Description of problem:
So here's a weird bug.

I have an F19 (minimal) guest on an F19 host. With the default qxl/spice config, if I do something like (at a VT - minimal install, remember):

less /var/log/messages
cat /var/log/messages
less /var/log/audit/audit.log
cat /var/log/audit/audit.log

really anything that causes a bunch of text to get printed to the screen, the system will print some of the text then crash (in the 'less' case, it usually crashes after I page down once or twice).

This happens whether I use virt-manager or spicec as the console. It does *not* happen if I use the 'vga' video adapter instead of 'qxl' - either with VNC or with SPICE. It *does* still happen if I pass 'nomodeset' with the qxl/spice config, though.

The screen freezes for a few seconds, then the VM shuts down.

Version-Release number of selected component:
qemu-system-x86-1.4.0-5.fc19

Additional info:
backtrace_rating: 4
cmdline:        /usr/bin/qemu-system-x86_64 -machine accel=kvm -name Builder -S -M pc-i440fx-1.4 -m 2048 -smp 2,sockets=2,cores=1,threads=1 -uuid fa27784b-d700-d3fd-f74b-d2ccabe530de -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/Builder.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -drive file=/media/Sea500/images/builder.img,if=none,id=drive-virtio-disk0,format=raw -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=2 -drive if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0,bootindex=1 -netdev tap,fd=24,id=hostnet0,vhost=on,vhostfd=25 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:43:04:90,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -spice port=5900,addr=127.0.0.1,disable-ticketing,seamless-migration=on -vga qxl -global qxl-vga.ram_size=67108864 -global qxl-vga.vram_size=67108864 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7
crash_function: spice_logv
executable:     /usr/bin/qemu-system-x86_64
kernel:         3.9.0-0.rc1.git2.1.1.fc19.x86_64
uid:            107
var_log_messages: Binary file /var/log/messages matches

Truncated backtrace:
Thread no. 1 (10 frames)
 #2 spice_logv at log.c:109
 #3 spice_log at log.c:123
 #4 validate_virt at red_memslots.c:90
 #5 get_virt at red_memslots.c:142
 #6 red_get_data_chunks_ptr at red_parse_qxl.c:107
 #7 red_get_data_chunks at red_parse_qxl.c:137
 #8 red_get_image at red_parse_qxl.c:458
 #9 red_get_copy_ptr at red_parse_qxl.c:594
 #10 red_get_native_drawable at red_parse_qxl.c:972
 #11 red_get_drawable at red_parse_qxl.c:1110