QEMU fork with IO sheltering