- ************* Preparing the environment for Debugger Extensions Gallery repositories **************
 - ExtensionRepository : Implicit
 - UseExperimentalFeatureForNugetShare : true
 - AllowNugetExeUpdate : true
 - AllowNugetMSCredentialProviderInstall : true
 - AllowParallelInitializationOfLocalRepositories : true
 - -- Configuring repositories
 - ----> Repository : LocalInstalled, Enabled: true
 - ----> Repository : UserExtensions, Enabled: true
 - >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.016 seconds
 - ************* Waiting for Debugger Extensions Gallery to Initialize **************
 - >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.313 seconds
 - ----> Repository : UserExtensions, Enabled: true, Packages count: 0
 - ----> Repository : LocalInstalled, Enabled: true, Packages count: 36
 - Microsoft (R) Windows Debugger Version 10.0.25921.1001 AMD64
 - Copyright (c) Microsoft Corporation. All rights reserved.
 - Loading Dump File [C:\cygwin64\home\roland_mainz\tmp\nfs_crash20231102_002_MEMORY.DMP]
 - Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
 - ************* Path validation summary **************
 - Response Time (ms) Location
 - Deferred srv*
 - Symbol search path is: srv*
 - Executable search path is:
 - Windows 10 Kernel Version 19041 MP (6 procs) Free x64
 - Product: WinNt, suite: TerminalServer SingleUserTS
 - Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
 - Kernel base = 0xfffff806`46000000 PsLoadedModuleList = 0xfffff806`46c2a360
 - Debug session time: Thu Nov 2 22:05:10.029 2023 (UTC + 1:00)
 - System Uptime: 0 days 13:30:26.743
 - Loading Kernel Symbols
 - ...............................................................
 - ................................................................
 - ................................................................
 - Loading User Symbols
 - PEB is paged out (Peb.Ldr = 00000077`55071018). Type ".hh dbgerr001" for details
 - Loading unloaded module list
 - ........
 - For analysis of this file, run !analyze -v
 - Unable to load image \SystemRoot\system32\DRIVERS\nfs41_driver.sys, Win32 error 0n2
 - nt!KeBugCheckEx:
 - fffff806`463fd640 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffffd87`3b27bf20=0000000000000027
 - 0: kd> !analyze -v
 - *******************************************************************************
 - * *
 - * Bugcheck Analysis *
 - * *
 - *******************************************************************************
 - RDR_FILE_SYSTEM (27)
 - If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
 - exception record and context record. Do a .cxr on the 3rd parameter and then kb to
 - obtain a more informative stack trace.
 - The high 16 bits of the first parameter is the RDBSS BugCheck code, which is defined
 - as follows:
 - RDBSS_BUG_CHECK_CACHESUP = 0xca550000,
 - RDBSS_BUG_CHECK_CLEANUP = 0xc1ee0000,
 - RDBSS_BUG_CHECK_CLOSE = 0xc10e0000,
 - RDBSS_BUG_CHECK_NTEXCEPT = 0xbaad0000,
