- ************* Preparing the environment for Debugger Extensions Gallery repositories **************
- ExtensionRepository : Implicit
- UseExperimentalFeatureForNugetShare : true
- AllowNugetExeUpdate : true
- NonInteractiveNuget : true
- AllowNugetMSCredentialProviderInstall : true
- AllowParallelInitializationOfLocalRepositories : true
- EnableRedirectToV8JsProvider : false
- -- Configuring repositories
- ----> Repository : LocalInstalled, Enabled: true
- ----> Repository : UserExtensions, Enabled: true
- >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
- ************* Waiting for Debugger Extensions Gallery to Initialize **************
- >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.063 seconds
- ----> Repository : UserExtensions, Enabled: true, Packages count: 0
- ----> Repository : LocalInstalled, Enabled: true, Packages count: 41
- Microsoft (R) Windows Debugger Version 10.0.27553.1004 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\Windows\MEMORY.DMP]
- Kernel Bitmap Dump File: Full address space is available
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Kernel Version 19041 MP (4 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
- Kernel base = 0xfffff806`21800000 PsLoadedModuleList = 0xfffff806`2242a790
- Debug session time: Sat Apr 20 05:11:48.922 2024 (UTC + 2:00)
- System Uptime: 0 days 13:11:20.592
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ........................................
- Loading User Symbols
- ...................................
- Loading unloaded module list
- .......
- For analysis of this file, run !analyze -v
- Unable to load image \SystemRoot\system32\DRIVERS\nfs41_driver.sys, Win32 error 0n2
- nt!KeBugCheckEx:
- fffff806`21bfda40 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffa185`3a59de00=0000000000000027
- 1: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- RDR_FILE_SYSTEM (27)
- If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
- exception record and context record. Do a .cxr on the 3rd parameter and then kb to
- obtain a more informative stack trace.
- The high 16 bits of the first parameter is the RDBSS BugCheck code, which is defined
- as follows:
- RDBSS_BUG_CHECK_CACHESUP = 0xca550000,
- RDBSS_BUG_CHECK_CLEANUP = 0xc1ee0000,
- RDBSS_BUG_CHECK_CLOSE = 0xc10e0000,
- RDBSS_BUG_CHECK_NTEXCEPT = 0xbaad0000,
- Arguments:
- Arg1: 00000000baad0080
- Arg2: ffffa1853a59ee68
- Arg3: ffffa1853a59e6a0
- Arg4: fffff80621b52c46
- Debugging Details:
- ------------------
- KEY_VALUES_STRING: 1
- Key : AV.Fault
- Value: Read
- Key : Analysis.CPU.mSec
- Value: 4202
- Key : Analysis.Elapsed.mSec
- Value: 4255
- Key : Analysis.IO.Other.Mb
- Value: 1
- Key : Analysis.IO.Read.Mb
- Value: 0
- Key : Analysis.IO.Write.Mb
- Value: 25
- Key : Analysis.Init.CPU.mSec
- Value: 2062
- Key : Analysis.Init.Elapsed.mSec
- Value: 15000
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 140
- Key : Bugcheck.Code.KiBugCheckData
- Value: 0x27
- Key : Bugcheck.Code.LegacyAPI
- Value: 0x27
- Key : Bugcheck.Code.TargetModel
- Value: 0x27
- Key : Failure.Bucket
- Value: 0x27_nfs41_driver!unknown_function
- Key : Failure.Hash
- Value: {4656e746-fab9-91b9-4b6f-31f7b00e7916}
- Key : Hypervisor.Enlightenments.Value
- Value: 0
- Key : Hypervisor.Enlightenments.ValueHex
- Value: 0
- Key : Hypervisor.Flags.AnyHypervisorPresent
- Value: 0
- Key : Hypervisor.Flags.ApicEnlightened
- Value: 0
- Key : Hypervisor.Flags.ApicVirtualizationAvailable
- Value: 0
- Key : Hypervisor.Flags.AsyncMemoryHint
- Value: 0
- Key : Hypervisor.Flags.CoreSchedulerRequested
- Value: 0
- Key : Hypervisor.Flags.CpuManager
- Value: 0
- Key : Hypervisor.Flags.DeprecateAutoEoi
- Value: 0
- Key : Hypervisor.Flags.DynamicCpuDisabled
- Value: 0
- Key : Hypervisor.Flags.Epf
- Value: 0
- Key : Hypervisor.Flags.ExtendedProcessorMasks
- Value: 0
- Key : Hypervisor.Flags.HardwareMbecAvailable
- Value: 0
- Key : Hypervisor.Flags.MaxBankNumber
- Value: 0
- Key : Hypervisor.Flags.MemoryZeroingControl
