@Mov AX, 0xDEAD
Here is the wished. I fake the new nvme.sys driver with stornvme.sys name
Dietmar
20: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: ba3e0d70
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
TSS: 00000028 -- (.tss 0x28)
eax=ba234fc4 ebx=8952c004 ecx=86f4257c edx=00000000 esi=86f4257c edi=00000000
eip=b9ee8985 esp=ba234fc4 ebp=ba235a6c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
stornvme+0x13985:
b9ee8985 56 push esi
Resetting default scope
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: csrss.exe
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre
TRAP_FRAME: ba236334 -- (.trap 0xffffffffba236334)
ErrCode = 00000000
eax=0000000f ebx=00000000 ecx=c4b03400 edx=00000000 esi=ba236424 edi=86f3e668
eip=80b198af esp=ba2363a8 ebp=ba2363f4 iopl=0 nv up ei ng nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010293
nt!CcMapData+0x137:
80b198af 8a0c0a mov cl,byte ptr [edx+ecx] ds:0023:c4b03400=bc
Resetting default scope
LAST_CONTROL_TRANSFER: from b9ee85e5 to b9ee8985
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
ba235a6c b9ee85e5 870d9298 8952c004 86f4257c stornvme+0x13985
ba235a94 b9e6b672 8952c004 86f4257c ba235ad0 stornvme+0x135e5
ba235aa4 b9e6d1e6 894e0190 86f4257c 870d9010 storport!DllInitialize+0x2e1
ba235ad0 b9e6d46a 894e00f0 897e8bb0 00000000 storport!DllInitialize+0x1e55
ba235ae8 801055de 894e0038 00000000 870d9064 storport!DllInitialize+0x20d9
ba235b10 b9e710b6 00000000 894e0038 870d9064 HAL3!HalBuildScatterGatherList+0x202
ba235b40 b9e6d506 894e02a0 894e0038 868946b0 storport!DllInitialize+0x5d25
ba235b80 b9e6d556 894e02a0 00001000 ba235bb0 storport!DllInitialize+0x2175
ba235b90 b9e7b3d8 894e00f0 870d9010 86f42338 storport!DllInitialize+0x21c5
ba235bb0 b9e72692 00000000 86f42338 ba235bd0 storport!StorPortExtendedFunction+0x5fcd
ba235bf0 b9e78d93 007e8b28 86f42338 00000000 storport!DllInitialize+0x7301
ba235c10 b9e7bb29 897e8b28 86f42338 86f42338 storport!StorPortExtendedFunction+0x3988
ba235c30 b9e717ec 897e8b28 00000000 897e8a70 storport!StorPortExtendedFunction+0x671e
ba235c4c 80a21c8d 897e8a70 86f42338 86f423cc storport!DllInitialize+0x645b
ba235c64 ba0f8fdd 00000000 86894e70 86f424d0 nt!IopfCallDriver+0x51
ba235c78 ba0f8cdc 86f424d0 87084b70 86894f70 CLASSPNP!SubmitTransferPacket+0x82
ba235ca8 ba0f8dcd 00001000 00001000 87084ab8 CLASSPNP!ServiceTransferRequest+0xe4
ba235ccc 80a21c8d 87084ab8 00000000 87084878 CLASSPNP!ClassReadWrite+0xff
ba235ce4 ba0c903f 00000000 8958e4f8 ba235d28 nt!IopfCallDriver+0x51
ba235cf4 80a21c8d 87084878 86894e70 86894e70 PartMgr!PmReadWrite+0x9a
