segmentation fault when using usb-net and -netdev tap

The following command causes a Segmentation fault:

qemu-kvm -usb -device usb-net,netdev=net0 -netdev tap,id=net0
Segmentation fault

The following command does not:

qemu-kvm -usb -device usb-net,netdev=net0 -netdev user,id=net0

Program received signal SIGSEGV, Segmentation fault.
usbnet_can_receive (nc=0x55555657dc20)
    at /home/pbonzini/work/upstream/qemu/hw/usb/dev-network.c:1292
1292	    if (is_rndis(s) && s->rndis_state != RNDIS_DATA_INITIALIZED) {

First reported at https://bugzilla.redhat.com/show_bug.cgi?id=843310