pastebin - collaborative debugging tool
nrubsig.kpaste.net RSS


Crash in |SeImpersonateClientEx()| because invalid object ref
Posted by Anonymous on Mon 29th Apr 2024 15:17
raw | new post

  1.  
  2. ************* Preparing the environment for Debugger Extensions Gallery repositories **************
  3.    ExtensionRepository : Implicit
  4.    UseExperimentalFeatureForNugetShare : true
  5.    AllowNugetExeUpdate : true
  6.    NonInteractiveNuget : true
  7.    AllowNugetMSCredentialProviderInstall : true
  8.    AllowParallelInitializationOfLocalRepositories : true
  9.  
  10.    EnableRedirectToV8JsProvider : false
  11.  
  12.    -- Configuring repositories
  13.       ----> Repository : LocalInstalled, Enabled: true
  14.       ----> Repository : UserExtensions, Enabled: true
  15.  
  16. >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
  17.  
  18. ************* Waiting for Debugger Extensions Gallery to Initialize **************
  19.  
  20. >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.515 seconds
  21.    ----> Repository : UserExtensions, Enabled: true, Packages count: 0
  22.    ----> Repository : LocalInstalled, Enabled: true, Packages count: 41
  23.  
  24. Microsoft (R) Windows Debugger Version 10.0.27553.1004 AMD64
  25. Copyright (c) Microsoft Corporation. All rights reserved.
  26.  
  27.  
  28. Loading Dump File [C:\Windows\MEMORY.DMP]
  29. Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
  30.  
  31.  
  32. ************* Path validation summary **************
  33. Response                         Time (ms)     Location
  34. Deferred                                       srv*
  35. Symbol search path is: srv*
  36. Executable search path is:
  37. Windows 10 Kernel Version 19041 MP (8 procs) Free x64
  38. Product: WinNt, suite: TerminalServer SingleUserTS
  39. Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
  40. Kernel base = 0xfffff804`5d200000 PsLoadedModuleList = 0xfffff804`5de2a2c0
  41. Debug session time: Mon Apr 29 16:13:55.742 2024 (UTC + 2:00)
  42. System Uptime: 0 days 0:09:07.499
  43. Loading Kernel Symbols
  44. ...............................................................
  45. ............Page f20a not present in the dump file. Type ".hh dbgerr004" for details
  46. ....................................................
  47. ................................................................
  48. ......
  49. Loading User Symbols
  50. PEB is paged out (Peb.Ldr = 00000078`62c69018).  Type ".hh dbgerr001" for details
  51. Loading unloaded module list
  52. ......
  53. For analysis of this file, run !analyze -v
  54. nt!KeBugCheckEx:
  55. fffff804`5d5fdaf0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffad04`8d6221d0=0000000000000018
  56. 2: kd> !analyze -v
  57. *******************************************************************************
  58. *                                                                             *
  59. *                        Bugcheck Analysis                                    *
  60. *                                                                             *
  61. *******************************************************************************
  62.  
  63. REFERENCE_BY_POINTER (18)
  64. Arguments:
  65. Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
  66. Arg2: ffffe48063d79080, Object whose reference count is being lowered
  67. Arg3: 0000000000000010, Reserved
  68. Arg4: 0000000000000001, Reserved
  69.         The reference count of an object is illegal for the current state of the object.
  70.         Each time a driver uses a pointer to an object the driver calls a kernel routine
  71.         to increment the reference count of the object. When the driver is done with the
  72.         pointer the driver calls another kernel routine to decrement the reference count.
  73.         Drivers must match calls to the increment and decrement routines. This BugCheck
  74.         can occur because an object's reference count goes to zero while there are still
  75.         open handles to the object, in which case the fourth parameter indicates the number
  76.         of opened handles. It may also occur when the object's reference count drops below zero
  77.         whether or not there are open handles to the object, and in that case the fourth parameter
  78.         contains the actual value of the pointer references count.
  79.  
  80. Debugging Details:
  81. ------------------
  82.  
  83. Unable to load image \SystemRoot\system32\DRIVERS\nfs41_driver.sys, Win32 error 0n2
  84.  
  85. KEY_VALUES_STRING: 1
  86.  
