The following changes since commit 94826ec1370328375c3b6d1e80fdc94c8f46c348:

  Merge tag 'accel-20260706' of https://github.com/philmd/qemu into staging (2026-07-06 18:38:14 +0200)

are available in the Git repository at:

  https://github.com/philmd/qemu.git tags/hw-misc-20260707

for you to fetch changes up to 04584a27dd59741bc20272c6faab96c08bcbb926:

  Revert "aspeed/smc: snoop SPI transfers to fake dummy cycles" (2026-07-07 15:08:41 +0200)

----------------------------------------------------------------
Misc HW patches

- Fix in few trace event formats
- A pair of improvements in util/
- FlexCAN3 to imx8mp-evk board
- Various fixes in hw/
  (EDU, ATI VGA, IDE AHCI, PCA9552, i8257 DMA,
   e1000e/igb, MPT SAS, Hyper-V, QXL, M25P80)
----------------------------------------------------------------

BALATON Zoltan (1):
  hw/display/ati: Include vga state in the blit context

Bernhard Beschow (5):
  hw/net/can/flexcan: Wire clock control module via link property
  hw/net/can/flexcan: Subclass TYPE_CAN_FLEXCAN
  hw/arm/imx8mp-evk: Open code DEFINE_MACHINE_AARCH64
  hw/arm/imx8mp-evk: Introduce FslImx8mpEvkState
  hw/arm: Add basic FlexCAN3 support to TYPE_FSL_IMX8MP and imx8mp-evk

Bin Meng (8):
  hw/block: m25p80: Fix dummy byte handling for Winbond flash
  hw/block: m25p80: Fix dummy byte handling for Numonyx/Micron flash
  hw/block: m25p80: Fix dummy byte handling for Macronix flash
  hw/ssi: npcm7xx_fiu: Correct the dummy cycle emulation logic
  hw/ssi: xilinx_spips: Fix dummy phase handling
  hw/ssi: aspeed_smc: Fix direct-read dummy bytes
  Revert "aspeed/smc: Fix number of dummy cycles for FAST_READ_4
    command"
  Revert "aspeed/smc: snoop SPI transfers to fake dummy cycles"

Denis V. Lunev (1):
  hw/ide/ahci: cancel in-flight buffered reads on command engine restart

Dmitry Frolov (1):
  utils/module: fix memleak in module_load()

Evgeny Kolmakov (1):
  util/filemonitor-inotify: Use QEMU_LOCK_GUARD()

Junjie Cao (2):
  hw/display/ati: reset host_data.next in write handler after flush
  hw/display/ati: guard against zero bpp in ati_host_data_flush

Mark Cave-Ayland (2):
  hw/rtc/mc146818rtc: convert date from object prop to class prop
  hw/acpi/ich9: move initial property values into
    ich9_reset_properties()

Peter Maydell (3):
  hw/dma/i8257: Return zeroes for read_memory in verify mode
  hw/scsi/mptsas: Reset doorbell state on reset
  hw/hyperv: Avoid crash if hyperv_find_cpu() passed invalid vp_index

Sanjeeva Yerrapureddy (1):
  hw/net: fix e1000e/igb ip_len inflation by Ethernet minimum-frame
    padding

Shameer Kolothum (1):
  backends/iommufd: Fix dev_id and type order in viommu trace

Song Gao (1):
  hw/intc/loongarch_dintc: Fix OOB access in DINT MMIO write handler

Thomas Huth (1):
  hw/display/qxl: Fix mono cursor validation that can read past a cursor
    chunk

Torin Carey (1):
  hw/misc/edu: restrict dma access to dma buffer

yujun (3):
  hw/gpio/pca9552: fix off-by-one in QOM led index validation
  ebpf: fix swapped toeplitz/indirection args in set_data trace
  crypto/x509-utils: fix gnutls error code in crt_init failure path

