RAX: ffffffffffffffda RBX: 00007fa5b427d6d4 RCX: 00000000004552d9
RDX: 0000000020000040 RSI: 0080000040045010 RDI: 0000000000000014
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
R13: 000000000000035e R14: 00000000006f8170 R15: 0000000000000012
WARNING: CPU: 1 PID: 28342 at sound/core/pcm_native.c:620 snd_pcm_hw_params_choose sound/core/pcm_native.c:620 [inline]
WARNING: CPU: 1 PID: 28342 at sound/core/pcm_native.c:620 snd_pcm_hw_params+0x65a/0x1e20 sound/core/pcm_native.c:672
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 28342 Comm: syz-executor5 Not tainted 4.16.0+ #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b9/0x29f lib/dump_stack.c:53
 panic+0x22f/0x4de kernel/panic.c:183
 __warn.cold.8+0x163/0x1a3 kernel/panic.c:547
 report_bug+0x252/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x1bc/0x470 arch/x86/kernel/traps.c:296
binder_alloc: 28323: binder_alloc_buf size -4328502454120514952 failed, no address space
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:315
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:991
RIP: 0010:snd_pcm_hw_params_choose sound/core/pcm_native.c:620 [inline]
RIP: 0010:snd_pcm_hw_params+0x65a/0x1e20 sound/core/pcm_native.c:672
RSP: 0018:ffff8801b652f1d0 EFLAGS: 00010246
RAX: 0000000000040000 RBX: 00000000fffffff4 RCX: ffffc900062f2000
RDX: 0000000000040000 RSI: ffffffff859d63ba RDI: 0000000000000005
binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096)
RBP: ffff8801b652f420 R08: ffff8801b03ea600 R09: ffffed003b6246c2
R10: ffffed003b6246c2 R11: ffff8801db123613 R12: ffffffff88262f9c
R13: ffff8801ceb12d80 R14: ffff8801b31e04c0 R15: dffffc0000000000
binder: 28323:28363 transaction failed 29201/-28, size -4328502456065854346-1945339392 line 2963
binder: undelivered TRANSACTION_ERROR: 29201
 snd_pcm_kernel_ioctl+0x6c/0x240 sound/core/pcm_native.c:2999
 snd_pcm_oss_change_params_locked+0x1be8/0x3ce0 sound/core/oss/pcm_oss.c:993
binder: BINDER_SET_CONTEXT_MGR already set
binder: 28323:28365 ioctl 40046207 0 returned -16
 snd_pcm_oss_change_params+0x80/0xe0 sound/core/oss/pcm_oss.c:1101
 snd_pcm_oss_make_ready+0xbe/0x170 sound/core/oss/pcm_oss.c:1159
 snd_pcm_oss_set_trigger.isra.25+0x82/0x910 sound/core/oss/pcm_oss.c:2055
binder: 28363 RLIMIT_NICE not set
binder_alloc: 28323: binder_alloc_buf, no vma
 snd_pcm_oss_ioctl+0x25e5/0x3f00 sound/core/oss/pcm_oss.c:2693
binder: 28323:28365 transaction failed 29189/-3, size -4328502456065854346-1945339392 line 2963
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x1cf/0x1650 fs/ioctl.c:684
binder: undelivered TRANSACTION_ERROR: 29189
 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701
 SYSC_ioctl fs/ioctl.c:708 [inline]
 SyS_ioctl+0x24/0x30 fs/ioctl.c:706
 do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4552d9
RSP: 002b:00007fa5b427cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa5b427d6d4 RCX: 00000000004552d9
RDX: 0000000020000040 RSI: 0080000040045010 RDI: 0000000000000014
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
R13: 000000000000035e R14: 00000000006f8170 R15: 0000000000000012
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..