possible deadlock in snd_seq_deliver_event (2)

Status: upstream: reported on 2026/07/30 01:59
Subsystems: sound
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+d4d7ac4a87bb2d52a822@syzkaller.appspotmail.com
Fix commit: a9760db775ef ALSA: seq: Use RCU for the port subscriber list
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32 ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root]
First crash: 54d, last: 29d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
84ca876c assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ possible deadlock in snd_seq_deliver_event (2) 2026/07/27 02:22 2026/07/27 02:22 2026/07/27 02:56 492bab15
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] [sound?] possible deadlock in snd_seq_deliver_event (2) 1 (2) 2026/08/25 09:44
[syzbot] Monthly sound report (Aug 2026) 0 (1) 2026/08/08 04:32
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream possible deadlock in snd_seq_deliver_event 4 syz, C 6 3238d 3248d 4/29 fixed on 2018/01/23 12:04
linux-6.1 possible deadlock in snd_seq_deliver_event 4 syz, C 38 1d18h 55d 0/3 upstream: reported C repro on 2026/07/25 05:57
linux-5.15 possible deadlock in snd_seq_deliver_event origin:upstream 4 syz, C 10 8d06h 49d 0/3 upstream: reported C repro on 2026/07/31 01:39
android-49 possible deadlock in snd_seq_deliver_event 4 syz, C 1 3238d 2714d 0/3 public: reported C repro on 2019/04/14 08:51
linux-6.6 possible deadlock in snd_seq_deliver_event 4 8 17d 46d 0/2 upstream: reported on 2026/08/03 09:53

Sample crash report:
============================================
WARNING: possible recursive locking detected
syzkaller #0 Tainted: G             L     
--------------------------------------------
kworker/0:5/5730 is trying to acquire lock:
ffff888032263928 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
ffff888032263928 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
ffff888032263928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813

but task is already holding lock:
ffff888052508928 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
ffff888052508928 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
ffff888052508928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&grp->list_lock);
  lock(&grp->list_lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

locks held by kworker/0:5/5730: 3, last CPU#0:
 #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 kernel/workqueue.c:3405
 #1: ffffc90004c4fc40 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #1: ffffc90004c4fc40 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 kernel/workqueue.c:3405
 #2: ffff888052508928 (&grp->list_lock){.+.+}-{3:3}, at: __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
 #2: ffff888052508928 (&grp->list_lock){.+.+}-{3:3}, at: deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 #2: ffff888052508928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813

