- ************* Preparing the environment for Debugger Extensions Gallery repositories **************
- ExtensionRepository : Implicit
- UseExperimentalFeatureForNugetShare : true
- AllowNugetExeUpdate : true
- AllowNugetMSCredentialProviderInstall : true
- AllowParallelInitializationOfLocalRepositories : true
- -- Configuring repositories
- ----> Repository : LocalInstalled, Enabled: true
- ----> Repository : UserExtensions, Enabled: true
- >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
- ************* Waiting for Debugger Extensions Gallery to Initialize **************
- >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.297 seconds
- ----> Repository : UserExtensions, Enabled: true, Packages count: 0
- ----> Repository : LocalInstalled, Enabled: true, Packages count: 36
- Microsoft (R) Windows Debugger Version 10.0.25921.1001 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\cygwin64\home\roland_mainz\tmp\nfs_crash20231102_003_MEMORY.DMP]
- Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
- ************* Path validation summary **************
- Response Time (ms) Location
- Deferred srv*
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Kernel Version 19041 MP (6 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
- Kernel base = 0xfffff804`0bc00000 PsLoadedModuleList = 0xfffff804`0c82a360
- Debug session time: Fri Nov 3 13:27:31.055 2023 (UTC + 1:00)
- System Uptime: 0 days 3:40:23.770
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- .................Page 105450 not present in the dump file. Type ".hh dbgerr004" for details
- .............................................
- Loading User Symbols
- PEB is paged out (Peb.Ldr = 000000df`108be018). Type ".hh dbgerr001" for details
- Loading unloaded module list
- .......
- For analysis of this file, run !analyze -v
- Unable to load image \SystemRoot\system32\DRIVERS\nfs41_driver.sys, Win32 error 0n2
- nt!KeBugCheckEx:
- fffff804`0bffd640 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffbf8c`b0a0bf20=0000000000000027
- 0: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- RDR_FILE_SYSTEM (27)
- If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
- exception record and context record. Do a .cxr on the 3rd parameter and then kb to
- obtain a more informative stack trace.
- The high 16 bits of the first parameter is the RDBSS BugCheck code, which is defined
- as follows:
- RDBSS_BUG_CHECK_CACHESUP = 0xca550000,
- RDBSS_BUG_CHECK_CLEANUP = 0xc1ee0000,
- RDBSS_BUG_CHECK_CLOSE = 0xc10e0000,
- RDBSS_BUG_CHECK_NTEXCEPT = 0xbaad0000,
- Arguments:
- Arg1: 00000000baad0080
- Arg2: ffffbf8cb0a0cf88
- Arg3: ffffbf8cb0a0c7c0
- Arg4: fffff8040c1f7617
- Debugging Details:
- ------------------
- KEY_VALUES_STRING: 1
- Key : AV.Dereference
- Value: String
- Key : AV.Fault
- Value: Read
- Key : Analysis.CPU.mSec
- Value: 3968
- Key : Analysis.Elapsed.mSec
- Value: 4015
- Key : Analysis.IO.Other.Mb
- Value: 0
- Key : Analysis.IO.Read.Mb
- Value: 2
- Key : Analysis.IO.Write.Mb
- Value: 1
- Key : Analysis.Init.CPU.mSec
- Value: 967
- Key : Analysis.Init.Elapsed.mSec
- Value: 7819
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 101
- Key : Bugcheck.Code.KiBugCheckData
- Value: 0x27
- Key : Bugcheck.Code.LegacyAPI
- Value: 0x27
- Key : Failure.Bucket
- Value: 0x27_nfs41_driver!handle_upcall
- Key : Failure.Hash
- Value: {8cc3c03c-4f74-c78a-fa41-0d8f60b7b819}