- Value: 0
- Key : Hypervisor.Flags.NoExtendedRangeFlush
- Value: 0
- Key : Hypervisor.Flags.NoNonArchCoreSharing
- Value: 0
- Key : Hypervisor.Flags.Phase0InitDone
- Value: 0
- Key : Hypervisor.Flags.PowerSchedulerQos
- Value: 0
- Key : Hypervisor.Flags.RootScheduler
- Value: 0
- Key : Hypervisor.Flags.SynicAvailable
- Value: 0
- Key : Hypervisor.Flags.UseQpcBias
- Value: 0
- Key : Hypervisor.Flags.Value
- Value: 0
- Key : Hypervisor.Flags.ValueHex
- Value: 0
- Key : Hypervisor.Flags.VpAssistPage
- Value: 0
- Key : Hypervisor.Flags.VsmAvailable
- Value: 0
- Key : Hypervisor.RootFlags.AccessStats
- Value: 0
- Key : Hypervisor.RootFlags.CrashdumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.CreateVirtualProcessor
- Value: 0
- Key : Hypervisor.RootFlags.DisableHyperthreading
- Value: 0
- Key : Hypervisor.RootFlags.HostTimelineSync
- Value: 0
- Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
- Value: 0
- Key : Hypervisor.RootFlags.IsHyperV
- Value: 0
- Key : Hypervisor.RootFlags.LivedumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.MapDeviceInterrupt
- Value: 0
- Key : Hypervisor.RootFlags.MceEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.Nested
- Value: 0
- Key : Hypervisor.RootFlags.StartLogicalProcessor
- Value: 0
- Key : Hypervisor.RootFlags.Value
- Value: 0
- Key : Hypervisor.RootFlags.ValueHex
- Value: 0
- Key : SecureKernel.HalpHvciEnabled
- Value: 0
- Key : WER.OS.Branch
- Value: vb_release
- Key : WER.OS.Version
- Value: 10.0.19041.1
- BUGCHECK_CODE: 27
- BUGCHECK_P1: baad0080
- BUGCHECK_P2: ffffa1853a59ee68
- BUGCHECK_P3: ffffa1853a59e6a0
- BUGCHECK_P4: fffff80621b52c46
- FILE_IN_CAB: MEMORY.DMP
- EXCEPTION_RECORD: ffffa1853a59ee68 -- (.exr 0xffffa1853a59ee68)
- ExceptionAddress: fffff80621b52c46 (nt!CountUnicodeToUTF8+0x0000000000000032)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 0000001400000000
- Attempt to read from address 0000001400000000
- CONTEXT: ffffa1853a59e6a0 -- (.cxr 0xffffa1853a59e6a0)
- rax=000000000000002e rbx=0000000000000000 rcx=0000000000000000
- rdx=000000000000002e rsi=ffffe00d8c4fa2b0 rdi=ffffa1853a59f120
- rip=fffff80621b52c46 rsp=ffffa1853a59f0a8 rbp=00000000000007ff
- r8=ffffa1853a59f120 r9=0000001400000000 r10=0000000000000000
- r11=000000140000005c r12=ffffe00d8df81920 r13=ffffe00d8ac92200
- r14=ffffe00d8df817c0 r15=fffff80626417640
- iopl=0 nv up ei ng nz ac pe cy
- cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050293
- nt!CountUnicodeToUTF8+0x32:
- fffff806`21b52c46 410fb701 movzx eax,word ptr [r9] ds:002b:00000014`00000000=????
- Resetting default scope
- BLACKBOXBSD: 1 (!blackboxbsd)
- BLACKBOXNTFS: 1 (!blackboxntfs)
- BLACKBOXPNP: 1 (!blackboxpnp)
- BLACKBOXWINLOGON: 1
- PROCESS_NAME: nfsd_debug.exe
- READ_ADDRESS: unable to get nt!PspSessionIdBitmap
- 0000001400000000
- ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 0000001400000000
- EXCEPTION_STR: 0xc0000005
- STACK_TEXT:
- ffffa185`3a59f0a8 fffff806`21f04ab7 : 00000000`00000000 ffffe00d`8df817c0 00000000`00000000 fffff806`263e6a5b : nt!CountUnicodeToUTF8+0x32
- ffffa185`3a59f0b0 fffff806`263e4f88 : ffffe00d`8c4fa2b0 ffffe00d`8df817c0 ffffe00d`8c4fa2b0 fffff806`21e297f0 : nt!RtlUnicodeToUTF8N+0x1a7
- ffffa185`3a59f0f0 fffff806`263e6ea6 : ffffcc04`a6679ac0 ffffe00d`8ca02000 00000000`00002000 ffffa185`3a59f278 : nfs41_driver+0x4f88
- ffffa185`3a59f140 fffff806`263e49d3 : ffffe00d`83902e60 ffffe00d`8ca02000 00000000`00002000 ffffa185`3a59f278 : nfs41_driver+0x6ea6
- ffffa185`3a59f1e0 fffff806`263f06c7 : ffffe00d`8c4fa2b0 ffffe00d`83902e60 ffffa185`3a59f278 ffffa185`3a599000 : nfs41_driver+0x49d3
- ffffa185`3a59f240 fffff806`263ea018 : ffffe00d`8c4fa2b0 00000000`00282018 00000004`00000004 00000000`00000000 : nfs41_driver+0x106c7
- ffffa185`3a59f2b0 fffff806`26417976 : ffffe00d`8c4fa2b0 ffffe00d`84737060 00000000`00000002 ffffe00d`8c4fa2b0 : nfs41_driver+0xa018
- ffffa185`3a59f330 fffff806`26417698 : ffffe00d`8c4fa2b0 ffffe00d`8c4fa2b0 ffffe00d`84737000 ffffe00d`8c4fa2b0 : nfs41_driver+0x37976
