Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Moderate: virt:rhel and virt-devel:rhel security and bug fix update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHSA-2023:1833
Verify this bug with: libvirt-8.0.0-5.9.module+el8.6.0+18552+b96c5a91.x86_64 1. prepare a guest with guest agent device # virsh domtime rhel8.6 Time: 1680592779 2. check the dominfo # virsh dominfo rhel8.6 Id: 1 Name: rhel8.6 UUID: c89b1255-a609-4ef8-8054-4aebb05e3d7e OS Type: hvm State: running CPU(s): 8 CPU time: 276.7s Max memory: 2883584 KiB Used memory: 2097152 KiB Persistent: yes Autostart: disable Managed save: no Security model: selinux Security DOI: 0 Security label: system_u:system_r:svirt_t:s0:c166,c942 (enforcing) 3. check the vcpus about guest using qemu-agent-command # virsh qemu-agent-command rhel8.6 '{"execute":"guest-get-vcpus"}' {"return":[{"online":true,"can-offline":true,"logical-id":7},.... 4. check the dominfo again # virsh dominfo rhel8.6 Id: 1 Name: rhel8.6 UUID: c89b1255-a609-4ef8-8054-4aebb05e3d7e OS Type: hvm State: running CPU(s): 8 CPU time: 283.4s Max memory: 2883584 KiB Used memory: 2097152 KiB Persistent: yes Autostart: disable Managed save: no Security model: selinux Security DOI: 0 Security label: system_u:system_r:svirt_t:s0:c166,c942 (enforcing) Messages: tainted: custom guest agent control commands issued 5. check the log # grep -ni tainted /var/log/libvirt/libvirtd.log 569:2023-04-04 07:20:58.730+0000: 31135: warning : qemuDomainObjTaintMsg:6401 : Domain id=1 name='rhel8.6' uuid=c89b1255-a609-4ef8-8054-4aebb05e3d7e is tainted: custom-ga-command 571:2023-04-04 07:20:58.730+0000: 31135: debug : qemuDomainLogAppendMessage:6766 : Append log message (vm='rhel8.6' message='2023-04-04 07:20:58.730+0000: Domain id=1 is tainted: custom-ga-command 6. repeat step 2 for 100 times # for i in {1..100}; do virsh qemu-agent-command rhel8.6 '{"execute":"guest-get-vcpus"}'; done 7. check the log again # grep -ni tainted /var/log/libvirt/libvirtd.log 569:2023-04-04 07:20:58.730+0000: 31135: warning : qemuDomainObjTaintMsg:6401 : Domain id=1 name='rhel8.6' uuid=c89b1255-a609-4ef8-8054-4aebb05e3d7e is tainted: custom-ga-command 571:2023-04-04 07:20:58.730+0000: 31135: debug : qemuDomainLogAppendMessage:6766 : Append log message (vm='rhel8.6' message='2023-04-04 07:20:58.730+0000: Domain id=1 is tainted: custom-ga-command (The tainted message is printed when invoking guest-agent-command for the first time. And no new logs about tainted messages printed for the later invoking, logs are not spammed)