panic: cgroupfs: pids controller pending pool would be negative if charge was allowed: current pool: 0, proposed charge: -1

goroutine 2502 [running]:
panic({0xfbc700, 0xc0006e58a0})
	GOROOT/src/runtime/panic.go:1147 +0x3a8 fp=0xc0006a4e28 sp=0xc0006a4d68 pc=0x435308
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*pidsController).Charge(0xc00172d5c0, 0xc0015ab500, 0x1197fd1, 0x4, 0xffffffffffffffff)
	pkg/sentry/fsimpl/cgroupfs/pids.go:207 +0x56a fp=0xc0006a4f10 sp=0xc0006a4e28 pc=0xd83b8a
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*cgroupInode).Charge(0xc0018b2000, 0x4, 0x3f466c514098, {0x1197fd1, 0x4}, 0x40d074, 0x7f4859044108)
	pkg/sentry/fsimpl/cgroupfs/base.go:321 +0xf9 fp=0xc0006a4f98 sp=0xc0006a4f10 pc=0xd79d99
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).chargeLocked(0x449114, 0xc00172d6e0, {0x1197fd1, 0x4}, 0xc0006a50c8, 0x4495f2)
	pkg/sentry/kernel/task_cgroup.go:234 +0xcd fp=0xc0006a5058 sp=0xc0006a4f98 pc=0x99fbcd
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).ChargeFor(0xc001628a80, 0x0, {0x1197fd1, 0x4}, 0x1d1b600, 0xc0006a5138)
	pkg/sentry/kernel/task_cgroup.go:245 +0xc5 fp=0xc0006a50e0 sp=0xc0006a5058 pc=0x99fd05
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).newTask.func1()
	pkg/sentry/kernel/task_start.go:194 +0x3a fp=0xc0006a5130 sp=0xc0006a50e0 pc=0x9b951a
gvisor.dev/gvisor/pkg/cleanup.clean(...)
	pkg/cleanup/cleanup.go:59
gvisor.dev/gvisor/pkg/cleanup.(*Cleanup).Clean(0xc0006a53d8)
	pkg/cleanup/cleanup.go:44 +0x37 fp=0xc0006a5150 sp=0xc0006a5130 pc=0x6be177
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).newTask·dwrap·234()
	pkg/sentry/kernel/task_start.go:180 +0x26 fp=0xc0006a5168 sp=0xc0006a5150 pc=0x9b95a6
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).newTask(0xc0002165a0, {0x1363a70, 0xc001628a80}, 0xc0006a5730)
	pkg/sentry/kernel/task_start.go:211 +0x8f4 fp=0xc0006a5400 sp=0xc0006a5168 pc=0x9b8d94
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).NewTask(0xc001628a80, {0x1363a70, 0xc001628a80}, 0xc0006a5730)
	pkg/sentry/kernel/task_start.go:127 +0x92 fp=0xc0006a5478 sp=0xc0006a5400 pc=0x9b8292
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Clone(0xc001628a80, 0xc0006a5808)
	pkg/sentry/kernel/task_clone.go:224 +0x103c fp=0xc0006a57f8 sp=0xc0006a5478 pc=0x9a0e3c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.clone(0xc0000d9518, 0x7d4800, 0xc0000d9518, 0x7d3800, 0x1, 0x410d000)
	pkg/sentry/syscalls/linux/sys_thread.go:208 +0x76 fp=0xc0006a5870 sp=0xc0006a57f8 pc=0xa69db6
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Clone(0xc001db4600, {{0x3d0f00}, {0x7f1b51fa33f0}, {0x7f1b51fa39d0}, {0x7f1b51fa39d0}, {0x7f1b51fa3700}, {0x7f1b51fa3700}})
	pkg/sentry/syscalls/linux/sys_clone_amd64.go:36 +0x32 fp=0xc0006a58b0 sp=0xc0006a5870 pc=0xa3b052
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc001628a80, 0x38, {{0x3d0f00}, {0x7f1b51fa33f0}, {0x7f1b51fa39d0}, {0x7f1b51fa39d0}, {0x7f1b51fa3700}, {0x7f1b51fa3700}})
	pkg/sentry/kernel/task_syscall.go:142 +0x815 fp=0xc0006a5ca0 sp=0xc0006a58b0 pc=0x9bb435
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc001628a80, 0x0, {{0x3d0f00}, {0x7f1b51fa33f0}, {0x7f1b51fa39d0}, {0x7f1b51fa39d0}, {0x7f1b51fa3700}, {0x7f1b51fa3700}})
	pkg/sentry/kernel/task_syscall.go:322 +0x4d fp=0xc0006a5d10 sp=0xc0006a5ca0 pc=0x9bc78d
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00068ed18, 0x1363a70, {{0x3d0f00}, {0x7f1b51fa33f0}, {0x7f1b51fa39d0}, {0x7f1b51fa39d0}, {0x7f1b51fa3700}, {0x7f1b51fa3700}})
	pkg/sentry/kernel/task_syscall.go:282 +0x65 fp=0xc0006a5d70 sp=0xc0006a5d10 pc=0x9bc445
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc001628a80)
	pkg/sentry/kernel/task_syscall.go:257 +0x31a fp=0xc0006a5e38 sp=0xc0006a5d70 pc=0x9bc17a
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00085c980, 0xc001628a80)
	pkg/sentry/kernel/task_run.go:253 +0xe45 fp=0xc0006a5f60 sp=0xc0006a5e38 pc=0x9b0205
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc001628a80, 0x175)
	pkg/sentry/kernel/task_run.go:94 +0x1ac fp=0xc0006a5fc0 sp=0xc0006a5f60 pc=0x9aed4c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start·dwrap·238()
	pkg/sentry/kernel/task_start.go:370 +0x2a fp=0xc0006a5fe0 sp=0xc0006a5fc0 pc=0x9b9baa
runtime.goexit()
	src/runtime/asm_amd64.s:1581 +0x1 fp=0xc0006a5fe8 sp=0xc0006a5fe0 pc=0x469461
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:370 +0xfe