pytorch - 💡(How to fix) Fix Heap corruption when compiling models with `nn.TransformerEncoderLayer` or `nn.MultiheadAttention` using `torch.compile(backend='inductor')` [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
pytorch/pytorch#181691Fetched 2026-04-28 06:23:41
View on GitHub
Comments
0
Participants
1
Timeline
86
Reactions
0
Participants
Timeline (top)
mentioned ×40subscribed ×40labeled ×6

Error Message

Running torch.compile(model, backend='inductor') on a model containing nn.TransformerEncoderLayer or nn.MultiheadAttention (in .eval() mode) causes the process to abort with a glibc heap error such as corrupted size vs. prev_size or double free or corruption.

Error logs

Fix Action

Fix / Workaround

CPU: Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Address sizes: 52 bits physical, 57 bits virtual Byte Order: Little Endian CPU(s): 384 On-line CPU(s) list: 0-383 Vendor ID: AuthenticAMD Model name: AMD EPYC 9684X 96-Core Processor CPU family: 25 Model: 17 Thread(s) per core: 2 Core(s) per socket: 96 Socket(s): 2 Stepping: 2 BogoMIPS: 5099.98 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good amd_lbr_v2 nopl nonstop_tsc cpuid extd_apicid aperfmperf rapl pni pclmulqdq monitor ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt tce topoext perfctr_core perfctr_nb bpext perfctr_llc mwaitx cpb cat_l3 cdp_l3 hw_pstate ssbd mba perfmon_v2 ibrs ibpb stibp ibrs_enhanced vmmcall fsgsbase bmi1 avx2 smep bmi2 erms invpcid cqm rdt_a avx512f avx512dq rdseed adx smap avx512ifma clflushopt clwb avx512cd sha_ni avx512bw avx512vl xsaveopt xsavec xgetbv1 xsaves cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local user_shstk avx512_bf16 clzero irperf xsaveerptr rdpru wbnoinvd amd_ppin cppc amd_ibpb_ret arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold avic v_vmsave_vmload vgif x2avic v_spec_ctrl vnmi avx512vbmi umip pku ospke avx512_vbmi2 gfni vaes vpclmulqdq avx512_vnni avx512_bitalg avx512_vpopcntdq la57 rdpid overflow_recov succor smca fsrm flush_l1d debug_swap ibpb_exit_to_user Virtualization: AMD-V L1d cache: 6 MiB (192 instances) L1i cache: 6 MiB (192 instances) L2 cache: 192 MiB (192 instances) L3 cache: 2.3 GiB (24 instances) NUMA node(s): 2 NUMA node0 CPU(s): 0-95,192-287 NUMA node1 CPU(s): 96-191,288-383 Vulnerability Gather data sampling: Not affected Vulnerability Itlb multihit: Not affected Vulnerability L1tf: Not affected Vulnerability Mds: Not affected Vulnerability Meltdown: Not affected Vulnerability Mmio stale data: Not affected Vulnerability Reg file data sampling: Not affected Vulnerability Retbleed: Not affected Vulnerability Spec rstack overflow: Mitigation; Safe RET Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization Vulnerability Spectre v2: Mitigation; Enhanced / Automatic IBRS; IBPB conditional; STIBP always-on; RSB filling; PBRSB-eIBRS Not affected; BHI Not affected Vulnerability Srbds: Not affected Vulnerability Tsx async abort: Not affected Vulnerability Vmscape: Mitigation; IBPB before exit to userspace

Code Example

import torch
import torch.nn as nn

torch.manual_seed(0)
x = torch.randn([14, 2])

ln          = nn.LayerNorm([2])
gn          = nn.GroupNorm(1, 2).eval()
act         = nn.LeakyReLU()
transformer = nn.TransformerEncoderLayer(14, 1, dim_feedforward=56, batch_first=True).eval()

def model():
    t = ln(x)
    t = torch.sort(t, dim=0).values
    t = gn(t)
    t = act(t)
    t = torch.permute(t, (1, 0))          # [2, 14]
    t = torch.stack([t, t], dim=0)        # [2, 2, 14]  — batch for transformer
    t = transformer(t)
    return t

# Eager forward works fine
out = model()
assert torch.isfinite(out).all()

# Compiled forward crashes the process
compiled = torch.compile(model, backend='inductor')
compiled()   # ← corrupted size vs. prev_size / SIGABRT

