Difference between
modified post 0d2bdfea by Anonymous on Sun 25th Feb 2024 19:56
original post f5f4af by Anonymous on Sun 25th Feb 2024 19:40
Download diff
Show
old version |
new version |
both versions
| 1 | 1 | !analyze -v | |
| 2 | 2 | ******************************************************************************* | |
| 3 | 3 | * * | |
| 4 | 4 | * Bugcheck Analysis * | |
| 5 | 5 | * * | |
| 6 | 6 | ******************************************************************************* | |
| 7 | 7 | ||
| 8 | 8 | RDR_FILE_SYSTEM (27) | |
| 9 | 9 | If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the | |
| 10 | 10 | exception record and context record. Do a .cxr on the 3rd parameter and then kb to | |
| 11 | 11 | obtain a more informative stack trace. | |
| 12 | 12 | The high 16 bits of the first parameter is the RDBSS BugCheck code, which is defined | |
| 13 | 13 | as follows: | |
| 14 | 14 | RDBSS_BUG_CHECK_CACHESUP = 0xca550000, | |
| 15 | 15 | RDBSS_BUG_CHECK_CLEANUP = 0xc1ee0000, | |
| 16 | 16 | RDBSS_BUG_CHECK_CLOSE = 0xc10e0000, | |
| 17 | 17 | RDBSS_BUG_CHECK_NTEXCEPT = 0xbaad0000, | |
| 18 | 18 | Arguments: | |
| 19 | 19 | Arg1: 00000000baad0080 | |
| 20 | 20 | Arg2: ffff850d705deea8 | |
| 21 | 21 | Arg3: ffff850d705de6e0 | |
| 22 | 22 | Arg4: fffff8031d045c54 | |
| 23 | 23 | ||
| 24 | 24 | Debugging Details: | |
| 25 | 25 | ------------------ | |
| 26 | 26 | ||
| 27 | 27 | ||
| 28 | 28 | KEY_VALUES_STRING: 1 | |
| 29 | 29 | ||
| 30 | 30 | Key : AV.Fault | |
| 31 | 31 | Value: Read | |
| 32 | 32 | ||
| 33 | 33 | Key : Analysis.CPU.mSec | |
| 34 | 34 | Value: 4468 | |
| 35 | 35 | ||
| 36 | 36 | Key : Analysis.Elapsed.mSec | |
| 37 | 37 | Value: 4475 | |
| 38 | 38 | ||
| 39 | 39 | Key : Analysis.IO.Other.Mb | |
| 40 | 40 | Value: 4 | |
| 41 | 41 | ||
| 42 | 42 | Key : Analysis.IO.Read.Mb | |
| 43 | 43 | Value: 1 | |
| 44 | 44 | ||
| 45 | 45 | Key : Analysis.IO.Write.Mb | |
| 46 | 46 | Value: 38 | |
| 47 | 47 | ||
| 48 | 48 | Key : Analysis.Init.CPU.mSec | |
| 49 | 49 | Value: 11765 | |
| 50 | 50 | ||
| 51 | 51 | Key : Analysis.Init.Elapsed.mSec | |
| 52 | 52 | Value: 648327 | |
| 53 | 53 | ||
| 54 | 54 | Key : Analysis.Memory.CommitPeak.Mb | |
| 55 | 55 | Value: 149 | |
| 56 | 56 | ||
| 57 | 57 | Key : Bugcheck.Code.KiBugCheckData | |
| 58 | 58 | Value: 0x27 | |
| 59 | 59 | ||
| 60 | 60 | Key : Bugcheck.Code.LegacyAPI | |
| 61 | 61 | Value: 0x27 | |
| 62 | 62 | ||
| 63 | 63 | Key : Failure.Bucket | |
| 64 | 64 | Value: 0x27_nfs41_driver!handle_upcall | |
| 65 | 65 | ||
| 66 | 66 | Key : Failure.Hash | |
| 67 | 67 | Value: {8cc3c03c-4f74-c78a-fa41-0d8f60b7b819} | |
| 68 | 68 | ||
| 69 | 69 | Key : Hypervisor.Enlightenments.Value | |
| 70 | 70 | Value: 0 | |
| 71 | 71 | ||
| 72 | 72 | Key : Hypervisor.Enlightenments.ValueHex | |
| 73 | 73 | Value: 0 | |
| 74 | 74 | ||
| 75 | 75 | Key : Hypervisor.Flags.AnyHypervisorPresent | |
| 76 | 76 | Value: 0 | |
| 77 | 77 | ||
| 78 | 78 | Key : Hypervisor.Flags.ApicEnlightened | |
| 79 | 79 | Value: 0 | |
| 80 | 80 | ||
| 81 | 81 | Key : Hypervisor.Flags.ApicVirtualizationAvailable | |
| 82 | 82 | Value: 0 | |
| 83 | 83 | ||
| 84 | 84 | Key : Hypervisor.Flags.AsyncMemoryHint | |
| 85 | 85 | Value: 0 | |
| 86 | 86 | ||
| 87 | 87 | Key : Hypervisor.Flags.CoreSchedulerRequested | |
| 88 | 88 | Value: 0 | |
| 89 | 89 | ||
| 90 | 90 | Key : Hypervisor.Flags.CpuManager | |
