RDR_FILE_SYSTEM mrxsmb20.sys error after feature upgrade Windows 10 2004 10.0.19041.1 RRS feed

  • Question

  • Hi,

    I am experiencing the same problems as @CalvaryIT as stated in this post.Read here It was after we upgraded 2 machines' feature update to Windows 10 2004 and both of the machines have this issue. The others have yet to experience this issue as they are still on 1909.

    I have tried formatting database of Offline Files (via registry) as suggested in a thread (dated back to 2017) but that didn't work as errors still appeared after. Our environment makes use of Offline Files and Folder Redirect (My Documents and Downloads folder) for users that are out of the office so I don't think I can disable Offline Files. I am thinking of rolling back to 1909 but would like some feedback on this issue.

    My minidump file is attached here. 

        If you see RxExceptionFilter on the stack then the 2nd and 3rd parameters are the
        exception record and context record. Do a .cxr on the 3rd parameter and then kb to
        obtain a more informative stack trace.
        The high 16 bits of the first parameter is the RDBSS bugcheck code, which is defined
        as follows:
         RDBSS_BUG_CHECK_CACHESUP  = 0xca550000,
         RDBSS_BUG_CHECK_CLEANUP   = 0xc1ee0000,
         RDBSS_BUG_CHECK_CLOSE     = 0xc10e0000,
         RDBSS_BUG_CHECK_NTEXCEPT  = 0xbaad0000,
    Arg1: 00000000baad0073
    Arg2: fffff60c794defc8
    Arg3: fffff60c794de800
    Arg4: fffff8071346c8ec
    Debugging Details:
        Key  : AV.Dereference
        Value: NullClassPtr
        Key  : AV.Fault
        Value: Read
        Key  : Analysis.CPU.mSec
        Value: 7483
        Key  : Analysis.DebugAnalysisProvider.CPP
        Value: Create: 8007007e on USER01-PC
        Key  : Analysis.DebugData
        Value: CreateObject
        Key  : Analysis.DebugModel
        Value: CreateObject
        Key  : Analysis.Elapsed.mSec
        Value: 52104
        Key  : Analysis.Memory.CommitPeak.Mb
        Value: 96
        Key  : Analysis.System
        Value: CreateObject
        Key  : WER.OS.Branch
        Value: vb_release
        Key  : WER.OS.Timestamp
        Value: 2019-12-06T14:06:00Z
        Key  : WER.OS.Version
        Value: 10.0.19041.1
    BUGCHECK_P1: baad0073
    BUGCHECK_P2: fffff60c794defc8
    BUGCHECK_P3: fffff60c794de800
    BUGCHECK_P4: fffff8071346c8ec
    EXCEPTION_RECORD:  fffff60c794defc8 -- (.exr 0xfffff60c794defc8)
    ExceptionAddress: fffff8071346c8ec (mrxsmb20!Smb2QueryProtocolInformation+0x000000000000001c)
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 0000000000000000
       Parameter[1]: 00000000000001a0
    Attempt to read from address 00000000000001a0
    CONTEXT:  fffff60c794de800 -- (.cxr 0xfffff60c794de800)
    rax=0000000000000074 rbx=ffffba05a0e6f800 rcx=0000000000000000
    rdx=0000000000000000 rsi=fffff60c794df348 rdi=00000000c0000002
    rip=fffff8071346c8ec rsp=fffff60c794df200 rbp=ffffba05a0e6f800
     r8=ffffba05af054a70  r9=fffff60c794df280 r10=fffff8070a50e170
    r11=fffff60c794df310 r12=0000000000000000 r13=0000000000000001
    r14=ffffba05af054a70 r15=0000000000000074
    iopl=0         nv up ei ng nz na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050286
    fffff807`1346c8ec 488b81a0010000  mov     rax,qword ptr [rcx+1A0h] ds:002b:00000000`000001a0=????????????????
    Resetting default scope
    BLACKBOXBSD: 1 (!blackboxbsd)
    BLACKBOXNTFS: 1 (!blackboxntfs)
    BLACKBOXPNP: 1 (!blackboxpnp)
    PROCESS_NAME:  svchost.exe
    READ_ADDRESS: fffff8070aefa390: Unable to get MiVisibleState
    Unable to get NonPagedPoolStart
    Unable to get NonPagedPoolEnd
    Unable to get PagedPoolStart
    Unable to get PagedPoolEnd
