[PATCH v2 0/3] net/9p: safely abort fd RPCs on fatal signals

Ze Tan <[email protected]> Thu, 16 Jul 2026 15:30:48 +0800
Newsgroups dev.linux.lists.v9fs,org.kernel.vger.linux-kernel,org.kernel.vger.netdev
Message-ID <[email protected]>
Hi,

This series fixes a hung task reported by Syzkaller when a thread blocked
in a 9p fd RPC receives a fatal signal while another thread in the same
group is waiting in coredump_wait(). The interrupted RPC currently enters
the TFLUSH path and can wait indefinitely if the 9p server is no longer
responding, preventing the thread from exiting and the coredump from
completing.

Ze Tan (3):
  net/9p: handle replies racing with interrupted RPCs
  net/9p: prepare fd transports for asynchronous aborts
  net/9p: abort interrupted fd RPCs on fatal signals

 include/net/9p/client.h    |  3 +++
 include/net/9p/transport.h |  4 ++++
 net/9p/client.c            | 35 +++++++++++++++++++++++++++++++++++
 net/9p/trans_fd.c          | 10 +++++++++-
 4 files changed, 51 insertions(+), 1 deletion(-)


base-commit: 58717b2a1365d06c8c64b72aa948541b53fe31eb
-- 
2.43.0