| 91 | 91 | Value: 0 | |
| 92 | 92 | ||
| 93 | 93 | Key : Hypervisor.Flags.DeprecateAutoEoi | |
| 94 | 94 | Value: 0 | |
| 95 | 95 | ||
| 96 | 96 | Key : Hypervisor.Flags.DynamicCpuDisabled | |
| 97 | 97 | Value: 0 | |
| 98 | 98 | ||
| 99 | 99 | Key : Hypervisor.Flags.Epf | |
| 100 | 100 | Value: 0 | |
| 101 | 101 | ||
| 102 | 102 | Key : Hypervisor.Flags.ExtendedProcessorMasks | |
| 103 | 103 | Value: 0 | |
| 104 | 104 | ||
| 105 | 105 | Key : Hypervisor.Flags.HardwareMbecAvailable | |
| 106 | 106 | Value: 0 | |
| 107 | 107 | ||
| 108 | 108 | Key : Hypervisor.Flags.MaxBankNumber | |
| 109 | 109 | Value: 0 | |
| 110 | 110 | ||
| 111 | 111 | Key : Hypervisor.Flags.MemoryZeroingControl | |
| 112 | 112 | Value: 0 | |
| 113 | 113 | ||
| 114 | 114 | Key : Hypervisor.Flags.NoExtendedRangeFlush | |
| 115 | 115 | Value: 0 | |
| 116 | 116 | ||
| 117 | 117 | Key : Hypervisor.Flags.NoNonArchCoreSharing | |
| 118 | 118 | Value: 0 | |
| 119 | 119 | ||
| 120 | 120 | Key : Hypervisor.Flags.Phase0InitDone | |
| 121 | 121 | Value: 0 | |
| 122 | 122 | ||
| 123 | 123 | Key : Hypervisor.Flags.PowerSchedulerQos | |
| 124 | 124 | Value: 0 | |
| 125 | 125 | ||
| 126 | 126 | Key : Hypervisor.Flags.RootScheduler | |
| 127 | 127 | Value: 0 | |
| 128 | 128 | ||
| 129 | 129 | Key : Hypervisor.Flags.SynicAvailable | |
| 130 | 130 | Value: 0 | |
| 131 | 131 | ||
| 132 | 132 | Key : Hypervisor.Flags.UseQpcBias | |
| 133 | 133 | Value: 0 | |
| 134 | 134 | ||
| 135 | 135 | Key : Hypervisor.Flags.Value | |
| 136 | 136 | Value: 0 | |
| 137 | 137 | ||
| 138 | 138 | Key : Hypervisor.Flags.ValueHex | |
| 139 | 139 | Value: 0 | |
| 140 | 140 | ||
| 141 | 141 | Key : Hypervisor.Flags.VpAssistPage | |
| 142 | 142 | Value: 0 | |
| 143 | 143 | ||
| 144 | 144 | Key : Hypervisor.Flags.VsmAvailable | |
| 145 | 145 | Value: 0 | |
| 146 | 146 | ||
| 147 | 147 | Key : Hypervisor.RootFlags.AccessStats | |
| 148 | 148 | Value: 0 | |
| 149 | 149 | ||
| 150 | 150 | Key : Hypervisor.RootFlags.CrashdumpEnlightened | |
| 151 | 151 | Value: 0 | |
| 152 | 152 | ||
| 153 | 153 | Key : Hypervisor.RootFlags.CreateVirtualProcessor | |
| 154 | 154 | Value: 0 | |
| 155 | 155 | ||
| 156 | 156 | Key : Hypervisor.RootFlags.DisableHyperthreading | |
| 157 | 157 | Value: 0 | |
| 158 | 158 | ||
| 159 | 159 | Key : Hypervisor.RootFlags.HostTimelineSync | |
| 160 | 160 | Value: 0 | |
| 161 | 161 | ||
| 162 | 162 | Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled | |
| 163 | 163 | Value: 0 | |
| 164 | 164 | ||
| 165 | 165 | Key : Hypervisor.RootFlags.IsHyperV | |
| 166 | 166 | Value: 0 | |
| 167 | 167 | ||
| 168 | 168 | Key : Hypervisor.RootFlags.LivedumpEnlightened | |
| 169 | 169 | Value: 0 | |
| 170 | 170 | ||
| 171 | 171 | Key : Hypervisor.RootFlags.MapDeviceInterrupt | |
| 172 | 172 | Value: 0 | |
| 173 | 173 | ||
| 174 | 174 | Key : Hypervisor.RootFlags.MceEnlightened | |
| 175 | 175 | Value: 0 | |
| 176 | 176 | ||
| 177 | 177 | Key : Hypervisor.RootFlags.Nested | |
| 178 | 178 | Value: 0 | |
| 179 | 179 | ||
| 180 | 180 | Key : Hypervisor.RootFlags.StartLogicalProcessor | |
| 181 | 181 | Value: 0 | |
| 182 | 182 | ||
| 183 | 183 | Key : Hypervisor.RootFlags.Value | |
| 184 | 184 | Value: 0 | |
| 185 | 185 | ||
| 186 | 186 | Key : Hypervisor.RootFlags.ValueHex | |
| 187 | 187 | Value: 0 | |
| 188 | 188 | ||
| 189 | 189 | Key : SecureKernel.HalpHvciEnabled | |
