uwfrtl.sys + BUGCODE_ID_DRIVER (d2)

Question

uwfrtl.sys + BUGCODE_ID_DRIVER (d2)

Abhishek Chouksey 6

Can some please explain the reason of BSOD occurring in uwfrtl.sys module with BUGCODE_ID_DRIVER (d2) ?

Crash dump is as follows:

Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.

Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 17763 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 17763.1.amd64fre.rs5_release.180914-1434
Machine Name:
Kernel base = 0xfffff80337c13000 PsLoadedModuleList = 0xfffff8033802a530
Debug session time: Wed Dec 1 11:13:34.124 2021 (UTC + 0:00)
System Uptime: 0 days 0:00:03.002
Loading Kernel Symbols
.................................................Page 20045ed9e too large to be in the dump file.
..............
....................................
Loading User Symbols

Loading unloaded module list
...
For analysis of this file, run !analyze -v
4: kd> !analyze -v

*
Bugcheck Analysis *
*

BUGCODE_ID_DRIVER (d2)
This is the NDIS Driver Bugcheck for Windows 2000 and Windows XP.
For Windows Server 2003 and later, see 0x7C, BUGCODE_NDIS_DRIVER.
DESCRIPTION
The meaning of the bug check parameters cannot be determined by examining the
parameters alone. You must also examine the text of a DbgPrint message.
For details, see either the debugger documentation or the DDK documentation.
Arguments:
Arg1: ffffba0dea8da648
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:

Page 20045ed9e too large to be in the dump file.

KEY_VALUES_STRING: 1

PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1

DUMP_CLASS: 1

DUMP_QUALIFIER: 401

BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434

DUMP_TYPE: 1

BUGCHECK_P1: ffffba0dea8da648

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 0

CPU_COUNT: c

CPU_MHZ: a20

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: a

CPU_MICROCODE: 6,9e,a,0 (F,M,S,R) SIG: DE'00000000 (cache) DE'00000000 (init)

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: 0xD2

PROCESS_NAME: System

CURRENT_IRQL: 0

ANALYSIS_SESSION_HOST: BLAPANW10

ANALYSIS_SESSION_TIME: 12-01-2021 11:25:16.0348

ANALYSIS_VERSION: 10.0.18362.1 x86fre

LAST_CONTROL_TRANSFER: from fffff8034c9e118f to fffff80337dca960

THREAD_SHA1_HASH_MOD_FUNC: 96b37ce5ffcdcc585e94d36e85f444892f83567b

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 0e361d26d954908b3ee141f442218b327da5bdd0

THREAD_SHA1_HASH_MOD: 3e8a4eea90e73ab7e7ad11263dc66bb043ce84bb

FOLLOWUP_IP:
uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+5f
fffff803`4c9e118f cc int 3

FAULT_INSTR_CODE: cccccccc

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+5f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: uwfrtl

IMAGE_NAME: uwfrtl.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 0

IMAGE_VERSION: 10.0.17763.1911

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 5f

FAILURE_BUCKET_ID: 0xD2_uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL

BUCKET_ID: 0xD2_uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL

PRIMARY_PROBLEM_CLASS: 0xD2_uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL

TARGET_TIME: 2021-12-01T11:13:34.000Z

OSBUILD: 17763

OSSERVICEPACK: 1971

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2027-02-03 07:39:34

BUILDDATESTAMP_STR: 180914-1434

BUILDLAB_STR: rs5_release

BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434

ANALYSIS_SESSION_ELAPSED_TIME: b686

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0xd2_uwfrtl!uwflogcompleteentry_uwflog_level_critical

FAILURE_ID_HASH: {cabd1cce-d776-eaa9-5287-c775531e4069}

Followup: MachineOwner

Reza-Ameri 45,816 Reputation points Volunteer Moderator

2021-12-01T16:00:19.983+00:00

Did you install any program or make any changes to your system before this problem started?
Have you tried updating your Windows?
Sean Liming 4,811 Reputation points Volunteer Moderator

2021-12-02T17:05:16.337+00:00

Does this BSOD appear on boot or in the middle of operation? If in the middle of an operation, what is the system doing at the time?
Is UWF enabled in the system?

6 answers

Your answer

Reza-Ameri 45,816 Reputation points Volunteer Moderator

2021-12-01T16:00:19.983+00:00

Did you install any program or make any changes to your system before this problem started?
Have you tried updating your Windows?
Sean Liming 4,811 Reputation points Volunteer Moderator

2021-12-02T17:05:16.337+00:00

Does this BSOD appear on boot or in the middle of operation? If in the middle of an operation, what is the system doing at the time?
Is UWF enabled in the system?

