------------[ cut here ]------------
WARNING: CPU: 1 PID: 16620 at net/core/skbuff.c:4374 skb_try_coalesce+0xeb1/0x1270 net/core/skbuff.c:4374
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 16620 Comm: syz-executor5 Not tainted 4.9.135+ #13
 ffff8801db7071d0 ffffffff81b36bf9 ffffffff82a38ba0 00000000ffffffff
 0000000000000000 0000000000000001 0000000000001116 ffff8801db707290
 ffffffff813f6aa5 0000000041b58ab3 ffffffff82e29bcb ffffffff813f68e6
Call Trace:
 <IRQ> [  354.653789]  [<ffffffff81b36bf9>] __dump_stack lib/dump_stack.c:15 [inline]
 <IRQ> [  354.653789]  [<ffffffff81b36bf9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff813f6aa5>] panic+0x1bf/0x39f kernel/panic.c:179
 [<ffffffff813f6d74>] __warn.cold.9+0xc1/0x17f kernel/panic.c:542
 [<ffffffff810dbe2c>] warn_slowpath_null+0x2c/0x40 kernel/panic.c:585
 [<ffffffff822bb221>] skb_try_coalesce+0xeb1/0x1270 net/core/skbuff.c:4374
 [<ffffffff824deab9>] tcp_try_coalesce+0x159/0x490 net/ipv4/tcp_input.c:4362
 [<ffffffff824def17>] tcp_queue_rcv+0x127/0x590 net/ipv4/tcp_input.c:4614
 [<ffffffff824f513d>] tcp_data_queue+0x96d/0x38a0 net/ipv4/tcp_input.c:4723
 [<ffffffff824f85ad>] tcp_rcv_established+0x53d/0x1ff0 net/ipv4/tcp_input.c:5604
 [<ffffffff8272d941>] tcp_v6_do_rcv+0xcd1/0x10e0 net/ipv6/tcp_ipv6.c:1283
 [<ffffffff82526c7a>] sk_backlog_rcv include/net/sock.h:871 [inline]
 [<ffffffff82526c7a>] tcp_prequeue+0x63a/0xeb0 net/ipv4/tcp_ipv4.c:1541
 [<ffffffff827301bf>] tcp_v6_rcv+0x246f/0x2fa0 net/ipv6/tcp_ipv6.c:1498
 [<ffffffff826916a9>] ip6_input_finish+0x3f9/0x1560 net/ipv6/ip6_input.c:279
 [<ffffffff826929d1>] NF_HOOK_THRESH include/linux/netfilter.h:232 [inline]
 [<ffffffff826929d1>] NF_HOOK include/linux/netfilter.h:255 [inline]
 [<ffffffff826929d1>] ip6_input+0x1c1/0x350 net/ipv6/ip6_input.c:322
 [<ffffffff82690d85>] dst_input include/net/dst.h:513 [inline]
 [<ffffffff82690d85>] ip6_rcv_finish+0x155/0x680 net/ipv6/ip6_input.c:69
 [<ffffffff82693bb0>] NF_HOOK_THRESH include/linux/netfilter.h:232 [inline]
 [<ffffffff82693bb0>] NF_HOOK include/linux/netfilter.h:255 [inline]
 [<ffffffff82693bb0>] ipv6_rcv+0x1050/0x1c40 net/ipv6/ip6_input.c:203
 [<ffffffff822ecef5>] __netif_receive_skb_core+0x12b5/0x2960 net/core/dev.c:4289
 [<ffffffff822f58db>] __netif_receive_skb+0x5b/0x1c0 net/core/dev.c:4327
 [<ffffffff822fd610>] process_backlog+0x1f0/0x650 net/core/dev.c:4948
 [<ffffffff822fc9c4>] napi_poll net/core/dev.c:5249 [inline]
 [<ffffffff822fc9c4>] net_rx_action+0x3a4/0xe00 net/core/dev.c:5314
 [<ffffffff82808700>] __do_softirq+0x210/0x940 kernel/softirq.c:288
 [<ffffffff828042dc>] do_softirq_own_stack+0x1c/0x30 arch/x86/entry/entry_64.S:843
 <EOI> [  355.018267]  [<ffffffff810ef7e2>] do_softirq.part.1+0x62/0x70 kernel/softirq.c:332
 [<ffffffff810ef8b8>] do_softirq arch/x86/include/asm/preempt.h:22 [inline]
 [<ffffffff810ef8b8>] __local_bh_enable_ip+0xc8/0xd0 kernel/softirq.c:185
 [<ffffffff8267cf15>] local_bh_enable include/linux/bottom_half.h:31 [inline]
 [<ffffffff8267cf15>] rcu_read_unlock_bh include/linux/rcupdate.h:971 [inline]
 [<ffffffff8267cf15>] ip6_finish_output2+0xb55/0x1d10 net/ipv6/ip6_output.c:120
binder_alloc: 16636: binder_alloc_buf, no vma
binder: 16636:16640 transaction failed 29189/-3, size 8192-0 line 3136
 [<ffffffff8268da14>] ip6_finish_output+0x334/0x980 net/ipv6/ip6_output.c:145
binder: BINDER_SET_CONTEXT_MGR already set
binder: 16636:16641 ioctl 40046207 0 returned -16
 [<ffffffff8268e24a>] NF_HOOK_COND include/linux/netfilter.h:246 [inline]
 [<ffffffff8268e24a>] ip6_output+0x1ea/0x6d0 net/ipv6/ip6_output.c:162
binder_alloc: 16636: binder_alloc_buf, no vma
binder: 16636:16641 transaction failed 29189/-3, size 8192-0 line 3136
 [<ffffffff82686787>] dst_output include/net/dst.h:507 [inline]
 [<ffffffff82686787>] NF_HOOK_THRESH include/linux/netfilter.h:232 [inline]
 [<ffffffff82686787>] NF_HOOK include/linux/netfilter.h:255 [inline]
 [<ffffffff82686787>] ip6_xmit+0xf57/0x1b70 net/ipv6/ip6_output.c:265
 [<ffffffff82748f2c>] inet6_csk_xmit+0x27c/0x4d0 net/ipv6/inet6_connection_sock.c:178
 [<ffffffff82507bbb>] __tcp_transmit_skb+0x18bb/0x2df0 net/ipv4/tcp_output.c:1041
 [<ffffffff8250a06d>] tcp_transmit_skb net/ipv4/tcp_output.c:1057 [inline]
 [<ffffffff8250a06d>] tcp_write_xmit+0xf7d/0x4580 net/ipv4/tcp_output.c:2221
 [<ffffffff8250d975>] tcp_push_one+0xb5/0xe0 net/ipv4/tcp_output.c:2416
 [<ffffffff824d162b>] tcp_sendmsg+0x14bb/0x2fd0 net/ipv4/tcp.c:1328
 [<ffffffff82582e63>] inet_sendmsg+0x203/0x4d0 net/ipv4/af_inet.c:770
 [<ffffffff8228e13b>] sock_sendmsg_nosec net/socket.c:648 [inline]
 [<ffffffff8228e13b>] sock_sendmsg+0xbb/0x110 net/socket.c:658
 [<ffffffff822921c0>] SYSC_sendto net/socket.c:1683 [inline]
 [<ffffffff822921c0>] SyS_sendto+0x220/0x370 net/socket.c:1651
 [<ffffffff81006311>] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline]
 [<ffffffff81006311>] do_fast_syscall_32+0x2f1/0xa10 arch/x86/entry/common.c:390
 [<ffffffff82804960>] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137
Kernel Offset: disabled
Rebooting in 86400 seconds..