| 190 | 190 | Value: 0 | |
| 191 | 191 | ||
| 192 | 192 | Key : WER.OS.Branch | |
| 193 | 193 | Value: vb_release | |
| 194 | 194 | ||
| 195 | 195 | Key : WER.OS.Version | |
| 196 | 196 | Value: 10.0.19041.1 | |
| 197 | 197 | ||
| 198 | 198 | ||
| 199 | 199 | BUGCHECK_CODE: 27 | |
| 200 | 200 | ||
| 201 | 201 | BUGCHECK_P1: baad0080 | |
| 202 | 202 | ||
| 203 | 203 | BUGCHECK_P2: ffff850d705deea8 | |
| 204 | 204 | ||
| 205 | 205 | BUGCHECK_P3: ffff850d705de6e0 | |
| 206 | 206 | ||
| 207 | 207 | BUGCHECK_P4: fffff8031d045c54 | |
| 208 | 208 | ||
| 209 | 209 | FILE_IN_CAB: MEMORY.DMP | |
| 210 | 210 | ||
| 211 | 211 | EXCEPTION_RECORD: ffff850d705deea8 -- (.exr 0xffff850d705deea8) | |
| 212 | 212 | ExceptionAddress: fffff8031d045c54 (nt!ObfReferenceObject+0x0000000000000024) | |
| 213 | 213 | ExceptionCode: c0000005 (Access violation) | |
| 214 | 214 | ExceptionFlags: 00000000 | |
| 215 | 215 | NumberParameters: 2 | |
| 216 | 216 | Parameter[0]: 0000000000000000 | |
| 217 | 217 | Parameter[1]: ffffffffffffffff | |
| 218 | 218 | Attempt to read from address ffffffffffffffff | |
| 219 | 219 | ||
| 220 | 220 | CONTEXT: ffff850d705de6e0 -- (.cxr 0xffff850d705de6e0) | |
| 221 | 221 | rax=ffffb78486a4f499 rbx=0000000000000001 rcx=006b007300690064 | |
| 222 | 222 | rdx=ffffb78486a4f490 rsi=006b007300690064 rdi=ffffa301dcbf6080 | |
| 223 | 223 | rip=fffff8031d045c54 rsp=ffff850d705df0e0 rbp=0000000000000000 | |
| 224 | 224 | r8=ffffb78486a4f49a r9=ffffb78486a4f490 r10=ffffa301dcbf6080 | |
| 225 | 225 | r11=ffff850d705df1b0 r12=0000000000000000 r13=ffffa301dc4d5538 | |
| 226 | 226 | r14=ffffb78486a4f490 r15=0000000000000001 | |
| 227 | 227 | iopl=0 nv up ei pl zr na po nc | |
| 228 | 228 | cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050246 | |
| 229 | 229 | nt!ObfReferenceObject+0x24: | |
| 230 | 230 | fffff803`1d045c54 f0480fc15ed0 lock xadd qword ptr [rsi-30h],rbx ds:002b:006b0073`00690034=???????????????? | |
| 231 | 231 | Resetting default scope | |
| 232 | 232 | ||
| 233 | 233 | BLACKBOXBSD: 1 (!blackboxbsd) | |
| 234 | 234 | ||
| 235 | 235 | ||
| 236 | 236 | BLACKBOXNTFS: 1 (!blackboxntfs) | |
| 237 | 237 | ||
| 238 | 238 | ||
| 239 | 239 | BLACKBOXPNP: 1 (!blackboxpnp) | |
| 240 | 240 | ||
| 241 | 241 | ||
| 242 | 242 | BLACKBOXWINLOGON: 1 | |
| 243 | 243 | ||
| 244 | 244 | PROCESS_NAME: nfsd_debug.exe | |
| 245 | 245 | ||
| 246 | 246 | READ_ADDRESS: ffffffffffffffff | |
| 247 | 247 | ||
| 248 | 248 | ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden. | |
| 249 | 249 | ||
| 250 | 250 | EXCEPTION_CODE_STR: c0000005 | |
| 251 | 251 | ||
| 252 | 252 | EXCEPTION_PARAMETER1: 0000000000000000 | |
| 253 | 253 | ||
| 254 | 254 | EXCEPTION_PARAMETER2: ffffffffffffffff | |
| 255 | 255 | ||
| 256 | 256 | EXCEPTION_STR: 0xc0000005 | |
| 257 | 257 | ||
| 258 | 258 | STACK_TEXT: | |
| 259 | 259 | ffff850d`705df0e0 fffff803`1d44060b : 00000000`00000000 006b0073`00690064 00000000`00000000 ffff850d`00000000 : nt!ObfReferenceObject+0x24 | |
| 260 | 260 | ffff850d`705df120 fffff803`1d4dd695 : 00000000`00000000 fffff803`00000000 ffffa301`e09df010 ffff850d`705df258 : nt!PsImpersonateClient+0x15b | |
| 261 | 261 | ffff850d`705df1b0 fffff803`237748c9 : 00000000`00000001 ffffa301`dbc6dde0 fffff803`23790e40 fffff803`1d043640 : nt!SeImpersonateClientEx+0x35 | |
