pastebin - collaborative debugging tool
nrubsig.kpaste.net RSS


Kernel crash in nfs41_driver!nfs41_CreateVNetRoot() with UNC paths
Posted by Anonymous on Fri 15th Dec 2023 22:16
raw | new post
view followups (newest first): Prototype fix for Kernel crash in nfs41_driver!nfs41_CreateVNetRoot() with UNC paths by Anonymous

  1.  
  2. ************* Preparing the environment for Debugger Extensions Gallery repositories **************
  3.    ExtensionRepository : Implicit
  4.    UseExperimentalFeatureForNugetShare : true
  5.    AllowNugetExeUpdate : true
  6.    AllowNugetMSCredentialProviderInstall : true
  7.    AllowParallelInitializationOfLocalRepositories : true
  8.  
  9.    -- Configuring repositories
  10.       ----> Repository : LocalInstalled, Enabled: true
  11.       ----> Repository : UserExtensions, Enabled: true
  12.  
  13. >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
  14.  
  15. ************* Waiting for Debugger Extensions Gallery to Initialize **************
  16.  
  17. >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.297 seconds
  18.    ----> Repository : UserExtensions, Enabled: true, Packages count: 0
  19.    ----> Repository : LocalInstalled, Enabled: true, Packages count: 36
  20.  
  21. Microsoft (R) Windows Debugger Version 10.0.25921.1001 AMD64
  22. Copyright (c) Microsoft Corporation. All rights reserved.
  23.  
  24.  
  25. Loading Dump File [C:\Windows\MEMORY.DMP]
  26. Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
  27.  
  28.  
  29. ************* Path validation summary **************
  30. Response                         Time (ms)     Location
  31. Deferred                                       srv*
  32. Symbol search path is: srv*
  33. Executable search path is:
  34. Windows 10 Kernel Version 19041 MP (6 procs) Free x64
  35. Product: WinNt, suite: TerminalServer SingleUserTS
  36. Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
  37. Kernel base = 0xfffff807`0fe00000 PsLoadedModuleList = 0xfffff807`10a2a770
  38. Debug session time: Fri Dec 15 22:43:29.408 2023 (UTC + 1:00)
  39. System Uptime: 0 days 6:27:31.129
  40. Loading Kernel Symbols
  41. ...............................................................
  42. ..........Page 10131e not present in the dump file. Type ".hh dbgerr004" for details
  43. ......................................................
  44. ................................................................
  45. ....
  46. Loading User Symbols
  47.  
  48. Loading unloaded module list
  49. .......
  50. For analysis of this file, run !analyze -v
  51. nt!KeBugCheckEx:
  52. fffff807`101fd6f0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffdc0c`86f8e1b0=000000000000000a
  53. 4: kd> !analyze -v
  54. *******************************************************************************
  55. *                                                                             *
  56. *                        Bugcheck Analysis                                    *
  57. *                                                                             *
  58. *******************************************************************************
  59.  
  60. IRQL_NOT_LESS_OR_EQUAL (a)
  61. An attempt was made to access a pageable (or completely invalid) address at an
  62. interrupt request level (IRQL) that is too high.  This is usually
  63. caused by drivers using improper addresses.
  64. If a kernel debugger is available get the stack backtrace.
  65. Arguments:
  66. Arg1: 0000000000000000, memory referenced
  67. Arg2: 0000000000000002, IRQL
  68. Arg3: 0000000000000000, bitfield :
  69.         bit 0 : value 0 = read operation, 1 = write operation
  70.         bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  71. Arg4: fffff807100400b1, address which referenced memory
  72.  
  73. Debugging Details:
  74. ------------------
  75.  
  76. Unable to load image \SystemRoot\system32\DRIVERS\nfs41_driver.sys, Win32 error 0n2
  77.  
  78. KEY_VALUES_STRING: 1
  79.  
  80.     Key  : Analysis.CPU.mSec
  81.     Value: 4171
  82.  
  83.     Key  : Analysis.Elapsed.mSec
  84.     Value: 5109
  85.  
  86.     Key  : Analysis.IO.Other.Mb
  87.     Value: 0
  88.  
  89.     Key  : Analysis.IO.Read.Mb
  90.     Value: 2
  91.  
  92.     Key  : Analysis.IO.Write.Mb
  93.     Value: 1
  94.  
  95.     Key  : Analysis.Init.CPU.mSec
  96.     Value: 718
  97.  
  98.     Key  : Analysis.Init.Elapsed.mSec
  99.     Value: 53878
  100.  
  101.     Key  : Analysis.Memory.CommitPeak.Mb
  102.     Value: 88
  103.  
  104.     Key  : Bugcheck.Code.KiBugCheckData
  105.     Value: 0xa
  106.  
