panic: runtime error: slice bounds out of range [2:0]

goroutine 13338 [running]:
panic(0x1331620, 0xc0026c50e0)
	GOROOT/src/runtime/panic.go:1065 +0x565 fp=0xc0025d9ee0 sp=0xc0025d9e18 pc=0x437c65
runtime.goPanicSliceB(0x2, 0x0)
	GOROOT/src/runtime/panic.go:116 +0xa5 fp=0xc0025d9f28 sp=0xc0025d9ee0 pc=0x435445
gvisor.dev/gvisor/pkg/tcpip/header.IPv4.SetTotalLength(...)
	pkg/tcpip/header/ipv4.go:419
gvisor.dev/gvisor/pkg/tcpip/network/ipv4.(*endpoint).handleValidatedPacket(0xc000cf8a00, 0xc002db49e6, 0x14, 0x14, 0xc002136140, 0x1425eea, 0x2)
	pkg/tcpip/network/ipv4/ipv4.go:1137 +0x17bd fp=0xc0025da6f0 sp=0xc0025d9f28 pc=0xc014bd
gvisor.dev/gvisor/pkg/tcpip/network/ipv4.(*endpoint).HandlePacket(0xc000cf8a00, 0xc002136140)
	pkg/tcpip/network/ipv4/ipv4.go:928 +0x1a5 fp=0xc0025da950 sp=0xc0025da6f0 pc=0xbff685
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0xc0014d7c20, 0xc0031200a0, 0x6, 0xc0031200a6, 0x6, 0x800, 0xc002136140)
	pkg/tcpip/stack/nic.go:941 +0x3ae fp=0xc0025daa08 sp=0xc0025da950 pc=0x9dec2e
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0xc002c849b0, 0xc0031200a0, 0x6, 0xc0031200a6, 0x6, 0x800, 0xc002136140)
	pkg/tcpip/link/nested/nested.go:63 +0x104 fp=0xc0025daa68 sp=0xc0025daa08 pc=0xcb4ae4
gvisor.dev/gvisor/pkg/tcpip/link/ethernet.(*Endpoint).DeliverNetworkPacket(0xc002c849b0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xc002136140)
	pkg/tcpip/link/ethernet/ethernet.go:82 +0x1bb fp=0xc0025daad8 sp=0xc0025daa68 pc=0xf98dfb
gvisor.dev/gvisor/pkg/tcpip/link/loopback.(*endpoint).WriteRawPacket(0xc0025b2a50, 0xc00296a140, 0x0, 0x0)
	pkg/tcpip/link/loopback/loopback.go:125 +0x128 fp=0xc0025dab48 sp=0xc0025daad8 pc=0xf99a88
gvisor.dev/gvisor/pkg/tcpip/link/loopback.(*endpoint).WritePackets(0xc0025b2a50, 0xc003120020, 0x4, 0xc003120020, 0x4, 0x15ae7c0, 0x6, 0x0, 0x0, 0x100000800, ...)
	pkg/tcpip/link/loopback/loopback.go:91 +0x94 fp=0xc0025dab88 sp=0xc0025dab48 pc=0xf99894
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).WritePackets(...)
	pkg/tcpip/link/nested/nested.go:120
gvisor.dev/gvisor/pkg/tcpip/link/ethernet.(*Endpoint).WritePackets(0xc002c849b0, 0xc003120020, 0x4, 0xc003120020, 0x4, 0x15ae7c0, 0x6, 0x0, 0x0, 0x100000800, ...)
	pkg/tcpip/link/ethernet/ethernet.go:108 +0x1ab fp=0xc0025dac98 sp=0xc0025dab88 pc=0xf990ab
gvisor.dev/gvisor/pkg/tcpip/stack.(*delegatingQueueingDiscipline).WritePacket(0xc0025b2a60, 0xc003120020, 0x4, 0xc003120020, 0x4, 0x15ae7c0, 0x6, 0x0, 0x0, 0x100000800, ...)
	pkg/tcpip/stack/nic.go:166 +0xd0 fp=0xc0025dad48 sp=0xc0025dac98 pc=0x9db130
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).writePacket(0xc0014d7c20, 0xc003120020, 0x4, 0xc003120020, 0x4, 0x15ae7c0, 0x6, 0x0, 0x0, 0x100000800, ...)
