See #8483 for example of a bug fix that lacks a test. See #5033 for a fix whose test doesn't work in CI. I am sure there are other examples. This is somewhat tricky, but I think we can do it with `unshare`. If not, we can do it with VM tests.