- ffffa185`3a59f360 fffff806`263f6092 : 00000000`00000000 ffffe00d`8df817c0 ffffe00d`84737001 00000000`00000000 : nfs41_driver+0x37698
- ffffa185`3a59f390 fffff806`2640e97d : fffff806`26401370 ffffe00d`83802100 ffffffff`ffffffff ffffe00d`84737060 : nfs41_driver+0x16092
- ffffa185`3a59f490 fffff806`263eab67 : ffffe00d`8db8c340 00000000`00000002 01da9262`307fc929 fffff806`40d66536 : nfs41_driver+0x2e97d
- ffffa185`3a59f4c0 fffff806`21a2d935 : ffffe00d`84737060 ffffe00d`8df817c0 ffffe00d`8baa6730 fffff806`21a3d25b : nfs41_driver+0xab67
- ffffa185`3a59f500 fffff806`2566f248 : fffff806`25668000 00000000`00000000 ffffe00d`849ebc60 ffffe00d`8d70dea8 : nt!IofCallDriver+0x55
- ffffa185`3a59f540 fffff806`2566ed99 : ffffcc04`9d699140 00000000`00000000 fffff806`25668000 00000000`00000000 : mup!MupiCallUncProvider+0xb8
- ffffa185`3a59f5b0 fffff806`2566ecce : ffffe00d`8df817c0 ffffe00d`8d70dea0 ffffe00d`8ac92250 00000000`00000000 : mup!MupStateMachine+0x59
- ffffa185`3a59f5e0 fffff806`21a2d935 : ffffe00d`8ac92250 00000000`00000000 ffffe00d`8db8c340 00000000`00000001 : mup!MupFsdIrpPassThrough+0x17e
- ffffa185`3a59f650 fffff806`1ea94a76 : 00000000`00282018 ffffa185`3a59f850 ffffe00d`84737060 fffff806`21e2f321 : nt!IofCallDriver+0x55
- ffffa185`3a59f690 fffff806`21a2d935 : 00000000`00000002 ffffe00d`8df819b0 ffffa185`20206f49 ffffa185`3a59f850 : FLTMGR!FltpDispatch+0xd6
- ffffa185`3a59f6f0 fffff806`21e2e30c : 00000000`00000001 00000000`00282018 ffffe00d`8ac92250 ffffe00d`8b866080 : nt!IofCallDriver+0x55
- ffffa185`3a59f730 fffff806`21e2df5a : 00000000`00282018 ffffa185`3a59fa80 00000000`00000000 00000000`00282018 : nt!IopSynchronousServiceTail+0x34c
- ffffa185`3a59f7d0 fffff806`21e2d236 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xd0a
- ffffa185`3a59f920 fffff806`21c119c5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtDeviceIoControlFile+0x56
- ffffa185`3a59f990 00007ffc`0d44d0c4 : 00007ffc`0ad2358b 00000026`9d0fa790 00007ff7`af9f243b 00007ffb`b3c47ce0 : nt!KiSystemServiceCopyEnd+0x25
- 00000026`9d0fa738 00007ffc`0ad2358b : 00000026`9d0fa790 00007ff7`af9f243b 00007ffb`b3c47ce0 00000026`00000000 : ntdll!NtDeviceIoControlFile+0x14
- 00000026`9d0fa740 00007ffc`0b8f5921 : 00000000`00282018 00000000`00000000 00000000`00000000 00000000`00000000 : KERNELBASE!DeviceIoControl+0x6b
- 00000026`9d0fa7b0 00007ff7`af9c5344 : 00000000`00000000 00000000`0000001f 00000026`9d0fa840 00000000`00000000 : KERNEL32!DeviceIoControlImplementation+0x81
- 00000026`9d0fa800 00007ff7`af9c522b : 00007ff7`afa14010 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd_debug!nfsd_worker_thread_main+0xe4 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 113]
- 00000026`9d0ffb70 00007ffb`b3af2d20 : 00007ff7`afa14010 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd_debug!nfsd_thread_main+0x2b [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 172]
- 00000026`9d0ffbf0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ucrtbased!thread_start<unsigned int (__cdecl*)(void *),1>+0xb0 [minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 97]
- SYMBOL_NAME: nfs41_driver+4f88
- MODULE_NAME: nfs41_driver
- IMAGE_NAME: nfs41_driver.sys
- STACK_COMMAND: .cxr 0xffffa1853a59e6a0 ; kb
- BUCKET_ID_FUNC_OFFSET: 4f88
- FAILURE_BUCKET_ID: 0x27_nfs41_driver!unknown_function
- OS_VERSION: 10.0.19041.1
- BUILDLAB_STR: vb_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {4656e746-fab9-91b9-4b6f-31f7b00e7916}
- Followup: MachineOwner
- ---------
- ************* Path validation summary **************
- Response Time (ms) Location
- Deferred srv*
- OK C:\cygwin64\lib\msnfs41client
- 1: kd> .lines -e
- Line number information will be loaded
- 1: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- RDR_FILE_SYSTEM (27)
- If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
- exception record and context record. Do a .cxr on the 3rd parameter and then kb to
- obtain a more informative stack trace.