| 262 | 262 | ffff850d`705df1f0 fffff803`23780697 : ffffa301`e09df010 ffffa301`d3f150f0 ffff850d`705df278 00000000`00000000 : nfs41_driver!handle_upcall+0x59 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1367] | |
| 263 | 263 | ffff850d`705df240 fffff803`23779fe8 : ffffa301`e09df010 ffff850d`00282018 00000000`00000000 ffffa301`de6e4870 : nfs41_driver!nfs41_upcall+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1578] | |
| 264 | 264 | ffff850d`705df2b0 fffff803`237a6976 : ffffa301`e09df010 ffffa301`d766a710 00000000`00000002 ffffa301`e09df010 : nfs41_driver!nfs41_DevFcbXXXControlFile+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2418] | |
| 265 | 265 | ffff850d`705df330 fffff803`237a6698 : ffffa301`e09df010 ffffa301`e09df010 ffffa301`d766a700 ffffa301`e09df010 : nfs41_driver!RxXXXControlFileCallthru+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130] | |
| 266 | 266 | ffff850d`705df360 fffff803`23786062 : 00000000`00000000 ffffa301`dbc6dde0 ffffa301`d766a701 00000000`00000000 : nfs41_driver!RxCommonDevFCBIoCtl+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491] | |
| 267 | 267 | ffff850d`705df390 fffff803`2379d97d : fffff803`23790370 ffffa301`d3e02100 ffffffff`ffffffff ffffa301`d766a710 : nfs41_driver!RxFsdCommonDispatch+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848] | |
| 268 | 268 | ffff850d`705df490 fffff803`2377ab37 : ffffa301`ddcf9540 00000000`00000002 00000000`00000000 00000000`00000001 : nfs41_driver!RxFsdDispatch+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442] | |
| 269 | 269 | ffff850d`705df4c0 fffff803`1d035cf5 : ffffa301`d766a710 ffffa301`dbc6dde0 ffffa301`dcbf6730 fffff803`1d04561b : nfs41_driver!nfs41_FsdDispatch+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6863] | |
| 270 | 270 | ffff850d`705df500 fffff803`2187f248 : fffff803`21878000 00000000`00000000 ffffa301`d4f87b40 ffffa301`d9b9d188 : nt!IofCallDriver+0x55 | |
| 271 | 271 | ffff850d`705df540 fffff803`2187ed99 : ffffb784`7dcff5f0 00000000`00000000 fffff803`21878000 00000000`00000000 : mup!MupiCallUncProvider+0xb8 | |
| 272 | 272 | ffff850d`705df5b0 fffff803`2187ecce : ffffa301`dbc6dde0 ffffa301`d9b9d180 ffffa301`de6e47d0 00000000`00000000 : mup!MupStateMachine+0x59 | |
| 273 | 273 | ffff850d`705df5e0 fffff803`1d035cf5 : ffffa301`de6e47d0 00000000`00000000 ffffa301`ddcf9540 00000000`00000001 : mup!MupFsdIrpPassThrough+0x17e | |
| 274 | 274 | ffff850d`705df650 fffff803`1abe4a76 : 00000000`00282018 ffff850d`705df850 ffffa301`d766a710 fffff803`1d4461f1 : nt!IofCallDriver+0x55 | |
| 275 | 275 | ffff850d`705df690 fffff803`1d035cf5 : 00000000`00000002 ffffa301`dbc6dfd0 ffff850d`20206f49 ffff850d`705df850 : FLTMGR!FltpDispatch+0xd6 | |
| 276 | 276 | ffff850d`705df6f0 fffff803`1d4451dc : 00000000`00000001 00000000`00282018 ffffa301`de6e47d0 ffffa301`dc4d5080 : nt!IofCallDriver+0x55 | |
| 277 | 277 | ffff850d`705df730 fffff803`1d444e33 : 00000000`00282018 ffff850d`705dfa80 00000000`00000000 00000000`00282018 : nt!IopSynchronousServiceTail+0x34c | |
| 278 | 278 | ffff850d`705df7d0 fffff803`1d444106 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xd13 | |
| 279 | 279 | ffff850d`705df920 fffff803`1d211135 : 00000000`00000000 fffff803`00000001 00000000`00000000 00007ffb`3e034a78 : nt!NtDeviceIoControlFile+0x56 | |
| 280 | 280 | ffff850d`705df990 00007ffb`5b6ad0c4 : 00007ffb`58f5591b 00000023`167faa00 00007ff7`4d10402e 00007ff7`4d24e42b : nt!KiSystemServiceCopyEnd+0x25 | |