- Key : Hypervisor.Enlightenments.Value
- Value: 12576
- Key : Hypervisor.Enlightenments.ValueHex
- Value: 3120
- Key : Hypervisor.Flags.AnyHypervisorPresent
- Value: 1
- Key : Hypervisor.Flags.ApicEnlightened
- Value: 0
- Key : Hypervisor.Flags.ApicVirtualizationAvailable
- Value: 0
- Key : Hypervisor.Flags.AsyncMemoryHint
- Value: 0
- Key : Hypervisor.Flags.CoreSchedulerRequested
- Value: 0
- Key : Hypervisor.Flags.CpuManager
- Value: 0
- Key : Hypervisor.Flags.DeprecateAutoEoi
- Value: 1
- Key : Hypervisor.Flags.DynamicCpuDisabled
- Value: 0
- Key : Hypervisor.Flags.Epf
- Value: 0
- Key : Hypervisor.Flags.ExtendedProcessorMasks
- Value: 0
- Key : Hypervisor.Flags.HardwareMbecAvailable
- Value: 0
- Key : Hypervisor.Flags.MaxBankNumber
- Value: 0
- Key : Hypervisor.Flags.MemoryZeroingControl
- Value: 0
- Key : Hypervisor.Flags.NoExtendedRangeFlush
- Value: 1
- Key : Hypervisor.Flags.NoNonArchCoreSharing
- Value: 0
- Key : Hypervisor.Flags.Phase0InitDone
- Value: 1
- Key : Hypervisor.Flags.PowerSchedulerQos
- Value: 0
- Key : Hypervisor.Flags.RootScheduler
- Value: 0
- Key : Hypervisor.Flags.SynicAvailable
- Value: 1
- Key : Hypervisor.Flags.UseQpcBias
- Value: 0
- Key : Hypervisor.Flags.Value
- Value: 536632
- Key : Hypervisor.Flags.ValueHex
- Value: 83038
- Key : Hypervisor.Flags.VpAssistPage
- Value: 1
- Key : Hypervisor.Flags.VsmAvailable
- Value: 0
- Key : Hypervisor.RootFlags.AccessStats
- Value: 0
- Key : Hypervisor.RootFlags.CrashdumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.CreateVirtualProcessor
- Value: 0
- Key : Hypervisor.RootFlags.DisableHyperthreading
- Value: 0
- Key : Hypervisor.RootFlags.HostTimelineSync
- Value: 0
- Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
- Value: 0
- Key : Hypervisor.RootFlags.IsHyperV
- Value: 0
- Key : Hypervisor.RootFlags.LivedumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.MapDeviceInterrupt
- Value: 0
- Key : Hypervisor.RootFlags.MceEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.Nested
- Value: 0
- Key : Hypervisor.RootFlags.StartLogicalProcessor
- Value: 0
- Key : Hypervisor.RootFlags.Value
- Value: 0
- Key : Hypervisor.RootFlags.ValueHex
- Value: 0
- Key : SecureKernel.HalpHvciEnabled
- Value: 0
- Key : WER.OS.Branch
- Value: vb_release
- Key : WER.OS.Version
- Value: 10.0.19041.1
- BUGCHECK_CODE: 27
- BUGCHECK_P1: baad0080
- BUGCHECK_P2: ffffbf8cb0a0cf88
- BUGCHECK_P3: ffffbf8cb0a0c7c0
- BUGCHECK_P4: fffff8040c1f7617
- FILE_IN_CAB: nfs_crash20231102_003_MEMORY.DMP
- EXCEPTION_RECORD: ffffbf8cb0a0cf88 -- (.exr 0xffffbf8cb0a0cf88)
- ExceptionAddress: fffff8040c1f7617 (nt!SeTokenCanImpersonate+0x0000000000000047)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 0000007800750079
- Attempt to read from address 0000007800750079
- CONTEXT: ffffbf8cb0a0c7c0 -- (.cxr 0xffffbf8cb0a0c7c0)
- rax=ffffbf8cb0a0d228 rbx=00000000002e0069 rcx=ffff8104a2a51860
- rdx=0000007800750061 rsi=0000007800750061 rdi=ffff8104a2a51860
- rip=fffff8040c1f7617 rsp=ffffbf8cb0a0d1c0 rbp=ffffc303cdb7a300
- r8=00000000002e0069 r9=ffffbf8cb0a0d2c0 r10=ffffc303ce088080
- r11=ffffbf8cb0a0d2c0 r12=0000000000000000 r13=ffffc303cd99d538
- r14=ffff8104a2a51860 r15=0000000000000001
- iopl=0 nv up ei pl nz na pe nc
- cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202
- nt!SeTokenCanImpersonate+0x47:
- fffff804`0c1f7617 817a18e6030000 cmp dword ptr [rdx+18h],3E6h ds:002b:00000078`00750079=????????