  87.     Key  : Analysis.CPU.mSec
  88.     Value: 4202
  89.  
  90.     Key  : Analysis.Elapsed.mSec
  91.     Value: 6781
  92.  
  93.     Key  : Analysis.IO.Other.Mb
  94.     Value: 0
  95.  
  96.     Key  : Analysis.IO.Read.Mb
  97.     Value: 2
  98.  
  99.     Key  : Analysis.IO.Write.Mb
  100.     Value: 27
  101.  
  102.     Key  : Analysis.Init.CPU.mSec
  103.     Value: 1467
  104.  
  105.     Key  : Analysis.Init.Elapsed.mSec
  106.     Value: 11530
  107.  
  108.     Key  : Analysis.Memory.CommitPeak.Mb
  109.     Value: 97
  110.  
  111.     Key  : Bugcheck.Code.KiBugCheckData
  112.     Value: 0x18
  113.  
  114.     Key  : Bugcheck.Code.LegacyAPI
  115.     Value: 0x18
  116.  
  117.     Key  : Bugcheck.Code.TargetModel
  118.     Value: 0x18
  119.  
  120.     Key  : Failure.Bucket
  121.     Value: 0x18_nfs41_driver!unknown_function
  122.  
  123.     Key  : Failure.Hash
  124.     Value: {290a9a32-97e9-d474-54ba-132ba9f991b9}
  125.  
  126.     Key  : Hypervisor.Enlightenments.Value
  127.     Value: 12576
  128.  
  129.     Key  : Hypervisor.Enlightenments.ValueHex
  130.     Value: 3120
  131.  
  132.     Key  : Hypervisor.Flags.AnyHypervisorPresent
  133.     Value: 1
  134.  
  135.     Key  : Hypervisor.Flags.ApicEnlightened
  136.     Value: 0
  137.  
  138.     Key  : Hypervisor.Flags.ApicVirtualizationAvailable
  139.     Value: 0
  140.  
  141.     Key  : Hypervisor.Flags.AsyncMemoryHint
  142.     Value: 0
  143.  
  144.     Key  : Hypervisor.Flags.CoreSchedulerRequested
  145.     Value: 0
  146.  
  147.     Key  : Hypervisor.Flags.CpuManager
  148.     Value: 0
  149.  
  150.     Key  : Hypervisor.Flags.DeprecateAutoEoi
  151.     Value: 1
  152.  
  153.     Key  : Hypervisor.Flags.DynamicCpuDisabled
  154.     Value: 0
  155.  
  156.     Key  : Hypervisor.Flags.Epf
  157.     Value: 0
  158.  
  159.     Key  : Hypervisor.Flags.ExtendedProcessorMasks
  160.     Value: 0
  161.  
  162.     Key  : Hypervisor.Flags.HardwareMbecAvailable
  163.     Value: 0
  164.  
  165.     Key  : Hypervisor.Flags.MaxBankNumber
  166.     Value: 0
  167.  
  168.     Key  : Hypervisor.Flags.MemoryZeroingControl
  169.     Value: 0
  170.  
  171.     Key  : Hypervisor.Flags.NoExtendedRangeFlush
  172.     Value: 1
  173.  
  174.     Key  : Hypervisor.Flags.NoNonArchCoreSharing
  175.     Value: 0
  176.  
  177.     Key  : Hypervisor.Flags.Phase0InitDone
  178.     Value: 1
  179.  
  180.     Key  : Hypervisor.Flags.PowerSchedulerQos
  181.     Value: 0
  182.  
  183.     Key  : Hypervisor.Flags.RootScheduler
  184.     Value: 0
  185.  
  186.     Key  : Hypervisor.Flags.SynicAvailable
  187.     Value: 1
  188.  
  189.     Key  : Hypervisor.Flags.UseQpcBias
  190.     Value: 0
  191.  
  192.     Key  : Hypervisor.Flags.Value
  193.     Value: 536632
  194.  
  195.     Key  : Hypervisor.Flags.ValueHex
  196.     Value: 83038
  197.  
  198.     Key  : Hypervisor.Flags.VpAssistPage
  199.     Value: 1
  200.  
  201.     Key  : Hypervisor.Flags.VsmAvailable
  202.     Value: 0
  203.  