| 281 | 281 | 00000023`167fa9a8 00007ffb`58f5591b : 00000023`167faa00 00007ff7`4d10402e 00007ff7`4d24e42b 00000023`00000000 : ntdll!NtDeviceIoControlFile+0x14 | |
| 282 | 282 | 00000023`167fa9b0 00007ffb`5a6e5921 : 00000000`00282018 00000000`00000000 00000000`00000000 00000000`00000000 : KERNELBASE!DeviceIoControl+0x6b | |
| 283 | 283 | 00000023`167faa20 00007ff7`4d0d7a74 : 00000000`00000000 00000023`167fcae4 00000023`167faab0 00000000`00000000 : KERNEL32!DeviceIoControlImplementation+0x81 | |
| 284 | 284 | 00000023`167faa70 00007ff7`4d0d795b : 00007ff7`4d236010 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd_debug+0xc7a74 | |
| 285 | 285 | 00000023`167ffde0 00007ff7`4d181ce0 : 00007ff7`4d236010 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd_debug+0xc795b | |
| 286 | 286 | 00000023`167ffe60 00007ffb`5a6e7344 : 000001ab`1ea57a30 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd_debug+0x171ce0 | |
| 287 | 287 | 00000023`167ffec0 00007ffb`5b6626b1 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x14 | |
| 288 | 288 | 00000023`167ffef0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21 | |
| 289 | 289 | ||
| 290 | 290 | ||
| 291 | 291 | FAULTING_SOURCE_LINE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c | |
| 292 | 292 | ||
| 293 | 293 | FAULTING_SOURCE_FILE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c | |
| 294 | 294 | ||
| 295 | 295 | FAULTING_SOURCE_LINE_NUMBER: 1367 | |
| 296 | 296 | ||
| 297 | 297 | FAULTING_SOURCE_CODE: | |
| 298 | 298 | No source found for 'C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c' | |
| 299 | 299 | ||
| 300 | 300 | ||
| 301 | 301 | SYMBOL_NAME: nfs41_driver!handle_upcall+59 | |
| 302 | 302 | ||
| 303 | 303 | MODULE_NAME: nfs41_driver | |
| 304 | 304 | ||
| 305 | 305 | IMAGE_NAME: nfs41_driver.sys | |
| 306 | 306 | ||
| 307 | 307 | STACK_COMMAND: .cxr 0xffff850d705de6e0 ; kb | |
| 308 | 308 | ||
| 309 | 309 | BUCKET_ID_FUNC_OFFSET: 59 | |
| 310 | 310 | ||
| 311 | 311 | FAILURE_BUCKET_ID: 0x27_nfs41_driver!handle_upcall | |
| 312 | 312 | ||
| 313 | 313 | OS_VERSION: 10.0.19041.1 | |
| 314 | 314 | ||
| 315 | 315 | BUILDLAB_STR: vb_release | |
| 316 | 316 | ||
| 317 | 317 | OSPLATFORM_TYPE: x64 | |
| 318 | 318 | ||
| 319 | 319 | OSNAME: Windows 10 | |
| 320 | 320 | ||
| 321 | 321 | FAILURE_ID_HASH: {8cc3c03c-4f74-c78a-fa41-0d8f60b7b819} | |
| 322 | 322 | ||
| 323 | 323 | Followup: MachineOwner | |
| 324 | 324 | --------- | |
| 325 | 325 | ||
| 326 | 326 | ||
| 327 | - | ||
| 327 | + | kp | |
| 328 | - | ||
| 328 | + | # Child-SP RetAddr Call Site | |
| 329 | - | ||
| 329 | + | 00 ffff850d`705dde38 fffff803`237877d9 nt!KeBugCheckEx | |
| 330 | - | ||
| 330 | + | 01 ffff850d`705dde40 fffff803`23788fa0 nfs41_driver!RxExceptionFilter(struct _RX_CONTEXT * RxContext = 0xffffa301`e09df010, struct _EXCEPTION_POINTERS * ExceptionPointer = 0xffff850d`705ddf20)+0x159 [base\fs\rdr2\rdbss\ntexcept.c @ 126] | |
| 331 | - | ||
| 331 | + | 02 ffff850d`705ddeb0 fffff803`1d1d019f nfs41_driver!RxFsdCommonDispatch$filt$0+0x15 [base\fs\rdr2\rdbss\ntfsd.c @ 876] | |
| 332 | - | ||
| 332 | + | 03 ffff850d`705ddef0 fffff803`1d207e6f nt!_C_specific_handler+0x9f | |
| 333 | - | ||
| 333 | + | 04 ffff850d`705ddf60 fffff803`1d0ab207 nt!RtlpExecuteHandlerForException+0xf | |
| 334 | - | ||
| 334 | + | 05 ffff850d`705ddf90 fffff803`1d1394f6 nt!RtlDispatchException+0x297 | |
