Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KERNEL_SECURITY_CHECK_FAILURE: A LIST_ENTRY has been corrupted (i.e. double remove) #691

Open
Kazurin-775 opened this issue Aug 23, 2024 · 0 comments

Comments

@Kazurin-775
Copy link

Just got this random BSOD while I was working (and leaving my btrfs partition idle), so I have no idea how to reproduce it.

A quick !analyze -v gives the following:

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff98886c5f0a0, Address of the trap frame for the exception that caused the BugCheck
Arg3: fffff98886c5eff8, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved



EXCEPTION_RECORD:  fffff98886c5eff8 -- (.exr 0xfffff98886c5eff8)
ExceptionAddress: fffff801bd282a85 (btrfs!RtlFailFast+0x0000000000000005)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY 

CUSTOMER_CRASH_COUNT:  1
PROCESS_NAME:  System
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE_STR:  c0000409
EXCEPTION_PARAMETER1:  0000000000000003
EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
fffff988`86c5ed78 fffff801`7fa2be29     : 00000000`00000139 00000000`00000003 fffff988`86c5f0a0 fffff988`86c5eff8 : nt!KeBugCheckEx
fffff988`86c5ed80 fffff801`7fa2c3f2     : 00000000`00000000 fffff988`86c5f3e0 ffff800d`835cb868 fffff801`7f829e08 : nt!KiBugCheckDispatch+0x69
fffff988`86c5eec0 fffff801`7fa2a0db     : 00000000`00000000 00000000`00000000 fffff988`86c5f1c0 fffff801`7f9429ef : nt!KiFastFailDispatch+0xb2
fffff988`86c5f0a0 fffff801`bd282a85     : ffffa086`c980bd80 00000000`00000000 ffff800d`92d46210 00000000`00000001 : nt!KiRaiseSecurityCheckFailure+0x35b
fffff988`86c5f230 fffff801`bd2a4284     : 00000000`1d356b88 fffff801`7f858efc fffff988`86c5f598 00000000`00000001 : btrfs!mark_fcb_dirty+0x55 [z:\workspace\maharmstone\btrfs\0d913aca\src\btrfs.c @ 1701] 
fffff988`86c5f260 fffff801`bd2a1ae5     : 00000000`00000001 ffff800d`92d46210 ffff800d`6dcee180 ffff800d`92d46210 : btrfs!stream_set_end_of_file_information+0x204 [z:\workspace\maharmstone\btrfs\0d913aca\src\fileinfo.c @ 3194] 
fffff988`86c5f2b0 fffff801`bd29ac5b     : 00000000`c0000002 ffff800d`92d46210 ffff800d`7539e7d8 ffff800d`7539e510 : btrfs!set_end_of_file_information+0x135 [z:\workspace\maharmstone\btrfs\0d913aca\src\fileinfo.c @ 3240] 
fffff988`86c5f380 fffff801`7f912685     : ffff800d`9225aba0 fffff988`86c5f580 ffff800d`6d4e9d80 ffff800d`7539e7d8 : btrfs!drv_set_information+0x28b [z:\workspace\maharmstone\btrfs\0d913aca\src\fileinfo.c @ 4104] 
fffff988`86c5f3d0 fffff801`7df9a1fb     : 00000000`00000000 ffff800d`9225aba0 00000000`00000000 00000000`00000000 : nt!IofCallDriver+0x55
fffff988`86c5f410 fffff801`7df97e43     : fffff988`86c5f4a0 00000000`00000000 fffff988`86c5f600 ffff800d`650e64c0 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x15b
fffff988`86c5f480 fffff801`7f912685     : ffff800d`79e87d40 fffff801`7f808d10 00000000`00000008 fffff801`7f937b04 : FLTMGR!FltpDispatch+0xa3
fffff988`86c5f4e0 fffff801`7f809271     : ffff800d`9ed79d70 fffff801`7f9439a2 ffff800d`79e87d40 fffff988`86c5f608 : nt!IofCallDriver+0x55
fffff988`86c5f520 fffff801`7f819559     : ffff800d`79e87d40 00000000`00000118 ffff800d`9bce8d70 fffff988`86c5f6a0 : nt!CcSetValidData+0x111
fffff988`86c5f590 fffff801`7f819a27     : 00000000`00000000 fffff988`86c5f700 00000000`00000118 ffff800d`62785a20 : nt!CcWriteBehindPostProcess+0x311
fffff988`86c5f650 fffff801`7f81981f     : ffff800d`9bce8d70 00000000`00000000 ffff800d`9ed79d70 00000000`00000000 : nt!CcWriteBehindInternal+0x97
fffff988`86c5f7c0 fffff801`7f8173a7     : ffff800d`9ed79d70 ffff800d`832aa580 ffff800d`998c29f0 ffff800d`729c3c00 : nt!CcWriteBehind+0xb7
fffff988`86c5f8c0 fffff801`7f952345     : ffff800d`6271ebb0 ffff800d`6271ebb0 fffff801`80349ac0 ffff800d`00000000 : nt!CcCachemapUninitWorkerThread+0x287
fffff988`86c5f9c0 fffff801`7f954d37     : ffff800d`832aa580 00000000`00000080 ffff800d`832aa580 fffff801`7f9521f0 : nt!ExpWorkerThread+0x155
fffff988`86c5fbb0 fffff801`7fa1b084     : fffff801`7bfa0180 ffff800d`832aa580 fffff801`7f954ce0 00000000`00000000 : nt!PspSystemThreadStartup+0x57
fffff988`86c5fc00 00000000`00000000     : fffff988`86c60000 fffff988`86c59000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34



FAULTING_SOURCE_LINE:  z:\workspace\maharmstone\btrfs\0d913aca\src\btrfs.c
FAULTING_SOURCE_FILE:  z:\workspace\maharmstone\btrfs\0d913aca\src\btrfs.c
FAULTING_SOURCE_LINE_NUMBER:  1701
FAULTING_SOURCE_CODE:  
No source found for 'z:\opt\msvc\kits\10\include\10.0.22621.0\km\wdm.h'
SYMBOL_NAME:  btrfs!mark_fcb_dirty+55
MODULE_NAME: btrfs
IMAGE_NAME:  btrfs.sys
STACK_COMMAND:  .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET:  55
FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_btrfs!mark_fcb_dirty
OS_VERSION:  10.0.22621.1
BUILDLAB_STR:  ni_release
OSPLATFORM_TYPE:  x64
OSNAME:  Windows 10
FAILURE_ID_HASH:  {0ae22ebe-7e62-7f5b-9c80-9f6354a0c027}
Followup:     MachineOwner

Please tell me if a minidump is required for diagnostics.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant