Could you attach serial console? "-serial stdio" to qemu, "console=ttyS0" to kernel and grab the full log? I bet the first dump would be interesting.