    fffff8070ae0f2f0: Unable to get Flags value from nt!KdVersionBlock
    fffff8070ae0f2f0: Unable to get Flags value from nt!KdVersionBlock
    unable to get nt!MmSpecialPagesInUse
    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
    EXCEPTION_CODE_STR:  c0000005
    EXCEPTION_PARAMETER1:  0000000000000000
    EXCEPTION_PARAMETER2:  00000000000001a0
    EXCEPTION_STR:  0xc0000005
    fffff60c`794df200 fffff807`13453443     : ffffba05`a0e6f800 ffffba05`a0e6f800 fffff60c`794df348 fffff807`0a446d45 : mrxsmb20!Smb2QueryProtocolInformation+0x1c
    fffff60c`794df250 fffff807`133c73e8     : 00000000`00000074 00000000`c0000002 00000000`00000000 fffff807`12e5b3c0 : mrxsmb20!MRxSmb2DevFcbQueryFileInfo+0x83
    fffff60c`794df280 fffff807`12e4587d     : ffffba05`a0e6f800 ffffd58b`4b7af190 ffffba05`a910cbe8 00000000`00000000 : mrxsmb!SmbShellDevFcbQueryFileInfo+0x78
    fffff60c`794df2b0 fffff807`12e404ed     : 00000000`00000037 ffffba05`a910cad0 ffffba05`9f2b6010 ffffba05`a910cad0 : rdbss!RxpDevFcbQueryProtocolInfo+0x61
    fffff60c`794df2e0 fffff807`12e33356     : ffffba05`a0e6f800 ffffba05`00000000 ffffd58b`65ec94e0 fffff807`12e5b3c0 : rdbss!RxCommonDevFCBQueryInformation+0x502d
    fffff60c`794df340 fffff807`12e71526     : ffffba05`aa2c0198 fffff807`064569d2 00000000`00000000 00000000`00000000 : rdbss!RxFsdCommonDispatch+0x626
    fffff60c`794df4d0 fffff807`133ed7b0     : 00000000`00000000 ffff3b02`c3316414 ffffba05`9a360200 fffff60c`794df609 : rdbss!RxFsdDispatch+0x86
    fffff60c`794df520 fffff807`0a446d45     : ffffba05`a97f46f0 ffffba05`a910cad0 ffffd58b`4b2fec10 00000000`00000000 : mrxsmb!MRxSmbFsdDispatch+0x100
    fffff60c`794df560 fffff807`0dc6f188     : fffff807`0dc68000 00000000`00000000 ffffba05`9f2d8ad0 ffffba05`ab10aba8 : nt!IofCallDriver+0x55
    fffff60c`794df5a0 fffff807`0dc6ecd9     : ffffd58b`4b2fec10 00000000`00000000 fffff807`0dc68000 00000000`00000000 : mup!MupiCallUncProvider+0xb8
    fffff60c`794df610 fffff807`0dc6ec0e     : ffffba05`a910cad0 ffffba05`ab10aba0 ffffba05`b0384500 00000000`00000000 : mup!MupStateMachine+0x59
    fffff60c`794df640 fffff807`0a446d45     : 00000000`00000000 00000000`00000000 ffffba05`a97f46f0 fffff60c`794d9000 : mup!MupFsdIrpPassThrough+0x17e
    fffff60c`794df6b0 fffff807`06456ccf     : ffffba05`00000000 fffff807`0a40198e ffffba05`a7031820 00000000`63457852 : nt!IofCallDriver+0x55
    fffff60c`794df6f0 fffff807`064548d3     : fffff60c`794df780 ffffba05`a910cad0 00000000`0000000a 00000000`00000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28f
    fffff60c`794df760 fffff807`0a446d45     : 00000000`00000037 00000000`00000208 00000000`00000001 fffff807`00000000 : FLTMGR!FltpDispatch+0xa3
    fffff60c`794df7c0 fffff807`0a4d13f0     : 00000052`9a77ac70 00000000`00000001 ffffba05`9f2d8ce0 00000000`00000001 : nt!IofCallDriver+0x55
    fffff60c`794df800 fffff807`0a81141f     : fffff60c`794dfa80 00000000`00000037 00000000`00000001 ffffba05`b0384500 : nt!IopCallDriverReference+0xd0
    fffff60c`794df870 fffff807`0a5ef875     : ffffba05`ad06f080 00000052`9a77ac70 000001ba`9ba55d08 fffff60c`00000074 : nt!NtQueryInformationFile+0x56f
    fffff60c`794df990 00007ffc`9860bfe4     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
    00000052`9a77ac38 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`9860bfe4
    SYMBOL_NAME:  mrxsmb20!Smb2QueryProtocolInformation+1c
    MODULE_NAME: mrxsmb20
    IMAGE_NAME:  mrxsmb20.sys
    IMAGE_VERSION:  10.0.19041.1030
    STACK_COMMAND:  .cxr 0xfffff60c794de800 ; kb
    FAILURE_BUCKET_ID:  0x27_mrxsmb20!Smb2QueryProtocolInformation
    OS_VERSION:  10.0.19041.1
    BUILDLAB_STR:  vb_release
    OSNAME:  Windows 10
    FAILURE_ID_HASH:  {8789e615-f3ce-60e9-c14f-f0d445772561}
    Followup:     MachineOwner

    Monday, August 17, 2020 3:10 AM