- The high 16 bits of the first parameter is the RDBSS BugCheck code, which is defined
- as follows:
- RDBSS_BUG_CHECK_CACHESUP = 0xca550000,
- RDBSS_BUG_CHECK_CLEANUP = 0xc1ee0000,
- RDBSS_BUG_CHECK_CLOSE = 0xc10e0000,
- RDBSS_BUG_CHECK_NTEXCEPT = 0xbaad0000,
- Arguments:
- Arg1: 00000000baad0080
- Arg2: ffffa1853a59ee68
- Arg3: ffffa1853a59e6a0
- Arg4: fffff80621b52c46
- Debugging Details:
- ------------------
- KEY_VALUES_STRING: 1
- Key : AV.Fault
- Value: Read
- Key : Analysis.CPU.mSec
- Value: 3624
- Key : Analysis.Elapsed.mSec
- Value: 3627
- Key : Analysis.IO.Other.Mb
- Value: 1
- Key : Analysis.IO.Read.Mb
- Value: 2
- Key : Analysis.IO.Write.Mb
- Value: 27
- Key : Analysis.Init.CPU.mSec
- Value: 9687
- Key : Analysis.Init.Elapsed.mSec
- Value: 261833
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 148
- Key : Bugcheck.Code.KiBugCheckData
- Value: 0x27
- Key : Bugcheck.Code.LegacyAPI
- Value: 0x27
- Key : Bugcheck.Code.TargetModel
- Value: 0x27
- Key : Failure.Bucket
- Value: 0x27_nfs41_driver!length_as_utf8
- Key : Failure.Hash
- Value: {a57fa22e-8926-234c-4e0e-1cefe23c0547}
- Key : Hypervisor.Enlightenments.Value
- Value: 0
- Key : Hypervisor.Enlightenments.ValueHex
- Value: 0
- Key : Hypervisor.Flags.AnyHypervisorPresent
- Value: 0
- Key : Hypervisor.Flags.ApicEnlightened
- Value: 0
- Key : Hypervisor.Flags.ApicVirtualizationAvailable
- Value: 0
- Key : Hypervisor.Flags.AsyncMemoryHint
- Value: 0
- Key : Hypervisor.Flags.CoreSchedulerRequested
- Value: 0
- Key : Hypervisor.Flags.CpuManager
- Value: 0
- Key : Hypervisor.Flags.DeprecateAutoEoi
- Value: 0
- Key : Hypervisor.Flags.DynamicCpuDisabled
- Value: 0
- Key : Hypervisor.Flags.Epf
- Value: 0
- Key : Hypervisor.Flags.ExtendedProcessorMasks
- Value: 0
- Key : Hypervisor.Flags.HardwareMbecAvailable
- Value: 0
- Key : Hypervisor.Flags.MaxBankNumber
- Value: 0
- Key : Hypervisor.Flags.MemoryZeroingControl
- Value: 0
- Key : Hypervisor.Flags.NoExtendedRangeFlush
- Value: 0
- Key : Hypervisor.Flags.NoNonArchCoreSharing
- Value: 0
- Key : Hypervisor.Flags.Phase0InitDone
- Value: 0
- Key : Hypervisor.Flags.PowerSchedulerQos
- Value: 0
- Key : Hypervisor.Flags.RootScheduler
- Value: 0
- Key : Hypervisor.Flags.SynicAvailable
- Value: 0
- Key : Hypervisor.Flags.UseQpcBias
- Value: 0
- Key : Hypervisor.Flags.Value
- Value: 0
- Key : Hypervisor.Flags.ValueHex
- Value: 0
- Key : Hypervisor.Flags.VpAssistPage
- Value: 0
- Key : Hypervisor.Flags.VsmAvailable
- Value: 0
- Key : Hypervisor.RootFlags.AccessStats
- Value: 0
- Key : Hypervisor.RootFlags.CrashdumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.CreateVirtualProcessor
- Value: 0
- Key : Hypervisor.RootFlags.DisableHyperthreading
- Value: 0
- Key : Hypervisor.RootFlags.HostTimelineSync
- Value: 0
- Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
- Value: 0
- Key : Hypervisor.RootFlags.IsHyperV
- Value: 0
- Key : Hypervisor.RootFlags.LivedumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.MapDeviceInterrupt
- Value: 0
- Key : Hypervisor.RootFlags.MceEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.Nested
- Value: 0
- Key : Hypervisor.RootFlags.StartLogicalProcessor
- Value: 0
- Key : Hypervisor.RootFlags.Value
- Value: 0
- Key : Hypervisor.RootFlags.ValueHex
- Value: 0
- Key : SecureKernel.HalpHvciEnabled
- Value: 0
- Key : WER.OS.Branch
- Value: vb_release
- Key : WER.OS.Version
- Value: 10.0.19041.1
- BUGCHECK_CODE: 27
- BUGCHECK_P1: baad0080
- BUGCHECK_P2: ffffa1853a59ee68
- BUGCHECK_P3: ffffa1853a59e6a0
- BUGCHECK_P4: fffff80621b52c46
- FILE_IN_CAB: MEMORY.DMP