- Resetting default scope
- BLACKBOXBSD: 1 (!blackboxbsd)
- BLACKBOXNTFS: 1 (!blackboxntfs)
- BLACKBOXWINLOGON: 1
- PROCESS_NAME: nfsd_debug.exe
- READ_ADDRESS: 0000007800750079
- ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 0000007800750079
- EXCEPTION_STR: 0xc0000005
- STACK_TEXT:
- ffffbf8c`b0a0d1c0 fffff804`0c1f7ac6 : ffffc303`cd99d000 fffff804`116bfe00 00000000`00000000 ffffbf8c`00000000 : nt!SeTokenCanImpersonate+0x47
- ffffbf8c`b0a0d230 fffff804`0c321035 : 00000000`00000000 fffff804`002e0069 ffffc303`cc05d4b0 ffffbf8c`b0a0d368 : nt!PsImpersonateClient+0x126
- ffffbf8c`b0a0d2c0 fffff804`116a4869 : 00000000`00000001 ffffc303`cdb7a330 fffff804`116bfe40 fffff804`0be1dff0 : nt!SeImpersonateClientEx+0x35
- ffffbf8c`b0a0d300 fffff804`116b00d7 : ffffc303`cc05d4b0 ffffc303`c5d72cb0 ffffbf8c`b0a0d384 00000000`00000000 : nfs41_driver!handle_upcall+0x59 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1331]
- ffffbf8c`b0a0d350 fffff804`116a9de8 : ffffc303`cc05d4b0 ffffbf8c`00282018 00000000`00000000 ffffc303`cdf5d870 : nfs41_driver!nfs41_upcall+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1547]
- ffffbf8c`b0a0d3c0 fffff804`116d5976 : ffffc303`cc05d4b0 ffffc303`c978d0b0 00000000`00000002 ffffc303`cc05d4b0 : nfs41_driver!nfs41_DevFcbXXXControlFile+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2363]
- ffffbf8c`b0a0d440 fffff804`116d5698 : ffffc303`cc05d4b0 ffffc303`cc05d4b0 ffffc303`c978d000 ffffc303`cc05d4b0 : nfs41_driver!RxXXXControlFileCallthru+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130]
- ffffbf8c`b0a0d470 fffff804`116b5a52 : 00000000`00000000 ffffc303`cdb7a330 ffffc303`c978d001 00000000`00000000 : nfs41_driver!RxCommonDevFCBIoCtl+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491]
- ffffbf8c`b0a0d4a0 fffff804`116cc97d : fffff804`116bf370 00000000`00006800 ffffc303`cdf5d7d0 ffffc303`c978d0b0 : nfs41_driver!RxFsdCommonDispatch+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
- ffffbf8c`b0a0d5a0 fffff804`116aa927 : ffffc303`cd32e940 00000000`00000001 00000000`00000000 00000000`00000000 : nfs41_driver!RxFsdDispatch+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
- ffffbf8c`b0a0d5d0 fffff804`0be10665 : ffffc303`c978d0b0 ffffc303`cdb7a330 ffffc303`ce088730 fffff804`0be1ffcb : nfs41_driver!nfs41_FsdDispatch+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6622]
- ffffbf8c`b0a0d610 fffff804`1076f248 : fffff804`10768000 00000000`00000000 ffffc303`c956c910 ffffc303`cd8438d8 : nt!IofCallDriver+0x55
- ffffbf8c`b0a0d650 fffff804`1076ed99 : ffff8104`9ba1b600 00000000`00000000 fffff804`10768000 00000000`00000000 : mup!MupiCallUncProvider+0xb8
- ffffbf8c`b0a0d6c0 fffff804`1076ecce : ffffc303`cdb7a330 ffffc303`cd8438d0 ffffc303`cdf5d7d0 00000000`00000000 : mup!MupStateMachine+0x59
- ffffbf8c`b0a0d6f0 fffff804`0be10665 : ffffc303`cdf5d7d0 00000000`00000000 ffffc303`cd32e940 00000000`00000001 : mup!MupFsdIrpPassThrough+0x17e