---

import torch
import torch.nn as nn

conv_t = nn.ConvTranspose2d(6, 8, 3)
bn     = nn.BatchNorm2d(8).eval()
mha    = nn.MultiheadAttention(9, 1, batch_first=True).eval()

def model():
    x = torch.zeros([14, 6, 8, 7])
    t = conv_t(x)
    t = bn(t)
    t = torch.sum(t, dim=0)            # [8, 10, 9]
    t = t.scatter_add(1, (torch.abs(t) * 10).long().clamp(0, 9), t)
    t, _ = mha(t, t, t)
    return t

compiled = torch.compile(model, backend='inductor')
compiled()   # ← crashes

---

corrupted size vs. prev_size
Aborted (core dumped)

---

malloc_consolidate(): invalid chunk size
Aborted (core dumped)

---

double free or corruption (!prev)
Aborted (core dumped)

---

free(): invalid pointer
Aborted (core dumped)
RAW_BUFFERClick to expand / collapse

🐛 Describe the bug

Running torch.compile(model, backend='inductor') on a model containing nn.TransformerEncoderLayer or nn.MultiheadAttention (in .eval() mode) causes the process to abort with a glibc heap error such as corrupted size vs. prev_size or double free or corruption.

Minimal Reproducer

import torch
import torch.nn as nn

torch.manual_seed(0)
x = torch.randn([14, 2])

ln          = nn.LayerNorm([2])
gn          = nn.GroupNorm(1, 2).eval()
act         = nn.LeakyReLU()
transformer = nn.TransformerEncoderLayer(14, 1, dim_feedforward=56, batch_first=True).eval()

def model():
    t = ln(x)
    t = torch.sort(t, dim=0).values
    t = gn(t)
    t = act(t)
    t = torch.permute(t, (1, 0))          # [2, 14]
    t = torch.stack([t, t], dim=0)        # [2, 2, 14]  — batch for transformer
    t = transformer(t)
    return t

# Eager forward works fine
out = model()
assert torch.isfinite(out).all()

# Compiled forward crashes the process
compiled = torch.compile(model, backend='inductor')
compiled()   # ← corrupted size vs. prev_size / SIGABRT

MultiheadAttention variant:

import torch
import torch.nn as nn

conv_t = nn.ConvTranspose2d(6, 8, 3)
bn     = nn.BatchNorm2d(8).eval()
mha    = nn.MultiheadAttention(9, 1, batch_first=True).eval()

def model():
    x = torch.zeros([14, 6, 8, 7])
    t = conv_t(x)
    t = bn(t)
    t = torch.sum(t, dim=0)            # [8, 10, 9]
    t = t.scatter_add(1, (torch.abs(t) * 10).long().clamp(0, 9), t)
    t, _ = mha(t, t, t)
    return t

compiled = torch.compile(model, backend='inductor')
compiled()   # ← crashes

Error logs

corrupted size vs. prev_size
Aborted (core dumped)

Other observed variants:

malloc_consolidate(): invalid chunk size
Aborted (core dumped)
double free or corruption (!prev)
Aborted (core dumped)
free(): invalid pointer
Aborted (core dumped)

Versions

Collecting environment information... PyTorch version: 2.11.0+cu130 Is debug build: False CUDA used to build PyTorch: 13.0 ROCM used to build PyTorch: N/A

OS: Ubuntu 22.04.5 LTS (x86_64) GCC version: (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0 Clang version: 15.0.0 ([email protected]:llvm/llvm-project.git 4ba6a9c9f65bbc8bd06e3652cb20fd4dfc846137) CMake version: version 3.22.1 Libc version: glibc-2.35

Python version: 3.10.12 (main, Mar 3 2026, 11:56:32) [GCC 11.4.0] (64-bit runtime) Python platform: Linux-6.8.0-94-generic-x86_64-with-glibc2.35 Is CUDA available: False CUDA runtime version: No CUDA CUDA_MODULE_LOADING set to: N/A GPU models and configuration: No CUDA Nvidia driver version: No CUDA cuDNN version: No CUDA Is XPU available: False HIP runtime version: N/A MIOpen runtime version: N/A Is XNNPACK available: True Caching allocator config: N/A

