That's exactly what I see happening when a leap second is ADDED.

A leap second is added. The system goes "oh shit, I'm a second ahead", and subtracts a second. And that's how you get a negative duration and exactly this problem.

Whereas if a leap second is subtracted, you get charged for an extra second.