- ffffbf8c`b0a0d760 fffff804`09a24a76 : 00000000`00282018 ffffbf8c`b0a0d958 ffffc303`c978d0b0 fffff804`0c202441 : nt!IofCallDriver+0x55
- ffffbf8c`b0a0d7a0 fffff804`0be10665 : 00000000`00000002 00000000`00000000 ffffbf8c`20206f49 ffffbf8c`b0a0d958 : FLTMGR!FltpDispatch+0xd6
- ffffbf8c`b0a0d800 fffff804`0c20142c : 00000000`00000001 ffffc303`cdb7a4d8 ffffc303`cdf5d7d0 ffffc303`cd99d080 : nt!IofCallDriver+0x55
- ffffbf8c`b0a0d840 fffff804`0c201081 : ffffc303`cdb7a4d8 ffffbf8c`b0a0db80 00000000`00000005 ffffc303`cdb7a4d8 : nt!IopSynchronousServiceTail+0x34c
- ffffbf8c`b0a0d8e0 fffff804`0c2003f6 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xc71
- ffffbf8c`b0a0da20 fffff804`0c010ef5 : 00000000`00000000 fffff804`0be204de ffffc303`cdbe7080 00007ffa`cee285d8 : nt!NtDeviceIoControlFile+0x56
- ffffbf8c`b0a0da90 00007ffa`f80ed0c4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
- 000000df`12cfdd58 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`f80ed0c4
- FAULTING_SOURCE_LINE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
- FAULTING_SOURCE_FILE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
- FAULTING_SOURCE_LINE_NUMBER: 1331
- FAULTING_SOURCE_CODE:
- 1327: PLOWIO_CONTEXT LowIoContext = &RxContext->LowIoContext;
- 1328: ULONG cbOut = LowIoContext->ParamsFor.IoCtl.OutputBufferLength;
- 1329: unsigned char *pbOut = LowIoContext->ParamsFor.IoCtl.pOutputBuffer;
- 1330:
- > 1331: status = SeImpersonateClientEx(entry->psec_ctx, NULL);
- 1332: if (status != STATUS_SUCCESS) {
- 1333: print_error("SeImpersonateClientEx failed %x\n", status);
- 1334: goto out;
- 1335: }
- 1336:
- SYMBOL_NAME: nfs41_driver!handle_upcall+59
- MODULE_NAME: nfs41_driver
- IMAGE_NAME: nfs41_driver.sys
- STACK_COMMAND: .cxr 0xffffbf8cb0a0c7c0 ; kb
- BUCKET_ID_FUNC_OFFSET: 59
- FAILURE_BUCKET_ID: 0x27_nfs41_driver!handle_upcall
- OS_VERSION: 10.0.19041.1
- BUILDLAB_STR: vb_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {8cc3c03c-4f74-c78a-fa41-0d8f60b7b819}
- Followup: MachineOwner
- ---------
- 0: kd> kp
- # Child-SP RetAddr Call Site
- 00 ffffbf8c`b0a0bf18 fffff804`116b71c9 nt!KeBugCheckEx
- 01 ffffbf8c`b0a0bf20 fffff804`116bafc0 nfs41_driver!RxExceptionFilter(struct _RX_CONTEXT * RxContext = 0xffffc303`cc05d4b0, struct _EXCEPTION_POINTERS * ExceptionPointer = 0xffffbf8c`b0a0c000)+0x159 [base\fs\rdr2\rdbss\ntexcept.c @ 126]
- 02 ffffbf8c`b0a0bf90 fffff804`0bfd01bf nfs41_driver!RxFsdCommonDispatch$filt$0+0x15 [base\fs\rdr2\rdbss\ntfsd.c @ 876]
- 03 ffffbf8c`b0a0bfd0 fffff804`0c007d2f nt!_C_specific_handler+0x9f
- 04 ffffbf8c`b0a0c040 fffff804`0beca3c7 nt!RtlpExecuteHandlerForException+0xf
- 05 ffffbf8c`b0a0c070 fffff804`0bec94e6 nt!RtlDispatchException+0x297
- 06 ffffbf8c`b0a0c790 fffff804`0c01186c nt!KiDispatchException+0x186
- 07 ffffbf8c`b0a0ce50 fffff804`0c00d2bd nt!KiExceptionDispatch+0x12c
- 08 ffffbf8c`b0a0d030 fffff804`0c1f7617 nt!KiPageFault+0x43d
