[BUG] kernel BUG in mark_free_pages
From: Farhad Alemi
Date: Fri Aug 28 2026 - 01:50:48 EST
Hello,
As part of the kernel research at ASU's SEFCOM
lab, we hit the crash below. Crash reports can be found here:
https://github.com/farhad-alemi/public_bug_reports/tree/main/181-kernel-bug-in-mark-free-pages/
page:ffffea0004c00000 is uninitialized and poisoned
page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page))
kernel BUG at ./include/linux/mm.h:2265!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
RIP: 0010:page_to_nid include/linux/mm.h:2265 [inline]
RIP: 0010:mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1265
Call Trace:
mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1265
count_data_pages kernel/power/snapshot.c:1417 [inline]
hibernate_preallocate_memory+0x14f/0x750 kernel/power/snapshot.c:1859
hibernation_snapshot+0xaa/0x3d0 kernel/power/hibernate.c:429
hibernate+0x28f/0x680 kernel/power/hibernate.c:839
state_store+0x234/0x290 kernel/power/main.c:821
kernfs_fop_write_iter+0x2fa/0x480 fs/kernfs/file.c:352
ksys_write+0x14d/0x260 fs/read_write.c:740
Our reproducer.c is available upon request.
Happy to test a patch if that would help.
Regards,