stack backtrace:
CPU: 0 UID: 0 PID: 5730 Comm: kworker/0:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: events snd_rawmidi_input_event_work
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3057
 check_deadlock kernel/locking/lockdep.c:3109 [inline]
 validate_chain kernel/locking/lockdep.c:3911 [inline]
 __lock_acquire+0x24df/0x2cf0 kernel/locking/lockdep.c:5253
 lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5886
 __raw_read_lock include/linux/rwlock_api_smp.h:163 [inline]
 _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:263
 __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:723 [inline]
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 snd_seq_deliver_event+0x241/0xa40 sound/core/seq/seq_clientmgr.c:813
 snd_seq_kernel_client_dispatch+0x201/0x310 sound/core/seq/seq_clientmgr.c:2439
 queue_broadcast_event sound/core/seq/seq_queue.c:585 [inline]
 snd_seq_queue_process_event sound/core/seq/seq_queue.c:601 [inline]
 snd_seq_control_queue+0x898/0x10f0 sound/core/seq/seq_queue.c:659
 __snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:626 [inline]
 _snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:672 [inline]
 snd_seq_deliver_single_event+0x568/0xc40 sound/core/seq/seq_clientmgr.c:687
 snd_seq_deliver_event+0x26a/0xa40 sound/core/seq/seq_clientmgr.c:815
 snd_seq_kernel_client_dispatch+0x201/0x310 sound/core/seq/seq_clientmgr.c:2439
 send_timer_event sound/core/seq/oss/seq_oss_timer.c:140 [inline]
 snd_seq_oss_timer_start+0x336/0x580 sound/core/seq/oss/seq_oss_timer.c:161
 send_midi_event sound/core/seq/oss/seq_oss_midi.c:576 [inline]
 snd_seq_oss_midi_input+0x50a/0xad0 sound/core/seq/oss/seq_oss_midi.c:501
 __snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:626 [inline]
 _snd_seq_deliver_single_event sound/core/seq/seq_clientmgr.c:672 [inline]
 snd_seq_deliver_single_event+0x568/0xc40 sound/core/seq/seq_clientmgr.c:687
 __deliver_to_subscribers sound/core/seq/seq_clientmgr.c:735 [inline]
 deliver_to_subscribers sound/core/seq/seq_clientmgr.c:763 [inline]
 snd_seq_deliver_event+0x543/0xa40 sound/core/seq/seq_clientmgr.c:813
 snd_seq_kernel_client_dispatch+0x201/0x310 sound/core/seq/seq_clientmgr.c:2439
 snd_midi_input_event+0x2b1/0x400 sound/core/seq/seq_midi.c:93
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa88/0x14c0 kernel/workqueue.c:3405
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (207):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/19 21:29 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/19 19:44 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/19 16:52 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/19 13:27 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/19 01:53 upstream 0f23d56f17fd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/19 00:52 upstream 0f23d56f17fd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/18 18:36 upstream 0f23d56f17fd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/18 12:19 upstream ff68e5f557f6 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/18 10:44 upstream ff68e5f557f6 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/18 01:26 upstream 8d3ae59288f1 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/17 22:41 upstream 8d3ae59288f1 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/17 22:27 upstream 8d3ae59288f1 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/17 05:41 upstream dcb68831eac7 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/16 17:51 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/16 14:11 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/16 10:56 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/16 02:46 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/15 20:30 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/15 11:18 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/15 02:41 upstream 2f1baf1fc892 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/14 12:35 upstream 2f1baf1fc892 b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/13 04:40 upstream 3d6d817622b0 67796a05 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/12 20:08 upstream 3d6d817622b0 7ae4acc7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/12 15:58 upstream f5bbbfec59b4 7ae4acc7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/11 20:24 upstream d58772d8520c 37a258dd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/11 18:24 upstream d58772d8520c 37a258dd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/09 20:16 upstream b9b3e33b70b7 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/09 02:15 upstream a59f57e2aa12 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/08 21:43 upstream a59f57e2aa12 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/08 08:49 upstream 9a143525f62b e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/08 01:10 upstream 364465ab19de e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/29 20:40 upstream fc02acf6ac0c cb1587ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/27 00:56 upstream 4235cb24ec1e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/07/26 01:56 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in snd_seq_deliver_event
2026/08/20 01:47 upstream bd5f485f3f02 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/20 00:23 upstream bd5f485f3f02 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/19 14:45 upstream b126f6f5940f 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/17 08:37 upstream 8d3ae59288f1 746171ee .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/13 18:20 upstream 3aa1dcaa4f6f 4d118901 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in snd_seq_deliver_event
2026/08/20 03:18 upstream bd5f485f3f02 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/19 18:28 upstream bd5f485f3f02 1e72964b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/17 20:19 upstream 8d3ae59288f1 905244d6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/14 05:49 upstream 3aa1dcaa4f6f b13552fe .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/12 05:36 upstream f5bbbfec59b4 f8d35649 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/11 09:39 upstream d58772d8520c 557a89d3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/09 06:27 upstream 06cf61899d64 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/09 00:31 upstream a59f57e2aa12 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/08 12:36 upstream 3f008280327b 5d63f80b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/07 18:42 upstream f9a2394a2348 e4ef95d6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in snd_seq_deliver_event
2026/08/10 01:18 linux-next 6b8c8af514d7 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/07 19:56 linux-next ea2bff00da89 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
2026/08/07 15:30 linux-next ea2bff00da89 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in snd_seq_deliver_event
* Struck through repros no longer work on HEAD.