------------[ cut here ]------------
WARNING: CPU: 0 PID: 6902 at sound/core/oss/mulaw.c:332 snd_pcm_plugin_build_mulaw+0x6b2/0x7e0 sound/core/oss/mulaw.c:332
Modules linked in:
CPU: 0 PID: 6902 Comm: syz-executor395 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:snd_pcm_plugin_build_mulaw+0x6b2/0x7e0 sound/core/oss/mulaw.c:332
Code: ff e8 62 0a 5b fb 0f 0b 41 bc fa ff ff ff e9 fc fe ff ff e8 50 0a 5b fb 0f 0b 41 bc fa ff ff ff e9 ea fe ff ff e8 3e 0a 5b fb <0f> 0b 41 bc fa ff ff ff e9 d8 fe ff ff e8 7c 85 9b fb e9 7b fa ff
RSP: 0018:ffffc900054d7910 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc900054d79f8 RCX: ffffffff86196de9
RDX: ffff88809dd942c0 RSI: ffffffff86197252 RDI: 0000000000000005
RBP: 1ffff92000a9af24 R08: 0000000000000000 R09: ffffffff8abc718f
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900054d7a18
R13: ffffc900054d7a38 R14: 0000000000000000 R15: ffffc900054d7a18
FS:  0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f05771d6000 CR3: 000000009e7bc000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 snd_pcm_plug_format_plugins+0xb76/0x1360 sound/core/oss/pcm_plugin.c:494
 snd_pcm_oss_change_params_locked+0x3015/0x3430 sound/core/oss/pcm_oss.c:952
 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1084 [inline]
 snd_pcm_oss_make_ready+0xe6/0x2e0 sound/core/oss/pcm_oss.c:1143
 snd_pcm_oss_sync+0x2e0/0x800 sound/core/oss/pcm_oss.c:1642
 snd_pcm_oss_release+0x276/0x300 sound/core/oss/pcm_oss.c:2546
 __fput+0x285/0x920 fs/file_table.c:281
 task_work_run+0xdd/0x190 kernel/task_work.c:141
 exit_task_work include/linux/task_work.h:25 [inline]
 do_exit+0xb7d/0x29f0 kernel/exit.c:806
 do_group_exit+0x125/0x310 kernel/exit.c:903
 __do_sys_exit_group kernel/exit.c:914 [inline]
 __se_sys_exit_group kernel/exit.c:912 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:912
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x440038
Code: Bad RIP value.
RSP: 002b:00007ffdcad36038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440038
RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
RBP: 00000000004bf870 R08: 00000000000000e7 R09: ffffffffffffffd0
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00000000006d1180 R14: 0000000000000000 R15: 0000000000000000