- ************* Preparing the environment for Debugger Extensions Gallery repositories **************
 - ExtensionRepository : Implicit
 - UseExperimentalFeatureForNugetShare : true
 - AllowNugetExeUpdate : true
 - NonInteractiveNuget : true
 - AllowNugetMSCredentialProviderInstall : true
 - AllowParallelInitializationOfLocalRepositories : true
 - EnableRedirectToV8JsProvider : false
 - -- Configuring repositories
 - ----> Repository : LocalInstalled, Enabled: true
 - ----> Repository : UserExtensions, Enabled: true
 - >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.015 seconds
 - ************* Waiting for Debugger Extensions Gallery to Initialize **************
 - >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.406 seconds
 - ----> Repository : UserExtensions, Enabled: true, Packages count: 0
 - ----> Repository : LocalInstalled, Enabled: true, Packages count: 41
 - Microsoft (R) Windows Debugger Version 10.0.27553.1004 AMD64
 - Copyright (c) Microsoft Corporation. All rights reserved.
 - Loading Dump File [C:\Windows\MEMORY.DMP]
 - Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
 - ************* Path validation summary **************
 - Response Time (ms) Location
 - Deferred srv*
 - Symbol search path is: srv*
 - Executable search path is:
 - Windows 10 Kernel Version 19041 MP (8 procs) Free x64
 - Product: WinNt, suite: TerminalServer SingleUserTS
 - Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
 - Kernel base = 0xfffff803`35c00000 PsLoadedModuleList = 0xfffff803`3682a2c0
 - Debug session time: Wed May 8 08:35:05.612 2024 (UTC + 2:00)
 - System Uptime: 0 days 14:44:35.538
 - Loading Kernel Symbols
 - ...............................................................
 - ................................................................
 - ................................................................
 - ......
 - Loading User Symbols
 - Loading unloaded module list
 - .......
 - For analysis of this file, run !analyze -v
 - nt!KeBugCheckEx:
 - fffff803`35ffdaf0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffffe8a`4cca7a70=0000000000000018
 - 2: kd> !analyze -v
 - *******************************************************************************
 - * *
 - * Bugcheck Analysis *
 - * *
 - *******************************************************************************
 - REFERENCE_BY_POINTER (18)
 - Arguments:
 - Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
 - Arg2: ffffad0e479e9710, Object whose reference count is being lowered
 - Arg3: 0000000000000010, Reserved
 - Arg4: ffffdb838684a669, Reserved
 - The reference count of an object is illegal for the current state of the object.
 - Each time a driver uses a pointer to an object the driver calls a kernel routine
 - to increment the reference count of the object. When the driver is done with the
 - pointer the driver calls another kernel routine to decrement the reference count.
 - Drivers must match calls to the increment and decrement routines. This BugCheck
 - can occur because an object's reference count goes to zero while there are still
 - open handles to the object, in which case the fourth parameter indicates the number
 - of opened handles. It may also occur when the object's reference count drops below zero
 - whether or not there are open handles to the object, and in that case the fourth parameter
 - contains the actual value of the pointer references count.
 - Debugging Details:
 - ------------------
 - KEY_VALUES_STRING: 1
 - Key : Analysis.CPU.mSec
 - Value: 4592
 - Key : Analysis.Elapsed.mSec
 - Value: 4687
 - Key : Analysis.IO.Other.Mb
 - Value: 0
 - Key : Analysis.IO.Read.Mb
 - Value: 2
 - Key : Analysis.IO.Write.Mb
 - Value: 1
 - Key : Analysis.Init.CPU.mSec
 - Value: 1108
 - Key : Analysis.Init.Elapsed.mSec
 - Value: 14525
 - Key : Analysis.Memory.CommitPeak.Mb
 - Value: 98
 - Key : Bugcheck.Code.KiBugCheckData
 - Value: 0x18
 - Key : Bugcheck.Code.LegacyAPI
 - Value: 0x18
 - Key : Bugcheck.Code.TargetModel
 - Value: 0x18
 - Key : Failure.Bucket
 - Value: 0x18_nfs41_driver!nfs41_UpcallCreate
 - Key : Failure.Hash
 - Value: {13fc455a-d437-8a05-650f-dce234632809}
 - Key : Hypervisor.Enlightenments.Value
 - Value: 12576
 - Key : Hypervisor.Enlightenments.ValueHex
 - Value: 3120
 - Key : Hypervisor.Flags.AnyHypervisorPresent
 - Value: 1
 - Key : Hypervisor.Flags.ApicEnlightened
 - Value: 0
 - Key : Hypervisor.Flags.ApicVirtualizationAvailable
 - Value: 0
 - Key : Hypervisor.Flags.AsyncMemoryHint
 - Value: 0
