I'm not sure if it makes a difference or not, but here is the contents of /proc/<pid>/cgroup of the VM
On the "working" node, ie, the one that doesn't fill syslog
# cat /proc/$(ps auxf | grep kvm | grep " 102 " | awk '{print $2}')/cgroup
13:hugetlb:/
12:memory:/qemu.slice/102.scope...