[BUG] kernel BUG in mark_free_pages

From: Farhad Alemi

Date: Fri Aug 28 2026 - 01:50:48 EST


Hello,

As part of the kernel research at ASU's SEFCOM
lab, we hit the crash below. Crash reports can be found here:

https://github.com/farhad-alemi/public_bug_reports/tree/main/181-kernel-bug-in-mark-free-pages/

page:ffffea0004c00000 is uninitialized and poisoned
page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page))
kernel BUG at ./include/linux/mm.h:2265!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
RIP: 0010:page_to_nid include/linux/mm.h:2265 [inline]
RIP: 0010:mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1265
Call Trace:
mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1265
count_data_pages kernel/power/snapshot.c:1417 [inline]
hibernate_preallocate_memory+0x14f/0x750 kernel/power/snapshot.c:1859
hibernation_snapshot+0xaa/0x3d0 kernel/power/hibernate.c:429
hibernate+0x28f/0x680 kernel/power/hibernate.c:839
state_store+0x234/0x290 kernel/power/main.c:821
kernfs_fop_write_iter+0x2fa/0x480 fs/kernfs/file.c:352
ksys_write+0x14d/0x260 fs/read_write.c:740

Our reproducer.c is available upon request.

Happy to test a patch if that would help.

Regards,