Answer 1

See if you can run the DM log collector and post a share link using one drive, drop box, or google drive:

https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html

If the computer is able to run the V2 log collector it can collect more logs for troubleshooting.

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post there is /\ with a number: click = a helpful post
.
.
.
.
.

Answer 2

Hi, we are facing the same or a very similar issue on our systems.

Windows 10 IoT Enterprise LTSC 2019 (x86)
UWF enabled
Running on an ETX-BT-J1900

Here's our dump analysis:

Loading Dump File [C:\Users\Itay\Downloads\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.

Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 17763 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 17763.1.x86fre.rs5_release.180914-1434
Machine Name:
Kernel base = 0x81c7a000 PsLoadedModuleList = 0x81f172b8
Debug session time: Thu Feb 24 12:00:41.154 2022 (UTC + 1:00)
System Uptime: 0 days 0:01:06.438
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00b4f00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.......
For analysis of this file, run !analyze -v
3: kd> !analyze -v

*
Bugcheck Analysis *
*

BUGCODE_ID_DRIVER (d2)
This is the NDIS Driver Bugcheck for Windows 2000 and Windows XP.
For Windows Server 2003 and later, see 0x7C, BUGCODE_NDIS_DRIVER.
DESCRIPTION
The meaning of the bug check parameters cannot be determined by examining the
parameters alone. You must also examine the text of a DbgPrint message.
For details, see either the debugger documentation or the DDK documentation.
Arguments:
Arg1: b3323bdc
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:

