panic: Decrementing non-positive ref count 0xc0004c0540, owned by vfs.FileDescription

goroutine 3235 [running]:
panic(0x10b3320, 0xc000a3e110)
	GOROOT/src/runtime/panic.go:1064 +0x470 fp=0xc000dcd1a8 sp=0xc000dcd0f0 pc=0x437110
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc0004c0540, 0xc000dcd230)
	bazel-out/k8-fastbuild-ST-3bfd66f45e612c1a5c797474a25664e227d81bf914f3b08a40e00b2e2692afa4/bin/pkg/sentry/vfs/file_description_refs.go:136 +0x1cc fp=0xc000dcd220 sp=0xc000dcd1a8 pc=0x7df28c
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc0004c0540, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/vfs/file_description.go:169 +0x73 fp=0xc000dcd260 sp=0xc000dcd220 pc=0x7d93d3
gvisor.dev/gvisor/pkg/sentry/socket/control.(*RightsFilesVFS2).Release(0xc000265ae0, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/control/control_vfs2.go:105 +0x75 fp=0xc000dcd2a0 sp=0xc000dcd260 pc=0xaa7ef5
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*ControlMessages).Release(0xc0000fc3a8, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/unix.go:86 +0xb7 fp=0xc000dcd2c8 sp=0xc000dcd2a0 pc=0x729397
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*message).Release(...)
	pkg/sentry/socket/unix/transport/unix.go:295
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*queue).Reset(0xc000bcec80, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/queue.go:67 +0x95 fp=0xc000dcd300 sp=0xc000dcd2c8 pc=0x726d75
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*queue).DecRef.func1()
	pkg/sentry/socket/unix/transport/queue.go:82 +0x46 fp=0xc000dcd328 sp=0xc000dcd300 pc=0x72f506
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*queueRefs).DecRef(0xc000bcec80, 0xc000dcd3b0)
	bazel-out/k8-fastbuild-ST-3bfd66f45e612c1a5c797474a25664e227d81bf914f3b08a40e00b2e2692afa4/bin/pkg/sentry/socket/unix/transport/queue_refs.go:144 +0x82 fp=0xc000dcd3a0 sp=0xc000dcd328 pc=0x728302
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*queue).DecRef(0xc000bcec80, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/queue.go:78 +0x73 fp=0xc000dcd3e0 sp=0xc000dcd3a0 pc=0x726e73
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*connectedEndpoint).Release(0xc0002659e0, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/unix.go:798 +0x4d fp=0xc000dcd408 sp=0xc000dcd3e0 pc=0x72b1ed
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*connectionedEndpoint).Close(0xc000c6a100, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/connectioned.go:267 +0x25a fp=0xc000dcd470 sp=0xc000dcd408 pc=0x723c1a
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*SocketVFS2).DecRef.func1()
	pkg/sentry/socket/unix/unix_vfs2.go:112 +0xb0 fp=0xc000dcd4c0 sp=0xc000dcd470 pc=0xbf1f30
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*socketVFS2Refs).DecRef(0xc0004c05b0, 0xc000dcd548)
	bazel-out/k8-fastbuild-ST-3bfd66f45e612c1a5c797474a25664e227d81bf914f3b08a40e00b2e2692afa4/bin/pkg/sentry/socket/unix/socket_vfs2_refs.go:144 +0x82 fp=0xc000dcd538 sp=0xc000dcd4c0 pc=0xbe7f22
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*SocketVFS2).DecRef(0xc0004c0540, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/unix_vfs2.go:108 +0x77 fp=0xc000dcd578 sp=0xc000dcd538 pc=0xbeda97
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*SocketVFS2).Release(0xc0004c0540, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/unix_vfs2.go:125 +0x49 fp=0xc000dcd5a0 sp=0xc000dcd578 pc=0xbedb09
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
	pkg/sentry/vfs/file_description.go:200 +0x229 fp=0xc000dcd680 sp=0xc000dcd5a0 pc=0x802989
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc0004c0540, 0xc000dcd708)
	bazel-out/k8-fastbuild-ST-3bfd66f45e612c1a5c797474a25664e227d81bf914f3b08a40e00b2e2692afa4/bin/pkg/sentry/vfs/file_description_refs.go:144 +0x82 fp=0xc000dcd6f8 sp=0xc000dcd680 pc=0x7df142
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc0004c0540, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/vfs/file_description.go:169 +0x73 fp=0xc000dcd738 sp=0xc000dcd6f8 pc=0x7d93d3
