- Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\Windows\MEMORY.DMP]
- Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Kernel Version 19041 MP (4 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Built by: 19041.1.amd64fre.vb_release.191206-1406
- Machine Name:
- Kernel base = 0xfffff802`2e200000 PsLoadedModuleList = 0xfffff802`2ee2a200
- Debug session time: Wed Sep 13 12:36:20.113 2023 (UTC + 2:00)
- System Uptime: 0 days 19:03:08.836
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ...............................................................
- Loading User Symbols
- Loading unloaded module list
- ......
- For analysis of this file, run !analyze -v
- ************* Path validation summary **************
- Response Time (ms) Location
- Deferred srv*
- OK C:\Users\roland_mainz\Downloads\ms-nfs41-client-x64\ms-nfs41-client-x64
- 1: kd> .reload
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ...............................................................
- Loading User Symbols
- Loading unloaded module list
- ......
- 1: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- KERNEL_SECURITY_CHECK_FAILURE (139)
- A kernel component has corrupted a critical data structure. The corruption
- could potentially allow a malicious user to gain control of this machine.
- Arguments:
- Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
- Arg2: fffff20676d4e810, Address of the trap frame for the exception that caused the bugcheck
- Arg3: fffff20676d4e768, Address of the exception record for the exception that caused the bugcheck
- Arg4: 0000000000000000, Reserved
- Debugging Details:
- ------------------
- KEY_VALUES_STRING: 1
- Key : Analysis.CPU.Sec
- Value: 3
- Key : Analysis.DebugAnalysisProvider.CPP
- Value: Create: 8007007e on WINGRENDEL01
- Key : Analysis.DebugData
- Value: CreateObject
- Key : Analysis.DebugModel
- Value: CreateObject
- Key : Analysis.Elapsed.Sec
- Value: 6
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 76
- Key : Analysis.System
- Value: CreateObject
- BUGCHECK_CODE: 139
- BUGCHECK_P1: 3
- BUGCHECK_P2: fffff20676d4e810
- BUGCHECK_P3: fffff20676d4e768
- BUGCHECK_P4: 0
- TRAP_FRAME: fffff20676d4e810 -- (.trap 0xfffff20676d4e810)
- NOTE: The trap frame does not contain all registers.
- Some register values may be zeroed or incorrect.
- rax=ffff82828aff9d80 rbx=0000000000000000 rcx=0000000000000003
- rdx=ffff82828d4d1db0 rsi=0000000000000000 rdi=0000000000000000
- rip=fffff80235a247dd rsp=fffff20676d4e9a0 rbp=fffff20676d4ea10
- r8=0000000000000000 r9=0000000000000001 r10=0000000000000000
- r11=fffff780000003b0 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei pl nz na pe nc
- nfs41_driver!RtlFailFast+0x5 [inlined in nfs41_driver!RxpUndoScavengerFinalizationMarking+0xad]:
- fffff802`35a247dd cd29 int 29h
- Resetting default scope
- EXCEPTION_RECORD: fffff20676d4e768 -- (.exr 0xfffff20676d4e768)
- ExceptionAddress: fffff80235a247dd (nfs41_driver!RtlFailFast+0x0000000000000005)
- ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
- ExceptionFlags: 00000001
- NumberParameters: 1
- Parameter[0]: 0000000000000003
- Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
- BLACKBOXBSD: 1 (!blackboxbsd)
- BLACKBOXNTFS: 1 (!blackboxntfs)
- BLACKBOXPNP: 1 (!blackboxpnp)
- BLACKBOXWINLOGON: 1
- PROCESS_NAME: System
- ERROR_CODE: (NTSTATUS) 0xc0000409 - Das System hat in dieser Anwendung den berlauf eines stapelbasierten Puffers ermittelt. Dieser berlauf k nnte einem b sartigen Benutzer erm glichen, die Steuerung der Anwendung zu bernehmen.
