Doesn't these CPUs have some way to select the exception vectors base and could that be set wrong? I've also seen some problems with these CPUs but last time I asked nobody answered:
https://lists.nongnu.org/archive/html/qemu-ppc/2020-03/msg00292.html Could this bug be related to that?