From: Peter Krempa <pkrempa@redhat.com>
Date: Tue, 6 Jan 2026 14:17:55 +0000 (+0100)
Subject: qemucapabilitiesdata: Re-generate 'caps_10.2.0_x86_64'
X-Git-Tag: v12.0.0-rc1~52
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=380764992dde2582055ebd2bfce302a219707346;p=thirdparty%2Flibvirt.git

qemucapabilitiesdata: Re-generate 'caps_10.2.0_x86_64'

The 'rdseed' CPU features stopped to be presented after updating my host
despite building the same qemu. Re-generate the dump separately from the
update to shield out this difference.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
---

diff --git a/tests/domaincapsdata/qemu_10.2.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_10.2.0-q35.x86_64.xml
index 78e8b774e6..5ce911d62f 100644
--- a/tests/domaincapsdata/qemu_10.2.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_10.2.0-q35.x86_64.xml
@@ -58,6 +58,7 @@
       <feature policy='require' name='tsa-sq-no'/>
       <feature policy='require' name='tsa-l1-no'/>
       <feature policy='disable' name='pcid'/>
+      <feature policy='disable' name='rdseed'/>
       <feature policy='disable' name='la57'/>
     </mode>
     <mode name='custom' supported='yes'>
@@ -67,57 +68,68 @@
       <blockers model='Broadwell'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Broadwell-v3'>Broadwell-IBRS</model>
       <blockers model='Broadwell-IBRS'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Broadwell-v2'>Broadwell-noTSX</model>
       <blockers model='Broadwell-noTSX'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Broadwell-v4'>Broadwell-noTSX-IBRS</model>
       <blockers model='Broadwell-noTSX-IBRS'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v1</model>
       <blockers model='Broadwell-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v2</model>
       <blockers model='Broadwell-v2'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v3</model>
       <blockers model='Broadwell-v3'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v4</model>
       <blockers model='Broadwell-v4'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Cascadelake-Server-v1'>Cascadelake-Server</model>
       <blockers model='Cascadelake-Server'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Cascadelake-Server-v3'>Cascadelake-Server-noTSX</model>
       <blockers model='Cascadelake-Server-noTSX'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v1</model>
       <blockers model='Cascadelake-Server-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v2</model>
@@ -125,22 +137,26 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v3</model>
       <blockers model='Cascadelake-Server-v3'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v4</model>
       <blockers model='Cascadelake-Server-v4'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v5</model>
       <blockers model='Cascadelake-Server-v5'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='ClearwaterForest-v1'>ClearwaterForest</model>
       <blockers model='ClearwaterForest'>
@@ -165,6 +181,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -196,6 +213,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -211,6 +229,7 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
@@ -219,6 +238,7 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
@@ -227,76 +247,142 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Denverton-v1'>Denverton</model>
       <blockers model='Denverton'>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Denverton-v1</model>
       <blockers model='Denverton-v1'>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Intel'>Denverton-v2</model>
+      <blockers model='Denverton-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Intel'>Denverton-v3</model>
+      <blockers model='Denverton-v3'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Hygon' canonical='Dhyana-v1'>Dhyana</model>
+      <blockers model='Dhyana'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Hygon'>Dhyana-v1</model>
+      <blockers model='Dhyana-v1'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Hygon'>Dhyana-v2</model>
+      <blockers model='Dhyana-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD' canonical='EPYC-v1'>EPYC</model>
+      <blockers model='EPYC'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='Intel'>Denverton-v2</model>
-      <model usable='yes' vendor='Intel'>Denverton-v3</model>
-      <model usable='yes' vendor='Hygon' canonical='Dhyana-v1'>Dhyana</model>
-      <model usable='yes' vendor='Hygon'>Dhyana-v1</model>
-      <model usable='yes' vendor='Hygon'>Dhyana-v2</model>
-      <model usable='yes' vendor='AMD' canonical='EPYC-v1'>EPYC</model>
       <model usable='no' vendor='AMD' canonical='EPYC-Genoa-v1'>EPYC-Genoa</model>
       <blockers model='EPYC-Genoa'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Genoa-v1</model>
       <blockers model='EPYC-Genoa-v1'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Genoa-v2</model>
       <blockers model='EPYC-Genoa-v2'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD' canonical='EPYC-v2'>EPYC-IBPB</model>
+      <blockers model='EPYC-IBPB'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='AMD' canonical='EPYC-v2'>EPYC-IBPB</model>
       <model usable='no' vendor='AMD' canonical='EPYC-Milan-v1'>EPYC-Milan</model>
       <blockers model='EPYC-Milan'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Milan-v1</model>
       <blockers model='EPYC-Milan-v1'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Milan-v2</model>
       <blockers model='EPYC-Milan-v2'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Milan-v3</model>
       <blockers model='EPYC-Milan-v3'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD' canonical='EPYC-Rome-v1'>EPYC-Rome</model>
+      <blockers model='EPYC-Rome'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v1</model>
+      <blockers model='EPYC-Rome-v1'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v2</model>
+      <blockers model='EPYC-Rome-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v3</model>
+      <blockers model='EPYC-Rome-v3'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v4</model>
+      <blockers model='EPYC-Rome-v4'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v5</model>
+      <blockers model='EPYC-Rome-v5'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='AMD' canonical='EPYC-Rome-v1'>EPYC-Rome</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v1</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v2</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v3</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v4</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v5</model>
       <model usable='no' vendor='AMD' canonical='EPYC-Turin-v1'>EPYC-Turin</model>
       <blockers model='EPYC-Turin'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Turin-v1</model>
       <blockers model='EPYC-Turin-v1'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v1</model>
+      <blockers model='EPYC-v1'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v2</model>
+      <blockers model='EPYC-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v3</model>
+      <blockers model='EPYC-v3'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v4</model>
+      <blockers model='EPYC-v4'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v5</model>
+      <blockers model='EPYC-v5'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='AMD'>EPYC-v1</model>
-      <model usable='yes' vendor='AMD'>EPYC-v2</model>
-      <model usable='yes' vendor='AMD'>EPYC-v3</model>
-      <model usable='yes' vendor='AMD'>EPYC-v4</model>
-      <model usable='yes' vendor='AMD'>EPYC-v5</model>
