I think it's because of enabling Systemd's unified cgroup hierarchy in the updated ns4 host (now again running Debian stable).