KERNEL_SECURITY_CHECK_FAILURE hatası

İşletim sistemi
Windows 10

turin.turambar

Decapat
Katılım
12 Nisan 2021
Mesajlar
8
Daha fazla  
Cinsiyet
Erkek
İnternette sorunun çözümlerine baktım ağ bağdaştırıcısından kaynaklandığı yazıyor. Wi-Fi sürücüsünün son güncellemesini indirdim buradan ama sürücü güncellenmiyor Intel® Çift Bantlı Kablosuz-AC 3165 için indirmeler. İndirdiğim sürüm 22.50.1 bende kurulu olan ise 19.51.35.2 yeni sürücüyü kuruyorum başarıyla yüklendi diyor ama sürücü sürümü değişmiyor. Başka bir şey sebep oluyorsa bilemiyorum minidump dosyalarını bırakıyorum.
 
Bir proxy yazılımı kullanıyorsanız kapatın. Ya da VPN. Hatta cihazınızdan silin.
Logitech Gaming Software - silin.
Realtek uvc driver - kamera driverınız aygıt yöneticisinden kamera sürücünüzü silin.
Realtek Wi-Fi driver - Wi-Fi driverınız aygıt yöneticisinden bulup sağ tık sürücü sil deyin.

Bunları yapmadan önce.
Adresinden Wi-Fi driverınızı ve kamera driverınızı indirmiş olun.
Bilgisayarınızı yeniden başlatın.
İndirdiğiniz dosyalardan driverlarınızı kurun. Windows otomatik kuruyorsa yine driverı silin bu sefer yeniden başlatmadan kurun.

Ek olarak Memory'den kaynaklanan hata da almışsınız. Bir Memtest yapıp 1 hata bile verirse bildirin.

Bunlara göre dönüş sağlayın.

[CODE title="Kod"]
Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040821-10218-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff805`6d600000 PsLoadedModuleList = 0xfffff805`6e22a490
Debug session time: Thu Apr 8 15:42:12.323 2021 (UTC + 3:00)
System Uptime: 0 days 1:46:57.085
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
........
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff805`6d9f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff805`73a5d9b0=00000000000000f7
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer. This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned. This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: fffff80573a5d9f0, Actual security check cookie from the stack
Arg2: 000048714b2a45ef, Expected security check cookie
Arg3: ffffb78eb4d5ba10, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2812

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 13885

Key : Analysis.Init.CPU.mSec
Value: 390

Key : Analysis.Init.Elapsed.mSec
Value: 3366

Key : Analysis.Memory.CommitPeak.Mb
Value: 78

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: f7

BUGCHECK_P1: fffff80573a5d9f0

BUGCHECK_P2: 48714b2a45ef

BUGCHECK_P3: ffffb78eb4d5ba10

BUGCHECK_P4: 0

SECURITY_COOKIE: Expected 000048714b2a45ef found fffff80573a5d9f0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

STACK_TEXT:
fffff805`73a5d9a8 fffff805`6dab0cd5 : 00000000`000000f7 fffff805`73a5d9f0 00004871`4b2a45ef ffffb78e`b4d5ba10 : nt!KeBugCheckEx
fffff805`73a5d9b0 fffff805`6d870188 : 00000000`00000000 00001f80`0000000d 00000000`00000003 00000000`00000002 : nt!_report_gsfailure+0x25
fffff805`73a5d9f0 fffff805`6d9f9774 : 00000000`00000001 fffff805`6e327600 ffffb082`b9ad0280 00000000`0000054e : nt!PoIdle+0x3a8
fffff805`73a5db60 00000000`00000000 : fffff805`73a5e000 fffff805`73a57000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x54


SYMBOL_NAME: nt!_report_gsfailure+25

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 25

FAILURE_BUCKET_ID: 0xF7_MISSING_GSFRAME_nt!_report_gsfailure

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}

Followup: MachineOwner
---------

0: kd> !sysinfo machineid
Machine ID Information [From Smbios 2.8, DMIVersion 0, Size=3630]
BiosMajorRelease = 1
BiosMinorRelease = 47
FirmwareMajorRelease = 1
FirmwareMinorRelease = 47
BiosVendor = LENOVO
BiosVersion = D5CN47WW
BiosReleaseDate = 08/26/2016
SystemManufacturer = LENOVO
SystemProductName = 80Q7
SystemFamily = IDEAPAD
SystemVersion = Lenovo ideapad 300-15ISK
SystemSKU = LENOVO_MT_80Q7_BU_idea_FM_Lenovo ideapad 300-15ISK
BaseBoardManufacturer = LENOVO
BaseBoardProduct = Paris 5A8
BaseBoardVersion = SDK0J40679 WIN
0: kd> lm
start end module name
ffffd089`97fd0000 ffffd089`9806a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
ffffd089`98200000 ffffd089`985b6000 win32kfull (deferred)
ffffd089`985c0000 ffffd089`9860a000 cdd (deferred)
ffffd089`98ce0000 ffffd089`98fb9000 win32kbase (deferred)
fffff805`6b7f0000 fffff805`6bb8d000 mcupdate_GenuineIntel (deferred)
fffff805`6bb90000 fffff805`6bb96000 hal (deferred)
fffff805`6bba0000 fffff805`6bbab000 kd (deferred)
fffff805`6bbb0000 fffff805`6bbd7000 tm (deferred)
fffff805`6bbe0000 fffff805`6bbeb000 BOOTVID (deferred)
fffff805`6d600000 fffff805`6e646000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff805`71000000 fffff805`71069000 CLFS (deferred)
fffff805`71070000 fffff805`7108a000 PSHED (deferred)
fffff805`71090000 fffff805`711a3000 clipsp (deferred)
fffff805`711b0000 fffff805`7121f000 FLTMGR (deferred)
fffff805`71220000 fffff805`71249000 ksecdd (deferred)
fffff805`71250000 fffff805`712b2000 msrpc (deferred)
fffff805`712c0000 fffff805`712ce000 cmimcext (deferred)
fffff805`712d0000 fffff805`712e1000 werkernel (deferred)
fffff805`712f0000 fffff805`712fc000 ntosext (deferred)
fffff805`71300000 fffff805`713e3000 CI (deferred)
fffff805`713f0000 fffff805`714a7000 cng (deferred)
fffff805`714b0000 fffff805`71581000 Wdf01000 (deferred)
fffff805`71590000 fffff805`715a3000 WDFLDR (deferred)
fffff805`715b0000 fffff805`715bf000 SleepStudyHelper (deferred)
fffff805`715c0000 fffff805`715d1000 WppRecorder (deferred)
fffff805`715e0000 fffff805`71606000 acpiex (deferred)
fffff805`71610000 fffff805`7162a000 SgrmAgent (deferred)
fffff805`71630000 fffff805`716fc000 ACPI (deferred)
fffff805`71700000 fffff805`7170c000 WMILIB (deferred)
fffff805`71710000 fffff805`7171b000 msisadrv (deferred)
fffff805`71720000 fffff805`71796000 pci (deferred)
fffff805`717a0000 fffff805`717e4000 tpm (deferred)
fffff805`717f0000 fffff805`717fb000 IntelTA (deferred)
fffff805`71820000 fffff805`7188b000 intelpep (deferred)
fffff805`71890000 fffff805`718a7000 WindowsTrustedRT (deferred)
fffff805`718b0000 fffff805`718bb000 WindowsTrustedRTProxy (deferred)
fffff805`718c0000 fffff805`718d4000 pcw (deferred)
fffff805`718e0000 fffff805`718f5000 vdrvroot (deferred)
fffff805`71900000 fffff805`7192f000 pdc (deferred)
fffff805`71930000 fffff805`71949000 CEA (deferred)
fffff805`71950000 fffff805`71981000 partmgr (deferred)
fffff805`71990000 fffff805`71a3a000 spaceport (deferred)
fffff805`71a40000 fffff805`71a59000 volmgr (deferred)
fffff805`71a60000 fffff805`71ac3000 volmgrx (deferred)
fffff805`71ad0000 fffff805`71aee000 mountmgr (deferred)
fffff805`71af0000 fffff805`726d2000 iaStorAC (deferred)
fffff805`726e0000 fffff805`72793000 storport (deferred)
fffff805`727a0000 fffff805`727bc000 EhStorClass (deferred)
fffff805`727c0000 fffff805`727da000 fileinfo (deferred)
fffff805`727f0000 fffff805`7282f000 Wof (deferred)
fffff805`72830000 fffff805`72899000 WdFilter (deferred)
fffff805`728a0000 fffff805`72b79000 Ntfs (deferred)
fffff805`72b80000 fffff805`72b8d000 Fs_Rec (deferred)
fffff805`72b90000 fffff805`72cff000 ndis (deferred)
fffff805`72d00000 fffff805`72d98000 NETIO (deferred)
fffff805`72da0000 fffff805`72dd2000 ksecpkg (deferred)
fffff805`72de0000 fffff805`730cb000 tcpip (deferred)
fffff805`730d0000 fffff805`7314f000 fwpkclnt (deferred)
fffff805`73150000 fffff805`73180000 wfplwfs (deferred)
fffff805`73190000 fffff805`73258000 fvevol (deferred)
fffff805`73260000 fffff805`73274000 amdkmpfd (deferred)
fffff805`73280000 fffff805`7328b000 volume (deferred)
fffff805`73290000 fffff805`732fd000 volsnap (deferred)
fffff805`73300000 fffff805`73350000 rdyboost (deferred)
fffff805`73360000 fffff805`73386000 mup (deferred)
fffff805`73390000 fffff805`733a2000 iorate (deferred)
fffff805`733d0000 fffff805`733ec000 disk (deferred)
fffff805`733f0000 fffff805`7345c000 CLASSPNP (deferred)
fffff805`86350000 fffff805`8636e000 crashdmp (deferred)
fffff805`86400000 fffff805`864e2000 dxgmms2 (deferred)
fffff805`864f0000 fffff805`8650b000 monitor (deferred)
fffff805`86510000 fffff805`86539000 luafv (deferred)
fffff805`86540000 fffff805`86576000 wcifs (deferred)
fffff805`86580000 fffff805`86601000 cldflt (deferred)
fffff805`86610000 fffff805`86624000 mmcss (deferred)
fffff805`86630000 fffff805`8664a000 storqosflt (deferred)
fffff805`86650000 fffff805`86678000 bindflt (deferred)
fffff805`86680000 fffff805`8668b000 semav6msr64 (deferred)
fffff805`866a0000 fffff805`866b8000 lltdio (deferred)
fffff805`866c0000 fffff805`866d8000 mslldp (deferred)
fffff805`866e0000 fffff805`866fb000 rspndr (deferred)
fffff805`86700000 fffff805`8671d000 wanarp (deferred)
fffff805`86720000 fffff805`86738000 ndisuio (deferred)
fffff805`86740000 fffff805`867fb000 nwifi (deferred)
fffff805`86800000 fffff805`86856000 msquic (deferred)
fffff805`86860000 fffff805`869e5000 HTTP (deferred)
fffff805`869f0000 fffff805`86a03000 condrv (deferred)
fffff805`86a10000 fffff805`86a35000 bowser (deferred)
fffff805`86a40000 fffff805`86a5a000 mpsdrv (deferred)
fffff805`86a60000 fffff805`86af3000 mrxsmb (deferred)
fffff805`86b00000 fffff805`86b45000 mrxsmb20 (deferred)
fffff805`86b50000 fffff805`86b85000 idmwfp (deferred)
fffff805`86b90000 fffff805`86be3000 srvnet (deferred)
fffff805`86bf0000 fffff805`86bf8000 lgcoretemp (deferred)
fffff805`86c00000 fffff805`86c27000 Ndu (deferred)
fffff805`86c30000 fffff805`86d06000 peauth (deferred)
fffff805`86d10000 fffff805`86d25000 tcpipreg (deferred)
fffff805`86d30000 fffff805`86d43000 vwifimp (deferred)
fffff805`86d50000 fffff805`86d6c000 rassstp (deferred)
fffff805`86d70000 fffff805`86d8d000 NDProxy (deferred)
fffff805`86d90000 fffff805`86db8000 AgileVpn (deferred)
fffff805`86dc0000 fffff805`86dcf000 ndistapi (deferred)
fffff805`86dd0000 fffff805`879b2000 dump_iaStorAC (deferred)
fffff805`879e0000 fffff805`879fd000 dump_dumpfve (deferred)
fffff805`88000000 fffff805`883a4000 dxgkrnl (deferred)
fffff805`883b0000 fffff805`883c8000 watchdog (deferred)
fffff805`883d0000 fffff805`883e6000 BasicDisplay (deferred)
fffff805`883f0000 fffff805`88401000 BasicRender (deferred)
fffff805`88410000 fffff805`8842c000 Npfs (deferred)
fffff805`88430000 fffff805`88441000 Msfs (deferred)
fffff805`88450000 fffff805`8846b000 CimFS (deferred)
fffff805`88470000 fffff805`88492000 tdx (deferred)
fffff805`884a0000 fffff805`884b0000 TDI (deferred)
fffff805`884c0000 fffff805`8851c000 netbt (deferred)
fffff805`88520000 fffff805`88533000 afunix (deferred)
fffff805`88540000 fffff805`885e3000 afd (deferred)
fffff805`885f0000 fffff805`8860a000 vwififlt (deferred)
fffff805`88610000 fffff805`8863b000 pacer (deferred)
fffff805`88640000 fffff805`88654000 ndiscap (deferred)
fffff805`88660000 fffff805`88674000 netbios (deferred)
fffff805`88680000 fffff805`88721000 Vid (deferred)
fffff805`88730000 fffff805`88751000 winhvr (deferred)
fffff805`88760000 fffff805`887dc000 rdbss (deferred)
fffff805`887e0000 fffff805`887f2000 nsiproxy (deferred)
fffff805`88800000 fffff805`8880e000 npsvctrig (deferred)
fffff805`88810000 fffff805`88820000 mssmbios (deferred)
fffff805`88830000 fffff805`8883a000 gpuenergydrv (deferred)
fffff805`88840000 fffff805`8886c000 dfsc (deferred)
fffff805`88890000 fffff805`888fc000 fastfat (deferred)
fffff805`88900000 fffff805`88917000 bam (deferred)
fffff805`88920000 fffff805`8896e000 ahcache (deferred)
fffff805`88970000 fffff805`8897e000 amdxe (deferred)
fffff805`88980000 fffff805`8899a000 amdfendr (deferred)
fffff805`889a0000 fffff805`889b2000 CompositeBus (deferred)
fffff805`889c0000 fffff805`889cd000 kdnic (deferred)
fffff805`889d0000 fffff805`889e5000 umbus (deferred)
fffff805`889f0000 fffff805`88a05000 CAD (deferred)
fffff805`89b70000 fffff805`89ba0000 cdrom (deferred)
fffff805`89bb0000 fffff805`89bc5000 filecrypt (deferred)
fffff805`89bd0000 fffff805`89bde000 tbs (deferred)
fffff805`89be0000 fffff805`89bea000 Null (deferred)
fffff805`89bf0000 fffff805`89bfa000 Beep (deferred)
fffff805`8aa00000 fffff805`8aa98000 USBXHCI (deferred)
fffff805`8aaa0000 fffff805`8aae4000 ucx01000 (deferred)
fffff805`8aaf0000 fffff805`8ab20000 TeeDriverW8x64 (deferred)
fffff805`8ab30000 fffff805`8ac17000 rt640x64 (deferred)
fffff805`8ac20000 fffff805`8ada5000 BTHport (deferred)
fffff805`8b150000 fffff805`8bd96000 igdkmd64 (deferred)
fffff805`8be00000 fffff805`8bef0000 wdiwifi (deferred)
fffff805`8bf00000 fffff805`8bf0e000 vwifibus (deferred)
fffff805`8bf10000 fffff805`8bf1f000 CmBatt (deferred)
fffff805`8bf20000 fffff805`8bf30000 BATTC (deferred)
fffff805`8bf40000 fffff805`8bf55000 AcpiVpc (deferred)
fffff805`8bf60000 fffff805`8bf6c000 ICCWDT (deferred)
fffff805`8bf70000 fffff805`8bf91000 i8042prt (deferred)
fffff805`8bfa0000 fffff805`8c021000 ETD (deferred)
fffff805`8c030000 fffff805`8c044000 kbdclass (deferred)
fffff805`8c050000 fffff805`8c063000 mouclass (deferred)
fffff805`8c070000 fffff805`8c095000 HDAudBus (deferred)
fffff805`8c0a0000 fffff805`8c106000 portcls (deferred)
fffff805`8c110000 fffff805`8c131000 drmk (deferred)
fffff805`8c140000 fffff805`8c1b6000 ks (deferred)
fffff805`8c1c0000 fffff805`8c1cc000 wmiacpi (deferred)
fffff805`8c1d0000 fffff805`8c210000 intelppm (deferred)
fffff805`8c220000 fffff805`8c22b000 acpipagr (deferred)
fffff805`8c230000 fffff805`8c23e000 UEFI (deferred)
fffff805`8c240000 fffff805`8c24d000 NdisVirtualBus (deferred)
fffff805`8c250000 fffff805`8c25c000 swenum (deferred)
fffff805`8c260000 fffff805`8c264e00 LGBusEnum (deferred)
fffff805`8c270000 fffff805`8c27c800 LGJoyXlCore (deferred)
fffff805`8c280000 fffff805`8c28e000 rdpbus (deferred)
fffff805`8c290000 fffff805`8c418000 CHDRT64 (deferred)
fffff805`8c420000 fffff805`8c42f000 ksthunk (deferred)
fffff805`8c430000 fffff805`8c4f8000 IntcDAud (deferred)
fffff805`8c500000 fffff805`8c5a3000 UsbHub3 (deferred)
fffff805`8c5b0000 fffff805`8c5be000 USBD (deferred)
fffff805`8c5c0000 fffff805`8c5f3000 usbccgp (deferred)
fffff805`8c600000 fffff805`8c612000 hidusb (deferred)
fffff805`8c620000 fffff805`8c65f000 HIDCLASS (deferred)
fffff805`8c660000 fffff805`8c673000 HIDPARSE (deferred)
fffff805`8c680000 fffff805`8c695000 LGSHidFilt (deferred)
fffff805`8c6a0000 fffff805`8c6b0000 mouhid (deferred)
fffff805`8c6c0000 fffff805`8c6d1000 kbdhid (deferred)
fffff805`8c6e0000 fffff805`8c747000 RtsUer (deferred)
fffff805`8c8b0000 fffff805`8d132000 Netwtw04 (deferred)
fffff805`8f200000 fffff805`8f221000 raspptp (deferred)
fffff805`8f230000 fffff805`8f24c000 raspppoe (deferred)
fffff805`8f250000 fffff805`8f28a000 ndiswan (deferred)
fffff805`8f290000 fffff805`8f2a6000 WdNisDrv (deferred)
fffff805`8f2b0000 fffff805`8f2b2500 LGVirHid (deferred)
fffff805`8f2c0000 fffff805`8f2de000 MpKslDrv (deferred)
fffff805`8f330000 fffff805`91240000 rtsuvc (deferred)
fffff805`91250000 fffff805`91290000 ibtusb (deferred)
fffff805`912a0000 fffff805`912c1000 BTHUSB (deferred)
fffff805`912e0000 fffff805`912ee000 dump_diskdump (deferred)
fffff805`912f0000 fffff805`913b7000 srv2 (deferred)
fffff805`913c0000 fffff805`913e1000 rasl2tp (deferred)

