pastebin - collaborative debugging tool
nrubsig.kpaste.net RSS


nfs41_driver.sys crash
Posted by Anonymous on Fri 19th Jul 2024 09:59
raw | new post

  1.  
  2. ************* Preparing the environment for Debugger Extensions Gallery repositories **************
  3.    ExtensionRepository : Implicit
  4.    UseExperimentalFeatureForNugetShare : true
  5.    AllowNugetExeUpdate : true
  6.    NonInteractiveNuget : true
  7.    AllowNugetMSCredentialProviderInstall : true
  8.    AllowParallelInitializationOfLocalRepositories : true
  9.  
  10.    EnableRedirectToV8JsProvider : false
  11.  
  12.    -- Configuring repositories
  13.       ----> Repository : LocalInstalled, Enabled: true
  14.       ----> Repository : UserExtensions, Enabled: true
  15.  
  16. >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
  17.  
  18. ************* Waiting for Debugger Extensions Gallery to Initialize **************
  19.  
  20. >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.047 seconds
  21.    ----> Repository : UserExtensions, Enabled: true, Packages count: 0
  22.    ----> Repository : LocalInstalled, Enabled: true, Packages count: 41
  23.  
  24. Microsoft (R) Windows Debugger Version 10.0.27553.1004 AMD64
  25. Copyright (c) Microsoft Corporation. All rights reserved.
  26.  
  27.  
  28. Loading Dump File [C:\Windows\MEMORY.DMP]
  29. Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
  30.  
  31.  
  32. ************* Path validation summary **************
  33. Response                         Time (ms)     Location
  34. Deferred                                       srv*
  35. Symbol search path is: srv*
  36. Executable search path is:
  37. Windows 10 Kernel Version 19041 MP (8 procs) Free x64
  38. Product: WinNt, suite: TerminalServer SingleUserTS
  39. Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
  40. Kernel base = 0xfffff800`42000000 PsLoadedModuleList = 0xfffff800`42c2a820
  41. Debug session time: Fri Jul 19 02:35:42.990 2024 (UTC + 2:00)
  42. System Uptime: 0 days 8:16:25.224
  43. Loading Kernel Symbols
  44. ...............................................................
  45. ................................................................
  46. ................................................................
  47. .....
  48. Loading User Symbols
  49.  
  50. Loading unloaded module list
  51. .......
  52. For analysis of this file, run !analyze -v
  53. nt!KeBugCheckEx:
  54. fffff800`423fdde0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffeb89`522c3550=0000000000000139
  55. 2: kd> !analyze -v
  56. *******************************************************************************
  57. *                                                                             *
  58. *                        Bugcheck Analysis                                    *
  59. *                                                                             *
  60. *******************************************************************************
  61.  
  62. KERNEL_SECURITY_CHECK_FAILURE (139)
  63. A kernel component has corrupted a critical data structure.  The corruption
  64. could potentially allow a malicious user to gain control of this machine.
  65. Arguments:
  66. Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
  67. Arg2: ffffeb89522c3870, Address of the trap frame for the exception that caused the BugCheck
  68. Arg3: ffffeb89522c37c8, Address of the exception record for the exception that caused the BugCheck
  69. Arg4: 0000000000000000, Reserved
  70.  
  71. Debugging Details:
  72. ------------------
  73.  
  74. Unable to load image \SystemRoot\system32\DRIVERS\nfs41_driver.sys, Win32 error 0n2
  75.  
  76. KEY_VALUES_STRING: 1
  77.  
  78.     Key  : Analysis.CPU.mSec
  79.     Value: 4140
  80.  
  81.     Key  : Analysis.Elapsed.mSec
  82.     Value: 4656
  83.  
  84.     Key  : Analysis.IO.Other.Mb
  85.     Value: 0
  86.  
  87.     Key  : Analysis.IO.Read.Mb
  88.     Value: 1
  89.  
  90.     Key  : Analysis.IO.Write.Mb
  91.     Value: 0
  92.  
  93.     Key  : Analysis.Init.CPU.mSec
  94.     Value: 858
  95.  
  96.     Key  : Analysis.Init.Elapsed.mSec
  97.     Value: 136137
  98.  
