------------[ cut here ]------------
WARNING: CPU: 1 PID: 3558 at net/core/dev.c:2490 skb_warn_bad_offload+0x2b0/0x390 net/core/dev.c:2490
lo: caps=(0x000000a2803b7c69, 0x0000000000000000) len=4086 data_len=3768 gso_size=146 gso_type=4 ip_summed=0
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 3558 Comm: syz-executor.4 Not tainted 4.9.203-syzkaller #0
 ffff88017e07f238 ffffffff81b55f6b ffff88017e07f300 ffffffff82a3b700
 00000000ffffffff 0000000000000001 0000000000000009 ffff88017e07f318
 ffffffff813ff061 0000000041b58ab3 ffffffff82e31763 ffffffff813fee81
Call Trace:
 [<000000002ddd6439>] __dump_stack lib/dump_stack.c:15 [inline]
 [<000000002ddd6439>] dump_stack+0xcb/0x130 lib/dump_stack.c:56
 [<0000000013ab747d>] panic+0x1e0/0x3c4 kernel/panic.c:181
 [<000000008403c415>] __warn.cold+0x2f/0x2f kernel/panic.c:547
 [<0000000071718fbd>] warn_slowpath_fmt+0xc2/0x100 kernel/panic.c:570
 [<00000000411429fe>] skb_warn_bad_offload+0x2b0/0x390 net/core/dev.c:2490
 [<0000000000027ddf>] __skb_gso_segment+0x597/0x6c0 net/core/dev.c:2796
 [<000000003849e109>] skb_gso_segment include/linux/netdevice.h:4010 [inline]
 [<000000003849e109>] validate_xmit_skb+0x4a1/0xaa0 net/core/dev.c:3032
 [<0000000006d53753>] __dev_queue_xmit+0x83e/0x1bd0 net/core/dev.c:3465
 [<0000000004737bb5>] dev_queue_xmit+0x18/0x20 net/core/dev.c:3506
 [<00000000f8668ccb>] packet_snd net/packet/af_packet.c:2990 [inline]
 [<00000000f8668ccb>] packet_sendmsg+0x24e0/0x47c0 net/packet/af_packet.c:3015
 [<000000005a015e6a>] sock_sendmsg_nosec net/socket.c:649 [inline]
 [<000000005a015e6a>] sock_sendmsg+0xbe/0x110 net/socket.c:659
 [<0000000065d14d04>] kernel_sendmsg+0x44/0x50 net/socket.c:667
 [<000000000b45c705>] sock_no_sendpage+0x116/0x150 net/core/sock.c:2340
 [<00000000cabd4bef>] kernel_sendpage+0x95/0xf0 net/socket.c:3326
 [<000000002786ccf4>] sock_sendpage+0x8b/0xc0 net/socket.c:803
 [<0000000023ac5c3e>] pipe_to_sendpage+0x28d/0x3d0 fs/splice.c:470
 [<00000000d735e754>] splice_from_pipe_feed fs/splice.c:521 [inline]
 [<00000000d735e754>] __splice_from_pipe+0x351/0x790 fs/splice.c:645
 [<0000000048ccb88e>] splice_from_pipe+0x108/0x170 fs/splice.c:680
 [<00000000d1bfc9c4>] generic_splice_sendpage+0x3c/0x50 fs/splice.c:851
 [<00000000d377dccb>] do_splice_from fs/splice.c:870 [inline]
 [<00000000d377dccb>] do_splice fs/splice.c:1166 [inline]
 [<00000000d377dccb>] SYSC_splice fs/splice.c:1416 [inline]
 [<00000000d377dccb>] SyS_splice+0xe02/0x14c0 fs/splice.c:1399
 [<000000004823388c>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
 [<00000000800af086>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Kernel Offset: disabled
Rebooting in 86400 seconds..