 - Arguments:
 - Arg1: 00000000baad0080
 - Arg2: fffffd873b27cf88
 - Arg3: fffffd873b27c7c0
 - Arg4: fffff806465f7617
 - Debugging Details:
 - ------------------
 - KEY_VALUES_STRING: 1
 - Key : AV.Fault
 - Value: Read
 - Key : Analysis.CPU.mSec
 - Value: 3968
 - Key : Analysis.Elapsed.mSec
 - Value: 4006
 - Key : Analysis.IO.Other.Mb
 - Value: 0
 - Key : Analysis.IO.Read.Mb
 - Value: 1
 - Key : Analysis.IO.Write.Mb
 - Value: 2
 - Key : Analysis.Init.CPU.mSec
 - Value: 1000
 - Key : Analysis.Init.Elapsed.mSec
 - Value: 7317
 - Key : Analysis.Memory.CommitPeak.Mb
 - Value: 96
 - Key : Bugcheck.Code.KiBugCheckData
 - Value: 0x27
 - Key : Bugcheck.Code.LegacyAPI
 - Value: 0x27
 - Key : Failure.Bucket
 - Value: 0x27_nfs41_driver!handle_upcall
 - Key : Failure.Hash
 - Value: {8cc3c03c-4f74-c78a-fa41-0d8f60b7b819}
 - Key : Hypervisor.Enlightenments.Value
 - Value: 12576
 - Key : Hypervisor.Enlightenments.ValueHex
 - Value: 3120
 - Key : Hypervisor.Flags.AnyHypervisorPresent
 - Value: 1
 - Key : Hypervisor.Flags.ApicEnlightened
 - Value: 0
 - Key : Hypervisor.Flags.ApicVirtualizationAvailable
 - Value: 0
 - Key : Hypervisor.Flags.AsyncMemoryHint
 - Value: 0
 - Key : Hypervisor.Flags.CoreSchedulerRequested
 - Value: 0
 - Key : Hypervisor.Flags.CpuManager
 - Value: 0
 - Key : Hypervisor.Flags.DeprecateAutoEoi
 - Value: 1
 - Key : Hypervisor.Flags.DynamicCpuDisabled
 - Value: 0
 - Key : Hypervisor.Flags.Epf
 - Value: 0
 - Key : Hypervisor.Flags.ExtendedProcessorMasks
 - Value: 0
 - Key : Hypervisor.Flags.HardwareMbecAvailable
 - Value: 0
 - Key : Hypervisor.Flags.MaxBankNumber
 - Value: 0
 - Key : Hypervisor.Flags.MemoryZeroingControl
 - Value: 0
 - Key : Hypervisor.Flags.NoExtendedRangeFlush
 - Value: 1
 - Key : Hypervisor.Flags.NoNonArchCoreSharing
 - Value: 0
 - Key : Hypervisor.Flags.Phase0InitDone
 - Value: 1
 - Key : Hypervisor.Flags.PowerSchedulerQos
 - Value: 0
 - Key : Hypervisor.Flags.RootScheduler
 - Value: 0
 - Key : Hypervisor.Flags.SynicAvailable
 - Value: 1
 - Key : Hypervisor.Flags.UseQpcBias
 - Value: 0
 - Key : Hypervisor.Flags.Value
 - Value: 536632
 - Key : Hypervisor.Flags.ValueHex
 - Value: 83038
 - Key : Hypervisor.Flags.VpAssistPage
 - Value: 1
 - Key : Hypervisor.Flags.VsmAvailable
 - Value: 0
 - Key : Hypervisor.RootFlags.AccessStats
 - Value: 0
 - Key : Hypervisor.RootFlags.CrashdumpEnlightened
 - Value: 0
 - Key : Hypervisor.RootFlags.CreateVirtualProcessor
 - Value: 0
 - Key : Hypervisor.RootFlags.DisableHyperthreading
 - Value: 0
 - Key : Hypervisor.RootFlags.HostTimelineSync
 - Value: 0
 - Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
 - Value: 0
 - Key : Hypervisor.RootFlags.IsHyperV
 - Value: 0
 - Key : Hypervisor.RootFlags.LivedumpEnlightened
 - Value: 0
 - Key : Hypervisor.RootFlags.MapDeviceInterrupt
 - Value: 0
 - Key : Hypervisor.RootFlags.MceEnlightened
 - Value: 0
 - Key : Hypervisor.RootFlags.Nested
 - Value: 0
 - Key : Hypervisor.RootFlags.StartLogicalProcessor
