RHOSP controller kernel panic "kernel BUG at net/core/skbuff.c:3287!" in skb_segment

Issue

• OpenStack controller panics with kernel BUG at net/core/skbuff.c:3287! in messages file

• Panic backtrace shows RIP in skb_segment with transmit path out of Open vSwitch, eg:

  [exception RIP: skb_segment+3344]
      RIP: ffffffff8f82a3c0  RSP: ffff8ce15322f348  RFLAGS: 00010246
      RAX: ffff8cf766b43ec0  RBX: ffff8cf5b7f14800  RCX: 000000000000088a
      RDX: 0000000000000b32  RSI: ffff8cf3253d8000  RDI: 0000000000000000
      RBP: ffff8ce15322f428   R8: 00000000000005b4   R9: 0000000000000000
      R10: 0000000000000000  R11: ffff8cfdefeb8800  R12: ffff8cf766b43ef0
      R13: 00000000000005b4  R14: 0000000000000000  R15: ffff8cf5b7f14800
      ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018
   #8 [ffff8ce15322f340] skb_segment at ffffffff8f829cf6
   #9 [ffff8ce15322f430] tcp_gso_segment at ffffffff8f8af6d8
  #10 [ffff8ce15322f490] tcp4_gso_segment at ffffffff8f8afa86
  #11 [ffff8ce15322f4b0] inet_gso_segment at ffffffff8f8c13c4
  #12 [ffff8ce15322f510] skb_mac_gso_segment at ffffffff8f83bed2
  #13 [ffff8ce15322f548] __skb_gso_segment at ffffffff8f83c019
  #14 [ffff8ce15322f578] validate_xmit_skb at ffffffff8f83c4a5
  #15 [ffff8ce15322f5b0] __dev_queue_xmit at ffffffff8f83cd84
  #16 [ffff8ce15322f628] dev_queue_xmit at ffffffff8f83ce30
  #17 [ffff8ce15322f638] ovs_vport_send at ffffffffc0aca296 [openvswitch]
  #18 [ffff8ce15322f660] do_output at ffffffffc0abb0fe [openvswitch]