KEY_VALUES_STRING: 1

Key  : Analysis.CPU.Sec
Value: 4

Key  : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on IWIN10EXP

Key  : Analysis.DebugData
Value: CreateObject

Key  : Analysis.DebugModel
Value: CreateObject

Key  : Analysis.Elapsed.Sec
Value: 32

Key  : Analysis.Memory.CommitPeak.Mb
Value: 97

Key  : Analysis.System
Value: CreateObject

BUGCHECK_CODE: d2

BUGCHECK_P1: ffffffffb3323bdc

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 0

PROCESS_NAME: wermgr.exe

STACK_TEXT:
b3323bac 8b861163 000000d2 b3323bdc 00000000 nt!KeBugCheckEx
b3323bf8 8c3dacdb 8d50b000 00001ca9 69599cd8 uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+0x37
b3323ca4 8c3d8d04 69599cd8 91cc3d30 91cc3e2c uwfvol!UWFVOL_FILTER::processWriteRequest+0x187
b3323d00 8ac3c085 6e33c2c8 69599cd8 00001000 uwfvol!UWFVOL_FILTER::evtIoWrite+0x1a6
b3323d1c 8ac70f82 6e33c2c8 69599cd8 00001000 Wdf01000!FxIoQueueIoRead::Invoke+0x31 [minkernel\wdf\framework\shared\inc\private\common\fxioqueuecallbacks.hpp @ 159]
b3323d54 8ac37b87 69599cd8 96a66320 91cc3d30 Wdf01000!FxIoQueue::DispatchRequestToDriver+0x38df2 [minkernel\wdf\framework\shared\irphandlers\io\fxioqueue.cpp @ 3311]
b3323d90 8ac3882f b3323e00 00000000 89d4ee40 Wdf01000!FxIoQueue::DispatchEvents+0x2d7 [minkernel\wdf\framework\shared\irphandlers\io\fxioqueue.cpp @ 3125]
b3323db0 8ac34a97 96a66320 9eb80810 8d5d42a8 Wdf01000!FxIoQueue::QueueRequest+0x7f [minkernel\wdf\framework\shared\irphandlers\io\fxioqueue.cpp @ 2371]
b3323e08 81d7af48 015d42a8 00b809a0 b3323e50 Wdf01000!FxDevice::DispatchWithLock+0x2a7 [minkernel\wdf\framework\shared\core\fxdevice.cpp @ 1430]
b3323e20 8be63591 9eb809bc 9eb80810 9eb80810 nt!IofCallDriver+0x48
b3323e38 8be64204 00000002 b3323e50 9eb809e0 iorate!IoRateIssueAndRecordIo+0x55
b3323e80 8be64336 00000000 00000000 00000002 iorate!IoRateProcessIrpWrapper+0x3c
b3323ea8 81d7af48 91c5ac50 9eb80810 91cb8828 iorate!IoRateDispatchReadWrite+0x4c
b3323ec0 8c36101e b3323ee0 81d7af48 91cb8828 nt!IofCallDriver+0x48
b3323ec8 81d7af48 91cb8828 9eb80810 9eb80a04 volume!VolumePassThrough+0x1e
b3323ee0 8c3712a0 b3323fe0 91cc1040 a01ef004 nt!IofCallDriver+0x48
b3323f10 8c3711a9 b3323f34 81d7af48 91cc1040 volsnap!VolsnapWriteFilter+0xe0
b3323f18 81d7af48 91cc1040 9eb80810 bdeef4c0 volsnap!VolSnapWrite+0x19
b3323f34 8b89512e bdeef3a4 b3323f54 81dd6df7 nt!IofCallDriver+0x48
b3323f40 81dd6df7 bdeef4c0 81f43428 81dd6bd4 Ntfs!NtfsStorageDriverCallout+0x14
b3323f40 81d8d7ec bdeef4c0 81f43428 81dd6bd4 nt!KiSwitchKernelStackAndCallout+0xb3
bdeef3fc 81d8d658 00003000 00000005 8d5858c0 nt!KiExpandKernelStackAndCalloutOnStackSegment+0x11c
bdeef434 81d8d538 bdeed000 00000005 8d5858c0 nt!KiExpandKernelStackAndCalloutSwitchStack+0x78
bdeef47c 81d8d513 00003000 00000000 8d5858c0 nt!KeExpandKernelStackAndCalloutInternal+0x20
bdeef494 8b88eba1 8b89511a bdeef4c0 00003000 nt!KeExpandKernelStackAndCalloutEx+0x23
bdeef4f8 8b88de9a c0a6c110 9f06fc20 00000001 Ntfs!NtfsMultipleAsync+0xd1
bdeef6a8 8b881562 c0a6c110 00000000 00000000 Ntfs!NtfsNonCachedIo+0x4ca
bdeef774 8b8f51b8 c0a6c110 00000000 00000000 Ntfs!NtfsWriteBytes+0x196
bdeef810 8b8f4e3d c0a6c128 c0a6c184 91a0e000 Ntfs!NtfsCreateNonresidentWithValue+0x1f8
bdeef918 8b888cdd 92ddb108 00000000 bdeef93c Ntfs!NtfsConvertToNonresident+0x1d3
bdeef9a4 8b88b061 beb663d0 c0a6c110 00000266 Ntfs!NtfsAddAllocationForResidentWrite+0x1f5
bdeefb2c 8b889c38 bb0cf0bc a0101d18 91ccc018 Ntfs!NtfsCommonWrite+0x1291
bdeefba8 81d7af48 91ccc018 a0101d18 a1884d78 Ntfs!NtfsFsdWrite+0x1c8
bdeefbc0 8af74ec8 a0101d18 8d5d3e08 81d40090 nt!IofCallDriver+0x48
bdeefbfc 8af7306e 00000000 beb663d0 8d5d3e08 FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x168
bdeefc28 81d7af48 8d5d3e08 a0101d18 a0101d18 FLTMGR!FltpDispatch+0xae
bdeefc44 8203bff7 a0101f5c a0101d18 000000ea nt!IofCallDriver+0x48
bdeefc90 8202422a beb663d0 00000001 89d7eb01 nt!IopSynchronousServiceTail+0x137
bdeefd28 81de83ab 8af92d20 00000000 00000000 nt!NtWriteFile+0x47a
bdeefd28 77660c80 8af92d20 00000000 00000000 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
009fc894 00000000 00000000 00000000 00000000 0x77660c80

SYMBOL_NAME: uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+37

MODULE_NAME: uwfrtl

IMAGE_NAME: uwfrtl.sys

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 37

FAILURE_BUCKET_ID: 0xD2_uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL

OS_VERSION: 10.0.17763.1

BUILDLAB_STR: rs5_release

OSPLATFORM_TYPE: x86

OSNAME: Windows 10

FAILURE_ID_HASH: {cabd1cce-d776-eaa9-5287-c775531e4069}

Followup: MachineOwner

Answer 3

The issue has been observed again....
the below is the crash dump analysis....it seems it didn't get fixed by reverting back to old INTEL LAN drivers....came with SBC.

