设备环境：物理机、bond1动态链路（交换机支持）
BUG现象：系统偶现死机无响应、每次刚开机时网络反复断流，几分钟后稳定。
出现频率：偶现（特别是频繁访问、创建小文件时）
联系方式：飞牛fnOS粉丝群663 - Brill
日志文件：抓到一个内核报错，可私发提供详细日志
[70032.071417] usercopy: Kernel memory exposure attempt detected from SLUB object 'ext4_inode_cache' (offset 614, size 1452)!
[70032.071501] ------------[ cut here ]------------
[70032.071503] kernel BUG at mm/usercopy.c:102!
[70032.071534] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
[70032.071570] CPU: 6 UID: 1000 PID: 2716009 Comm: openlist Tainted: P U OE 6.12.18-trim #211
[70032.071626] Tainted: [P]=PROPRIETARY_MODULE, [U]=USER, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
[70032.071669] Hardware name: UGREEN DXP6800 Pro/Default string, BIOS 5.27 05/11/2024
[70032.071710] RIP: 0010:usercopy_abort+0x68/0x80
[70032.071740] Code: 88 b0 51 48 c7 c2 ff 9a 8f b0 41 52 48 c7 c7 a8 06 8a b0 48 0f 45 d6 48 c7 c6 5e 25 88 b0 48 89 c1 49 0f 45 f3 e8 e8 93 d6 ff <0f> 0b 49 c7 c1 8e 6b 8b b0 4d 89 ca 4d 89 c8 eb a8 0f 1f 80 00 00
[70032.071837] RSP: 0018:ffffa6c8a273bb88 EFLAGS: 00010246
[70032.071867] RAX: 000000000000006e RBX: ffff8c132fe27476 RCX: 0000000000000000
[70032.071906] RDX: 0000000000000000 RSI: ffffffffb08b6b8e RDI: 00000000ffffffff
[70032.071944] RBP: 00000000000005ac R08: 0000000000000000 R09: 0000000000000003
[70032.071982] R10: ffffa6c8a273ba38 R11: ffffffffb0cbc8d8 R12: 0000000000000001
[70032.072020] R13: ffff8c132fe27a22 R14: 00000000000005ac R15: 00000000000038b8
[70032.072058] FS: 00007fda07dcdb38(0000) GS:ffff8c17f7980000(0000) knlGS:0000000000000000
[70032.072101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[70032.072132] CR2: 000000c00808f078 CR3: 0000000102470000 CR4: 0000000000752ef0
[70032.072171] PKRU: 55555554
[70032.072186] Call Trace:
[70032.072202]
[70032.072216] ? die+0x32/0x80
[70032.072236] ? do_trap+0xd9/0x100
[70032.072257] ? usercopy_abort+0x68/0x80
[70032.072280] ? do_error_trap+0x6a/0x90
[70032.072303] ? usercopy_abort+0x68/0x80
[70032.072326] ? exc_invalid_op+0x4c/0x60
[70032.072350] ? usercopy_abort+0x68/0x80
[70032.072373] ? asm_exc_invalid_op+0x16/0x20
[70032.072401] ? usercopy_abort+0x68/0x80
[70032.072423] ? usercopy_abort+0x68/0x80
[70032.072446] __check_heap_object+0xa9/0xc0
[70032.072474] __check_object_size+0x167/0x2b0
[70032.072501] ? __pfx_simple_copy_to_iter+0x10/0x10
[70032.072532] simple_copy_to_iter+0x25/0x40
[70032.072558] __skb_datagram_iter+0x1ae/0x2f0
[70032.072594] ? __pfx_simple_copy_to_iter+0x10/0x10
[70032.072627] skb_copy_datagram_iter+0x30/0x90
[70032.072654] tcp_recvmsg_locked+0x7b9/0xa10
[70032.072683] tcp_recvmsg+0x6f/0x1e0
[70032.072707] inet_recvmsg+0x52/0x130