Unloaded modules:
fffff805`86680000 fffff805`86691000 MSKSSRV.sys
fffff805`86680000 fffff805`86691000 MSKSSRV.sys
fffff805`86380000 fffff805`8638f000 dump_storpor
fffff805`88f40000 fffff805`89b23000 dump_iaStorA
fffff805`89b50000 fffff805`89b6e000 dump_dumpfve
fffff805`88870000 fffff805`8888c000 dam.sys
fffff805`71800000 fffff805`71812000 WdBoot.sys
fffff805`733b0000 fffff805`733c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040821-9906-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff803`1b000000 PsLoadedModuleList = 0xfffff803`1bc2a490
Debug session time: Thu Apr 8 16:20:52.976 2021 (UTC + 3:00)
System Uptime: 0 days 0:26:27.739
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`1b3f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff803`2165d9b0=00000000000000f7
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer. This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned. This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: fffff8032165d9f0, Actual security check cookie from the stack
Arg2: 0000ebc94e6598d4, Expected security check cookie
Arg3: ffff1436b19a672b, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2749

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 7410

Key : Analysis.Init.CPU.mSec
Value: 390

Key : Analysis.Init.Elapsed.mSec
Value: 4277

Key : Analysis.Memory.CommitPeak.Mb
Value: 78

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: f7

BUGCHECK_P1: fffff8032165d9f0

BUGCHECK_P2: ebc94e6598d4

BUGCHECK_P3: ffff1436b19a672b

BUGCHECK_P4: 0

SECURITY_COOKIE: Expected 0000ebc94e6598d4 found fffff8032165d9f0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

STACK_TEXT:
fffff803`2165d9a8 fffff803`1b4b0cd5 : 00000000`000000f7 fffff803`2165d9f0 0000ebc9`4e6598d4 ffff1436`b19a672b : nt!KeBugCheckEx
fffff803`2165d9b0 fffff803`1b270188 : 00000000`00000000 00001f80`0000000d 00000000`00000003 00000000`00000002 : nt!_report_gsfailure+0x25
fffff803`2165d9f0 fffff803`1b3f9774 : 00000000`00000000 fffff803`1bd27600 ffffa40b`62776080 00000000`0000063c : nt!PoIdle+0x3a8
fffff803`2165db60 00000000`00000000 : fffff803`2165e000 fffff803`21657000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x54