| 335 | - | ||
| 335 | + | 06 ffff850d`705de6b0 fffff803`1d211aec nt!KiDispatchException+0x186 | |
| 336 | - | ||
| 336 | + | 07 ffff850d`705ded70 fffff803`1d20cfda nt!KiExceptionDispatch+0x12c | |
| 337 | - | ||
| 337 | + | 08 ffff850d`705def50 fffff803`1d045c54 nt!KiGeneralProtectionFault+0x31a | |
| 338 | - | ||
| 338 | + | 09 ffff850d`705df0e0 fffff803`1d44060b nt!ObfReferenceObject+0x24 | |
| 339 | - | ||
| 339 | + | 0a ffff850d`705df120 fffff803`1d4dd695 nt!PsImpersonateClient+0x15b | |
| 340 | - | ||
| 340 | + | 0b ffff850d`705df1b0 fffff803`237748c9 nt!SeImpersonateClientEx+0x35 | |
| 341 | - | ||
| 341 | + | 0c ffff850d`705df1f0 fffff803`23780697 nfs41_driver!handle_upcall(struct _RX_CONTEXT * RxContext = 0xffffa301`e09df010, struct _updowncall_entry * entry = 0xffffa301`d3f150f0, unsigned long * len = 0xffff850d`705df278)+0x59 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1367] | |
| 342 | - | ||
| 342 | + | 0d ffff850d`705df240 fffff803`23779fe8 nfs41_driver!nfs41_upcall(struct _RX_CONTEXT * RxContext = 0xffffa301`e09df010)+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1578] | |
| 343 | - | ||
| 343 | + | 0e ffff850d`705df2b0 fffff803`237a6976 nfs41_driver!nfs41_DevFcbXXXControlFile(struct _RX_CONTEXT * RxContext = 0xffffa301`e09df010)+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2418] | |
| 344 | - | ||
| 344 | + | 0f ffff850d`705df330 fffff803`237a6698 nfs41_driver!RxXXXControlFileCallthru(struct _RX_CONTEXT * RxContext = 0xffffa301`e09df010, struct _IRP * Irp = 0xffffa301`dbc6dde0)+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130] | |
| 345 | - | ||
| 345 | + | 10 ffff850d`705df360 fffff803`23786062 nfs41_driver!RxCommonDevFCBIoCtl(struct _RX_CONTEXT * RxContext = 0xffffa301`e09df010, struct _IRP * Irp = <Value unavailable error>)+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491] | |
| 346 | - | ||
| 346 | + | 11 ffff850d`705df390 fffff803`2379d97d nfs41_driver!RxFsdCommonDispatch(struct _RX_FSD_DISPATCH_VECTOR * DispatchVector = 0xfffff803`23790370, struct _IRP * Irp = 0xffffa301`dbc6dde0, struct _FILE_OBJECT * FileObject = 0xffffffff`ffffffff, struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = 0xffffa301`d766a710)+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848] | |
| 347 | - | ||
| 347 | + | 12 ffff850d`705df490 fffff803`2377ab37 nfs41_driver!RxFsdDispatch(struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = <Value unavailable error>, struct _IRP * Irp = <Value unavailable error>)+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442] | |
| 348 | - | ||
| 348 | + | 13 ffff850d`705df4c0 fffff803`1d035cf5 nfs41_driver!nfs41_FsdDispatch(struct _DEVICE_OBJECT * dev = 0xffffa301`d766a710 Device for "\FileSystem\nfs41_driver", struct _IRP * Irp = 0xffffa301`dbc6dde0)+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6863] | |
| 349 | - | ||
| 349 | + | 14 ffff850d`705df500 fffff803`2187f248 nt!IofCallDriver+0x55 | |
| 350 | - | ||
| 350 | + | 15 ffff850d`705df540 fffff803`2187ed99 mup!MupiCallUncProvider+0xb8 | |
| 351 | - | ||
| 351 | + | 16 ffff850d`705df5b0 fffff803`2187ecce mup!MupStateMachine+0x59 | |
| 352 | - | ||
| 352 | + | 17 ffff850d`705df5e0 fffff803`1d035cf5 mup!MupFsdIrpPassThrough+0x17e | |
| 353 | - | ||
| 353 | + | 18 ffff850d`705df650 fffff803`1abe4a76 nt!IofCallDriver+0x55 | |
