DATA RACE in kernel.(*Task).waitCollectZombieLocked

Status: fixed on 2026/04/22 02:20
Fix commit: 149ca746755e wait: Prefer group exit status for non-consuming waits
First crash: 167d, last: 134d
▶ ▼ Duplicate bugs (1)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
DATA RACE in kernel.(*Task).prepareGroupExitLocked -1 syz 1 134d 134d 26/26 closed as dup on 2026/04/16 18:24

Sample crash report:
WARNING: DATA RACE
Read at 0x00c0010d66a5 by goroutine 374:
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).waitCollectZombieLocked()
      pkg/sentry/kernel/task_exit.go:1182 +0x2db
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).waitParentLocked()
      pkg/sentry/kernel/task_exit.go:1126 +0x8fe
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).waitOnce()
      pkg/sentry/kernel/task_exit.go:1051 +0x385
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Wait()
      pkg/sentry/kernel/task_exit.go:1024 +0x2f2
  gvisor.dev/gvisor/pkg/sentry/syscalls/linux.wait4()
      pkg/sentry/syscalls/linux/sys_thread.go:283 +0x304
  gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Wait4()
      pkg/sentry/syscalls/linux/sys_thread.go:311 +0x44
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall()
      pkg/sentry/kernel/task_syscall.go:143 +0x94b
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke()
      pkg/sentry/kernel/task_syscall.go:323 +0x71
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter()
      pkg/sentry/kernel/task_syscall.go:283 +0x93
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall()
      pkg/sentry/kernel/task_syscall.go:258 +0x48f
  gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute()
      pkg/sentry/kernel/task_run.go:258 +0x1eb0
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run()
      pkg/sentry/kernel/task_run.go:89 +0x4a9
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
      pkg/sentry/kernel/task_start.go:416 +0x44

Previous write at 0x00c0010d66a5 by goroutine 3007:
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).prepareGroupExitLocked()
      pkg/sentry/kernel/task_exit.go:178 +0xb2
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).PrepareGroupExit()
      pkg/sentry/kernel/task_exit.go:157 +0xde
  gvisor.dev/gvisor/pkg/sentry/syscalls/linux.ExitGroup()
      pkg/sentry/syscalls/linux/sys_thread.go:166 +0x2e
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall()
      pkg/sentry/kernel/task_syscall.go:143 +0x94b
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke()
      pkg/sentry/kernel/task_syscall.go:323 +0x71
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter()
      pkg/sentry/kernel/task_syscall.go:283 +0x93
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall()
      pkg/sentry/kernel/task_syscall.go:258 +0x48f
  gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute()
      pkg/sentry/kernel/task_run.go:258 +0x1eb0
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run()
      pkg/sentry/kernel/task_run.go:89 +0x4a9
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
      pkg/sentry/kernel/task_start.go:416 +0x44

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/16 15:45 gvisor b5e83db38775 4743f87d .config console log report syz / log ci-gvisor-ptrace-3-race DATA RACE in kernel.(*Task).waitCollectZombieLocked
2026/04/16 15:39 gvisor b5e83db38775 4743f87d .config console log report syz / log ci-gvisor-ptrace-1-race DATA RACE in kernel.(*Task).waitCollectZombieLocked
2026/04/16 15:10 gvisor b5e83db38775 4743f87d .config console log report syz / log ci-gvisor-ptrace-2-race DATA RACE in kernel.(*Task).waitCollectZombieLocked
2026/04/16 14:43 gvisor b5e83db38775 4743f87d .config console log report info ci-gvisor-ptrace-2-race DATA RACE in kernel.(*Task).waitCollectZombieLocked
2026/03/14 15:11 gvisor 7115280528d6 ee8d34d6 .config console log report info ci-gvisor-ptrace-3-race DATA RACE in kernel.(*Task).waitCollectZombieLocked
* Struck through repros no longer work on HEAD.