Another interesting behavior I just noticed - if I turn on ASAN for the scheme, it properly catches the error every time.