Re: [PATCH] net/9p: fix infinite loop in p9_client_rpc on fatal signal
From: Dominique Martinet
Date: Sun Jun 21 2026 - 21:43:20 EST
Vasiliy Kovalev wrote on Mon, Jun 22, 2026 at 01:06:21AM +0300:
> The deterministic path is the syzkaller C reproducer:
> https://syzkaller.appspot.com/x/repro.c?x=156aa534580000
>
> [...]
>
> dmesg fires on every iteration:
Thanks for the quick reply, I've confirmed this repro "works", as in gets
out of the loop as expected.
> On a real server I couldn't reproduce this by hand. The reproducer
> hits the branch deterministically (logs above); why hand-issued
> SIGKILLs don't get there is a kernel signal-delivery question
> outside the path this patch touches, and I didn't dig into it.
Right, from my added logs, when doing it "by hand", I don't think the
thread goes out of the wait_event_killable() the second time around.
I agree it's slightly out of scope, but any behaviour we don't
understand is something that could be subject to change, so I'll try to
dig a bit further as time allows.
> Feel free to revert if anything turns up in the next weeks.
Thanks, for now Linus took the patch, I'll let you know if there is any
change.
--
Dominique Martinet | Asmadeus