  99.     Key  : Analysis.Memory.CommitPeak.Mb
  100.     Value: 91
  101.  
  102.     Key  : Bugcheck.Code.KiBugCheckData
  103.     Value: 0x139
  104.  
  105.     Key  : Bugcheck.Code.LegacyAPI
  106.     Value: 0x139
  107.  
  108.     Key  : Bugcheck.Code.TargetModel
  109.     Value: 0x139
  110.  
  111.     Key  : FailFast.Name
  112.     Value: CORRUPT_LIST_ENTRY
  113.  
  114.     Key  : FailFast.Type
  115.     Value: 3
  116.  
  117.     Key  : Failure.Bucket
  118.     Value: 0x139_3_CORRUPT_LIST_ENTRY_nfs41_driver!RtlFailFast
  119.  
  120.     Key  : Failure.Hash
  121.     Value: {7fe0db02-499d-ef29-7ce7-92b961f8dd2f}
  122.  
  123.     Key  : Hypervisor.Enlightenments.Value
  124.     Value: 12576
  125.  
  126.     Key  : Hypervisor.Enlightenments.ValueHex
  127.     Value: 3120
  128.  
  129.     Key  : Hypervisor.Flags.AnyHypervisorPresent
  130.     Value: 1
  131.  
  132.     Key  : Hypervisor.Flags.ApicEnlightened
  133.     Value: 0
  134.  
  135.     Key  : Hypervisor.Flags.ApicVirtualizationAvailable
  136.     Value: 0
  137.  
  138.     Key  : Hypervisor.Flags.AsyncMemoryHint
  139.     Value: 0
  140.  
  141.     Key  : Hypervisor.Flags.CoreSchedulerRequested
  142.     Value: 0
  143.  
  144.     Key  : Hypervisor.Flags.CpuManager
  145.     Value: 0
  146.  
  147.     Key  : Hypervisor.Flags.DeprecateAutoEoi
  148.     Value: 1
  149.  
  150.     Key  : Hypervisor.Flags.DynamicCpuDisabled
  151.     Value: 0
  152.  
  153.     Key  : Hypervisor.Flags.Epf
  154.     Value: 0
  155.  
  156.     Key  : Hypervisor.Flags.ExtendedProcessorMasks
  157.     Value: 0
  158.  
  159.     Key  : Hypervisor.Flags.HardwareMbecAvailable
  160.     Value: 0
  161.  
  162.     Key  : Hypervisor.Flags.MaxBankNumber
  163.     Value: 0
  164.  
  165.     Key  : Hypervisor.Flags.MemoryZeroingControl
  166.     Value: 0
  167.  
  168.     Key  : Hypervisor.Flags.NoExtendedRangeFlush
  169.     Value: 1
  170.  
  171.     Key  : Hypervisor.Flags.NoNonArchCoreSharing
  172.     Value: 0
  173.  
  174.     Key  : Hypervisor.Flags.Phase0InitDone
  175.     Value: 1
  176.  
  177.     Key  : Hypervisor.Flags.PowerSchedulerQos
  178.     Value: 0
  179.  
  180.     Key  : Hypervisor.Flags.RootScheduler
  181.     Value: 0
  182.  
  183.     Key  : Hypervisor.Flags.SynicAvailable
  184.     Value: 1
  185.  
  186.     Key  : Hypervisor.Flags.UseQpcBias
  187.     Value: 0
  188.  
  189.     Key  : Hypervisor.Flags.Value
  190.     Value: 536632
  191.  
  192.     Key  : Hypervisor.Flags.ValueHex
  193.     Value: 83038
  194.  
  195.     Key  : Hypervisor.Flags.VpAssistPage
  196.     Value: 1
  197.  
  198.     Key  : Hypervisor.Flags.VsmAvailable
  199.     Value: 0
  200.  
  201.     Key  : Hypervisor.RootFlags.AccessStats
  202.     Value: 0
  203.  
  204.     Key  : Hypervisor.RootFlags.CrashdumpEnlightened
  205.     Value: 0
  206.  
  207.     Key  : Hypervisor.RootFlags.CreateVirtualProcessor
  208.     Value: 0
  209.  
  210.     Key  : Hypervisor.RootFlags.DisableHyperthreading
  211.     Value: 0
  212.  