       <model usable='no' vendor='Intel' canonical='GraniteRapids-v1'>GraniteRapids</model>
       <blockers model='GraniteRapids'>
         <feature name='amx-bf16'/>
@@ -317,6 +403,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -344,6 +431,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -376,6 +464,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -409,6 +498,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -462,30 +552,35 @@
         <feature name='hle'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Icelake-Server-v2'>Icelake-Server-noTSX</model>
       <blockers model='Icelake-Server-noTSX'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v1</model>
       <blockers model='Icelake-Server-v1'>
         <feature name='hle'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v2</model>
       <blockers model='Icelake-Server-v2'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v3</model>
       <blockers model='Icelake-Server-v3'>
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v4</model>
@@ -493,6 +588,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v5</model>
@@ -500,6 +596,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v6</model>
@@ -507,6 +604,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v7</model>
@@ -515,6 +613,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
@@ -528,6 +627,7 @@
         <feature name='avx512-4vnniw'/>
         <feature name='avx512er'/>
         <feature name='avx512pf'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
       </blockers>
       <model usable='no' vendor='Intel'>KnightsMill-v1</model>
@@ -536,6 +636,7 @@
         <feature name='avx512-4vnniw'/>
         <feature name='avx512er'/>
         <feature name='avx512pf'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
       </blockers>
       <model usable='yes' vendor='Intel' canonical='Nehalem-v1'>Nehalem</model>
@@ -590,6 +691,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='serialize'/>
         <feature name='taa-no'/>
@@ -610,6 +712,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='serialize'/>
         <feature name='taa-no'/>
@@ -632,6 +735,7 @@
         <feature name='la57'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -656,6 +760,7 @@
         <feature name='la57'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -681,6 +786,7 @@
         <feature name='la57'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -703,6 +809,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
       </blockers>
@@ -720,6 +827,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
       </blockers>
@@ -742,6 +850,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -766,6 +875,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -775,83 +885,99 @@
       <blockers model='Skylake-Client'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Client-v2'>Skylake-Client-IBRS</model>
       <blockers model='Skylake-Client-IBRS'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Client-v3'>Skylake-Client-noTSX-IBRS</model>
       <blockers model='Skylake-Client-noTSX-IBRS'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v1</model>
       <blockers model='Skylake-Client-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v2</model>
       <blockers model='Skylake-Client-v2'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v3</model>
       <blockers model='Skylake-Client-v3'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v4</model>
       <blockers model='Skylake-Client-v4'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Server-v1'>Skylake-Server</model>
       <blockers model='Skylake-Server'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Server-v2'>Skylake-Server-IBRS</model>
       <blockers model='Skylake-Server-IBRS'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Server-v3'>Skylake-Server-noTSX-IBRS</model>
       <blockers model='Skylake-Server-noTSX-IBRS'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v1</model>
       <blockers model='Skylake-Server-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v2</model>
       <blockers model='Skylake-Server-v2'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v3</model>
       <blockers model='Skylake-Server-v3'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v4</model>
       <blockers model='Skylake-Server-v4'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v5</model>
       <blockers model='Skylake-Server-v5'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Snowridge-v1'>Snowridge</model>
       <blockers model='Snowridge'>
         <feature name='cldemote'/>
         <feature name='core-capability'/>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v1</model>
@@ -859,23 +985,27 @@
         <feature name='cldemote'/>
         <feature name='core-capability'/>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v2</model>
       <blockers model='Snowridge-v2'>
         <feature name='cldemote'/>
         <feature name='core-capability'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v3</model>
       <blockers model='Snowridge-v3'>
         <feature name='cldemote'/>
         <feature name='core-capability'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v4</model>
       <blockers model='Snowridge-v4'>
         <feature name='cldemote'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='yes' vendor='Intel' canonical='Westmere-v1'>Westmere</model>
       <model usable='yes' vendor='Intel' canonical='Westmere-v2'>Westmere-IBRS</model>
@@ -889,6 +1019,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
@@ -904,6 +1035,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
@@ -919,6 +1051,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
@@ -934,6 +1067,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
diff --git a/tests/domaincapsdata/qemu_10.2.0.x86_64.xml b/tests/domaincapsdata/qemu_10.2.0.x86_64.xml
index 59370259e7..333bbaa698 100644
--- a/tests/domaincapsdata/qemu_10.2.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_10.2.0.x86_64.xml
@@ -57,6 +57,7 @@
       <feature policy='require' name='tsa-sq-no'/>
       <feature policy='require' name='tsa-l1-no'/>
       <feature policy='disable' name='pcid'/>
+      <feature policy='disable' name='rdseed'/>
       <feature policy='disable' name='la57'/>
     </mode>
     <mode name='custom' supported='yes'>
@@ -66,57 +67,68 @@
       <blockers model='Broadwell'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Broadwell-v3'>Broadwell-IBRS</model>
       <blockers model='Broadwell-IBRS'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Broadwell-v2'>Broadwell-noTSX</model>
       <blockers model='Broadwell-noTSX'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Broadwell-v4'>Broadwell-noTSX-IBRS</model>
       <blockers model='Broadwell-noTSX-IBRS'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v1</model>
       <blockers model='Broadwell-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v2</model>
       <blockers model='Broadwell-v2'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v3</model>
       <blockers model='Broadwell-v3'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Broadwell-v4</model>
       <blockers model='Broadwell-v4'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Cascadelake-Server-v1'>Cascadelake-Server</model>
       <blockers model='Cascadelake-Server'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Cascadelake-Server-v3'>Cascadelake-Server-noTSX</model>
       <blockers model='Cascadelake-Server-noTSX'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v1</model>
       <blockers model='Cascadelake-Server-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v2</model>
@@ -124,22 +136,26 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v3</model>