  204.     Key  : Hypervisor.RootFlags.AccessStats
  205.     Value: 0
  206.  
  207.     Key  : Hypervisor.RootFlags.CrashdumpEnlightened
  208.     Value: 0
  209.  
  210.     Key  : Hypervisor.RootFlags.CreateVirtualProcessor
  211.     Value: 0
  212.  
  213.     Key  : Hypervisor.RootFlags.DisableHyperthreading
  214.     Value: 0
  215.  
  216.     Key  : Hypervisor.RootFlags.HostTimelineSync
  217.     Value: 0
  218.  
  219.     Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
  220.     Value: 0
  221.  
  222.     Key  : Hypervisor.RootFlags.IsHyperV
  223.     Value: 0
  224.  
  225.     Key  : Hypervisor.RootFlags.LivedumpEnlightened
  226.     Value: 0
  227.  
  228.     Key  : Hypervisor.RootFlags.MapDeviceInterrupt
  229.     Value: 0
  230.  
  231.     Key  : Hypervisor.RootFlags.MceEnlightened
  232.     Value: 0
  233.  
  234.     Key  : Hypervisor.RootFlags.Nested
  235.     Value: 0
  236.  
  237.     Key  : Hypervisor.RootFlags.StartLogicalProcessor
  238.     Value: 0
  239.  
  240.     Key  : Hypervisor.RootFlags.Value
  241.     Value: 0
  242.  
  243.     Key  : Hypervisor.RootFlags.ValueHex
  244.     Value: 0
  245.  
  246.     Key  : SecureKernel.HalpHvciEnabled
  247.     Value: 0
  248.  
  249.     Key  : WER.OS.Branch
  250.     Value: vb_release
  251.  
  252.     Key  : WER.OS.Version
  253.     Value: 10.0.19041.1
  254.  
  255.  
  256. BUGCHECK_CODE:  18
  257.  
  258. BUGCHECK_P1: 0
  259.  
  260. BUGCHECK_P2: ffffe48063d79080
  261.  
  262. BUGCHECK_P3: 10
  263.  
  264. BUGCHECK_P4: 1
  265.  
  266. FILE_IN_CAB:  MEMORY.DMP
  267.  
  268. BLACKBOXBSD: 1 (!blackboxbsd)
  269.  
  270.  
  271. BLACKBOXNTFS: 1 (!blackboxntfs)
  272.  
  273.  
  274. BLACKBOXWINLOGON: 1
  275.  
  276. PROCESS_NAME:  nfsd_debug.exe
  277.  
  278. STACK_TEXT:  
  279. ffffad04`8d6221c8 fffff804`5d61e05b     : 00000000`00000018 00000000`00000000 ffffe480`63d79080 00000000`00000010 : nt!KeBugCheckEx
  280. ffffad04`8d6221d0 fffff804`5d829a9b     : 00000000`00000002 ffffe480`63d79080 ffffbf84`d5e00100 fffff804`00000000 : nt!ObfReferenceObject+0x1e08eb
  281. ffffad04`8d622210 fffff804`5d8ba365     : 00000000`00001000 00000000`00000002 ffffbf84`d633a010 fffff804`5d442a38 : nt!PsImpersonateClient+0x15b
  282. ffffad04`8d6222a0 fffff804`634448c9     : fffff804`63477640 ffffbf84`dafd1010 00000000`00000001 ffffbf84`dafd1010 : nt!SeImpersonateClientEx+0x35
  283. ffffad04`8d6222e0 fffff804`63450797     : ffffbf84`d633a010 ffffbf84`d5de5560 ffffad04`8d622378 ffffad04`8d61d000 : nfs41_driver+0x48c9
  284. ffffad04`8d622340 fffff804`6344a0e8     : ffffbf84`d633a010 ffffad04`00282018 00000000`00000000 ffffbf84`df0b1ef0 : nfs41_driver+0x10797
  285. ffffad04`8d6223b0 fffff804`63477976     : ffffbf84`d633a010 ffffbf84`dac9b060 00000000`00000002 ffffbf84`d633a010 : nfs41_driver+0xa0e8
  286. ffffad04`8d622430 fffff804`63477698     : ffffbf84`d633a010 ffffbf84`d633a010 ffffbf84`dac9b000 ffffbf84`d633a010 : nfs41_driver+0x37976