************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Deferred .sympath srvc:\Symbolshttps://msdl.microsoft.com/download/symbols
OK C:\Users\Administrator\Perforce\achoukseyw7_DTP3_Firmware_Development\Baltimore_Firmware
Symbol search path is: srv*;.sympath srvc:\Symbolshttps://msdl.microsoft.com/download/symbols;C:\\Users\\Administrator\\Perforce\\achoukseyw7_DTP3_Firmware_Development\\Baltimore_Firmware
Executable search path is:
Windows 10 Kernel Version 17763 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 17763.1.amd64fre.rs5_release.180914-1434
Machine Name:
Kernel base = 0xfffff80648401000 PsLoadedModuleList = 0xfffff80648818530
Debug session time: Mon Feb 21 10:53:05.707 2022 (UTC + 0:00)
System Uptime: 0 days 0:00:12.583
Loading Kernel Symbols
.................................................Page 20010519b too large to be in the dump file.
..............
.........Page 20010561b too large to be in the dump file.
.......................................................
....
Loading User Symbols
PEB address is NULL !
Loading unloaded module list
...
For analysis of this file, run !analyze -v
10: kd> !analyze -v

*
Bugcheck Analysis *
*

BUGCODE_ID_DRIVER (d2)
This is the NDIS Driver Bugcheck for Windows 2000 and Windows XP.
For Windows Server 2003 and later, see 0x7C, BUGCODE_NDIS_DRIVER.
DESCRIPTION
The meaning of the bug check parameters cannot be determined by examining the
parameters alone. You must also examine the text of a DbgPrint message.
For details, see either the debugger documentation or the DDK documentation.
Arguments:
Arg1: ffff9d8eea792648
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:

Page 20010519b too large to be in the dump file.

KEY_VALUES_STRING: 1

PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1

DUMP_CLASS: 1

DUMP_QUALIFIER: 401

BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434

SYSTEM_MANUFACTURER: Default string

SYSTEM_PRODUCT_NAME: Default string

SYSTEM_SKU: Default string

SYSTEM_VERSION: Default string

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: 5.13

BIOS_DATE: 07/01/2021

BASEBOARD_MANUFACTURER: Default string

BASEBOARD_PRODUCT: Default string

BASEBOARD_VERSION: Default string

DUMP_TYPE: 1

BUGCHECK_P1: ffff9d8eea792648

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 0

CPU_COUNT: c

CPU_MHZ: a20

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: a

CPU_MICROCODE: 6,9e,a,0 (F,M,S,R) SIG: DE'00000000 (cache) DE'00000000 (init)

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: 0xD2

PROCESS_NAME: Registry

CURRENT_IRQL: 0

ANALYSIS_SESSION_HOST: ACHOUKSEYW7

ANALYSIS_SESSION_TIME: 02-21-2022 11:30:27.0632

ANALYSIS_VERSION: 10.0.18362.1 amd64fre

LOCK_ADDRESS: fffff80648832cc0 -- (!locks fffff80648832cc0)

Resource @ nt!PiEngineLock (0xfffff80648832cc0) Exclusively owned
Contention Count = 1
NumberOfExclusiveWaiters = 1
Threads: ffffc581862d2040-01<*>

 Threads Waiting On Exclusive Access:
          ffffc581862cd040

1 total locks

PNP_TRIAGE_DATA:
Lock address : 0xfffff80648832cc0
Thread Count : 1
Thread address: 0xffffc581862d2040
Thread wait : 0x325

