qemu-spoof: register per-VM anti-detect machine properties

Adds string machine properties spoof-seed / spoof-mode / spoof-hv / spoof-waet /
spoof-vmgenid / spoof-pvpanic on the x86 machine, backed by X86MachineState fields.
The qemu-spoof module (hw/misc/spoof*) reads them via
object_property_get_str(current_machine, "spoof-*"). spoof-mode (none|hyperv|vbs|
physical) is the master fork; spoof-hv is the legacy knob. Inert unless set.
diff --git a/hw/i386/x86.c b/hw/i386/x86.c
index 01872cb..702b327 100644
--- a/hw/i386/x86.c
+++ b/hw/i386/x86.c
@@ -372,6 +372,27 @@ static void x86_machine_initfn(Object *obj)
     x86ms->above_4g_mem_start = 4 * GiB;
 }
 
+/* qemu-spoof: plain string machine properties, read back by the spoof module via
+ * object_property_get_str(current_machine, "spoof-*"). */
+#define X86_SPOOF_PROP(field)                                                  \
+    static char *x86_machine_get_##field(Object *obj, Error **errp)            \
+    {                                                                          \
+        return g_strdup(X86_MACHINE(obj)->field);                             \
+    }                                                                          \
+    static void x86_machine_set_##field(Object *obj, const char *value,        \
+                                        Error **errp)                          \
+    {                                                                          \
+        X86MachineState *x86ms = X86_MACHINE(obj);                            \
+        g_free(x86ms->field);                                                  \
+        x86ms->field = g_strdup(value);                                        \
+    }
+X86_SPOOF_PROP(spoof_seed)
+X86_SPOOF_PROP(spoof_mode)
+X86_SPOOF_PROP(spoof_hv)
+X86_SPOOF_PROP(spoof_waet)
+X86_SPOOF_PROP(spoof_vmgenid)
+X86_SPOOF_PROP(spoof_pvpanic)
+
 static void x86_machine_class_init(ObjectClass *oc, const void *data)
 {
     MachineClass *mc = MACHINE_CLASS(oc);
@@ -426,6 +447,31 @@ static void x86_machine_class_init(ObjectClass *oc, const void *data)
                                           "in ACPI table header."
                                           "The string may be up to 8 bytes in size");
 
+    object_class_property_add_str(oc, "spoof-seed",
+        x86_machine_get_spoof_seed, x86_machine_set_spoof_seed);
+    object_class_property_set_description(oc, "spoof-seed",
+        "qemu-spoof: per-VM persona seed (empty = stock QEMU)");
+    object_class_property_add_str(oc, "spoof-mode",
+        x86_machine_get_spoof_mode, x86_machine_set_spoof_mode);
+    object_class_property_set_description(oc, "spoof-mode",
+        "qemu-spoof: identity mode (none|hyperv|vbs|physical)");
+    object_class_property_add_str(oc, "spoof-hv",
+        x86_machine_get_spoof_hv, x86_machine_set_spoof_hv);
+    object_class_property_set_description(oc, "spoof-hv",
+        "qemu-spoof: legacy hv knob (off|hyperv|hidden); prefer spoof-mode");
+    object_class_property_add_str(oc, "spoof-waet",
+        x86_machine_get_spoof_waet, x86_machine_set_spoof_waet);
+    object_class_property_set_description(oc, "spoof-waet",
+        "qemu-spoof: drop the WAET ACPI table (on|off)");
+    object_class_property_add_str(oc, "spoof-vmgenid",
+        x86_machine_get_spoof_vmgenid, x86_machine_set_spoof_vmgenid);
+    object_class_property_set_description(oc, "spoof-vmgenid",
+        "qemu-spoof: vmgenid policy (keep|mask|hide)");
+    object_class_property_add_str(oc, "spoof-pvpanic",
+        x86_machine_get_spoof_pvpanic, x86_machine_set_spoof_pvpanic);
+    object_class_property_set_description(oc, "spoof-pvpanic",
+        "qemu-spoof: drop the pvpanic device (on|off)");
+
     object_class_property_add(oc, X86_MACHINE_BUS_LOCK_RATELIMIT, "uint64_t",
                                 x86_machine_get_bus_lock_ratelimit,
                                 x86_machine_set_bus_lock_ratelimit, NULL, NULL);
diff --git a/include/hw/i386/x86.h b/include/hw/i386/x86.h
index 71fe6b5..c1f5f7e 100644
--- a/include/hw/i386/x86.h
+++ b/include/hw/i386/x86.h
@@ -79,6 +79,9 @@ struct X86MachineState {
 
     char *oem_id;
     char *oem_table_id;
+
+    /* qemu-spoof: per-VM anti-detect config, read by hw/misc/spoof*.c */
+    char *spoof_seed, *spoof_mode, *spoof_hv, *spoof_waet, *spoof_vmgenid, *spoof_pvpanic;
     /*
      * Address space used by IOAPIC device. All IOAPIC interrupts
      * will be translated to MSI messages in the address space.