  107.     Key  : Bugcheck.Code.LegacyAPI
  108.     Value: 0xa
  109.  
  110.     Key  : Failure.Bucket
  111.     Value: AV_nfs41_driver!nfs41_CreateVNetRoot
  112.  
  113.     Key  : Failure.Hash
  114.     Value: {b68cc072-56ac-2f8a-458d-16a3fb121c7d}
  115.  
  116.     Key  : Hypervisor.Enlightenments.Value
  117.     Value: 12576
  118.  
  119.     Key  : Hypervisor.Enlightenments.ValueHex
  120.     Value: 3120
  121.  
  122.     Key  : Hypervisor.Flags.AnyHypervisorPresent
  123.     Value: 1
  124.  
  125.     Key  : Hypervisor.Flags.ApicEnlightened
  126.     Value: 0
  127.  
  128.     Key  : Hypervisor.Flags.ApicVirtualizationAvailable
  129.     Value: 0
  130.  
  131.     Key  : Hypervisor.Flags.AsyncMemoryHint
  132.     Value: 0
  133.  
  134.     Key  : Hypervisor.Flags.CoreSchedulerRequested
  135.     Value: 0
  136.  
  137.     Key  : Hypervisor.Flags.CpuManager
  138.     Value: 0
  139.  
  140.     Key  : Hypervisor.Flags.DeprecateAutoEoi
  141.     Value: 1
  142.  
  143.     Key  : Hypervisor.Flags.DynamicCpuDisabled
  144.     Value: 0
  145.  
  146.     Key  : Hypervisor.Flags.Epf
  147.     Value: 0
  148.  
  149.     Key  : Hypervisor.Flags.ExtendedProcessorMasks
  150.     Value: 0
  151.  
  152.     Key  : Hypervisor.Flags.HardwareMbecAvailable
  153.     Value: 0
  154.  
  155.     Key  : Hypervisor.Flags.MaxBankNumber
  156.     Value: 0
  157.  
  158.     Key  : Hypervisor.Flags.MemoryZeroingControl
  159.     Value: 0
  160.  
  161.     Key  : Hypervisor.Flags.NoExtendedRangeFlush
  162.     Value: 1
  163.  
  164.     Key  : Hypervisor.Flags.NoNonArchCoreSharing
  165.     Value: 0
  166.  
  167.     Key  : Hypervisor.Flags.Phase0InitDone
  168.     Value: 1
  169.  
  170.     Key  : Hypervisor.Flags.PowerSchedulerQos
  171.     Value: 0
  172.  
  173.     Key  : Hypervisor.Flags.RootScheduler
  174.     Value: 0
  175.  
  176.     Key  : Hypervisor.Flags.SynicAvailable
  177.     Value: 1
  178.  
  179.     Key  : Hypervisor.Flags.UseQpcBias
  180.     Value: 0
  181.  
  182.     Key  : Hypervisor.Flags.Value
  183.     Value: 536632
  184.  
  185.     Key  : Hypervisor.Flags.ValueHex
  186.     Value: 83038
  187.  
  188.     Key  : Hypervisor.Flags.VpAssistPage
  189.     Value: 1
  190.  
  191.     Key  : Hypervisor.Flags.VsmAvailable
  192.     Value: 0
  193.  
  194.     Key  : Hypervisor.RootFlags.AccessStats
  195.     Value: 0
  196.  
  197.     Key  : Hypervisor.RootFlags.CrashdumpEnlightened
  198.     Value: 0
  199.  
  200.     Key  : Hypervisor.RootFlags.CreateVirtualProcessor
  201.     Value: 0
  202.  
  203.     Key  : Hypervisor.RootFlags.DisableHyperthreading
  204.     Value: 0
  205.  
  206.     Key  : Hypervisor.RootFlags.HostTimelineSync
  207.     Value: 0
  208.  
  209.     Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
  210.     Value: 0
  211.  
  212.     Key  : Hypervisor.RootFlags.IsHyperV
  213.     Value: 0
  214.  
  215.     Key  : Hypervisor.RootFlags.LivedumpEnlightened
  216.     Value: 0
  217.  
  218.     Key  : Hypervisor.RootFlags.MapDeviceInterrupt
  219.     Value: 0
  220.  
  221.     Key  : Hypervisor.RootFlags.MceEnlightened
  222.     Value: 0
  223.  
  224.     Key  : Hypervisor.RootFlags.Nested
  225.     Value: 0
  226.  
  227.     Key  : Hypervisor.RootFlags.StartLogicalProcessor
  228.     Value: 0
  229.  
  230.     Key  : Hypervisor.RootFlags.Value
  231.     Value: 0
  232.  
  233.     Key  : Hypervisor.RootFlags.ValueHex
  234.     Value: 0
  235.  
