We found some users reporting this on IRC. This happens when a partial update happens. In that case dpkg --configure -a fixes things. What is technically failing is that new snap-confine is unpacked but the new apparmor profile is not applied yet as this is only done in configure stage.