SYMBOL_NAME: nt!_report_gsfailure+25

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 25

FAILURE_BUCKET_ID: 0xF7_MISSING_GSFRAME_nt!_report_gsfailure

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}

Followup: MachineOwner
---------

0: kd> lm
start end module name
ffff803c`68c00000 ffff803c`68ed9000 win32kbase (deferred)
ffff803c`690a0000 ffff803c`6913a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
ffff803c`69f10000 ffff803c`6a2c6000 win32kfull (deferred)
ffff803c`6a2d0000 ffff803c`6a31a000 cdd (deferred)
fffff803`193c0000 fffff803`1975d000 mcupdate_GenuineIntel (deferred)
fffff803`19760000 fffff803`19766000 hal (deferred)
fffff803`19770000 fffff803`1977b000 kd (deferred)
fffff803`19780000 fffff803`197a7000 tm (deferred)
fffff803`197b0000 fffff803`197bb000 BOOTVID (deferred)
fffff803`1b000000 fffff803`1c046000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff803`1ec00000 fffff803`1ec69000 CLFS (deferred)
fffff803`1ec70000 fffff803`1ec8a000 PSHED (deferred)
fffff803`1ec90000 fffff803`1eda3000 clipsp (deferred)
fffff803`1edb0000 fffff803`1ee1f000 FLTMGR (deferred)
fffff803`1ee20000 fffff803`1ee49000 ksecdd (deferred)
fffff803`1ee50000 fffff803`1eeb2000 msrpc (deferred)
fffff803`1eec0000 fffff803`1eece000 cmimcext (deferred)
fffff803`1eed0000 fffff803`1eee1000 werkernel (deferred)
fffff803`1eef0000 fffff803`1eefc000 ntosext (deferred)
fffff803`1ef00000 fffff803`1efe3000 CI (deferred)
fffff803`1eff0000 fffff803`1f0a7000 cng (deferred)
fffff803`1f0b0000 fffff803`1f181000 Wdf01000 (deferred)
fffff803`1f190000 fffff803`1f1a3000 WDFLDR (deferred)
fffff803`1f1b0000 fffff803`1f1bf000 SleepStudyHelper (deferred)
fffff803`1f1c0000 fffff803`1f1d1000 WppRecorder (deferred)
fffff803`1f1e0000 fffff803`1f206000 acpiex (deferred)
fffff803`1f210000 fffff803`1f22a000 SgrmAgent (deferred)
fffff803`1f230000 fffff803`1f2fc000 ACPI (deferred)
fffff803`1f300000 fffff803`1f30c000 WMILIB (deferred)
fffff803`1f310000 fffff803`1f31b000 msisadrv (deferred)
fffff803`1f320000 fffff803`1f396000 pci (deferred)
fffff803`1f3a0000 fffff803`1f3e4000 tpm (deferred)
fffff803`1f3f0000 fffff803`1f3fb000 IntelTA (deferred)
fffff803`1f420000 fffff803`1f48b000 intelpep (deferred)
fffff803`1f490000 fffff803`1f4a7000 WindowsTrustedRT (deferred)
fffff803`1f4b0000 fffff803`1f4bb000 WindowsTrustedRTProxy (deferred)
fffff803`1f4c0000 fffff803`1f4d4000 pcw (deferred)
fffff803`1f4e0000 fffff803`1f4f5000 vdrvroot (deferred)
fffff803`1f500000 fffff803`1f52f000 pdc (deferred)
fffff803`1f530000 fffff803`1f549000 CEA (deferred)
fffff803`1f550000 fffff803`1f581000 partmgr (deferred)
fffff803`1f590000 fffff803`1f63a000 spaceport (deferred)
fffff803`1f640000 fffff803`1f659000 volmgr (deferred)
fffff803`1f660000 fffff803`1f6c3000 volmgrx (deferred)
fffff803`1f6d0000 fffff803`1f6ee000 mountmgr (deferred)
fffff803`1f6f0000 fffff803`202d2000 iaStorAC (deferred)
fffff803`202e0000 fffff803`20393000 storport (deferred)
fffff803`203a0000 fffff803`203bc000 EhStorClass (deferred)
fffff803`203c0000 fffff803`203da000 fileinfo (deferred)
fffff803`203f0000 fffff803`2042f000 Wof (deferred)
fffff803`20430000 fffff803`20499000 WdFilter (deferred)
fffff803`204a0000 fffff803`20779000 Ntfs (deferred)
fffff803`20780000 fffff803`2078d000 Fs_Rec (deferred)
fffff803`20790000 fffff803`208ff000 ndis (deferred)
fffff803`20900000 fffff803`20998000 NETIO (deferred)
fffff803`209a0000 fffff803`209d2000 ksecpkg (deferred)
fffff803`209e0000 fffff803`20ccb000 tcpip (deferred)
fffff803`20cd0000 fffff803`20d4f000 fwpkclnt (deferred)
fffff803`20d50000 fffff803`20d80000 wfplwfs (deferred)
fffff803`20d90000 fffff803`20e58000 fvevol (deferred)
fffff803`20e60000 fffff803`20e74000 amdkmpfd (deferred)
fffff803`20e80000 fffff803`20e8b000 volume (deferred)
fffff803`20e90000 fffff803`20efd000 volsnap (deferred)
fffff803`20f00000 fffff803`20f50000 rdyboost (deferred)
fffff803`20f60000 fffff803`20f86000 mup (deferred)
fffff803`20f90000 fffff803`20fa2000 iorate (deferred)
fffff803`20fd0000 fffff803`20fec000 disk (deferred)
fffff803`20ff0000 fffff803`2105c000 CLASSPNP (deferred)
fffff803`33e00000 fffff803`349e2000 dump_iaStorAC (deferred)
fffff803`34b00000 fffff803`34b1e000 crashdmp (deferred)
fffff803`34c00000 fffff803`34c0e000 tbs (deferred)
fffff803`34c10000 fffff803`34c1a000 Null (deferred)
fffff803`34c20000 fffff803`34c2a000 Beep (deferred)
fffff803`34c30000 fffff803`34fd4000 dxgkrnl (deferred)
fffff803`34fe0000 fffff803`34ff8000 watchdog (deferred)
fffff803`35000000 fffff803`35016000 BasicDisplay (deferred)
fffff803`35020000 fffff803`35031000 BasicRender (deferred)
fffff803`35040000 fffff803`3505c000 Npfs (deferred)
fffff803`35060000 fffff803`35071000 Msfs (deferred)
fffff803`35080000 fffff803`3509b000 CimFS (deferred)
fffff803`350a0000 fffff803`350c2000 tdx (deferred)
fffff803`350d0000 fffff803`350e0000 TDI (deferred)
fffff803`350f0000 fffff803`3514c000 netbt (deferred)
fffff803`35150000 fffff803`35163000 afunix (deferred)
fffff803`35170000 fffff803`35213000 afd (deferred)
fffff803`35220000 fffff803`3523a000 vwififlt (deferred)
fffff803`35240000 fffff803`3526b000 pacer (deferred)
fffff803`35270000 fffff803`35284000 ndiscap (deferred)
fffff803`35290000 fffff803`352a4000 netbios (deferred)
fffff803`352b0000 fffff803`35351000 Vid (deferred)
fffff803`35360000 fffff803`35381000 winhvr (deferred)
fffff803`35390000 fffff803`3540c000 rdbss (deferred)
fffff803`35410000 fffff803`35422000 nsiproxy (deferred)
fffff803`35430000 fffff803`3543e000 npsvctrig (deferred)
fffff803`35440000 fffff803`35450000 mssmbios (deferred)
fffff803`35460000 fffff803`3546a000 gpuenergydrv (deferred)
fffff803`35470000 fffff803`3549c000 dfsc (deferred)
fffff803`354c0000 fffff803`3552c000 fastfat (deferred)
fffff803`35530000 fffff803`35547000 bam (deferred)
fffff803`35550000 fffff803`3559e000 ahcache (deferred)
fffff803`355a0000 fffff803`355ae000 amdxe (deferred)
fffff803`355b0000 fffff803`355ca000 amdfendr (deferred)
fffff803`355d0000 fffff803`355e2000 CompositeBus (deferred)
fffff803`355f0000 fffff803`355fd000 kdnic (deferred)
fffff803`35600000 fffff803`35615000 umbus (deferred)
fffff803`35620000 fffff803`35635000 CAD (deferred)
fffff803`363a0000 fffff803`363d0000 cdrom (deferred)
fffff803`363e0000 fffff803`363f5000 filecrypt (deferred)
fffff803`37200000 fffff803`372e7000 rt640x64 (deferred)
fffff803`37440000 fffff803`38086000 igdkmd64 (deferred)
fffff803`38090000 fffff803`38128000 USBXHCI (deferred)
fffff803`38130000 fffff803`38174000 ucx01000 (deferred)
fffff803`38180000 fffff803`381b0000 TeeDriverW8x64 (deferred)
fffff803`38200000 fffff803`382f0000 wdiwifi (deferred)
fffff803`38300000 fffff803`3830e000 vwifibus (deferred)
fffff803`38310000 fffff803`3831f000 CmBatt (deferred)
fffff803`38320000 fffff803`38330000 BATTC (deferred)
fffff803`38340000 fffff803`38355000 AcpiVpc (deferred)
fffff803`38360000 fffff803`3836c000 ICCWDT (deferred)
fffff803`38370000 fffff803`38391000 i8042prt (deferred)
fffff803`383a0000 fffff803`38421000 ETD (deferred)
fffff803`38430000 fffff803`38444000 kbdclass (deferred)
fffff803`38450000 fffff803`38463000 mouclass (deferred)
fffff803`38470000 fffff803`38495000 HDAudBus (deferred)
fffff803`384a0000 fffff803`38506000 portcls (deferred)
fffff803`38510000 fffff803`38531000 drmk (deferred)
fffff803`38540000 fffff803`385b6000 ks (deferred)
fffff803`385c0000 fffff803`385cc000 wmiacpi (deferred)
fffff803`385d0000 fffff803`38610000 intelppm (deferred)
fffff803`38620000 fffff803`3862b000 acpipagr (deferred)
fffff803`38630000 fffff803`3863e000 UEFI (deferred)
fffff803`38640000 fffff803`3864d000 NdisVirtualBus (deferred)
fffff803`38650000 fffff803`3865c000 swenum (deferred)
fffff803`38660000 fffff803`38664e00 LGBusEnum (deferred)
fffff803`38670000 fffff803`3867c800 LGJoyXlCore (deferred)
fffff803`38680000 fffff803`3868e000 rdpbus (deferred)
fffff803`38690000 fffff803`38818000 CHDRT64 (deferred)
fffff803`38820000 fffff803`3882f000 ksthunk (deferred)
fffff803`38830000 fffff803`388f8000 IntcDAud (deferred)
fffff803`38900000 fffff803`389a3000 UsbHub3 (deferred)
fffff803`389b0000 fffff803`389be000 USBD (deferred)
fffff803`389c0000 fffff803`389f3000 usbccgp (deferred)
fffff803`38a00000 fffff803`38a12000 hidusb (deferred)
fffff803`38a20000 fffff803`38a5f000 HIDCLASS (deferred)
fffff803`38a60000 fffff803`38a73000 HIDPARSE (deferred)
fffff803`38a80000 fffff803`38a95000 LGSHidFilt (deferred)
fffff803`38aa0000 fffff803`38ab0000 mouhid (deferred)
fffff803`38ac0000 fffff803`38ad1000 kbdhid (deferred)
fffff803`38ae0000 fffff803`38b47000 RtsUer (deferred)
fffff803`38cb0000 fffff803`39532000 Netwtw04 (deferred)
fffff803`3b600000 fffff803`3b785000 BTHport (deferred)
fffff803`3b7a0000 fffff803`3b7ae000 dump_diskdump (deferred)
fffff803`3b7d0000 fffff803`3b7ed000 dump_dumpfve (deferred)
fffff803`3b7f0000 fffff803`3b8d2000 dxgmms2 (deferred)
fffff803`3b8e0000 fffff803`3b8fb000 monitor (deferred)
fffff803`3b900000 fffff803`3b929000 luafv (deferred)
fffff803`3b930000 fffff803`3b966000 wcifs (deferred)
fffff803`3b970000 fffff803`3b9f1000 cldflt (deferred)
fffff803`3ba00000 fffff803`3ba14000 mmcss (deferred)
fffff803`3ba20000 fffff803`3ba3a000 storqosflt (deferred)
fffff803`3ba40000 fffff803`3ba68000 bindflt (deferred)
fffff803`3ba90000 fffff803`3baa8000 lltdio (deferred)
fffff803`3bab0000 fffff803`3bac8000 mslldp (deferred)
fffff803`3bad0000 fffff803`3baeb000 rspndr (deferred)
fffff803`3baf0000 fffff803`3bb0d000 wanarp (deferred)
fffff803`3bb10000 fffff803`3bbcb000 nwifi (deferred)
fffff803`3bbd0000 fffff803`3bbe8000 ndisuio (deferred)
fffff803`3bbf0000 fffff803`3bc46000 msquic (deferred)
fffff803`3bc50000 fffff803`3bdd5000 HTTP (deferred)
fffff803`3bde0000 fffff803`3bdf3000 condrv (deferred)
fffff803`3be00000 fffff803`3be1a000 mpsdrv (deferred)
fffff803`3be20000 fffff803`3be45000 bowser (deferred)
fffff803`3be50000 fffff803`3bee3000 mrxsmb (deferred)
fffff803`3bef0000 fffff803`3bf35000 mrxsmb20 (deferred)
fffff803`3bf40000 fffff803`3bf53000 vwifimp (deferred)
fffff803`3bf60000 fffff803`3bf95000 idmwfp (deferred)
fffff803`3bfa0000 fffff803`3bff3000 srvnet (deferred)
fffff803`3c000000 fffff803`3c008000 lgcoretemp (deferred)
fffff803`3c010000 fffff803`3c037000 Ndu (deferred)
fffff803`3c040000 fffff803`3c116000 peauth (deferred)
fffff803`3c120000 fffff803`3c1e7000 srv2 (deferred)
fffff803`3c1f0000 fffff803`3c205000 tcpipreg (deferred)
fffff803`3c210000 fffff803`3c22c000 rassstp (deferred)
fffff803`3c230000 fffff803`3c24d000 NDProxy (deferred)
fffff803`3c250000 fffff803`3c278000 AgileVpn (deferred)
fffff803`3c280000 fffff803`3c2a1000 rasl2tp (deferred)
fffff803`3c2b0000 fffff803`3c2d1000 raspptp (deferred)
fffff803`3c2e0000 fffff803`3c2fc000 raspppoe (deferred)
fffff803`3c300000 fffff803`3c30f000 ndistapi (deferred)
fffff803`3c310000 fffff803`3c34a000 ndiswan (deferred)
fffff803`3c350000 fffff803`3c366000 WdNisDrv (deferred)
fffff803`3c370000 fffff803`3c372500 LGVirHid (deferred)
fffff803`3c380000 fffff803`3c38b000 semav6msr64 (deferred)
fffff803`3e2b0000 fffff803`3e2f0000 ibtusb (deferred)
fffff803`3e300000 fffff803`3e321000 BTHUSB (deferred)
fffff803`3e400000 fffff803`3e41e000 MpKslDrv (deferred)
fffff803`3e8b0000 fffff803`407c0000 rtsuvc (deferred)

Unloaded modules:
fffff803`3c390000 fffff803`3c3a1000 MSKSSRV.sys
fffff803`3e450000 fffff803`3e45b000 drmkaud.sys
fffff803`3e440000 fffff803`3e44e000 MSTEE.sys
fffff803`3e430000 fffff803`3e43d000 MSPQM.sys
fffff803`3e420000 fffff803`3e42d000 MSPCLOCK.sys
fffff803`407f0000 fffff803`407fe000 MSTEE.sys
fffff803`407e0000 fffff803`407ed000 MSPQM.sys
fffff803`407d0000 fffff803`407dd000 MSPCLOCK.sys
fffff803`3c390000 fffff803`3e2a1000 rtsuvc.sys
fffff803`3ba70000 fffff803`3ba81000 MSKSSRV.sys
fffff803`34b30000 fffff803`34b3f000 dump_storpor
fffff803`35770000 fffff803`36353000 dump_iaStorA
fffff803`36380000 fffff803`3639e000 dump_dumpfve
fffff803`354a0000 fffff803`354bc000 dam.sys
fffff803`1f400000 fffff803`1f412000 WdBoot.sys
fffff803`20fb0000 fffff803`20fc1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040921-10281-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff803`63600000 PsLoadedModuleList = 0xfffff803`6422a490
Debug session time: Fri Apr 9 15:40:11.040 2021 (UTC + 3:00)
System Uptime: 0 days 6:46:04.803
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
........................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`639f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff9f03`040bec40=0000000000000139
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff9f03040bef60, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffff9f03040beeb8, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------


KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2733

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 14057

Key : Analysis.Init.CPU.mSec
Value: 327

Key : Analysis.Init.Elapsed.mSec
Value: 3159

Key : Analysis.Memory.CommitPeak.Mb
Value: 74

Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY

Key : FailFast.Type
Value: 3

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: 139

BUGCHECK_P1: 3

BUGCHECK_P2: ffff9f03040bef60

BUGCHECK_P3: ffff9f03040beeb8

BUGCHECK_P4: 0

TRAP_FRAME: ffff9f03040bef60 -- (.trap 0xffff9f03040bef60)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000003
rdx=ffff8903d53d41f0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80363843edf rsp=ffff9f03040bf0f0 rbp=ffff9f03040bf1b9
r8=0000000000000000 r9=0000000000000000 r10=fffff803609af180
r11=ffff9f03040bf2b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz ac po cy
nt!KeWaitForMultipleObjects+0x43f:
fffff803`63843edf cd29 int 29h
Resetting default scope