LAST_CONTROL_TRANSFER: from fffff8065ce5118f to fffff806485b8960

STACK_TEXT:
ffff9d8eea792608 fffff8065ce5118f : 00000000000000d2 ffff9d8eea792648 0000000000000000 0000000000000000 : nt!KeBugCheckEx
ffff9d8eea792610 fffff8065dd9e49c : 0000000000000000 0000000000000001 00003a7e797ad748 0000000000000028 : uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+0x5f
ffff9d8eea792690 fffff8065dd9b59c : 0000000000000000 ffff9d8eea792890 0000000000000000 00003a7e797ad748 : uwfvol!UWFVOL_FILTER::processWriteRequest+0x2c8
ffff9d8eea792810 fffff8065c6f8e0a : ffffc58186fe2988 0000000000000000 ffffc5818a438b70 00003a7e797ad748 : uwfvol!UWFVOL_FILTER::evtIoWrite+0x1bc
ffff9d8eea7928b0 fffff8065c6a82e5 : 0000000000000000 ffffc581868528b0 0000000000001000 ffffc5818a19acc0 : Wdf01000!FxIoQueueIoRead::Invoke+0x5a [minkernel\wdf\framework\shared\inc\private\common\fxioqueuecallbacks.hpp @ 159]
ffff9d8eea7928e0 fffff8065c689357 : ffffc5818a438a20 ffffc5818a4389b0 0000000000000000 ffffc58186fe2988 : Wdf01000!FxIoQueue::DispatchRequestToDriver+0x1eab5 [minkernel\wdf\framework\shared\irphandlers\io\fxioqueue.cpp @ 3311]
ffff9d8eea792980 fffff8065c6875a2 : ffffc5818a4389b0 ffffc58186fe2800 0000000000000000 ffff9d8eea792b5c : Wdf01000!FxIoQueue::DispatchEvents+0x617 [minkernel\wdf\framework\shared\irphandlers\io\fxioqueue.cpp @ 3125]
ffff9d8eea792a60 fffff8065c68704d : ffffc58186fe2800 ffffc5818a959000 ffffc581868528b0 ffff9d8eea792b01 : Wdf01000!FxPkgIo::DispatchStep1+0x542 [minkernel\wdf\framework\shared\irphandlers\io\fxpkgio.cpp @ 324]
ffff9d8eea792b20 fffff8065c681b73 : ffffc5818a959010 0000000000000000 0000000000000000 ffff9d8eea792ba8 : Wdf01000!FxPkgIo::Dispatch+0x5d [minkernel\wdf\framework\shared\irphandlers\io\fxpkgio.cpp @ 119]
ffff9d8eea792b80 fffff8064847bd09 : ffffc5818a1eda20 ffffc5818a959010 0000000000000000 ffffc5818a1eda20 : Wdf01000!FxDevice::DispatchWithLock+0x113 [minkernel\wdf\framework\shared\core\fxdevice.cpp @ 1430]
ffff9d8eea792be0 fffff8065de43c43 : 0000000000000000 ffffc5818a1eda20 0000000000000004 0000000000000000 : nt!IofCallDriver+0x59
ffff9d8eea792c20 fffff8065de44de8 : 0000000000000002 ffff9d8eea792d11 ffffc5818a959010 ffffc5818a1eda20 : iorate!IoRateIssueAndRecordIo+0x7f
ffff9d8eea792c60 fffff8065de44fc0 : 0000000000000000 ffffc5818a439180 0000000000000000 0000000000000000 : iorate!IoRateProcessIrpWrapper+0x180
ffff9d8eea792d70 fffff8064847bd09 : 0000000000000000 fffff8065de44fc0 0000000000000000 ffffc5818a439180 : iorate!IoRateDispatchReadWrite+0x80
ffff9d8eea792db0 fffff8065dd11033 : 0000000000000000 fffff8064847bd09 0000000000000000 0000000000000000 : nt!IofCallDriver+0x59
ffff9d8eea792df0 fffff8064847bd09 : 0000000000000000 0000000000000000 0000000000000000 fffff8065dd11033 : volume!VolumePassThrough+0x23
ffff9d8eea792e20 fffff8065dd214e9 : 0000000000000000 fffff8064847bd09 ffffc5818a439180 fffff8065dd3e1a4 : nt!IofCallDriver+0x59
ffff9d8eea792e60 fffff8065dd213b3 : ffff9d8eea7d9198 0000000000000000 0000000000000002 0000000000000000 : volsnap!VolsnapWriteFilter+0x119
ffff9d8eea792ee0 fffff8064847bd09 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : volsnap!VolSnapWrite+0x13
ffff9d8eea792f10 fffff8065d88038c : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!IofCallDriver+0x59
ffff9d8eea792f50 fffff806485bc13e : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : Ntfs!NtfsStorageDriverCallout+0x1c
ffff9d8eea792f80 fffff806485bc0fc : 0000000000006002 ffffc58186fe3e60 ffffc581862d2040 fffff80648433786 : nt!KxSwitchKernelStackCallout+0x2e
ffff9d8ee9df8b70 fffff80648433786 : ffffa00100000012 0000000000000012 0000000000000000 0000000000001000 : nt!KiSwitchKernelStackContinue