ba235d0c b9f1d1c6 894a6e30 86894e70 00000000 nt!IopfCallDriver+0x51
ba235d28 80a21c8d 894a6e30 86894e70 86fc6100 ftdisk+0x11c6
ba235d40 b9cd01c3 ba236024 86894e70 ba235f30 nt!IopfCallDriver+0x51
ba235d50 b9ccfd26 ba236024 894a6e30 c0083000 Ntfs!NtfsSingleAsync+0x6d
ba235f30 b9cd26f6 ba236024 86894e70 87141e68 Ntfs!NtfsNonCachedIo+0x2f8
ba236010 b9cd200a ba236024 86894e70 00000001 Ntfs!NtfsCommonRead+0xbdd
ba2361c0 80a21c8d 86fc6020 86894e70 87147dd0 Ntfs!NtfsFsdRead+0x22d
ba2361f8 80a22cab 00000000 86894688 86894678 nt!IopfCallDriver+0x51
ba23620c 80a22cd3 87147dd0 86894607 86894690 nt!IopPageReadInternal+0xf3
ba23622c 80a7eecb 89532e28 868946b0 86894690 nt!IoPageRead+0x1b
ba2362b0 80aa5374 c0033333 c4b03400 c0625818 nt!MiDispatchFault+0x691
ba23631c 80ae20a8 00000000 c4b03400 00000000 nt!MmAccessFault+0xdde
ba23631c 80b198af 00000000 c4b03400 00000000 nt!KiTrap0E+0xdc
ba2363f4 b9cf5a50 89532e28 ba236424 00000400 nt!CcMapData+0x137
ba236414 b9cf5c6b 86f00340 87141e68 00083400 Ntfs!NtfsMapStream+0x46
ba236488 b9cf5b78 86f00340 86fc6100 e13de458 Ntfs!NtfsReadMftRecord+0x86
ba2364c0 b9cf5acf 86f00340 86fc6100 e13de458 Ntfs!NtfsReadFileRecord+0x7a
ba2364f8 b9d06945 86f00340 e13de450 e13de458 Ntfs!NtfsLookupInFileRecord+0x37
ba2365a8 b9d06564 86f00340 00000001 e13de450 Ntfs!NtfsUpdateFcbInfoFromDisk+0x3e
ba236680 b9d068fd 86f00340 86dbea60 86dbeba8 Ntfs!NtfsOpenFile+0x2e6
ba2368d8 b9cf4f0d 86f00340 86dbea60 ba236930 Ntfs!NtfsCommonCreate+0x134a
ba2369bc 80a21c8d 86fc6020 86dbea60 87147dd0 Ntfs!NtfsFsdCreate+0x1dc
ba236a38 80b42450 894a6e18 80102524 86f47900 nt!IopfCallDriver+0x51
ba236b20 80bbe888 894a6e30 00000000 86f478d0 nt!IopParseDevice+0xb6a
ba236b98 80bb8c28 00000000 ba236bd8 00000240 nt!ObpLookupObjectName+0x590
ba236bec 80b2f75d 00000000 00000000 00000000 nt!ObOpenObjectByName+0x140
ba236c68 80b302ca ba236da8 001200a9 ba236d60 nt!IopCreateFile+0x43b
ba236cc8 bf87fe8d ba236da8 001200a9 ba236d60 nt!IoCreateFile+0xd4
ba236fcc bf83279b ba2370d0 ba236ff4 00000000 win32k!bCreateSection+0xfc
ba237028 bf88f277 e13716b8 e11fcca0 e11fcca4 win32k!EngMapFontFileFDInternal+0xd1
ba237084 bf8aa771 ba2370d0 00000022 00000001 win32k!PUBLIC_PFTOBJ::bLoadFonts+0x18f
ba2372e0 bf95a301 ba237338 ba237308 0000000a win32k!PUBLIC_PFTOBJ::bLoadAFont+0x77
ba23778c bf95a497 00000000 ffffffff 00000000 win32k!bAppendSysDirectory+0x3f2
ba2377a8 80c00791 e1371770 00000001 e1371734 win32k!BuildAndLoadLinkedFontRoutine+0x68
ba2377f4 80c00bc5 bf9b67f0 e1371734 ba237854 nt!RtlpCallQueryRegistryRoutine+0x235
ba237858 bf8a9d20 00000000 000000a6 00000001 nt!RtlQueryRegistryValues+0x1c3
