maharmstone / btrfs

WinBtrfs - an open-source btrfs driver for Windows
GNU Lesser General Public License v3.0
5.8k stars 222 forks source link

BSOD NO_MORE_IRP_STACK_LOCATIONS #645

Open 000lbh opened 5 months ago

000lbh commented 5 months ago

I encoountered this BSOD when I am shutting down my computer. I opened the core dump file by Windbg, and the back trace shows that the problem is related to btrfs.sys. At that time, no btrfs device is inserted or mounted. My OS version is 10.0.22631.3296, and the driver version is 1.9.0.0. Here is the full analysis:


NO_MORE_IRP_STACK_LOCATIONS (35) A higher level driver has attempted to call a lower level driver through the IoCallDriver() interface, but there are no more stack locations in the packet, hence, the lower level driver would not be able to access its parameters, as there are no parameters for it. This is a disastrous situation, since the higher level driver "thinks" it has filled in the parameters for the lower level driver (something it MUST do before it calls it), but since there is no stack location for the latter driver, the former has written off of the end of the packet. This means that some other memory has probably been trashed at this point. Arguments: Arg1: ffffe60883a97ca0, Address of the IRP Arg2: 0000000000000000 Arg3: 0000000000000000 Arg4: 0000000000000000

Debugging Details:

KEY_VALUES_STRING: 1

Key  : Analysis.CPU.mSec
Value: 6734

Key  : Analysis.Elapsed.mSec
Value: 7452

Key  : Analysis.IO.Other.Mb
Value: 0

Key  : Analysis.IO.Read.Mb
Value: 0

Key  : Analysis.IO.Write.Mb
Value: 1

Key  : Analysis.Init.CPU.mSec
Value: 374

Key  : Analysis.Init.Elapsed.mSec
Value: 10271

Key  : Analysis.Memory.CommitPeak.Mb
Value: 97

Key  : Bugcheck.Code.KiBugCheckData
Value: 0x35

Key  : Bugcheck.Code.LegacyAPI
Value: 0x35

Key  : Bugcheck.Code.TargetModel
Value: 0x35

Key  : Dump.Attributes.AsUlong
Value: 1800

Key  : Dump.Attributes.DiagDataWrittenToHeader
Value: 1

Key  : Dump.Attributes.ErrorCode
Value: 0

Key  : Dump.Attributes.LastLine
Value: Dump completed successfully.