ffff9d8ee9df8b90 fffff806484334cc : fffff8065d880370 ffff9d8ee9df8d78 0000000000000000 0000010000000000 : nt!KiExpandKernelStackAndCalloutOnStackSegment+0x256
ffff9d8ee9df8c20 fffff80648433343 : ffff9d8ee9df8eb0 ffff9d8ee9df8f60 ffff9d8ee9df8ca0 ffff9d8ee9df8ca0 : nt!KiExpandKernelStackAndCalloutSwitchStack+0xdc
ffff9d8ee9df8c90 fffff806484332fd : fffff8065d880370 ffff9d8ee9df8d78 0000000000000001 ffffc581863da018 : nt!KeExpandKernelStackAndCalloutInternal+0x33
ffff9d8ee9df8d00 fffff8065d8661d9 : ffffc581863da018 ffffc5818a959010 ffff9d8ee9df8df0 ffffc5818a959010 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffff9d8ee9df8d40 fffff8065d864f9d : ffff9d8ee9df8df0 ffffc581863da018 ffffa001d82ca4d0 0000000000000000 : Ntfs!NtfsMultipleAsync+0xe9
ffff9d8ee9df8db0 fffff8065d87277c : ffffa001b7df9b70 0000000030005a43 0000000000000702 0000000000001000 : Ntfs!NtfsNonCachedIo+0x3dd
ffff9d8ee9df9040 fffff8065d871aad : ffffc581863da018 0000000000000001 ffff9d8ee9df9d98 0000000000000000 : Ntfs!NtfsCommonWrite+0xa3c
ffff9d8ee9df9270 fffff8064847bd09 : ffffc5818a24b8a0 ffffc5818a959010 ffffc5818a959010 ffffc5818a1cbcd0 : Ntfs!NtfsFsdWrite+0x1ed
ffff9d8ee9df9330 fffff8065c60621e : 0000000000000000 ffff9d8ee9df9400 ffffc5818a959010 ffff9d8ee9df9410 : nt!IofCallDriver+0x59
ffff9d8ee9df9370 fffff8065c604a36 : ffff9d8ee9df9400 ffff9d8ee9df9670 ffffb10048bde180 0000000000000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28e
ffff9d8ee9df93e0 fffff8064847bd09 : ffffc5818a959010 fffff8064847bd47 0000000000000000 0000000000000000 : FLTMGR!FltpDispatch+0xb6
ffff9d8ee9df9440 fffff8064845c489 : ffffc5818a1cbcd0 ffffc5818a959010 ffffc5818aa36200 ffff9d8ee9df9670 : nt!IofCallDriver+0x59
ffff9d8ee9df9480 fffff8064850c2e6 : 0000000000000000 ffff9d8ee9df9520 ffffc5818aa36200 ffffc5818aa36200 : nt!IoSynchronousPageWriteEx+0x139
ffff9d8ee9df94c0 fffff806484b5860 : 0000000000000011 ffffa001d842f000 0000000000000000 ffffeb0000000000 : nt!MiIssueSynchronousFlush+0x72
ffff9d8ee9df9540 fffff8064845023b : ffff9d8ee9df9880 ffff9d8ee9df9ad0 0000000000000000 0000000000000000 : nt!MiFlushSectionInternal+0x8d0
ffff9d8ee9df9810 fffff8064844f1be : 0000000000000000 ffffc581862d2040 0000000000001000 0000000000000000 : nt!MmFlushSection+0x143
ffff9d8ee9df98c0 fffff806484e3c73 : ffffc5818ab26ad8 0000000000000000 ffffa00100000000 0000000000000000 : nt!CcFlushCachePriv+0x44e
ffff9d8ee9df9a10 fffff8065d9388b9 : ffffa001d82ca4d0 0000000000000000 0000000000000001 ffffc5818a9c9d08 : nt!CcCoherencyFlushAndPurgeCache+0x73
ffff9d8ee9df9a60 fffff8065d9387fe : ffffa001d82ca4d0 ffffc5818a9c9d08 0000000000000702 ffffa001d82ca4d0 : Ntfs!NtfsCoherencyFlushAndPurgeCache+0x3d
ffff9d8ee9df9aa0 fffff8065d93e38f : ffffc5818a9c9d08 ffffa001d82ca4d0 ffffc5818a9c9d01 0000000000000000 : Ntfs!NtfsFlushAndPurgeScb+0x9e
ffff9d8ee9df9b00 fffff8065d93cba9 : ffffc5818a9c9d08 ffffc5818a9c3010 fffff8065d93cb01 ffff9d8ee9df9d30 : Ntfs!NtfsCommonFlushBuffers+0x77b
ffff9d8ee9df9c20 fffff80648433388 : ffff9d8ee9df9d30 ffffc5818a9c9d08 ffffc58185a02100 ffffc58185a02280 : Ntfs!NtfsCommonFlushBuffersCallout+0x19
ffff9d8ee9df9c50 fffff806484332fd : fffff8065d93cb90 ffff9d8ee9df9d30 0000000000000000 fffff8065c6056f6 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffff9d8ee9df9cc0 fffff8065d9860a0 : 0000000000000001 0000000000000000 ffff9d8ee9df9d20 0000000000000fff : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffff9d8ee9df9d00 fffff8065d985fdd : 0000000000000000 ffffc5818a9c3010 0000000000000000 ffffc5818a9c9d08 : Ntfs!NtfsCommonFlushBuffersOnNewStack+0x58