       <blockers model='Cascadelake-Server-v3'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v4</model>
       <blockers model='Cascadelake-Server-v4'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Cascadelake-Server-v5</model>
       <blockers model='Cascadelake-Server-v5'>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='ClearwaterForest-v1'>ClearwaterForest</model>
       <blockers model='ClearwaterForest'>
@@ -164,6 +180,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -195,6 +212,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -210,6 +228,7 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
@@ -218,6 +237,7 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
@@ -226,76 +246,142 @@
         <feature name='hle'/>
         <feature name='ibrs-all'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Denverton-v1'>Denverton</model>
       <blockers model='Denverton'>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Denverton-v1</model>
       <blockers model='Denverton-v1'>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Intel'>Denverton-v2</model>
+      <blockers model='Denverton-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Intel'>Denverton-v3</model>
+      <blockers model='Denverton-v3'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Hygon' canonical='Dhyana-v1'>Dhyana</model>
+      <blockers model='Dhyana'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Hygon'>Dhyana-v1</model>
+      <blockers model='Dhyana-v1'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='Hygon'>Dhyana-v2</model>
+      <blockers model='Dhyana-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD' canonical='EPYC-v1'>EPYC</model>
+      <blockers model='EPYC'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='Intel'>Denverton-v2</model>
-      <model usable='yes' vendor='Intel'>Denverton-v3</model>
-      <model usable='yes' vendor='Hygon' canonical='Dhyana-v1'>Dhyana</model>
-      <model usable='yes' vendor='Hygon'>Dhyana-v1</model>
-      <model usable='yes' vendor='Hygon'>Dhyana-v2</model>
-      <model usable='yes' vendor='AMD' canonical='EPYC-v1'>EPYC</model>
       <model usable='no' vendor='AMD' canonical='EPYC-Genoa-v1'>EPYC-Genoa</model>
       <blockers model='EPYC-Genoa'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Genoa-v1</model>
       <blockers model='EPYC-Genoa-v1'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Genoa-v2</model>
       <blockers model='EPYC-Genoa-v2'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD' canonical='EPYC-v2'>EPYC-IBPB</model>
+      <blockers model='EPYC-IBPB'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='AMD' canonical='EPYC-v2'>EPYC-IBPB</model>
       <model usable='no' vendor='AMD' canonical='EPYC-Milan-v1'>EPYC-Milan</model>
       <blockers model='EPYC-Milan'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Milan-v1</model>
       <blockers model='EPYC-Milan-v1'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Milan-v2</model>
       <blockers model='EPYC-Milan-v2'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Milan-v3</model>
       <blockers model='EPYC-Milan-v3'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD' canonical='EPYC-Rome-v1'>EPYC-Rome</model>
+      <blockers model='EPYC-Rome'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v1</model>
+      <blockers model='EPYC-Rome-v1'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v2</model>
+      <blockers model='EPYC-Rome-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v3</model>
+      <blockers model='EPYC-Rome-v3'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v4</model>
+      <blockers model='EPYC-Rome-v4'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-Rome-v5</model>
+      <blockers model='EPYC-Rome-v5'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='AMD' canonical='EPYC-Rome-v1'>EPYC-Rome</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v1</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v2</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v3</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v4</model>
-      <model usable='yes' vendor='AMD'>EPYC-Rome-v5</model>
       <model usable='no' vendor='AMD' canonical='EPYC-Turin-v1'>EPYC-Turin</model>
       <blockers model='EPYC-Turin'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='AMD'>EPYC-Turin-v1</model>
       <blockers model='EPYC-Turin-v1'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v1</model>
+      <blockers model='EPYC-v1'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v2</model>
+      <blockers model='EPYC-v2'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v3</model>
+      <blockers model='EPYC-v3'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v4</model>
+      <blockers model='EPYC-v4'>
+        <feature name='rdseed'/>
+      </blockers>
+      <model usable='no' vendor='AMD'>EPYC-v5</model>
+      <blockers model='EPYC-v5'>
+        <feature name='rdseed'/>
       </blockers>
-      <model usable='yes' vendor='AMD'>EPYC-v1</model>
-      <model usable='yes' vendor='AMD'>EPYC-v2</model>
-      <model usable='yes' vendor='AMD'>EPYC-v3</model>
-      <model usable='yes' vendor='AMD'>EPYC-v4</model>
-      <model usable='yes' vendor='AMD'>EPYC-v5</model>
       <model usable='no' vendor='Intel' canonical='GraniteRapids-v1'>GraniteRapids</model>
       <blockers model='GraniteRapids'>
         <feature name='amx-bf16'/>
@@ -316,6 +402,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -343,6 +430,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -375,6 +463,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -408,6 +497,7 @@
         <feature name='pcid'/>
         <feature name='prefetchiti'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -461,30 +551,35 @@
         <feature name='hle'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Icelake-Server-v2'>Icelake-Server-noTSX</model>
       <blockers model='Icelake-Server-noTSX'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v1</model>
       <blockers model='Icelake-Server-v1'>
         <feature name='hle'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v2</model>
       <blockers model='Icelake-Server-v2'>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v3</model>
       <blockers model='Icelake-Server-v3'>
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v4</model>
@@ -492,6 +587,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v5</model>
@@ -499,6 +595,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v6</model>
@@ -506,6 +603,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='taa-no'/>
       </blockers>
       <model usable='no' vendor='Intel'>Icelake-Server-v7</model>
@@ -514,6 +612,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='taa-no'/>
       </blockers>
@@ -527,6 +626,7 @@
         <feature name='avx512-4vnniw'/>
         <feature name='avx512er'/>
         <feature name='avx512pf'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
       </blockers>
       <model usable='no' vendor='Intel'>KnightsMill-v1</model>
@@ -535,6 +635,7 @@
         <feature name='avx512-4vnniw'/>
         <feature name='avx512er'/>
         <feature name='avx512pf'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
       </blockers>
       <model usable='yes' vendor='Intel' canonical='Nehalem-v1'>Nehalem</model>
@@ -589,6 +690,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='serialize'/>
         <feature name='taa-no'/>
@@ -609,6 +711,7 @@
         <feature name='ibrs-all'/>
         <feature name='la57'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='serialize'/>
         <feature name='taa-no'/>
@@ -631,6 +734,7 @@
