I think it's because of enabling Systemd's unified cgroup hierarchy in
the updated ns4 host (now again running Debian stable).