panic: runtime error: slice bounds out of range [2:0]

goroutine 194 gp=0x400063c1c0 m=11 mp=0x4000739c08 [running]:
panic({0xf1d3e0?, 0x4000308000?})
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x154 fp=0x4000b82ae0 sp=0x4000b82a30 pc=0x84314
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/aarch64-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x78 fp=0x4000b82b20 sp=0x4000b82ae0 pc=0x47a18
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0x24222f47?, {0x40000bc140?, 0x1f93c00?, 0x0?})
	bazel-out/aarch64-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0x1f4 fp=0x4000b82b40 sp=0x4000b82b20 pc=0x22d0a4
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0x4000135688, {{0x400034c6c0, 0x400034c6c0}, 0x2d1}, 0x10, 0x10, 0x2d1, 0x400034c690)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x354 fp=0x4000b82c20 sp=0x4000b82b40 pc=0x7542c4
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0x4000135688, 0x2, 0x0, 0x400087c000)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x604 fp=0x4000b83250 sp=0x4000b82c20 pc=0x752a24
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0x40009185a0, 0x2, 0x0, 0x400087c000)
	pkg/tcpip/transport/packet/endpoint.go:489 +0x170 fp=0x4000b832a0 sp=0x4000b83250 pc=0x765ff0
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x123ee60, 0x40009185a0})
	pkg/tcpip/stack/nic.go:826 +0x1b8 fp=0x4000b83350 sp=0x4000b832a0 pc=0x633f58
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0x4000b3e450, 0x4000b833e8)
	pkg/tcpip/stack/nic.go:147 +0x94 fp=0x4000b833a0 sp=0x4000b83350 pc=0x630014
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0x400072a908, 0x0, 0x400097e500)
	pkg/tcpip/stack/nic.go:841 +0x164 fp=0x4000b83430 sp=0x4000b833a0 pc=0x633d44
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0x400016b7c0, 0x0, 0x400097e500)
	pkg/tcpip/link/nested/nested.go:71 +0xb4 fp=0x4000b83470 sp=0x4000b83430 pc=0x80a244
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0x400016b7c0, 0x0, 0x400097e500)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x38 fp=0x4000b834a0 sp=0x4000b83470 pc=0x80c218
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x4000132a80, 0x0, 0x400097e500)
	pkg/tcpip/link/channel/channel.go:208 +0x88 fp=0x4000b834e0 sp=0x4000b834a0 pc=0x810188
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x4000028c68, 0x4000b3e480)
	pkg/tcpip/link/tun/device.go:250 +0x68c fp=0x4000b83610 sp=0x4000b834e0 pc=0x8130cc
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x0?, {0x125fed0, 0x4000642008}, {{0x12576b8, 0x400062e008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x2c8 fp=0x4000b836d0 sp=0x4000b83610 pc=0xb3c128
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x4000028c00, {0x125fed0, 0x4000642008}, {{0x12576b8, 0x400062e008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x9c fp=0x4000b83750 sp=0x4000b836d0 pc=0x4073ec
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x4000642008, 0x4000028c00, {{0x12576b8, 0x400062e008}, {0x0, 0x1, 0x20000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x94 fp=0x4000b838f0 sp=0x4000b83750 pc=0x892bf4
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x4000642008, 0x14e338?, {{0xc8}, {0x20000300}, {0x2df}, {0xdc1fe397af28}, {0x1c}, {0x20000198}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x178 fp=0x4000b83a30 sp=0x4000b838f0 pc=0x8924b8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x4000642008, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xdc1fe397af28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:143 +0x664 fp=0x4000b83c60 sp=0x4000b83a30 pc=0x6e3714
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x4000642008, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xdc1fe397af28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:323 +0x48 fp=0x4000b83cc0 sp=0x4000b83c60 pc=0x6e49d8
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x4000642008, 0x40, {{0xc8}, {0x20000300}, {0x2df}, {0xdc1fe397af28}, {0x1c}, {0x20000198}})
	pkg/sentry/kernel/task_syscall.go:283 +0x7c fp=0x4000b83d10 sp=0x4000b83cc0 pc=0x6e459c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x40006101a0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2e8 fp=0x4000b83df0 sp=0x4000b83d10 pc=0x6e42c8
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x400063a090?, 0x4000642008)
	pkg/sentry/kernel/task_run.go:269 +0x109c fp=0x4000b83f10 sp=0x4000b83df0 pc=0x6d860c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x4000642008, 0x9)
	pkg/sentry/kernel/task_run.go:97 +0x250 fp=0x4000b83fb0 sp=0x4000b83f10 pc=0x6d6ec0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x2c fp=0x4000b83fd0 sp=0x4000b83fb0 pc=0x6e1edc
runtime.goexit({})
	src/runtime/asm_arm64.s:1223 +0x4 fp=0x4000b83fd0 sp=0x4000b83fd0 pc=0x8d564
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 173
	pkg/sentry/kernel/task_start.go:412 +0xd8