I'm sure it's a compiler/libc bug, but the good news is I'm now able to reproduce it locally, so a fix should be available in due course.