@bug2k24 We already found out that the solution does not work if swtpm is used. So far, the denials I see in swtpm cases overlap but are not 100% identical, but I still think it is the same origin ( swtpm-selinux) in all cases. Currently, this is primarily tackled here: Creating new VM with TPM using virt-manager results in SELinux-related error - #4 by py0xc3
Yet, it would be nice if you provoke the issue once, let us know the very time you provoked it, and then wait at least 10 seconds and send us the full output of ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today
Extracts of only one second are maybe not covering all related denials.