  287. ffffad04`8d622460 fffff804`63456162     : 00000000`00000000 ffffbf84`dafd1010 ffffbf84`dac9b001 00000000`00000000 : nfs41_driver+0x37698
  288. ffffad04`8d622490 fffff804`6346e97d     : fffff804`63461370 ffffbf84`d5c02100 ffffffff`ffffffff ffffbf84`dac9b060 : nfs41_driver+0x16162
  289. ffffad04`8d622590 fffff804`6344ac37     : ffffbf84`de78c500 00000000`00000002 00000000`00000000 00000000`00000000 : nfs41_driver+0x2e97d
  290. ffffad04`8d6225c0 fffff804`5d42d835     : ffffbf84`dac9b060 ffffbf84`dafd1010 ffffbf84`de6f0730 fffff804`5d43d15b : nfs41_driver+0xac37
  291. ffffad04`8d622600 fffff804`6255f248     : fffff804`62558000 00000000`00000000 ffffbf84`daa3bdb0 ffffbf84`debd9278 : nt!IofCallDriver+0x55
  292. ffffad04`8d622640 fffff804`6255ed99     : ffffe480`5848d150 00000000`00000000 fffff804`62558000 00000000`00000000 : mup!MupiCallUncProvider+0xb8
  293. ffffad04`8d6226b0 fffff804`6255ecce     : ffffbf84`dafd1010 ffffbf84`debd9270 ffffbf84`df0b1e50 00000000`00000000 : mup!MupStateMachine+0x59
  294. ffffad04`8d6226e0 fffff804`5d42d835     : ffffbf84`df0b1e50 00000000`00000000 ffffbf84`de78c500 00000000`00000001 : mup!MupFsdIrpPassThrough+0x17e
  295. ffffad04`8d622750 fffff804`5b844a76     : 00000000`00282018 ffffad04`8d622950 ffffbf84`dac9b060 fffff804`5d82f681 : nt!IofCallDriver+0x55
  296. ffffad04`8d622790 fffff804`5d42d835     : 00000000`00000002 ffffbf84`dafd1200 ffffad04`20206f49 ffffad04`8d622950 : FLTMGR!FltpDispatch+0xd6
  297. ffffad04`8d6227f0 fffff804`5d82e66c     : 00000000`00000001 00000000`00282018 ffffbf84`df0b1e50 ffffbf84`dc8c2080 : nt!IofCallDriver+0x55
  298. ffffad04`8d622830 fffff804`5d82e2ba     : 00000000`00282018 ffffad04`8d622b80 00000000`00000000 00000000`00282018 : nt!IopSynchronousServiceTail+0x34c
  299. ffffad04`8d6228d0 fffff804`5d82d596     : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xd0a
  300. ffffad04`8d622a20 fffff804`5d6119c5     : ffffbf84`de6f0080 fffff804`00000005 00000078`650f9c38 00007fff`ce227cb8 : nt!NtDeviceIoControlFile+0x56
  301. ffffad04`8d622a90 00007ff8`04d0d194     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  302. 00000078`650fa878 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`04d0d194
  303.  
  304.  
  305. SYMBOL_NAME:  nfs41_driver+48c9
  306.  
  307. MODULE_NAME: nfs41_driver
  308.  
  309. IMAGE_NAME:  nfs41_driver.sys
  310.  
  311. STACK_COMMAND:  .cxr; .ecxr ; kb
  312.  
  313. BUCKET_ID_FUNC_OFFSET:  48c9
  314.  
  315. FAILURE_BUCKET_ID:  0x18_nfs41_driver!unknown_function
  316.  
  317. OS_VERSION:  10.0.19041.1
  318.  
  319. BUILDLAB_STR:  vb_release
  320.  
  321. OSPLATFORM_TYPE:  x64
  322.  
  323. OSNAME:  Windows 10
  324.  
  325. FAILURE_ID_HASH:  {290a9a32-97e9-d474-54ba-132ba9f991b9}
  326.  
  327. Followup:     MachineOwner
  328. ---------

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at