------------[ cut here ]------------
WARNING: CPU: 1 PID: 7413 at net/core/skbuff.c:4225 skb_try_coalesce+0xeb1/0x1270 net/core/skbuff.c:4225()
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 7413 Comm: syz-executor0 Not tainted 4.4.167+ #4
 0000000000000000 4f60e189a3328e38 ffff8801c3586f38 ffffffff81aa62cd
 ffffffff828353a0 ffff8800b34d17c0 ffffffff82a4d0a0 0000000000000009
 0000000000001081 ffff8801c3586ff8 ffffffff813a2284 0000000041b58ab3
Call Trace:
 [<ffffffff81aa62cd>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81aa62cd>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff813a2284>] panic+0x19e/0x359 kernel/panic.c:112
 [<ffffffff813a2474>] warn_slowpath_common.cold.6+0x20/0x20 kernel/panic.c:455
 [<ffffffff810d4489>] warn_slowpath_null+0x29/0x30 kernel/panic.c:492
 [<ffffffff821f4ef1>] skb_try_coalesce+0xeb1/0x1270 net/core/skbuff.c:4225
 [<ffffffff8240c0e2>] tcp_try_coalesce+0x162/0x4c0 net/ipv4/tcp_input.c:4288
 [<ffffffff8240c567>] tcp_queue_rcv+0x127/0x6f0 net/ipv4/tcp_input.c:4539
 [<ffffffff82410ed0>] tcp_data_queue+0x930/0x3ad0 net/ipv4/tcp_input.c:4650
 [<ffffffff8241ea6a>] tcp_rcv_established+0x57a/0x1fd0 net/ipv4/tcp_input.c:5538
 [<ffffffff82648143>] tcp_v6_do_rcv+0xdb3/0x11d0 net/ipv6/tcp_ipv6.c:1267
 [<ffffffff821dfb6b>] sk_backlog_rcv include/net/sock.h:871 [inline]
 [<ffffffff821dfb6b>] __release_sock net/core/sock.c:2023 [inline]
 [<ffffffff821dfb6b>] release_sock+0x17b/0x500 net/core/sock.c:2473
 [<ffffffff8220a413>] sk_stream_wait_memory+0x4b3/0xcb0 net/core/stream.c:148
 [<ffffffff823f5aef>] do_tcp_sendpages net/ipv4/tcp.c:1000 [inline]
 [<ffffffff823f5aef>] tcp_sendpage+0x5cf/0x17e0 net/ipv4/tcp.c:1033
 [<ffffffff824a6361>] inet_sendpage+0x221/0x510 net/ipv4/af_inet.c:772
 [<ffffffff821d1db3>] kernel_sendpage+0x93/0xf0 net/socket.c:3320
 [<ffffffff821d1e9c>] sock_sendpage+0x8c/0xc0 net/socket.c:793
 [<ffffffff8152b1c6>] pipe_to_sendpage+0x266/0x330 fs/splice.c:724
 [<ffffffff8152dfc4>] splice_from_pipe_feed fs/splice.c:776 [inline]
 [<ffffffff8152dfc4>] __splice_from_pipe+0x364/0x790 fs/splice.c:901
 [<ffffffff81531089>] splice_from_pipe+0xf9/0x170 fs/splice.c:936
 [<ffffffff8153113c>] generic_splice_sendpage+0x3c/0x50 fs/splice.c:1109
 [<ffffffff8152b3b8>] do_splice_from fs/splice.c:1128 [inline]
 [<ffffffff8152b3b8>] direct_splice_actor+0x128/0x190 fs/splice.c:1294
 [<ffffffff8152c7f7>] splice_direct_to_actor+0x2c7/0x830 fs/splice.c:1247
 [<ffffffff8152cf03>] do_splice_direct+0x1a3/0x270 fs/splice.c:1337
 [<ffffffff814950a4>] do_sendfile+0x4e4/0xb80 fs/read_write.c:1227
 [<ffffffff814971f1>] C_SYSC_sendfile fs/read_write.c:1303 [inline]
 [<ffffffff814971f1>] compat_SyS_sendfile+0xd1/0x160 fs/read_write.c:1292
 [<ffffffff810060fe>] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
 [<ffffffff810060fe>] do_fast_syscall_32+0x31e/0xa80 arch/x86/entry/common.c:397
 [<ffffffff82717690>] sysenter_flags_fixed+0xd/0x1a
Kernel Offset: disabled
Rebooting in 86400 seconds..