The following changes since commit 1df256f5968e9f7c3c4533a1383b071c044a36d6:

  Merge tag 'qom-qapi-pr-pr-v1' of https://gitlab.com/marcandre.lureau/qemu into staging (2026-09-08 18:35:31 +0100)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/virt/kvm/mst/qemu.git tags/for_upstream

for you to fetch changes up to 99c75c61d61251d98e0b93dd199edbb10a990205:

  MAINTAINERS: add Junjie Cao as CXL reviewer (2026-09-10 10:55:03 -0400)

----------------------------------------------------------------
pci, vhost, virtio, iommu, apci: features, fixes

migration/cpr now supports vhost-vsock devices
new vhost-user-media device
virtio-net now supports live-TAP local migration
vhost-user-gpu now supports blob resources and shared memory
cxl now supports CFMW restrictions and per-window options
intel_iommu now supports concurrent page fault handling with PRI
pci now batches memory transactions around mapping updates
vhost-user-blk now allows toggling inflight-migration at runtime
virtio-rtc now supports smeared UTC clock type
intel_iommu now exposes SMPWC when SVM is enabled
new reviewer for CXL patches

Fixes, cleanups all over the place

Signed-off-by: Michael S. Tsirkin <mst@redhat.com>

----------------------------------------------------------------
Albert Esteve (4):
      linux-headers: add VIRTIO_ID_MEDIA
      hw/display: add vhost-user-media device
      hw/display/vhost-user-media: add shared memory region BAR
      linux-headers: Update to Linux v7.3-rc1

Alexandr Moshkov (6):
      vhost-user: add skip_drain param to do_vhost_virtqueue_stop
      vhost-user: add GET_VRING_BASE_SKIP_DRAIN message
      vhost-user: use skip_drain with GET_VRING_BASE_SKIP_DRAIN message
      vhost-user-blk: make inflight-migration prop mutable on running vm
      vhost-user-blk: move inflight_needed higher
      vhost-user-blk: use GET_VRING_BASE_SKIP_DRAIN when inflight-migration is on

Alyssa Ross (1):
      vhost-user.rst: fix typo

Andrey Drobyshev (10):
      vhost-vsock: block CPR migration modes
      vhost: add vhost_reset_owner op
      vhost-vsock: don't reset connections during CPR
      vhost-vsock: fix FD leak in realize()
      vhost-vsock: preserve vhost FD during CPR
      vhost: factor out vhost_dev_init_backend()
      vhost: make vhost_dev_cleanup() safe on a partially initialized device
      vhost: add vhost_dev_set_owner() / vhost_dev_reset_owner() helpers
      vhost: add vhost_dev_is_initialized() helper
      vhost-vsock: hand off device ownership across CPR

Bin Guo (2):
      libvhost-user: accept the postcopy client base ack in vu_add_mem_reg()
      libvhost-user: return the backend mapping address for added regions

Clément MATHIEU--DRIF (4):
      intel_iommu: Support concurrent page fault handling with PRI
      intel_iommu: Only set dirty bit when PTE exposes write permission
      intel_iommu: Always write all the flags passed to vtd_set_flag_in_pte
      intel_iommu: Expose SMPWC when SVM is enabled

Davidlohr Bueso (5):
      tests/bios-tables-test: Exclude CEDT.cxl for the CFMW restriction change
      hw/cxl: Drop Back-Invalidate from default CFMW window restrictions
      tests/acpi/cxl: Update CEDT.cxl for the default CFMW restrictions
      hw/cxl: Add configurable CXL Fixed Memory Window restriction flags
      tests/qtest/cxl: Add CXL Fixed Memory Window restriction flag tests

Denis V. Lunev (2):
      pci: batch BAR remapping into one memory transaction
      pci: load a device's config inside one memory transaction

Dorinda Bassey (1):
      vhost: Fix SHMEM_MAP transaction ordering and resulting deadlock

Feifan Qian (1):
      vhost-user: Reject SHMEM_MAP when no KVM memory slot is left