 docs/system/arm/imx8m.rst     |   1 +
 include/hw/acpi/ich9.h        |   2 +
 include/hw/arm/fsl-imx8mp.h   |   8 ++
 include/hw/net/flexcan.h      |   4 +-
 include/hw/ssi/aspeed_smc.h   |   2 -
 include/hw/ssi/xilinx_spips.h |   2 +-
 crypto/x509-utils.c           |   3 +-
 ebpf/ebpf_rss.c               |   2 +-
 hw/acpi/ich9.c                |   8 +-
 hw/arm/fsl-imx6.c             |   5 +-
 hw/arm/fsl-imx8mp.c           |  38 ++++++++++
 hw/arm/imx8mp-evk.c           |  64 +++++++++++++---
 hw/block/m25p80.c             | 122 +++++++++++++++++++-----------
 hw/display/ati.c              |   2 +
 hw/display/ati_2d.c           |  44 +++++------
 hw/display/qxl-render.c       |   8 +-
 hw/dma/i8257.c                |  13 ++++
 hw/gpio/pca9552.c             |   8 +-
 hw/hyperv/hyperv.c            |   4 +-
 hw/ide/ahci.c                 |   3 +
 hw/intc/loongarch_dintc.c     |  13 ++++
 hw/isa/lpc_ich9.c             |   1 +
 hw/misc/edu.c                 |  24 +++---
 hw/misc/imx8mp_ccm.c          |   3 +
 hw/net/can/flexcan.c          |  90 ++++++++++++++++++-----
 hw/net/net_tx_pkt.c           |   7 +-
 hw/rtc/mc146818rtc.c          |   4 +-
 hw/scsi/mptsas.c              |   4 +
 hw/ssi/aspeed_smc.c           | 135 +++++-----------------------------
 hw/ssi/npcm7xx_fiu.c          |  25 ++-----
 hw/ssi/xilinx_spips.c         | 123 ++++++++++++++++++++++---------
 util/filemonitor-inotify.c    |  28 ++-----
 util/module.c                 |   2 +-
 backends/trace-events         |   2 +-
 hw/arm/Kconfig                |   1 +
 hw/ssi/trace-events           |   1 -
 36 files changed, 488 insertions(+), 318 deletions(-)

-- 
2.53.0

Am 7. Juli 2026 13:11:50 UTC schrieb "Philippe Mathieu-Daudé" <philmd@oss.qualcomm.com>:
>The following changes since commit 94826ec1370328375c3b6d1e80fdc94c8f46c348:
>
>  Merge tag 'accel-20260706' of https://github.com/philmd/qemu into staging (2026-07-06 18:38:14 +0200)
>
>are available in the Git repository at:
>
>  https://github.com/philmd/qemu.git tags/hw-misc-20260707
>
>for you to fetch changes up to 04584a27dd59741bc20272c6faab96c08bcbb926:
>
>  Revert "aspeed/smc: snoop SPI transfers to fake dummy cycles" (2026-07-07 15:08:41 +0200)
>
>----------------------------------------------------------------
>Misc HW patches
>
>- Fix in few trace event formats
>- A pair of improvements in util/
>- FlexCAN3 to imx8mp-evk board
>- Various fixes in hw/
>  (EDU, ATI VGA, IDE AHCI, PCA9552, i8257 DMA,
>   e1000e/igb, MPT SAS, Hyper-V, QXL, M25P80)
>----------------------------------------------------------------
>
>BALATON Zoltan (1):
>  hw/display/ati: Include vga state in the blit context
>
>Bernhard Beschow (5):
>  hw/net/can/flexcan: Wire clock control module via link property
>  hw/net/can/flexcan: Subclass TYPE_CAN_FLEXCAN
>  hw/arm/imx8mp-evk: Open code DEFINE_MACHINE_AARCH64
>  hw/arm/imx8mp-evk: Introduce FslImx8mpEvkState
>  hw/arm: Add basic FlexCAN3 support to TYPE_FSL_IMX8MP and imx8mp-evk

Thanks Phil! I owe you two beer (another one for the rs5c372). Or whatever liquid you like.