- 09 ffffbf8c`b0a0d1c0 fffff804`0c1f7ac6 nt!SeTokenCanImpersonate+0x47
- 0a ffffbf8c`b0a0d230 fffff804`0c321035 nt!PsImpersonateClient+0x126
- 0b ffffbf8c`b0a0d2c0 fffff804`116a4869 nt!SeImpersonateClientEx+0x35
- 0c ffffbf8c`b0a0d300 fffff804`116b00d7 nfs41_driver!handle_upcall(struct _RX_CONTEXT * RxContext = 0xffffc303`cc05d4b0, struct _updowncall_entry * entry = 0xffffc303`c5d72cb0, unsigned long * len = 0xffffbf8c`b0a0d384)+0x59 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1331]
- 0d ffffbf8c`b0a0d350 fffff804`116a9de8 nfs41_driver!nfs41_upcall(struct _RX_CONTEXT * RxContext = 0xffffc303`cc05d4b0)+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1547]
- 0e ffffbf8c`b0a0d3c0 fffff804`116d5976 nfs41_driver!nfs41_DevFcbXXXControlFile(struct _RX_CONTEXT * RxContext = 0xffffc303`cc05d4b0)+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2363]
- 0f ffffbf8c`b0a0d440 fffff804`116d5698 nfs41_driver!RxXXXControlFileCallthru(struct _RX_CONTEXT * RxContext = 0xffffc303`cc05d4b0, struct _IRP * Irp = 0xffffc303`cdb7a330)+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130]
- 10 ffffbf8c`b0a0d470 fffff804`116b5a52 nfs41_driver!RxCommonDevFCBIoCtl(struct _RX_CONTEXT * RxContext = 0xffffc303`cc05d4b0, struct _IRP * Irp = <Value unavailable error>)+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491]
- 11 ffffbf8c`b0a0d4a0 fffff804`116cc97d nfs41_driver!RxFsdCommonDispatch(struct _RX_FSD_DISPATCH_VECTOR * DispatchVector = 0xfffff804`116bf370, struct _IRP * Irp = 0xffffc303`cdb7a330, struct _FILE_OBJECT * FileObject = 0xffffc303`cdf5d7d0 "" - Device for "\FileSystem\Mup", struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = 0xffffc303`c978d0b0)+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
- 12 ffffbf8c`b0a0d5a0 fffff804`116aa927 nfs41_driver!RxFsdDispatch(struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = <Value unavailable error>, struct _IRP * Irp = <Value unavailable error>)+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
- 13 ffffbf8c`b0a0d5d0 fffff804`0be10665 nfs41_driver!nfs41_FsdDispatch(struct _DEVICE_OBJECT * dev = 0xffffc303`c978d0b0 Device for "\FileSystem\nfs41_driver", struct _IRP * Irp = 0xffffc303`cdb7a330)+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6622]
- 14 ffffbf8c`b0a0d610 fffff804`1076f248 nt!IofCallDriver+0x55
- 15 ffffbf8c`b0a0d650 fffff804`1076ed99 mup!MupiCallUncProvider+0xb8
- 16 ffffbf8c`b0a0d6c0 fffff804`1076ecce mup!MupStateMachine+0x59
- 17 ffffbf8c`b0a0d6f0 fffff804`0be10665 mup!MupFsdIrpPassThrough+0x17e
- 18 ffffbf8c`b0a0d760 fffff804`09a24a76 nt!IofCallDriver+0x55
- 19 ffffbf8c`b0a0d7a0 fffff804`0be10665 FLTMGR!FltpDispatch+0xd6
- 1a ffffbf8c`b0a0d800 fffff804`0c20142c nt!IofCallDriver+0x55
- 1b ffffbf8c`b0a0d840 fffff804`0c201081 nt!IopSynchronousServiceTail+0x34c
- 1c ffffbf8c`b0a0d8e0 fffff804`0c2003f6 nt!IopXxxControlFile+0xc71