| 354 | - | ||
| 354 | + | 19 ffff850d`705df690 fffff803`1d035cf5 FLTMGR!FltpDispatch+0xd6 | |
| 355 | - | ||
| 355 | + | 1a ffff850d`705df6f0 fffff803`1d4451dc nt!IofCallDriver+0x55 | |
| 356 | - | ||
| 356 | + | 1b ffff850d`705df730 fffff803`1d444e33 nt!IopSynchronousServiceTail+0x34c | |
| 357 | - | ||
| 357 | + | 1c ffff850d`705df7d0 fffff803`1d444106 nt!IopXxxControlFile+0xd13 | |
| 358 | - | ||
| 358 | + | 1d ffff850d`705df920 fffff803`1d211135 nt!NtDeviceIoControlFile+0x56 | |
| 359 | - | ||
| 359 | + | 1e ffff850d`705df990 00007ffb`5b6ad0c4 nt!KiSystemServiceCopyEnd+0x25 | |
| 360 | - | ||
| 360 | + | 1f 00000023`167fa9a8 00007ffb`58f5591b ntdll!NtDeviceIoControlFile+0x14 | |
| 361 | - | ||
| 361 | + | 20 00000023`167fa9b0 00007ffb`5a6e5921 KERNELBASE!DeviceIoControl+0x6b | |
| 362 | - | ||
| 362 | + | 21 00000023`167faa20 00007ff7`4d0d7a74 KERNEL32!DeviceIoControlImplementation+0x81 | |
| 363 | - | ||
| 363 | + | 22 00000023`167faa70 00007ff7`4d0d795b nfsd_debug+0xc7a74 | |
| 364 | - | ||
| 364 | + | 23 00000023`167ffde0 00007ff7`4d181ce0 nfsd_debug+0xc795b | |
| 365 | - | ||
| 365 | + | 24 00000023`167ffe60 00007ffb`5a6e7344 nfsd_debug+0x171ce0 | |
| 366 | - | ||
| 366 | + | 25 00000023`167ffec0 00007ffb`5b6626b1 KERNEL32!BaseThreadInitThunk+0x14 | |
| 367 | - | ||
| 367 | + | 26 00000023`167ffef0 00000000`00000000 ntdll!RtlUserThreadStart+0x21 | |
| 368 | - | ||
| 368 | + | 0: kd> .frame 0n12;dv /t /v | |
| 369 | - | ||
| 369 | + | 0c ffff850d`705df1f0 fffff803`23780697 nfs41_driver!handle_upcall+0x59 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1367] | |
| 370 | - | ||
| 370 | + | ffff850d`705df240 struct _RX_CONTEXT * RxContext = 0xffffa301`e09df010 | |
| 371 | - | ||
| 371 | + | ffff850d`705df248 struct _updowncall_entry * entry = 0xffffa301`d3f150f0 | |
| 372 | - | ||
| 372 | + | ffff850d`705df250 unsigned long * len = 0xffff850d`705df278 | |
| 373 | - | ||
| 373 | + | ffff850d`705df214 unsigned long cbOut = 0x2000 | |
| 374 | - | ||
| 374 | + | ffff850d`705df220 unsigned char * pbOut = 0xffffa301`df5f7000 "" | |
| 375 | - | ||
| 375 | + | ffff850d`705df228 struct _LOWIO_CONTEXT * LowIoContext = 0xffffa301`e09df1a8 | |
| 376 | - | ||
| 376 | + | ffff850d`705df210 long status = 0n0 | |
| 377 | - | ||
| 377 | + | 0: kd> dx -r1 ((nfs41_driver!_updowncall_entry *)0xffffa301d3f150f0) | |
| 378 | - | ||
| 378 | + | ((nfs41_driver!_updowncall_entry *)0xffffa301d3f150f0) : 0xffffa301d3f150f0 [Type: _updowncall_entry *] | |
| 379 | - | ||
| 379 | + | [+0x000] version : 0x965e2 [Type: unsigned long] | |
| 380 | - | ||
| 380 | + | [+0x008] xid : 203853528 [Type: __int64] | |
| 381 | - | ||
| 381 | + | [+0x010] opcode : 0x9 [Type: unsigned long] | |
| 382 | - | ||
| 382 | + | [+0x014] status : 0 [Type: long] | |
| 383 | - | ||
| 383 | + | [+0x018] state : NFS41_WAITING_FOR_UPCALL (0) [Type: _nfs41_updowncall_state] | |
| 384 | - | ||
| 384 | + | [+0x020] lock [Type: _FAST_MUTEX] | |
| 385 | - | ||
| 385 | + | [+0x058] next [Type: _LIST_ENTRY] | |
| 386 | - | ||
| 386 | + | [+0x068] cond [Type: _KEVENT] | |
| 387 | - | ||
| 387 | + | [+0x080] errno : 0x0 [Type: unsigned long] | |
| 388 | - | ||
| 388 | + | [+0x084] async_op : 0x0 [Type: unsigned char] | |
| 389 | - | ||
| 389 | + | [+0x088] sec_ctx [Type: _SECURITY_CLIENT_CONTEXT] | |
| 390 | - | ||
