pastebin - collaborative debugging tool
nrubsig.kpaste.net RSS


Crash in DbgP() due wrong IRQ level
Posted by Anonymous on Sat 8th Nov 2025 20:55
raw | new post

  1.  
  2. Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64
  3. Copyright (c) Microsoft Corporation. All rights reserved.
  4.  
  5.  
  6. Loading Dump File [C:\Windows\MEMORY.DMP]
  7. Kernel Bitmap Dump File: Full address space is available
  8.  
  9. Symbol search path is: srv*
  10. Executable search path is:
  11. Windows 10 Kernel Version 19041 MP (8 procs) Free x64
  12. Product: WinNt, suite: TerminalServer SingleUserTS
  13. Built by: 19041.1.amd64fre.vb_release.191206-1406
  14. Machine Name:
  15. Kernel base = 0xfffff807`0fe00000 PsLoadedModuleList = 0xfffff807`10a2a420
  16. Debug session time: Sat Nov  8 21:41:51.918 2025 (UTC + 1:00)
  17. System Uptime: 0 days 2:54:15.944
  18. Loading Kernel Symbols
  19. ...............................................................
  20. ................................................................
  21. ................................................................
  22. .......................
  23. Loading User Symbols
  24. ........................................
  25. Loading unloaded module list
  26. ..............
  27. For analysis of this file, run !analyze -v
  28. 6: kd> !analyze -v
  29. *******************************************************************************
  30. *                                                                             *
  31. *                        Bugcheck Analysis                                    *
  32. *                                                                             *
  33. *******************************************************************************
  34.  
  35. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  36. An attempt was made to access a pageable (or completely invalid) address at an
  37. interrupt request level (IRQL) that is too high.  This is usually
  38. caused by drivers using improper addresses.
  39. If kernel debugger is available get stack backtrace.
  40. Arguments:
  41. Arg1: ffff890c9c8aaf14, memory referenced
  42. Arg2: 000000000000000c, IRQL
  43. Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
  44. Arg4: fffff807265415a1, address which referenced memory
  45.  
  46. Debugging Details:
  47. ------------------
  48.  
  49.  
  50. KEY_VALUES_STRING: 1
  51.  
  52.     Key  : Analysis.CPU.Sec
  53.     Value: 4
  54.  
  55.     Key  : Analysis.DebugAnalysisProvider.CPP
  56.     Value: Create: 8007007e on WINGRENDEL02
  57.  
  58.     Key  : Analysis.DebugData
  59.     Value: CreateObject
  60.  
  61.     Key  : Analysis.DebugModel
  62.     Value: CreateObject
  63.  
  64.     Key  : Analysis.Elapsed.Sec
  65.     Value: 14
  66.  
  67.     Key  : Analysis.Memory.CommitPeak.Mb
  68.     Value: 127
  69.  
  70.     Key  : Analysis.System
  71.     Value: CreateObject
  72.  
  73.  
  74. BUGCHECK_CODE:  d1
  75.  
  76. BUGCHECK_P1: ffff890c9c8aaf14
  77.  
  78. BUGCHECK_P2: c
  79.  
  80. BUGCHECK_P3: 1
  81.  
  82. BUGCHECK_P4: fffff807265415a1
  83.  
  84. WRITE_ADDRESS:  ffff890c9c8aaf14 Nonpaged pool
  85.  
  86. BLACKBOXBSD: 1 (!blackboxbsd)
  87.  
  88.  
  89. BLACKBOXNTFS: 1 (!blackboxntfs)
  90.  
  91.  
  92. BLACKBOXPNP: 1 (!blackboxpnp)
  93.  
  94.  
  95. BLACKBOXWINLOGON: 1
  96.  
  97. PROCESS_NAME:  nfsd.exe
  98.  
  99. TRAP_FRAME:  ffffec8de9901bc0 -- (.trap 0xffffec8de9901bc0)
  100. NOTE: The trap frame does not contain all registers.
  101. Some register values may be zeroed or incorrect.
  102. rax=0000000000000008 rbx=0000000000000000 rcx=0000000000000000
  103. rdx=0000000000000108 rsi=0000000000000000 rdi=0000000000000000
  104. rip=fffff807265415a1 rsp=ffffec8de9901d50 rbp=000000000000000c
  105.  r8=0000000000000000  r9=ffffec8de9901a00 r10=fffff807265453f8
  106. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
  107. r14=0000000000000000 r15=0000000000000000
  108. iopl=0         nv up ei pl zr na po nc
  109. Dbgv+0x15a1:
  110. fffff807`265415a1 894314          mov     dword ptr [rbx+14h],eax ds:00000000`00000014=????????