- 1d ffffbf8c`b0a0da20 fffff804`0c010ef5 nt!NtDeviceIoControlFile+0x56
- 1e ffffbf8c`b0a0da90 00007ffa`f80ed0c4 nt!KiSystemServiceCopyEnd+0x25
- 1f 000000df`12cfdd58 00000000`00000000 0x00007ffa`f80ed0c4
- 0: kd> dx -r1 ((nfs41_driver!_FILE_OBJECT *)0xffffc303cdf5d7d0)
- ((nfs41_driver!_FILE_OBJECT *)0xffffc303cdf5d7d0) : 0xffffc303cdf5d7d0 : "" - Device for "\FileSystem\Mup" [Type: _FILE_OBJECT *]
- [<Raw View>] [Type: _FILE_OBJECT]
- RelatedFile : 0x0 [Type: _FILE_OBJECT *]
- Device : 0xffffc303c956c910 : Device for "\FileSystem\Mup" [Type: _DEVICE_OBJECT *]
- 0: kd> dx -r1 ((nfs41_driver!_IRP *)0xffffc303cdb7a330)
- ((nfs41_driver!_IRP *)0xffffc303cdb7a330) : 0xffffc303cdb7a330 [Type: _IRP *]
- [<Raw View>] [Type: _IRP]
- IoStack : Size = 4, Current IRP_MJ_DEVICE_CONTROL / 0x0 for Device for "\FileSystem\nfs41_driver"
- CurrentStackLocation : 0xffffc303cdb7a490 : IRP_MJ_DEVICE_CONTROL / 0x0 for Device for "\FileSystem\nfs41_driver" [Type: _IO_STACK_LOCATION *]
- CurrentThread : 0xffffc303ce088080 [Type: _KTHREAD *]
- 0: kd> dx -id 0,0,ffffc303cd99d080 -r1 ((nfs41_driver!_RX_CONTEXT *)0xffffc303cc05d4b0)
- ((nfs41_driver!_RX_CONTEXT *)0xffffc303cc05d4b0) : 0xffffc303cc05d4b0 [Type: _RX_CONTEXT *]
- [+0x000] NodeTypeCode : 0xeb08 [Type: unsigned short]
- [+0x002] NodeByteSize : 1408 [Type: short]
- [+0x004] ReferenceCount : 0x1 [Type: unsigned long]
- [+0x008] ContextListEntry [Type: _LIST_ENTRY]
- [+0x018] MajorFunction : 0xe [Type: unsigned char]
- [+0x019] MinorFunction : 0x0 [Type: unsigned char]
- [+0x01a] PendingReturned : 0x1 [Type: unsigned char]
- [+0x01b] PostRequest : 0x0 [Type: unsigned char]
- [+0x020] RealDevice : 0xffffc303c956c910 : Device for "\FileSystem\Mup" [Type: _DEVICE_OBJECT *]
- [+0x028] CurrentIrp : 0xffffc303cdb7a330 [Type: _IRP *]
- [+0x030] CurrentIrpSp : 0xffffc303cdb7a490 : IRP_MJ_DEVICE_CONTROL / 0x0 for Device for "\FileSystem\nfs41_driver" [Type: _IO_STACK_LOCATION *]
- [+0x038] pFcb : 0xfffff804116c0640 [Type: _MRX_FCB_ *]
- [+0x040] pFobx : 0x0 [Type: _MRX_FOBX_ *]
- [+0x048] pRelevantSrvOpen : 0x0 [Type: _MRX_SRV_OPEN_ *]
- [+0x050] NonPagedFcb : 0x0 [Type: _NON_PAGED_FCB *]
- [+0x058] RxDeviceObject : 0xffffc303c978d0b0 [Type: _RDBSS_DEVICE_OBJECT *]
- [+0x060] OriginalThread : 0xffffc303ce088080 [Type: _KTHREAD *]
- [+0x068] LastExecutionThread : 0xffffc303ce088080 [Type: _KTHREAD *]
- [+0x070] LockManagerContext : 0x0 [Type: void *]
- [+0x078] RdbssDbgExtension : 0x0 [Type: void *]
- [+0x080] ScavengerEntry [Type: _RX_SCAVENGER_ENTRY]
- [+0x0a0] SerialNumber : 0xa4a3d07 [Type: unsigned long]
- [+0x0a4] FobxSerialNumber : 0x0 [Type: unsigned long]
- [+0x0a8] Flags : 0x1023 [Type: unsigned long]
- [+0x0ac] FcbResourceAcquired : 0x0 [Type: unsigned char]
- [+0x0ad] FcbPagingIoResourceAcquired : 0x0 [Type: unsigned char]
- [+0x0ae] MustSucceedDescriptorNumber : 0x0 [Type: unsigned char]
