Can you check and see if the genprof marks and kernel messages are going to /var/log/syslog and if they both are can you try editing your /etc/apparmor/logprof.conf
from
logfiles = /var/log/audit/audit.log /var/log/messages /var/log/syslog
to
logfiles = /var/log/syslog
Can you check and see if the genprof marks and kernel messages are going to /var/log/syslog and if they both are can you try editing your /etc/apparmor/ logprof. conf
from audit/audit. log /var/log/messages /var/log/syslog
logfiles = /var/log/
to
logfiles = /var/log/syslog