Subject memcg: fix dying memcg pinned by swapped out shmem pages
Author devnull@kernel.org
Date 2026-08-13 08:52:02 +0000 UTC
Version
Cc akpm@linux-foundation.org axelrasmussen@google.com baohua@kernel.org bfguo@icloud.com bingfangguo@tencent.com cgroups@vger.kernel.org david@fromorbit.com david@kernel.org devnull@kernel.org hannes@cmpxchg.org kasong@tencent.com linux-kernel@vger.kernel.org linux-mm@kvack.org ljs@kernel.org mhocko@kernel.org muchun.song@linux.dev qi.zheng@linux.dev roman.gushchin@linux.dev shakeel.butt@linux.dev weixugc@google.com yuanchu@google.com
Patches (5)
Name Content [All]
[PATCH RFC 1/5] memcg: move memcg private ID refcount to objcg [Body]
[PATCH RFC 2/5] memcg: get stable memcg first before getting memcgid reference [Body]
[PATCH RFC 3/5] memcg: remove retry logic in mem_cgroup_private_id_get_online [Body]
[PATCH RFC 4/5] memcg: add a helper to get online memcg from memcgid [Body]
[PATCH RFC 5/5] memcg: filter out reparented memcgs got using memcgid [Body]
Series Summary
1 Findings
finding WARNING: refcount bug in __mem_cgroup_uncharge_swap
Log Syz Repro
Sessions
Session 2026-08-13
1 Findings
ID (for dev) dfc8e782-2637-4142-b598-9c5cc45fef2e
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 288058d8db5d35623228d84f48d9bea3707d5c85 [Config] passed [Log]
[KASAN] Boot test: Base 288058d8db5d35623228d84f48d9bea3707d5c85 [Config] passed [Log]
[KASAN] Build Patched 288058d8db5d35623228d84f48d9bea3707d5c85 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 288058d8db5d35623228d84f48d9bea3707d5c85 [Config] [patched] passed [Log]
[KASAN] Fuzz 288058d8db5d35623228d84f48d9bea3707d5c85 [Config] 288058d8db5d35623228d84f48d9bea3707d5c85 [Config] [patched] passed [Log] [Artifacts]
finding WARNING: refcount bug in __mem_cgroup_uncharge_swap
Log Syz Repro