In practice, this bug was hidden by another bug in the thread variables
implementation: the destruction callback is never invoked.