  213.     Key  : Hypervisor.RootFlags.HostTimelineSync
  214.     Value: 0
  215.  
  216.     Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
  217.     Value: 0
  218.  
  219.     Key  : Hypervisor.RootFlags.IsHyperV
  220.     Value: 0
  221.  
  222.     Key  : Hypervisor.RootFlags.LivedumpEnlightened
  223.     Value: 0
  224.  
  225.     Key  : Hypervisor.RootFlags.MapDeviceInterrupt
  226.     Value: 0
  227.  
  228.     Key  : Hypervisor.RootFlags.MceEnlightened
  229.     Value: 0
  230.  
  231.     Key  : Hypervisor.RootFlags.Nested
  232.     Value: 0
  233.  
  234.     Key  : Hypervisor.RootFlags.StartLogicalProcessor
  235.     Value: 0
  236.  
  237.     Key  : Hypervisor.RootFlags.Value
  238.     Value: 0
  239.  
  240.     Key  : Hypervisor.RootFlags.ValueHex
  241.     Value: 0
  242.  
  243.     Key  : SecureKernel.HalpHvciEnabled
  244.     Value: 0
  245.  
  246.     Key  : WER.OS.Branch
  247.     Value: vb_release
  248.  
  249.     Key  : WER.OS.Version
  250.     Value: 10.0.19041.1
  251.  
  252.  
  253. BUGCHECK_CODE:  139
  254.  
  255. BUGCHECK_P1: 3
  256.  
  257. BUGCHECK_P2: ffffeb89522c3870
  258.  
  259. BUGCHECK_P3: ffffeb89522c37c8
  260.  
  261. BUGCHECK_P4: 0
  262.  
  263. FILE_IN_CAB:  MEMORY.DMP
  264.  
  265. TRAP_FRAME:  ffffeb89522c3870 -- (.trap 0xffffeb89522c3870)
  266. NOTE: The trap frame does not contain all registers.
  267. Some register values may be zeroed or incorrect.
  268. rax=0000000000000003 rbx=0000000000000000 rcx=0000000000000003
  269. rdx=fffff80048cf6d60 rsi=0000000000000000 rdi=0000000000000000
  270. rip=fffff80048cd4bba rsp=ffffeb89522c3a08 rbp=0000000000000080
  271.  r8=0000000000000000  r9=0000000000000659 r10=0000000075706361
  272. r11=0000000000001001 r12=0000000000000000 r13=0000000000000000
  273. r14=0000000000000000 r15=0000000000000000
  274. iopl=0         nv up ei ng nz na pe nc
  275. nfs41_driver!RtlFailFast+0xa:
  276. fffff800`48cd4bba cd29            int     29h
  277. Resetting default scope
  278.  
  279. EXCEPTION_RECORD:  ffffeb89522c37c8 -- (.exr 0xffffeb89522c37c8)
  280. ExceptionAddress: fffff80048cd4bba (nfs41_driver!RtlFailFast+0x000000000000000a)
  281.    ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  282.   ExceptionFlags: 00000001
  283. NumberParameters: 1
  284.    Parameter[0]: 0000000000000003
  285. Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
  286.  
  287. BLACKBOXBSD: 1 (!blackboxbsd)
  288.  
  289.  
  290. BLACKBOXNTFS: 1 (!blackboxntfs)
  291.  
  292.  
  293. BLACKBOXWINLOGON: 1
  294.  
  295. PROCESS_NAME:  System
  296.  
  297. ERROR_CODE: (NTSTATUS) 0xc0000409 - Das System hat in dieser Anwendung den  berlauf eines stapelbasierten Puffers ermittelt. Dieser  berlauf k nnte einem b sartigen Benutzer erm glichen, die Steuerung der Anwendung zu  bernehmen.
  298.  
  299. EXCEPTION_CODE_STR:  c0000409
  300.  
  301. EXCEPTION_PARAMETER1:  0000000000000003
  302.  
  303. EXCEPTION_STR:  0xc0000409
  304.  