	pkg/tcpip/stack/nic.go:451 +0x158 fp=0xc0025dade0 sp=0xc0025dad48 pc=0x9dcab8
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).WritePacket(0xc0014d7c20, 0xc0020946e0, 0x800, 0xc00296a140, 0x0, 0x0)
	pkg/tcpip/stack/nic.go:406 +0x230 fp=0xc0025daf20 sp=0xc0025dade0 pc=0x9dc7d0
gvisor.dev/gvisor/pkg/tcpip/network/ipv4.(*endpoint).writePacketPostRouting.func1(0xc00296a140, 0xc002db4946, 0x14)
	pkg/tcpip/network/ipv4/ipv4.go:592 +0x5a fp=0xc0025daf60 sp=0xc0025daf20 pc=0xc062ba
gvisor.dev/gvisor/pkg/tcpip/network/ipv4.(*endpoint).handleFragments(0xc000cf8a00, 0xc0020946e0, 0xc00000ffde, 0xc002ae6a00, 0xc0025db0e0, 0x1425eea, 0x2, 0x1, 0x0)
	pkg/tcpip/network/ipv4/ipv4.go:476 +0x15e fp=0xc0025db070 sp=0xc0025daf60 pc=0xbfd21e
gvisor.dev/gvisor/pkg/tcpip/network/ipv4.(*endpoint).writePacketPostRouting(0xc000cf8a00, 0xc0020946e0, 0xc002ae6a00, 0xc003120000, 0x4, 0xc002db4901)
	pkg/tcpip/network/ipv4/ipv4.go:586 +0x332 fp=0xc0025db2b8 sp=0xc0025db070 pc=0xbfdab2
gvisor.dev/gvisor/pkg/tcpip/network/ipv4.(*endpoint).writePacket(0xc000cf8a00, 0xc0020946e0, 0xc002ae6a00, 0xc003120020, 0x4)
	pkg/tcpip/network/ipv4/ipv4.go:536 +0x205 fp=0xc0025db340 sp=0xc0025db2b8 pc=0xbfd685
gvisor.dev/gvisor/pkg/tcpip/network/ipv4.(*endpoint).WritePacket(0xc000cf8a00, 0xc0020946e0, 0x4000000001, 0xc002ae6a00, 0x9e18d7, 0x15e5fe8)
	pkg/tcpip/network/ipv4/ipv4.go:498 +0x11b fp=0xc0025db3b0 sp=0xc0025db340 pc=0xbfd43b
gvisor.dev/gvisor/pkg/tcpip/stack.(*Route).WritePacket(0xc0020946e0, 0x4000000001, 0xc002ae6a00, 0xc00234b4c0, 0xc002ae6a00)
	pkg/tcpip/stack/route.go:572 +0xd7 fp=0xc0025db3f0 sp=0xc0025db3b0 pc=0x9e94f7
gvisor.dev/gvisor/pkg/tcpip/transport/internal/network.(*WriteContext).WritePacket(0xc00234b4d8, 0xc002ae6a00, 0x0, 0x1, 0xffe0)
	pkg/tcpip/transport/internal/network/endpoint.go:295 +0xd6 fp=0xc0025db428 sp=0xc0025db3f0 pc=0xb9e916
gvisor.dev/gvisor/pkg/tcpip/transport/raw.(*endpoint).write(0xc003122000, 0x15d76a0, 0xc003118a00, 0xc002db07e0, 0x0, 0x0, 0x0, 0x0)
	pkg/tcpip/transport/raw/endpoint.go:392 +0x53b fp=0xc0025db5d8 sp=0xc0025db428 pc=0xbabdbb
gvisor.dev/gvisor/pkg/tcpip/transport/raw.(*endpoint).Write(0xc003122000, 0x15d76a0, 0xc003118a00, 0xc002db07e0, 0xc003000000, 0x4, 0x0, 0xa80002)
	pkg/tcpip/transport/raw/endpoint.go:323 +0xc5 fp=0xc0025db628 sp=0xc0025db5d8 pc=0xbab525
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*socketOpsCommon).SendMsg(0xc001036690, 0xc00266aa80, 0x15f1060, 0xc00149b000, 0x0, 0x1, 0x20000040, 0xffe0, 0x100, 0xc003120010, ...)
	pkg/sentry/socket/netstack/netstack.go:3915 +0x243 fp=0xc0025db788 sp=0xc0025db628 pc=0xc4b043
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.sendSingleMsg(0xc00266aa80, 0x3f24badb1618, 0xc001036620, 0xc001036620, 0x20001440, 0xc000000040, 0x0, 0xc00266aa01, 0x564e46c2af68)
	pkg/sentry/syscalls/linux/vfs2/socket.go:1437 +0x555 fp=0xc0025dbae8 sp=0xc0025db788 pc=0xf733b5
gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2.SendMMsg(0xc00266aa80, 0x4, 0x20001440, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ...)
	pkg/sentry/syscalls/linux/vfs2/socket.go:1329 +0x37f fp=0xc0025dbbb8 sp=0xc0025dbae8 pc=0xf729df
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00266aa80, 0x133, 0x4, 0x20001440, 0x1, 0x0, 0x0, 0x0, 0xc000001fa0, 0x1420fe0, ...)
	pkg/sentry/kernel/task_syscall.go:115 +0x199 fp=0xc0025dbc78 sp=0xc0025dbbb8 pc=0xa80619
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00266aa80, 0x133, 0x4, 0x20001440, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:290 +0x70 fp=0xc0025dbd00 sp=0xc0025dbc78 pc=0xa818f0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00266aa80, 0x133, 0x4, 0x20001440, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0)
	pkg/sentry/kernel/task_syscall.go:237 +0xb4 fp=0xc0025dbd60 sp=0xc0025dbd00 pc=0xa813d4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc00266aa80, 0x2, 0xc00266aa80)
	pkg/sentry/kernel/task_syscall.go:204 +0x198 fp=0xc0025dbe30 sp=0xc0025dbd60 pc=0xa80cb8
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x0, 0xc00266aa80, 0x15c9900, 0x0)
	pkg/sentry/kernel/task_run.go:327 +0xe5f fp=0xc0025dbf68 sp=0xc0025dbe30 pc=0xa73bdf
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00266aa80, 0x1eb)
	pkg/sentry/kernel/task_run.go:100 +0x1b9 fp=0xc0025dbfd0 sp=0xc0025dbf68 pc=0xa72619
runtime.goexit()
	src/runtime/asm_amd64.s:1371 +0x1 fp=0xc0025dbfd8 sp=0xc0025dbfd0 pc=0x472861
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start
	pkg/sentry/kernel/task_start.go:396 +0x116