Comment 1 for bug 1615144

This will leave apparmor in a "half configured" state, which means that the kernel would crash next time the system is patched. To circumvent this problem, comment out the following line in /var/lib/dpkg/info/apparmor.postinst:
#load_configured_profiles || true

and finish the upgrade

# apt-get upgrade apparmor
-or-
# dpkg --configure -a

depending on the system's state.

I don't know what side effects this may cause, though.

PS. disabling all profiles does not prevent the kernel from crashing, so the profiles themselves are evidently not the problem.