Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

BSOD on W10 using rclone for mounting nextcloud #532

Open
ljoets opened this issue Nov 29, 2023 · 11 comments
Open

BSOD on W10 using rclone for mounting nextcloud #532

ljoets opened this issue Nov 29, 2023 · 11 comments

Comments

@ljoets
Copy link

ljoets commented Nov 29, 2023 •
edited

Bug Report

I use rclone and winfsp to mount a remote nextcloud folder on a W10 machine.
Mounting goes smoothly, files are accessible and usable.
But after a while of use, browsing the tree with windows explorer, the machine freezes, displays a BSOD, and reboots.
I've noticed this problem on several machines on my network, with different users, and differents nexcloud servers.
The winfsp and rclone versions are up to date.

Here is the WhoCrashed report that incriminates winfsp :
image

How to Reproduce

Set up a nextcloud folder with rclone and winfsp, simply browse the tree, after a while : BSOD

Expected Behaviors

No BSOD

Environment

  • Windows 10 21H2 Build 19044.3086
  • WinFsp 2023 2.0.23075
  • rclone 1.65.0
@billziss-gh
Copy link
Collaborator

  • Do you happen to have those crash dumps? I am particularly interested in the MEMORY.DMP file.
  • Please run the diag.bat batch file (found in C:\Program Files (x86)\WinFsp\bin) as Administrator on the machine that exhibits the problem and post the output.

@ljoets
Copy link
Author

ljoets commented Nov 30, 2023

  • Unfortunately, I can't find MEMORY.DMP file on the machines concerned.
  • Here is the result of diag.bet batch file :
c:\Program Files (x86)\WinFsp\bin>diag.bat
WINFSP FSD

SERVICE_NAME: WinFsp+20231009T210519Z
        TYPE               : 2  FILE_SYSTEM_DRIVER
        STATE              : 1  STOPPED
        WIN32_EXIT_CODE    : 1077  (0x435)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0
[SC] QueryServiceConfig réussite(s)

SERVICE_NAME: WinFsp+20231009T210519Z
        TYPE               : 2  FILE_SYSTEM_DRIVER
        START_TYPE         : 3   DEMAND_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : \??\c:\Program Files (x86)\WinFsp\SxS\sxs.20231009T210519Z\bin\winfsp-x64.sys
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : WinFsp+20231009T210519Z
        DEPENDENCIES       :
        SERVICE_START_NAME :

D:(D;;WP;;;WD)(A;;LCRP;;;WD)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)


WINFSP DLL

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
    ProviderOrder    REG_SZ    WinFsp.Np,RDPNP,LanmanWorkstation,webclient


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinFsp.Np\NetworkProvider
    Name    REG_SZ    Windows File System Proxy
    ProviderPath    REG_SZ    c:\Program Files (x86)\WinFsp\SxS\sxs.20231009T210519Z\bin\winfsp-x64.dll
    DeviceName    REG_SZ    \Device\WinFsp.Mup


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinFsp
    EventMessageFile    REG_SZ    c:\Program Files (x86)\WinFsp\SxS\sxs.20231009T210519Z\bin\winfsp-x64.dll
    TypesSupported    REG_DWORD    0x7


WINFSP LAUNCHER

SERVICE_NAME: WinFsp.Launcher
        TYPE               : 10  WIN32_OWN_PROCESS
        STATE              : 4  RUNNING
                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0
[SC] QueryServiceConfig réussite(s)

SERVICE_NAME: WinFsp.Launcher
        TYPE               : 10  WIN32_OWN_PROCESS
        START_TYPE         : 2   AUTO_START
        ERROR_CONTROL      : 0   IGNORE
        BINARY_PATH_NAME   : "c:\Program Files (x86)\WinFsp\SxS\sxs.20231009T210519Z\bin\launcher-x64.exe"
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : WinFsp.Launcher
        DEPENDENCIES       :
        SERVICE_START_NAME : LocalSystem

D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)


WINFSP REGISTRY

HKEY_LOCAL_MACHINE\SOFTWARE\WinFsp
    SxsDir    REG_SZ    c:\Program Files (x86)\WinFsp\SxS\sxs.20231009T210519Z\
    InstallDir    REG_SZ    c:\Program Files (x86)\WinFsp\


FILE SYSTEM FILTERS (REQUIRES ADMINISTRATOR)

Nom de filtre                   Nom. d’instn.  Altitude      Cadre
------------------------------  -------------  ------------  -----
bindflt                                 0       409800         0
tmevtmgr                                3       328510         0
TmPreFilter                             3       328500         0
storqosflt                              0       244000         0
wcifs                                   0       189900         0
CldFlt                                  0       180451         0
FileCrypt                               0       141100         0
npsvctrig                               1        46000         0
Wof                                     2        40700         0
FileInfo                                3        40500         0


