Hi, Carsten Thank You for Your valuable input.
The only things I don't understand, how was AppArmor enabled, and how was it working for years until the last update of kernel/TB/whatever; I have symlinked home dir for long time now... Could be that only the last TB update enabled it?
Well, I could also try to report this to apparmor (and the freezing problem to kernel team); as You can see, I am ready to report bugs. I only doubt this could get anywhere, because I'm not so sawwy so to debug kernel, and Apparmor's inability to process symlinks is a known "wontfix" bug.
Anyway, thank You again.
Hmm, if you want to disable AppArmor completely why not remove the package then? I know it's not the answer you probably want to hear but reporting the problems would be better. :) The AppArmor people in Debian are a really responsive team. [1] https://bugs.debian.org/882218