I'm gonna repeat but take a look on qemu_devices patch. It's described there for i440fx and q35 machines (q35 has devices on addr 0xFF).