GuoHan Zhao (1):
      virtio-crypto: clean up every data queue

Hanna Czenczek (6):
      hw/virtio-blk: Account discard operations
      hw/virtio-blk: Complete zone-append cookies
      hw/nvme: Fix block accounting in nvme_copy()
      hw/nvme: Fix block accounting for compare
      hw/ide: Have ide_dma_cb() complete accounting
      hw/scsi-disk: Fix accounting for IGNORE, ret > 0

Jia Jia (2):
      virtio: reduce code duplication for split ring
      hw/virtio: reject inverted virtio-iommu IOVA ranges

Junjie Cao (3):
      hw/cxl: Fix guest-triggerable QEMU exit on reserved interleave ways
      hw/cxl: fix the CDAT DOE overlapping the Flex Bus DVSEC when sn= is set
      MAINTAINERS: add Junjie Cao as CXL reviewer

Kuan-Wei Chiu (1):
      virtio-rtc: Report smeared UTC clock type

Laurent Vivier (2):
      hw/net/virtio-net: check packet size before VLAN tag access in receive_filter()
      hw/net/virtio-net: strip trailing padding when caching RSC segment

Marc-André Lureau (1):
      vhost-user-gpu: validate command buffer size in submit_3d

Matej Hrica (2):
      vhost-user-gpu: Add shared memory region support
      vhost-user-gpu: Forward RESOURCE_BLOB and CONTEXT_INIT flags

Michael S. Tsirkin (7):
      virtio: fix exit(1) on DMA mapping failure during migration restore
      virtio: fix config_len DoS in migration restore path
      virtio-pci: reject Q_ENABLE write on already-enabled queue
      meson: disable "maybe uninitilized" errors with -Og
      virtio-balloon: fix free-page BH teardown on unrealize
      net/tap-solaris: Fix resource leaks on error paths
      virtio-net: validate IHL in virtio_net_rsc_extract_unit4 before use

Philippe Mathieu-Daudé (4):
      hw/acpi: Make AcpiGedState const in build_ged_aml()
      hw/hotplug: Mark various HotplugHandlerClass variables as const
      hw/hotplug: Reduce some HotplugHandler variables scope
      hw/hotplug: Constify HotplugHandler

Sairaj Kodilkar (7):
      amd_iommu: Return empty efr for stub call
      tests/acpi: x86: Allow IVRS acpi table changes
      amd_iommu: acpi-build: update PA, GVA and VA size macros
      acpi_build: Use IOMMU pci device to build IOMMU DeviceID
      acpi_build: Build IVRS feature report using extended feature register
      amd_iommu: acpi-build: Remove unsupported PPR and HE feature
      tests/acpi: x86: update golden masters for IVRS

Stefan Hajnoczi (1):
      virtio-scsi: set dataplane_started to false upon failure

Vladimir Sementsov-Ogievskiy (16):
      net/tap: rework tap_parse_script
      net/tap: improve script/downscript options documentation
      net/tap: deprecate "no" as special value for script/downscript
      net/tap: move vhost-net open() calls to tap_parse_vhost_fds()
      net/tap: move vhost initialization to tap_setup_vhost()
      net/tap: use container_of instead of DO_UPCAST
      net/tap: QOMify tap backend
      net/tap: add TYPE_VMSTATE_IF interface
      qapi: add local migration parameter
      migration/fd: fix fd leak when fd is not valid for migration
      migration/fd: add errp parameter to migration_fd_valid()
      migration: check that transfer is UNIX socket when "local" set
      virtio-net: support local migration of backend
      net/tap: disable read polling for stopped VM
      net/tap: support local migration with virtio-net
      tests/functional: add test_tap_migration

