additional

[Stable-10.0.3 16/39] audio: fix SIGSEGV in AUD_get_buffer_size_out()

public AUD_*_out() and audio_*_out() functions handle this case. Reviewed-by: Marc-André Lureau Signed-off-by: Volker Rümelin Message-Id: <20250515054429.7385-2-vr_q...@t-online.de> (cherry picked from commit 5ddd6c8dc849b4af44bd06840c9133d64e62c27c) Signed-off-by: Michael Tokarev diff -

[Stable-10.0.3 38/39] target/arm: Fix f16_dotadd vs nan selection

Henderson Message-id: 20250704142112.1018902-9-richard.hender...@linaro.org Signed-off-by: Peter Maydell (cherry picked from commit cfc688c00ade84f6b32c7814b52c217f1d3b5eb1) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/sme_helper.c b/target/arm/tcg/sme_helper.c index dcc48e43db..a499230

[Stable-10.0.3 33/39] hw/s390x/ccw-device: Fix memory leak in loadparm setter

stable-10.0 branch) Signed-off-by: Michael Tokarev diff --git a/hw/s390x/ccw-device.c b/hw/s390x/ccw-device.c index 1ea9934f6c..a5ee9dc84d 100644 --- a/hw/s390x/ccw-device.c +++ b/hw/s390x/ccw-device.c @@ -57,7 +57,7 @@ static void ccw_device_set_loadparm(Object *obj, Visitor *v,

[Stable-10.0.3 28/39] target/loongarch: fix vldi/xvldi raise wrong error

Gao (cherry picked from commit c2a2e1ad2a749caa864281b1d4dc3f16c3f344f6) Signed-off-by: Michael Tokarev diff --git a/target/loongarch/tcg/insn_trans/trans_vec.c.inc b/target/loongarch/tcg/insn_trans/trans_vec.c.inc index d6f0560349..78730029cb 100644 --- a/target/loongarch/tcg/insn_trans/trans_ve

[Stable-10.0.3 27/39] target/loongarch: add check for fcond

commit e7788da9860c97920c19fa1150806186513ef256) Signed-off-by: Michael Tokarev diff --git a/target/loongarch/tcg/insn_trans/trans_fcmp.c.inc b/target/loongarch/tcg/insn_trans/trans_fcmp.c.inc index 3babf69e4a..6a2c030a6b 100644 --- a/target/loongarch/tcg/insn_trans/trans_fcmp.c.inc +++ b/target/loongarch/tcg/insn

[Stable-10.0.3 29/39] tcg: Fix constant propagation in tcg_reg_alloc_dup

rom commit 0d0fc3f4658937fb81fcc16a89738e83bd8d4795) Signed-off-by: Michael Tokarev diff --git a/tcg/tcg.c b/tcg/tcg.c index dfd48b8264..b1a7465df2 100644 --- a/tcg/tcg.c +++ b/tcg/tcg.c @@ -4927,7 +4927,7 @@ static void tcg_reg_alloc_dup(TCGContext *s, const TCGOp *op) if (its->val_type == T

[Stable-10.0.3 23/39] hw/arm/virt: Check bypass iommu is not set for iommu-map DT property

dc60d) Signed-off-by: Michael Tokarev diff --git a/hw/arm/virt.c b/hw/arm/virt.c index a96452f17a..0e78616aac 100644 --- a/hw/arm/virt.c +++ b/hw/arm/virt.c @@ -1492,9 +1492,12 @@ static void create_virtio_iommu_dt_bindings(VirtMachineState *vms) qemu_fdt_setprop_cell(ms->fdt, node, "

[Stable-10.0.3 22/39] hw/loongarch/virt: Fix big endian support with MCFG table

cked from commit 9c55c03c05c1899521ff0c991b9296633d759890) Signed-off-by: Michael Tokarev diff --git a/hw/loongarch/virt-acpi-build.c b/hw/loongarch/virt-acpi-build.c index fced6c445a..24ccb580bd 100644 --- a/hw/loongarch/virt-acpi-build.c +++ b/hw/loongarch/virt-acpi-build.c @@ -575,8 +575,8 @@ static void acpi_build

  1   2   3   4   5   6   7   8   9   10   >