Commit 9c32999643 for qemu.org

commit 9c3299964367edbf31f9e695bb7e090e8f18c35f
Author: GuoHan Zhao <zhaoguohan@kylinos.cn>
Date:   Wed Mar 25 16:54:50 2026 +0800

    hw/i2c/aspeed_i2c: reset and migrate pending_intr_sts

    Commit 7e82393ed058 ("hw/i2c/aspeed: fix lost interrupts on
    back-to-back commands") introduced pending_intr_sts to preserve
    interrupt bits that collide with already pending status bits.

    That deferred interrupt state is consumed later when the guest clears
    INTR_STS, but it is not reset in aspeed_i2c_bus_reset() and it is not
    part of the bus migration state. A reset can therefore leave stale
    deferred bits behind, and migration can silently drop them.

    Clear pending_intr_sts on reset and include it in VMState while keeping
    compatibility with older migration streams.

    Fixes: 7e82393ed058 ("hw/i2c/aspeed: fix lost interrupts on back-to-back commands")
    Signed-off-by: GuoHan Zhao <zhaoguohan@kylinos.cn>
    Link: https://lore.kernel.org/qemu-devel/20260325085450.126595-1-zhaoguohan@kylinos.cn
    Reviewed-by: Cédric Le Goater <clg@redhat.com>
    Reviewed-by: Jithu Joseph <jithu.joseph@oss.qualcomm.com>
    Signed-off-by: Cédric Le Goater <clg@redhat.com>

diff --git a/hw/i2c/aspeed_i2c.c b/hw/i2c/aspeed_i2c.c
index 5d18f8d49e..90f83a03fd 100644
--- a/hw/i2c/aspeed_i2c.c
+++ b/hw/i2c/aspeed_i2c.c
@@ -1134,10 +1134,11 @@ static const MemoryRegionOps aspeed_i2c_bus_pool_ops = {

 static const VMStateDescription aspeed_i2c_bus_vmstate = {
     .name = TYPE_ASPEED_I2C,
-    .version_id = 6,
+    .version_id = 7,
     .minimum_version_id = 6,
     .fields = (const VMStateField[]) {
         VMSTATE_UINT32_ARRAY(regs, AspeedI2CBus, ASPEED_I2C_NEW_NUM_REG),
+        VMSTATE_UINT32_V(pending_intr_sts, AspeedI2CBus, 7),
         VMSTATE_UINT8_ARRAY(pool, AspeedI2CBus, ASPEED_I2C_BUS_POOL_SIZE),
         VMSTATE_UINT64(dma_dram_offset, AspeedI2CBus),
         VMSTATE_END_OF_LIST()
@@ -1510,6 +1511,7 @@ static void aspeed_i2c_bus_reset(DeviceState *dev)
     AspeedI2CBus *s = ASPEED_I2C_BUS(dev);

     memset(s->regs, 0, sizeof(s->regs));
+    s->pending_intr_sts = 0;
     i2c_end_transfer(s->bus);
 }