Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. executing program [ 51.905002][ T5050] [ 51.907376][ T5050] ================================ [ 51.912484][ T5050] WARNING: inconsistent lock state [ 51.917591][ T5050] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 51.924265][ T5050] -------------------------------- [ 51.929362][ T5050] inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. [ 51.936184][ T5050] syz-executor389/5050 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 51.942927][ T5050] ffff888029572948 (&timer->lock){?...}-{2:2}, at: snd_timer_close_locked+0x53/0x8d0 [ 51.952402][ T5050] {IN-HARDIRQ-W} state was registered at: [ 51.958089][ T5050] lock_acquire+0x1e4/0x530 [ 51.962656][ T5050] _raw_spin_lock+0x2e/0x40 [ 51.967240][ T5050] snd_hrtimer_callback+0x54/0x370 [ 51.972416][ T5050] __hrtimer_run_queues+0x595/0xd00 [ 51.977684][ T5050] hrtimer_interrupt+0x396/0x990 [ 51.982684][ T5050] __sysvec_apic_timer_interrupt+0x107/0x3a0 [ 51.988744][ T5050] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 51.994444][ T5050] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 52.000489][ T5050] __sanitizer_cov_trace_pc+0x31/0x70 [ 52.005926][ T5050] snd_seq_client_use_ptr+0x16/0xf10 [ 52.011272][ T5050] snd_seq_deliver_single_event+0xf7/0xca0 [ 52.017142][ T5050] __deliver_to_subscribers+0x3ac/0x670 [ 52.022760][ T5050] snd_seq_deliver_event+0x18b/0x4a0 [ 52.028115][ T5050] snd_seq_kernel_client_dispatch+0x204/0x300 [ 52.034246][ T5050] dummy_input+0x1ce/0x2d0 [ 52.038723][ T5050] snd_seq_deliver_single_event+0x542/0xca0 [ 52.044679][ T5050] snd_seq_kernel_client_dispatch+0x204/0x300 [ 52.050806][ T5050] snd_seq_oss_midi_reset+0x46d/0x890 [ 52.056245][ T5050] snd_seq_oss_reset+0x103/0x240 [ 52.061269][ T5050] snd_seq_oss_release+0xee/0x310 [ 52.066368][ T5050] odev_release+0x56/0x80 [ 52.070764][ T5050] __fput+0x429/0x8a0 [ 52.074813][ T5050] task_work_run+0x24f/0x310 [ 52.079468][ T5050] do_exit+0xa1b/0x27e0 [ 52.083688][ T5050] do_group_exit+0x207/0x2c0 [ 52.088375][ T5050] __x64_sys_exit_group+0x3f/0x40 [ 52.093474][ T5050] do_syscall_64+0xfb/0x240 [ 52.098041][ T5050] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 52.104017][ T5050] irq event stamp: 17735 [ 52.108231][ T5050] hardirqs last enabled at (17735): [] _raw_spin_unlock_irq+0x23/0x50 [ 52.118015][ T5050] hardirqs last disabled at (17734): [] _raw_spin_lock_irq+0xad/0x120 [ 52.127713][ T5050] softirqs last enabled at (17040): [] __irq_exit_rcu+0xf2/0x1c0 [ 52.137064][ T5050] softirqs last disabled at (16889): [] __irq_exit_rcu+0xf2/0x1c0 [ 52.146406][ T5050] [ 52.146406][ T5050] other info that might help us debug this: [ 52.154439][ T5050] Possible unsafe locking scenario: [ 52.154439][ T5050] [ 52.161860][ T5050] CPU0 [ 52.165118][ T5050] ---- [ 52.168373][ T5050] lock(&timer->lock); [ 52.172506][ T5050] [ 52.175935][ T5050] lock(&timer->lock); [ 52.180241][ T5050] [ 52.180241][ T5050] *** DEADLOCK *** [ 52.180241][ T5050] [ 52.188360][ T5050] 3 locks held by syz-executor389/5050: [ 52.193879][ T5050] #0: ffffffff8f2d3228 (register_mutex#4){+.+.}-{3:3}, at: odev_release+0x4e/0x80 [ 52.203168][ T5050] #1: ffff88801df82d78 (&q->timer_mutex){+.+.}-{3:3}, at: snd_seq_queue_delete+0x5b/0xf0 [ 52.213169][ T5050] #2: ffffffff8f2c1a68 (register_mutex){+.+.