- EXCEPTION_RECORD: ffffa1853a59ee68 -- (.exr 0xffffa1853a59ee68)
- ExceptionAddress: fffff80621b52c46 (nt!CountUnicodeToUTF8+0x0000000000000032)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 0000001400000000
- Attempt to read from address 0000001400000000
- CONTEXT: ffffa1853a59e6a0 -- (.cxr 0xffffa1853a59e6a0)
- rax=000000000000002e rbx=0000000000000000 rcx=0000000000000000
- rdx=000000000000002e rsi=ffffe00d8c4fa2b0 rdi=ffffa1853a59f120
- rip=fffff80621b52c46 rsp=ffffa1853a59f0a8 rbp=00000000000007ff
- r8=ffffa1853a59f120 r9=0000001400000000 r10=0000000000000000
- r11=000000140000005c r12=ffffe00d8df81920 r13=ffffe00d8ac92200
- r14=ffffe00d8df817c0 r15=fffff80626417640
- iopl=0 nv up ei ng nz ac pe cy
- cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050293
- nt!CountUnicodeToUTF8+0x32:
- fffff806`21b52c46 410fb701 movzx eax,word ptr [r9] ds:002b:00000014`00000000=????
- Resetting default scope
- BLACKBOXBSD: 1 (!blackboxbsd)
- BLACKBOXNTFS: 1 (!blackboxntfs)
- BLACKBOXPNP: 1 (!blackboxpnp)
- BLACKBOXWINLOGON: 1
- PROCESS_NAME: nfsd_debug.exe
- READ_ADDRESS: 0000001400000000
- ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 0000001400000000
- EXCEPTION_STR: 0xc0000005
- STACK_TEXT:
- ffffa185`3a59f0a8 fffff806`21f04ab7 : 00000000`00000000 ffffe00d`8df817c0 00000000`00000000 fffff806`263e6a5b : nt!CountUnicodeToUTF8+0x32
- ffffa185`3a59f0b0 fffff806`263e4f88 : ffffe00d`8c4fa2b0 ffffe00d`8df817c0 ffffe00d`8c4fa2b0 fffff806`21e297f0 : nt!RtlUnicodeToUTF8N+0x1a7
- ffffa185`3a59f0f0 fffff806`263e6ea6 : ffffcc04`a6679ac0 ffffe00d`8ca02000 00000000`00002000 ffffa185`3a59f278 : nfs41_driver!length_as_utf8+0x38 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 529]
- ffffa185`3a59f140 fffff806`263e49d3 : ffffe00d`83902e60 ffffe00d`8ca02000 00000000`00002000 ffffa185`3a59f278 : nfs41_driver!marshal_nfs41_open+0xa6 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 708]
- ffffa185`3a59f1e0 fffff806`263f06c7 : ffffe00d`8c4fa2b0 ffffe00d`83902e60 ffffa185`3a59f278 ffffa185`3a599000 : nfs41_driver!handle_upcall+0x163 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1444]
- ffffa185`3a59f240 fffff806`263ea018 : ffffe00d`8c4fa2b0 00000000`00282018 00000004`00000004 00000000`00000000 : nfs41_driver!nfs41_upcall+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1637]
- ffffa185`3a59f2b0 fffff806`26417976 : ffffe00d`8c4fa2b0 ffffe00d`84737060 00000000`00000002 ffffe00d`8c4fa2b0 : nfs41_driver!nfs41_DevFcbXXXControlFile+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2477]
- ffffa185`3a59f330 fffff806`26417698 : ffffe00d`8c4fa2b0 ffffe00d`8c4fa2b0 ffffe00d`84737000 ffffe00d`8c4fa2b0 : nfs41_driver!RxXXXControlFileCallthru+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130]
- ffffa185`3a59f360 fffff806`263f6092 : 00000000`00000000 ffffe00d`8df817c0 ffffe00d`84737001 00000000`00000000 : nfs41_driver!RxCommonDevFCBIoCtl+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491]
- ffffa185`3a59f390 fffff806`2640e97d : fffff806`26401370 ffffe00d`83802100 ffffffff`ffffffff ffffe00d`84737060 : nfs41_driver!RxFsdCommonDispatch+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
- ffffa185`3a59f490 fffff806`263eab67 : ffffe00d`8db8c340 00000000`00000002 01da9262`307fc929 fffff806`40d66536 : nfs41_driver!RxFsdDispatch+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
- ffffa185`3a59f4c0 fffff806`21a2d935 : ffffe00d`84737060 ffffe00d`8df817c0 ffffe00d`8baa6730 fffff806`21a3d25b : nfs41_driver!nfs41_FsdDispatch+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6922]
