panic: runtime error: slice bounds out of range [2:0]

goroutine 180 gp=0x40005cd500 m=11 mp=0x40000c9c08 [running]:
panic({0xf1d3e0?, 0x40006c6408?})
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x154 fp=0x40001b6ae0 sp=0x40001b6a30 pc=0x84314
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x78 fp=0x40001b6b20 sp=0x40001b6ae0 pc=0x47a18
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0x360044cc?, {0x40001d8a00?, 0x1f93c00?, 0x0?})
	bazel-out/aarch64-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0x1f4 fp=0x40001b6b40 sp=0x40001b6b20 pc=0x22d0a4
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0x4000366508, {{0x4000731290, 0x4000731290}, 0x2d1}, 0x10, 0x10, 0x2d1, 0x4000731260)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x354 fp=0x40001b6c20 sp=0x40001b6b40 pc=0x7542c4
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0x4000366508, 0x2, 0x0, 0x400074aa00)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x604 fp=0x40001b7250 sp=0x40001b6c20 pc=0x752a24
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0x40007ce1e0, 0x2, 0x0, 0x400074aa00)
	pkg/tcpip/transport/packet/endpoint.go:489 +0x170 fp=0x40001b72a0 sp=0x40001b7250 pc=0x765ff0
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x123ee60, 0x40007ce1e0})
	pkg/tcpip/stack/nic.go:826 +0x1b8 fp=0x40001b7350 sp=0x40001b72a0 pc=0x633f58
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0x40007310b0, 0x40001b73e8)
	pkg/tcpip/stack/nic.go:147 +0x94 fp=0x40001b73a0 sp=0x40001b7350 pc=0x630014
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0x40002a6248, 0x0, 0x400074a780)
	pkg/tcpip/stack/nic.go:841 +0x164 fp=0x40001b7430 sp=0x40001b73a0 pc=0x633d44
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0x4000180c30, 0x0, 0x400074a780)
	pkg/tcpip/link/nested/nested.go:71 +0xb4 fp=0x40001b7470 sp=0x40001b7430 pc=0x80a244
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0x4000180c30, 0x0, 0x400074a780)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x38 fp=0x40001b74a0 sp=0x40001b7470 pc=0x80c218
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x400019cc60, 0x0, 0x400074a780)
	pkg/tcpip/link/channel/channel.go:208 +0x88 fp=0x40001b74e0 sp=0x40001b74a0 pc=0x810188
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x400080a428, 0x40007310e0)
	pkg/tcpip/link/tun/device.go:250 +0x68c fp=0x40001b7610 sp=0x40001b74e0 pc=0x8130cc
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x0?, {0x125fed0, 0x400090a588}, {{0x12576b8, 0x40009db008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x2c8 fp=0x40001b76d0 sp=0x40001b7610 pc=0xb3c128
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x400080a3c0, {0x125fed0, 0x400090a588}, {{0x12576b8, 0x40009db008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x9c fp=0x40001b7750 sp=0x40001b76d0 pc=0x4073ec
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x400090a588, 0x400080a3c0, {{0x12576b8, 0x40009db008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x94 fp=0x40001b78f0 sp=0x40001b7750 pc=0x892bf4
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x400090a588, 0x10?, {{0xc8}, {0x20000300}, {0x2df}, {0xeef65d8fff28}, {0x1c}, {0x20000198}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x178 fp=0x40001b7a30 sp=0x40001b78f0 pc=0x8924b8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x400090a588, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xeef65d8fff28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:143 +0x664 fp=0x40001b7c60 sp=0x40001b7a30 pc=0x6e3714
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x400090a588, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xeef65d8fff28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:323 +0x48 fp=0x40001b7cc0 sp=0x40001b7c60 pc=0x6e49d8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x400090a588, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xeef65d8fff28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:283 +0x7c fp=0x40001b7d10 sp=0x40001b7cc0 pc=0x6e459c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x40005c89a0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2e8 fp=0x40001b7df0 sp=0x40001b7d10 pc=0x6e42c8
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x4000a6a2d0?, 0x400090a588)
	pkg/sentry/kernel/task_run.go:269 +0x109c fp=0x40001b7f10 sp=0x40001b7df0 pc=0x6d860c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x400090a588, 0xb)
	pkg/sentry/kernel/task_run.go:97 +0x250 fp=0x40001b7fb0 sp=0x40001b7f10 pc=0x6d6ec0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x2c fp=0x40001b7fd0 sp=0x40001b7fb0 pc=0x6e1edc
runtime.goexit({})
	src/runtime/asm_arm64.s:1223 +0x4 fp=0x40001b7fd0 sp=0x40001b7fd0 pc=0x8d564
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 87
	pkg/sentry/kernel/task_start.go:412 +0xd8