- [+0x0b0] StoredStatus : 0 [Type: long]
- [+0x0b0] StoredStatusAlignment : 0x0 [Type: void *]
- [+0x0b8] InformationToReturn : 0x0 [Type: unsigned __int64]
- [+0x0b0] IoStatusBlock [Type: _IO_STATUS_BLOCK]
- [+0x0c0] ForceLonglongAligmentDummyField : 0x0 [Type: unsigned __int64]
- [+0x0c0] MRxContext [Type: void * [4]]
- [+0x0e0] WriteOnlyOpenRetryContext : 0x0 [Type: void *]
- [+0x0e8] MRxCancelRoutine : 0x0 : 0x0 [Type: long (__cdecl*)(_RX_CONTEXT *)]
- [+0x0f0] ResumeRoutine : 0xfffff804116d5640 : nfs41_driver!RxCommonDevFCBIoCtl+0x0 [Type: long (__cdecl*)(_RX_CONTEXT *,_IRP *)]
- [+0x0f8] WorkQueueItem [Type: _RX_WORK_QUEUE_ITEM_]
- [+0x120] OverflowListEntry [Type: _LIST_ENTRY]
- [+0x130] SyncEvent [Type: _KEVENT]
- [+0x148] BlockedOperations [Type: _LIST_ENTRY]
- [+0x158] BlockedOpsMutex : 0x0 [Type: _FAST_MUTEX *]
- [+0x160] RxContextSerializationQLinks [Type: _LIST_ENTRY]
- [+0x170] Info [Type: <anonymous-tag>]
- [+0x170] PrefixClaim [Type: <anonymous-tag>]
- [+0x190] Create [Type: <anonymous-tag>]
- [+0x190] QueryDirectory [Type: <anonymous-tag>]
- [+0x190] NotifyChangeDirectory [Type: <anonymous-tag>]
- [+0x190] QueryEa [Type: <anonymous-tag>]
- [+0x190] QuerySecurity [Type: <anonymous-tag>]
- [+0x190] SetSecurity [Type: <anonymous-tag>]
- [+0x190] QueryQuota [Type: <anonymous-tag>]
- [+0x190] SetQuota [Type: <anonymous-tag>]
- [+0x190] DosVolumeFunction [Type: <anonymous-tag>]
- [+0x190] FlagsForLowIo : 0x0 [Type: unsigned long]
- [+0x198] LowIoContext [Type: _LOWIO_CONTEXT]
- [+0x268] AlsoCanonicalNameBuffer : 0x0 [Type: wchar_t *]
- [+0x270] LoudCompletionString : 0x0 [Type: _UNICODE_STRING *]
- [+0x278] AcquireReleaseFcbTrackerX : 0 [Type: long]
- [+0x27c] TrackerHistoryPointer : 0x0 [Type: unsigned long]
- [+0x280] TrackerHistory [Type: _RX_FCBTRACKER_CALLINFO [32]]
- 0: kd> dx -id 0,0,ffffc303cd99d080 -r1 (*((nfs41_driver!_LIST_ENTRY *)0xffffc303cc05d4b8))
- (*((nfs41_driver!_LIST_ENTRY *)0xffffc303cc05d4b8)) [Type: _LIST_ENTRY]
- [+0x000] Flink : 0xffffc303cdeeda28 [Type: _LIST_ENTRY *]
- [+0x008] Blink : 0xfffff804116c0220 [Type: _LIST_ENTRY *]
- 0: kd> dx -id 0,0,ffffc303cd99d080 -r1 ((nfs41_driver!_LIST_ENTRY *)0xffffc303cdeeda28)
- ((nfs41_driver!_LIST_ENTRY *)0xffffc303cdeeda28) : 0xffffc303cdeeda28 [Type: _LIST_ENTRY *]
- [+0x000] Flink : 0xffffc303ce36a5b8 [Type: _LIST_ENTRY *]
- [+0x008] Blink : 0xffffc303cc05d4b8 [Type: _LIST_ENTRY *]
- 0: kd> dx -id 0,0,ffffc303cd99d080 -r1 ((nfs41_driver!_LIST_ENTRY *)0xfffff804116c0220)
- ((nfs41_driver!_LIST_ENTRY *)0xfffff804116c0220) : 0xfffff804116c0220 [Type: _LIST_ENTRY *]
- [+0x000] Flink : 0xffffc303cc05d4b8 [Type: _LIST_ENTRY *]
- [+0x008] Blink : 0xffffc303d3d0b018 [Type: _LIST_ENTRY *]
- 0: kd> dx -r1 ((nfs41_driver!_updowncall_entry *)0xffffc303c5d72cb0)
- ((nfs41_driver!_updowncall_entry *)0xffffc303c5d72cb0) : 0xffffc303c5d72cb0 [Type: _updowncall_entry *]