         <feature name='la57'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -655,6 +759,7 @@
         <feature name='la57'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -680,6 +785,7 @@
         <feature name='la57'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -702,6 +808,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
       </blockers>
@@ -719,6 +826,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
       </blockers>
@@ -741,6 +849,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -765,6 +874,7 @@
         <feature name='pbrsb-no'/>
         <feature name='pcid'/>
         <feature name='psdp-no'/>
+        <feature name='rdseed'/>
         <feature name='rrsba-ctrl'/>
         <feature name='sbdr-ssdp-no'/>
         <feature name='serialize'/>
@@ -774,83 +884,99 @@
       <blockers model='Skylake-Client'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Client-v2'>Skylake-Client-IBRS</model>
       <blockers model='Skylake-Client-IBRS'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Client-v3'>Skylake-Client-noTSX-IBRS</model>
       <blockers model='Skylake-Client-noTSX-IBRS'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v1</model>
       <blockers model='Skylake-Client-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v2</model>
       <blockers model='Skylake-Client-v2'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v3</model>
       <blockers model='Skylake-Client-v3'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Client-v4</model>
       <blockers model='Skylake-Client-v4'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Server-v1'>Skylake-Server</model>
       <blockers model='Skylake-Server'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Server-v2'>Skylake-Server-IBRS</model>
       <blockers model='Skylake-Server-IBRS'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Skylake-Server-v3'>Skylake-Server-noTSX-IBRS</model>
       <blockers model='Skylake-Server-noTSX-IBRS'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v1</model>
       <blockers model='Skylake-Server-v1'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v2</model>
       <blockers model='Skylake-Server-v2'>
         <feature name='hle'/>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
         <feature name='rtm'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v3</model>
       <blockers model='Skylake-Server-v3'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v4</model>
       <blockers model='Skylake-Server-v4'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel'>Skylake-Server-v5</model>
       <blockers model='Skylake-Server-v5'>
         <feature name='pcid'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='no' vendor='Intel' canonical='Snowridge-v1'>Snowridge</model>
       <blockers model='Snowridge'>
         <feature name='cldemote'/>
         <feature name='core-capability'/>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v1</model>
@@ -858,23 +984,27 @@
         <feature name='cldemote'/>
         <feature name='core-capability'/>
         <feature name='mpx'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v2</model>
       <blockers model='Snowridge-v2'>
         <feature name='cldemote'/>
         <feature name='core-capability'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v3</model>
       <blockers model='Snowridge-v3'>
         <feature name='cldemote'/>
         <feature name='core-capability'/>
+        <feature name='rdseed'/>
         <feature name='split-lock-detect'/>
       </blockers>
       <model usable='no' vendor='Intel'>Snowridge-v4</model>
       <blockers model='Snowridge-v4'>
         <feature name='cldemote'/>
+        <feature name='rdseed'/>
       </blockers>
       <model usable='yes' vendor='Intel' canonical='Westmere-v1'>Westmere</model>
       <model usable='yes' vendor='Intel' canonical='Westmere-v2'>Westmere-IBRS</model>
@@ -888,6 +1018,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
@@ -903,6 +1034,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
@@ -918,6 +1050,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
@@ -933,6 +1066,7 @@
         <feature name='phe-en'/>
         <feature name='pmm'/>
         <feature name='pmm-en'/>
+        <feature name='rdseed'/>
         <feature name='ss'/>
         <feature name='ssb-no'/>
         <feature name='xcrypt'/>
diff --git a/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.replies b/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.replies
index 72f27e7a48..7d1784cc6b 100644
--- a/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.replies
+++ b/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.replies
@@ -36523,6 +36523,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "xstore",
         "xstore-en",
         "xcrypt",
@@ -36544,6 +36545,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "xstore",
         "xstore-en",
         "xcrypt",
@@ -36565,6 +36567,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "xstore",
         "xstore-en",
         "xcrypt",
@@ -36586,6 +36589,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "xstore",
         "xstore-en",
         "xcrypt",
@@ -36640,6 +36644,7 @@
       "name": "Snowridge-v4",
       "typename": "Snowridge-v4-x86_64-cpu",
       "unavailable-features": [
+        "rdseed",
         "cldemote"
       ],
       "static": false,
@@ -36650,6 +36655,7 @@
       "name": "Snowridge-v3",
       "typename": "Snowridge-v3-x86_64-cpu",
       "unavailable-features": [
+        "rdseed",
         "cldemote",
         "core-capability",
         "split-lock-detect"
@@ -36662,6 +36668,7 @@
       "name": "Snowridge-v2",
       "typename": "Snowridge-v2-x86_64-cpu",
       "unavailable-features": [
+        "rdseed",
         "cldemote",
         "core-capability",
         "split-lock-detect"
@@ -36675,6 +36682,7 @@
       "typename": "Snowridge-v1-x86_64-cpu",
       "unavailable-features": [
         "mpx",
+        "rdseed",
         "cldemote",
         "core-capability",
         "split-lock-detect"
@@ -36688,6 +36696,7 @@
       "typename": "Snowridge-x86_64-cpu",
       "unavailable-features": [
         "mpx",
+        "rdseed",
         "cldemote",
         "core-capability",
         "split-lock-detect"
@@ -36701,7 +36710,8 @@
       "name": "Skylake-Server-v5",
       "typename": "Skylake-Server-v5-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36711,7 +36721,8 @@
       "name": "Skylake-Server-v4",
       "typename": "Skylake-Server-v4-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36721,7 +36732,8 @@
       "name": "Skylake-Server-v3",
       "typename": "Skylake-Server-v3-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36733,7 +36745,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36745,7 +36758,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36755,7 +36769,8 @@
       "name": "Skylake-Server-noTSX-IBRS",
       "typename": "Skylake-Server-noTSX-IBRS-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "alias-of": "Skylake-Server-v3",
       "static": false,
@@ -36768,7 +36783,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "alias-of": "Skylake-Server-v2",
       "static": false,
@@ -36781,7 +36797,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "alias-of": "Skylake-Server-v1",
       "static": false,
@@ -36792,7 +36809,8 @@
       "name": "Skylake-Client-v4",
       "typename": "Skylake-Client-v4-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36802,7 +36820,8 @@
       "name": "Skylake-Client-v3",
       "typename": "Skylake-Client-v3-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36814,7 +36833,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36826,7 +36846,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -36836,7 +36857,8 @@