[70032.072730] ? security_socket_recvmsg+0xce/0xf0
[70032.072761] sock_recvmsg+0xa2/0xc0
[70032.072785] sock_read_iter+0x8f/0xf0
[70032.072808] vfs_read+0x2ed/0x330
[70032.072835] ksys_read+0xaf/0xe0
[70032.072856] do_syscall_64+0x4b/0x110
[70032.072878] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[70032.072909] RIP: 0033:0x406aae
[70032.072928] Code: ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48
[70032.074494] RSP: 002b:000000c001264a50 EFLAGS: 00000212 ORIG_RAX: 0000000000000000
[70032.075912] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000406aae
[70032.077194] RDX: 0000000000006084 RSI: 000000c00325befc RDI: 000000000000000a
[70032.078437] RBP: 000000c001264a90 R08: 0000000000000000 R09: 0000000000000000
[70032.079690] R10: 0000000000000000 R11: 0000000000000212 R12: 000000c001264bc0
[70032.080939] R13: 000000c00263f2a8 R14: 000000c000d3d880 R15: ffffffffffffffff
[70032.082184]
[70032.083442] Modules linked in: i2c_dev(E) it87(OE) hwmon_vid(E) cls_bpf(E) sch_ingress(E) macvlan(E) veth(E) nf_conntrack_netlink(E) xt_nat(E) xt_tcpudp(E) xt_conntrack(E) xt_MASQUERADE(E) bridge(E) stp(E) llc(E) xt_set(E) ip_set(E) nft_chain_nat(E) xt_addrtype(E) nft_compat(E) nf_tables(E) nfnetlink(E) xfrm_user(E) xfrm_algo(E) zfs(POE) spl(OE) quota_v2(E) quota_tree(E) overlay(E) openvswitch(E) nsh(E) nf_conncount(E) nf_nat(E) nf_conntrack(E) nf_defrag_ipv6(E) nf_defrag_ipv4(E) psample(E) rfkill(E) qrtr(E) sunrpc(E) binfmt_misc(E) nls_ascii(E) nls_cp437(E) vfat(E) fat(E) snd_sof_pci_intel_tgl(E) snd_sof_pci_intel_cnl(E) snd_sof_intel_hda_generic(E) soundwire_intel(E) soundwire_generic_allocation(E) soundwire_cadence(E) intel_rapl_msr(E) snd_sof_intel_hda_common(E) snd_soc_hdac_hda(E) intel_rapl_common(E) snd_sof_intel_hda_mlink(E) x86_pkg_temp_thermal(E) snd_sof_intel_hda(E) intel_powerclamp(E) snd_hda_ext_core(E) coretemp(E) snd_sof_pci(E) snd_sof_xtensa_dsp(E) snd_sof(E) snd_sof_utils(E)
[70032.083479] snd_soc_acpi_intel_match(E) kvm_intel(E) snd_soc_acpi(E) snd_soc_core(E) kvm(E) snd_compress(E) soundwire_bus(E) crct10dif_pclmul(E) ghash_clmulni_intel(E) snd_hda_codec_hdmi(E) mei_hdcp(E) mei_pxp(E) sha512_ssse3(E) sha512_generic(E) snd_hda_intel(E) sha256_ssse3(E) snd_intel_dspcfg(E) sha1_ssse3(E) snd_intel_sdw_acpi(E) aesni_intel(E) gf128mul(E) snd_hda_codec(E) libaes(E) crypto_simd(E) cryptd(E) snd_hda_core(E) snd_pcsp(E) rapl(E) snd_hwdep(E) intel_cstate(E) snd_pcm(E) iTCO_wdt(E) intel_pmc_bxt(E) snd_timer(E) iTCO_vendor_support(E) intel_uncore(E) snd(E) wmi_bmof(E) watchdog(E) mei_me(E) soundcore(E) mei(E) joydev(E) acpi_tad(E) acpi_pad(E) evdev(E) sg(E) msr(E) bonding(E) drivetemp(E) loop(E) fuse(E) efi_pstore(E) configfs(E) ip_tables(E) x_tables(E) autofs4(E) ext4(E) crc16(E) mbcache(E) jbd2(E) btrfs(E) blake2b_generic(E) efivarfs(E) raid10(E) linear(E) raid0(E) raid456(E) async_raid6_recov(E) async_memcpy(E) async_pq(E) async_xor(E) async_tx(E) xor(E) raid6_pq(E) libcrc32c(E) crc32c_generic(E)
