[PATCH v2 0/3] net/9p: safely abort fd RPCs on fatal signals

From: Ze Tan

Date: Thu Jul 16 2026 - 03:33:07 EST


Hi,

This series fixes a hung task reported by Syzkaller when a thread blocked
in a 9p fd RPC receives a fatal signal while another thread in the same
group is waiting in coredump_wait(). The interrupted RPC currently enters
the TFLUSH path and can wait indefinitely if the 9p server is no longer
responding, preventing the thread from exiting and the coredump from
completing.

Ze Tan (3):
net/9p: handle replies racing with interrupted RPCs
net/9p: prepare fd transports for asynchronous aborts
net/9p: abort interrupted fd RPCs on fatal signals

include/net/9p/client.h | 3 +++
include/net/9p/transport.h | 4 ++++
net/9p/client.c | 35 +++++++++++++++++++++++++++++++++++
net/9p/trans_fd.c | 10 +++++++++-
4 files changed, 51 insertions(+), 1 deletion(-)


base-commit: 58717b2a1365d06c8c64b72aa948541b53fe31eb
--
2.43.0