panic: runtime error: slice bounds out of range [2:0]

goroutine 387 gp=0xc000a0d880 m=43 mp=0xc000880708 [running]:
panic({0x19de080?, 0xc000c60000?})
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x154 fp=0xc000a32360 sp=0xc000a322b0 pc=0x478024
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x78 fp=0xc000a323a0 sp=0xc000a32360 pc=0x4393a8
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0xc000a324d8, {0xc0012ba0c0, 0x10, 0x40})
	bazel-out/aarch64-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0x6fc fp=0xc000a32470 sp=0xc000a323a0 pc=0x711d7c
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0xc000141408, {{0xc00139c480, 0xc00139c480}, 0x2d1}, 0x10, 0x10, 0x2d1, 0xc00139c4b0)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x30c fp=0xc000a32580 sp=0xc000a32470 pc=0xec41ec
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0xc000141408, 0x2, 0x0, 0xc000b36c80)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x6e0 fp=0xc000a32c90 sp=0xc000a32580 pc=0xec2520
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0xc000b3e1e0, 0x2, 0x0, 0xc000b36c80)
	pkg/tcpip/transport/packet/endpoint.go:489 +0x174 fp=0xc000a32d20 sp=0xc000a32c90 pc=0xedd724
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x1cdf280, 0xc000b3e1e0})
	pkg/tcpip/stack/nic.go:826 +0x2a8 fp=0xc000a32e10 sp=0xc000a32d20 pc=0xd18628
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0xc0012c11d0, 0xc000a32f30)
	pkg/tcpip/stack/nic.go:147 +0x114 fp=0xc000a32ea0 sp=0xc000a32e10 pc=0xd13634
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0xc00057e488, 0x0, 0xc000b36a00)
	pkg/tcpip/stack/nic.go:841 +0x210 fp=0xc000a32f70 sp=0xc000a32ea0 pc=0xd18330
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0xc000364690, 0x0, 0xc000b36a00)
	pkg/tcpip/link/nested/nested.go:71 +0xb4 fp=0xc000a32fc0 sp=0xc000a32f70 pc=0xfb5054
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0xc000364690, 0x0, 0xc000b36a00)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x50 fp=0xc000a32ff0 sp=0xc000a32fc0 pc=0xfb7b30
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0xc000b1d080, 0x0, 0xc000b36a00)
	pkg/tcpip/link/channel/channel.go:208 +0xac fp=0xc000a33030 sp=0xc000a32ff0 pc=0xfbcdcc
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0xc000538428, 0xc00139c120)
	pkg/tcpip/link/tun/device.go:250 +0x5c0 fp=0xc000a33220 sp=0xc000a33030 pc=0xfc0af0
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0xc0005383c0, {0x1d00cb0, 0xc0012a9908}, {{0x1cf7918, 0xc00087d008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x3b4 fp=0xc000a33360 sp=0xc000a33220 pc=0x14541d4
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc0005383c0, {0x1d00cb0, 0xc0012a9908}, {{0x1cf7918, 0xc00087d008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x120 fp=0xc000a33430 sp=0xc000a33360 pc=0x9f5dc0
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc0012a9908, 0xc0005383c0, {{0x1cf7918, 0xc00087d008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0xbc fp=0xc000a33560 sp=0xc000a33430 pc=0x106840c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc0012a9908, 0x1?, {{0xc8}, {0x20000300}, {0x2df}, {0xe766e3dedf28}, {0x1c}, {0x20000198}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x25c fp=0xc000a336f0 sp=0xc000a33560 pc=0x1067bcc
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0012a9908, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xe766e3dedf28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:143 +0x884 fp=0xc000a339a0 sp=0xc000a336f0 pc=0xe159a4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0012a9908, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xe766e3dedf28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:323 +0x60 fp=0xc000a33a50 sp=0xc000a339a0 pc=0xe173d0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0012a9908, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xe766e3dedf28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:283 +0xa8 fp=0xc000a33ac0 sp=0xc000a33a50 pc=0xe16e28
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0012a9908)
	pkg/sentry/kernel/task_syscall.go:258 +0x45c fp=0xc000a33bf0 sp=0xc000a33ac0 pc=0xe16a5c
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0012a9908?, 0xc0012a9908)
	pkg/sentry/kernel/task_run.go:269 +0x1848 fp=0xc000a33e60 sp=0xc000a33bf0 pc=0xe059a8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0012a9908, 0xa)
	pkg/sentry/kernel/task_run.go:97 +0x2f8 fp=0xc000a33fa0 sp=0xc000a33e60 pc=0xe038a8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x44 fp=0xc000a33fd0 sp=0xc000a33fa0 pc=0xe13994
runtime.goexit({})
	src/runtime/asm_arm64.s:1223 +0x4 fp=0xc000a33fd0 sp=0xc000a33fd0 pc=0x481484
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 118
	pkg/sentry/kernel/task_start.go:412 +0x160