As an update, with patch in comment 2, linux-user works right now, but a vmstate-test fails. I suspect that what we want is also adding this other backport: https://gitlab.com/qemu-project/qemu/-/commit/abe2c4bdb65e8dd9cb2f01c355baa394bf49a8af