panic: runtime error: slice bounds out of range [2:0]

goroutine 153 gp=0x4000480380 m=17 mp=0x4000293508 [running]:
panic({0xe0cca0?, 0x40002401b0?})
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x154 fp=0x4000564b00 sp=0x4000564a50 pc=0x84314
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x78 fp=0x4000564b40 sp=0x4000564b00 pc=0x47a18
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0x1cdc0992?, {0x4000616100?, 0x1c4e300?, 0x0?})
	bazel-out/aarch64-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0x1e8 fp=0x4000564b60 sp=0x4000564b40 pc=0x213968
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0x400013af08, {{0x40003122a0, 0x40003122a0}, 0x2d1}, 0x10, 0x10, 0x2d1, 0x4000312270)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x2b0 fp=0x4000564c40 sp=0x4000564b60 pc=0x6b33e0
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0x400013af08, 0x2, 0x0, 0x400022a640)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x5e4 fp=0x4000565270 sp=0x4000564c40 pc=0x6b19c4
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0x40001d2000, 0x0?, 0x0?, 0x0?)
	pkg/tcpip/transport/packet/endpoint.go:489 +0x138 fp=0x40005652c0 sp=0x4000565270 pc=0x6c2998
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x1104240, 0x40001d2000})
	pkg/tcpip/stack/nic.go:826 +0x154 fp=0x4000565370 sp=0x40005652c0 pc=0x5abb84
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0x4000312000, 0x4000565408)
	pkg/tcpip/stack/nic.go:147 +0x7c fp=0x40005653c0 sp=0x4000565370 pc=0x5a870c
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0x400028a488, 0x0, 0x400022a3c0)
	pkg/tcpip/stack/nic.go:841 +0x134 fp=0x4000565450 sp=0x40005653c0 pc=0x5ab9d4
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0x40005654b8?, 0x0, 0x400022a3c0)
	pkg/tcpip/link/nested/nested.go:71 +0xb0 fp=0x4000565490 sp=0x4000565450 pc=0x7524e0
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0x40002281e0, 0x0, 0x400022a3c0)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x2c fp=0x40005654c0 sp=0x4000565490 pc=0x753fac
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x40000e9b00, 0x0, 0x400022a3c0)
	pkg/tcpip/link/channel/channel.go:208 +0x74 fp=0x4000565500 sp=0x40005654c0 pc=0x757874
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x400023ede8, 0x4000312030)
	pkg/tcpip/link/tun/device.go:250 +0x4c8 fp=0x4000565620 sp=0x4000565500 pc=0x759f58
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x6c35a0?, {0x11254b0, 0x40001be588}, {{0x111ca18, 0x4000030008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x238 fp=0x40005656e0 sp=0x4000565620 pc=0xa3c0c8
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x400023ed80, {0x11254b0, 0x40001be588}, {{0x111ca18, 0x4000030008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x80 fp=0x4000565760 sp=0x40005656e0 pc=0x3c77d0
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x40001be588, 0x400023ed80, {{0x111ca18, 0x4000030008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x88 fp=0x40005658f0 sp=0x4000565760 pc=0x7d29c8
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x40001be588, 0x40000002?, {{0xc8}, {0x20000300}, {0x2df}, {0xe56fb33f5f28}, {0x1c}, {0x20000198}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x12c fp=0x4000565a30 sp=0x40005658f0 pc=0x7d1dbc
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x40001be588, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xe56fb33f5f28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:143 +0x4e8 fp=0x4000565c60 sp=0x4000565a30 pc=0x64bac8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x40001be588, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xe56fb33f5f28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:323 +0x3c fp=0x4000565cc0 sp=0x4000565c60 pc=0x64c9fc
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x40001be588, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xe56fb33f5f28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:283 +0x58 fp=0x4000565d10 sp=0x4000565cc0 pc=0x64c678
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x40004cb520?)
	pkg/sentry/kernel/task_syscall.go:258 +0x23c fp=0x4000565df0 sp=0x4000565d10 pc=0x64c42c
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x400024f200?, 0x40001be588)
	pkg/sentry/kernel/task_run.go:269 +0xcd4 fp=0x4000565f10 sp=0x4000565df0 pc=0x6422e4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x40001be588, 0xc)
	pkg/sentry/kernel/task_run.go:97 +0x1d4 fp=0x4000565fb0 sp=0x4000565f10 pc=0x640f84
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x2c fp=0x4000565fd0 sp=0x4000565fb0 pc=0x64a65c
runtime.goexit({})
	src/runtime/asm_arm64.s:1223 +0x4 fp=0x4000565fd0 sp=0x4000565fd0 pc=0x8d564
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 195
	pkg/sentry/kernel/task_start.go:412 +0xc4