From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 7151D38F94C; Wed, 5 Aug 2026 16:35:24 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785947726; cv=none; b=JSwkcEPVdYky5JSm8taxBBo914xTTrQjS7MOMwyltDb7L4xiG6yVxxDwbVvhgccN6WmdLU9E3Pk8RZ/UtpSx8uDElaOJdNJOfP43wr9pcF3dqCM7G/XEb10e6J804IjuvBtGaHBxBqR2PKxi0CXvHpnEH+nJCq9swXpgTjlcgnc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785947726; c=relaxed/simple; bh=vN7lkFzIpKLgtv3dZlM+g2oykOBGBp7GF3owi2TmKGE=; h=Date:From:To:Cc:Subject:Message-Id:In-Reply-To:References: Mime-Version:Content-Type; b=TKSlaSNXDLR5H0sm1qdwr6Wr1yfN5VwBWRSWK6irtLXVr0ujekogvKNWNzvSRT0AQiT4FBuPdKqdtCgekUFGI7supfj1oDDLNJjcy8Yhjw9VnLdxNCawi0bgCrTSoSaCDhNNEok9sKC35t0WU/TOK2ULhCyf5BkQix/D+3fD45A= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linux-foundation.org header.i=@linux-foundation.org header.b=TLCmxcFt; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linux-foundation.org header.i=@linux-foundation.org header.b="TLCmxcFt" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 3506C1F000E9; Wed, 5 Aug 2026 16:35:23 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux-foundation.org; s=korg; t=1785947723; bh=B2IZsfPpsux+E527CUuTRqT8JGlvoLVPd2Xo1Wt0WcE=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=TLCmxcFtPmKmJw3b6jjHmbr4CL+s1zDyuXlk6OFlCRwEhNIeNLHi35W7Ls7YE82EW W2p6+rK5IAg3hawJdr5lWGCY21Pj2UGg+57kqKrm+SqfUZJeBQvYI5o9Ut2TMonPTZ QKuBORqJS01zEJaSl245TvO96PhQnIC2dTJFe1rs= Date: Wed, 5 Aug 2026 09:35:22 -0700 From: Andrew Morton To: Karl Erik Hofseth Cc: linux-mm@kvack.org, qi.zheng@linux.dev, kasong@tencent.com, shakeel.butt@linux.dev, baohua@kernel.org, axelrasmussen@google.com, yuanchu@google.com, weixugc@google.com, hannes@cmpxchg.org, mhocko@kernel.org, roman.gushchin@linux.dev, muchun.song@linux.dev, david@kernel.org, ljs@kernel.org, cgroups@vger.kernel.org, regressions@lists.linux.dev, linux-kernel@vger.kernel.org Subject: Re: [REGRESSION] mm/memcg: folio/lruvec mismatch after cgroup offline: lru_size underflow and list_del corruption (7.1) Message-Id: <20260805093522.e3ba46aca3a143207d68a65e@linux-foundation.org> In-Reply-To: References: X-Mailer: Sylpheed 3.8.0beta1 (GTK+ 2.24.33; x86_64-pc-linux-gnu) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit On Wed, 05 Aug 2026 14:03:03 +0200 (CEST) Karl Erik Hofseth wrote: > The following KASAN slab-use-after-free comes from a Fedora debug kernel > build of 7.1.6 with de4660898b7a applied on top, provoked with the > attached script. Further down are OOPSes generated by workloads in > production on stock Fedora kernels. MGLRU on/off makes no difference. Thanks. It does appear to be a race between migration and memcg removal. Gemini provides some thoughts, although I've found these AI crash interpretations to be a bit unreliable. https://share.gemini.google/Y6dMvOlHIFuV