EXCEPTION_RECORD: ffff9f03040beeb8 -- (.exr 0xffff9f03040beeb8)
ExceptionAddress: fffff80363843edf (nt!KeWaitForMultipleObjects+0x000000000000043f)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: MsMpEng.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000003

EXCEPTION_STR: 0xc0000409

STACK_TEXT:
ffff9f03`040bec38 fffff803`63a07b69 : 00000000`00000139 00000000`00000003 ffff9f03`040bef60 ffff9f03`040beeb8 : nt!KeBugCheckEx
ffff9f03`040bec40 fffff803`63a07f90 : fffff803`609af180 00000000`00000002 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff9f03`040bed80 fffff803`63a06323 : ffffcb01`7b1b6100 ffff02d4`0e952cd1 00000000`00000001 ffff8903`d53d4180 : nt!KiFastFailDispatch+0xd0
ffff9f03`040bef60 fffff803`63843edf : 00000000`000000c8 00000000`00000000 00000000`00000001 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
ffff9f03`040bf0f0 fffff803`63bf7ac0 : ffff9f03`040bf4b0 00000000`00000001 ffff8903`d56f4c30 ffffcb01`7adea180 : nt!KeWaitForMultipleObjects+0x43f
ffff9f03`040bf200 fffff803`63bf7799 : 00000000`00000002 fffff803`6384b0b6 ffff9f03`040bf748 ffff8903`d7928080 : nt!ObWaitForMultipleObjects+0x2f0
ffff9f03`040bf700 fffff803`63a075b5 : ffff9f03`040bfa00 00000000`00000000 ffff8903`d53d4080 ffff8903`d57cf3d0 : nt!NtWaitForMultipleObjects+0x119
ffff9f03`040bf990 00007fff`9e5ad764 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
0000009a`f1dff598 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`9e5ad764


SYMBOL_NAME: nt!KiFastFailDispatch+d0

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: d0

FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}

Followup: MachineOwner
---------

0: kd> lm
start end module name
fffff4e1`1aa00000 fffff4e1`1acd9000 win32kbase (deferred)
fffff4e1`1ace0000 fffff4e1`1b096000 win32kfull (deferred)
fffff4e1`1b0a0000 fffff4e1`1b0ea000 cdd (deferred)
fffff4e1`1b490000 fffff4e1`1b52a000 win32k (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff803`61ac0000 fffff803`61e5d000 mcupdate_GenuineIntel (deferred)
fffff803`61e60000 fffff803`61e66000 hal (deferred)
fffff803`61e70000 fffff803`61e7b000 kd (deferred)
fffff803`61e80000 fffff803`61ea7000 tm (deferred)
fffff803`61eb0000 fffff803`61ebb000 BOOTVID (deferred)
fffff803`63600000 fffff803`64646000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff803`67400000 fffff803`67469000 CLFS (deferred)
fffff803`67470000 fffff803`6748a000 PSHED (deferred)
fffff803`67490000 fffff803`675a3000 clipsp (deferred)
fffff803`675b0000 fffff803`6761f000 FLTMGR (deferred)
fffff803`67620000 fffff803`67649000 ksecdd (deferred)
fffff803`67650000 fffff803`676b2000 msrpc (deferred)
fffff803`676c0000 fffff803`676ce000 cmimcext (deferred)
fffff803`676d0000 fffff803`676e1000 werkernel (deferred)
fffff803`676f0000 fffff803`676fc000 ntosext (deferred)
fffff803`67700000 fffff803`677e3000 CI (deferred)
fffff803`677f0000 fffff803`678a7000 cng (deferred)
fffff803`678b0000 fffff803`67981000 Wdf01000 (deferred)
fffff803`67990000 fffff803`679a3000 WDFLDR (deferred)
fffff803`679b0000 fffff803`679bf000 SleepStudyHelper (deferred)
fffff803`679c0000 fffff803`679d1000 WppRecorder (deferred)
fffff803`679e0000 fffff803`67a06000 acpiex (deferred)
fffff803`67a10000 fffff803`67a2a000 SgrmAgent (deferred)
fffff803`67a30000 fffff803`67afc000 ACPI (deferred)
fffff803`67b00000 fffff803`67b0c000 WMILIB (deferred)
fffff803`67b10000 fffff803`67b1b000 msisadrv (deferred)
fffff803`67b20000 fffff803`67b96000 pci (deferred)
fffff803`67ba0000 fffff803`67be4000 tpm (deferred)
fffff803`67bf0000 fffff803`67bfb000 IntelTA (deferred)
fffff803`67c20000 fffff803`67c8b000 intelpep (deferred)
fffff803`67c90000 fffff803`67ca7000 WindowsTrustedRT (deferred)
fffff803`67cb0000 fffff803`67cbb000 WindowsTrustedRTProxy (deferred)
fffff803`67cc0000 fffff803`67cd4000 pcw (deferred)
fffff803`67ce0000 fffff803`67cf5000 vdrvroot (deferred)
fffff803`67d00000 fffff803`67d2f000 pdc (deferred)
fffff803`67d30000 fffff803`67d49000 CEA (deferred)
fffff803`67d50000 fffff803`67d81000 partmgr (deferred)
fffff803`67d90000 fffff803`67e3a000 spaceport (deferred)
fffff803`67e40000 fffff803`67e59000 volmgr (deferred)
fffff803`67e60000 fffff803`67ec3000 volmgrx (deferred)
fffff803`67ed0000 fffff803`67eee000 mountmgr (deferred)
fffff803`67ef0000 fffff803`68ad2000 iaStorAC (deferred)
fffff803`68ae0000 fffff803`68b93000 storport (deferred)
fffff803`68ba0000 fffff803`68bbc000 EhStorClass (deferred)
fffff803`68bc0000 fffff803`68bda000 fileinfo (deferred)
fffff803`68bf0000 fffff803`68c2f000 Wof (deferred)
fffff803`68c30000 fffff803`68c99000 WdFilter (deferred)
fffff803`68ca0000 fffff803`68f79000 Ntfs (deferred)
fffff803`68f80000 fffff803`68f8d000 Fs_Rec (deferred)
fffff803`68f90000 fffff803`690ff000 ndis (deferred)
fffff803`69100000 fffff803`69198000 NETIO (deferred)
fffff803`691a0000 fffff803`691d2000 ksecpkg (deferred)
fffff803`691e0000 fffff803`694cb000 tcpip (deferred)
fffff803`694d0000 fffff803`6954f000 fwpkclnt (deferred)
fffff803`69550000 fffff803`69580000 wfplwfs (deferred)
fffff803`69590000 fffff803`69658000 fvevol (deferred)
fffff803`69660000 fffff803`69674000 amdkmpfd (deferred)
fffff803`69680000 fffff803`6968b000 volume (deferred)
fffff803`69690000 fffff803`696fd000 volsnap (deferred)
fffff803`69700000 fffff803`69750000 rdyboost (deferred)
fffff803`69760000 fffff803`69786000 mup (deferred)
fffff803`69790000 fffff803`697a2000 iorate (deferred)
fffff803`697d0000 fffff803`697ec000 disk (deferred)
fffff803`697f0000 fffff803`6985c000 CLASSPNP (deferred)
fffff803`7c600000 fffff803`7c61e000 crashdmp (deferred)
fffff803`7c620000 fffff803`7c6f6000 peauth (deferred)
fffff803`7c700000 fffff803`7c7c7000 srv2 (deferred)
fffff803`7c7d0000 fffff803`7c7f8000 AgileVpn (deferred)
fffff803`7c800000 fffff803`7c821000 rasl2tp (deferred)
fffff803`7c830000 fffff803`7c851000 raspptp (deferred)
fffff803`7c860000 fffff803`7c87c000 raspppoe (deferred)
fffff803`7c880000 fffff803`7c8ba000 ndiswan (deferred)
fffff803`7c8c0000 fffff803`7c8d6000 WdNisDrv (deferred)
fffff803`7c8e0000 fffff803`7c8fe000 MpKslDrv (deferred)
fffff803`7c910000 fffff803`7c91b000 semav6msr64 (deferred)
fffff803`7d230000 fffff803`7d29c000 fastfat (deferred)
fffff803`7d2a0000 fffff803`7d2b5000 umbus (deferred)
fffff803`7d2c0000 fffff803`7d2d5000 CAD (deferred)
fffff803`7d2e0000 fffff803`7d468000 CHDRT64 (deferred)
fffff803`7d470000 fffff803`7d538000 IntcDAud (deferred)
fffff803`7d600000 fffff803`7d9a4000 dxgkrnl (deferred)
fffff803`7d9b0000 fffff803`7d9c8000 watchdog (deferred)
fffff803`7d9d0000 fffff803`7d9e6000 BasicDisplay (deferred)
fffff803`7d9f0000 fffff803`7da01000 BasicRender (deferred)
fffff803`7da10000 fffff803`7da2c000 Npfs (deferred)
fffff803`7da30000 fffff803`7da41000 Msfs (deferred)
fffff803`7da50000 fffff803`7da6b000 CimFS (deferred)
fffff803`7da70000 fffff803`7da92000 tdx (deferred)
fffff803`7daa0000 fffff803`7dab0000 TDI (deferred)
fffff803`7dac0000 fffff803`7db1c000 netbt (deferred)
fffff803`7db20000 fffff803`7db33000 afunix (deferred)
fffff803`7db40000 fffff803`7dbe3000 afd (deferred)
fffff803`7dbf0000 fffff803`7dc0a000 vwififlt (deferred)
fffff803`7dc10000 fffff803`7dc3b000 pacer (deferred)
fffff803`7dc40000 fffff803`7dc54000 ndiscap (deferred)
fffff803`7dc60000 fffff803`7dc74000 netbios (deferred)
fffff803`7dc80000 fffff803`7dd21000 Vid (deferred)
fffff803`7dd30000 fffff803`7dd51000 winhvr (deferred)
fffff803`7dd60000 fffff803`7dddc000 rdbss (deferred)
fffff803`7dde0000 fffff803`7ddf2000 nsiproxy (deferred)
fffff803`7de00000 fffff803`7de0e000 npsvctrig (deferred)
fffff803`7de10000 fffff803`7de20000 mssmbios (deferred)
fffff803`7de30000 fffff803`7de3a000 gpuenergydrv (deferred)
fffff803`7de40000 fffff803`7de6c000 dfsc (deferred)
fffff803`7de70000 fffff803`7de7e000 amdxe (deferred)
fffff803`7de80000 fffff803`7de8d000 kdnic (deferred)
fffff803`7de90000 fffff803`7dea7000 bam (deferred)
fffff803`7deb0000 fffff803`7deca000 amdfendr (deferred)
fffff803`7ded0000 fffff803`7dee2000 CompositeBus (deferred)
fffff803`7def0000 fffff803`7ead2000 dump_iaStorAC (deferred)
fffff803`7eae0000 fffff803`7eafc000 rassstp (deferred)
fffff803`7eb00000 fffff803`7eb1d000 NDProxy (deferred)
fffff803`7eb20000 fffff803`7eb50000 cdrom (deferred)
fffff803`7eb60000 fffff803`7eb75000 filecrypt (deferred)
fffff803`7eb80000 fffff803`7eb8e000 tbs (deferred)
fffff803`7eb90000 fffff803`7eb9a000 Null (deferred)
fffff803`7eba0000 fffff803`7ebaa000 Beep (deferred)
fffff803`7ebb0000 fffff803`7ebfe000 ahcache (deferred)
fffff803`7ec00000 fffff803`7ec10000 mouhid (deferred)
fffff803`7ec20000 fffff803`7ec31000 kbdhid (deferred)
fffff803`7f830000 fffff803`7f845000 tcpipreg (deferred)
fffff803`7f850000 fffff803`7f8f3000 UsbHub3 (deferred)
fffff803`7f900000 fffff803`7f90e000 USBD (deferred)
fffff803`7f910000 fffff803`7f943000 usbccgp (deferred)
fffff803`7f950000 fffff803`7f962000 hidusb (deferred)
fffff803`7f970000 fffff803`7f9af000 HIDCLASS (deferred)
fffff803`7f9b0000 fffff803`7f9c3000 HIDPARSE (deferred)
fffff803`7f9d0000 fffff803`7f9e5000 LGSHidFilt (deferred)
fffff803`7f9f0000 fffff803`7f9f2500 LGVirHid (deferred)
fffff803`7fa00000 fffff803`7fae7000 rt640x64 (deferred)
fffff803`7faf0000 fffff803`80372000 Netwtw04 (deferred)
fffff803`80380000 fffff803`80470000 wdiwifi (deferred)
fffff803`80480000 fffff803`8048e000 vwifibus (deferred)
fffff803`80490000 fffff803`8049f000 CmBatt (deferred)
fffff803`804a0000 fffff803`804b0000 BATTC (deferred)
fffff803`804c0000 fffff803`804d5000 AcpiVpc (deferred)
fffff803`804e0000 fffff803`804ec000 ICCWDT (deferred)
fffff803`804f0000 fffff803`80511000 i8042prt (deferred)
fffff803`80520000 fffff803`805a1000 ETD (deferred)
fffff803`805b0000 fffff803`805c4000 kbdclass (deferred)
fffff803`805d0000 fffff803`805e3000 mouclass (deferred)
fffff803`805f0000 fffff803`80615000 HDAudBus (deferred)
fffff803`80620000 fffff803`80686000 portcls (deferred)
fffff803`80690000 fffff803`806b1000 drmk (deferred)
fffff803`806c0000 fffff803`80736000 ks (deferred)
fffff803`80740000 fffff803`8074c000 wmiacpi (deferred)
fffff803`80750000 fffff803`80790000 intelppm (deferred)
fffff803`807a0000 fffff803`807ab000 acpipagr (deferred)
fffff803`807b0000 fffff803`807be000 UEFI (deferred)
fffff803`807c0000 fffff803`807cd000 NdisVirtualBus (deferred)
fffff803`807d0000 fffff803`807dc000 swenum (deferred)
fffff803`807e0000 fffff803`807e4e00 LGBusEnum (deferred)
fffff803`807f0000 fffff803`807fc800 LGJoyXlCore (deferred)
fffff803`80800000 fffff803`81446000 igdkmd64 (deferred)
fffff803`81450000 fffff803`814e8000 USBXHCI (deferred)
fffff803`814f0000 fffff803`81534000 ucx01000 (deferred)
fffff803`81540000 fffff803`81570000 TeeDriverW8x64 (deferred)
fffff803`81580000 fffff803`8158e000 rdpbus (deferred)
fffff803`81590000 fffff803`8159f000 ksthunk (deferred)
fffff803`815a0000 fffff803`815f3000 srvnet (deferred)
fffff803`83600000 fffff803`83785000 BTHport (deferred)
fffff803`837a0000 fffff803`837ae000 dump_diskdump (deferred)
fffff803`837d0000 fffff803`837ed000 dump_dumpfve (deferred)
fffff803`837f0000 fffff803`838d2000 dxgmms2 (deferred)
fffff803`838e0000 fffff803`838fb000 monitor (deferred)
fffff803`83900000 fffff803`83929000 luafv (deferred)
fffff803`83930000 fffff803`83966000 wcifs (deferred)
fffff803`83970000 fffff803`839f1000 cldflt (deferred)
fffff803`83a00000 fffff803`83a14000 mmcss (deferred)
fffff803`83a20000 fffff803`83a3a000 storqosflt (deferred)
fffff803`83a40000 fffff803`83a68000 bindflt (deferred)
fffff803`83a90000 fffff803`83aa8000 lltdio (deferred)
fffff803`83ab0000 fffff803`83ac8000 mslldp (deferred)
fffff803`83ad0000 fffff803`83aeb000 rspndr (deferred)
fffff803`83af0000 fffff803`83b0d000 wanarp (deferred)
fffff803`83b10000 fffff803`83b28000 ndisuio (deferred)
fffff803`83b30000 fffff803`83beb000 nwifi (deferred)
fffff803`83bf0000 fffff803`83c46000 msquic (deferred)
fffff803`83c50000 fffff803`83dd5000 HTTP (deferred)
fffff803`83de0000 fffff803`83df3000 condrv (deferred)
fffff803`83e00000 fffff803`83e25000 bowser (deferred)
fffff803`83e30000 fffff803`83e4a000 mpsdrv (deferred)
fffff803`83e50000 fffff803`83ee3000 mrxsmb (deferred)
fffff803`83ef0000 fffff803`83f17000 Ndu (deferred)
fffff803`83f20000 fffff803`83f2f000 ndistapi (deferred)
fffff803`83f30000 fffff803`85e40000 rtsuvc (deferred)
fffff803`85e50000 fffff803`85eb7000 RtsUer (deferred)
fffff803`85ec0000 fffff803`85f00000 ibtusb (deferred)
fffff803`85f10000 fffff803`85f31000 BTHUSB (deferred)
fffff803`85f40000 fffff803`85f85000 mrxsmb20 (deferred)
fffff803`85f90000 fffff803`85fa3000 vwifimp (deferred)
fffff803`85fb0000 fffff803`85fe5000 idmwfp (deferred)
fffff803`85ff0000 fffff803`85ff8000 lgcoretemp (deferred)