- EXCEPTION_CODE_STR: c0000409
- EXCEPTION_PARAMETER1: 0000000000000003
- EXCEPTION_STR: 0xc0000409
- STACK_TEXT:
- fffff206`76d4e4e8 fffff802`2e610e29 : 00000000`00000139 00000000`00000003 fffff206`76d4e810 fffff206`76d4e768 : nt!KeBugCheckEx
- fffff206`76d4e4f0 fffff802`2e611390 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
- fffff206`76d4e630 fffff802`2e60f35d : 00000000`00000001 fffff206`76d4e9a0 00000000`0000002f 00000000`00000050 : nt!KiFastFailDispatch+0xd0
- fffff206`76d4e810 fffff802`35a247dd : 00000000`00000000 ffff8282`8d4d1db0 fffff802`35a15168 ffff8282`8d4d1b30 : nt!KiRaiseSecurityCheckFailure+0x31d
- fffff206`76d4e9a0 fffff802`35a241c7 : fffff802`35a191e0 fffff802`00000000 ffff8282`8d4d1d00 ffff8282`8d4d1b00 : nfs41_driver!RxpUndoScavengerFinalizationMarking+0xad [base\fs\rdr2\rxce\scavengr.c @ 1154]
- fffff206`76d4e9d0 fffff802`35a24592 : 00000000`00000000 ffff8282`91b9b950 ffff8282`91b9b950 00000000`00000000 : nfs41_driver!RxScavengerFinalizeEntries+0x407 [base\fs\rdr2\rxce\scavengr.c @ 1710]
- fffff206`76d4ea50 fffff802`35a0e287 : ffff8282`91b9b950 fffff802`2e97e2d0 ffff8282`91b9b96b ffff8282`8d4d1870 : nfs41_driver!RxTerminateScavenging+0xc2 [base\fs\rdr2\rxce\scavengr.c @ 1953]
- fffff206`76d4ea90 fffff802`35a08c8c : ffff8282`a4ae0080 ffff8282`91b9b950 ffff8282`8a481c60 fffff802`35a12670 : nfs41_driver!RxStopMinirdr+0x6b [base\fs\rdr2\rdbss\strtstop.c @ 352]
- fffff206`76d4ead0 fffff802`2ea439ab : ffff8282`a4ae0080 fffff206`73e6f750 fffff802`2ef25440 00000000`00000000 : nfs41_driver!nfs41_driver_unload+0x6c [C:\cygwin64\home\roland_mainz\work\msnfsv41_new_vc19_fix_kernelcrash\ms-nfs41-client\sys\nfs41_driver.c @ 6906]
- fffff206`76d4eb30 fffff802`2e450545 : ffff8282`00000000 00000000`00000000 ffff8282`a4ae0080 fffff802`00000000 : nt!IopLoadUnloadDriver+0xc56db
- fffff206`76d4eb70 fffff802`2e50e6f5 : ffff8282`a4ae0080 00000000`00000080 ffff8282`8a462080 00000e00`00000f00 : nt!ExpWorkerThread+0x105
- fffff206`76d4ec10 fffff802`2e605a68 : ffffac81`a73e5180 ffff8282`a4ae0080 fffff802`2e50e6a0 04000000`00000000 : nt!PspSystemThreadStartup+0x55
- fffff206`76d4ec60 00000000`00000000 : fffff206`76d4f000 fffff206`76d49000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
- FAULTING_SOURCE_LINE: base\fs\rdr2\rxce\scavengr.c
- FAULTING_SOURCE_FILE: base\fs\rdr2\rxce\scavengr.c
- FAULTING_SOURCE_LINE_NUMBER: 1154
- SYMBOL_NAME: nfs41_driver!RxpUndoScavengerFinalizationMarking+ad
- MODULE_NAME: nfs41_driver
- IMAGE_NAME: nfs41_driver.sys
- STACK_COMMAND: .thread ; .cxr ; kb
- BUCKET_ID_FUNC_OFFSET: ad
- FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nfs41_driver!RxpUndoScavengerFinalizationMarking
- OS_VERSION: 10.0.19041.1
- BUILDLAB_STR: vb_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {bff0fbeb-74a3-16b9-0b44-536342dfff54}
- Followup: MachineOwner
- ---------
sc stop nfs41_driver crash
Posted by Anonymous on Wed 13th Sep 2023 14:44
raw | new post
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.