 - Value: 0
 - Key : Hypervisor.RootFlags.Value
 - Value: 0
 - Key : Hypervisor.RootFlags.ValueHex
 - Value: 0
 - Key : SecureKernel.HalpHvciEnabled
 - Value: 0
 - Key : WER.OS.Branch
 - Value: vb_release
 - Key : WER.OS.Version
 - Value: 10.0.19041.1
 - BUGCHECK_CODE: 27
 - BUGCHECK_P1: baad0080
 - BUGCHECK_P2: fffffd873b27cf88
 - BUGCHECK_P3: fffffd873b27c7c0
 - BUGCHECK_P4: fffff806465f7617
 - FILE_IN_CAB: nfs_crash20231102_002_MEMORY.DMP
 - EXCEPTION_RECORD: fffffd873b27cf88 -- (.exr 0xfffffd873b27cf88)
 - ExceptionAddress: fffff806465f7617 (nt!SeTokenCanImpersonate+0x0000000000000047)
 - ExceptionCode: c0000005 (Access violation)
 - ExceptionFlags: 00000000
 - NumberParameters: 2
 - Parameter[0]: 0000000000000000
 - Parameter[1]: ffffffffffffffff
 - Attempt to read from address ffffffffffffffff
 - CONTEXT: fffffd873b27c7c0 -- (.cxr 0xfffffd873b27c7c0)
 - rax=fffffd873b27d228 rbx=000000000065006c rcx=ffffaf89e2b130c0
 - rdx=007200610077002d rsi=007200610077002d rdi=ffffaf89e2b130c0
 - rip=fffff806465f7617 rsp=fffffd873b27d1c0 rbp=ffff8801b18f5300
 - r8=000000000065006c r9=fffffd873b27d2c0 r10=ffff8801ae4f2080
 - r11=fffffd873b27d2c0 r12=0000000000000000 r13=ffff8801af1787f8
 - r14=ffffaf89e2b130c0 r15=0000000000000001
 - iopl=0 nv up ei pl nz na po nc
 - cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
 - nt!SeTokenCanImpersonate+0x47:
 - fffff806`465f7617 817a18e6030000 cmp dword ptr [rdx+18h],3E6h ds:002b:00720061`00770045=????????
 - Resetting default scope
 - BLACKBOXBSD: 1 (!blackboxbsd)
 - BLACKBOXNTFS: 1 (!blackboxntfs)
 - BLACKBOXPNP: 1 (!blackboxpnp)
 - BLACKBOXWINLOGON: 1
 - PROCESS_NAME: nfsd_debug.exe
 - READ_ADDRESS: ffffffffffffffff
 - ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden.
 - EXCEPTION_CODE_STR: c0000005
 - EXCEPTION_PARAMETER1: 0000000000000000
 - EXCEPTION_PARAMETER2: ffffffffffffffff
 - EXCEPTION_STR: 0xc0000005
 - STACK_TEXT:
 - fffffd87`3b27d1c0 fffff806`465f7ac6 : ffff8801`af178300 fffff806`4a0dfe00 00000000`00000000 fffffd87`00000000 : nt!SeTokenCanImpersonate+0x47
 - fffffd87`3b27d230 fffff806`46721035 : 00000000`00000000 fffff806`0065006c ffff8801`afaa8010 fffffd87`3b27d368 : nt!PsImpersonateClient+0x126
 - fffffd87`3b27d2c0 fffff806`4a0c4869 : 00000000`00000001 ffff8801`b18f5330 fffff806`4a0dfe40 fffff806`4621dff0 : nt!SeImpersonateClientEx+0x35
 - fffffd87`3b27d300 fffff806`4a0d00d7 : ffff8801`afaa8010 ffff8801`ae603a30 fffffd87`3b27d384 00000000`00000000 : nfs41_driver!handle_upcall+0x59 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1331]
 - fffffd87`3b27d350 fffff806`4a0c9de8 : ffff8801`afaa8010 fffffd87`00282018 00000000`00000000 ffff8801`ad656250 : nfs41_driver!nfs41_upcall+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1547]
 - fffffd87`3b27d3c0 fffff806`4a0f5976 : ffff8801`afaa8010 ffff8801`a8467770 00000000`00000002 ffff8801`afaa8010 : nfs41_driver!nfs41_DevFcbXXXControlFile+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2363]
