Windows crashes at `ReFS!RefsCopyReadInternal`

[shift-ohkawa]

Windows Build Number

Microsoft Windows NT 10.0.26100.0

Processor Architecture

AMD64 (Intel Core Ultra 9 285K)

Memory

256GB

Storage Type, free / capacity

SSD 2,794 GB (a part of the same physical drive shared with C:), ~80% used

Relevant apps installed

Visual Studio Professional 2022, etc.

Traces collected via Feedback Hub

(none)

Isssue description

Windows occasionally crashes at ReFS!RefsCopyReadInternal.

Steps to reproduce

Create ReFS volume and do I/O at high rate (e.g. move many data while building apps).

Expected Behavior

Windows operates healthy.

Actual Behavior

Windows occasionally crashes. For now, at a few times a month.

Minidump analysis reads:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the BugCheck
Arg2: fffff807d0ede5c7, Address of the instruction which caused the BugCheck
Arg3: ffffa300ab1f67b0, Address of the context record for the exception that caused the BugCheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1796

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 2346

    Key  : Analysis.Init.CPU.mSec
    Value: 1390

    Key  : Analysis.Init.Elapsed.mSec
    Value: 11542

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 93


FILE_IN_CAB:  120925-19484-01.dmp

TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b


DUMP_FILE_ATTRIBUTES: 0x21808
  Kernel Generated Triage Dump

BUGCHECK_CODE:  3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff807d0ede5c7

BUGCHECK_P3: ffffa300ab1f67b0

BUGCHECK_P4: 0

CONTEXT:  ffffa300ab1f67b0 -- (.cxr 0xffffa300ab1f67b0)
rax=0000000000204001 rbx=0000000000000005 rcx=0000000000000000
rdx=0000000000000000 rsi=ffffbc06cda515c0 rdi=0000000000004300
rip=fffff807d0ede5c7 rsp=ffffa300ab1f71e0 rbp=ffffbc06cda515c0
 r8=0000000000000008  r9=0000000000000000 r10=ffffcc0a58905000
r11=ffffa300ab1f7100 r12=0000000000001000 r13=ffffa300ab1f76e0
r14=0000000000000001 r15=ffffbc05b1629cf0
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00050202
nt!CcCopyReadEx+0x1f7:
fffff807`d0ede5c7 2588010000      and     eax,188h
Resetting default scope

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  dotnet.exe

MISALIGNED_IP:
nt!CcCopyReadEx+1f7
fffff807`d0ede5c7 2588010000      and     eax,188h

STACK_TEXT:
ffffa300`ab1f71e0 fffff807`d1445903     : 00000000`00020000 00000000`00000000 ffffa300`00000001 fffff807`80638701 : nt!CcCopyReadEx+0x1f7
ffffa300`ab1f72a0 fffff807`808d71be     : ffffdc0e`1c5351d0 ffffbc06`cda515c0 ffffdc0e`1c5351d0 ffffa300`ab1f7450 : nt!CcCopyRead+0x23
ffffa300`ab1f72f0 fffff807`808d6f73     : 00000000`00000000 7fffffff`fffffffc 00000000`00000000 ffffa300`ab1f7890 : ReFS!RefsCopyReadInternal+0x22e
ffffa300`ab1f76a0 fffff807`625cfeea     : 00000000`00000000 ffffa300`ab1f7a20 00000000`00000000 ffffbc06`9e9be480 : ReFS!RefsCopyReadA+0x63
ffffa300`ab1f7710 fffff807`6261e55d     : ffffa300`ab1f78b0 ffffa300`ab1f77e0 ffffbc05`890a7050 ffffbc06`cda515c0 : FLTMGR!FltpPerformFastIoCall+0x7da
ffffa300`ab1f7770 fffff807`d12b74c4     : 0000026f`6d213b68 00000000`00000000 00000000`00000000 00000000`00000000 : FLTMGR!FltpFastIoRead+0x20d
ffffa300`ab1f7820 fffff807`d1240516     : ffffbc06`cda515c0 00000000`00000000 00000000`00000000 000000ac`debbe858 : nt!IopReadFile+0x514
ffffa300`ab1f7920 fffff807`d10b5655     : ffffbc06`a96c50c0 ffffa300`ab1f7aa0 000000ac`debbe698 00000000`00000000 : nt!NtReadFile+0xe6
ffffa300`ab1f79b0 00007ff8`0f081c94     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
000000ac`debbe678 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`0f081c94


SYMBOL_NAME:  ReFS!RefsCopyReadInternal+22e

IMAGE_NAME:  hardware

IMAGE_VERSION:  10.0.26100.7309

STACK_COMMAND:  .cxr 0xffffa300ab1f67b0 ; kb

MODULE_NAME: hardware

FAILURE_BUCKET_ID:  IP_MISALIGNED

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {201b0e5d-db2a-63d2-77be-8ce8ff234750}

Followup:     MachineOwner
---------