possible deadlock in snd_seq_deliver_event (2)

Status: upstream: reported on 2026/07/30 01:59
Subsystems: sound
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+d4d7ac4a87bb2d52a822@syzkaller.appspotmail.com
First crash: 13d, last: 5h08m
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
84ca876c assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ possible deadlock in snd_seq_deliver_event (2) 2026/07/27 02:22 2026/07/27 02:22 2026/07/27 02:56 492bab15
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly sound report (Aug 2026) 0 (1) 2026/08/08 04:32
[syzbot] [sound?] possible deadlock in snd_seq_deliver_event (2) 0 (1) 2026/07/30 01:59
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream possible deadlock in snd_seq_deliver_event 4 syz, C 6 3197d 3207d 4/29 fixed on 2018/01/23 12:04
linux-6.1 possible deadlock in snd_seq_deliver_event 4 4 9h22m 14d 0/3 upstream: reported on 2026/07/25 05:57
linux-5.15 possible deadlock in snd_seq_deliver_event origin:upstream 4 syz, C 6 1d16h 8d16h 0/3 upstream: reported C repro on 2026/07/31 01:39
android-49 possible deadlock in snd_seq_deliver_event 4 syz, C 1 3197d 2673d 0/3 public: reported C repro on 2019/04/14 08:51
linux-6.6 possible deadlock in snd_seq_deliver_event 4 3 9h18m 5d08h 0/2 upstream: reported on 2026/08/03 09:53

Sample crash report:
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
kworker/0:2/186 is trying to acquire lock:
ffff888031256128 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
ffff888031256128 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
ffff888031256128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813

but task is already holding lock:
ffff88802a0a0928 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
ffff88802a0a0928 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
ffff88802a0a0928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&grp->list_lock);
  lock(&grp->list_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

3 locks held by kworker/0:2/186:
 #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
 #1: ffffc9000308fc40 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #1: ffffc9000308fc40 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405
 #2: ffff88802a0a0928 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
 #2: ffff88802a0a0928 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 #2: ffff88802a0a0928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813

stack backtrace:
CPU: 0 UID: 0 PID: 186 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: events snd_rawmidi_input_event_work
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
 check_deadlock kernel/locking/lockdep.c:3093 [inline]
 validate_chain kernel/locking/lockdep.c:3895 [inline]
 __lock_acquire+0x24df/0x2cf0 kernel/locking/lockdep.c:5237
 lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868
 __raw_read_lock include/linux/rwlock_api_smp.h:163 [inline]
 _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:232
 __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813
 snd_seq_kernel_client_dispatch+0x201/0x310 sound/core/seq/seq_clientmgr.c:2439
 queue_broadcast_event sound/core/seq/seq_queue.c:585 [inline]
 snd_seq_queue_process_event sound/core/seq/seq_queue.c:601 [inline]
 snd_seq_control_queue+0x977/0x11b0 sound/core/seq/seq_queue.c:659
 __snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:626 [inline]
 _snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:672 [inline]
 snd_seq_deliver_single_event+0x568/0xc40 sound/core/seq/seq_clientmgr.c:687
 snd_seq_deliver_event+0x26a/0xa40 sound/core/seq/seq_clientmgr.c:815
 snd_seq_kernel_client_dispatch+0x201/0x310 sound/core/seq/seq_clientmgr.c:2439
 send_timer_event sound/core/seq/oss/seq_oss_timer.c:140 [inline]
 snd_seq_oss_timer_start+0x336/0x580 sound/core/seq/oss/seq_oss_timer.c:161
 send_midi_event sound/core/seq/oss/seq_oss_midi.c:576 [inline]
 snd_seq_oss_midi_input+0x332/0x9c0 sound/core/seq/oss/seq_oss_midi.c:501
 __snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:626 [inline]
 _snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:672 [inline]
 snd_seq_deliver_single_event+0x568/0xc40 sound/core/seq/seq_clientmgr.c:687
 __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:735 [inline]
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 snd_seq_deliver_event+0x543/0xa40 sound/core/seq/seq_clientmgr.c:813
 snd_seq_kernel_client_dispatch+0x201/0x310 sound/core/seq/seq_clientmgr.c:2439
 snd_midi_input_event+0x2b1/0x400 sound/core/seq/seq_midi.c:93
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (140):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/08 08:49 upstream 9a143525f62b e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/08 01:10 upstream 364465ab19de e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/07 10:49 upstream 364465ab19de c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/07 01:08 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/07 00:27 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 22:54 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 18:24 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 13:23 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 12:50 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 11:19 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 07:13 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/05 02:44 upstream c21bb4193868 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/04 13:44 upstream 848acc8ffe1b d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/04 12:31 upstream 848acc8ffe1b d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/03 23:24 upstream c8e0d43058e6 a68cb31b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/03 17:44 upstream 075b74841bd0 a68cb31b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/03 17:30 upstream 075b74841bd0 a68cb31b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/03 07:35 upstream bd1dde877520 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/03 06:18 upstream bd1dde877520 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/03 03:43 upstream bd1dde877520 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/03 02:33 upstream bd1dde877520 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/02 20:46 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/02 17:22 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/02 12:09 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/02 08:08 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/02 06:33 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/02 05:25 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/02 02:08 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/02 01:22 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/01 23:04 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/01 21:44 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/01 17:40 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/01 08:14 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/01 06:30 upstream 0131b508c0e2 7664cf44 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/29 20:40 upstream fc02acf6ac0c cb1587ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/27 00:56 upstream 4235cb24ec1e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/26 01:56 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/04 05:17 upstream 848acc8ffe1b 9451e17e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/02 04:18 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/01 13:54 upstream 02dc699f83d0 e611ffe1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/01 09:24 upstream a2cf4ef33184 e611ffe1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/08 12:36 upstream 3f008280327b 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 18:42 upstream f9a2394a2348 e4ef95d6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 08:45 upstream fcaeecb8b0cd c38879ea .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 05:52 upstream fcaeecb8b0cd c38879ea .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 04:16 upstream fcaeecb8b0cd c38879ea .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/06 16:01 upstream 0d8395707651 cc56899a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/05 09:49 upstream 562bfb501c54 52aa2820 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/05 07:25 upstream 562bfb501c54 52aa2820 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/05 05:03 upstream 562bfb501c54 52aa2820 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/02 23:39 upstream bd1dde877520 e611ffe1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/01 16:08 upstream 02dc699f83d0 e611ffe1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 19:56 linux-next ea2bff00da89 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/07 15:30 linux-next ea2bff00da89 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
* Struck through repros no longer work on HEAD.