  305. STACK_TEXT:  
  306. ffffeb89`522c3548 fffff800`424125a9     : 00000000`00000139 00000000`00000003 ffffeb89`522c3870 ffffeb89`522c37c8 : nt!KeBugCheckEx
  307. ffffeb89`522c3550 fffff800`42412b50     : 00000000`00000000 00000000`00000000 ffffeb89`522c3790 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  308. ffffeb89`522c3690 fffff800`424109f2     : ffffda8b`05b9b080 fffff800`48cd6620 00000000`00000000 fffff800`48cf2e70 : nt!KiFastFailDispatch+0xd0
  309. ffffeb89`522c3870 fffff800`48cd4bba     : fffff800`48cd3e7d 00000000`00000003 fffff800`422353da 00000000`00000001 : nt!KiRaiseSecurityCheckFailure+0x332
  310. ffffeb89`522c3a08 fffff800`48cd3e7d     : 00000000`00000003 fffff800`422353da 00000000`00000001 00000000`75706361 : nfs41_driver!RtlFailFast+0xa [C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h @ 11545]
  311. ffffeb89`522c3a10 fffff800`48cd4c11     : fffff800`48cf6d60 fffff800`48cf6d60 00000000`00000000 fffff800`4223c243 : nfs41_driver!FatalListEntryError+0x1d [C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h @ 11779]
  312. ffffeb89`522c3a40 fffff800`48cd4248     : fffff800`48cf6d60 fffff800`48cd3e4e ffffda8b`0dd66b00 00000000`00000001 : nfs41_driver!RtlpCheckListEntry+0x51 [C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h @ 11794]
  313. ffffeb89`522c3a70 fffff800`48ce1d9d     : fffff800`48cf6d60 ffffda8b`0dd66b38 fffff800`00000000 fffff800`00000000 : nfs41_driver!InsertTailList+0x18 [C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h @ 11900]
  314. ffffeb89`522c3ab0 fffff800`48cd6812     : ffffda8b`0dd66ae0 ffff9b00`00000032 00000200`124b2980 00000200`ba80d8a0 : nfs41_driver!nfs41_UpcallWaitForReply+0x3d [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1645]
  315. ffffeb89`522c3b30 fffff800`42348da5     : 00000000`00000000 fffff800`48cd6620 00000000`00000000 00078404`ad9b3dfe : nfs41_driver!fcbopen_main+0x1f2 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 7485]
  316. ffffeb89`522c3c10 fffff800`42406de8     : ffffc400`ee526180 ffffda8b`05b9b080 fffff800`42348d50 001c99d8`001c99ca : nt!PspSystemThreadStartup+0x55
  317. ffffeb89`522c3c60 00000000`00000000     : ffffeb89`522c4000 ffffeb89`522be000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  318.  
  319.  
  320. FAULTING_SOURCE_LINE:  C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h
  321.  
  322. FAULTING_SOURCE_FILE:  C:\Program Files (x86)\Windows Kits\10\Include\10.0.19041.0\km\wdm.h
  323.  
  324. FAULTING_SOURCE_LINE_NUMBER:  11545
  325.  
  326. FAULTING_SOURCE_CODE:  
  327.  11541:     )
  328.  11542:
  329.  11543: {
  330.  11544:
  331. >11545:     __fastfail(Code);
  332.  11546: }
  333.  11547:
  334.  11548: #endif // _MSC_VER
  335.  11549:
  336.  11550: //
  337.  
  338.  
  339. SYMBOL_NAME:  nfs41_driver!RtlFailFast+a
  340.  
  341. MODULE_NAME: nfs41_driver
  342.  
  343. IMAGE_NAME:  nfs41_driver.sys
  344.  
  345. STACK_COMMAND:  .cxr; .ecxr ; kb
  346.  
  347. BUCKET_ID_FUNC_OFFSET:  a
  348.  
  349. FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_nfs41_driver!RtlFailFast
  350.  
  351. OS_VERSION:  10.0.19041.1
  352.  
  353. BUILDLAB_STR:  vb_release
  354.  
  355. OSPLATFORM_TYPE:  x64
  356.  
  357. OSNAME:  Windows 10
  358.  
  359. FAILURE_ID_HASH:  {7fe0db02-499d-ef29-7ce7-92b961f8dd2f}
  360.  
  361. Followup:     MachineOwner
  362. ---------

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at