panic: nested locking: tmpfs.filesystemRWMutex: goroutine 576226 [running]: gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystemRWMutex).RLock(0xc000907b38) bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/tmpfs/filesystem_mutex.go:59 +0x3c gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystem).GetXattrAt(0xc000907ad0, {0x1f95f00, 0xc01d944c88}, 0xc001735688, {{0xc00b5b3800, 0x15}, 0xba}) pkg/sentry/fsimpl/tmpfs/filesystem.go:892 +0x86 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).GetXattr(0xc024bf8f50, {0x1f95f00, 0xc01d944c88}, 0xc00ec35680) pkg/sentry/vfs/file_description.go:758 +0x309 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Fgetxattr(0xc01d944c88, 0xca?, {{0xa}, {0x20000240}, {0x200003c0}, {0xba}, {0x0}, {0x0}}) pkg/sentry/syscalls/linux/sys_xattr.go:158 +0x236 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc01d944c88, 0xc1, {{0xa}, {0x20000240}, {0x200003c0}, {0xba}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:143 +0x995 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc01d944c88, 0xc1, {{0xa}, {0x20000240}, {0x200003c0}, {0xba}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:323 +0x72 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc01d944c88, 0xc1, {{0xa}, {0x20000240}, {0x200003c0}, {0xba}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:283 +0x94 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc01d944c88) pkg/sentry/kernel/task_syscall.go:258 +0x4b0 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc01d944c88?, 0xc01d944c88) pkg/sentry/kernel/task_run.go:269 +0x1fae gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc01d944c88, 0xe7bf) pkg/sentry/kernel/task_run.go:97 +0x4fb created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 576200 pkg/sentry/kernel/task_start.go:400 +0x165