 - Key : Hypervisor.Flags.CoreSchedulerRequested
 - Value: 0
 - Key : Hypervisor.Flags.CpuManager
 - Value: 0
 - Key : Hypervisor.Flags.DeprecateAutoEoi
 - Value: 1
 - Key : Hypervisor.Flags.DynamicCpuDisabled
 - Value: 0
 - Key : Hypervisor.Flags.Epf
 - Value: 0
 - Key : Hypervisor.Flags.ExtendedProcessorMasks
 - Value: 0
 - Key : Hypervisor.Flags.HardwareMbecAvailable
 - Value: 0
 - Key : Hypervisor.Flags.MaxBankNumber
 - Value: 0
 - Key : Hypervisor.Flags.MemoryZeroingControl
 - Value: 0
 - Key : Hypervisor.Flags.NoExtendedRangeFlush
 - Value: 1
 - Key : Hypervisor.Flags.NoNonArchCoreSharing
 - Value: 0
 - Key : Hypervisor.Flags.Phase0InitDone
 - Value: 1
 - Key : Hypervisor.Flags.PowerSchedulerQos
 - Value: 0
 - Key : Hypervisor.Flags.RootScheduler
 - Value: 0
 - Key : Hypervisor.Flags.SynicAvailable
 - Value: 1
 - Key : Hypervisor.Flags.UseQpcBias
 - Value: 0
 - Key : Hypervisor.Flags.Value
 - Value: 536632
 - Key : Hypervisor.Flags.ValueHex
 - Value: 83038
 - Key : Hypervisor.Flags.VpAssistPage
 - Value: 1
 - Key : Hypervisor.Flags.VsmAvailable
 - Value: 0
 - Key : Hypervisor.RootFlags.AccessStats
 - Value: 0
 - Key : Hypervisor.RootFlags.CrashdumpEnlightened
 - Value: 0
 - Key : Hypervisor.RootFlags.CreateVirtualProcessor
 - Value: 0
 - Key : Hypervisor.RootFlags.DisableHyperthreading
 - Value: 0
 - Key : Hypervisor.RootFlags.HostTimelineSync
 - Value: 0
 - Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
 - Value: 0
 - Key : Hypervisor.RootFlags.IsHyperV
 - Value: 0
 - Key : Hypervisor.RootFlags.LivedumpEnlightened
 - Value: 0
 - Key : Hypervisor.RootFlags.MapDeviceInterrupt
 - Value: 0
 - Key : Hypervisor.RootFlags.MceEnlightened
 - Value: 0
 - Key : Hypervisor.RootFlags.Nested
 - Value: 0
 - Key : Hypervisor.RootFlags.StartLogicalProcessor
 - Value: 0
 - Key : Hypervisor.RootFlags.Value
 - Value: 0
 - Key : Hypervisor.RootFlags.ValueHex
 - Value: 0
 - Key : SecureKernel.HalpHvciEnabled
 - Value: 0
 - Key : WER.OS.Branch
 - Value: vb_release
 - Key : WER.OS.Version
 - Value: 10.0.19041.1
 - BUGCHECK_CODE: 18
 - BUGCHECK_P1: 0
 - BUGCHECK_P2: ffffad0e479e9710
 - BUGCHECK_P3: 10
 - BUGCHECK_P4: ffffdb838684a669
 - FILE_IN_CAB: MEMORY.DMP
 - BLACKBOXBSD: 1 (!blackboxbsd)
 - BLACKBOXNTFS: 1 (!blackboxntfs)
 - BLACKBOXWINLOGON: 1
 - PROCESS_NAME: System
 - STACK_TEXT:
 - fffffe8a`4cca7a68 fffff803`3601e05b : 00000000`00000018 00000000`00000000 ffffad0e`479e9710 00000000`00000010 : nt!KeBugCheckEx
 - fffffe8a`4cca7a70 fffff803`3b4b0d49 : ffffdb83`80e7c080 fffff803`3b4a6260 fffff803`3b4a6260 fffff803`00000000 : nt!ObfReferenceObject+0x1e08eb
 - fffffe8a`4cca7ab0 fffff803`3b4a63e3 : fffff803`00000009 ffffad0e`47969eb0 00000182`772981c0 00000182`77f1bea0 : nfs41_driver!nfs41_UpcallCreate+0x279 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1586]
 - fffffe8a`4cca7b30 fffff803`35f4eb35 : 00000000`00000000 fffff803`3b4a6260 00000000`00000000 00078404`ad9b3dfe : nfs41_driver!fcbopen_main+0x183 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 7185]
 - fffffe8a`4cca7c10 fffff803`36006af8 : ffffc501`06d18180 ffffdb83`80e7c080 fffff803`35f4eae0 d28b49d3`034c0000 : nt!PspSystemThreadStartup+0x55
 - fffffe8a`4cca7c60 00000000`00000000 : fffffe8a`4cca8000 fffffe8a`4cca2000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
 - FAULTING_SOURCE_LINE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
 - FAULTING_SOURCE_FILE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
 - FAULTING_SOURCE_LINE_NUMBER: 1586
 - FAULTING_SOURCE_CODE:
 - 1582: entry->psec_ctx_clienttoken = entry->psec_ctx->ClientToken;
 - 1583: ObReferenceObject(entry->psec_ctx_clienttoken);
 - 1584: }
 - 1585:
 - > 1586: *entry_out = entry;
 - 1587: out:
 - 1588: return status;
 - 1589: }
 - 1590:
 - 1591: void nfs41_UpcallDestroy(nfs41_updowncall_entry *entry)
 - SYMBOL_NAME: nfs41_driver!nfs41_UpcallCreate+279
 - MODULE_NAME: nfs41_driver
 - IMAGE_NAME: nfs41_driver.sys
 - STACK_COMMAND: .cxr; .ecxr ; kb
 - BUCKET_ID_FUNC_OFFSET: 279
 - FAILURE_BUCKET_ID: 0x18_nfs41_driver!nfs41_UpcallCreate
 - OS_VERSION: 10.0.19041.1
 - BUILDLAB_STR: vb_release
 - OSPLATFORM_TYPE: x64
 - OSNAME: Windows 10
 - FAILURE_ID_HASH: {13fc455a-d437-8a05-650f-dce234632809}
 - Followup: MachineOwner
 - ---------
 
Crash in nfs41_UpcallCreate()
Posted by Anonymous on Wed 8th May 2024 07:41
raw | new post
view followups (newest first): Crash in nfs41_UpcallCreate() by Anonymous
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.
 nrubsig.kpaste.net RSS