 - fffffd87`3b27d440 fffff806`4a0f5698 : ffff8801`afaa8010 ffff8801`afaa8010 ffff8801`a8467700 ffff8801`afaa8010 : nfs41_driver!RxXXXControlFileCallthru+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130]
 - fffffd87`3b27d470 fffff806`4a0d5a52 : 00000000`00000000 ffff8801`b18f5330 ffff8801`a8467701 00000000`00000000 : nfs41_driver!RxCommonDevFCBIoCtl+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491]
 - fffffd87`3b27d4a0 fffff806`4a0ec97d : fffff806`4a0df370 00000000`00000000 ffff8801`ad6561b0 ffff8801`a8467770 : nfs41_driver!RxFsdCommonDispatch+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
 - fffffd87`3b27d5a0 fffff806`4a0ca927 : ffff8801`b2a02db0 00000000`00000001 00000000`00000000 00000000`00000000 : nfs41_driver!RxFsdDispatch+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
 - fffffd87`3b27d5d0 fffff806`46210665 : ffff8801`a8467770 ffff8801`b18f5330 ffff8801`ae4f2730 fffff806`4621ffcb : nfs41_driver!nfs41_FsdDispatch+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6618]
 - fffffd87`3b27d610 fffff806`4976f248 : fffff806`49768000 00000000`00000000 ffff8801`a8d73dd0 ffff8801`af8c3368 : nt!IofCallDriver+0x55
 - fffffd87`3b27d650 fffff806`4976ed99 : ffffaf89`d441b510 00000000`00000000 fffff806`49768000 00000000`00000000 : mup!MupiCallUncProvider+0xb8
 - fffffd87`3b27d6c0 fffff806`4976ecce : ffff8801`b18f5330 ffff8801`af8c3360 ffff8801`ad6561b0 00000000`00000000 : mup!MupStateMachine+0x59
 - fffffd87`3b27d6f0 fffff806`46210665 : ffff8801`ad6561b0 00000000`00000000 ffff8801`b2a02db0 00000000`00000001 : mup!MupFsdIrpPassThrough+0x17e
 - fffffd87`3b27d760 fffff806`42a84a76 : 00000000`00282018 fffffd87`3b27d958 ffff8801`a8467770 fffff806`46602441 : nt!IofCallDriver+0x55
 - fffffd87`3b27d7a0 fffff806`46210665 : 00000000`00000002 00000000`00000000 fffffd87`20206f49 fffffd87`3b27d958 : FLTMGR!FltpDispatch+0xd6
 - fffffd87`3b27d800 fffff806`4660142c : 00000000`00000001 ffff8801`b18f54d8 ffff8801`ad6561b0 ffff8801`af178340 : nt!IofCallDriver+0x55
 - fffffd87`3b27d840 fffff806`46601081 : ffff8801`b18f54d8 fffffd87`3b27db80 00000000`00000005 ffff8801`b18f54d8 : nt!IopSynchronousServiceTail+0x34c
 - fffffd87`3b27d8e0 fffff806`466003f6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xc71
 - fffffd87`3b27da20 fffff806`46410ef5 : 00000000`00000000 fffff806`462204de ffff8801`ad150080 00000077`55071000 : nt!NtDeviceIoControlFile+0x56
 - fffffd87`3b27da90 00007ffd`d056d0c4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
 - 00000077`565fde08 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`d056d0c4
 - FAULTING_SOURCE_LINE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
 - FAULTING_SOURCE_FILE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
 - FAULTING_SOURCE_LINE_NUMBER: 1331
 - FAULTING_SOURCE_CODE:
 - 1327: PLOWIO_CONTEXT LowIoContext = &RxContext->LowIoContext;
 - 1328: ULONG cbOut = LowIoContext->ParamsFor.IoCtl.OutputBufferLength;
