panic: Decrementing non-positive ref count 0x4000559a90, owned by tun.tunEndpoint

goroutine 492 gp=0x4000a08700 m=20 mp=0x4000789008 [running]:
panic({0xdb3340?, 0x4000a44b30?})
	GOROOT/src/runtime/panic.go:811 +0x154 fp=0x4000a53710 sp=0x4000a53660 pc=0x87504
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*tunEndpointRefs).DecRef(0x4000559a90, 0x400016aa58?)
	bazel-out/aarch64-fastbuild/bin/pkg/tcpip/link/tun/tun_endpoint_refs.go:127 +0x174 fp=0x4000a53780 sp=0x4000a53710 pc=0x8063b4
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*tunEndpoint).DecRef(0x4000b55c40?, {0x4000136f70?, 0x4000a53828?})
	pkg/tcpip/link/tun/device.go:415 +0x40 fp=0x4000a537b0 sp=0x4000a53780 pc=0x8052c0
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Release(0x4001320128, {0x129e338, 0x4000ab9908})
	pkg/tcpip/link/tun/device.go:98 +0xc8 fp=0x4000a53800 sp=0x4000a537b0 pc=0x8030e8
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Release(0x40001ac640?, {0x129e338?, 0x4000ab9908?})
	pkg/sentry/devices/tundev/tundev.go:127 +0x38 fp=0x4000a53830 sp=0x4000a53800 pc=0xb36c38
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
	pkg/sentry/vfs/file_description.go:205 +0x374 fp=0x4000a53910 sp=0x4000a53830 pc=0x4134b4
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0x4000ab9908?, 0x4000a53998)
	bazel-out/aarch64-fastbuild/bin/pkg/sentry/vfs/file_description_refs.go:133 +0xa0 fp=0x4000a53980 sp=0x4000a53910 pc=0x4197c0
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0x400073a080?, {0x129e338?, 0x4000ab9908?})
	pkg/sentry/vfs/file_description.go:161 +0x50 fp=0x4000a539c0 sp=0x4000a53980 pc=0x413110
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.CloseRange(0x4000ab9908, 0x14d868?, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xdf59f9143148}, {0x1}})
	pkg/sentry/syscalls/linux/sys_file.go:504 +0x234 fp=0x4000a53a30 sp=0x4000a539c0 pc=0x8680c4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x4000ab9908, 0x1b4, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xdf59f9143148}, {0x1}})
	pkg/sentry/kernel/task_syscall.go:143 +0x658 fp=0x4000a53c60 sp=0x4000a53a30 pc=0x6de268
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x4000ab9908, 0x1b4, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xdf59f9143148}, {0x1}})
	pkg/sentry/kernel/task_syscall.go:323 +0x48 fp=0x4000a53cc0 sp=0x4000a53c60 pc=0x6df528
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x4000ab9908, 0x1b4, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xdf59f9143148}, {0x1}})
	pkg/sentry/kernel/task_syscall.go:283 +0x7c fp=0x4000a53d10 sp=0x4000a53cc0 pc=0x6df0ec
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x40014380d0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2e8 fp=0x4000a53df0 sp=0x4000a53d10 pc=0x6dede8
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x4001290630?, 0x4000ab9908)
	pkg/sentry/kernel/task_run.go:269 +0x1064 fp=0x4000a53f10 sp=0x4000a53df0 pc=0x6d3974
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x4000ab9908, 0x49)
	pkg/sentry/kernel/task_run.go:97 +0x250 fp=0x4000a53fb0 sp=0x4000a53f10 pc=0x6d2280
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:416 +0x2c fp=0x4000a53fd0 sp=0x4000a53fb0 pc=0x6dcabc
runtime.goexit({})
	src/runtime/asm_arm64.s:1223 +0x4 fp=0x4000a53fd0 sp=0x4000a53fd0 pc=0x90394
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 520
	pkg/sentry/kernel/task_start.go:416 +0xd4