"GetUrl was called for a page that the authenticated user cannot access" should be more helpful

I am stumped because this is being thrown:

System.ApplicationException: GetUrl was called for a page that the authenticated user cannot access. The URL would have been ~/Pages/Admin/User/ResetPassword.aspx?UserId=5057.

I find the ResetPassword page. GetInfo is used exactly once:

Notice UserCanAccessPageAndAllControls is called. The page throwing the exception, and the ResetPassword page, is in the same folder/entitysetup, so they same hierarchy, so if the user was able to go to this page, then the only UserCanAccessPage that matters is the one in ResetPassword.

So this means UserCanAccessPageAndAllControls does not do what it says it does, or there’s a bug in it.