  236.     Key  : SecureKernel.HalpHvciEnabled
  237.     Value: 0
  238.  
  239.     Key  : WER.OS.Branch
  240.     Value: vb_release
  241.  
  242.     Key  : WER.OS.Version
  243.     Value: 10.0.19041.1
  244.  
  245.  
  246. BUGCHECK_CODE:  a
  247.  
  248. BUGCHECK_P1: 0
  249.  
  250. BUGCHECK_P2: 2
  251.  
  252. BUGCHECK_P3: 0
  253.  
  254. BUGCHECK_P4: fffff807100400b1
  255.  
  256. FILE_IN_CAB:  MEMORY.DMP
  257.  
  258. READ_ADDRESS:  0000000000000000
  259.  
  260. BLACKBOXBSD: 1 (!blackboxbsd)
  261.  
  262.  
  263. BLACKBOXNTFS: 1 (!blackboxntfs)
  264.  
  265.  
  266. BLACKBOXPNP: 1 (!blackboxpnp)
  267.  
  268.  
  269. BLACKBOXWINLOGON: 1
  270.  
  271. PROCESS_NAME:  System
  272.  
  273. TRAP_FRAME:  ffffdc0c86f8e2f0 -- (.trap 0xffffdc0c86f8e2f0)
  274. NOTE: The trap frame does not contain all registers.
  275. Some register values may be zeroed or incorrect.
  276. rax=ffffa087d77c5890 rbx=0000000000000000 rcx=0000000000000000
  277. rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
  278. rip=fffff807100400b1 rsp=ffffdc0c86f8e480 rbp=ffffdc0c86f8e511
  279.  r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
  280. r11=fffff780000003b0 r12=0000000000000000 r13=0000000000000000
  281. r14=0000000000000000 r15=0000000000000000
  282. iopl=0         nv up ei pl zr na po nc
  283. nt!KeWaitForSingleObject+0x1e1:
  284. fffff807`100400b1 483901          cmp     qword ptr [rcx],rax ds:00000000`00000000=????????????????
  285. Resetting default scope
  286.  
  287. STACK_TEXT:  
  288. ffffdc0c`86f8e1a8 fffff807`10211aa9     : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  289. ffffdc0c`86f8e1b0 fffff807`1020d563     : ffffdc0c`86f8e260 fffff807`15f99020 00000000`00000000 ffff8482`491e52f8 : nt!KiBugCheckDispatch+0x69
  290. ffffdc0c`86f8e2f0 fffff807`100400b1     : ffffa087`d5d60000 ffffdc0c`86f8e558 ffffdc0c`86f8e5d0 fffff807`1051e75a : nt!KiPageFault+0x463
  291. ffffdc0c`86f8e480 fffff807`100f5eba     : ffffa087`d77c5888 00000000`00000022 00000001`00000000 00000000`00000000 : nt!KeWaitForSingleObject+0x1e1
  292. ffffdc0c`86f8e570 fffff807`10044bc2     : 00000000`00000000 00000000`00000004 ffffa087`d77c5870 fffff807`15f8b655 : nt!ExpAcquireFastMutexContended+0x7a
  293. ffffdc0c`86f8e5b0 fffff807`15f895b6     : 00000000`00000004 0000577f`00000000 00000000`00000000 00000000`00000c00 : nt!ExAcquireFastMutex+0x162
  294. ffffdc0c`86f8e600 fffff807`15fbc99d     : ffffa087`d86ca490 00000000`00000004 00000000`00000000 ffffa087`00000000 : nfs41_driver!nfs41_CreateVNetRoot+0x356 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 3080]
  295. ffffdc0c`86f8e710 fffff807`15fbd9c7     : ffffa087`d1b9baf0 ffffa087`d718b010 ffffa087`d77c54a0 ffffa087`d718b010 : nfs41_driver!RxConstructNetRoot+0xdd [base\fs\rdr2\rxce\rxconnct.c @ 1101]
  296. ffffdc0c`86f8e780 fffff807`15fbcd32     : ffffa087`d5d60010 ffffa087`d6bb9dc0 ffffdc0c`86f8ea40 ffffdc0c`86f8e904 : nfs41_driver!RxFindOrCreateConnections+0x657 [base\fs\rdr2\rxce\rxconnct.c @ 500]
  297. ffffdc0c`86f8e870 fffff807`15fbd23e     : ffffa087`d5d60010 ffffdc0c`86f8e981 ffffdc0c`86f8ea40 00000000`c0000016 : nfs41_driver!RxConstructVirtualNetRoot+0x72 [base\fs\rdr2\rxce\rxconnct.c @ 1197]