ba237874 bf89515a bf9a4060 00000000 00000003 win32k!BuildAndLoadLinkedFontRoutine+0xd0
ba237cc0 bf8aa560 00000000 00000001 ba237d58 win32k!BuildAndLoadLinkedFontRoutine+0x2a2
ba237cf0 bf8ac1b9 0015fd98 bf9bf401 00000000 win32k!bInitializeEUDC+0x156
ba237d3c bf8ab602 ba237d64 80adedd8 00050000 win32k!InitializeGreCSRSS+0x164
ba237d44 80adedd8 00050000 00000194 00000198 win32k!NtUserInitialize+0x62
ba237d44 7eb3e514 00050000 00000194 00000198 nt!KiFastCallEntry+0x158
0015fd80 75b686df 75b68669 00050000 00000194 ntdll!KiFastSystemCallRet
0015fdb0 75b43472 00000000 00000000 0016274d winsrv!NtUserInitialize+0xc
0015fe20 75b4301b 0016272a 00162731 00000003 CSRSRV!CsrLoadServerDll+0x1a0
0015ff74 75b430f3 0000000a 001624f0 7eb3dc9e CSRSRV!CsrParseServerCommandLine+0x2d6
0015ff88 4a68115d 0000000a 001624f0 00000005 CSRSRV!CsrServerInitialization+0x95
0015ffa8 4a6818d7 0000000a 001624f0 0016251c csrss!main+0x4f
0015fff4 00000000 7ffd4000 000000c8 000001d1 csrss!NtProcessStartup+0x1d2
STACK_COMMAND: .tss 0x28 ; kb
FOLLOWUP_IP:
stornvme+13985
b9ee8985 56 push esi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: stornvme+13985
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: stornvme
IMAGE_NAME: stornvme.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5cddb429
IMAGE_VERSION: 4.4.0.1003
FAILURE_BUCKET_ID: 0x7f_8_stornvme+13985
BUCKET_ID: 0x7f_8_stornvme+13985
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x7f_8_stornvme+13985
FAILURE_ID_HASH: {d0239ac1-15ec-3c11-c70d-4d80f769e454}
Followup: MachineOwner
---------
20: kd> !thread
THREAD 86f3e668 Cid 01fc.0200 Teb: 7ffdf000 Win32Thread: e13e8698 RUNNING on processor 14
IRP List:
86dbea60: (0006,0190) Flags: 00000884 Mdl: 00000000
Not impersonating
DeviceMap e10086e0
Owning Process 0 Image: <Unknown>
Attached Process 86f40b20 Image: csrss.exe
Wait Start TickCount 637 Ticks: 0
Context Switch Count 116 IdealProcessor: 0 LargeStack
UserTime 00:00:00.000
KernelTime 00:00:00.015
Start Address csrss!NtProcessStartupForGS (0x4a6811a3)
Stack Init ba238000 Current ba235eb8 Base ba238000 Limit ba235000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 DecrementCount 0
ChildEBP RetAddr Args to Child
ba3e3d10 80a30d7b 00000003 ba3e406c 00000000 nt!RtlpBreakWithStatusInstruction (FPO: [1,0,0])
ba3e3d5c 80a319e6 00000003 00000000 00000000 nt!KiBugCheckDebugBreak+0x19 (FPO: [Non-Fpo])
ba3e413c 80ae0fc7 0000007f 00000008 ba3e0d70 nt!KeBugCheck2+0x574 (FPO: [Non-Fpo])
ba3e413c b9ee8985 0000007f 00000008 ba3e0d70 nt!KiTrap08+0x48 (FPO: TSS 28:0)
WARNING: Stack unwind information not available. Following frames may be wrong.
