This looks a like a design flaw in Azure container service.

Engineer working on GVisor for Google had this to say https://twitter.com/IanMLewis/status/1436390377716523011