- ffffa185`3a59f500 fffff806`2566f248 : fffff806`25668000 00000000`00000000 ffffe00d`849ebc60 ffffe00d`8d70dea8 : nt!IofCallDriver+0x55
- ffffa185`3a59f540 fffff806`2566ed99 : ffffcc04`9d699140 00000000`00000000 fffff806`25668000 00000000`00000000 : mup!MupiCallUncProvider+0xb8
- ffffa185`3a59f5b0 fffff806`2566ecce : ffffe00d`8df817c0 ffffe00d`8d70dea0 ffffe00d`8ac92250 00000000`00000000 : mup!MupStateMachine+0x59
- ffffa185`3a59f5e0 fffff806`21a2d935 : ffffe00d`8ac92250 00000000`00000000 ffffe00d`8db8c340 00000000`00000001 : mup!MupFsdIrpPassThrough+0x17e
- ffffa185`3a59f650 fffff806`1ea94a76 : 00000000`00282018 ffffa185`3a59f850 ffffe00d`84737060 fffff806`21e2f321 : nt!IofCallDriver+0x55
- ffffa185`3a59f690 fffff806`21a2d935 : 00000000`00000002 ffffe00d`8df819b0 ffffa185`20206f49 ffffa185`3a59f850 : FLTMGR!FltpDispatch+0xd6
- ffffa185`3a59f6f0 fffff806`21e2e30c : 00000000`00000001 00000000`00282018 ffffe00d`8ac92250 ffffe00d`8b866080 : nt!IofCallDriver+0x55
- ffffa185`3a59f730 fffff806`21e2df5a : 00000000`00282018 ffffa185`3a59fa80 00000000`00000000 00000000`00282018 : nt!IopSynchronousServiceTail+0x34c
- ffffa185`3a59f7d0 fffff806`21e2d236 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xd0a
- ffffa185`3a59f920 fffff806`21c119c5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtDeviceIoControlFile+0x56
- ffffa185`3a59f990 00007ffc`0d44d0c4 : 00007ffc`0ad2358b 00000026`9d0fa790 00007ff7`af9f243b 00007ffb`b3c47ce0 : nt!KiSystemServiceCopyEnd+0x25
- 00000026`9d0fa738 00007ffc`0ad2358b : 00000026`9d0fa790 00007ff7`af9f243b 00007ffb`b3c47ce0 00000026`00000000 : ntdll!NtDeviceIoControlFile+0x14
- 00000026`9d0fa740 00007ffc`0b8f5921 : 00000000`00282018 00000000`00000000 00000000`00000000 00000000`00000000 : KERNELBASE!DeviceIoControl+0x6b
- 00000026`9d0fa7b0 00007ff7`af9c5344 : 00000000`00000000 00000000`0000001f 00000026`9d0fa840 00000000`00000000 : KERNEL32!DeviceIoControlImplementation+0x81
- 00000026`9d0fa800 00007ff7`af9c522b : 00007ff7`afa14010 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd_debug!nfsd_worker_thread_main+0xe4 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 113]
- 00000026`9d0ffb70 00007ffb`b3af2d20 : 00007ff7`afa14010 00000000`00000000 00000000`00000000 00000000`00000000 : nfsd_debug!nfsd_thread_main+0x2b [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 172]
- 00000026`9d0ffbf0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ucrtbased!thread_start<unsigned int (__cdecl*)(void *),1>+0xb0 [minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 97]
- FAULTING_SOURCE_LINE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
- FAULTING_SOURCE_FILE: C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c
- FAULTING_SOURCE_LINE_NUMBER: 529
- SYMBOL_NAME: nfs41_driver!length_as_utf8+38
- MODULE_NAME: nfs41_driver
- IMAGE_NAME: nfs41_driver.sys
- STACK_COMMAND: .cxr 0xffffa1853a59e6a0 ; kb
- BUCKET_ID_FUNC_OFFSET: 38
- FAILURE_BUCKET_ID: 0x27_nfs41_driver!length_as_utf8
- OS_VERSION: 10.0.19041.1
- BUILDLAB_STR: vb_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {a57fa22e-8926-234c-4e0e-1cefe23c0547}
- Followup: MachineOwner
- ---------
- 1: kd> kp
- # Child-SP RetAddr Call Site
- 00 ffffa185`3a59ddf8 fffff806`263f7809 nt!KeBugCheckEx
- 01 ffffa185`3a59de00 fffff806`263f8fe0 nfs41_driver!RxExceptionFilter(struct _RX_CONTEXT * RxContext = 0xffffe00d`8c4fa2b0, struct _EXCEPTION_POINTERS * ExceptionPointer = 0xffffa185`3a59dee0)+0x159 [base\fs\rdr2\rdbss\ntexcept.c @ 126]
- 02 ffffa185`3a59de70 fffff806`21bd058f nfs41_driver!RxFsdCommonDispatch$filt$0+0x15 [base\fs\rdr2\rdbss\ntfsd.c @ 876]
- 03 ffffa185`3a59deb0 fffff806`21c0856f nt!_C_specific_handler+0x9f
- 04 ffffa185`3a59df20 fffff806`21aaab47 nt!RtlpExecuteHandlerForException+0xf
- 05 ffffa185`3a59df50 fffff806`21aa8a76 nt!RtlDispatchException+0x297
- 06 ffffa185`3a59e670 fffff806`21c123ac nt!KiDispatchException+0x186
- 07 ffffa185`3a59ed30 fffff806`21c0dc0e nt!KiExceptionDispatch+0x12c
- 08 ffffa185`3a59ef10 fffff806`21b52c46 nt!KiPageFault+0x44e
- 09 ffffa185`3a59f0a8 fffff806`21f04ab7 nt!CountUnicodeToUTF8+0x32
- 0a ffffa185`3a59f0b0 fffff806`263e4f88 nt!RtlUnicodeToUTF8N+0x1a7
- 0b ffffa185`3a59f0f0 fffff806`263e6ea6 nfs41_driver!length_as_utf8(struct _UNICODE_STRING * str = 0xffffcc04`a6679ac0 "--- memory read error at address 0x00000014`00000000 ---")+0x38 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 529]
- 0c ffffa185`3a59f140 fffff806`263e49d3 nfs41_driver!marshal_nfs41_open(struct _updowncall_entry * entry = 0xffffe00d`83902e60, unsigned char * buf = 0xffffe00d`8ca02000 "H???", unsigned long buf_len = 0x2000, unsigned long * len = 0xffffa185`3a59f278)+0xa6 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 708]
- 0d ffffa185`3a59f1e0 fffff806`263f06c7 nfs41_driver!handle_upcall(struct _RX_CONTEXT * RxContext = 0xffffe00d`8c4fa2b0, struct _updowncall_entry * entry = 0xffffe00d`83902e60, unsigned long * len = 0xffffa185`3a59f278)+0x163 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1444]
- 0e ffffa185`3a59f240 fffff806`263ea018 nfs41_driver!nfs41_upcall(struct _RX_CONTEXT * RxContext = 0xffffe00d`8c4fa2b0)+0xe7 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 1637]
- 0f ffffa185`3a59f2b0 fffff806`26417976 nfs41_driver!nfs41_DevFcbXXXControlFile(struct _RX_CONTEXT * RxContext = 0xffffe00d`8c4fa2b0)+0x128 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 2477]
- 10 ffffa185`3a59f330 fffff806`26417698 nfs41_driver!RxXXXControlFileCallthru(struct _RX_CONTEXT * RxContext = 0xffffe00d`8c4fa2b0, struct _IRP * Irp = 0xffffe00d`8df817c0)+0x76 [base\fs\rdr2\rdbss\ntdevfcb.c @ 130]
- 11 ffffa185`3a59f360 fffff806`263f6092 nfs41_driver!RxCommonDevFCBIoCtl(struct _RX_CONTEXT * RxContext = 0xffffe00d`8c4fa2b0, struct _IRP * Irp = <Value unavailable error>)+0x58 [base\fs\rdr2\rdbss\ntdevfcb.c @ 491]
- 12 ffffa185`3a59f390 fffff806`2640e97d nfs41_driver!RxFsdCommonDispatch(struct _RX_FSD_DISPATCH_VECTOR * DispatchVector = 0xfffff806`26401370, struct _IRP * Irp = 0xffffe00d`8df817c0, struct _FILE_OBJECT * FileObject = 0xffffffff`ffffffff, struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = 0xffffe00d`84737060)+0x442 [base\fs\rdr2\rdbss\ntfsd.c @ 848]
- 13 ffffa185`3a59f490 fffff806`263eab67 nfs41_driver!RxFsdDispatch(struct _RDBSS_DEVICE_OBJECT * RxDeviceObject = <Value unavailable error>, struct _IRP * Irp = <Value unavailable error>)+0xfd [base\fs\rdr2\rdbss\ntfsd.c @ 442]
- 14 ffffa185`3a59f4c0 fffff806`21a2d935 nfs41_driver!nfs41_FsdDispatch(struct _DEVICE_OBJECT * dev = 0xffffe00d`84737060 Device for "\FileSystem\nfs41_driver", struct _IRP * Irp = 0xffffe00d`8df817c0)+0x67 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 6922]
- 15 ffffa185`3a59f500 fffff806`2566f248 nt!IofCallDriver+0x55
- 16 ffffa185`3a59f540 fffff806`2566ed99 mup!MupiCallUncProvider+0xb8
- 17 ffffa185`3a59f5b0 fffff806`2566ecce mup!MupStateMachine+0x59
- 18 ffffa185`3a59f5e0 fffff806`21a2d935 mup!MupFsdIrpPassThrough+0x17e
- 19 ffffa185`3a59f650 fffff806`1ea94a76 nt!IofCallDriver+0x55
- 1a ffffa185`3a59f690 fffff806`21a2d935 FLTMGR!FltpDispatch+0xd6
