runtime: segmentation fault from `vgetrandomPutState` and `runtime.growslice` w/ `runtime.OSLockThread` [1.24 backport]

[gopherbot]

@prattmic requested issue #73141 to be considered for backport to the next 1.24 minor release.

@gopherbot Please backport to 1.24. This is a regression that can cause arbitrary crashes in programs that exit goroutines under LockOSThread and are running on Linux 6.11 or higher.

[gopherbot]

Change https://go.dev/cl/662496 mentions this issue: [release-branch.go1.24] runtime: cleanup M vgetrandom state before dropping P

[prattmic]

@mvdan suggests that we consider making a 1.24.3 release early for this issue:

I know that go1.24.2 was just released, but any chance a go1.24.3 release with this fix could be pushed forward? There are a number of Linux distributions and downstream projects which are currently stuck at Go 1.23 until a release with this fix happens for 1.24.

Let me add more context on the issue here:

Brief summary: Applications that have goroutines exit while holding LockOSThread may crash randomly in running on Linux 6.11+ (because that enables the new VDSO getrandom support added in 1.24).

We have reports that both Docker and Dagger suffer from these random crashes, which IIUC occur frequently enough to make those tools basically unusable with Go 1.24.

We don't have reports from other projects, but goroutines exiting with LockOSThread held is fairly common in "container" projects because they may modify some thread state in a way that the thread can no longer be reused, and this is the mechanism to drop a thread.

If I understand correctly, neither Docker or Dagger have made official releases targeting 1.24, both still target 1.23 minor releases. However, some Linux distributions built these projects with 1.24 for their package manager. It is releases from those package managers where users were encountering crashes.

cc @golang/release

[Foxboron]

fwiw, Arch Linux has already backported the patch and rebuilt docker and dagger.

https://gitlab.archlinux.org/archlinux/packaging/packages/go/-/commit/19e46549653b46dbb220c665c3ef545e7ef03132

[prattmic]

k3s-io/k3s#11973 (comment) reports the same crash in containerd as well. (I'm not sure what's going on with the rest of that issue, which is marked as fixed. The crash report may be unrelated to the rest of the issue.)

[csutcliff]

This is affecting debian trixie and sid (docker specifically) so another +1 for a release with the fix.