       "name": "Skylake-Client-noTSX-IBRS",
       "typename": "Skylake-Client-noTSX-IBRS-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "alias-of": "Skylake-Client-v3",
       "static": false,
@@ -36849,7 +36871,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "alias-of": "Skylake-Client-v2",
       "static": false,
@@ -36862,7 +36885,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "alias-of": "Skylake-Client-v1",
       "static": false,
@@ -36875,6 +36899,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "bus-lock-detect",
         "cldemote",
         "serialize",
@@ -36905,6 +36930,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "bus-lock-detect",
         "cldemote",
         "serialize",
@@ -36934,6 +36960,7 @@
       "typename": "SierraForest-v1-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "bus-lock-detect",
         "serialize",
         "cmpccxadd",
@@ -36957,6 +36984,7 @@
       "typename": "SierraForest-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "bus-lock-detect",
         "serialize",
         "cmpccxadd",
@@ -36984,6 +37012,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "cldemote",
@@ -37015,6 +37044,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "cldemote",
@@ -37045,6 +37075,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "serialize",
@@ -37074,6 +37105,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "serialize",
@@ -37100,6 +37132,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "serialize",
@@ -37309,6 +37342,7 @@
       "typename": "KnightsMill-v1-x86_64-cpu",
       "unavailable-features": [
         "ss",
+        "rdseed",
         "avx512pf",
         "avx512er",
         "avx512-4vnniw",
@@ -37323,6 +37357,7 @@
       "typename": "KnightsMill-x86_64-cpu",
       "unavailable-features": [
         "ss",
+        "rdseed",
         "avx512pf",
         "avx512er",
         "avx512-4vnniw",
@@ -37374,6 +37409,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "ibrs-all",
         "taa-no"
@@ -37387,6 +37423,7 @@
       "typename": "Icelake-Server-v6-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57",
         "ibrs-all",
         "taa-no"
@@ -37400,6 +37437,7 @@
       "typename": "Icelake-Server-v5-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57",
         "ibrs-all",
         "taa-no"
@@ -37413,6 +37451,7 @@
       "typename": "Icelake-Server-v4-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57",
         "ibrs-all",
         "taa-no"
@@ -37426,6 +37465,7 @@
       "typename": "Icelake-Server-v3-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57",
         "ibrs-all",
         "taa-no"
@@ -37439,6 +37479,7 @@
       "typename": "Icelake-Server-v2-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57"
       ],
       "static": false,
@@ -37452,6 +37493,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57"
       ],
       "static": false,
@@ -37463,6 +37505,7 @@
       "typename": "Icelake-Server-noTSX-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57"
       ],
       "alias-of": "Icelake-Server-v2",
@@ -37477,6 +37520,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57"
       ],
       "alias-of": "Icelake-Server-v1",
@@ -37584,6 +37628,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "cldemote",
@@ -37623,6 +37668,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "cldemote",
@@ -37661,6 +37707,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "serialize",
@@ -37694,6 +37741,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "la57",
         "bus-lock-detect",
         "serialize",
@@ -37724,7 +37772,9 @@
     {
       "name": "EPYC-v5",
       "typename": "EPYC-v5-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37732,7 +37782,9 @@
     {
       "name": "EPYC-v4",
       "typename": "EPYC-v4-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37740,7 +37792,9 @@
     {
       "name": "EPYC-v3",
       "typename": "EPYC-v3-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37748,7 +37802,9 @@
     {
       "name": "EPYC-v2",
       "typename": "EPYC-v2-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37756,7 +37812,9 @@
     {
       "name": "EPYC-v1",
       "typename": "EPYC-v1-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37766,6 +37824,7 @@
       "typename": "EPYC-Turin-v1-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57"
       ],
       "static": false,
@@ -37777,6 +37836,7 @@
       "typename": "EPYC-Turin-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57"
       ],
       "alias-of": "EPYC-Turin-v1",
@@ -37787,7 +37847,9 @@
     {
       "name": "EPYC-Rome-v5",
       "typename": "EPYC-Rome-v5-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37795,7 +37857,9 @@
     {
       "name": "EPYC-Rome-v4",
       "typename": "EPYC-Rome-v4-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37803,7 +37867,9 @@
     {
       "name": "EPYC-Rome-v3",
       "typename": "EPYC-Rome-v3-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37811,7 +37877,9 @@
     {
       "name": "EPYC-Rome-v2",
       "typename": "EPYC-Rome-v2-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37819,7 +37887,9 @@
     {
       "name": "EPYC-Rome-v1",
       "typename": "EPYC-Rome-v1-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37827,7 +37897,9 @@
     {
       "name": "EPYC-Rome",
       "typename": "EPYC-Rome-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "alias-of": "EPYC-Rome-v1",
       "static": false,
       "migration-safe": true,
@@ -37837,7 +37909,8 @@
       "name": "EPYC-Milan-v3",
       "typename": "EPYC-Milan-v3-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -37847,7 +37920,8 @@
       "name": "EPYC-Milan-v2",
       "typename": "EPYC-Milan-v2-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -37857,7 +37931,8 @@
       "name": "EPYC-Milan-v1",
       "typename": "EPYC-Milan-v1-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -37867,7 +37942,8 @@
       "name": "EPYC-Milan",
       "typename": "EPYC-Milan-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "alias-of": "EPYC-Milan-v1",
       "static": false,
@@ -37877,7 +37953,9 @@
     {
       "name": "EPYC-IBPB",
       "typename": "EPYC-IBPB-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "alias-of": "EPYC-v2",
       "static": false,
       "migration-safe": true,
@@ -37888,6 +37966,7 @@
       "typename": "EPYC-Genoa-v2-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57"
       ],
       "static": false,
@@ -37899,6 +37978,7 @@
       "typename": "EPYC-Genoa-v1-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57"
       ],
       "static": false,
@@ -37910,6 +37990,7 @@
       "typename": "EPYC-Genoa-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "la57"
       ],
       "alias-of": "EPYC-Genoa-v1",
@@ -37920,7 +38001,9 @@
     {
       "name": "EPYC",
       "typename": "EPYC-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "alias-of": "EPYC-v1",
       "static": false,
       "migration-safe": true,
@@ -37929,7 +38012,9 @@
     {
       "name": "Dhyana-v2",
       "typename": "Dhyana-v2-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37937,7 +38022,9 @@
     {
       "name": "Dhyana-v1",
       "typename": "Dhyana-v1-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37945,7 +38032,9 @@
     {
       "name": "Dhyana",
       "typename": "Dhyana-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "alias-of": "Dhyana-v1",
       "static": false,
       "migration-safe": true,
@@ -37954,7 +38043,9 @@
     {
       "name": "Denverton-v3",
       "typename": "Denverton-v3-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37962,7 +38053,9 @@
