Paul found an ugly bug in glibc's regex.
Here's a test to trigger that from grep: