possible deadlock in snd_seq_deliver_event (2)

Status: upstream: reported on 2026/07/30 01:59
Subsystems: sound
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+d4d7ac4a87bb2d52a822@syzkaller.appspotmail.com
First crash: 22d, last: 1h43m
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
84ca876c assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ possible deadlock in snd_seq_deliver_event (2) 2026/07/27 02:22 2026/07/27 02:22 2026/07/27 02:56 492bab15
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly sound report (Aug 2026) 0 (1) 2026/08/08 04:32
[syzbot] [sound?] possible deadlock in snd_seq_deliver_event (2) 0 (1) 2026/07/30 01:59
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream possible deadlock in snd_seq_deliver_event 4 syz, C 6 3206d 3216d 4/29 fixed on 2018/01/23 12:04
linux-6.1 possible deadlock in snd_seq_deliver_event 4 5 6d04h 23d 0/3 upstream: reported on 2026/07/25 05:57
linux-5.15 possible deadlock in snd_seq_deliver_event origin:upstream 4 syz, C 7 2d18h 17d 0/3 upstream: reported C repro on 2026/07/31 01:39
android-49 possible deadlock in snd_seq_deliver_event 4 syz, C 1 3206d 2682d 0/3 public: reported C repro on 2019/04/14 08:51
linux-6.6 possible deadlock in snd_seq_deliver_event 4 3 9d13h 14d 0/2 upstream: reported on 2026/08/03 09:53

Sample crash report:
============================================
WARNING: possible recursive locking detected
syzkaller #0 Tainted: G             L     
--------------------------------------------
kworker/1:4/5702 is trying to acquire lock:
ffff888032d91928 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
ffff888032d91928 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
ffff888032d91928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 sound/core/seq/seq_clientmgr.c:813

but task is already holding lock:
ffff88804db0f128 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
ffff88804db0f128 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
ffff88804db0f128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 sound/core/seq/seq_clientmgr.c:813

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&grp->list_lock);
  lock(&grp->list_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

3 locks held by kworker/1:4/5702:
 #0: ffff88801c04b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297
 #1: ffffc900044ffd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298
 #2: ffff88804db0f128 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
 #2: ffff88804db0f128 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 #2: ffff88804db0f128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 sound/core/seq/seq_clientmgr.c:813

stack backtrace:
CPU: 1 UID: 0 PID: 5702 Comm: kworker/1:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: events snd_rawmidi_input_event_work
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_deadlock_bug.cold+0xbd/0xca kernel/locking/lockdep.c:3041
 check_deadlock kernel/locking/lockdep.c:3093 [inline]
 validate_chain kernel/locking/lockdep.c:3895 [inline]
 __lock_acquire+0x1256/0x1a40 kernel/locking/lockdep.c:5237
 lock_acquire kernel/locking/lockdep.c:5868 [inline]
 lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
 __raw_read_lock include/linux/rwlock_api_smp.h:163 [inline]
 _raw_read_lock+0x5f/0x70 kernel/locking/spinlock.c:232
 __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 snd_seq_deliver_event+0x230/0x860 sound/core/seq/seq_clientmgr.c:813
 snd_seq_kernel_client_dispatch+0x16f/0x1b0 sound/core/seq/seq_clientmgr.c:2439
 queue_broadcast_event.isra.0+0x143/0x1b0 sound/core/seq/seq_queue.c:585
 snd_seq_queue_process_event sound/core/seq/seq_queue.c:634 [inline]
 snd_seq_control_queue+0x709/0xb70 sound/core/seq/seq_queue.c:659
 __snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:626 [inline]
 __snd_seq_deliver_single_event+0x127/0x1c0 sound/core/seq/seq_clientmgr.c:613
 _snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:672 [inline]
 snd_seq_deliver_single_event+0x31f/0x8c0 sound/core/seq/seq_clientmgr.c:687
 snd_seq_deliver_event+0x44b/0x860 sound/core/seq/seq_clientmgr.c:815
 snd_seq_kernel_client_dispatch+0x16f/0x1b0 sound/core/seq/seq_clientmgr.c:2439
 send_timer_event.isra.0+0x130/0x190 sound/core/seq/oss/seq_oss_timer.c:140
 snd_seq_oss_timer_start+0x1db/0x320 sound/core/seq/oss/seq_oss_timer.c:161
 send_midi_event sound/core/seq/oss/seq_oss_midi.c:576 [inline]
 snd_seq_oss_midi_input+0x467/0xa30 sound/core/seq/oss/seq_oss_midi.c:501
 snd_seq_oss_event_input+0x194/0x250 sound/core/seq/oss/seq_oss_event.c:429
 __snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:626 [inline]
 __snd_seq_deliver_single_event+0x127/0x1c0 sound/core/seq/seq_clientmgr.c:613
 _snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:672 [inline]
 snd_seq_deliver_single_event+0x31f/0x8c0 sound/core/seq/seq_clientmgr.c:687
 __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:735 [inline]
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 snd_seq_deliver_event+0x2c1/0x860 sound/core/seq/seq_clientmgr.c:813
 snd_seq_kernel_client_dispatch+0x16f/0x1b0 sound/core/seq/seq_clientmgr.c:2439
 snd_midi_input_event+0x32f/0x470 sound/core/seq/seq_midi.c:93
 snd_rawmidi_input_event_work+0x61/0x80 sound/core/rawmidi.c:127
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (178):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/17 05:41 upstream dcb68831eac7 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/16 17:51 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/16 14:11 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/16 10:56 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/16 02:46 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/15 20:30 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/15 11:18 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/15 02:41 upstream 2f1baf1fc892 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/14 12:35 upstream 2f1baf1fc892 b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/13 04:40 upstream 3d6d817622b0 67796a05 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/12 20:08 upstream 3d6d817622b0 7ae4acc7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/12 15:58 upstream f5bbbfec59b4 7ae4acc7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/11 20:24 upstream d58772d8520c 37a258dd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/11 18:24 upstream d58772d8520c 37a258dd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/09 20:16 upstream b9b3e33b70b7 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/09 02:15 upstream a59f57e2aa12 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/08 21:43 upstream a59f57e2aa12 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/08 08:49 upstream 9a143525f62b e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/08 01:10 upstream 364465ab19de e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/07 10:49 upstream 364465ab19de c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/07 01:08 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/07 00:27 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 22:54 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 18:24 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 13:23 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 12:50 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 11:19 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/06 07:13 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/05 02:44 upstream c21bb4193868 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/04 13:44 upstream 848acc8ffe1b d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/04 12:31 upstream 848acc8ffe1b d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/29 20:40 upstream fc02acf6ac0c cb1587ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/27 00:56 upstream 4235cb24ec1e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/26 01:56 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/17 08:37 upstream 8d3ae59288f1 746171ee .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/13 18:20 upstream 3aa1dcaa4f6f 4d118901 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/04 05:17 upstream 848acc8ffe1b 9451e17e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/17 20:19 upstream 8d3ae59288f1 905244d6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/14 05:49 upstream 3aa1dcaa4f6f b13552fe .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/12 05:36 upstream f5bbbfec59b4 f8d35649 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/11 09:39 upstream d58772d8520c 557a89d3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/09 06:27 upstream 06cf61899d64 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/09 00:31 upstream a59f57e2aa12 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/08 12:36 upstream 3f008280327b 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 18:42 upstream f9a2394a2348 e4ef95d6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 08:45 upstream fcaeecb8b0cd c38879ea .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 05:52 upstream fcaeecb8b0cd c38879ea .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 04:16 upstream fcaeecb8b0cd c38879ea .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/06 16:01 upstream 0d8395707651 cc56899a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/05 09:49 upstream 562bfb501c54 52aa2820 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/05 07:25 upstream 562bfb501c54 52aa2820 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/05 05:03 upstream 562bfb501c54 52aa2820 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/10 01:18 linux-next 6b8c8af514d7 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/07 19:56 linux-next ea2bff00da89 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/07 15:30 linux-next ea2bff00da89 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
* Struck through repros no longer work on HEAD.