similar bag was described earlier https://github.com/facebook/osquery/issues/3199 and was closed without author's confirmation.