The culprit for this was the log_subcmds option in sudoers, which itself uses ptrace and seccomp and has some documented limitations.
log_subcmds
sudoers
Thanks to DymOK on the TrueNAS forum who figured this out.