[CentOS] centos 7.5 crashed, kernel BUG at net/core/skbuff.c:3668!

...
[  176.025679] random: crng init done
[  411.168635] netem: version 1.3
[  456.059840] ------------[ cut here ]------------
[  456.059849] WARNING: CPU: 4 PID: 1918 at net/ipv4/tcp_output.c:1048 tcp_set_skb_tso_segs+0xeb/0x100
[  456.059851] Modules linked in: sch_netem cirrus ttm drm_kms_helper crc32_pclmul syscopyarea ghash_clmulni_intel sysfillrect sysimgblt fb_sys_fops aesni_intel lrw ppdev gf128mul drm glue_helper ablk_helper cryptd parport_pc parport i2c_piix4 virtio_balloon i2c_core joydev pcspkr ip_tables ext4 mbcache jbd2 ata_generic pata_acpi ata_piix virtio_console virtio_net virtio_blk floppy crct10dif_pclmul virtio_pci crct10dif_common libata serio_raw virtio_ring crc32c_intel virtio
[  456.059886] CPU: 4 PID: 1918 Comm: sshd Kdump: loaded Not tainted 3.10.0-862.14.4.el7.x86_64 #1
[  456.059887] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2007
[  456.059890] Call Trace:
[  456.059896]  [<ffffffffae913754>] dump_stack+0x19/0x1b
[  456.059901]  [<ffffffffae2945d8>] __warn+0xd8/0x100
[  456.059905]  [<ffffffffae29471d>] warn_slowpath_null+0x1d/0x20
[  456.059908]  [<ffffffffae8535eb>] tcp_set_skb_tso_segs+0xeb/0x100
[  456.059911]  [<ffffffffae853637>] tcp_init_tso_segs+0x37/0x50
[  456.059915]  [<ffffffffae8552c1>] tcp_write_xmit+0x1f1/0xd00
[  456.059918]  [<ffffffffae85604e>] __tcp_push_pending_frames+0x2e/0xc0
[  456.059922]  [<ffffffffae8442fc>] tcp_push+0xec/0x120
[  456.059925]  [<ffffffffae847ce2>] tcp_sendmsg+0xd2/0xc80
[  456.059930]  [<ffffffffae8739b9>] inet_sendmsg+0x69/0xb0
[  456.059935]  [<ffffffffae7d084d>] sock_aio_write+0x15d/0x180
[  456.059940]  [<ffffffffae434c11>] ? set_fd_set+0x21/0x30
[  456.059944]  [<ffffffffae41e763>] do_sync_write+0x93/0xe0
[  456.059948]  [<ffffffffae41f345>] vfs_write+0x1c5/0x1f0
[  456.059953]  [<ffffffffae2fc0f0>] ? get_monotonic_boottime+0x50/0x100
[  456.059956]  [<ffffffffae42006f>] SyS_write+0x7f/0xf0
[  456.059961]  [<ffffffffae92579b>] system_call_fastpath+0x22/0x27
[  456.059963] ---[ end trace 77e1915bd237f005 ]---
[  728.963668] ------------[ cut here ]------------
[  728.964320] kernel BUG at net/core/skbuff.c:3668!
