vfs: lock in Pipe::decreaseRefCount to avoid a potential race condition that leads to a double free