CPU: Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Address sizes: 52 bits physical, 57 bits virtual Byte Order: Little Endian CPU(s): 384 On-line CPU(s) list: 0-383 Vendor ID: AuthenticAMD Model name: AMD EPYC 9684X 96-Core Processor CPU family: 25 Model: 17 Thread(s) per core: 2 Core(s) per socket: 96 Socket(s): 2 Stepping: 2 BogoMIPS: 5099.98 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good amd_lbr_v2 nopl nonstop_tsc cpuid extd_apicid aperfmperf rapl pni pclmulqdq monitor ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt tce topoext perfctr_core perfctr_nb bpext perfctr_llc mwaitx cpb cat_l3 cdp_l3 hw_pstate ssbd mba perfmon_v2 ibrs ibpb stibp ibrs_enhanced vmmcall fsgsbase bmi1 avx2 smep bmi2 erms invpcid cqm rdt_a avx512f avx512dq rdseed adx smap avx512ifma clflushopt clwb avx512cd sha_ni avx512bw avx512vl xsaveopt xsavec xgetbv1 xsaves cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local user_shstk avx512_bf16 clzero irperf xsaveerptr rdpru wbnoinvd amd_ppin cppc amd_ibpb_ret arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold avic v_vmsave_vmload vgif x2avic v_spec_ctrl vnmi avx512vbmi umip pku ospke avx512_vbmi2 gfni vaes vpclmulqdq avx512_vnni avx512_bitalg avx512_vpopcntdq la57 rdpid overflow_recov succor smca fsrm flush_l1d debug_swap ibpb_exit_to_user Virtualization: AMD-V L1d cache: 6 MiB (192 instances) L1i cache: 6 MiB (192 instances) L2 cache: 192 MiB (192 instances) L3 cache: 2.3 GiB (24 instances) NUMA node(s): 2 NUMA node0 CPU(s): 0-95,192-287 NUMA node1 CPU(s): 96-191,288-383 Vulnerability Gather data sampling: Not affected Vulnerability Itlb multihit: Not affected Vulnerability L1tf: Not affected Vulnerability Mds: Not affected Vulnerability Meltdown: Not affected Vulnerability Mmio stale data: Not affected Vulnerability Reg file data sampling: Not affected Vulnerability Retbleed: Not affected Vulnerability Spec rstack overflow: Mitigation; Safe RET Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization Vulnerability Spectre v2: Mitigation; Enhanced / Automatic IBRS; IBPB conditional; STIBP always-on; RSB filling; PBRSB-eIBRS Not affected; BHI Not affected Vulnerability Srbds: Not affected Vulnerability Tsx async abort: Not affected Vulnerability Vmscape: Mitigation; IBPB before exit to userspace

Versions of relevant libraries: [pip3] numpy==2.2.6 [pip3] nvidia-cublas==13.1.0.3 [pip3] nvidia-cuda-cupti==13.0.85 [pip3] nvidia-cuda-nvrtc==13.0.88 [pip3] nvidia-cuda-runtime==13.0.96 [pip3] nvidia-cudnn-cu13==9.19.0.56 [pip3] nvidia-cufft==12.0.0.61 [pip3] nvidia-curand==10.4.0.35 [pip3] nvidia-cusolver==12.0.4.66 [pip3] nvidia-cusparse==12.6.3.3 [pip3] nvidia-cusparselt-cu13==0.8.0 [pip3] nvidia-nccl-cu13==2.28.9 [pip3] nvidia-nvjitlink==13.0.88 [pip3] nvidia-nvtx==13.0.85 [pip3] torch==2.11.0 [pip3] triton==3.6.0 [conda] Could not collect

cc @chauhang @penguinwu @voznesenskym @EikanWang @jgong5 @Guobing-Chen @XiaobingSuper @zhuhaozhe @blzheng @wenzhe-nrv @jiayisunx @ipiszy @kadeng @muchulee8 @amjames @aakhundov @coconutruben @jataylo @drisspg @liangel-02 @howardzhang-cv

extent analysis

TL;DR

The issue can be resolved by avoiding the use of torch.compile with the inductor backend for models containing nn.TransformerEncoderLayer or nn.MultiheadAttention in .eval() mode.

Guidance

  • The error messages suggest a memory corruption issue, which may be caused by the interaction between torch.compile and the inductor backend.
  • To verify the issue, try running the model without torch.compile or with a different backend.
  • As a temporary workaround, avoid using torch.compile with the inductor backend for models containing nn.TransformerEncoderLayer or nn.MultiheadAttention in .eval() mode.
  • Consider updating PyTorch to a newer version, as this issue may have been fixed in a later release.

Example

No code example is provided, as the issue is related to the interaction between torch.compile and the inductor backend, and the provided code snippets are already minimal reproducers.

Notes

The root cause of the issue is unclear, but it appears to be related to the inductor backend. The provided error messages suggest a memory corruption issue, which can be difficult to debug. Further investigation is needed to determine the exact cause of the issue.

Recommendation

Apply workaround: avoid using torch.compile with the inductor backend for models containing nn.TransformerEncoderLayer or nn.MultiheadAttention in .eval() mode, as this appears to be the most reliable way to prevent the memory corruption issue.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

pytorch - 💡(How to fix) Fix Heap corruption when compiling models with `nn.TransformerEncoderLayer` or `nn.MultiheadAttention` using `torch.compile(backend='inductor')` [1 participants]