So
[ 7152.173377] audit: type=1400 audit(1560925171.038:439): apparmor="DENIED" operation="file_r50-221da1d95974" pid=18422 comm="qemu-system-x86" family="unix" sock_type="stream" protocol=0 "
is really bothering me. This should not be possible. operation="file_r50-221da1d95974" does NOT exist, this looks like memory corruption. And several of the other fields that are missing would trigger AA_BUG.
Sadly I don't have this figured out yet.
So
[ 7152.173377] audit: type=1400 audit(156092517 1.038:439) : apparmor="DENIED" operation= "file_r50- 221da1d95974" pid=18422 comm="qemu- system- x86" family="unix" sock_type="stream" protocol=0 "
is really bothering me. This should not be possible. operation= "file_r50- 221da1d95974" does NOT exist, this looks like memory corruption. And several of the other fields that are missing would trigger AA_BUG.
Sadly I don't have this figured out yet.