Merge tag 'pull-request-2026-07-20' of https://gitlab.com/thuth/qemu into staging

* Fixes for various USB-related bugs # -----BEGIN PGP SIGNATURE----- # # iQIzBAABCgAdFiEEJ7iIR+7gJQEY8+q5LtnXdP5wLbUFAmpd+gkACgkQLtnXdP5w # LbWVJQ//fnxnOSQLc977PcdQCy1jP7sQ7dO6Wb6WKddQuaGQh49wFeMdHp3ktfH/ # o3IslKo951H2urrz5KhStE08DumCgUxir+Yl6ImDqcOPA0Qzc6i9grxPhhpyUdtZ # +o50nn73hBalKYf+s8qo81Ba39QdhsJwd5LoEPbmd21ZQiWsTOeQ7c0l8PkP7ZCt # dnSf4ox7Vn8en897btcxhuY12u29NKPmWEWSLzgXJXmp1CHFTexml8Cp/qYaavg/ # jjE30rM0r/W2nkB3E1HMdMM8fvLeeKKwdarfdJ56Ysx/D4LOBR/aAGjWs8iYx/qM # jjgzNt4Rps6eKfz+uMXOOvpLhYmue+D4OVZl0kxvoRKckVp6idMXBCWCTnXlthbl # gxub+sbajrEi7HnT8CthTj8Ct6MTO04V2hpX5JmCrL+X+JLXxC6ZIbJKU7/WuwnT # MpvkzkmwLPqlf2VKtEMgkRGsvEQz4rxOjpNjy7+TTFoKUd/qoCYyPiW1WL5/Bo6q # M8z31tGcfmsV5P2A+8HTBwGUfHGByIONVq5J8T9E4dUo4wH5ar9avMKSrxVsFnTo # a7D+reNJrLb3Y+qSq1U8TH2pf3xcNYz3JAsncBZOb688JbtKjpH5wDwHkH1Myjw7 # j5zEW/Put7xafKrD86I4N32X7V/SOrnnjZMFSYlqiM2wU1aCwcA= # =cXwW # -----END PGP SIGNATURE----- # gpg: Signature made Mon 20 Jul 2026 06:35:53 EDT # gpg: using RSA key 27B88847EEE0250118F3EAB92ED9D774FE702DB5 # gpg: Good signature from "Thomas Huth <th.huth@gmx.de>" [full] # gpg: aka "Thomas Huth <thuth@redhat.com>" [full] # gpg: aka "Thomas Huth <huth@tuxfamily.org>" [full] # gpg: aka "Thomas Huth <th.huth@posteo.de>" [full] # gpg: aka "Thomas Huth <th.huth@posteo.eu>" [full] # Primary key fingerprint: 27B8 8847 EEE0 2501 18F3 EAB9 2ED9 D774 FE70 2DB5 * tag 'pull-request-2026-07-20' of https://gitlab.com/thuth/qemu: hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise() hw/usb/hcd-xhci: Fix guest-triggerable assert() in xhci_find_stream() usbredir: fix infinite loop and SIGFPE with zero max_packet_size usbredir: fix use-after-free on buffered bulk packet overflow tests/qtest: add xhci-pci unplug finalize regression test hw/usb/hcd-xhci-pci: break host link cycle so device_finalize() runs on unplug hw/usb/xhci: clamp interval exponent to avoid UB shift in xhci_init_epctx() Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>