when you power up the chip without loading any software, the pulldown resistor is turned on by default so you can see it sinking current here. there's a very odd peak as you cross above VDDIO + 0.3V which makes me think there is an internal diode. above that, i think the fault tolerant circuit kicks in and the current goes back down again.
if you turn on the pulldown, the whole curve shifts up a bit, which is expected. the "glitch" is still there, trying to source current, but part of that current is canceled out by the pulldown.