 - 1329: unsigned char *pbOut = LowIoContext->ParamsFor.IoCtl.pOutputBuffer;
 - 1330:
 - > 1331: status = SeImpersonateClientEx(entry->psec_ctx, NULL);
 - 1332: if (status != STATUS_SUCCESS) {
 - 1333: print_error("SeImpersonateClientEx failed %x\n", status);
 - 1334: goto out;
 - 1335: }
 - 1336:
 - SYMBOL_NAME: nfs41_driver!handle_upcall+59
 - MODULE_NAME: nfs41_driver
 - IMAGE_NAME: nfs41_driver.sys
 - STACK_COMMAND: .cxr 0xfffffd873b27c7c0 ; kb
 - BUCKET_ID_FUNC_OFFSET: 59
 - FAILURE_BUCKET_ID: 0x27_nfs41_driver!handle_upcall
 - OS_VERSION: 10.0.19041.1
 - BUILDLAB_STR: vb_release
 - OSPLATFORM_TYPE: x64
 - OSNAME: Windows 10
 - FAILURE_ID_HASH: {8cc3c03c-4f74-c78a-fa41-0d8f60b7b819}
 - Followup: MachineOwner
 - ---------
 - 0: kd> .exr 0xfffffd873b27cf88
 - ExceptionAddress: fffff806465f7617 (nt!SeTokenCanImpersonate+0x0000000000000047)
 - ExceptionCode: c0000005 (Access violation)
 - ExceptionFlags: 00000000
 - NumberParameters: 2
 - Parameter[0]: 0000000000000000
 - Parameter[1]: ffffffffffffffff
 - Attempt to read from address ffffffffffffffff
 - 0: kd> kp
 - # Child-SP RetAddr Call Site
 - 00 fffffd87`3b27bf18 fffff806`4a0d71c9 nt!KeBugCheckEx
 - 01 fffffd87`3b27bf20 fffff806`4a0dafc0 nfs41_driver!RxExceptionFilter(struct _RX_CONTEXT * RxContext = 0xffff8801`afaa8010, struct _EXCEPTION_POINTERS * ExceptionPointer = 0xfffffd87`3b27c000)+0x159 [base\fs\rdr2\rdbss\ntexcept.c @ 126]
 - 02 fffffd87`3b27bf90 fffff806`463d01bf nfs41_driver!RxFsdCommonDispatch$filt$0+0x15 [base\fs\rdr2\rdbss\ntfsd.c @ 876]
 - 03 fffffd87`3b27bfd0 fffff806`46407d2f nt!_C_specific_handler+0x9f
 - 04 fffffd87`3b27c040 fffff806`462ca3c7 nt!RtlpExecuteHandlerForException+0xf
 - 05 fffffd87`3b27c070 fffff806`462c94e6 nt!RtlDispatchException+0x297
 - 06 fffffd87`3b27c790 fffff806`4641186c nt!KiDispatchException+0x186
 - 07 fffffd87`3b27ce50 fffff806`4640ce5a nt!KiExceptionDispatch+0x12c
 - 08 fffffd87`3b27d030 fffff806`465f7617 nt!KiGeneralProtectionFault+0x31a
 - 09 fffffd87`3b27d1c0 fffff806`465f7ac6 nt!SeTokenCanImpersonate+0x47
 - 0a fffffd87`3b27d230 fffff806`46721035 nt!PsImpersonateClient+0x126
 - 0b fffffd87`3b27d2c0 fffff806`4a0c4869 nt!SeImpersonateClientEx+0x35
 - 0c fffffd87`3b27d300 fffff806`4a0d00d7 nfs41_driver!handle_upcall(struct _RX_CONTEXT * RxContext = 0xffff8801`afaa8010, struct _updowncall_entry * entry = 0xffff8801`ae603a30, unsigned long * len = 0xfffffd87`3b27d384)+0x59 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1331]
 - 0d fffffd87`3b27d350 fffff806`4a0c9de8 nfs41_driver!nfs41_upcall(struct _RX_CONTEXT * RxContext = 0xffff8801`afaa8010)+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1547]
 - 0e fffffd87`3b27d3c0 fffff806`4a0f5976 nfs41_driver!nfs41_DevFcbXXXControlFile(struct _RX_CONTEXT * RxContext = 0xffff8801`afaa8010)+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2363]