  298. ffffdc0c`86f8e900 fffff807`15fb0207     : 00000000`00000000 ffffa087`d6bb9dc0 ffffdc0c`86f8ea40 ffffa087`db830c04 : nfs41_driver!RxFindOrConstructVirtualNetRoot+0x30e [base\fs\rdr2\rxce\rxconnct.c @ 1731]
  299. ffffdc0c`86f8e9e0 fffff807`15fb66d2     : 00000000`00000004 ffffa087`d5d60010 ffffa087`d6bb9dc0 ffffa087`d5d60010 : nfs41_driver!RxPrefixClaim+0x197 [base\fs\rdr2\rdbss\create.c @ 3037]
  300. ffffdc0c`86f8ea80 fffff807`15f98a1f     : 00000000`00000000 ffffa087`d5d60010 00000000`00000000 00000000`00000000 : nfs41_driver!RxCommonDevFCBIoCtl+0x92 [base\fs\rdr2\rdbss\ntdevfcb.c @ 498]
  301. ffffdc0c`86f8eab0 fffff807`15f98b44     : ffffa087`db830cb8 ffffa087`db830c78 fffff807`15fa1560 fffff807`15fa1560 : nfs41_driver!RxFinishSrvCallConstruction+0x18f [base\fs\rdr2\rxce\rxconnct.c @ 723]
  302. ffffdc0c`86f8eb20 fffff807`15f923e3     : ffffa087`d7119a60 00000000`00000000 fffff807`15fa4000 ffffdc0c`00000001 : nfs41_driver!RxFinishSrvCallConstructionDispatcher+0x84 [base\fs\rdr2\rxce\rxconnct.c @ 805]
  303. ffffdc0c`86f8eb50 fffff807`15f924bb     : fffff807`15fa06c0 fffff807`15fa1240 00000000`00000000 ffffa087`d7119a60 : nfs41_driver!RxWorkItemDispatcher+0x13 [base\fs\rdr2\rxce\rxworkq.c @ 1653]
  304. ffffdc0c`86f8eb80 fffff807`15fa400b     : 00000000`00000000 00000000`00000000 ffffa087`d7119a60 ffffa087`d1b8c080 : nfs41_driver!RxpWorkerThreadDispatcher+0xbb [base\fs\rdr2\rxce\rxworkq.c @ 1343]
  305. ffffdc0c`86f8ebe0 fffff807`101078e5     : ffffa087`d1b8c080 fffff807`15fa4000 fffff807`15fa1240 00078404`ad9b3dfe : nfs41_driver!RxBootstrapWorkerThreadDispatcher+0xb [base\fs\rdr2\rxce\rxworkq.c @ 1469]
  306. ffffdc0c`86f8ec10 fffff807`102064b8     : ffff8900`1e159180 ffffa087`d1b8c080 fffff807`10107890 00726f72`7245202d : nt!PspSystemThreadStartup+0x55
  307. ffffdc0c`86f8ec60 00000000`00000000     : ffffdc0c`86f8f000 ffffdc0c`86f89000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  308.  
  309.  
  310. FAULTING_SOURCE_LINE:  C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
  311.  
  312. FAULTING_SOURCE_FILE:  C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
  313.  
  314. FAULTING_SOURCE_LINE_NUMBER:  3080
  315.  
  316. FAULTING_SOURCE_CODE:  
  317.   3076:
  318.   3077:         status = STATUS_OBJECT_NAME_NOT_FOUND;
  319.   3078:
  320.   3079:         ExAcquireFastMutex(&pNetRootContext->mountLock);
  321. > 3080:         pEntry = &pNetRootContext->mounts.head;
  322.   3081:         pEntry = pEntry->Flink;
  323.   3082:         while (pEntry != NULL) {
  324.   3083:             existing_mount = (nfs41_mount_entry *)CONTAINING_RECORD(pEntry,
  325.   3084:                     nfs41_mount_entry, next);
  326.   3085:
  327.  
  328.  
  329. SYMBOL_NAME:  nfs41_driver!nfs41_CreateVNetRoot+356
  330.  
  331. MODULE_NAME: nfs41_driver
  332.  
  333. IMAGE_NAME:  nfs41_driver.sys
  334.  
  335. STACK_COMMAND:  .cxr; .ecxr ; kb
  336.  
  337. BUCKET_ID_FUNC_OFFSET:  356
  338.  
  339. FAILURE_BUCKET_ID:  AV_nfs41_driver!nfs41_CreateVNetRoot
  340.  
  341. OS_VERSION:  10.0.19041.1
  342.  
  343. BUILDLAB_STR:  vb_release
  344.  
  345. OSPLATFORM_TYPE:  x64
  346.  
  347. OSNAME:  Windows 10
  348.  
  349. FAILURE_ID_HASH:  {b68cc072-56ac-2f8a-458d-16a3fb121c7d}
  350.  
  351. Followup:     MachineOwner
  352. ---------

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at