Xiong Weimin (1):
      hw/virtio: Propagate vhost_virtqueue_mask errors

 MAINTAINERS                                   |   7 +
 docs/about/deprecated.rst                     |  18 +
 docs/interop/vhost-user.rst                   |  44 ++-
 docs/system/devices/cxl.rst                   |  25 +-
 docs/system/i386/microvm.rst                  |   4 +-
 docs/system/i386/xenpvh.rst                   |   2 +-
 docs/system/ppc/ppce500.rst                   |   4 +-
 docs/system/riscv/microchip-icicle-kit.rst    |   2 +-
 docs/system/riscv/sifive_u.rst                |   2 +-
 meson.build                                   |   4 +
 qapi/machine.json                             |  28 ++
 qapi/migration.json                           |  21 +-
 qapi/net.json                                 |  45 ++-
 hw/i386/amd_iommu.h                           |  27 +-
 hw/i386/intel_iommu_internal.h                |   1 +
 hw/s390x/ccw-device.h                         |   2 +-
 include/hw/acpi/cpu.h                         |   4 +-
 include/hw/acpi/cpu_hotplug.h                 |   2 +-
 include/hw/acpi/generic_event_device.h        |   3 +-
 include/hw/acpi/ich9.h                        |  10 +-
 include/hw/acpi/memory_hotplug.h              |   4 +-
 include/hw/acpi/pcihp.h                       |   8 +-
 include/hw/core/boards.h                      |   4 +-
 include/hw/core/hotplug.h                     |  13 +-
 include/hw/core/qdev.h                        |  14 +-
 include/hw/cxl/cxl.h                          |  12 +
 include/hw/i386/microvm.h                     |   4 +-
 include/hw/i386/x86.h                         |  10 +-
 include/hw/mem/nvdimm.h                       |   2 +-
 include/hw/pci/pci_bridge.h                   |   6 +-
 include/hw/pci/pcie.h                         |   8 +-
 include/hw/pci/shpc.h                         |   6 +-
 include/hw/ppc/spapr_nvdimm.h                 |   2 +-
 include/hw/virtio/vhost-backend.h             |   2 +
 include/hw/virtio/vhost-user-media.h          |  46 +++
 include/hw/virtio/vhost-user.h                |   2 +-
 include/hw/virtio/vhost-vsock.h               |   4 +
 include/hw/virtio/vhost.h                     |  65 +++-
 include/hw/virtio/virtio-balloon.h            |   1 +
 include/hw/virtio/virtio-net.h                |   1 +
 include/hw/virtio/virtio.h                    |   2 +-
 include/migration/misc.h                      |   2 +
 include/migration/vmstate.h                   |   2 +
 include/net/net.h                             |   9 +
 include/net/tap.h                             |   2 +
 include/standard-headers/linux/ethtool.h      |   6 +
 include/standard-headers/linux/virtio_ids.h   |   1 +
 linux-headers/linux/iommufd.h                 |  45 ++-
 linux-headers/linux/userfaultfd.h             |  54 ++-
 linux-headers/linux/vduse.h                   |  28 ++
 linux-headers/linux/vfio.h                    |  21 ++
 linux-headers/linux/vfio_zdev.h               |   2 +
 backends/cryptodev-vhost.c                    |   2 +-
 backends/vhost-user.c                         |   2 +-
 contrib/vhost-user-gpu/virgl.c                |  12 +-
 hw/acpi/acpi-cpu-hotplug-stub.c               |   4 +-
 hw/acpi/acpi-mem-hotplug-stub.c               |   4 +-
 hw/acpi/acpi-nvdimm-stub.c                    |   2 +-
 hw/acpi/acpi-pci-hotplug-stub.c               |   8 +-
 hw/acpi/cpu.c                                 |   6 +-
 hw/acpi/cxl.c                                 |   2 +-
 hw/acpi/generic_event_device.c                |  13 +-
 hw/acpi/ich9.c                                |  10 +-
 hw/acpi/memory_hotplug.c                      |   7 +-
 hw/acpi/nvdimm.c                              |   2 +-
 hw/acpi/pcihp.c                               |  11 +-
 hw/acpi/piix4.c                               |  12 +-
 hw/arm/virt.c                                 |  23 +-
 hw/block/vhost-user-blk.c                     |  60 +++-
 hw/block/virtio-blk.c                         |  38 ++-
 hw/char/virtio-serial-bus.c                   |   6 +-
 hw/core/hotplug.c                             |  16 +-
 hw/core/qdev-hotplug.c                        |  10 +-
 hw/core/qdev.c                                |   2 +-
 hw/cxl/cxl-host.c                             |  48 ++-
 hw/display/vhost-user-gpu.c                   |  17 +
 hw/display/vhost-user-media-pci.c             | 115 +++++++
 hw/display/vhost-user-media.c                 | 388 ++++++++++++++++++++++
