RDR_FILE_SYSTEM
Code: 0x27 (39)
As HRESULT:- S: 0 (Success)
- C: 0 (Microsoft-defined)
- N: 0 (Not an NTSTATUS value)
- Facility: 0x000 (FACILITY_NULL: Default)
- Code: 0x0027 (39)
- Sev: 0 (STATUS_SEVERITY_SUCCESS)
- C: 0 (Microsoft-defined)
- Facility: 0x000 (Default)
- Code: 0x0027 (39)
Parameters
| Parameter | Description |
|---|---|
| 1 | The high 16 bits (the first four hexadecimal digits after the "0x") identify the type of problem. Possible values include: 0xCA550000 RDBSS_BUG_CHECK_CACHESUP 0xC1EE0000 RDBSS_BUG_CHECK_CLEANUP 0xC10E0000 RDBSS_BUG_CHECK_CLOSE 0xBAAD0000 RDBSS_BUG_CHECK_NTEXCEPT |
| 2 | If RxExceptionFilter is on the stack, this parameter specifies the address of the exception record. |
| 3 | If RxExceptionFilter is on the stack, this parameter specifies the address of the context record. |
| 4 | Reserved |
Description
The RDR_FILE_SYSTEM bug check has a value of 0x00000027. This indicates that a problem occurred in the SMB redirector file system.
Important
This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.
Cause
One possible cause of this bug check is depletion of nonpaged pool memory. If the nonpaged pool memory is completely depleted, this error can stop the system. However, during the indexing process, if the amount of available nonpaged pool memory is very low, another kernel-mode driver requiring nonpaged pool memory can also trigger this error.
Resolution
To debug this problem: Use the .cxr (Display Context Record) command with Parameter 3, and then use kb (Display Stack Backtrace).
To resolve a nonpaged pool memory depletion problem: Add new physical memory to the computer. This will increase the quantity of nonpaged pool memory available to the kernel.
Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.
Associated Modules
| Module | Code | Found in | Description |
|---|---|---|---|
| EventCreate.exe | 0x27 | 78.11011 | %1 |
| KernelBase.dll | 0x27 | 78.1 | The disk is full. |
| VSSVC.exe | 0x27 | 1011 | Volume Shadow Copy Service error: The Volume Shadow Copy service (VSS) is disabled. Enable the service and try again. %1 |
| cipher.exe | 0x27 | 78.11011 | YN |
| compact.exe | 0x27 | 1011 | Cannot change system's Compact state: |
| dsreg.dll | 0x27 | 1011 | %1 |
| dssec.dll | 0x27 | 78.11011 | Peek dead letter |
| ehepgres.dll | 0x27 | 7 | %1 |
| kernel32.dll | 0x27 | 78.11011 | The disk is full. |
| nslookup.exe | 0x27 | 78.11011 | *** Can't initialize resolver. |
| powershell.exe | 0x27 | 8.11011 | Encountered a problem reading the registry. Cannot find registry key %1!ls!. The Windows PowerShell %2!ls! engine is not installed on this computer. |
| reagentc.exe | 0x27 | 8.11011 | %1: Unable to read Boot Configuration Data. Try disabling and re-enabling Windows RE. |
| sc.exe | 0x27 | 78.11011 | IsLocked : FALSE |
| w32time.dll | 0x27 | 1011 | The time service is unable to register for network configuration change events. This may occur when TCP/IP is not correctly configured. The time service will be unable to sync time from network providers, but will still use locally installed hardware provdiers, if any are available. |
| webservices.dll | 0x27 | 78.11011 | The current listener state '%1' was not appropriate for the requested operation. |
| wecutil.exe | 0x27 | 78.11011 | Can not add event source %1!s! when it already exists. |
| wevtutil.exe | 0x27 | 78.11011 | value "%1!s!" is invalid for isolation option. |
| whealogr.dll | 0x27 | 7 | A corrected hardware error has occurred. Reported by component: Processor Core Error Source: %1 Error Type: %2 CPU APIC ID: %3 The details view of this entry contains further information. |
| win32k.sys | 0x27 | 78.1 | MenuText |
| win32kbase.sys | 0x27 | 1011 | MenuText |
| 20 entries | |||