Key  : Dump.Attributes.ProgressPercentage
Value: 100

Key  : Failure.Bucket
Value: 0x35_btrfs!unknown_function

Key  : Failure.Hash
Value: {5c63dda0-f7ca-2ee5-ebe5-e6cf30829a69}

Key  : Hypervisor.Enlightenments.ValueHex
Value: 1417cf94

Key  : Hypervisor.Flags.AnyHypervisorPresent
Value: 1

Key  : Hypervisor.Flags.ApicEnlightened
Value: 1

Key  : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 0

Key  : Hypervisor.Flags.AsyncMemoryHint
Value: 0

Key  : Hypervisor.Flags.CoreSchedulerRequested
Value: 0

Key  : Hypervisor.Flags.CpuManager
Value: 1

Key  : Hypervisor.Flags.DeprecateAutoEoi
Value: 0

Key  : Hypervisor.Flags.DynamicCpuDisabled
Value: 1

Key  : Hypervisor.Flags.Epf
Value: 0

Key  : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1

Key  : Hypervisor.Flags.HardwareMbecAvailable
Value: 1

Key  : Hypervisor.Flags.MaxBankNumber
Value: 0

Key  : Hypervisor.Flags.MemoryZeroingControl
Value: 0

Key  : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0

Key  : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1

Key  : Hypervisor.Flags.Phase0InitDone
Value: 1

Key  : Hypervisor.Flags.PowerSchedulerQos
Value: 0

Key  : Hypervisor.Flags.RootScheduler
Value: 0

Key  : Hypervisor.Flags.SynicAvailable
Value: 1

Key  : Hypervisor.Flags.UseQpcBias
Value: 0

Key  : Hypervisor.Flags.Value
Value: 4853999

Key  : Hypervisor.Flags.ValueHex
Value: 4a10ef

Key  : Hypervisor.Flags.VpAssistPage
Value: 1

Key  : Hypervisor.Flags.VsmAvailable
Value: 1

Key  : Hypervisor.RootFlags.AccessStats
Value: 1

Key  : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1

Key  : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1

Key  : Hypervisor.RootFlags.DisableHyperthreading
Value: 0

Key  : Hypervisor.RootFlags.HostTimelineSync
Value: 1

Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0

Key  : Hypervisor.RootFlags.IsHyperV
Value: 1

Key  : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1

Key  : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1

Key  : Hypervisor.RootFlags.MceEnlightened
Value: 1

Key  : Hypervisor.RootFlags.Nested
Value: 0

Key  : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1

Key  : Hypervisor.RootFlags.Value
Value: 1015

Key  : Hypervisor.RootFlags.ValueHex
Value: 3f7

Key  : SecureKernel.HalpHvciEnabled
Value: 0

Key  : WER.OS.Branch
Value: ni_release

Key  : WER.OS.Version
Value: 10.0.22621.1

BUGCHECK_CODE: 35

BUGCHECK_P1: ffffe60883a97ca0

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 0

FILE_IN_CAB: MEMORY.DMP

DUMP_FILE_ATTRIBUTES: 0x1800

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

PROCESS_NAME: System

STACK_TEXT:
ffffe18b3b0a71a8 fffff8034523b1ee : 0000000000000035 ffffe60883a97ca0 0000000000000000 0000000000000000 : nt!KeBugCheckEx ffffe18b3b0a71b0 fffff80360f56038 : ffffe60860d82760 0000000000000000 ffffe608847f5180 0000000000000000 : nt!IofCallDriver+0x22b9fe ffffe18b3b0a71f0 fffff80360f73781 : ffffe608847f5180 0000000004324000 ffffe60800004000 0000000000000000 : btrfs+0x56038 ffffe18b3b0a7400 fffff80360f73d40 : ffffe60860d824a0 0000000000000000 ffffe608895a6c60 ffffcf81e1f98850 : btrfs+0x73781 ffffe18b3b0a7490 fffff80360f37ef9 : 0000000000000000 ffffcf81dfa4d9b0 ffffe608895a6c60 ffffe608847f5180 : btrfs+0x73d40 ffffe18b3b0a74f0 fffff80360f37abb : ffffe608895a6c60 0000000000000001 ffffe608895a6c60 ffffe18b3b0a7890 : btrfs+0x37ef9 ffffe18b3b0a75b0 fffff80360f4936f : ffffe608847f5180 ffffe60893b0d500 0000000000000000 0000000000000001 : btrfs+0x37abb ffffe18b3b0a75f0 fffff80360f0ecd8 : ffffe60800000001 0000000000000000 ffffe608847f7640 ffffe608794b0180 : btrfs+0x4936f ffffe18b3b0a7620 fffff80360f100a2 : ffffe608895a6c60 ffffe608794a2e00 ffffe60864a3d0d8 ffffe608d833b920 : btrfs+0xecd8 ffffe18b3b0a7690 fffff8034500f845 : ffffe6087983f040 ffffe608794a2e00 0000000000000000 ffffffffffffffff : btrfs+0x100a2 ffffe18b3b0a76c0 fffff80343077e56 : ffffe6087983f040 ffffe608794a2e00 ffffe608895a6c60 fffff80345a3c140 : nt!IofCallDriver+0x55 ffffe18b3b0a7700 fffff8034500f845 : ffffe6087983f040 fffff80345a5d5e0 0000000000000000 ffffe18b3b0a77f0 : FLTMGR!FltpDispatch+0xd6 ffffe18b3b0a7760 fffff8034589902e : ffffe608794a2e50 fffff80345a5d600 0000000000000000 fffff80345a3c140 : nt!IofCallDriver+0x55 ffffe18b3b0a77a0 fffff80345898d5f : 0000000000000001 ffffe608612f1cf0 ffffe60893b0d500 0000000000000000 : nt!IopShutdownBaseFileSystems+0xca ffffe18b3b0a7820 fffff8034589fcde : 0000000000000002 0000000000000002 fffff80345b49ac0 fffff80345b49ac0 : nt!IoShutdownSystem+0x1ab ffffe18b3b0a78a0 fffff80345153665 : ffffe608612f1cf0 ffffe608612f1c00 fffff80300000000 ffffe60800000000 : nt!PopGracefulShutdown+0x26e ffffe18b3b0a7900 fffff803450ed757 : ffffe608a59f0040 0000000000001060 ffffe608a59f0040 fffff80345153510 : nt!ExpWorkerThread+0x155 ffffe18b3b0a7af0 fffff8034521c944 : ffffa88112ad1180 ffffe608a59f0040 fffff803450ed700 0000000000000000 : nt!PspSystemThreadStartup+0x57 ffffe18b3b0a7b40 0000000000000000 : ffffe18b3b0a8000 ffffe18b3b0a1000 0000000000000000 0000000000000000 : nt!KiStartSystemThread+0x34

SYMBOL_NAME: btrfs+56038

MODULE_NAME: btrfs

IMAGE_NAME: btrfs.sys

STACK_COMMAND: .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET: 56038

FAILURE_BUCKET_ID: 0x35_btrfs!unknown_function

OS_VERSION: 10.0.22621.1

BUILDLAB_STR: ni_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {5c63dda0-f7ca-2ee5-ebe5-e6cf30829a69}

Followup: MachineOwner

IlgazC commented 1 month ago

I have the same issue on Windows 11 26100.1301 along with massive unlisted and constant CPU load. This is a Thinkpad so I noticed it from constant fan. For the moment I uninstalled the driver via choco uninstall. I can test/report if needed.