Delegation recall crash
Posted by Anonymous on Wed 11th Oct 2023 17:40
raw | new post

2518: nfs41_open_state_deref(\export\home\rmainz\tmp\allwrite\xxx) count 1
2518: nfs41_open_state_deref(\export\home\rmainz\tmp\allwrite\xxx) count 0
2518: nfs41_delegation_deref(\export\home\rmainz\tmp\allwrite\xxx) count 1
2518: nfs41_root_deref() count 1
03d4: callbody: rpcvers 2 cb_prog 9048 cb_vers 1 cb_proc 1
03d4: nfs41_handle_callback: received call
03d4: CB_COMPOUND
03d4: --> handle_cb_compound()
03d4: CB_COMPOUND('', 2)
03d4: OP_CB_SEQUENCE
03d4:   OP_CB_SEQUENCE { seqid 1, slot 0, cachethis 0 } NFS4_OK
03d4: OP_CB_RECALL
03d4: --> nfs41_delegation_recall()
03d4: nfs41_delegation_ref(\export\home\rmainz\tmp\allwrite\xxx) count 2
03d4: nfs41_root_ref() count 2
03d4: <-- nfs41_delegation_recall() returning NFS4_OK
03d4: <-- handle_cb_compound() returning NFS4_OK (2 results)
03d4: cb: replying to xid -2008477696
0cf4: session 0000026E3E868F50: using slot#=0 with seq#=217 highest=0
Critical error detected c0000374
(2408.3d4): Break instruction exception - code 80000003 (first chance)
ntdll!RtlIsZeroMemory+0xa2:
00007ff9`380cf202 cc              int     3
0:134> kp
Child-SP          RetAddr           Call Site
000000f6`b26fed40 00007ff9`380d7fc2 ntdll!RtlIsZeroMemory+0xa2
000000f6`b26fee30 00007ff9`380d82aa ntdll!RtlpNtSetValueKey+0x4b2
000000f6`b26fee60 00007ff9`380ddf31 ntdll!RtlpNtSetValueKey+0x79a
000000f6`b26fee90 00007ff9`38077442 ntdll!RtlpNtSetValueKey+0x6421
000000f6`b26feec0 00007ff9`37ff47b1 ntdll!memset+0x3342
000000f6`b26fef80 00007ff9`35e4f05b ntdll!RtlFreeHeap+0x51
*** WARNING: Unable to verify checksum for C:\Users\roland_mainz\Downloads\ms-nfs41-client-x64\ms-nfs41-client-x64\libtirpc.dll
000000f6`b26fefc0 00007ff9`1e2027ed ucrtbase!free_base+0x1b
*** WARNING: Unable to verify checksum for nfsd.exe
000000f6`b26feff0 00007ff6`c7409975 libtirpc!xdr_array(struct __rpc_xdr * xdrs = 0x0000026e`3e369420, char ** addrp = 0x0000026e`3e37a698, unsigned int * sizep = <Value unavailable error>, unsigned int maxs
ize = 0xc7408d10, unsigned int elsize = 0x160, <function> * elproc = 0x00007ff6`c7408d10)+0x12d
000000f6`b26ff040 00007ff9`1e1f77e6 nfsd!proc_cb_compound_res(struct __rpc_xdr * xdr = 0x0000026e`3e369420, struct cb_compound_res * res = 0x0000026e`3e37a650)+0xe5
000000f6`b26ff170 00007ff9`35e61bb2 libtirpc!clnt_cb_thread(void * args = 0x0000026e`3e37ef50)+0x416
000000f6`b26ff710 00007ff9`375b7344 ucrtbase!configthreadlocale+0x92
000000f6`b26ff740 00007ff9`380226b1 KERNEL32!BaseThreadInitThunk+0x14
000000f6`b26ff770 00000000`00000000 ntdll!RtlUserThreadStart+0x21