Unloaded modules:
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`83a80000 fffff803`83a8d000 MSPQM.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`7c920000 fffff803`7c92d000 MSPQM.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`83a80000 fffff803`83a8d000 MSPQM.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`7c900000 fffff803`7c90d000 MSPQM.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`7c630000 fffff803`7c63f000 dump_storpor
fffff803`7def0000 fffff803`7ead3000 dump_iaStorA
fffff803`7eb00000 fffff803`7eb1e000 dump_dumpfve
fffff803`7de70000 fffff803`7de8c000 dam.sys
fffff803`67c00000 fffff803`67c12000 WdBoot.sys
fffff803`697b0000 fffff803`697c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040921-10515-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff800`32c00000 PsLoadedModuleList = 0xfffff800`3382a490
Debug session time: Fri Apr 9 08:53:40.627 2021 (UTC + 3:00)
System Uptime: 0 days 16:32:24.206
Loading Kernel Symbols
...............................................................
................................................................
................................................................
......
Loading User Symbols
Loading unloaded module list
.................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`32ff5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff800`36e5d9b0=00000000000000f7
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer. This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned. This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: fffff80036e5d9f0, Actual security check cookie from the stack
Arg2: 00007bf7360090fa, Expected security check cookie
Arg3: ffff8408c9ff6f05, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2811

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 17094

Key : Analysis.Init.CPU.mSec
Value: 343

Key : Analysis.Init.Elapsed.mSec
Value: 4055

Key : Analysis.Memory.CommitPeak.Mb
Value: 78

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: f7

BUGCHECK_P1: fffff80036e5d9f0

BUGCHECK_P2: 7bf7360090fa

BUGCHECK_P3: ffff8408c9ff6f05

BUGCHECK_P4: 0

SECURITY_COOKIE: Expected 00007bf7360090fa found fffff80036e5d9f0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

STACK_TEXT:
fffff800`36e5d9a8 fffff800`330b0cd5 : 00000000`000000f7 fffff800`36e5d9f0 00007bf7`360090fa ffff8408`c9ff6f05 : nt!KeBugCheckEx
fffff800`36e5d9b0 fffff800`32e70188 : 00000000`00000000 00001f80`0000000d 00000000`00000003 00000000`00000002 : nt!_report_gsfailure+0x25
fffff800`36e5d9f0 fffff800`32ff9774 : 00000000`00000000 fffff800`33927600 ffffd208`8fd5f040 00000000`0000128e : nt!PoIdle+0x3a8
fffff800`36e5db60 00000000`00000000 : fffff800`36e5e000 fffff800`36e57000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x54