  111. Resetting default scope
  112.  
  113. STACK_TEXT:  
  114. ffffec8d`e9901a78 fffff807`10211da9 : 00000000`0000000a ffff890c`9c8aaf14 00000000`0000000c 00000000`00000001 : nt!KeBugCheckEx
  115. ffffec8d`e9901a80 fffff807`1020d778 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  116. ffffec8d`e9901bc0 fffff807`265415a1 : 00000000`00000000 fffff807`101720eb ffffec8d`e9901f2f 00000000`fffffffe : nt!KiPageFault+0x478
  117. ffffec8d`e9901d50 fffff807`102a886c : fffff807`26542ec0 ffffec8d`e9901f30 ffff890b`9ba97990 ffffec8d`e9901e30 : Dbgv+0x15a1
  118. ffffec8d`e9901d90 fffff807`1017f000 : ffff890b`99d9ca20 ffff890b`99d9ca20 ffff890b`99ca3dc0 fffff807`1875cde0 : nt!vDbgPrintExWithPrefixInternal+0x14448c
  119. ffffec8d`e9901f90 fffff807`18733155 : ffffec8d`e9902030 00000000`00000200 fffff807`187561d0 00000000`000024f4 : nt!DbgPrintEx+0x30
  120. ffffec8d`e9901fe0 fffff807`1874562c : fffff807`1875cde0 ffffac0a`6c402510 00000000`00020088 00000000`00000007 : nfs41_driver!DbgP+0xe5 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_debug.c @ 90]
  121. ffffec8d`e9902250 fffff807`1874a663 : ffff890b`990901e0 ffff890b`9b892000 ffff890b`00004000 ffffec8d`e9902378 : nfs41_driver!marshal_nfs41_open+0x44c [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_openclose.c @ 200]
  122. ffffec8d`e99022e0 fffff807`1874ba7d : ffff890b`99d9ca20 ffff890b`990901e0 ffffec8d`e9902378 00000000`00000000 : nfs41_driver!handle_upcall+0x193 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_updowncall.c @ 277]
  123. ffffec8d`e9902340 fffff807`187387eb : ffff890b`99d9ca20 ffff890b`9894b8e0 ffff890b`9894b8e0 00000000`00000001 : nfs41_driver!nfs41_upcall+0xed [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_updowncall.c @ 581]
  124. ffffec8d`e99023b0 fffff807`1877ad76 : ffff890b`99d9ca20 ffff890b`94c3d090 00000000`00000002 ffff890b`99d9ca20 : nfs41_driver!nfs41_DevFcbXXXControlFile+0x10b [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_driver.c @ 560]
  125. ffffec8d`e9902430 fffff807`1877aa98 : ffff890b`99d9ca20 ffff890b`99d9ca20 ffff890b`94c3d000 ffff890b`99d9ca20 : nfs41_driver!RxXXXControlFileCallthru+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130]
  126. ffffec8d`e9902460 fffff807`18750fc2 : 00000000`00000000 ffff890b`99ca3dc0 ffff890b`94c3d001 00000000`00000000 : nfs41_driver!RxCommonDevFCBIoCtl+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491]
  127. ffffec8d`e9902490 fffff807`1876f98d : fffff807`18762370 00000000`00000000 00000000`00000000 ffff890b`94c3d090 : nfs41_driver!RxFsdCommonDispatch+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
  128. ffffec8d`e9902590 fffff807`18738c87 : ffff890b`981f7b20 00000000`00000000 00000000`00000004 00000000`00000004 : nfs41_driver!RxFsdDispatch+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
  129. ffffec8d`e99025c0 fffff807`100d21c5 : ffff890b`94c3d090 ffff890b`99ca3dc0 ffff890b`99f83730 fffff807`100cb32b : nfs41_driver!nfs41_FsdDispatch+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41sys_driver.c @ 1094]
  130. ffffec8d`e9902600 fffff807`15fff558 : fffff807`15ff8000 00000000`00000000 ffff890b`9417ea70 ffff890b`986fa718 : nt!IofCallDriver+0x55
  131. ffffec8d`e9902640 fffff807`15fff0a9 : ffffac0a`63aa9420 00000000`00000000 fffff807`15ff8000 00000000`00000000 : mup!MupiCallUncProvider+0xb8