 hw/i386/acpi-build.c                          |  65 ++--
 hw/i386/amd_iommu-stub.c                      |   2 +-
 hw/i386/amd_iommu.c                           |   2 +-
 hw/i386/intel_iommu.c                         | 118 ++++---
 hw/i386/intel_iommu_accel.c                   |   6 +
 hw/i386/microvm.c                             |  12 +-
 hw/i386/pc.c                                  |  28 +-
 hw/i386/x86-common.c                          |   8 +-
 hw/ide/core.c                                 |   3 +-
 hw/intc/loongarch_dintc.c                     |   8 +-
 hw/intc/loongarch_extioi_common.c             |   4 +-
 hw/intc/loongarch_ipi.c                       |   4 +-
 hw/loongarch/virt.c                           |  44 +--
 hw/mem/cxl_type3.c                            |   6 +-
 hw/net/vhost_net.c                            |   9 +-
 hw/net/virtio-net.c                           | 131 +++++++-
 hw/nvme/ctrl.c                                |  78 +++--
 hw/pci-bridge/pci_bridge_dev.c                |   6 +-
 hw/pci/pci.c                                  |   8 +
 hw/pci/pcie.c                                 |  10 +-
 hw/pci/pcie_port.c                            |   2 +-
 hw/pci/shpc.c                                 |  11 +-
 hw/ppc/e500plat.c                             |   4 +-
 hw/ppc/spapr.c                                |  48 +--
 hw/ppc/spapr_nvdimm.c                         |   2 +-
 hw/ppc/spapr_pci.c                            |  12 +-
 hw/remote/machine.c                           |   2 +-
 hw/riscv/virt.c                               |   6 +-
 hw/s390x/css-bridge.c                         |   2 +-
 hw/s390x/s390-pci-bus.c                       |  12 +-
 hw/s390x/s390-virtio-ccw.c                    |  16 +-
 hw/s390x/virtio-ccw-md.c                      |  10 +-
 hw/s390x/virtio-ccw.c                         |   2 +-
 hw/scsi/scsi-disk.c                           |   7 +
 hw/scsi/vhost-scsi-common.c                   |   2 +-
 hw/scsi/virtio-scsi-dataplane.c               |   2 +-
 hw/scsi/virtio-scsi.c                         |  10 +-
 hw/scsi/vmw_pvscsi.c                          |   4 +-
 hw/virtio/vdpa-dev.c                          |   2 +-
 hw/virtio/vhost-kernel.c                      |   6 +
 hw/virtio/vhost-user-base.c                   |   2 +-
 hw/virtio/vhost-user-fs.c                     |   2 +-
 hw/virtio/vhost-user-scmi.c                   |   2 +-
 hw/virtio/vhost-user.c                        |  83 +++--
 hw/virtio/vhost-vsock-common.c                |   2 +-
 hw/virtio/vhost-vsock.c                       | 220 +++++++++++-
 hw/virtio/vhost.c                             | 111 +++++--
 hw/virtio/virtio-balloon.c                    |  19 +-
 hw/virtio/virtio-crypto.c                     |   5 +-
 hw/virtio/virtio-iommu.c                      |  17 +-
 hw/virtio/virtio-md-pci.c                     |  10 +-
 hw/virtio/virtio-pci.c                        |   7 +
 hw/virtio/virtio-rtc.c                        |   3 +-
 hw/virtio/virtio.c                            |  85 ++---
 hw/xen/xen-bus.c                              |   2 +-
 migration/fd.c                                |  28 +-
 migration/migration.c                         |  13 +
 migration/options.c                           |  18 +-
 net/net.c                                     |  14 +-
 net/tap-solaris.c                             |  69 ++--
 net/tap.c                                     | 448 ++++++++++++++++++++-----
 stubs/hotplug-stubs.c                         |   6 +-
 subprojects/libvhost-user/libvhost-user.c     |  34 +-
 system/qdev-monitor.c                         |   4 +-
 tests/qtest/cxl-test.c                        |  95 ++++++
 hw/display/Kconfig                            |   5 +
 hw/display/meson.build                        |   3 +
 qemu-options.hx                               |  13 +-
 tests/data/acpi/x86/q35/CEDT.cxl              | Bin 184 -> 184 bytes
 tests/data/acpi/x86/q35/IVRS.ivrs             | Bin 176 -> 176 bytes
 tests/functional/x86_64/meson.build           |   1 +
 tests/functional/x86_64/test_tap_migration.py | 461 ++++++++++++++++++++++++++
 150 files changed, 3245 insertions(+), 714 deletions(-)
 create mode 100644 include/hw/virtio/vhost-user-media.h
 create mode 100644 hw/display/vhost-user-media-pci.c
 create mode 100644 hw/display/vhost-user-media.c
 create mode 100755 tests/functional/x86_64/test_tap_migration.py

