possible deadlock in snd_seq_deliver_event

Status: upstream: reported C repro on 2026/07/25 05:57
Reported-by: syzbot+e4261fc52d6431f1e410@syzkaller.appspotmail.com
First crash: 89d, last: 6h19m
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2026/10/15 upstream (ToT) 0fcb05b72344 C Didn't crash
▶ ▼ Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream possible deadlock in snd_seq_deliver_event 4 syz, C 6 3272d 3282d 4/29 fixed on 2018/01/23 12:04
linux-5.15 possible deadlock in snd_seq_deliver_event origin:upstream 4 syz, C 10 42d 83d 0/3 upstream: reported C repro on 2026/07/31 01:39
android-49 possible deadlock in snd_seq_deliver_event 4 syz, C 1 3272d 2748d 0/3 public: reported C repro on 2019/04/14 08:51
linux-6.6 possible deadlock in snd_seq_deliver_event 4 syz, C 17 22d 80d 0/2 upstream: reported C repro on 2026/08/03 09:53
upstream possible deadlock in snd_seq_deliver_event (2) prio:high sound 4 207 63d 84d 27/29 upstream: reported on 2026/07/30 01:59

Sample crash report:
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
kworker/0:17/4489 is trying to acquire lock:
ffff88802f9e2930 (&grp->list_lock){.+.+}-{2:2}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:708 [inline]
ffff88802f9e2930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 sound/core/seq/seq_clientmgr.c:855

but task is already holding lock:
ffff8880788d8130 (&grp->list_lock){.+.+}-{2:2}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:708 [inline]
ffff8880788d8130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 sound/core/seq/seq_clientmgr.c:855

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&grp->list_lock);
  lock(&grp->list_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

3 locks held by kworker/0:17/4489:
 #0: ffff888018470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #1: ffffc900033f7d00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #2: ffff8880788d8130 (&grp->list_lock){.+.+}-{2:2}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:708 [inline]
 #2: ffff8880788d8130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 sound/core/seq/seq_clientmgr.c:855

stack backtrace:
CPU: 0 PID: 4489 Comm: kworker/0:17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Workqueue: events snd_rawmidi_input_event_work
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106
 check_deadlock kernel/locking/lockdep.c:3090 [inline]
 validate_chain kernel/locking/lockdep.c:3884 [inline]
 __lock_acquire+0x690e/0x7ea0 kernel/locking/lockdep.c:5171
 lock_acquire+0x1bc/0x4a0 kernel/locking/lockdep.c:5790
 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline]
 _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:228
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:708 [inline]
 snd_seq_deliver_event+0x1cb/0x8d0 sound/core/seq/seq_clientmgr.c:855
 snd_seq_kernel_client_dispatch+0x1fc/0x2f0 sound/core/seq/seq_clientmgr.c:2407
 queue_broadcast_event sound/core/seq/seq_queue.c:645 [inline]
 snd_seq_queue_process_event sound/core/seq/seq_queue.c:661 [inline]
 snd_seq_control_queue+0x8ff/0x1010 sound/core/seq/seq_queue.c:721
 snd_seq_deliver_single_event+0x806/0xb30 sound/core/seq/seq_clientmgr.c:663
 snd_seq_kernel_client_dispatch+0x1fc/0x2f0 sound/core/seq/seq_clientmgr.c:2407
 send_timer_event sound/core/seq/oss/seq_oss_timer.c:140 [inline]
 snd_seq_oss_timer_start+0x2ce/0x510 sound/core/seq/oss/seq_oss_timer.c:161
 send_midi_event sound/core/seq/oss/seq_oss_midi.c:622 [inline]
 snd_seq_oss_midi_input+0x2e8/0x890 sound/core/seq/oss/seq_oss_midi.c:544
 snd_seq_deliver_single_event+0x806/0xb30 sound/core/seq/seq_clientmgr.c:663
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:720 [inline]
 snd_seq_deliver_event+0x49d/0x8d0 sound/core/seq/seq_clientmgr.c:855
 snd_seq_kernel_client_dispatch+0x1fc/0x2f0 sound/core/seq/seq_clientmgr.c:2407
 snd_midi_input_event+0x5ab/0x6f0 sound/core/seq/seq_midi.c:102
 process_one_work+0x8ab/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaf5/0x12a0 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>

Crashes (54):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/17 21:26 linux-6.1.y 79807e970724 432c0077 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/10/22 16:49 linux-6.1.y 79807e970724 b55fad29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/10/17 12:37 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/10/07 13:56 linux-6.1.y a500ba24937a 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/29 21:16 linux-6.1.y 1a8763b93150 328436b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/28 23:52 linux-6.1.y 1a8763b93150 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/26 14:14 linux-6.1.y 1a8763b93150 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/20 11:11 linux-6.1.y 1a8763b93150 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/20 11:11 linux-6.1.y 1a8763b93150 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/20 11:04 linux-6.1.y 1a8763b93150 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/17 02:56 linux-6.1.y 1a8763b93150 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/09 09:24 linux-6.1.y cf82dcca9634 8387c273 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/09 09:24 linux-6.1.y cf82dcca9634 8387c273 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/08 10:58 linux-6.1.y cf82dcca9634 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/04 05:27 linux-6.1.y cf82dcca9634 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/04 05:27 linux-6.1.y cf82dcca9634 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/04 05:27 linux-6.1.y cf82dcca9634 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/02 19:10 linux-6.1.y cf82dcca9634 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/02 19:10 linux-6.1.y cf82dcca9634 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/02 18:51 linux-6.1.y cf82dcca9634 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/01 16:46 linux-6.1.y d64a499eea6b 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/01 02:00 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/01 01:50 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/01 01:49 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/01 01:45 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/01 01:45 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/09/01 01:41 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/31 21:09 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/27 20:13 linux-6.1.y 79a9660d699e 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/27 19:21 linux-6.1.y 79a9660d699e 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/24 08:41 linux-6.1.y 05208478041c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/23 19:48 linux-6.1.y 05208478041c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/23 19:47 linux-6.1.y 05208478041c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/23 08:39 linux-6.1.y 7e6e67054721 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/22 11:07 linux-6.1.y 7e6e67054721 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/11 17:34 linux-6.1.y e4f7d8be268e 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/08 08:34 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/08/07 14:54 linux-6.1.y e4f7d8be268e e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan possible deadlock in snd_seq_deliver_event
2026/10/07 01:25 linux-6.1.y a500ba24937a f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/30 11:53 linux-6.1.y 1a8763b93150 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/13 09:43 linux-6.1.y cf82dcca9634 70a60e12 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/13 06:36 linux-6.1.y cf82dcca9634 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/10 16:19 linux-6.1.y cf82dcca9634 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/10 16:19 linux-6.1.y cf82dcca9634 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/10 16:16 linux-6.1.y cf82dcca9634 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/08 07:43 linux-6.1.y cf82dcca9634 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/09/07 22:32 linux-6.1.y cf82dcca9634 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/08/18 03:59 linux-6.1.y e4f7d8be268e 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/07/30 11:24 linux-6.1.y 1016ca6176ee 2377cd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
2026/07/25 05:56 linux-6.1.y dc5c83b7f5f8 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 possible deadlock in snd_seq_deliver_event
* Struck through repros no longer work on HEAD.