SYMBOL_NAME: nt!_report_gsfailure+25

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 25

FAILURE_BUCKET_ID: 0xF7_MISSING_GSFRAME_nt!_report_gsfailure

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}

Followup: MachineOwner
---------

0: kd> lm
start end module name
ffff8613`6e400000 ffff8613`6e6d9000 win32kbase (deferred)
ffff8613`6e6e0000 ffff8613`6ea96000 win32kfull (deferred)
ffff8613`6eaa0000 ffff8613`6eaea000 cdd (deferred)
ffff8613`6ed20000 ffff8613`6edba000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff800`2ead0000 fffff800`2ee6d000 mcupdate_GenuineIntel (deferred)
fffff800`2ee70000 fffff800`2ee76000 hal (deferred)
fffff800`2ee80000 fffff800`2ee8b000 kd (deferred)
fffff800`2ee90000 fffff800`2eeb7000 tm (deferred)
fffff800`2eec0000 fffff800`2eecb000 BOOTVID (deferred)
fffff800`32c00000 fffff800`33c46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff800`34400000 fffff800`34469000 CLFS (deferred)
fffff800`34470000 fffff800`3448a000 PSHED (deferred)
fffff800`34490000 fffff800`345a3000 clipsp (deferred)
fffff800`345b0000 fffff800`3461f000 FLTMGR (deferred)
fffff800`34620000 fffff800`34649000 ksecdd (deferred)
fffff800`34650000 fffff800`346b2000 msrpc (deferred)
fffff800`346c0000 fffff800`346ce000 cmimcext (deferred)
fffff800`346d0000 fffff800`346e1000 werkernel (deferred)
fffff800`346f0000 fffff800`346fc000 ntosext (deferred)
fffff800`34700000 fffff800`347e3000 CI (deferred)
fffff800`347f0000 fffff800`348a7000 cng (deferred)
fffff800`348b0000 fffff800`34981000 Wdf01000 (deferred)
fffff800`34990000 fffff800`349a3000 WDFLDR (deferred)
fffff800`349b0000 fffff800`349bf000 SleepStudyHelper (deferred)
fffff800`349c0000 fffff800`349d1000 WppRecorder (deferred)
fffff800`349e0000 fffff800`34a06000 acpiex (deferred)
fffff800`34a10000 fffff800`34a2a000 SgrmAgent (deferred)
fffff800`34a30000 fffff800`34afc000 ACPI (deferred)
fffff800`34b00000 fffff800`34b0c000 WMILIB (deferred)
fffff800`34b10000 fffff800`34b1b000 msisadrv (deferred)
fffff800`34b20000 fffff800`34b96000 pci (deferred)
fffff800`34ba0000 fffff800`34be4000 tpm (deferred)
fffff800`34bf0000 fffff800`34bfb000 IntelTA (deferred)
fffff800`34c20000 fffff800`34c8b000 intelpep (deferred)
fffff800`34c90000 fffff800`34ca7000 WindowsTrustedRT (deferred)
fffff800`34cb0000 fffff800`34cbb000 WindowsTrustedRTProxy (deferred)
fffff800`34cc0000 fffff800`34cd4000 pcw (deferred)
fffff800`34ce0000 fffff800`34cf5000 vdrvroot (deferred)
fffff800`34d00000 fffff800`34d2f000 pdc (deferred)
fffff800`34d30000 fffff800`34d49000 CEA (deferred)
fffff800`34d50000 fffff800`34d81000 partmgr (deferred)
fffff800`34d90000 fffff800`34e3a000 spaceport (deferred)
fffff800`34e40000 fffff800`34e59000 volmgr (deferred)
fffff800`34e60000 fffff800`34ec3000 volmgrx (deferred)
fffff800`34ed0000 fffff800`34eee000 mountmgr (deferred)
fffff800`34ef0000 fffff800`35ad2000 iaStorAC (deferred)
fffff800`35ae0000 fffff800`35b93000 storport (deferred)
fffff800`35ba0000 fffff800`35bbc000 EhStorClass (deferred)
fffff800`35bc0000 fffff800`35bda000 fileinfo (deferred)
fffff800`35bf0000 fffff800`35c2f000 Wof (deferred)
fffff800`35c30000 fffff800`35c99000 WdFilter (deferred)
fffff800`35ca0000 fffff800`35f79000 Ntfs (deferred)
fffff800`35f80000 fffff800`35f8d000 Fs_Rec (deferred)
fffff800`35f90000 fffff800`360ff000 ndis (deferred)
fffff800`36100000 fffff800`36198000 NETIO (deferred)
fffff800`361a0000 fffff800`361d2000 ksecpkg (deferred)
fffff800`361e0000 fffff800`364cb000 tcpip (deferred)
fffff800`364d0000 fffff800`3654f000 fwpkclnt (deferred)
fffff800`36550000 fffff800`36580000 wfplwfs (deferred)
fffff800`36590000 fffff800`36658000 fvevol (deferred)
fffff800`36660000 fffff800`36674000 amdkmpfd (deferred)
fffff800`36680000 fffff800`3668b000 volume (deferred)
fffff800`36690000 fffff800`366fd000 volsnap (deferred)
fffff800`36700000 fffff800`36750000 rdyboost (deferred)
fffff800`36760000 fffff800`36786000 mup (deferred)
fffff800`36790000 fffff800`367a2000 iorate (deferred)
fffff800`367d0000 fffff800`367ec000 disk (deferred)
fffff800`367f0000 fffff800`3685c000 CLASSPNP (deferred)
fffff800`49600000 fffff800`4961e000 crashdmp (deferred)
fffff800`49660000 fffff800`49674000 qwavedrv (deferred)
fffff800`49e00000 fffff800`49ee2000 dxgmms2 (deferred)
fffff800`49ef0000 fffff800`49f0b000 monitor (deferred)
fffff800`49f10000 fffff800`49f39000 luafv (deferred)
fffff800`49f40000 fffff800`49f76000 wcifs (deferred)
fffff800`49f80000 fffff800`4ab62000 dump_iaStorAC (deferred)
fffff800`4ab90000 fffff800`4abad000 dump_dumpfve (deferred)
fffff800`4abb0000 fffff800`4abca000 storqosflt (deferred)
fffff800`4abd0000 fffff800`4abe4000 mmcss (deferred)
fffff800`4abf0000 fffff800`4abf8000 lgcoretemp (deferred)
fffff800`4c000000 fffff800`4c015000 filecrypt (deferred)
fffff800`4c020000 fffff800`4c02e000 tbs (deferred)
fffff800`4c030000 fffff800`4c03a000 Null (deferred)
fffff800`4c040000 fffff800`4c04a000 Beep (deferred)
fffff800`4c050000 fffff800`4c3f4000 dxgkrnl (deferred)
fffff800`4c400000 fffff800`4c418000 watchdog (deferred)
fffff800`4c420000 fffff800`4c436000 BasicDisplay (deferred)
fffff800`4c440000 fffff800`4c451000 BasicRender (deferred)
fffff800`4c460000 fffff800`4c47c000 Npfs (deferred)
fffff800`4c480000 fffff800`4c491000 Msfs (deferred)
fffff800`4c4a0000 fffff800`4c4bb000 CimFS (deferred)
fffff800`4c4c0000 fffff800`4c4e2000 tdx (deferred)
fffff800`4c4f0000 fffff800`4c500000 TDI (deferred)
fffff800`4c510000 fffff800`4c56c000 netbt (deferred)
fffff800`4c570000 fffff800`4c583000 afunix (deferred)
fffff800`4c590000 fffff800`4c633000 afd (deferred)
fffff800`4c640000 fffff800`4c65a000 vwififlt (deferred)
fffff800`4c660000 fffff800`4c68b000 pacer (deferred)
fffff800`4c690000 fffff800`4c6a4000 ndiscap (deferred)
fffff800`4c6b0000 fffff800`4c6c4000 netbios (deferred)
fffff800`4c6d0000 fffff800`4c771000 Vid (deferred)
fffff800`4c780000 fffff800`4c7a1000 winhvr (deferred)
fffff800`4c7b0000 fffff800`4c82c000 rdbss (deferred)
fffff800`4c830000 fffff800`4c842000 nsiproxy (deferred)
fffff800`4c850000 fffff800`4c85e000 npsvctrig (deferred)
fffff800`4c860000 fffff800`4c870000 mssmbios (deferred)
fffff800`4c880000 fffff800`4c88a000 gpuenergydrv (deferred)
fffff800`4c890000 fffff800`4c8bc000 dfsc (deferred)
fffff800`4c8c0000 fffff800`4c8de000 MpKslDrv (deferred)
fffff800`4c8e0000 fffff800`4c94c000 fastfat (deferred)
fffff800`4c950000 fffff800`4c967000 bam (deferred)
fffff800`4c970000 fffff800`4c9be000 ahcache (deferred)
fffff800`4c9c0000 fffff800`4c9ce000 amdxe (deferred)
fffff800`4c9d0000 fffff800`4c9ea000 amdfendr (deferred)
fffff800`4c9f0000 fffff800`4ca02000 CompositeBus (deferred)
fffff800`4ca10000 fffff800`4ca1d000 kdnic (deferred)
fffff800`4ca20000 fffff800`4ca35000 umbus (deferred)
fffff800`4ca40000 fffff800`4ca55000 CAD (deferred)
fffff800`4d650000 fffff800`4d717000 srv2 (deferred)
fffff800`4d720000 fffff800`4d741000 raspptp (deferred)
fffff800`4d750000 fffff800`4d78a000 ndiswan (deferred)
fffff800`4d790000 fffff800`4d7a6000 WdNisDrv (deferred)
fffff800`4d7b0000 fffff800`4d7e0000 cdrom (deferred)
fffff800`4e600000 fffff800`4e6e7000 rt640x64 (deferred)
fffff800`4e6f0000 fffff800`4e875000 HTTP (deferred)
fffff800`4e880000 fffff800`4e8d3000 srvnet (deferred)
fffff800`4e8e0000 fffff800`4e9b6000 peauth (deferred)
fffff800`4e9c0000 fffff800`4e9dd000 NDProxy (deferred)
fffff800`4e9e0000 fffff800`4e9ef000 ndistapi (deferred)
fffff800`4ea00000 fffff800`4f646000 igdkmd64 (deferred)
fffff800`4f650000 fffff800`4f6e8000 USBXHCI (deferred)
fffff800`4f6f0000 fffff800`4f734000 ucx01000 (deferred)
fffff800`4f740000 fffff800`4f770000 TeeDriverW8x64 (deferred)
fffff800`4f780000 fffff800`4f7a8000 AgileVpn (deferred)
fffff800`4f7b0000 fffff800`4f7d1000 rasl2tp (deferred)
fffff800`4f7e0000 fffff800`4f7fc000 raspppoe (deferred)
fffff800`4f800000 fffff800`4f8f0000 wdiwifi (deferred)
fffff800`4f900000 fffff800`4f90e000 vwifibus (deferred)
fffff800`4f910000 fffff800`4f91f000 CmBatt (deferred)
fffff800`4f920000 fffff800`4f930000 BATTC (deferred)
fffff800`4f940000 fffff800`4f955000 AcpiVpc (deferred)
fffff800`4f960000 fffff800`4f96c000 ICCWDT (deferred)
fffff800`4f970000 fffff800`4f991000 i8042prt (deferred)
fffff800`4f9a0000 fffff800`4fa21000 ETD (deferred)
fffff800`4fa30000 fffff800`4fa44000 kbdclass (deferred)
fffff800`4fa50000 fffff800`4fa63000 mouclass (deferred)
fffff800`4fa70000 fffff800`4fa95000 HDAudBus (deferred)
fffff800`4faa0000 fffff800`4fb06000 portcls (deferred)
fffff800`4fb10000 fffff800`4fb31000 drmk (deferred)
fffff800`4fb40000 fffff800`4fbb6000 ks (deferred)
fffff800`4fbc0000 fffff800`4fbcc000 wmiacpi (deferred)
fffff800`4fbd0000 fffff800`4fc10000 intelppm (deferred)
fffff800`4fc20000 fffff800`4fc2b000 acpipagr (deferred)
fffff800`4fc30000 fffff800`4fc3e000 UEFI (deferred)
fffff800`4fc40000 fffff800`4fc4d000 NdisVirtualBus (deferred)
fffff800`4fc50000 fffff800`4fc5c000 swenum (deferred)
fffff800`4fc60000 fffff800`4fc64e00 LGBusEnum (deferred)
fffff800`4fc70000 fffff800`4fc7c800 LGJoyXlCore (deferred)
fffff800`4fc80000 fffff800`4fc8e000 rdpbus (deferred)
fffff800`4fc90000 fffff800`4fd33000 UsbHub3 (deferred)
fffff800`4fd40000 fffff800`4fd4e000 USBD (deferred)
fffff800`4fd50000 fffff800`4fed8000 CHDRT64 (deferred)
fffff800`4fee0000 fffff800`4feef000 ksthunk (deferred)
fffff800`4fef0000 fffff800`4ffb8000 IntcDAud (deferred)
fffff800`4ffc0000 fffff800`4fff3000 usbccgp (deferred)
fffff800`50000000 fffff800`50012000 hidusb (deferred)
fffff800`50020000 fffff800`5005f000 HIDCLASS (deferred)
fffff800`50060000 fffff800`50073000 HIDPARSE (deferred)
fffff800`50080000 fffff800`50095000 LGSHidFilt (deferred)
fffff800`500a0000 fffff800`500b0000 mouhid (deferred)
fffff800`500c0000 fffff800`500d1000 kbdhid (deferred)
fffff800`500e0000 fffff800`50107000 Ndu (deferred)
fffff800`50110000 fffff800`50992000 Netwtw04 (deferred)
fffff800`509a0000 fffff800`509d5000 idmwfp (deferred)
fffff800`509e0000 fffff800`509fc000 rassstp (deferred)
fffff800`54a00000 fffff800`54b85000 BTHport (deferred)
fffff800`54ba0000 fffff800`54bae000 dump_diskdump (deferred)
fffff800`54bb0000 fffff800`54c31000 cldflt (deferred)
fffff800`54c40000 fffff800`54c68000 bindflt (deferred)
fffff800`54c70000 fffff800`54c72500 LGVirHid (deferred)
fffff800`54c80000 fffff800`54c8b000 semav6msr64 (deferred)
fffff800`54c90000 fffff800`54ca8000 lltdio (deferred)
fffff800`54cb0000 fffff800`54cc8000 mslldp (deferred)
fffff800`54cd0000 fffff800`54ceb000 rspndr (deferred)
fffff800`54cf0000 fffff800`54d0d000 wanarp (deferred)
fffff800`54d10000 fffff800`54dcb000 nwifi (deferred)
fffff800`54dd0000 fffff800`54de8000 ndisuio (deferred)
fffff800`54df0000 fffff800`54e46000 msquic (deferred)
fffff800`54e50000 fffff800`54e63000 condrv (deferred)
fffff800`54e70000 fffff800`54e95000 bowser (deferred)
fffff800`54ea0000 fffff800`54eba000 mpsdrv (deferred)
fffff800`54ec0000 fffff800`54f05000 mrxsmb20 (deferred)
fffff800`54f10000 fffff800`56e20000 rtsuvc (deferred)
fffff800`56e30000 fffff800`56e97000 RtsUer (deferred)
fffff800`56ea0000 fffff800`56ee0000 ibtusb (deferred)
fffff800`56ef0000 fffff800`56f11000 BTHUSB (deferred)
fffff800`56f20000 fffff800`56fb3000 mrxsmb (deferred)
fffff800`56fc0000 fffff800`56fd3000 vwifimp (deferred)
fffff800`56fe0000 fffff800`56ff5000 tcpipreg (deferred)

Unloaded modules:
fffff800`4e9f0000 fffff800`4e9fd000 MSPQM.sys
fffff800`49760000 fffff800`49771000 MSKSSRV.sys
fffff800`49740000 fffff800`49751000 MSKSSRV.sys
fffff800`49720000 fffff800`49731000 MSKSSRV.sys
fffff800`49700000 fffff800`49711000 MSKSSRV.sys
fffff800`496e0000 fffff800`496f1000 MSKSSRV.sys
fffff800`496c0000 fffff800`496d1000 MSKSSRV.sys
fffff800`496a0000 fffff800`496b1000 MSKSSRV.sys
fffff800`49680000 fffff800`49691000 MSKSSRV.sys
fffff800`49640000 fffff800`49651000 MSKSSRV.sys
fffff800`54c70000 fffff800`54c81000 MSKSSRV.sys
fffff800`49630000 fffff800`4963f000 dump_storpor
fffff800`4cb80000 fffff800`4d763000 dump_iaStorA
fffff800`4d790000 fffff800`4d7ae000 dump_dumpfve
fffff800`4c8c0000 fffff800`4c8dc000 dam.sys
fffff800`34c00000 fffff800`34c12000 WdBoot.sys
fffff800`367b0000 fffff800`367c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\041121-10187-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff806`7e400000 PsLoadedModuleList = 0xfffff806`7f02a490
Debug session time: Sun Apr 11 19:05:54.450 2021 (UTC + 3:00)
System Uptime: 0 days 6:51:13.213
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
..................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff806`7e7f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffe380`a973d420=0000000000000139
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffe380a973d740, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffe380a973d698, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for Netwtw04.sys
*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 3812

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 66824

Key : Analysis.Init.CPU.mSec
Value: 327

Key : Analysis.Init.Elapsed.mSec
Value: 7868

Key : Analysis.Memory.CommitPeak.Mb
Value: 87

Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY

Key : FailFast.Type
Value: 3

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: 139

BUGCHECK_P1: 3

BUGCHECK_P2: ffffe380a973d740

BUGCHECK_P3: ffffe380a973d698

BUGCHECK_P4: 0

TRAP_FRAME: ffffe380a973d740 -- (.trap 0xffffe380a973d740)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=0000000000000003
rdx=ffff94824b8c7d88 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80684997f8c rsp=ffffe380a973d8d0 rbp=ffff948242fd49c0
r8=ffff94824d0702a8 r9=ffffe380a973d9d0 r10=fffff8067e6e4740
r11=ffff94825138b490 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
ndis!ndisFreeNblToNPagedPool+0x7c:
fffff806`84997f8c cd29 int 29h
Resetting default scope

EXCEPTION_RECORD: ffffe380a973d698 -- (.exr 0xffffe380a973d698)
ExceptionAddress: fffff80684997f8c (ndis!ndisFreeNblToNPagedPool+0x000000000000007c)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000003

