diff --git a/pkg/tcpip/transport/tcpconntrack/BUILD b/pkg/tcpip/transport/tcpconntrack/BUILD
index 3ad6994a7..584d48541 100644
--- a/pkg/tcpip/transport/tcpconntrack/BUILD
+++ b/pkg/tcpip/transport/tcpconntrack/BUILD
@@ -18,6 +18,8 @@ go_test(
     srcs = ["tcp_conntrack_test.go"],
     deps = [
         ":tcpconntrack",
+        "//pkg/refs",
+        "//pkg/refsvfs2",
         "//pkg/tcpip/header",
     ],
 )
diff --git a/pkg/tcpip/transport/tcpconntrack/tcp_conntrack_test.go b/pkg/tcpip/transport/tcpconntrack/tcp_conntrack_test.go
index 1ec84aafe..fc8a52694 100644
--- a/pkg/tcpip/transport/tcpconntrack/tcp_conntrack_test.go
+++ b/pkg/tcpip/transport/tcpconntrack/tcp_conntrack_test.go
@@ -15,8 +15,11 @@
 package tcpconntrack_test
 
 import (
+	"os"
 	"testing"
 
+	"gvisor.dev/gvisor/pkg/refs"
+	"gvisor.dev/gvisor/pkg/refsvfs2"
 	"gvisor.dev/gvisor/pkg/tcpip/header"
 	"gvisor.dev/gvisor/pkg/tcpip/transport/tcpconntrack"
 )
@@ -515,3 +518,10 @@ func TestIgnoreBadResetOnSynSent(t *testing.T) {
 func dataLen(tcp header.TCP) int {
 	return len(tcp) - int(tcp.DataOffset())
 }
+
+func TestMain(m *testing.M) {
+	refs.SetLeakMode(refs.LeaksPanic)
+	code := m.Run()
+	refsvfs2.DoLeakCheck()
+	os.Exit(code)
+}