The code has been disabled in #2112. See #2064 for details and repro scripts. The underlying issue might very well be inside QEMU, but we probably need a simpler repro-case before we can report it upstream.