Crash when symlink upcall parsing in daemon returned 0xbe
Posted by Anonymous on Mon 18th May 2026 12:53
raw | new post

STACK_TEXT:
ffffef0d`6d675538 fffff807`41811da9 : 00000000`00000139 00000000`00000003 ffffef0d`6d675860 ffffef0d`6d6757b8 : nt!KeBugCheckEx
ffffef0d`6d675540 fffff807`41812350 : ffffdf06`d7cda3b0 fffff807`417f9880 00000000`00000000 fffff807`41805c2f : nt!KiBugCheckDispatch+0x69
ffffef0d`6d675680 fffff807`418101f2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffef0d`6d675860 fffff807`465275fa : fffff807`465273dd 00000000`00000003 00000000`00000000 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x332
ffffef0d`6d6759f8 fffff807`465273dd : 00000000`00000003 00000000`00000000 00000000`00000000 00000000`00000000 : nfs41_driver!RtlFailFast+0xa [C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h @ 11545]
ffffef0d`6d675a00 fffff807`465275a7 : fffff807`46558158 ffffdf06`d7cda3b0 fffff807`46558158 00000000`00000007 : nfs41_driver!FatalListEntryError+0x1d [C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h @ 11779]
ffffef0d`6d675a30 fffff807`4653e0a6 : ffffdf06`d7cda3b0 fffff807`00000000 00000000`00000000 fffff807`46549c10 : nfs41_driver!RemoveEntryList+0x57 [C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h @ 11816]
ffffef0d`6d675a80 fffff807`465373cf : ffffdf06`d7cda350 00000000`0000005a 00000209`079a9380 ffffffff`ffffffff : nfs41_driver!nfs41_UpcallWaitForReply+0x386 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_updowncall.c @ 570]
ffffef0d`6d675b00 fffff807`46567790 : ffffdf06`d7ab3010 ffffdf06`00030000 ffffa68e`52e68c88 00000000`00000007 : nfs41_driver!nfs41_Create+0x8ff [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_openclose.c @ 951]
ffffef0d`6d675cd0 fffff807`46568561 : ffffdf06`d7ab3010 ffffdf06`d98e7400 ffffa68e`52e68920 ffffef0d`00000000 : nfs41_driver!RxCollapseOrCreateSrvOpen+0x130 [base\fs\rdr2\rdbss\create.c @ 2034]
ffffef0d`6d675d70 fffff807`46568000 : ffffdf06`d7ab3010 ffffef0d`00000007 ffffef0d`6d675e90 00000000`00000002 : nfs41_driver!RxCreateFromNetRoot+0x3b1 [base\fs\rdr2\rdbss\create.c @ 2634]
ffffef0d`6d675e00 fffff807`46544282 : ffffdf06`d7ab3010 ffffdf06`c0000016 ffffdf06`d7052740 00000000`00000000 : nfs41_driver!RxCommonCreate+0x3e0 [base\fs\rdr2\rdbss\create.c @ 3729]
ffffef0d`6d675f20 fffff807`465649ad : fffff807`46557160 fffff807`41db4100 00000001`00000000 ffffdf06`d203f090 : nfs41_driver!RxFsdCommonDispatch+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
ffffef0d`6d676020 fffff807`46529430 : ffffdf06`d9ffb7b0 00000000`00000000 00000000`000e000e 00000000`00000000 : nfs41_driver!RxFsdDispatch+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
ffffef0d`6d676050 fffff807`416d21c5 : ffffdf06`d203f090 ffffdf06`d98e74e0 ffffdf06`d9ffb840 ffffa68e`5bfe3690 : nfs41_driver!nfs41_FsdDispatch+0x1e0 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_driver.c @ 1405]
ffffef0d`6d6760b0 fffff807`443ff558 : 00000000`00000001 fffff807`443ff31a ffffdf06`d9ffb860 00000000`00000000 : nt!IofCallDriver+0x55
ffffef0d`6d6760f0 fffff807`443ff0a9 : ffffa68e`4df0a6f0 00000000`00000000 fffff807`443f8000 ffffdf06`d7cec430 : mup!MupiCallUncProvider+0xb8
ffffef0d`6d676160 fffff807`443fed7f : 00000000`00000000 00000000`00000008 ffffdf06`d7052740 ffffdf06`d7cec430 : mup!MupStateMachine+0x59
ffffef0d`6d676190 fffff807`416d21c5 : ffffdf06`d97d3a20 ffffdf06`d7cec430 00000000`00000000 ffffdf06`d9ffb7b0 : mup!MupCreate+0x1cf
ffffef0d`6d676200 fffff807`42d2710f : ffffdf06`d7052700 ffffef0d`6d6762f0 ffffef0d`6d6762f9 fffff807`42d25f7a : nt!IofCallDriver+0x55
ffffef0d`6d676240 fffff807`42d59ee4 : ffffef0d`6d6762f0 ffffdf06`d7052798 ffffdf06`d187bb00 00000000`00000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28f