[  728.964933] invalid opcode: 0000 [#1] SMP 
[  728.965501] Modules linked in: sch_netem cirrus ttm drm_kms_helper crc32_pclmul syscopyarea ghash_clmulni_intel sysfillrect sysimgblt fb_sys_fops aesni_intel lrw ppdev gf128mul drm glue_helper ablk_helper cryptd parport_pc parport i2c_piix4 virtio_balloon i2c_core joydev pcspkr ip_tables ext4 mbcache jbd2 ata_generic pata_acpi ata_piix virtio_console virtio_net virtio_blk floppy crct10dif_pclmul virtio_pci crct10dif_common libata serio_raw virtio_ring crc32c_intel virtio
[  728.971540] CPU: 3 PID: 0 Comm: swapper/3 Kdump: loaded Tainted: G        W      ------------   3.10.0-862.14.4.el7.x86_64 #1
[  728.972981] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2007
[  728.973723] task: ffff94153bb1cf10 ti: ffff94153bb30000 task.ti: ffff94153bb30000
[  728.974689] RIP: 0010:[<ffffffffae7df554>]  [<ffffffffae7df554>] __skb_to_sgvec+0x1e4/0x280
[  728.975792] RSP: 0018:ffff941655183cf8  EFLAGS: 00010202
[  728.976494] RAX: ffff94163c68c700 RBX: 00000000000005a8 RCX: ffff941648bd4ac0
[  728.977407] RDX: 0000000000000001 RSI: 00000000000005a8 RDI: 00000000000002c0
[  728.978322] RBP: ffff941655183d38 R08: ffff941653416cf8 R09: fffffe544a34ae00
[  728.979241] R10: ffff941648bd4800 R11: 000000000000000a R12: 00000000000005ea
[  728.980160] R13: 00000000000005ea R14: 0000000000000000 R15: 0000000000000002
[  728.981076] FS:  0000000000000000(0000) GS:ffff941655180000(0000) knlGS:0000000000000000
[  728.982109] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  728.982849] CR2: 00007f7ed4008000 CR3: 0000000289e1a000 CR4: 00000000001406e0
[  728.983778] Call Trace:
[  728.984107]  <IRQ> 
[  728.984368]  [<ffffffffae7df612>] skb_to_sgvec+0x12/0x30
[  728.985098]  [<ffffffffc00fa4bf>] start_xmit+0x19f/0x500 [virtio_net]
[  728.985925]  [<ffffffffae7f02e6>] dev_hard_start_xmit+0x246/0x3b0
[  728.986741]  [<ffffffffae81bc0a>] sch_direct_xmit+0x11a/0x250
[  728.987489]  [<ffffffffae81bdce>] __qdisc_run+0x8e/0x360
[  728.988182]  [<ffffffffae7ef3e6>] net_tx_action+0x1d6/0x240
[  728.988924]  [<ffffffffae29dba5>] __do_softirq+0xf5/0x280
[  728.989634]  [<ffffffffae928cec>] call_softirq+0x1c/0x30
[  728.990322]  [<ffffffffae22e625>] do_softirq+0x65/0xa0
[  728.990994]  [<ffffffffae29df25>] irq_exit+0x105/0x110
[  728.991680]  [<ffffffffae92a088>] smp_apic_timer_interrupt+0x48/0x60
[  728.992504]  [<ffffffffae9267b2>] apic_timer_interrupt+0x162/0x170
[  728.993298]  <EOI> 
[  728.993566]  [<ffffffffae91ad90>] ? __cpuidle_text_start+0x8/0x8
[  728.994377]  [<ffffffffae91af96>] ? native_safe_halt+0x6/0x10
[  728.995161]  [<ffffffffae91adae>] default_idle+0x1e/0xc0
[  728.995869]  [<ffffffffae2366e3>] arch_cpu_idle+0x23/0xb0
[  728.996568]  [<ffffffffae2f5dea>] cpu_startup_entry+0x14a/0x1e0
[  728.997330]  [<ffffffffae2571b7>] start_secondary+0x1f7/0x270
[  728.998077]  [<ffffffffae2000d5>] start_cpu+0x5/0x14
[  728.998721] Code: 89 45 c8 e8 3f fe ff ff 44 8b 4d d0 41 01 c7 44 29 cb 74 41 44 8b 55 c4 4c 8b 45 c8 45 01 cd 4d 8b 36 4d 85 f6 75 90 85 db 74 2a <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 48 c7 c7 00 00 00 80 48 2b 
[  729.003191] RIP  [<ffffffffae7df554>] __skb_to_sgvec+0x1e4/0x280
[  729.005068]  RSP <ffff941655183cf8>

Any advice?