panic: cgroupfs: pids controller pending pool would be negative if charge was allowed: current pool: 0, proposed charge: -1

goroutine 942149 [running]:
panic({0x11a63a0, 0xc009279720})
	GOROOT/src/runtime/panic.go:1147 +0x3a8 fp=0xc0039b6ed0 sp=0xc0039b6e10 pc=0x435148
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*pidsController).Charge(0xc008af7b00, 0xc00ac9a000, 0x1394222, 0x4, 0xffffffffffffffff)
	pkg/sentry/fsimpl/cgroupfs/pids.go:208 +0x5f9 fp=0xc0039b6fc0 sp=0xc0039b6ed0 pc=0xcacf79
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*cgroupInode).Charge(0xc004ce9180, 0x0, 0x0, {0x1394222, 0x4}, 0x45b3, 0xc0039b70f0)
	pkg/sentry/fsimpl/cgroupfs/base.go:315 +0x122 fp=0xc0039b7048 sp=0xc0039b6fc0 pc=0xca2462
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).chargeLocked(0xc0039b7158, 0x449432, {0x1394222, 0x4}, 0x0, 0xe40)
	pkg/sentry/kernel/task_cgroup.go:219 +0xd7 fp=0xc0039b7108 sp=0xc0039b7048 pc=0x9efad7
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).ChargeFor(0xc008849500, 0xc0039b71c8, {0x1394222, 0x4}, 0xe00, 0x0)
	pkg/sentry/kernel/task_cgroup.go:230 +0xdc fp=0xc0039b7198 sp=0xc0039b7108 pc=0x9efc3c
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).newTask.func1()
	pkg/sentry/kernel/task_start.go:193 +0x45 fp=0xc0039b71e8 sp=0xc0039b7198 pc=0xa0e2c5
gvisor.dev/gvisor/pkg/cleanup.clean({0xc001f6d310, 0x52dce5, 0xc00a63c4e0})
	pkg/cleanup/cleanup.go:58 +0x42 fp=0xc0039b7200 sp=0xc0039b71e8 pc=0x8dfdc2
gvisor.dev/gvisor/pkg/cleanup.(*Cleanup).Clean(0xc0039b74b8)
	pkg/cleanup/cleanup.go:43 +0x36 fp=0xc0039b7228 sp=0xc0039b7200 pc=0x8dfbf6
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).newTask·dwrap·235()
	pkg/sentry/kernel/task_start.go:179 +0x26 fp=0xc0039b7240 sp=0xc0039b7228 pc=0xa0e366
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).newTask(0xc000602180, {0x159b880, 0xc008849500}, 0xc0039b77f8)
	pkg/sentry/kernel/task_start.go:210 +0x957 fp=0xc0039b74e0 sp=0xc0039b7240 pc=0xa0daf7
gvisor.dev/gvisor/pkg/sentry/kernel.(*TaskSet).NewTask(0xc008849500, {0x159b880, 0xc008849500}, 0xc0039b77f8)
	pkg/sentry/kernel/task_start.go:126 +0xb5 fp=0xc0039b7558 sp=0xc0039b74e0 pc=0xa0cfb5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Clone(0xc008849500, 0xc0039b78d0)
	pkg/sentry/kernel/task_clone.go:219 +0x1157 fp=0xc0039b78c0 sp=0xc0039b7558 pc=0x9f0f17
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.clone(0x0, 0x0, 0x1, 0x0, 0xc0039b7960, 0xc0039b7b08)
	pkg/sentry/syscalls/linux/sys_thread.go:208 +0x8d fp=0xc0039b7938 sp=0xc0039b78c0 pc=0xacf8ad
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Clone(0x0, {{0x3d0f00}, {0x7fad0cbbd2f0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd700}, {0x7fad0cbbd700}})
	pkg/sentry/syscalls/linux/sys_clone_amd64.go:35 +0x6e fp=0xc0039b7978 sp=0xc0039b7938 pc=0xa95a6e
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc008849500, 0x38, {{0x3d0f00}, {0x7fad0cbbd2f0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd700}, {0x7fad0cbbd700}})
	pkg/sentry/kernel/task_syscall.go:143 +0x7cc fp=0xc0039b7cb8 sp=0xc0039b7978 pc=0xa106ec
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc008849500, 0x411c85, {{0x3d0f00}, {0x7fad0cbbd2f0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd700}, {0x7fad0cbbd700}})
	pkg/sentry/kernel/task_syscall.go:322 +0x57 fp=0xc0039b7d28 sp=0xc0039b7cb8 pc=0xa11cb7
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0034956e0, 0xc008cbc9c0, {{0x3d0f00}, {0x7fad0cbbd2f0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd9d0}, {0x7fad0cbbd700}, {0x7fad0cbbd700}})
	pkg/sentry/kernel/task_syscall.go:282 +0x85 fp=0xc0039b7d88 sp=0xc0039b7d28 pc=0xa11885
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc008849500)
	pkg/sentry/kernel/task_syscall.go:257 +0x38e fp=0xc0039b7e50 sp=0xc0039b7d88 pc=0xa1154e
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0018a4500, 0xc008849500)
	pkg/sentry/kernel/task_run.go:247 +0x113b fp=0xc0039b7f70 sp=0xc0039b7e50 pc=0xa032fb
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc008849500)
	pkg/sentry/kernel/task_run.go:90 +0x1ec fp=0xc0039b7fc8 sp=0xc0039b7f70 pc=0xa01b2c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start·dwrap·239()
	pkg/sentry/kernel/task_start.go:363 +0x26 fp=0xc0039b7fe0 sp=0xc0039b7fc8 pc=0xa0eb46
runtime.goexit()
	src/runtime/asm_amd64.s:1581 +0x1 fp=0xc0039b7fe8 sp=0xc0039b7fe0 pc=0x4692a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:363 +0xf5