     {
       "name": "Denverton-v2",
       "typename": "Denverton-v2-x86_64-cpu",
-      "unavailable-features": [],
+      "unavailable-features": [
+        "rdseed"
+      ],
       "static": false,
       "migration-safe": true,
       "deprecated": false
@@ -37971,7 +38064,8 @@
       "name": "Denverton-v1",
       "typename": "Denverton-v1-x86_64-cpu",
       "unavailable-features": [
-        "mpx"
+        "mpx",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -37981,7 +38075,8 @@
       "name": "Denverton",
       "typename": "Denverton-x86_64-cpu",
       "unavailable-features": [
-        "mpx"
+        "mpx",
+        "rdseed"
       ],
       "alias-of": "Denverton-v1",
       "static": false,
@@ -37995,6 +38090,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "ibrs-all",
         "taa-no"
       ],
@@ -38009,6 +38105,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "ibrs-all",
         "taa-no"
       ],
@@ -38023,6 +38120,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "ibrs-all",
         "taa-no"
       ],
@@ -38054,6 +38152,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "bus-lock-detect",
         "cldemote",
         "serialize",
@@ -38091,6 +38190,7 @@
       "unavailable-features": [
         "ss",
         "pcid",
+        "rdseed",
         "bus-lock-detect",
         "cldemote",
         "serialize",
@@ -38128,6 +38228,7 @@
       "typename": "Cascadelake-Server-v5-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "ibrs-all"
       ],
       "static": false,
@@ -38139,6 +38240,7 @@
       "typename": "Cascadelake-Server-v4-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "ibrs-all"
       ],
       "static": false,
@@ -38150,6 +38252,7 @@
       "typename": "Cascadelake-Server-v3-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "ibrs-all"
       ],
       "static": false,
@@ -38163,6 +38266,7 @@
         "pcid",
         "hle",
         "rtm",
+        "rdseed",
         "ibrs-all"
       ],
       "static": false,
@@ -38175,7 +38279,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -38186,6 +38291,7 @@
       "typename": "Cascadelake-Server-noTSX-x86_64-cpu",
       "unavailable-features": [
         "pcid",
+        "rdseed",
         "ibrs-all"
       ],
       "alias-of": "Cascadelake-Server-v3",
@@ -38199,7 +38305,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "alias-of": "Cascadelake-Server-v1",
       "static": false,
@@ -38210,7 +38317,8 @@
       "name": "Broadwell-v4",
       "typename": "Broadwell-v4-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -38222,7 +38330,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -38232,7 +38341,8 @@
       "name": "Broadwell-v2",
       "typename": "Broadwell-v2-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -38244,7 +38354,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "static": false,
       "migration-safe": true,
@@ -38254,7 +38365,8 @@
       "name": "Broadwell-noTSX-IBRS",
       "typename": "Broadwell-noTSX-IBRS-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "alias-of": "Broadwell-v4",
       "static": false,
@@ -38265,7 +38377,8 @@
       "name": "Broadwell-noTSX",
       "typename": "Broadwell-noTSX-x86_64-cpu",
       "unavailable-features": [
-        "pcid"
+        "pcid",
+        "rdseed"
       ],
       "alias-of": "Broadwell-v2",
       "static": false,
@@ -38278,7 +38391,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "alias-of": "Broadwell-v3",
       "static": false,
@@ -38291,7 +38405,8 @@
       "unavailable-features": [
         "pcid",
         "hle",
-        "rtm"
+        "rtm",
+        "rdseed"
       ],
       "alias-of": "Broadwell-v1",
       "static": false,
@@ -40262,7 +40377,7 @@
         "lmce": false,
         "perfctr-nb": false,
         "rdrand": true,
-        "rdseed": true,
+        "rdseed": false,
         "cmpccxadd": false,
         "bhi-no": false,
         "avx512-4vnniw": false,
@@ -40684,7 +40799,7 @@
         "lmce": false,
         "perfctr-nb": false,
         "rdrand": true,
-        "rdseed": true,
+        "rdseed": false,
         "cmpccxadd": false,
         "bhi-no": false,
         "avx512-4vnniw": false,
@@ -41215,7 +41330,7 @@
         "hv-tlbflush": false,
         "ffxsr": true,
         "rdrand": true,
-        "rdseed": true,
+        "rdseed": false,
         "bhi-no": false,
         "cmpccxadd": false,
         "avx512-4vnniw": false,
@@ -41754,7 +41869,7 @@
         "hv-tlbflush": true,
         "ffxsr": true,
         "rdrand": true,
-        "rdseed": true,
+        "rdseed": false,
         "bhi-no": false,
         "cmpccxadd": false,
         "avx512-4vnniw": false,
diff --git a/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.xml b/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.xml
index 7cff2c2291..0c3a45d3f8 100644
--- a/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.xml
+++ b/tests/qemucapabilitiesdata/caps_10.2.0_x86_64.xml
@@ -585,7 +585,7 @@
     <property name='lmce' type='boolean' value='false'/>
     <property name='perfctr-nb' type='boolean' value='false'/>
     <property name='rdrand' type='boolean' value='true' migratable='yes'/>
-    <property name='rdseed' type='boolean' value='true' migratable='yes'/>
+    <property name='rdseed' type='boolean' value='false'/>
     <property name='cmpccxadd' type='boolean' value='false'/>
     <property name='bhi-no' type='boolean' value='false'/>
     <property name='avx512-4vnniw' type='boolean' value='false'/>
@@ -672,6 +672,7 @@
   <cpu type='kvm' name='YongFeng-v3' typename='YongFeng-v3-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='xstore'/>
     <blocker name='xstore-en'/>
     <blocker name='xcrypt'/>
@@ -686,6 +687,7 @@
   <cpu type='kvm' name='YongFeng-v2' typename='YongFeng-v2-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='xstore'/>
     <blocker name='xstore-en'/>
     <blocker name='xcrypt'/>
@@ -700,6 +702,7 @@
   <cpu type='kvm' name='YongFeng-v1' typename='YongFeng-v1-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='xstore'/>
     <blocker name='xstore-en'/>
     <blocker name='xcrypt'/>
@@ -714,6 +717,7 @@
   <cpu type='kvm' name='YongFeng' typename='YongFeng-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='xstore'/>
     <blocker name='xstore-en'/>
     <blocker name='xcrypt'/>
@@ -730,94 +734,115 @@
   <cpu type='kvm' name='Westmere-IBRS' typename='Westmere-IBRS-x86_64-cpu' usable='yes'/>
   <cpu type='kvm' name='Westmere' typename='Westmere-x86_64-cpu' usable='yes'/>
   <cpu type='kvm' name='Snowridge-v4' typename='Snowridge-v4-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
     <blocker name='cldemote'/>
   </cpu>
   <cpu type='kvm' name='Snowridge-v3' typename='Snowridge-v3-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
     <blocker name='cldemote'/>
     <blocker name='core-capability'/>
     <blocker name='split-lock-detect'/>
   </cpu>
   <cpu type='kvm' name='Snowridge-v2' typename='Snowridge-v2-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
     <blocker name='cldemote'/>
     <blocker name='core-capability'/>
     <blocker name='split-lock-detect'/>
   </cpu>
   <cpu type='kvm' name='Snowridge-v1' typename='Snowridge-v1-x86_64-cpu' usable='no'>
     <blocker name='mpx'/>
+    <blocker name='rdseed'/>
     <blocker name='cldemote'/>
     <blocker name='core-capability'/>
     <blocker name='split-lock-detect'/>
   </cpu>
   <cpu type='kvm' name='Snowridge' typename='Snowridge-x86_64-cpu' usable='no'>
     <blocker name='mpx'/>
+    <blocker name='rdseed'/>
     <blocker name='cldemote'/>
     <blocker name='core-capability'/>