Best,
Bernhard

>
>Bin Meng (8):
>  hw/block: m25p80: Fix dummy byte handling for Winbond flash
>  hw/block: m25p80: Fix dummy byte handling for Numonyx/Micron flash
>  hw/block: m25p80: Fix dummy byte handling for Macronix flash
>  hw/ssi: npcm7xx_fiu: Correct the dummy cycle emulation logic
>  hw/ssi: xilinx_spips: Fix dummy phase handling
>  hw/ssi: aspeed_smc: Fix direct-read dummy bytes
>  Revert "aspeed/smc: Fix number of dummy cycles for FAST_READ_4
>    command"
>  Revert "aspeed/smc: snoop SPI transfers to fake dummy cycles"
>
>Denis V. Lunev (1):
>  hw/ide/ahci: cancel in-flight buffered reads on command engine restart
>
>Dmitry Frolov (1):
>  utils/module: fix memleak in module_load()
>
>Evgeny Kolmakov (1):
>  util/filemonitor-inotify: Use QEMU_LOCK_GUARD()
>
>Junjie Cao (2):
>  hw/display/ati: reset host_data.next in write handler after flush
>  hw/display/ati: guard against zero bpp in ati_host_data_flush
>
>Mark Cave-Ayland (2):
>  hw/rtc/mc146818rtc: convert date from object prop to class prop
>  hw/acpi/ich9: move initial property values into
>    ich9_reset_properties()
>
>Peter Maydell (3):
>  hw/dma/i8257: Return zeroes for read_memory in verify mode
>  hw/scsi/mptsas: Reset doorbell state on reset
>  hw/hyperv: Avoid crash if hyperv_find_cpu() passed invalid vp_index
>
>Sanjeeva Yerrapureddy (1):
>  hw/net: fix e1000e/igb ip_len inflation by Ethernet minimum-frame
>    padding
>
>Shameer Kolothum (1):
>  backends/iommufd: Fix dev_id and type order in viommu trace
>
>Song Gao (1):
>  hw/intc/loongarch_dintc: Fix OOB access in DINT MMIO write handler
>
>Thomas Huth (1):
>  hw/display/qxl: Fix mono cursor validation that can read past a cursor
>    chunk
>
>Torin Carey (1):
>  hw/misc/edu: restrict dma access to dma buffer
>
>yujun (3):
>  hw/gpio/pca9552: fix off-by-one in QOM led index validation
>  ebpf: fix swapped toeplitz/indirection args in set_data trace
>  crypto/x509-utils: fix gnutls error code in crt_init failure path
>
> docs/system/arm/imx8m.rst     |   1 +
> include/hw/acpi/ich9.h        |   2 +
> include/hw/arm/fsl-imx8mp.h   |   8 ++
> include/hw/net/flexcan.h      |   4 +-
> include/hw/ssi/aspeed_smc.h   |   2 -
> include/hw/ssi/xilinx_spips.h |   2 +-
> crypto/x509-utils.c           |   3 +-
> ebpf/ebpf_rss.c               |   2 +-
> hw/acpi/ich9.c                |   8 +-
> hw/arm/fsl-imx6.c             |   5 +-
> hw/arm/fsl-imx8mp.c           |  38 ++++++++++
> hw/arm/imx8mp-evk.c           |  64 +++++++++++++---
> hw/block/m25p80.c             | 122 +++++++++++++++++++-----------
> hw/display/ati.c              |   2 +
> hw/display/ati_2d.c           |  44 +++++------
> hw/display/qxl-render.c       |   8 +-
> hw/dma/i8257.c                |  13 ++++
> hw/gpio/pca9552.c             |   8 +-
> hw/hyperv/hyperv.c            |   4 +-
> hw/ide/ahci.c                 |   3 +
> hw/intc/loongarch_dintc.c     |  13 ++++
> hw/isa/lpc_ich9.c             |   1 +
> hw/misc/edu.c                 |  24 +++---
> hw/misc/imx8mp_ccm.c          |   3 +
> hw/net/can/flexcan.c          |  90 ++++++++++++++++++-----
> hw/net/net_tx_pkt.c           |   7 +-
> hw/rtc/mc146818rtc.c          |   4 +-
> hw/scsi/mptsas.c              |   4 +
> hw/ssi/aspeed_smc.c           | 135 +++++-----------------------------
> hw/ssi/npcm7xx_fiu.c          |  25 ++-----
> hw/ssi/xilinx_spips.c         | 123 ++++++++++++++++++++++---------
> util/filemonitor-inotify.c    |  28 ++-----
> util/module.c                 |   2 +-
> backends/trace-events         |   2 +-
> hw/arm/Kconfig                |   1 +
> hw/ssi/trace-events           |   1 -
> 36 files changed, 488 insertions(+), 318 deletions(-)
>

Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/11.1 for any user-visible changes.