See "Use-after-free during unrealize in system_reset" thread and individual patches.
Paolo Paolo Bonzini (2): qdev: reorganize error reporting in bus_set_realized qdev: recursively unrealize devices when unrealizing bus hw/core/qdev.c | 27 +++++++++++++++------------ 1 file changed, 15 insertions(+), 12 deletions(-) -- 1.8.3.1