EXCEPTION_STR: 0xc0000409

STACK_TEXT:
ffffe380`a973d418 fffff806`7e807b69 : 00000000`00000139 00000000`00000003 ffffe380`a973d740 ffffe380`a973d698 : nt!KeBugCheckEx
ffffe380`a973d420 fffff806`7e807f90 : ffffe380`a973d9c0 ffff9482`3d5ea500 0000f990`00000000 ffff9482`501d9a40 : nt!KiBugCheckDispatch+0x69
ffffe380`a973d560 fffff806`7e806323 : 00000000`00000000 fffff806`84bf76ac 00000000`00000007 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffe380`a973d740 fffff806`84997f8c : ffff9482`430aca40 ffff9482`4b8c7da0 00000000`00000001 ffff9482`4aff5a90 : nt!KiRaiseSecurityCheckFailure+0x323
ffffe380`a973d8d0 fffff806`8499542d : ffff9482`3e7fdae0 fffff806`9dae4735 ffff9482`4aff5a20 fffff806`84b19147 : ndis!ndisFreeNblToNPagedPool+0x7c
ffffe380`a973d900 fffff806`9d9dac01 : ffff9482`3d84aad0 ffff9482`4b8c7da0 ffff9482`3e814dc0 fffff806`9e2395af : ndis!NdisFreeNetBufferList+0x11d
ffffe380`a973d940 ffff9482`3d84aad0 : ffff9482`4b8c7da0 ffff9482`3e814dc0 fffff806`9e2395af ffff9482`00000000 : Netwtw04+0x5ac01
ffffe380`a973d948 ffff9482`4b8c7da0 : ffff9482`3e814dc0 fffff806`9e2395af ffff9482`00000000 fffff806`9ddce4f0 : 0xffff9482`3d84aad0
ffffe380`a973d950 ffff9482`3e814dc0 : fffff806`9e2395af ffff9482`00000000 fffff806`9ddce4f0 ffffe380`a973d901 : 0xffff9482`4b8c7da0
ffffe380`a973d958 fffff806`9e2395af : ffff9482`00000000 fffff806`9ddce4f0 ffffe380`a973d901 00000000`00080000 : 0xffff9482`3e814dc0
ffffe380`a973d960 ffff9482`42fd49c0 : ffff9482`3d5726d0 ffff9482`4b8c7da0 ffff9482`4eb33dc0 00000000`00000000 : wdiwifi!CAdapter::FreeWfcFrame+0xaf
ffffe380`a973d9a0 ffff9482`3d5726d0 : ffff9482`4b8c7da0 ffff9482`4eb33dc0 00000000`00000000 ffff9482`3d5726d0 : 0xffff9482`42fd49c0
ffffe380`a973d9a8 ffff9482`4b8c7da0 : ffff9482`4eb33dc0 00000000`00000000 ffff9482`3d5726d0 fffff806`9d9c3823 : 0xffff9482`3d5726d0
ffffe380`a973d9b0 ffff9482`4eb33dc0 : 00000000`00000000 ffff9482`3d5726d0 fffff806`9d9c3823 00000000`00000000 : 0xffff9482`4b8c7da0
ffffe380`a973d9b8 00000000`00000000 : ffff9482`3d5726d0 fffff806`9d9c3823 00000000`00000000 00000000`00000000 : 0xffff9482`4eb33dc0


SYMBOL_NAME: Netwtw04+5ac01

MODULE_NAME: Netwtw04

IMAGE_NAME: Netwtw04.sys

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 5ac01

FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_Netwtw04!unknown_function

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {1af349bb-d631-4907-5a48-ea9e99f38d40}

Followup: MachineOwner
---------

2: kd> lm
start end module name
ffff81b5`6be00000 ffff81b5`6c0d9000 win32kbase (deferred)
ffff81b5`6c0e0000 ffff81b5`6c496000 win32kfull (deferred)
ffff81b5`6c4a0000 ffff81b5`6c4ea000 cdd (deferred)
ffff81b5`6c990000 ffff81b5`6ca2a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff806`7c400000 fffff806`7c453000 srvnet (deferred)
fffff806`7c460000 fffff806`7c487000 Ndu (deferred)
fffff806`7c490000 fffff806`7c566000 peauth (deferred)
fffff806`7c570000 fffff806`7c585000 tcpipreg (deferred)
fffff806`7c590000 fffff806`7c598000 lgcoretemp (deferred)
fffff806`7c5a0000 fffff806`7c667000 srv2 (deferred)
fffff806`7c670000 fffff806`7c68c000 rassstp (deferred)
fffff806`7c690000 fffff806`7c6ad000 NDProxy (deferred)
fffff806`7c6b0000 fffff806`7c6d8000 AgileVpn (deferred)
fffff806`7c6e0000 fffff806`7c701000 rasl2tp (deferred)
fffff806`7c710000 fffff806`7c731000 raspptp (deferred)
fffff806`7c740000 fffff806`7c75c000 raspppoe (deferred)
fffff806`7c760000 fffff806`7c76f000 ndistapi (deferred)
fffff806`7c770000 fffff806`7c7aa000 ndiswan (deferred)
fffff806`7c7d0000 fffff806`7c7d2500 LGVirHid (deferred)
fffff806`7c800000 fffff806`7c80b000 semav6msr64 (deferred)
fffff806`7c830000 fffff806`7c89a000 WdFilter (deferred)
fffff806`7c8a0000 fffff806`7c8be000 MpKslDrv (deferred)
fffff806`7c8c0000 fffff806`7c8d6000 WdNisDrv (deferred)
fffff806`7cc90000 fffff806`7ce15000 HTTP (deferred)
fffff806`7ce20000 fffff806`7ce3a000 mpsdrv (deferred)
fffff806`7ce40000 fffff806`7ce65000 bowser (deferred)
fffff806`7ce70000 fffff806`7ce83000 condrv (deferred)
fffff806`7ce90000 fffff806`7cf23000 mrxsmb (deferred)
fffff806`7cf30000 fffff806`7cf75000 mrxsmb20 (deferred)
fffff806`7cf80000 fffff806`7cf93000 vwifimp (deferred)
fffff806`7cfa0000 fffff806`7cfd5000 idmwfp (deferred)
fffff806`7d4f0000 fffff806`7d88d000 mcupdate_GenuineIntel (deferred)
fffff806`7d890000 fffff806`7d896000 hal (deferred)
fffff806`7d8a0000 fffff806`7d8ab000 kd (deferred)
fffff806`7d8b0000 fffff806`7d8d7000 tm (deferred)
fffff806`7d8e0000 fffff806`7d8eb000 BOOTVID (deferred)
fffff806`7e400000 fffff806`7f446000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff806`82e00000 fffff806`82e69000 CLFS (deferred)
fffff806`82e70000 fffff806`82e8a000 PSHED (deferred)
fffff806`82e90000 fffff806`82fa3000 clipsp (deferred)
fffff806`82fb0000 fffff806`8301f000 FLTMGR (deferred)
fffff806`83020000 fffff806`83049000 ksecdd (deferred)
fffff806`83050000 fffff806`830b2000 msrpc (deferred)
fffff806`830c0000 fffff806`830ce000 cmimcext (deferred)
fffff806`830d0000 fffff806`830e1000 werkernel (deferred)
fffff806`830f0000 fffff806`830fc000 ntosext (deferred)
fffff806`83100000 fffff806`831e3000 CI (deferred)
fffff806`831f0000 fffff806`832a7000 cng (deferred)
fffff806`832b0000 fffff806`83381000 Wdf01000 (deferred)
fffff806`83390000 fffff806`833a3000 WDFLDR (deferred)
fffff806`833b0000 fffff806`833bf000 SleepStudyHelper (deferred)
fffff806`833c0000 fffff806`833d1000 WppRecorder (deferred)
fffff806`833e0000 fffff806`83406000 acpiex (deferred)
fffff806`83410000 fffff806`8342a000 SgrmAgent (deferred)
fffff806`83430000 fffff806`834fc000 ACPI (deferred)
fffff806`83500000 fffff806`8350c000 WMILIB (deferred)
fffff806`83510000 fffff806`8351b000 msisadrv (deferred)
fffff806`83520000 fffff806`83596000 pci (deferred)
fffff806`835a0000 fffff806`835e4000 tpm (deferred)
fffff806`835f0000 fffff806`835fb000 IntelTA (deferred)
fffff806`83620000 fffff806`8368b000 intelpep (deferred)
fffff806`83690000 fffff806`836a7000 WindowsTrustedRT (deferred)
fffff806`836b0000 fffff806`836bb000 WindowsTrustedRTProxy (deferred)
fffff806`836c0000 fffff806`836d4000 pcw (deferred)
fffff806`836e0000 fffff806`836f5000 vdrvroot (deferred)
fffff806`83700000 fffff806`8372f000 pdc (deferred)
fffff806`83730000 fffff806`83749000 CEA (deferred)
fffff806`83750000 fffff806`83781000 partmgr (deferred)
fffff806`83790000 fffff806`8383a000 spaceport (deferred)
fffff806`83840000 fffff806`83859000 volmgr (deferred)
fffff806`83860000 fffff806`838c3000 volmgrx (deferred)
fffff806`838d0000 fffff806`838ee000 mountmgr (deferred)
fffff806`838f0000 fffff806`844d2000 iaStorAC (deferred)
fffff806`844e0000 fffff806`84593000 storport (deferred)
fffff806`845a0000 fffff806`845bc000 EhStorClass (deferred)
fffff806`845c0000 fffff806`845da000 fileinfo (deferred)
fffff806`845f0000 fffff806`8462f000 Wof (deferred)
fffff806`846a0000 fffff806`84979000 Ntfs (deferred)
fffff806`84980000 fffff806`8498d000 Fs_Rec (deferred)
fffff806`84990000 fffff806`84aff000 ndis (pdb symbols) C:\ProgramData\Dbg\sym\ndis.pdb\CE00DB8867ECE459409E420F8AB285E61\ndis.pdb
fffff806`84b00000 fffff806`84b98000 NETIO (deferred)
fffff806`84ba0000 fffff806`84bd2000 ksecpkg (deferred)
fffff806`84be0000 fffff806`84ecb000 tcpip (deferred)
fffff806`84ed0000 fffff806`84f4f000 fwpkclnt (deferred)
fffff806`84f50000 fffff806`84f80000 wfplwfs (deferred)
fffff806`84f90000 fffff806`85058000 fvevol (deferred)
fffff806`85060000 fffff806`85074000 amdkmpfd (deferred)
fffff806`85080000 fffff806`8508b000 volume (deferred)
fffff806`85090000 fffff806`850fd000 volsnap (deferred)
fffff806`85100000 fffff806`85150000 rdyboost (deferred)
fffff806`85160000 fffff806`85186000 mup (deferred)
fffff806`85190000 fffff806`851a2000 iorate (deferred)
fffff806`851d0000 fffff806`851ec000 disk (deferred)
fffff806`851f0000 fffff806`8525c000 CLASSPNP (deferred)
fffff806`98000000 fffff806`983a4000 dxgkrnl (deferred)
fffff806`983b0000 fffff806`98451000 Vid (deferred)
fffff806`98460000 fffff806`984dc000 rdbss (deferred)
fffff806`984e0000 fffff806`984f0000 mssmbios (deferred)
fffff806`98500000 fffff806`9852c000 dfsc (deferred)
fffff806`98550000 fffff806`985bc000 fastfat (deferred)
fffff806`985c0000 fffff806`985d7000 bam (deferred)
fffff806`985e0000 fffff806`9862e000 ahcache (deferred)
fffff806`98630000 fffff806`9864a000 amdfendr (deferred)
fffff806`98650000 fffff806`98662000 CompositeBus (deferred)
fffff806`98670000 fffff806`9867d000 kdnic (deferred)
fffff806`98680000 fffff806`98695000 umbus (deferred)
fffff806`986a0000 fffff806`986b5000 CAD (deferred)
fffff806`986c0000 fffff806`987a7000 rt640x64 (deferred)
fffff806`987b0000 fffff806`98806000 msquic (deferred)
fffff806`988d0000 fffff806`988ee000 crashdmp (deferred)
fffff806`99600000 fffff806`9a1e2000 dump_iaStorAC (deferred)
fffff806`9a230000 fffff806`9a260000 cdrom (deferred)
fffff806`9a270000 fffff806`9a285000 filecrypt (deferred)
fffff806`9a290000 fffff806`9a29e000 tbs (deferred)
fffff806`9a2a0000 fffff806`9a2aa000 Null (deferred)
fffff806`9a2b0000 fffff806`9a2ba000 Beep (deferred)
fffff806`9a2c0000 fffff806`9a2d8000 watchdog (deferred)
fffff806`9a2e0000 fffff806`9a2f6000 BasicDisplay (deferred)
fffff806`9a300000 fffff806`9a311000 BasicRender (deferred)
fffff806`9a320000 fffff806`9a33c000 Npfs (deferred)
fffff806`9a340000 fffff806`9a351000 Msfs (deferred)
fffff806`9a360000 fffff806`9a37b000 CimFS (deferred)
fffff806`9a380000 fffff806`9a3a2000 tdx (deferred)
fffff806`9a3b0000 fffff806`9a3c0000 TDI (deferred)
fffff806`9a3d0000 fffff806`9a42c000 netbt (deferred)
fffff806`9a430000 fffff806`9a443000 afunix (deferred)
fffff806`9a450000 fffff806`9a4f3000 afd (deferred)
fffff806`9a500000 fffff806`9a51a000 vwififlt (deferred)
fffff806`9a520000 fffff806`9a52e000 amdxe (deferred)
fffff806`9b120000 fffff806`9b14b000 pacer (deferred)
fffff806`9b150000 fffff806`9b164000 ndiscap (deferred)
fffff806`9b170000 fffff806`9b184000 netbios (deferred)
fffff806`9b190000 fffff806`9b1b1000 winhvr (deferred)
fffff806`9b1c0000 fffff806`9b1d2000 nsiproxy (deferred)
fffff806`9b1e0000 fffff806`9b1ee000 npsvctrig (deferred)
fffff806`9b1f0000 fffff806`9b1fa000 gpuenergydrv (deferred)
fffff806`9c000000 fffff806`9c098000 USBXHCI (deferred)
fffff806`9c0a0000 fffff806`9c0e4000 ucx01000 (deferred)
fffff806`9c0f0000 fffff806`9c120000 TeeDriverW8x64 (deferred)
fffff806`9c160000 fffff806`9cda6000 igdkmd64 (deferred)
fffff806`9ce00000 fffff806`9ce81000 ETD (deferred)
fffff806`9ce90000 fffff806`9cea4000 kbdclass (deferred)
fffff806`9ceb0000 fffff806`9cec3000 mouclass (deferred)
fffff806`9ced0000 fffff806`9cef5000 HDAudBus (deferred)
fffff806`9cf00000 fffff806`9cf66000 portcls (deferred)
fffff806`9cf70000 fffff806`9cf91000 drmk (deferred)
fffff806`9cfa0000 fffff806`9d016000 ks (deferred)
fffff806`9d020000 fffff806`9d02c000 wmiacpi (deferred)
fffff806`9d030000 fffff806`9d070000 intelppm (deferred)
fffff806`9d080000 fffff806`9d08b000 acpipagr (deferred)
fffff806`9d090000 fffff806`9d09e000 UEFI (deferred)
fffff806`9d0a0000 fffff806`9d0ad000 NdisVirtualBus (deferred)
fffff806`9d0b0000 fffff806`9d0bc000 swenum (deferred)
fffff806`9d0c0000 fffff806`9d0c4e00 LGBusEnum (deferred)
fffff806`9d0d0000 fffff806`9d0dc800 LGJoyXlCore (deferred)
fffff806`9d0e0000 fffff806`9d0ee000 rdpbus (deferred)
fffff806`9d0f0000 fffff806`9d193000 UsbHub3 (deferred)
fffff806`9d1a0000 fffff806`9d1ae000 USBD (deferred)
fffff806`9d1b0000 fffff806`9d338000 CHDRT64 (deferred)
fffff806`9d340000 fffff806`9d34f000 ksthunk (deferred)
fffff806`9d350000 fffff806`9d418000 IntcDAud (deferred)
fffff806`9d420000 fffff806`9d453000 usbccgp (deferred)
fffff806`9d460000 fffff806`9d5e5000 BTHport (deferred)
fffff806`9d5f0000 fffff806`9d6d2000 dxgmms2 (deferred)
fffff806`9d6e0000 fffff806`9d761000 cldflt (deferred)
fffff806`9d770000 fffff806`9d78a000 storqosflt (deferred)
fffff806`9d790000 fffff806`9d7b8000 bindflt (deferred)
fffff806`9d7e0000 fffff806`9d7f8000 lltdio (deferred)
fffff806`9d800000 fffff806`9d81b000 rspndr (deferred)
fffff806`9d820000 fffff806`9d83d000 wanarp (deferred)
fffff806`9d840000 fffff806`9d858000 mslldp (deferred)
fffff806`9d860000 fffff806`9d878000 ndisuio (deferred)
fffff806`9d880000 fffff806`9d93b000 nwifi (deferred)
fffff806`9d980000 fffff806`9e202000 Netwtw04 T (no symbols)
fffff806`9e210000 fffff806`9e300000 wdiwifi # (pdb symbols) C:\ProgramData\Dbg\sym\WdiWiFi.pdb\6D5DF71075FA759A34C00CCDB7C2F4981\WdiWiFi.pdb
fffff806`9e310000 fffff806`9e31e000 vwifibus (deferred)
fffff806`9e320000 fffff806`9e32f000 CmBatt (deferred)
fffff806`9e330000 fffff806`9e340000 BATTC (deferred)
fffff806`9e350000 fffff806`9e365000 AcpiVpc (deferred)
fffff806`9e370000 fffff806`9e37c000 ICCWDT (deferred)
fffff806`9e380000 fffff806`9e3a1000 i8042prt (deferred)
fffff806`a0400000 fffff806`a0413000 HIDPARSE (deferred)
fffff806`a0420000 fffff806`a0435000 LGSHidFilt (deferred)
fffff806`a0440000 fffff806`a0450000 mouhid (deferred)
fffff806`a0460000 fffff806`a0471000 kbdhid (deferred)
fffff806`a0480000 fffff806`a04c0000 ibtusb (deferred)
fffff806`a04d0000 fffff806`a04f1000 BTHUSB (deferred)
fffff806`a0510000 fffff806`a051e000 dump_diskdump (deferred)
fffff806`a0540000 fffff806`a055d000 dump_dumpfve (deferred)
fffff806`a0560000 fffff806`a057b000 monitor (deferred)
fffff806`a0580000 fffff806`a05a9000 luafv (deferred)
fffff806`a05b0000 fffff806`a05e6000 wcifs (deferred)
fffff806`a05f0000 fffff806`a0604000 mmcss (deferred)
fffff806`a0610000 fffff806`a2520000 rtsuvc (deferred)
fffff806`a2530000 fffff806`a2597000 RtsUer (deferred)
fffff806`a25a0000 fffff806`a25b2000 hidusb (deferred)
fffff806`a25c0000 fffff806`a25ff000 HIDCLASS (deferred)