| 390 | + | [+0x0d0] psec_ctx : 0xffffb784b66ec7c0 [Type: _SECURITY_CLIENT_CONTEXT *] | |
| 391 | - | ||
| 391 | + | [+0x0d8] open_state : 0x1da6815de179e6d [Type: void *] | |
| 392 | - | ||
| 392 | + | [+0x0e0] session : 0x1ab1ea34b20 [Type: void *] | |
| 393 | - | ||
| 393 | + | [+0x0e8] filename : 0xfffff8032378a298 : "" [Type: _UNICODE_STRING *] | |
| 394 | - | ||
| 394 | + | [+0x0f0] buf : 0xffff850d6c7ffac8 [Type: void *] | |
| 395 | - | ||
| 395 | + | [+0x0f8] buf_len : 0x28 [Type: unsigned long] | |
| 396 | - | ||
| 396 | + | [+0x100] ChangeTime : 0x0 [Type: unsigned __int64] | |
| 397 | - | ||
| 397 | + | [+0x108] u [Type: <unnamed-tag>] | |
| 398 | - | ||
| 398 | + | 0: kd> dx -r1 (*((nfs41_driver!_SECURITY_CLIENT_CONTEXT *)0xffffa301d3f15178)) | |
| 399 | - | ||
| 399 | + | (*((nfs41_driver!_SECURITY_CLIENT_CONTEXT *)0xffffa301d3f15178)) [Type: _SECURITY_CLIENT_CONTEXT] | |
| 400 | - | ||
| 400 | + | [+0x000] SecurityQos [Type: _SECURITY_QUALITY_OF_SERVICE] | |
| 401 | - | ||
| 401 | + | [+0x010] ClientToken : 0x0 [Type: void *] | |
| 402 | - | ||
| 402 | + | [+0x018] DirectlyAccessClientToken : 0x0 [Type: unsigned char] | |
| 403 | - | ||
| 403 | + | [+0x019] DirectAccessEffectiveOnly : 0x0 [Type: unsigned char] | |
| 404 | - | ||
| 404 | + | [+0x01a] ServerIsRemote : 0x0 [Type: unsigned char] | |
| 405 | - | ||
| 405 | + | [+0x01c] ClientTokenControl [Type: _TOKEN_CONTROL] | |
| 406 | - | ||
| 406 | + | 0: kd> dx -r1 ((nfs41_driver!_SECURITY_CLIENT_CONTEXT *)0xffffb784b66ec7c0) | |
| 407 | - | ||
| 407 | + | ((nfs41_driver!_SECURITY_CLIENT_CONTEXT *)0xffffb784b66ec7c0) : 0xffffb784b66ec7c0 [Type: _SECURITY_CLIENT_CONTEXT *] | |
| 408 | - | ||
| 408 | + | [+0x000] SecurityQos [Type: _SECURITY_QUALITY_OF_SERVICE] | |
| 409 | - | ||
| 409 | + | [+0x010] ClientToken : 0x6b007300690064 [Type: void *] | |
| 410 | - | ||
| 410 | + | [+0x018] DirectlyAccessClientToken : 0x5c [Type: unsigned char] | |
| 411 | - | ||
| 411 | + | [+0x019] DirectAccessEffectiveOnly : 0x0 [Type: unsigned char] | |
| 412 | - | ||
| 412 | + | [+0x01a] ServerIsRemote : 0x6e [Type: unsigned char] | |
| 413 | - | ||
| 413 | + | [+0x01c] ClientTokenControl [Type: _TOKEN_CONTROL] | |
| 414 | - | ||
| 414 | + | 0: kd> dx -r1 (*((nfs41_driver!_TOKEN_CONTROL *)0xffffa301d3f15194)) | |
| 415 | - | ||
| 415 | + | (*((nfs41_driver!_TOKEN_CONTROL *)0xffffa301d3f15194)) [Type: _TOKEN_CONTROL] | |
| 416 | - | ||
| 416 | + | [+0x000] TokenId [Type: _LUID] | |
| 417 | - | ||
| 417 | + | [+0x008] AuthenticationId [Type: _LUID] | |
| 418 | - | ||
| 418 | + | [+0x010] ModifiedId [Type: _LUID] | |
| 419 | - | ||
| 419 | + | [+0x018] TokenSource [Type: _TOKEN_SOURCE] | |
| 420 | - | ||
| 420 | + | 0: kd> dx -r1 (*((nfs41_driver!_SECURITY_QUALITY_OF_SERVICE *)0xffffb784b66ec7c0)) | |
| 421 | - | ||
| 421 | + | (*((nfs41_driver!_SECURITY_QUALITY_OF_SERVICE *)0xffffb784b66ec7c0)) [Type: _SECURITY_QUALITY_OF_SERVICE] | |
| 422 | - | ||
| 422 | + | [+0x000] Length : 0x0 [Type: unsigned long] | |
| 423 | - | ||
| 423 | + | [+0x004] ImpersonationLevel : SecurityAnonymous (0) [Type: _SECURITY_IMPERSONATION_LEVEL] | |
| 424 | - | ||
| 424 | + | [+0x008] ContextTrackingMode : 0x5c [Type: unsigned char] | |
| 425 | - | ||
| 425 | + | [+0x009] EffectiveOnly : 0x0 [Type: unsigned char] | |
| 426 | 426 | ||
| 427 | 427 |
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.
nrubsig.kpaste.net RSS