repros in a vanilla docker image too, so I think this is an upstream issue