After your call [0] write here to help. What can I aquatically do? Install experimental kernel on VM and check if profiles there and here does not produces denies? [0] https://lists.alioth.debian.org/pipermail/pkg-apparmor-team/2017-October/001762.html