It turns out this is just caused by running a 5.8-rc kernel with systemd compiled against linux-libc-dev 5.7, there's a new capability cap_bpf that systemctl fails to display since it's not in linux/capability.h.
The same issue is described here, with a link to the upstream fix: https://bugzilla.redhat.com/show_bug.cgi?id=1853736
