concourse: ? as permissions, failed access (Guardian runtime)

Summary

when running with containerd, it happens that some particular task loses access to items passed between tasks.

Steps to reproduce

Not clear when this happens:

The first task validate-spellcheck works just fine, the second one validate-reflow fails repeatedly, they are executed on the same worker in the same container.

        - task: validate-spellcheck
          timeout: 10m
          image: env-glibc
          config:
            platform: linux
            inputs:
            - name: git-repo
            outputs:
            - name: binary
            run:
              # user: root
              path: sh
              args:
              - -exc
              - |
                export CARGO_HOME="$(pwd)/../cargo"
                sudo chown $(whoami): -Rf ${CARGO_HOME} .
                cargo +stable run --release -- --version
                cargo +stable run --release -- spellcheck demo/Cargo.toml
                cargo +stable run --release -- spellcheck -vvvv demo/src/main.rs
                cargo +stable run --release -- spellcheck demo/
                cargo +stable run --release

                sudo cp -vf target/release/cargo-spellcheck ../binary/cargo-spellcheck-$(git rev-parse HEAD)
              dir: git-repo
            caches:
            - path: cargo

        - task: validate-reflow
          timeout: 5m
          image: env-glibc
          config:
            platform: linux
            inputs:
            - name: git-repo
            - name: binary
            run:
              # user: root
              path: sh
              args:
              - -exc
              - |
                export EXE="../binary/cargo-spellcheck-$(git rev-parse HEAD)"
                sudo chown $(whoami): -f "${EXE}" .
                sudo chmod +x "${EXE}"
                ls -al
                "${EXE}" --version
                "${EXE}" reflow demo/Cargo.toml
                "${EXE}" reflow -vvvv demo/src/main.rs
                "${EXE}" reflow demo/
                "${EXE}" reflow demo/README.md
                "${EXE}"
              dir: git-repo