ba235a6c b9ee85e5 870d9298 8952c004 86f4257c stornvme+0x13985
ba235a94 b9e6b672 8952c004 86f4257c ba235ad0 stornvme+0x135e5
ba235aa4 b9e6d1e6 894e0190 86f4257c 870d9010 storport!DllInitialize+0x2e1
ba235ad0 b9e6d46a 894e00f0 897e8bb0 00000000 storport!DllInitialize+0x1e55
ba235ae8 801055de 894e0038 00000000 870d9064 storport!DllInitialize+0x20d9
ba235b10 b9e710b6 00000000 894e0038 870d9064 HAL3!HalBuildScatterGatherList+0x202 (FPO: [Non-Fpo])
ba235b40 b9e6d506 894e02a0 894e0038 868946b0 storport!DllInitialize+0x5d25
ba235b80 b9e6d556 894e02a0 00001000 ba235bb0 storport!DllInitialize+0x2175
ba235b90 b9e7b3d8 894e00f0 870d9010 86f42338 storport!DllInitialize+0x21c5
ba235bb0 b9e72692 00000000 86f42338 ba235bd0 storport!StorPortExtendedFunction+0x5fcd
ba235bf0 b9e78d93 007e8b28 86f42338 00000000 storport!DllInitialize+0x7301
ba235c10 b9e7bb29 897e8b28 86f42338 86f42338 storport!StorPortExtendedFunction+0x3988
ba235c30 b9e717ec 897e8b28 00000000 897e8a70 storport!StorPortExtendedFunction+0x671e
ba235c4c 80a21c8d 897e8a70 86f42338 86f423cc storport!DllInitialize+0x645b
ba235c64 ba0f8fdd 00000000 86894e70 86f424d0 nt!IopfCallDriver+0x51 (FPO: [0,0,0])
ba235c78 ba0f8cdc 86f424d0 87084b70 86894f70 CLASSPNP!SubmitTransferPacket+0x82 (FPO: [Non-Fpo])
ba235ca8 ba0f8dcd 00001000 00001000 87084ab8 CLASSPNP!ServiceTransferRequest+0xe4 (FPO: [Non-Fpo])
ba235ccc 80a21c8d 87084ab8 00000000 87084878 CLASSPNP!ClassReadWrite+0xff (FPO: [Non-Fpo])
ba235ce4 ba0c903f 00000000 8958e4f8 ba235d28 nt!IopfCallDriver+0x51 (FPO: [0,0,0])
ba235cf4 80a21c8d 87084878 86894e70 86894e70 PartMgr!PmReadWrite+0x9a (FPO: [Non-Fpo])
ba235d0c b9f1d1c6 894a6e30 86894e70 00000000 nt!IopfCallDriver+0x51 (FPO: [0,0,0])
ba235d28 80a21c8d 894a6e30 86894e70 86fc6100 ftdisk+0x11c6
ba235d40 b9cd01c3 ba236024 86894e70 ba235f30 nt!IopfCallDriver+0x51 (FPO: [0,0,0])
ba235d50 b9ccfd26 ba236024 894a6e30 c0083000 Ntfs!NtfsSingleAsync+0x6d (FPO: [Non-Fpo])
ba235f30 b9cd26f6 ba236024 86894e70 87141e68 Ntfs!NtfsNonCachedIo+0x2f8 (FPO: [Non-Fpo])
ba236010 b9cd200a ba236024 86894e70 00000001 Ntfs!NtfsCommonRead+0xbdd (FPO: [Non-Fpo])
ba2361c0 80a21c8d 86fc6020 86894e70 87147dd0 Ntfs!NtfsFsdRead+0x22d (FPO: [Non-Fpo])
ba2361f8 80a22cab 00000000 86894688 86894678 nt!IopfCallDriver+0x51 (FPO: [0,0,0])
ba23620c 80a22cd3 87147dd0 86894607 86894690 nt!IopPageReadInternal+0xf3 (FPO: [Non-Fpo])
ba23622c 80a7eecb 89532e28 868946b0 86894690 nt!IoPageRead+0x1b (FPO: [Non-Fpo])
ba2362b0 80aa5374 c0033333 c4b03400 c0625818 nt!MiDispatchFault+0x691 (FPO: [Non-Fpo])
ba23631c 80ae20a8 00000000 c4b03400 00000000 nt!MmAccessFault+0xdde (FPO: [Non-Fpo])
ba23631c 80b198af 00000000 c4b03400 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ ba236334)
ba2363f4 b9cf5a50 89532e28 ba236424 00000400 nt!CcMapData+0x137 (FPO: [Non-Fpo])
ba236414 b9cf5c6b 86f00340 87141e68 00083400 Ntfs!NtfsMapStream+0x46 (FPO: [Non-Fpo])
ba236488 b9cf5b78 86f00340 86fc6100 e13de458 Ntfs!NtfsReadMftRecord+0x86 (FPO: [Non-Fpo])