}-{3:3}, at: snd_timer_close+0xa3/0x130 [ 52.222878][ T5050] [ 52.222878][ T5050] stack backtrace: [ 52.228743][ T5050] CPU: 0 PID: 5050 Comm: syz-executor389 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 52.238777][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 52.248813][ T5050] Call Trace: [ 52.252071][ T5050] [ 52.254983][ T5050] dump_stack_lvl+0x241/0x360 [ 52.259639][ T5050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 52.264814][ T5050] ? print_usage_bug+0x61a/0x8a0 [ 52.269737][ T5050] ? is_bpf_text_address+0x28d/0x2b0 [ 52.275001][ T5050] valid_state+0x13a/0x1c0 [ 52.279397][ T5050] mark_lock_irq+0xbb/0xc20 [ 52.283882][ T5050] ? arch_stack_walk+0x16d/0x1b0 [ 52.288800][ T5050] ? __pfx_mark_lock_irq+0x10/0x10 [ 52.293888][ T5050] ? stack_trace_save+0x118/0x1d0 [ 52.298899][ T5050] ? __pfx_stack_trace_save+0x10/0x10 [ 52.304251][ T5050] ? lockdep_lock+0x123/0x2b0 [ 52.308920][ T5050] ? save_trace+0x5a/0xb40 [ 52.313313][ T5050] ? __lock_acquire+0x1346/0x1fd0 [ 52.318317][ T5050] mark_lock+0x223/0x350 [ 52.322537][ T5050] __lock_acquire+0x112d/0x1fd0 [ 52.327368][ T5050] lock_acquire+0x1e4/0x530 [ 52.331845][ T5050] ? snd_timer_close_locked+0x53/0x8d0 [ 52.337284][ T5050] ? __pfx___mutex_trylock_common+0x10/0x10 [ 52.343156][ T5050] ? __pfx_lock_acquire+0x10/0x10 [ 52.348156][ T5050] ? rcu_is_watching+0x15/0xb0 [ 52.352895][ T5050] ? trace_contention_end+0x3c/0x100 [ 52.358158][ T5050] ? __mutex_lock+0x2ef/0xd70 [ 52.362822][ T5050] ? snd_timer_close+0xa3/0x130 [ 52.367654][ T5050] _raw_spin_lock+0x2e/0x40 [ 52.372135][ T5050] ? snd_timer_close_locked+0x53/0x8d0 [ 52.377570][ T5050] snd_timer_close_locked+0x53/0x8d0 [ 52.382838][ T5050] snd_timer_close+0xae/0x130 [ 52.387497][ T5050] ? __pfx_snd_timer_close+0x10/0x10 [ 52.392769][ T5050] ? _raw_spin_unlock_irq+0x23/0x50 [ 52.397946][ T5050] ? lockdep_hardirqs_on+0x99/0x150 [ 52.403123][ T5050] snd_seq_timer_close+0xa9/0xe0 [ 52.408035][ T5050] snd_seq_queue_delete+0x8f/0xf0 [ 52.413044][ T5050] snd_seq_oss_release+0x1d3/0x310 [ 52.418133][ T5050] ? __pfx_snd_seq_oss_release+0x10/0x10 [ 52.423743][ T5050] ? __asan_memset+0x23/0x50 [ 52.428319][ T5050] ? evm_file_release+0x140/0x1d0 [ 52.433319][ T5050] ? __pfx_odev_release+0x10/0x10 [ 52.438317][ T5050] odev_release+0x56/0x80 [ 52.442623][ T5050] __fput+0x429/0x8a0 [ 52.446600][ T5050] task_work_run+0x24f/0x310 [ 52.451170][ T5050] ? __pfx_task_work_run+0x10/0x10 [ 52.456260][ T5050] ? switch_task_namespaces+0xe1/0x110 [ 52.461696][ T5050] do_exit+0xa1b/0x27e0 [ 52.465834][ T5050] ? __pfx_do_exit+0x10/0x10 [ 52.470403][ T5050] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 52.476358][ T5050] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 52.482671][ T5050] ? _raw_spin_unlock_irq+0x23/0x50 [ 52.487854][ T5050] ? lockdep_hardirqs_on+0x99/0x150 [ 52.493041][ T5050] do_group_exit+0x207/0x2c0 [ 52.497613][ T5050] __x64_sys_exit_group+0x3f/0x40 [ 52.502615][ T5050] do_syscall_64+0xfb/0x240 [ 52.507106][ T5050] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 52.512983][ T5050] RIP: 0033:0x7f6b46e899a9 [ 52.517372][ T5050] Code: Unable to access opcode bytes at 0x7f6b46e8997f. [ 52.524367][ T5050] RSP: 002b:00007ffdb9e76dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 52.532762][ T5050] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6b46e899a9 [ 52.540728][ T5050] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 52.548685][ T5050] RBP: 00007f6b46f02350 R08: ffffffffffffffb8 R09: 0000000000000000 [ 52.556645][