panic: Decrementing non-positive ref count 0x40004c42d0, owned by tun.tunEndpoint

goroutine 422 gp=0x4000a81a40 m=15 mp=0x4000681808 [running]:
panic({0xc93140?, 0x400003c040?})
	GOROOT/src/runtime/panic.go:811 +0x154 fp=0x400016b740 sp=0x400016b690 pc=0x87504
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*tunEndpointRefs).DecRef(0x40004c42d0, 0x400039a210?)
	bazel-out/aarch64-fastbuild/bin/pkg/tcpip/link/tun/tun_endpoint_refs.go:127 +0x134 fp=0x400016b7b0 sp=0x400016b740 pc=0x73d994
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*tunEndpoint).DecRef(...)
	pkg/tcpip/link/tun/device.go:415
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Release(0x4000d682a8, {0x7968e4?, 0x400016b838?})
	pkg/tcpip/link/tun/device.go:98 +0xb0 fp=0x400016b810 sp=0x400016b7b0 pc=0x73aed0
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Release(0x0?, {0x114ad98?, 0x40007fd908?})
	pkg/sentry/devices/tundev/tundev.go:127 +0x2c fp=0x400016b840 sp=0x400016b810 pc=0xa23b7c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.CloseRange.(*FileDescription).DecRef.func1()
	pkg/sentry/vfs/file_description.go:205 +0x274 fp=0x400016b930 sp=0x400016b840 pc=0x796904
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0x40007b7200?, 0x400016ba08)
	bazel-out/aarch64-fastbuild/bin/pkg/sentry/vfs/file_description_refs.go:133 +0x70 fp=0x400016b9a0 sp=0x400016b930 pc=0x3d7f90
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(...)
	pkg/sentry/vfs/file_description.go:161
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.CloseRange(0x40007fd908, 0x87cb0?, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xea511e0a9148}, {0x1}})
	pkg/sentry/syscalls/linux/sys_file.go:504 +0x194 fp=0x400016ba30 sp=0x400016b9a0 pc=0x796634
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x40007fd908, 0x1b4, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xea511e0a9148}, {0x1}})
	pkg/sentry/kernel/task_syscall.go:143 +0x4dc fp=0x400016bc60 sp=0x400016ba30 pc=0x63c0ac
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x40007fd908, 0x1b4, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xea511e0a9148}, {0x1}})
	pkg/sentry/kernel/task_syscall.go:323 +0x3c fp=0x400016bcc0 sp=0x400016bc60 pc=0x63cf1c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x40007fd908, 0x1b4, {{0x3}, {0x1e}, {0x0}, {0x44}, {0xea511e0a9148}, {0x1}})
	pkg/sentry/kernel/task_syscall.go:283 +0x58 fp=0x400016bd10 sp=0x400016bcc0 pc=0x63cc48
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x40001a0bb0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x23c fp=0x400016bdf0 sp=0x400016bd10 pc=0x63c9fc
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x4000437d40?, 0x40007fd908)
	pkg/sentry/kernel/task_run.go:269 +0xc60 fp=0x400016bf10 sp=0x400016bdf0 pc=0x633630
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x40007fd908, 0x40)
	pkg/sentry/kernel/task_run.go:97 +0x1d4 fp=0x400016bfb0 sp=0x400016bf10 pc=0x6323a4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:416 +0x2c fp=0x400016bfd0 sp=0x400016bfb0 pc=0x63ad0c
runtime.goexit({})
	src/runtime/asm_arm64.s:1223 +0x4 fp=0x400016bfd0 sp=0x400016bfd0 pc=0x90394
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 330
	pkg/sentry/kernel/task_start.go:416 +0xc0