Hi Zhao, Thanks again for the info!
You're right — I just tested the latest master (including commits 5979f50fa9fd and 7a4861230676), and the issue is indeed fixed there. macOS guests now boot successfully with TCG and multiple vCPUs, without needing my patch. I’ll go ahead and drop the revert then — great to see it resolved upstream! Best regards, Elisey