- [+0x000] version : 0x9a4c [Type: unsigned long]
- [+0x008] xid : 49749889 [Type: __int64]
- [+0x010] opcode : 0x9 [Type: unsigned long]
- [+0x014] status : 0 [Type: long]
- [+0x018] state : NFS41_WAITING_FOR_UPCALL (0) [Type: _nfs41_updowncall_state]
- [+0x020] lock [Type: _FAST_MUTEX]
- [+0x058] next [Type: _LIST_ENTRY]
- [+0x068] cond [Type: _KEVENT]
- [+0x080] errno : 0x0 [Type: unsigned long]
- [+0x084] async_op : 0x0 [Type: unsigned char]
- [+0x088] sec_ctx [Type: _SECURITY_CLIENT_CONTEXT]
- [+0x0d0] psec_ctx : 0xffff8104b54ea500 [Type: _SECURITY_CLIENT_CONTEXT *]
- [+0x0d8] open_state : 0x73006500630072 [Type: void *]
- [+0x0e0] session : 0x20880b9d6d0 [Type: void *]
- [+0x0e8] filename : 0xfffff804116bbd10 : "" [Type: _UNICODE_STRING *]
- [+0x0f0] buf : 0xffffbf8cad5a3bc8 [Type: void *]
- [+0x0f8] buf_len : 0x28 [Type: unsigned long]
- [+0x100] ChangeTime : 0x0 [Type: unsigned __int64]
- [+0x108] u [Type: <unnamed-tag>]
- 0: kd> dx -r1 ((nfs41_driver!_UNICODE_STRING *)0xfffff804116bbd10)
- ((nfs41_driver!_UNICODE_STRING *)0xfffff804116bbd10) : 0xfffff804116bbd10 : "" [Type: _UNICODE_STRING *]
- [<Raw View>] [Type: _UNICODE_STRING]
- 0: kd> dx -r1 (*((nfs41_driver!_updowncall_entry *)0xffffc303c5d72cb0)).u
- (*((nfs41_driver!_updowncall_entry *)0xffffc303c5d72cb0)).u [Type: <unnamed-tag>]
- [+0x000] Mount [Type: <unnamed-tag>]
- [+0x000] ReadWrite [Type: <unnamed-tag>]
- [+0x000] Lock [Type: <unnamed-tag>]
- [+0x000] Unlock [Type: <unnamed-tag>]
- [+0x000] Open [Type: <unnamed-tag>]
- [+0x000] Close [Type: <unnamed-tag>]
- [+0x000] QueryFile [Type: <unnamed-tag>]
- [+0x000] SetFile [Type: <unnamed-tag>]
- [+0x000] SetEa [Type: <unnamed-tag>]
- [+0x000] QueryEa [Type: <unnamed-tag>]
- [+0x000] Symlink [Type: <unnamed-tag>]
- [+0x000] Volume [Type: <unnamed-tag>]
- [+0x000] Acl [Type: <unnamed-tag>]
- 0: kd> dx -id 0,0,ffffc303cd99d080 -r1 ((nfs41_driver!_EXCEPTION_POINTERS *)0xffffbf8cb0a0c000)
- ((nfs41_driver!_EXCEPTION_POINTERS *)0xffffbf8cb0a0c000) : 0xffffbf8cb0a0c000 [Type: _EXCEPTION_POINTERS *]
- [+0x000] ExceptionRecord : 0xffffbf8cb0a0cf88 [Type: _EXCEPTION_RECORD *]
- [+0x008] ContextRecord : 0xffffbf8cb0a0c7c0 [Type: _CONTEXT *]
- 0: kd> dx -r1 (*((nfs41_driver!_updowncall_entry *)0xffffc303c5d72cb0)).u.QueryFile
- (*((nfs41_driver!_updowncall_entry *)0xffffc303c5d72cb0)).u.QueryFile [Type: <unnamed-tag>]
- [+0x000] filter : 0x0 [Type: _UNICODE_STRING *]
- [+0x008] InfoClass : FileBasicInformation (4) [Type: _FILE_INFORMATION_CLASS]
- [+0x00c] restart_scan : 0x0 [Type: unsigned char]
- [+0x00d] return_single : 0x0 [Type: unsigned char]
- [+0x00e] initial_query : 0x0 [Type: unsigned char]
- [+0x010] mdl : 0x0 [Type: _MDL *]
- [+0x018] mdl_buf : 0x0 [Type: void *]
Kernel panic 3
Posted by Anonymous on Fri 3rd Nov 2023 13:52
raw | new post
view followups (newest first): Kernel panic 3 by Anonymous
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.