     <blocker name='split-lock-detect'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server-v5' typename='Skylake-Server-v5-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server-v4' typename='Skylake-Server-v4-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server-v3' typename='Skylake-Server-v3-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server-v2' typename='Skylake-Server-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server-v1' typename='Skylake-Server-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server-noTSX-IBRS' typename='Skylake-Server-noTSX-IBRS-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server-IBRS' typename='Skylake-Server-IBRS-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Server' typename='Skylake-Server-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Client-v4' typename='Skylake-Client-v4-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Client-v3' typename='Skylake-Client-v3-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Client-v2' typename='Skylake-Client-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Client-v1' typename='Skylake-Client-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Client-noTSX-IBRS' typename='Skylake-Client-noTSX-IBRS-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Client-IBRS' typename='Skylake-Client-IBRS-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Skylake-Client' typename='Skylake-Client-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='SierraForest-v3' typename='SierraForest-v3-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
     <blocker name='serialize'/>
@@ -841,6 +866,7 @@
   <cpu type='kvm' name='SierraForest-v2' typename='SierraForest-v2-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
     <blocker name='serialize'/>
@@ -863,6 +889,7 @@
   </cpu>
   <cpu type='kvm' name='SierraForest-v1' typename='SierraForest-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='serialize'/>
     <blocker name='cmpccxadd'/>
@@ -879,6 +906,7 @@
   </cpu>
   <cpu type='kvm' name='SierraForest' typename='SierraForest-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='serialize'/>
     <blocker name='cmpccxadd'/>
@@ -898,6 +926,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
@@ -922,6 +951,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
@@ -945,6 +975,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='serialize'/>
@@ -967,6 +998,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='serialize'/>
@@ -986,6 +1018,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='serialize'/>
@@ -1037,6 +1070,7 @@
   <cpu type='kvm' name='Nehalem' typename='Nehalem-x86_64-cpu' usable='yes'/>
   <cpu type='kvm' name='KnightsMill-v1' typename='KnightsMill-v1-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
+    <blocker name='rdseed'/>
     <blocker name='avx512pf'/>
     <blocker name='avx512er'/>
     <blocker name='avx512-4vnniw'/>
@@ -1044,6 +1078,7 @@
   </cpu>
   <cpu type='kvm' name='KnightsMill' typename='KnightsMill-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
+    <blocker name='rdseed'/>
     <blocker name='avx512pf'/>
     <blocker name='avx512er'/>
     <blocker name='avx512-4vnniw'/>
@@ -1057,52 +1092,61 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server-v6' typename='Icelake-Server-v6-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server-v5' typename='Icelake-Server-v5-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server-v4' typename='Icelake-Server-v4-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server-v3' typename='Icelake-Server-v3-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server-v2' typename='Icelake-Server-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server-v1' typename='Icelake-Server-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server-noTSX' typename='Icelake-Server-noTSX-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
   <cpu type='kvm' name='Icelake-Server' typename='Icelake-Server-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
   <cpu type='kvm' name='Haswell-v4' typename='Haswell-v4-x86_64-cpu' usable='no'>
@@ -1142,6 +1186,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
@@ -1174,6 +1219,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
@@ -1205,6 +1251,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='serialize'/>
@@ -1231,6 +1278,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='serialize'/>
@@ -1253,66 +1301,114 @@
     <blocker name='prefetchiti'/>
     <blocker name='mcdt-no'/>
   </cpu>
-  <cpu type='kvm' name='EPYC-v5' typename='EPYC-v5-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-v4' typename='EPYC-v4-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-v3' typename='EPYC-v3-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-v2' typename='EPYC-v2-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-v1' typename='EPYC-v1-x86_64-cpu' usable='yes'/>
+  <cpu type='kvm' name='EPYC-v5' typename='EPYC-v5-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-v4' typename='EPYC-v4-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-v3' typename='EPYC-v3-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-v2' typename='EPYC-v2-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-v1' typename='EPYC-v1-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
   <cpu type='kvm' name='EPYC-Turin-v1' typename='EPYC-Turin-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
   <cpu type='kvm' name='EPYC-Turin' typename='EPYC-Turin-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
-  <cpu type='kvm' name='EPYC-Rome-v5' typename='EPYC-Rome-v5-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-Rome-v4' typename='EPYC-Rome-v4-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-Rome-v3' typename='EPYC-Rome-v3-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-Rome-v2' typename='EPYC-Rome-v2-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-Rome-v1' typename='EPYC-Rome-v1-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='EPYC-Rome' typename='EPYC-Rome-x86_64-cpu' usable='yes'/>
+  <cpu type='kvm' name='EPYC-Rome-v5' typename='EPYC-Rome-v5-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-Rome-v4' typename='EPYC-Rome-v4-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-Rome-v3' typename='EPYC-Rome-v3-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-Rome-v2' typename='EPYC-Rome-v2-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-Rome-v1' typename='EPYC-Rome-v1-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-Rome' typename='EPYC-Rome-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
   <cpu type='kvm' name='EPYC-Milan-v3' typename='EPYC-Milan-v3-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='EPYC-Milan-v2' typename='EPYC-Milan-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='EPYC-Milan-v1' typename='EPYC-Milan-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='EPYC-Milan' typename='EPYC-Milan-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='EPYC-IBPB' typename='EPYC-IBPB-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
   </cpu>
-  <cpu type='kvm' name='EPYC-IBPB' typename='EPYC-IBPB-x86_64-cpu' usable='yes'/>
   <cpu type='kvm' name='EPYC-Genoa-v2' typename='EPYC-Genoa-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
   <cpu type='kvm' name='EPYC-Genoa-v1' typename='EPYC-Genoa-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
   <cpu type='kvm' name='EPYC-Genoa' typename='EPYC-Genoa-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='la57'/>
   </cpu>