  132. ffffec8d`e99026b0 fffff807`15ffefde : ffff890b`99ca3dc0 ffff890b`986fa710 ffff890b`9894b840 00000000`00000000 : mup!MupStateMachine+0x59
  133. ffffec8d`e99026e0 fffff807`100d21c5 : ffff890b`9894b840 00000000`00000000 ffff890b`981f7b20 00000000`00000001 : mup!MupFsdIrpPassThrough+0x17e
  134. ffffec8d`e9902750 fffff807`14924a76 : 00000000`00004000 00000000`00000000 00000000`20206f49 fffff807`100bc86f : nt!IofCallDriver+0x55
  135. ffffec8d`e9902790 fffff807`100d21c5 : 00000000`00000002 fffff807`107b418e 00000000`0000020c ffff890b`99d90080 : FLTMGR!FltpDispatch+0xd6
  136. ffffec8d`e99027f0 fffff807`1044c801 : ffffec8d`e9902b80 00000000`00282018 ffff890b`9894b840 ffff890b`9894b840 : nt!IofCallDriver+0x55
  137. ffffec8d`e9902830 fffff807`1044c43a : 00000000`00282018 ffffec8d`e9902b80 00000000`00000000 00000000`00282018 : nt!IopSynchronousServiceTail+0x361
  138. ffffec8d`e99028d0 fffff807`1044b716 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xd0a
  139. ffffec8d`e9902a20 fffff807`10211505 : 00000000`00000e0c fffff807`100cb83e ffff890b`99439080 00007ffc`08c17cb8 : nt!NtDeviceIoControlFile+0x56
  140. ffffec8d`e9902a90 00007ffc`309ed684 : 00007ffc`2e3ddddb 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  141. 00000022`c81f6538 00007ffc`2e3ddddb : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtDeviceIoControlFile+0x14
  142. 00000022`c81f6540 00007ffc`2f1e5951 : 00000000`00282018 00000000`00000e0c 00000000`00000e0c 00007ffc`2e3dec45 : KERNELBASE!DeviceIoControl+0x6b
  143. 00000022`c81f65b0 00007ff6`41fbe3cd : 00000000`00000000 00000022`c81fa714 00000022`c81f6680 00000000`00000000 : KERNEL32!DeviceIoControlImplementation+0x81
  144. 00000022`c81f6600 00007ff6`41fbe28f : 00007ff6`4201f010 00000000`00000000 00007ffc`2e4007b0 00007ffc`2e4007b0 : nfsd!nfsd_worker_thread_main+0x10d [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 185]
  145. 00000022`c81ffa90 00007ffb`f92ca1bc : 00007ff6`4201f010 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd!nfsd_thread_main+0x1f [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 279]
  146. 00000022`c81ffb10 00007ffb`f92c9e13 : 00007ff6`41fbe270 00007ff6`4201f010 00000000`00000000 00000000`00000000 : ucrtbased!invoke_thread_procedure+0x2c [d:\th\minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 92]
  147. 00000022`c81ffb50 00007ffc`2f1e7374 : 00000216`60486090 00000000`00000000 00000000`00000000 00000000`00000000 : ucrtbased!thread_start<unsigned int (__cdecl*)(void * __ptr64)>+0x93 [d:\th\minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 115]
  148. 00000022`c81ffba0 00007ffc`3099cc91 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x14
  149. 00000022`c81ffbd0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
  150.  
  151.  
  152. SYMBOL_NAME:  Dbgv+15a1
  153.  
  154. MODULE_NAME: Dbgv
  155.  
  156. IMAGE_NAME:  Dbgv.sys
  157.  
  158. STACK_COMMAND:  .thread ; .cxr ; kb
  159.  
  160. BUCKET_ID_FUNC_OFFSET:  15a1
  161.  
  162. FAILURE_BUCKET_ID:  AV_Dbgv!unknown_function
  163.  
  164. OS_VERSION:  10.0.19041.1
  165.  
  166. BUILDLAB_STR:  vb_release
  167.  
  168. OSPLATFORM_TYPE:  x64
  169.  
  170. OSNAME:  Windows 10
  171.  
  172. FAILURE_ID_HASH:  {bb0d4c6e-0053-b7ec-2fc8-83bedf6106af}
  173.  
  174. Followup:     MachineOwner
  175. ---------
  176.  
  177. 6: kd>
  178. 6: kd>
  179. 6: kd>

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at