ffff9d8ee9df9d70 fffff8064847bd09 : ffffc5818a24b8a0 ffffc5818a9c3010 ffffc5818a9c9d08 ffff9d8ee9df9d98 : Ntfs!NtfsFsdFlushBuffers+0xdd
ffff9d8ee9df9de0 fffff8065c60621e : 0000000000000000 ffff9d8ee9df9eb0 ffffc5818a9c3010 ffff9d8ee9df9ec0 : nt!IofCallDriver+0x59
ffff9d8ee9df9e20 fffff8065c604a36 : ffff9d8ee9df9eb0 0000000000000000 ffffb10048bde180 ffffc5818a0b62c0 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28e
ffff9d8ee9df9e90 fffff8064847bd09 : ffffc5818a1cbcd0 fffff80648409ec3 000000000000000e ffff9d8ee9df9f00 : FLTMGR!FltpDispatch+0xb6
ffff9d8ee9df9ef0 fffff806489a9cb8 : ffffa001d80d5000 ffffa001b764e000 ffff9d8ee9dfa001 fffff80648a4b949 : nt!IofCallDriver+0x59
ffff9d8ee9df9f30 fffff80648aa31f4 : ffffc5818aa36200 0000000000000000 ffffa001b764e000 0000000000000e54 : nt!CmpFileFlushAndPurge+0x124
ffff9d8ee9df9f90 fffff80648a4b603 : ffffffffffffffff ffff9d8ee9dfa0f0 0000000000000002 ffffa001b764e000 : nt!HvValidateOrInvalidatePrimaryFileHeader+0xa8
ffff9d8ee9df9ff0 fffff80648a98b63 : ffffa001b764e000 ffff9d8e00000000 ffffa001b764e000 ffffffff800004c4 : nt!CmpFlushHive+0x817
ffff9d8ee9dfa200 fffff806485c9c05 : fffff8064855a770 ffffc581862d2040 ffffffff800004c4 ffffc5818a683cb0 : nt!NtFlushKey+0x2e3
ffff9d8ee9dfa310 fffff806485bc670 : fffff8065f151d5b ffffc58100000010 fffff806485bc670 0000000000000010 : nt!KiSystemServiceCopyEnd+0x25
ffff9d8ee9dfa4a8 fffff8065f151d5b : ffffc58100000010 fffff806485bc670 0000000000000010 0000000000000086 : nt!KiServiceLinkage
ffff9d8ee9dfa4b0 fffff8065f151686 : 0000000000000000 ffffc5818a9c8ea0 0000000000000002 0000000000000001 : SUSI3Core+0x1d5b
ffff9d8ee9dfa500 fffff8065f157697 : ffffc5818a9c8ea0 ffffffff800004c4 ffffc5818a9c8ea0 ffffffff800004c4 : SUSI3Core+0x1686
ffff9d8ee9dfa540 fffff8065f15722c : ffffffff800004c4 ffffc5818a2dee08 ffffc5818a9c8ea0 fffff8064847bee4 : SUSI3Core+0x7697
ffff9d8ee9dfa5c0 fffff8064847bd09 : ffffc5818a2decf0 ffff9d8ee9dfa760 ffffc5818a9c8d50 0000000069706e04 : SUSI3Core+0x722c
ffff9d8ee9dfa640 fffff80648af116e : ffffc58186096390 ffffc5818a51b070 0000000000000001 0000000000000000 : nt!IofCallDriver+0x59
ffff9d8ee9dfa680 fffff8064840a239 : ffffc58186096390 0000000000000000 ffffc5818a51b070 ffffc5818a51b070 : nt!PnpAsynchronousCall+0xea
ffff9d8ee9dfa6c0 fffff8064855a2dc : 0000000000000000 ffffc58186096390 fffff8064855a770 fffff8064855a770 : nt!PnpSendIrp+0x95
ffff9d8ee9dfa730 fffff80648adb9ef : ffffc58186122cd0 ffffc5818a51b070 0000000000000000 ffffc58186122cd0 : nt!PnpStartDevice+0x88
ffff9d8ee9dfa7c0 fffff80648adb8cf : ffffc58186122cd0 0000000000000000 0000000000000001 fffff8064855ac4a : nt!PnpStartDeviceNode+0xdb
ffff9d8ee9dfa850 fffff80648ade468 : ffffc58186122cd0 ffff9d8ee9dfa918 0000000000000001 0000000000000001 : nt!PipProcessStartPhase1+0x6f
ffff9d8ee9dfa8a0 fffff80648b55d11 : ffffc5818a683c00 ffff9d8ee9dfaa01 ffff9d8ee9dfa9b0 ffffc58100000000 : nt!PipProcessDevNodeTree+0x3dc
ffff9d8ee9dfa960 fffff8064855b778 : ffffc50100000003 ffffc5818a683cb0 ffffb10000000000 0000000000000000 : nt!PiProcessStartSystemDevices+0x59
ffff9d8ee9dfa9b0 fffff8064842d07a : ffffc581862d2040 fffff80648831580 ffffc5818609fc20 ffffc58100000000 : nt!PnpDeviceActionWorker+0x448
ffff9d8ee9dfaa70 fffff8064851efb5 : ffffc581862d2040 ffffc5818607f300 ffffc581862d2040 0000000000000000 : nt!ExpWorkerThread+0x16a
ffff9d8ee9dfab10 fffff806485bfddc : fffff8064730a180 ffffc581862d2040 fffff8064851ef60 0000000000000000 : nt!PspSystemThreadStartup+0x55
ffff9d8ee9dfab60 0000000000000000 : ffff9d8ee9dfb000 ffff9d8ee9df4000 0000000000000000 0000000000000000 : nt!KiStartSystemThread+0x1c

