Skip to content

DeepSpeed ZeRO-3 Parameter Offload Illegal Access

ZeRO-3 partitions model parameters and offloads them to CPU memory. When a custom operation (like a custom regularizer or un-traced optimizer step) tries to access a parameter tensor directly, it passes a CPU pointer to a CUDA kernel, or attempts to read an un-gathered partitioned tensor, resulting in a segfault or illegal memory access.

Quick answer

ZeRO-3 partitions model parameters and offloads them to CPU memory.

Symptom
RuntimeError: CUDA error: an illegal memory access was encountered
Root cause
ZeRO-3 partitions model parameters and offloads them to CPU memory. When a custom operation (like a custom regularizer or un-traced optimizer step) tries to access a parameter tensor directly, it passes a CPU pointer to a CUDA kernel, or attempts to read an un-gathered partitioned tensor, resulting in a segfault or illegal memory access.
Recommended fix
Use DeepSpeed's Gather context manager with deepspeed.zero.GatheredParameters(model.parameters()): Ensures the partitioned parameters are fully materialized on the GPU before the custom operation accesses them.
How Denpex helps
Denpex matches DeepSpeed ZeRO-3 Parameter Offload Illegal Access across every rank in a distributed run and reports which rank failed first, so you act on the initiating node instead of the loudest one.
Memory#CPU/GPU Tensor Mismatch

What this failure is

DeepSpeed ZeRO-3 Parameter Offload Illegal Access is a Memory failure seen during ML training runs. ZeRO-3 partitions model parameters and offloads them to CPU memory. When a custom operation (like a custom regularizer or un-traced optimizer step) tries to access a parameter tensor directly, it passes a CPU pointer to a CUDA kernel, or attempts to read an un-gathered partitioned tensor, resulting in a segfault or illegal memory access. Common tags: CPU/GPU Tensor Mismatch.

Live diagnosis, no signup

Is this what broke your run? Paste your log.

You're reading about DeepSpeed ZeRO-3 Parameter Offload Illegal Access. Paste your own crash log or traceback below and get the real root cause for YOUR run, not this generic entry. No account, no card. Logs are masked at ingress and never saved to account history.

training_logs.txt
No log to hand? Try one:

3 free diagnoses/day

Want 14 days on the Scale plan?

Request an evaluation code. A verified workplace organization activates up to 50 diagnoses a day, alerts, history, and follow-up questions. No credit card or automatic subscription.

Evaluate one incident

Why it happens (the mechanism)

It looks like a catastrophic hardware failure during optimization, but it's purely a tensor location and partitioning abstraction leak.

What you'll observe

  • RuntimeError: CUDA error: an illegal memory access was encountered
  • Segmentation fault (core dumped)

Common symptoms and what they mean

SymptomWhy it happens
Training crashes during the optimizer step or gradient clipping phase.ZeRO-3 partitions model parameters and offloads them to CPU memory. When a custom operation (like a custom regularizer or un-traced optimizer step) tries to access a parameter tensor directly, it passes a CPU pointer to a CUDA kernel, or attempts to read an un-gathered partitioned tensor, resulting in a segfault or illegal memory access.
Only happens when ZeRO Stage 3 is enabled, works fine on ZeRO-1/2.ZeRO-3 partitions model parameters and offloads them to CPU memory. When a custom operation (like a custom regularizer or un-traced optimizer step) tries to access a parameter tensor directly, it passes a CPU pointer to a CUDA kernel, or attempts to read an un-gathered partitioned tensor, resulting in a segfault or illegal memory access.
Sometimes crashes immediately upon entering a custom module's forward pass.ZeRO-3 partitions model parameters and offloads them to CPU memory. When a custom operation (like a custom regularizer or un-traced optimizer step) tries to access a parameter tensor directly, it passes a CPU pointer to a CUDA kernel, or attempts to read an un-gathered partitioned tensor, resulting in a segfault or illegal memory access.

Which systems are affected

  • DeepSpeed
  • PyTorch
  • CUDA

How to confirm this is the problem

Use this checklist to test the hypothesis against a small reproduction. No single line proves the root cause, so preserve the preceding events and compare one variable at a time.

  • Check if the crashing module is accessing `.data` or `.grad` directly without ZeRO contexts.
  • Disable `cpu_offload` in DeepSpeed config to see if the error disappears.

Searchable error signature

search key
RuntimeError: CUDA error: an illegal memory access was encountered

Use this text as a lookup key in logs and upstream issue trackers. It is not presented as a captured customer log. Confirm the cause from your own preceding events, versions, configuration and the cited references.

The fix and the prevention pattern

The root cause is on this page and stays free. A free account adds the exact remediation steps, saved history, and the fix on every entry in the encyclopedia.

Sign up free. Unlock the full analysis

No credit card. Daily allowance follows verified trust tier. Instant access.

Diagnose this failure in VS Code

Select the traceback or open the failed terminal, then run Denpex locally to see the initiating rank, collateral failures, exact fix, and verification command without uploading the log.

Install the free VS Code extension

DeepSpeed errors in context

DeepSpeed changes when parameters, gradients and optimizer state are created, partitioned, gathered and offloaded. The hub separates ZeRO, memory, checkpoint and pipeline failures by lifecycle phase.

Compare every deepspeed error side by side

Root cause

  • ZeRO-3 partitions model parameters and offloads them to CPU memory. When a custom operation (like a custom regularizer or un-traced optimizer step) tries to access a parameter tensor directly, it passes a CPU pointer to a CUDA kernel, or attempts to read an un-gathered partitioned tensor, resulting in a segfault or illegal memory access.

The fix and how to prevent it

Evaluate Denpex on your own logs

Request a Scale evaluation code. A verified workplace organization activates 14 days with up to 50 diagnoses a day. Every account keeps its current diagnosis allowance and gets a verification path. No card or automatic subscription.

We send a single-use code tied to that address. Static provider and TLD rules do not reject valid addresses. Account trust determines the benefit after signup.

Don't just read the fix, diagnose your run

The encyclopedia tells you what went wrong. Denpex tells you what went wrong in YOUR training run. With your logs, your config, and your stack.