gvisor.dev/gvisor/pkg/sentry/socket/control.(*RightsFilesVFS2).Release(0xc000265ae0, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/control/control_vfs2.go:105 +0x75 fp=0xc000dcd778 sp=0xc000dcd738 pc=0xaa7ef5
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*ControlMessages).Release(0xc000b52258, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/unix.go:86 +0xb7 fp=0xc000dcd7a0 sp=0xc000dcd778 pc=0x729397
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*streamQueueReceiver).Release(0xc000b52230, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/unix.go:641 +0x7e fp=0xc000dcd7c8 sp=0xc000dcd7a0 pc=0x72acbe
gvisor.dev/gvisor/pkg/sentry/socket/unix/transport.(*connectionedEndpoint).Close(0xc000c6a000, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/transport/connectioned.go:273 +0x217 fp=0xc000dcd830 sp=0xc000dcd7c8 pc=0x723bd7
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*SocketVFS2).DecRef.func1()
	pkg/sentry/socket/unix/unix_vfs2.go:112 +0xb0 fp=0xc000dcd880 sp=0xc000dcd830 pc=0xbf1f30
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*socketVFS2Refs).DecRef(0xc0004c02b0, 0xc000dcd908)
	bazel-out/k8-fastbuild-ST-3bfd66f45e612c1a5c797474a25664e227d81bf914f3b08a40e00b2e2692afa4/bin/pkg/sentry/socket/unix/socket_vfs2_refs.go:144 +0x82 fp=0xc000dcd8f8 sp=0xc000dcd880 pc=0xbe7f22
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*SocketVFS2).DecRef(0xc0004c0240, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/unix_vfs2.go:108 +0x77 fp=0xc000dcd938 sp=0xc000dcd8f8 pc=0xbeda97
gvisor.dev/gvisor/pkg/sentry/socket/unix.(*SocketVFS2).Release(0xc0004c0240, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/socket/unix/unix_vfs2.go:125 +0x49 fp=0xc000dcd960 sp=0xc000dcd938 pc=0xbedb09
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
	pkg/sentry/vfs/file_description.go:200 +0x229 fp=0xc000dcda40 sp=0xc000dcd960 pc=0x802989
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc0004c0240, 0xc000dcdac8)
	bazel-out/k8-fastbuild-ST-3bfd66f45e612c1a5c797474a25664e227d81bf914f3b08a40e00b2e2692afa4/bin/pkg/sentry/vfs/file_description_refs.go:144 +0x82 fp=0xc000dcdab8 sp=0xc000dcda40 pc=0x7df142
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc0004c0240, 0x1423c40, 0xc000dc8a80)
	pkg/sentry/vfs/file_description.go:169 +0x73 fp=0xc000dcdaf8 sp=0xc000dcdab8 pc=0x7d93d3
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.Close(0xc000dc8a80, 0x5, 0x0, 0x0, 0x7f17137ce920, 0x7f17137ceadf, 0x7f17137ceadf, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/vfs2/fd.go:48 +0x1ee fp=0xc000dcdb90 sp=0xc000dcdaf8 pc=0xe54f0e
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000dc8a80, 0x3, 0x5, 0x0, 0x0, 0x7f17137ce920, 0x7f17137ceadf, 0x7f17137ceadf, 0xeb4fb7, 0x128ab00, ...)
	pkg/sentry/kernel/task_syscall.go:116 +0x1b9 fp=0xc000dcdc50 sp=0xc000dcdb90 pc=0xa4d459
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000dc8a80, 0x3, 0x5, 0x0, 0x0, 0x7f17137ce920, 0x7f17137ceadf, 0x7f17137ceadf, 0x7f17137ceadf, 0x7f17137ceadf)
	pkg/sentry/kernel/task_syscall.go:291 +0x70 fp=0xc000dcdcd8 sp=0xc000dcdc50 pc=0xa4e710
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000dc8a80, 0x3, 0x5, 0x0, 0x0, 0x7f17137ce920, 0x7f17137ceadf, 0x7f17137ceadf, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:238 +0xb4 fp=0xc000dcdd38 sp=0xc000dcdcd8 pc=0xa4e214
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000dc8a80, 0x2, 0xc000dc8a80)
	pkg/sentry/kernel/task_syscall.go:205 +0x198 fp=0xc000dcde08 sp=0xc000dcdd38 pc=0xa4daf8
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc000dc8a80, 0x13f60c0, 0x0)
	pkg/sentry/kernel/task_run.go:327 +0xd95 fp=0xc000dcdf60 sp=0xc000dcde08 pc=0xa405b5
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000dc8a80, 0x3b)
	pkg/sentry/kernel/task_run.go:100 +0x1e2 fp=0xc000dcdfd0 sp=0xc000dcdf60 pc=0xa3f0c2
runtime.goexit()
	src/runtime/asm_amd64.s:1374 +0x1 fp=0xc000dcdfd8 sp=0xc000dcdfd0 pc=0x470681
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:374 +0x116