 - 0f fffffd87`3b27d440 fffff806`4a0f5698 nfs41_driver!RxXXXControlFileCallthru(struct _RX_CONTEXT * RxContext = 0xffff8801`afaa8010, struct _IRP * Irp = 0xffff8801`b18f5330)+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130]
 - 10 fffffd87`3b27d470 fffff806`4a0d5a52 nfs41_driver!RxCommonDevFCBIoCtl(struct _RX_CONTEXT * RxContext = 0xffff8801`afaa8010, struct _IRP * Irp = <Value unavailable error>)+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491]
 - 11 fffffd87`3b27d4a0 fffff806`4a0ec97d nfs41_driver!RxFsdCommonDispatch(struct _RX_FSD_DISPATCH_VECTOR * DispatchVector = 0xfffff806`4a0df370, struct _IRP * Irp = 0xffff8801`b18f5330, struct _FILE_OBJECT * FileObject = 0xffff8801`ad6561b0 "" - Device for "\FileSystem\Mup", struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = 0xffff8801`a8467770)+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
 - 12 fffffd87`3b27d5a0 fffff806`4a0ca927 nfs41_driver!RxFsdDispatch(struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = <Value unavailable error>, struct _IRP * Irp = <Value unavailable error>)+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
 - 13 fffffd87`3b27d5d0 fffff806`46210665 nfs41_driver!nfs41_FsdDispatch(struct _DEVICE_OBJECT * dev = 0xffff8801`a8467770 Device for "\FileSystem\nfs41_driver", struct _IRP * Irp = 0xffff8801`b18f5330)+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6618]
 - 14 fffffd87`3b27d610 fffff806`4976f248 nt!IofCallDriver+0x55
 - 15 fffffd87`3b27d650 fffff806`4976ed99 mup!MupiCallUncProvider+0xb8
 - 16 fffffd87`3b27d6c0 fffff806`4976ecce mup!MupStateMachine+0x59
 - 17 fffffd87`3b27d6f0 fffff806`46210665 mup!MupFsdIrpPassThrough+0x17e
 - 18 fffffd87`3b27d760 fffff806`42a84a76 nt!IofCallDriver+0x55
 - 19 fffffd87`3b27d7a0 fffff806`46210665 FLTMGR!FltpDispatch+0xd6
 - 1a fffffd87`3b27d800 fffff806`4660142c nt!IofCallDriver+0x55
 - 1b fffffd87`3b27d840 fffff806`46601081 nt!IopSynchronousServiceTail+0x34c
 - 1c fffffd87`3b27d8e0 fffff806`466003f6 nt!IopXxxControlFile+0xc71
 - 1d fffffd87`3b27da20 fffff806`46410ef5 nt!NtDeviceIoControlFile+0x56
 - 1e fffffd87`3b27da90 00007ffd`d056d0c4 nt!KiSystemServiceCopyEnd+0x25
 - 1f 00000077`565fde08 00000000`00000000 0x00007ffd`d056d0c4
 - 0: kd> .cxr 0xfffffd873b27c7c0
 - rax=fffffd873b27d228 rbx=000000000065006c rcx=ffffaf89e2b130c0
 - rdx=007200610077002d rsi=007200610077002d rdi=ffffaf89e2b130c0
 - rip=fffff806465f7617 rsp=fffffd873b27d1c0 rbp=ffff8801b18f5300
 - r8=000000000065006c r9=fffffd873b27d2c0 r10=ffff8801ae4f2080
 - r11=fffffd873b27d2c0 r12=0000000000000000 r13=ffff8801af1787f8
 - r14=ffffaf89e2b130c0 r15=0000000000000001
 - iopl=0 nv up ei pl nz na po nc
 - cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
 - nt!SeTokenCanImpersonate+0x47:
 - fffff806`465f7617 817a18e6030000 cmp dword ptr [rdx+18h],3E6h ds:002b:00720061`00770045=????????
 
Kernel panic 2
Posted by Anonymous on Thu 2nd Nov 2023 21:37
raw | new post
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.
 nrubsig.kpaste.net RSS