The bin86 package is required to build mbr (needs as86) but it is missing from the build dependencies.
Oops, misdiagnosed this one. This appears to be a bug related to the hardened toolchain, newer kernel headers fixed this.