------------[ cut here ]------------
WARNING: CPU: 1 PID: 24944 at net/core/skbuff.c:4398 skb_try_coalesce+0xeb7/0x1260 net/core/skbuff.c:4398
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 24944 Comm: syz-executor.3 Not tainted 4.9.203-syzkaller #0
 ffff8801cc4af030 ffffffff81b55f6b 0000000000000000 ffffffff82a3b700
 00000000ffffffff 0000000000000001 0000000000000009 ffff8801cc4af110
 ffffffff813ff061 0000000041b58ab3 ffffffff82e31763 ffffffff813fee81
Call Trace:
 [<000000004a0d6b68>] __dump_stack lib/dump_stack.c:15 [inline]
 [<000000004a0d6b68>] dump_stack+0xcb/0x130 lib/dump_stack.c:56
 [<00000000ebc09125>] panic+0x1e0/0x3c4 kernel/panic.c:181
 [<0000000002a00994>] __warn.cold+0x2f/0x2f kernel/panic.c:547
 [<0000000063c63690>] warn_slowpath_null+0x2d/0x40 kernel/panic.c:590
 [<000000002f69fbf9>] skb_try_coalesce+0xeb7/0x1260 net/core/skbuff.c:4398
 [<0000000022f4bf68>] tcp_try_coalesce+0x173/0x4e0 net/ipv4/tcp_input.c:4378
 [<00000000d56e3f12>] tcp_queue_rcv+0x129/0x5a0 net/ipv4/tcp_input.c:4630
 [<0000000083e746ca>] tcp_data_queue+0x600/0x3810 net/ipv4/tcp_input.c:4739
 [<00000000ea54db25>] tcp_rcv_established+0x55a/0x20b0 net/ipv4/tcp_input.c:5620
 [<000000006b122fa6>] tcp_v6_do_rcv+0xcd9/0x10f0 net/ipv6/tcp_ipv6.c:1283
 [<00000000dedbf4a1>] sk_backlog_rcv include/net/sock.h:881 [inline]
 [<00000000dedbf4a1>] __release_sock+0x138/0x390 net/core/sock.c:2065
 [<00000000ef5287bc>] release_sock+0x59/0x1c0 net/core/sock.c:2529
 [<00000000d2daace0>] tcp_sendpage net/ipv4/tcp.c:1034 [inline]
 [<00000000d2daace0>] tcp_sendpage+0x6b4/0x18f0 net/ipv4/tcp.c:1019
 [<00000000e39660f3>] inet_sendpage+0x223/0x520 net/ipv4/af_inet.c:783
 [<00000000bd02b17b>] kernel_sendpage+0x95/0xf0 net/socket.c:3326
 [<0000000069dcaa64>] sock_sendpage+0x8b/0xc0 net/socket.c:803
 [<00000000af1bff76>] pipe_to_sendpage+0x28d/0x3d0 fs/splice.c:470
 [<00000000c9b4a460>] splice_from_pipe_feed fs/splice.c:521 [inline]
 [<00000000c9b4a460>] __splice_from_pipe+0x351/0x790 fs/splice.c:645
 [<000000002d3a1d8c>] splice_from_pipe+0x108/0x170 fs/splice.c:680
 [<00000000dd0170c2>] generic_splice_sendpage+0x3c/0x50 fs/splice.c:851
 [<00000000800434c4>] do_splice_from fs/splice.c:870 [inline]
 [<00000000800434c4>] direct_splice_actor+0x126/0x1a0 fs/splice.c:1037
 [<0000000072500c7b>] splice_direct_to_actor+0x2c8/0x820 fs/splice.c:992
 [<00000000a3db3f2f>] do_splice_direct+0x1a5/0x260 fs/splice.c:1080
 [<0000000053878881>] do_sendfile+0x503/0xc00 fs/read_write.c:1402
 [<0000000022013e05>] SYSC_sendfile64 fs/read_write.c:1463 [inline]
 [<0000000022013e05>] SyS_sendfile64+0x145/0x160 fs/read_write.c:1449
 [<0000000019fc4ec8>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
 [<00000000da8c1c3b>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Kernel Offset: disabled
Rebooting in 86400 seconds..