Repository: intel/haxm

Issue #242: BSOD on Host Win10x64 Drv 7.5.2
Created: 2019-10-31T12:30:27Z
Random and rear reproduce. Please provide 7.5.2 .pdb for better callstack

HAXM version: Release driver DriverVer=07/16/2019,7.5.2.0 x64
Host OS version: Win10 x64
Host OS architecture: x64
Guest OS version: Win7 x86




                                                                        *



                   Bugcheck Analysis                                    *



                                                                        *




SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80372d72f2f, Address of the instruction which caused the bugcheck
Arg3: ffffdc84bbe26c60, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING:  18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER:  System manufacturer
SYSTEM_PRODUCT_NAME:  System Product Name
SYSTEM_SKU:  ASUS_MB_CNL
SYSTEM_VERSION:  System Version
BIOS_VENDOR:  American Megatrends Inc.
BIOS_VERSION:  0504
BIOS_DATE:  03/06/2018
BASEBOARD_MANUFACTURER:  ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT:  PRIME B360-PLUS
BASEBOARD_VERSION:  Rev 1.xx
DUMP_TYPE:  1
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff80372d72f2f
BUGCHECK_P3: ffffdc84bbe26c60
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
FAULTING_IP:
IntelHaxm+12f2f
fffff80372d72f2f 48837f1800      cmp     qword ptr [rdi+18h],0 CONTEXT:  ffffdc84bbe26c60 -- (.cxr 0xffffdc84bbe26c60) rax=0000000000000001 rbx=ffffa20a14b54d20 rcx=ffffa20a14b54d20 rdx=0000000000000017 rsi=ffffa20a14b4c7e0 rdi=0000000000000000 rip=fffff80372d72f2f rsp=ffffdc84bbe27650 rbp=0000000000000038 r8=fffcffffffffffff  r9=ffffa20a14b4c000 r10=ffffa20a14b4c7d0 r11=0000000000000018 r12=0000000000000000 r13=0000000000000000 r14=ffffa20a1fd49a10 r15=0000000000000001 iopl=0         nv up ei ng nz na po nc cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050286 IntelHaxm+0x12f2f: fffff80372d72f2f 48837f1800      cmp     qword ptr [rdi+18h],0 ds:002b:00000000`00000018=????????????????
Resetting default scope
BUGCHECK_STR:  0x3B_c0000005
CPU_COUNT: 6
CPU_MHZ: af8
CPU_VENDOR:  GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: a
CPU_MICROCODE: 6,9e,a,0 (F,M,S,R)  SIG: 96'00000000 (cache) 96'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  qemu-system-x86_64.exe
CURRENT_IRQL:  0
ANALYSIS_SESSION_HOST:  xxxx
ANALYSIS_SESSION_TIME:  10-31-2019 14:02:05.0664
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
LAST_CONTROL_TRANSFER:  from fffff80372d69e58 to fffff80372d72f2f
STACK_TEXT:
ffffdc84bbe27650 fffff80372d69e58 : ffffa20a14b54d20 0000000000000038 ffffa20a14b4c7e0 ffffa20a14b54df0 : IntelHaxm+0x12f2f
ffffdc84bbe27680 fffff80372d62473 : 0000000000000004 0000000000000002 ffffa20a154ec560 ffffa20a1c4297c0 : IntelHaxm+0x9e58
ffffdc84bbe276b0 fffff80372d6253b : ffffa20a154ec560 0000000000000001 ffffa20a1fd49a10 0000000000000000 : IntelHaxm+0x2473
ffffdc84bbe276f0 fffff80375e31f39 : 00000000000000c8 0000000000000000 0000000000000001 ffffa20a154ec678 : IntelHaxm+0x253b
ffffdc84bbe27720 fffff803763e93f5 : ffffdc84bbe27a80 ffffa20a154ec560 0000000000000001 ffffa20a1fd49a10 : nt!IofCallDriver+0x59
ffffdc84bbe27760 fffff803763e9200 : 0000000000000000 ffffdc84bbe27a80 ffffa20a154ec560 ffffdc84bbe27a80 : nt!IopSynchronousServiceTail+0x1a5
ffffdc84bbe27800 fffff803763e85d6 : 0000000000595d5e 0000000000000000 0000000000000000 0000000000000000 : nt!IopXxxControlFile+0xc10
ffffdc84bbe27920 fffff80375fd2b15 : 0000000000000000 0000000000000000 0000000000000000 0000000000000018 : nt!NtDeviceIoControlFile+0x56
ffffdc84bbe27990 00007ffffa2fc1a4 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x25
000000000347f838 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x00007fff`fa2fc1a4
THREAD_SHA1_HASH_MOD_FUNC:  67ef8ea7690d1b6bac8892ac0d399d817d4db057
THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  ba701e73361cc7f13b134a3715c8f1f2a11f11b9
THREAD_SHA1_HASH_MOD:  36376375ef9a945bdb01041c968716f429b4e88f
FOLLOWUP_IP:
IntelHaxm+12f2f
fffff803`72d72f2f 48837f1800      cmp     qword ptr [rdi+18h],0
FAULT_INSTR_CODE:  187f8348
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  IntelHaxm+12f2f
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: IntelHaxm
IMAGE_NAME:  IntelHaxm.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  5d2da46f
STACK_COMMAND:  .cxr 0xffffdc84bbe26c60 ; kb
BUCKET_ID_FUNC_OFFSET:  12f2f
FAILURE_BUCKET_ID:  0x3B_c0000005_IntelHaxm!unknown_function
BUCKET_ID:  0x3B_c0000005_IntelHaxm!unknown_function
PRIMARY_PROBLEM_CLASS:  0x3B_c0000005_IntelHaxm!unknown_function
TARGET_TIME:  2019-10-31T11:52:04.000Z
OSBUILD:  18362
OSSERVICEPACK:  0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK:  272
PRODUCT_TYPE:  1
OSPLATFORM_TYPE:  x64
OSNAME:  Windows 10
OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID:  0
OSBUILD_TIMESTAMP:  unknown_date
BUILDDATESTAMP_STR:  190318-1202
BUILDLAB_STR:  19h1_release
BUILDOSVER_STR:  10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME:  e487
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  km:0x3b_c0000005_intelhaxm!unknown_function
FAILURE_ID_HASH:  {66ba21f1-bc0b-a1bb-d0ce-0cc4c69ca92b}
Followup:     MachineOwner

