@mborzecki I am also facing the same issue once I changed confinement to strict from devmode.And its a custom node-red snap. As you pointed out I was checking the logs and saw the same syscall.
[13613.009389] audit: type=1326 audit(1613327523.042:11612): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27448 comm=“node” exe="/snap/xxxxx-node-red/x1/xxxxx-node-red/bin/node" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f0924231639 code=0x50000
Any idea when the fix would land in the ubuntu 18.04 repos ?