panic: runtime error: slice bounds out of range [2:0]

goroutine 275 gp=0xc000266700 m=20 mp=0xc000227108 [running]:
panic({0x12d0de0?, 0xc000240678?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc0009f0bb0 sp=0xc0009f0b00 pc=0x4740c8
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x74 fp=0xc0009f0bf0 sp=0xc0009f0bb0 pc=0x438f34
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0x534a429?, {0xc0006b0400?, 0x21455e0?, 0x48ab1d?})
	bazel-out/k8-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0x233 fp=0xc0009f0c10 sp=0xc0009f0bf0 pc=0x60f373
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0xc000260f08, {{0xc00054aa20, 0xc00054aa20}, 0x2d1}, 0x10, 0x10, 0x2d1, 0xc00054a9f0)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x371 fp=0xc0009f0ce8 sp=0xc0009f0c10 pc=0xae8451
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0xc000260f08, 0x2, 0x0, 0xc00025b180)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x465 fp=0xc0009f1310 sp=0xc0009f0ce8 pc=0xae6cc5
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0xc0002d8000, 0x0?, 0x0?, 0x0?)
	pkg/tcpip/transport/packet/endpoint.go:489 +0xe9 fp=0xc0009f1358 sp=0xc0009f1310 pc=0xafb909
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x15ca1a0, 0xc0002d8000})
	pkg/tcpip/stack/nic.go:826 +0x18a fp=0xc0009f1408 sp=0xc0009f1358 pc=0x9d470a
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0xc00054a810, 0xc0009f1498)
	pkg/tcpip/stack/nic.go:147 +0x7c fp=0xc0009f1458 sp=0xc0009f1408 pc=0x9d121c
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0xc00043c248, 0x0, 0xc00025af00)
	pkg/tcpip/stack/nic.go:841 +0x15f fp=0xc0009f14e8 sp=0xc0009f1458 pc=0x9d451f
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0x751267?, 0x0, 0xc00025af00)
	pkg/tcpip/link/nested/nested.go:71 +0x7b fp=0xc0009f1520 sp=0xc0009f14e8 pc=0xb9237b
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0xc0009be230, 0x0, 0xc00025af00)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x25 fp=0xc0009f1548 sp=0xc0009f1520 pc=0xb93c65
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0xc0009a01e0, 0x0, 0xc00025af00)
	pkg/tcpip/link/channel/channel.go:208 +0x6d fp=0xc0009f1580 sp=0xc0009f1548 pc=0xb975cd
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0xc0009e4368, 0xc00054a870)
	pkg/tcpip/link/tun/device.go:250 +0x566 fp=0xc0009f16a0 sp=0xc0009f1580 pc=0xb99d06
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0xc0002d8184?, {0x15eb580, 0xc00033cc88}, {{0x15e26f8, 0xc00057a008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x2d7 fp=0xc0009f1760 sp=0xc0009f16a0 pc=0xed2077
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc0009e4300, {0x15eb580, 0xc00033cc88}, {{0x15e26f8, 0xc00057a008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x8b fp=0xc0009f17e0 sp=0xc0009f1760 pc=0x7dee6b
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc00033cc88, 0xc0009e4300, {{0x15e26f8, 0xc00057a008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x78 fp=0xc0009f1970 sp=0xc0009f17e0 pc=0xc222b8
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc00033cc88, 0xc0009f1b10?, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x1a5 fp=0xc0009f1a78 sp=0xc0009f1970 pc=0xc21525
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00033cc88, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc0009f1ca8 sp=0xc0009f1a78 pc=0xa7b7b7
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00033cc88, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc0009f1d00 sp=0xc0009f1ca8 pc=0xa7c925
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00033cc88, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc0009f1d50 sp=0xc0009f1d00 pc=0xa7c625
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000344750?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc0009f1e28 sp=0xc0009f1d50 pc=0xa7c3a5
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc00061cb40?, 0xc00033cc88)
	pkg/sentry/kernel/task_run.go:269 +0xefc fp=0xc0009f1f30 sp=0xc0009f1e28 pc=0xa71b9c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00033cc88, 0xd)
	pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc0009f1fc0 sp=0xc0009f1f30 pc=0xa70614
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc0009f1fe0 sp=0xc0009f1fc0 pc=0xa7a1c5
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc0009f1fe8 sp=0xc0009f1fe0 pc=0x47d181
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 308
	pkg/sentry/kernel/task_start.go:412 +0xc5