OS INFORMATION

Nom de l’hôte:                              hppd600g2mt-14
Nom du système d’exploitation:              Microsoft Windows 10 Professionnel
Version du système:                         10.0.19044 N/A build 19044
Fabricant du système d’exploitation:        Microsoft Corporation
Configuration du système d’exploitation:    Station de travail membre
Type de build du système d’exploitation:    Multiprocessor Free
Propriétaire enregistré:
Organisation enregistrée:                   sambaedu3.erea-0921935d.ac-versailles.fr
Identificateur de produit:                  00330-80000-00000-AA873
Date d’installation originale:              01/02/2022, 18:20:39
Heure de démarrage du système:              30/11/2023, 19:05:21
Fabricant du système:                       HP
Modèle du système:                          HP ProDesk 600 G2 MT
Type du système:                            x64-based PC
Processeur(s):                              1 processeur(s) installé(s).
                                            [01] : Intel64 Family 6 Model 94 Stepping 3 GenuineIntel ~3408 MHz
Version du BIOS:                            HP N02 Ver. 02.17, 01/11/2016
Répertoire Windows:                         C:\Windows
Répertoire système:                         C:\Windows\system32
Périphérique d’amorçage:                    \Device\HarddiskVolume1
Option régionale du système:                fr;Français (France)
Paramètres régionaux d’entrée:              fr;Français (France)
Fuseau horaire:                             (UTC+01:00) Bruxelles, Copenhague, Madrid, Paris
Mémoire physique totale:                    8 113 Mo
Mémoire physique disponible:                4 956 Mo
Mémoire virtuelle : taille maximale:        9 393 Mo
Mémoire virtuelle : disponible:             6 218 Mo
Mémoire virtuelle : en cours d’utilisation: 3 175 Mo
Emplacements des fichiers d’échange:        C:\pagefile.sys
Domaine:                                    sambaedu3.erea-0921935d.ac-versailles.fr
Serveur d’ouverture de session:             \\SE4AD
Correctif(s):                               5 Corrections installées.
                                            [01]: KB5027122
                                            [02]: KB5003791
                                            [03]: KB5027215
                                            [04]: KB5026879
                                            [05]: KB5005699
Carte(s) réseau:                            1 carte(s) réseau installée(s).
                                            [01]: Intel(R) Ethernet Connection (2) I219-LM
                                                  Nom de la connexion : Ethernet
                                                  DHCP activé :         Oui
                                                  Serveur DHCP :        172.16.100.62
                                                  Adresse(s) IP
                                                  [01]: 172.16.10.13
                                                  [02]: fe80::f90a:2e18:c8dd:2c39
Configuration requise pour Hyper-V:         Extensions de mode du moniteur d’ordinateur virtuel : Oui
                                            Virtualisation activée dans le microprogramme : Non
                                            Traduction d’adresse de second niveau : Oui
                                            Prévention de l’exécution des données disponible : Oui

@ljoets
Copy link
Author

ljoets commented Nov 30, 2023

I must add to this information: we use Trend Apex One antivirus on our domain, and the problems seem to have started since we updated it earlier this week. By disabling real-time scanning on the domain agents today, it seems that no BSODs have appeared.

@ljoets
Copy link
Author

ljoets commented Dec 1, 2023

Hi,
Here are the MEMORY.DMP and Minidumps:
https://filesender.renater.fr/?s=download&token=ff49d553-7f16-4731-97c8-17217a1163d5
Available until December 16.

@billziss-gh
Copy link
Collaborator

I must add to this information: we use Trend Apex One antivirus on our domain, and the problems seem to have started since we updated it earlier this week. By disabling real-time scanning on the domain agents today, it seems that no BSODs have appeared.

I noticed the non-standard filters tmevtmgr and TmPreFilter and was going to comment about them. If the problem disappears when you disable the filters, this problem is likely related to them. (For example, it may be an incompatibility between WinFsp and the filters.)

Here are the MEMORY.DMP and Minidumps:

I am downloading the MEMORY.DMP file to have a look, but if the problem is related to third party filters there may not be a lot we can do (other than to contact them and try to resolve the problem via them).

@efarcy
Copy link

efarcy commented Jan 23, 2024

I have the same problem.
Here is my dmp file : https://filesender.renater.fr/?s=download&token=30567d1d-2993-4f9a-9014-2283ced3db82

@billziss-gh
Copy link
Collaborator

@efarcy do you also have the tmevtmgr and TmPreFilter filters installed?

You can find out by using the command fltmc filters (required Administrator access).

@efarcy
Copy link

efarcy commented Jan 24, 2024 via email

@billziss-gh
Copy link
Collaborator

This looks like an incompatibility between those filters and WinFsp. Is it possible to use a different antivirus (like Windows Defender)?

@efarcy
Copy link

efarcy commented Jan 24, 2024

No, we can't. Our antivirus is for a lot of schools in several regions.

@efarcy
Copy link

efarcy commented Jan 25, 2024

Is is possible to disable this filters ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@ljoets @billziss-gh @efarcy