Hi Michael,

CCing Andrey

On Thu, 10 Sept 2026 at 22:44, Michael S. Tsirkin <mst@redhat.com> wrote:
>
> The following changes since commit 1df256f5968e9f7c3c4533a1383b071c044a36d6:
>
>   Merge tag 'qom-qapi-pr-pr-v1' of https://gitlab.com/marcandre.lureau/qemu into staging (2026-09-08 18:35:31 +0100)
>
> are available in the Git repository at:
>
>   https://git.kernel.org/pub/scm/virt/kvm/mst/qemu.git tags/for_upstream
>
> for you to fetch changes up to 99c75c61d61251d98e0b93dd199edbb10a990205:
>
>   MAINTAINERS: add Junjie Cao as CXL reviewer (2026-09-10 10:55:03 -0400)
>
> ----------------------------------------------------------------
> pci, vhost, virtio, iommu, apci: features, fixes
>
> migration/cpr now supports vhost-vsock devices

In the last review we found several issues and Andrey is going to fix 
them in v5, so IMO is better to remove that series from the pull 
request.

See 
https://lore.kernel.org/qemu-devel/20260820113955.509478-1-andrey.drobyshev@virtuozzo.com/ 
mainly in patch 5 and 10 IIRC.

Thanks,
Stefano

On Fri, Sep 11, 2026 at 09:30:24AM +0200, Stefano Garzarella wrote:
> Hi Michael,
> 
> CCing Andrey
> 
> On Thu, 10 Sept 2026 at 22:44, Michael S. Tsirkin <mst@redhat.com> wrote:
> >
> > The following changes since commit 1df256f5968e9f7c3c4533a1383b071c044a36d6:
> >
> >   Merge tag 'qom-qapi-pr-pr-v1' of https://gitlab.com/marcandre.lureau/qemu into staging (2026-09-08 18:35:31 +0100)
> >
> > are available in the Git repository at:
> >
> >   https://git.kernel.org/pub/scm/virt/kvm/mst/qemu.git tags/for_upstream
> >
> > for you to fetch changes up to 99c75c61d61251d98e0b93dd199edbb10a990205:
> >
> >   MAINTAINERS: add Junjie Cao as CXL reviewer (2026-09-10 10:55:03 -0400)
> >
> > ----------------------------------------------------------------
> > pci, vhost, virtio, iommu, apci: features, fixes
> >
> > migration/cpr now supports vhost-vsock devices
> 
> In the last review we found several issues and Andrey is going to fix 
> them in v5, so IMO is better to remove that series from the pull 
> request.

Thanks, will do now.

> See 
> https://lore.kernel.org/qemu-devel/20260820113955.509478-1-andrey.drobyshev@virtuozzo.com/ 
> mainly in patch 5 and 10 IIRC.
> 
> Thanks,
> Stefano