THREAD_SHA1_HASH_MOD_FUNC: 32a8089f156028516d33e7483e53bbb303cfe68d

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 45831e83d6d57fb60a2a8513f360148aed73c169

THREAD_SHA1_HASH_MOD: 2aa499ff180ab1ff08d4296dbd6df0d447ef2f5b

FOLLOWUP_IP:
uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+5f
fffff806`5ce5118f cc int 3

FAULT_INSTR_CODE: cccccccc

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+5f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: uwfrtl

IMAGE_NAME: uwfrtl.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 0

IMAGE_VERSION: 10.0.17763.1911

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 5f

FAILURE_BUCKET_ID: 0xD2_uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL

BUCKET_ID: 0xD2_uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL

PRIMARY_PROBLEM_CLASS: 0xD2_uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL

TARGET_TIME: 2022-02-21T10:53:05.000Z

OSBUILD: 17763

OSSERVICEPACK: 1971

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2027-02-03 07:39:34

BUILDDATESTAMP_STR: 180914-1434

BUILDLAB_STR: rs5_release

BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434

ANALYSIS_SESSION_ELAPSED_TIME: 4f73

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0xd2_uwfrtl!uwflogcompleteentry_uwflog_level_critical

FAILURE_ID_HASH: {cabd1cce-d776-eaa9-5287-c775531e4069}

Followup: MachineOwner

Answer 4

Please run the V2 log collector and post a share link into this thread using one drive, drop box, or google drive:

https://www.windowsq.com/t/bsod-posting-instructions.17/
https://www.windowsq.com/resources/v2-log-collector.8/
https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post: Vote = a helpful post
.
.
.
.
.

Answer 5

EckiS 921

this bugcheck code seems to be related to network drivers: did you already try to update them?
when you are using 3rd party antivirus or firewall or VPN software: uninstall them and try to reproduce the problem

Gary Nebbett 6,476 Reputation points

2021-12-01T19:10:34.207+00:00
Hello @EckiS ,

Good to see a posting from you again - it was always worth reading your contributions on TechNet.

This is an unusual Microsoft error description. The limited trace information often mentions UWF (Unified Write Filter (https://learn.microsoft.com/en-us/windows-hardware/customize/enterprise/unified-write-filter)), which is related to storage devices.

The error description (This bug check code only occurs on Windows 2000 and Windows XP. In Windows Server 2003 and later, the corresponding code is bug check 0x7C) [my emphasis] is difficult to reconcile with the reported Windows 10 version.

I think that we need to see a bit more information (perhaps the minidump) before we can say anything more about this crash. This is probably where the bug check was initiated:

uwfrtl!UwflogCompleteEntry_UWFLOG_LEVEL_CRITICAL+0x4b: 00000001`c000117b b9d2000000 mov ecx,0D2h 00000001`c0001180 0f114c2448 movups xmmword ptr [rsp+48h],xmm1 00000001`c0001185 0f11442458 movups xmmword ptr [rsp+58h],xmm0 00000001`c000118a ff1578700000 call qword ptr [uwfrtl!_imp_KeBugCheckEx (00000001`c0008208)]

Gary
Abhishek Chouksey 6 Reputation points

2021-12-03T10:09:09.213+00:00

Thanks @EckiS ......It was the issue with latest 2021 INTEL LAN drivers.
So, we reverted back to old drivers.......and it resolved the issue.

Share via

uwfrtl.sys + BUGCODE_ID_DRIVER (d2)

6 answers

Followup: MachineOwner

Your answer