- 1b ffffa185`3a59f6f0 fffff806`21e2e30c nt!IofCallDriver+0x55
- 1c ffffa185`3a59f730 fffff806`21e2df5a nt!IopSynchronousServiceTail+0x34c
- 1d ffffa185`3a59f7d0 fffff806`21e2d236 nt!IopXxxControlFile+0xd0a
- 1e ffffa185`3a59f920 fffff806`21c119c5 nt!NtDeviceIoControlFile+0x56
- 1f ffffa185`3a59f990 00007ffc`0d44d0c4 nt!KiSystemServiceCopyEnd+0x25
- 20 00000026`9d0fa738 00007ffc`0ad2358b ntdll!NtDeviceIoControlFile+0x14
- 21 00000026`9d0fa740 00007ffc`0b8f5921 KERNELBASE!DeviceIoControl+0x6b
- 22 00000026`9d0fa7b0 00007ff7`af9c5344 KERNEL32!DeviceIoControlImplementation+0x81
- 23 00000026`9d0fa800 00007ff7`af9c522b nfsd_debug!nfsd_worker_thread_main(void * args = 0x00007ff7`afa14010)+0xe4 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 113]
- 24 00000026`9d0ffb70 00007ffb`b3af2d20 nfsd_debug!nfsd_thread_main(void * args = 0x00007ff7`afa14010)+0x2b [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\daemon\nfs41_daemon.c @ 172]
- 25 00000026`9d0ffbf0 00000000`00000000 ucrtbased!thread_start<unsigned int (void * parameter = 0x00000206`7765d410)+0xb0 [minkernel\crts\ucrt\src\appcrt\startup\thread.cpp @ 97]
- 1: kd> .frame 0n12;dv /t /v
- 0c ffffa185`3a59f140 fffff806`263e49d3 nfs41_driver!marshal_nfs41_open+0xa6 [C:\cygwin64\home\roland_mainz\work\msnfs41_uidmapping\ms-nfs41-client\sys\nfs41_driver.c @ 708]
- ffffa185`3a59f1e0 struct _updowncall_entry * entry = 0xffffe00d`83902e60
- ffffa185`3a59f1e8 unsigned char * buf = 0xffffe00d`8ca02000 "H???"
- ffffa185`3a59f1f0 unsigned long buf_len = 0x2000
- ffffa185`3a59f1f8 unsigned long * len = 0xffffa185`3a59f278
- ffffa185`3a59f1c0 unsigned char * tmp = 0xffffe00d`8ca02020 ""
- ffffa185`3a59f1b0 long status = 0n0
- ffffa185`3a59f1b4 unsigned long header_len = 0
- 1: kd> dx -r1 ((nfs41_driver!_updowncall_entry *)0xffffe00d83902e60)
- ((nfs41_driver!_updowncall_entry *)0xffffe00d83902e60) : 0xffffe00d83902e60 [Type: _updowncall_entry *]
- [+0x000] version : 0x1ac48 [Type: unsigned long]
- [+0x008] xid : 172304800 [Type: __int64]
- [+0x010] opcode : 0x2 [Type: unsigned long]
- [+0x014] status : 0 [Type: long]
- [+0x018] state : NFS41_NOT_WAITING (3) [Type: _nfs41_updowncall_state]
- [+0x020] lock [Type: _FAST_MUTEX]
- [+0x058] next [Type: _LIST_ENTRY]
- [+0x068] cond [Type: _KEVENT]
- [+0x080] errno : 0x0 [Type: unsigned long]
- [+0x084] async_op : 0x0 [Type: unsigned char]
- [+0x088] sec_ctx [Type: _SECURITY_CLIENT_CONTEXT]
- [+0x0d0] psec_ctx : 0xffffe00d8cc4ff10 [Type: _SECURITY_CLIENT_CONTEXT *]
- [+0x0d8] open_state : 0xffffffffffffffff [Type: void *]
- [+0x0e0] session : 0x20677652770 [Type: void *]
- [+0x0e8] filename : 0xffffcc04a6679ac0 [Type: _UNICODE_STRING *]
- [+0x0f0] buf : 0x0 [Type: void *]
- [+0x0f8] buf_len : 0x0 [Type: unsigned long]
- [+0x100] ChangeTime : 0x0 [Type: unsigned __int64]
- [+0x108] u [Type: <unnamed-tag>]
- 1: kd> dx -r1 (*((nfs41_driver!_updowncall_entry *)0xffffe00d83902e60)).filename
- (*((nfs41_driver!_updowncall_entry *)0xffffe00d83902e60)).filename : 0xffffcc04a6679ac0 [Type: _UNICODE_STRING *]
- [+0x000] Length : 0x5c [Type: unsigned short]
- [+0x002] MaximumLength : 0x0 [Type: unsigned short]
- [+0x008] Buffer : 0x1400000000 : Unable to read memory at Address 0x1400000000 [Type: unsigned short *]
kernel crash in |open()| syscall codepath (|marshal_nfs41_open()|
Posted by Anonymous on Sat 20th Apr 2024 09:03
raw | new post
view followups (newest first): kernel crash in |open()| syscall codepath (|marshal_nfs41_open()| by Anonymous
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.