[70032.091017] hid_generic(E) usbhid(E) uas(E) dm_mod(E) hid(E) usb_storage(E) sd_mod(E) raid1(E) i915(E) ahci(E) cec(E) libahci(E) drm_buddy(E) i2c_algo_bit(E) md_mod(E) xhci_pci(E) drm_display_helper(E) libata(E) xhci_hcd(E) atlantic(E) crc32_pclmul(E) event_report(E) ttm(E) drm_kms_helper(E) macsec(E) crc32c_intel(E) nvme(E) i2c_i801(E) scsi_mod(E) intel_lpss_pci(E) ptp(E) i2c_smbus(E) usbcore(E) pps_core(E) intel_lpss(E) thunderbolt(E) drm(E) scsi_common(E) idma64(E) usb_common(E) nvme_core(E) fan(E) video(E) wmi(E) button(E)
[70032.106036] ---[ end trace 0000000000000000 ]---
[70034.051507] RIP: 0010:usercopy_abort+0x68/0x80
[70034.053921] Code: 88 b0 51 48 c7 c2 ff 9a 8f b0 41 52 48 c7 c7 a8 06 8a b0 48 0f 45 d6 48 c7 c6 5e 25 88 b0 48 89 c1 49 0f 45 f3 e8 e8 93 d6 ff <0f> 0b 49 c7 c1 8e 6b 8b b0 4d 89 ca 4d 89 c8 eb a8 0f 1f 80 00 00
[70034.056314] RSP: 0018:ffffa6c8a273bb88 EFLAGS: 00010246
[70034.058778] RAX: 000000000000006e RBX: ffff8c132fe27476 RCX: 0000000000000000
[70034.061185] RDX: 0000000000000000 RSI: ffffffffb08b6b8e RDI: 00000000ffffffff
[70034.063545] RBP: 00000000000005ac R08: 0000000000000000 R09: 0000000000000003
[70034.065878] R10: ffffa6c8a273ba38 R11: ffffffffb0cbc8d8 R12: 0000000000000001
[70034.068264] R13: ffff8c132fe27a22 R14: 00000000000005ac R15: 00000000000038b8
[70034.070720] FS: 00007fda07dcdb38(0000) GS:ffff8c17f7980000(0000) knlGS:0000000000000000
[70034.072775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[70034.074842] CR2: 000000c00808f078 CR3: 0000000102470000 CR4: 0000000000752ef0
[70034.077060] PKRU: 55555554
[70394.111625] [trim-mounts-hash]'proc'[0000000031466fb6]'s top mountpoint dentry: run
[70394.113576] [trim-mounts-hash]dentry 'run' type: 0
[70522.387751] loop_applevel4: port 4(vethcda0737) entered disabled state
[70522.389934] vetha44d3bd: renamed from eth0
[70522.466630] loop_applevel4: port 4(vethcda0737) entered disabled state
[70522.472945] vethcda0737 (unregistering): left allmulticast mode
[70522.477288] vethcda0737 (unregistering): left promiscuous mode
[70522.481833] loop_applevel4: port 4(vethcda0737) entered disabled state
[70522.524536] [trim-mounts-hash]umount: 000000003e310092, merged[0000000000a83d5a == 0000000000a83d5a]
[70522.528258] [trim-mounts-hash]trim_mounts_delete: 000000003e310092