Duplicate issue #252: BSOD on Host Win10x64 Drv 7.5.4
Created: 2019-12-17T12:33:18Z
Random and rear reproduce. Locally built 7.5.4 .pdb used. Again. Since there no shared release pdb
HAXM version: Release driver DriverVer=7.5.4.0 x64
Host OS version: Win10 x64
Host OS architecture: x64
Guest OS version: Win7 x86

BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff8057d903597
BUGCHECK_P3: ffffa3051f105c60
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0x12dcb470 - 
FAULTING_IP:
IntelHaxm!decode_op_modrm_rm+537 [c:\git\haxm_7.5.4\core\emulate.c @ 822]
fffff805`7d903597 48837f1800      cmp     qword ptr [rdi+18h],0
CONTEXT:  ffffa3051f105c60 -- (.cxr 0xffffa3051f105c60)
rax=0000000000000001 rbx=ffffb88dc6361da0 rcx=ffffb88dc6361da0
rdx=000000000000001d rsi=ffffb88dda2f8920 rdi=0000000000000000
rip=fffff8057d903597 rsp=ffffa3051f106650 rbp=0000000000000038
r8=fcffffffffffffff  r9=ffffb88dda2f8000 r10=ffffb88dda2f8910
r11=000000000000001c r12=0000000000000000 r13=0000000000000000
r14=ffffb88dddf09260 r15=0000000000000001
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050286
IntelHaxm!decode_op_modrm_rm+0x537:
fffff8057d903597 48837f1800      cmp     qword ptr [rdi+18h],0 ds:002b:0000000000000018=????????????????
Resetting default scope
BUGCHECK_STR:  12DCB470
CPU_COUNT: 6
CPU_MHZ: af8
CPU_VENDOR:  GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: a
CPU_MICROCODE: 0,0,0,0 (F,M,S,R)  SIG: 96'00000000 (cache) 0'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CURRENT_IRQL:  0
ANALYSIS_SESSION_HOST:  WS00UT001
ANALYSIS_SESSION_TIME:  12-17-2019 14:26:16.0392
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
LAST_CONTROL_TRANSFER:  from fffff8057d8fa0fa to fffff8057d903597
STACK_TEXT:
ffffa3051f106650 fffff8057d8fa0fa : ffffb88dc6361da0 0000000000000038 ffffb88dda2f8920 ffffb88dc6361e70 : IntelHaxm!decode_op_modrm_rm+0x537 [c:\git\haxm_7.5.4\core\emulate.c @ 822]
ffffa3051f106680 fffff8057d8f24b3 : 0000000000000004 0000000000000002 ffffb88de1bc6110 ffffb88dc6cc3d40 : IntelHaxm!hax_list_add+0xa [c:\git\haxm_7.5.4\include\hax_list.h @ 53]
ffffa3051f1066b0 fffff8057d8f257b : ffffb88de1bc6110 0000000000000001 ffffb88dddf09260 0000000000000000 : IntelHaxm!hax_win_construct_ssdl+0x73 [c:\git\haxm_7.5.4\platforms\windows\components.c @ 143]
ffffa3051f1066f0 fffff80561831f79 : 00000000000000c8 0000000000000000 0000000000000001 ffffb88de1bc6228 : IntelHaxm!DriverEntry+0xb [c:\git\haxm_7.5.4\platforms\windows\hax_entry.c @ 93]
ffffa3051f106720 fffff80561de95e5 : ffffa3051f106a80 ffffb88de1bc6110 0000000000000001 ffffb88dddf09260 : nt!IofCallDriver+0x59
ffffa3051f106760 fffff80561de93f0 : 0000000000000000 ffffa3051f106a80 ffffb88de1bc6110 ffffa3051f106a80 : nt!NtDeviceIoControlFile+0xe75
ffffa3051f106800 fffff80561de87c6 : 0000000000595c9e 0000000000000000 0000000000000000 0000000000000000 : nt!NtDeviceIoControlFile+0xc80
ffffa3051f106920 fffff805619d2d15 : 0000000000000000 0000000000000000 0000000000000000 0000000000000018 : nt!NtDeviceIoControlFile+0x56
ffffa3051f106990 00007ff83961c1a4 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!setjmpex+0x7b75
000000000333f838 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x00007ff8`3961c1a4
THREAD_SHA1_HASH_MOD_FUNC:  1152f4c91fc9f4d2848cccfb0d1b8d08c6a4e0cd
THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  760051c816885b502cf8cd5aaf0f89c8c19dfed3
THREAD_SHA1_HASH_MOD:  36376375ef9a945bdb01041c968716f429b4e88f
FOLLOWUP_IP:
IntelHaxm!decode_op_modrm_rm+537 [c:\git\haxm_7.5.4\core\emulate.c @ 822]
fffff805`7d903597 48837f1800      cmp     qword ptr [rdi+18h],0
FAULT_INSTR_CODE:  187f8348
FAULTING_SOURCE_LINE:  c:\git\haxm_7.5.4\core\emulate.c
FAULTING_SOURCE_FILE:  c:\git\haxm_7.5.4\core\emulate.c
FAULTING_SOURCE_LINE_NUMBER:  822
TARGET_TIME:  2019-12-17T12:14:48.000Z
OSBUILD:  18362
OSSERVICEPACK:  0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK:  272
PRODUCT_TYPE:  1
OSPLATFORM_TYPE:  x64
OSNAME:  Windows 10
OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

Closing comment (2019-12-30T01:35:57Z): This seems like same as #242 . After discussing with @wcwang , I can simulate the BSOD symptom and understood the root cause.
We may still need the dump file to check why hax_create_vm() fails in the middle. For the BSOD issue itself, I'll cook a patch to fix it soon. Thanks very much for reporting this issue to us.