-  <cpu type='kvm' name='EPYC' typename='EPYC-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='Dhyana-v2' typename='Dhyana-v2-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='Dhyana-v1' typename='Dhyana-v1-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='Dhyana' typename='Dhyana-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='Denverton-v3' typename='Denverton-v3-x86_64-cpu' usable='yes'/>
-  <cpu type='kvm' name='Denverton-v2' typename='Denverton-v2-x86_64-cpu' usable='yes'/>
+  <cpu type='kvm' name='EPYC' typename='EPYC-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='Dhyana-v2' typename='Dhyana-v2-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='Dhyana-v1' typename='Dhyana-v1-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='Dhyana' typename='Dhyana-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='Denverton-v3' typename='Denverton-v3-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
+  <cpu type='kvm' name='Denverton-v2' typename='Denverton-v2-x86_64-cpu' usable='no'>
+    <blocker name='rdseed'/>
+  </cpu>
   <cpu type='kvm' name='Denverton-v1' typename='Denverton-v1-x86_64-cpu' usable='no'>
     <blocker name='mpx'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Denverton' typename='Denverton-x86_64-cpu' usable='no'>
     <blocker name='mpx'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Cooperlake-v2' typename='Cooperlake-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
@@ -1320,6 +1416,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
@@ -1327,6 +1424,7 @@
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
     <blocker name='taa-no'/>
   </cpu>
@@ -1335,6 +1433,7 @@
   <cpu type='kvm' name='ClearwaterForest-v1' typename='ClearwaterForest-v1-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
     <blocker name='serialize'/>
@@ -1365,6 +1464,7 @@
   <cpu type='kvm' name='ClearwaterForest' typename='ClearwaterForest-x86_64-cpu' usable='no'>
     <blocker name='ss'/>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='bus-lock-detect'/>
     <blocker name='cldemote'/>
     <blocker name='serialize'/>
@@ -1394,67 +1494,82 @@
   </cpu>
   <cpu type='kvm' name='Cascadelake-Server-v5' typename='Cascadelake-Server-v5-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
   </cpu>
   <cpu type='kvm' name='Cascadelake-Server-v4' typename='Cascadelake-Server-v4-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
   </cpu>
   <cpu type='kvm' name='Cascadelake-Server-v3' typename='Cascadelake-Server-v3-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
   </cpu>
   <cpu type='kvm' name='Cascadelake-Server-v2' typename='Cascadelake-Server-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
   </cpu>
   <cpu type='kvm' name='Cascadelake-Server-v1' typename='Cascadelake-Server-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Cascadelake-Server-noTSX' typename='Cascadelake-Server-noTSX-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
     <blocker name='ibrs-all'/>
   </cpu>
   <cpu type='kvm' name='Cascadelake-Server' typename='Cascadelake-Server-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell-v4' typename='Broadwell-v4-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell-v3' typename='Broadwell-v3-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell-v2' typename='Broadwell-v2-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell-v1' typename='Broadwell-v1-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell-noTSX-IBRS' typename='Broadwell-noTSX-IBRS-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell-noTSX' typename='Broadwell-noTSX-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell-IBRS' typename='Broadwell-IBRS-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='Broadwell' typename='Broadwell-x86_64-cpu' usable='no'>
     <blocker name='pcid'/>
     <blocker name='hle'/>
     <blocker name='rtm'/>
+    <blocker name='rdseed'/>
   </cpu>
   <cpu type='kvm' name='486-v1' typename='486-v1-x86_64-cpu' usable='yes'/>
   <cpu type='kvm' name='486' typename='486-x86_64-cpu' usable='yes'/>
diff --git a/tests/qemuxmlconfdata/cpu-host-model-fallback-kvm.x86_64-latest.args b/tests/qemuxmlconfdata/cpu-host-model-fallback-kvm.x86_64-latest.args
index 6afa8a4c2d..1a9eb5fe06 100644
--- a/tests/qemuxmlconfdata/cpu-host-model-fallback-kvm.x86_64-latest.args
+++ b/tests/qemuxmlconfdata/cpu-host-model-fallback-kvm.x86_64-latest.args
@@ -12,7 +12,7 @@ XDG_CONFIG_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.config \
 -object '{"qom-type":"secret","id":"masterKey0","format":"raw","file":"/var/lib/libvirt/qemu/domain--1-QEMUGuest1/master-key.aes"}' \
 -machine pc,usb=off,dump-guest-core=off,memory-backend=pc.ram,acpi=off \
 -accel kvm \
--cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,la57=off \
+-cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,rdseed=off,la57=off \
 -m size=219136k \
 -object '{"qom-type":"memory-backend-ram","id":"pc.ram","size":224395264}' \
 -overcommit mem-lock=off \
diff --git a/tests/qemuxmlconfdata/cpu-host-model-features.x86_64-latest.args b/tests/qemuxmlconfdata/cpu-host-model-features.x86_64-latest.args
index ce60a39acc..57834779e3 100644
--- a/tests/qemuxmlconfdata/cpu-host-model-features.x86_64-latest.args
+++ b/tests/qemuxmlconfdata/cpu-host-model-features.x86_64-latest.args
@@ -12,7 +12,7 @@ XDG_CONFIG_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.config \
 -object '{"qom-type":"secret","id":"masterKey0","format":"raw","file":"/var/lib/libvirt/qemu/domain--1-QEMUGuest1/master-key.aes"}' \
 -machine pc,usb=off,dump-guest-core=off,memory-backend=pc.ram,acpi=off \
 -accel kvm \
--cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,la57=off,abm=on,ds=on,invtsc=off \
+-cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,rdseed=off,la57=off,abm=on,ds=on,invtsc=off \
 -m size=219136k \
 -object '{"qom-type":"memory-backend-ram","id":"pc.ram","size":224395264}' \
 -overcommit mem-lock=off \
diff --git a/tests/qemuxmlconfdata/cpu-host-model-kvm.x86_64-latest.args b/tests/qemuxmlconfdata/cpu-host-model-kvm.x86_64-latest.args
index 2bf920b9c7..574efe40f5 100644
--- a/tests/qemuxmlconfdata/cpu-host-model-kvm.x86_64-latest.args
+++ b/tests/qemuxmlconfdata/cpu-host-model-kvm.x86_64-latest.args
@@ -12,7 +12,7 @@ XDG_CONFIG_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.config \
 -object '{"qom-type":"secret","id":"masterKey0","format":"raw","file":"/var/lib/libvirt/qemu/domain--1-QEMUGuest1/master-key.aes"}' \
 -machine q35,usb=off,dump-guest-core=off,memory-backend=pc.ram,acpi=off \
 -accel kvm \
--cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,la57=off \
+-cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,rdseed=off,la57=off \
 -m size=219136k \
 -object '{"qom-type":"memory-backend-ram","id":"pc.ram","size":224395264}' \
 -overcommit mem-lock=off \
diff --git a/tests/qemuxmlconfdata/cpu-host-model-nofallback-kvm.x86_64-latest.args b/tests/qemuxmlconfdata/cpu-host-model-nofallback-kvm.x86_64-latest.args
index 6afa8a4c2d..1a9eb5fe06 100644
--- a/tests/qemuxmlconfdata/cpu-host-model-nofallback-kvm.x86_64-latest.args
+++ b/tests/qemuxmlconfdata/cpu-host-model-nofallback-kvm.x86_64-latest.args
@@ -12,7 +12,7 @@ XDG_CONFIG_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.config \
 -object '{"qom-type":"secret","id":"masterKey0","format":"raw","file":"/var/lib/libvirt/qemu/domain--1-QEMUGuest1/master-key.aes"}' \
 -machine pc,usb=off,dump-guest-core=off,memory-backend=pc.ram,acpi=off \
 -accel kvm \
--cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,la57=off \
+-cpu EPYC-Turin,x2apic=on,tsc-deadline=on,hypervisor=on,tsc-adjust=on,spec-ctrl=on,stibp=on,flush-l1d=on,ssbd=on,cmp-legacy=on,virt-ssbd=on,tsa-sq-no=on,tsa-l1-no=on,pcid=off,rdseed=off,la57=off \
 -m size=219136k \
 -object '{"qom-type":"memory-backend-ram","id":"pc.ram","size":224395264}' \
 -overcommit mem-lock=off \