ffffef0d`6d6762b0 fffff807`416d21c5 : ffffdf06`d7052700 ffffdf06`d187b8f0 00000000`00000000 00000000`00000000 : FLTMGR!FltpCreate+0x324
ffffef0d`6d676360 fffff807`416d4084 : 00000000`00000000 fffff807`41db418e 00000000`00000080 ffffdf06`d187bb00 : nt!IofCallDriver+0x55
ffffef0d`6d6763a0 fffff807`41a4f829 : ffffef0d`6d676650 ffffdf06`d187b8f0 ffffdf06`d70527d8 ffffef0d`6d670001 : nt!IoCallDriverWithTracing+0x34
ffffef0d`6d6763f0 fffff807`41a42757 : ffffdf06`d187b8f0 ffffdf06`d187b800 ffffdf06`d9d38a20 ffffa68e`4f3fe001 : nt!IopParseDevice+0x11a9
ffffef0d`6d676550 fffff807`41acec8a : ffffdf06`d9d38a01 ffffef0d`6d6767b8 00000000`00000040 ffffdf06`cdf02a60 : nt!ObpLookupObjectName+0x1117
ffffef0d`6d676720 fffff807`41a0ccb5 : ffffef0d`00000000 00000000`0842d870 00000000`0842dd00 00000000`0842d840 : nt!ObOpenObjectByNameEx+0x1fa
ffffef0d`6d676850 fffff807`41811505 : ffffdf06`d56c3080 00000000`00000000 ffffdf06`d56c3080 00000000`00000000 : nt!NtQueryAttributesFile+0x1c5
ffffef0d`6d676b00 00007ff8`dc1cdd44 : 00007ff8`d99c8c45 00000000`0842dc40 00000000`00000000 00000000`0cf405c0 : nt!KiSystemServiceCopyEnd+0x25
00000000`0842d808 00007ff8`d99c8c45 : 00000000`0842dc40 00000000`00000000 00000000`0cf405c0 00000000`00000054 : ntdll!NtQueryAttributesFile+0x14
00000000`0842d810 00007ff8`da9621ca : 00000000`00000000 00000000`0842db90 00000000`00000000 00000000`00000000 : KERNELBASE!GetFileAttributesW+0x85
00000000`0842d8b0 00007ff8`d78d8e51 : 00000000`00000000 00000000`00000032 00000000`0842dc40 00000000`00000007 : shlwapi!PathFileExistsAndAttributesW+0x5a
00000000`0842db40 00007ff8`d798042a : 00000000`00000040 00000000`00000000 00000000`00000000 00000000`00000001 : windows_storage!CDrivesFolder::GetAttributesOf+0x151
00000000`0842dcc0 00007ff8`d791f3af : 00000000`0112de20 00000000`00000000 00000000`00000000 00000000`00000007 : windows_storage!CRegFolder::GetAttributesOf+0x1aa
00000000`0842dd60 00007ff8`d78d6ac6 : 00000000`0000001f 00000000`08a41fd0 00000000`00000000 00000000`00000000 : windows_storage!SHILAliasTranslate+0x8af
00000000`0842e1b0 00007ff8`d78eaaa4 : 00000000`80070057 00000000`061f0500 00000000`00000000 00000000`00000000 : windows_storage!CDesktopFolder::ParseDisplayName+0xce6
00000000`0842ebe0 00007ff8`db6a1027 : 00000000`0d0856b0 00000000`0842ee00 00000000`0d0856b0 00000000`0000000f : windows_storage!CRegFolder::ParseDisplayName+0x134
00000000`0842ed00 00007ff8`db69f105 : 00007ff8`dbbf29b0 00000000`00000001 00000000`00000000 00000000`0842f560 : SHELL32!ReparseRelativeIDListInternal+0x417
00000000`0842f460 00007ff8`db698355 : 00000000`03589a68 00000000`03589a68 00000000`03589a68 00000000`00000000 : SHELL32!CAnyAlias::v_SendNotification+0x165
00000000`0842f5c0 00007ff8`dac1ef5c : 00000000`00000000 00000000`00000008 00000000`00000001 00000000`000100be : SHELL32!CChangeNotify::s_WndProc+0x615
00000000`0842f710 00007ff8`dac1e684 : 00000000`00000000 00007ff8`db697d40 00000000`00e7b800 00000000`017d7c40 : user32!UserCallWinProcCheckWow+0x50c
00000000`0842f8a0 00007ff8`db6c9905 : 00007ff8`db697d40 00000000`00000001 00000000`061d8be0 00000000`06219180 : user32!DispatchMessageWorker+0x494
00000000`0842f920 00007ff8`db6c934e : 00000000`00000000 00000000`00000000 00000000`061d8be0 00007ff8`dbc47f20 : SHELL32!CChangeNotify::_MessagePump+0x525
00000000`0842fa60 00007ff8`daf0bd19 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000218 : SHELL32!CChangeNotify::s_ThreadProc+0x15e
00000000`0842fb20 00007ff8`db057374 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : shcore!_WrapperThreadProc+0xe9
00000000`0842fc00 00007ff8`dc17cc91 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x14
00000000`0842fc30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21