Unloaded modules:
fffff806`7c9a0000 fffff806`7c9b1000 MSKSSRV.sys
fffff806`7c980000 fffff806`7c991000 MSKSSRV.sys
fffff806`7c960000 fffff806`7c971000 MSKSSRV.sys
fffff806`7c940000 fffff806`7c951000 MSKSSRV.sys
fffff806`7c920000 fffff806`7c931000 MSKSSRV.sys
fffff806`7c900000 fffff806`7c911000 MSKSSRV.sys
fffff806`7c8e0000 fffff806`7c8f1000 MSKSSRV.sys
fffff806`84630000 fffff806`8469a000 WdFilter.sys
fffff806`7c810000 fffff806`7c82f000 MpKslDrv.sys
fffff806`7c7b0000 fffff806`7c7c7000 WdNisDrv.sys
fffff806`7c7e0000 fffff806`7c7f1000 MSKSSRV.sys
fffff806`9d7c0000 fffff806`9d7d1000 MSKSSRV.sys
fffff806`98900000 fffff806`9890f000 dump_storpor
fffff806`99600000 fffff806`9a1e3000 dump_iaStorA
fffff806`9a210000 fffff806`9a22e000 dump_dumpfve
fffff806`98530000 fffff806`9854c000 dam.sys
fffff806`83600000 fffff806`83612000 WdBoot.sys
fffff806`851b0000 fffff806`851c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\062921-11859-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff800`1e400000 PsLoadedModuleList = 0xfffff800`1f02a230
Debug session time: Tue Jun 29 16:46:57.773 2021 (UTC + 3:00)
System Uptime: 2 days 5:10:01.485
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.......
Loading User Symbols
Loading unloaded module list
..................................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`1e7f6c20 48894c2408 mov qword ptr [rsp+8],rcx ss:fffff287`47547670=000000000000001a
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000006000, The subtype of the BugCheck.
Arg2: ffff8d815be8b790
Arg3: ffffffffc0000225
Arg4: 0000000000000000

Debugging Details:
------------------


KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 3171

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 16245

Key : Analysis.Init.CPU.mSec
Value: 327

Key : Analysis.Init.Elapsed.mSec
Value: 8773

Key : Analysis.Memory.CommitPeak.Mb
Value: 80

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: 1a

BUGCHECK_P1: 6000

BUGCHECK_P2: ffff8d815be8b790

BUGCHECK_P3: ffffffffc0000225

BUGCHECK_P4: 0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: MsMpEng.exe

STACK_TEXT:
fffff287`47547668 fffff800`1e86742b : 00000000`0000001a 00000000`00006000 ffff8d81`5be8b790 ffffffff`c0000225 : nt!KeBugCheckEx
fffff287`47547670 fffff800`1e65da8b : ffff8d81`5be8b7b0 fffff800`00000009 ffff8d81`5be8b700 00000000`00000000 : nt!MiStoreFaultComplete+0x16cf5b
fffff287`475476b0 fffff800`1e65bc75 : fffff287`00001000 fffff287`47547700 fffff287`475477f0 ffff8d81`00000000 : nt!MiWaitForInPageComplete+0x2fb
fffff287`475477a0 fffff800`1e728278 : 00000000`c0033333 00000000`00000001 000001a0`a8f3dbf8 00000000`00000000 : nt!MiIssueHardFault+0x3c5
fffff287`47547860 fffff800`1e804d5e : ffff8d81`00000000 000001a0`00000001 0000004d`668ff678 fffff287`47547a80 : nt!MmAccessFault+0x468
fffff287`47547a00 00007ffb`2e19c443 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
0000004d`668fe9f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`2e19c443


SYMBOL_NAME: nt!MiStoreFaultComplete+16cf5b

MODULE_NAME: nt

IMAGE_VERSION: 10.0.19041.1052

STACK_COMMAND: .thread ; .cxr ; kb

IMAGE_NAME: ntkrnlmp.exe

BUCKET_ID_FUNC_OFFSET: 16cf5b

FAILURE_BUCKET_ID: 0x1a_6000_nt!MiStoreFaultComplete

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {5aeab764-ac22-f5da-da84-a57cd09c5d73}

Followup: MachineOwner
---------

0: kd> lm
start end module name
ffff812c`08400000 ffff812c`086d8000 win32kbase (deferred)
ffff812c`086e0000 ffff812c`08a96000 win32kfull (deferred)
ffff812c`08d70000 ffff812c`08dba000 cdd (deferred)
ffff812c`09100000 ffff812c`0919a000 win32k # (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff800`1caa0000 fffff800`1ce3d000 mcupdate_GenuineIntel (deferred)
fffff800`1ce40000 fffff800`1ce46000 hal (deferred)
fffff800`1ce50000 fffff800`1ce5b000 kd (deferred)
fffff800`1ce60000 fffff800`1ce87000 tm (deferred)
fffff800`1ce90000 fffff800`1ce9b000 BOOTVID (deferred)
fffff800`1d000000 fffff800`1d01d000 NDProxy (deferred)
fffff800`1d020000 fffff800`1d047000 AgileVpn (deferred)
fffff800`1d050000 fffff800`1d071000 rasl2tp (deferred)
fffff800`1d080000 fffff800`1d0a1000 raspptp (deferred)
fffff800`1d0b0000 fffff800`1d0cc000 raspppoe (deferred)
fffff800`1d0d0000 fffff800`1d0df000 ndistapi (deferred)
fffff800`1d0e0000 fffff800`1d11a000 ndiswan (deferred)
fffff800`1d120000 fffff800`1d137000 WdNisDrv (deferred)
fffff800`1d140000 fffff800`1d14b000 semav6msr64 (deferred)
fffff800`1d170000 fffff800`1d172500 LGVirHid (deferred)
fffff800`1d180000 fffff800`1d194000 qwavedrv (deferred)
fffff800`1d270000 fffff800`1d290000 MpKslDrv (deferred)
fffff800`1d380000 fffff800`1d470000 wdiwifi (deferred)
fffff800`1d480000 fffff800`1d48e000 vwifibus (deferred)
fffff800`1d560000 fffff800`1d56d000 rdpvideominiport (deferred)
fffff800`1d600000 fffff800`1d6d6000 peauth (deferred)
fffff800`1d6e0000 fffff800`1d6f5000 tcpipreg (deferred)
fffff800`1d700000 fffff800`1d7c7000 srv2 (deferred)
fffff800`1d7d0000 fffff800`1d7ec000 rassstp (deferred)
fffff800`1e400000 fffff800`1f446000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\FC57F1C841C2C3F793D57AC134DC0EFA1\ntkrnlmp.pdb
fffff800`20c00000 fffff800`20c13000 vwifimp (deferred)
fffff800`20cc0000 fffff800`20cd2000 hidusb (deferred)
fffff800`20ce0000 fffff800`20cf5000 LGSHidFilt (deferred)
fffff800`22400000 fffff800`2246a000 CLFS (deferred)
fffff800`22470000 fffff800`2248a000 PSHED (deferred)
fffff800`22490000 fffff800`225a4000 clipsp (deferred)
fffff800`225b0000 fffff800`2261f000 FLTMGR (deferred)
fffff800`22620000 fffff800`22649000 ksecdd (deferred)
fffff800`22650000 fffff800`226b3000 msrpc (deferred)
fffff800`226c0000 fffff800`226ce000 cmimcext (deferred)
fffff800`226d0000 fffff800`226e1000 werkernel (deferred)
fffff800`226f0000 fffff800`226fc000 ntosext (deferred)
fffff800`22700000 fffff800`227e3000 CI (deferred)
fffff800`227f0000 fffff800`228ab000 cng (deferred)
fffff800`228b0000 fffff800`22982000 Wdf01000 (deferred)
fffff800`22990000 fffff800`229a3000 WDFLDR (deferred)
fffff800`229b0000 fffff800`229bf000 SleepStudyHelper (deferred)
fffff800`229c0000 fffff800`229d1000 WppRecorder (deferred)
fffff800`229e0000 fffff800`22a06000 acpiex (deferred)
fffff800`22a10000 fffff800`22a2a000 SgrmAgent (deferred)
fffff800`22a30000 fffff800`22afc000 ACPI (deferred)
fffff800`22b00000 fffff800`22b0c000 WMILIB (deferred)
fffff800`22b10000 fffff800`22b1b000 msisadrv (deferred)
fffff800`22b20000 fffff800`22b97000 pci (deferred)
fffff800`22ba0000 fffff800`22be4000 tpm (deferred)
fffff800`22bf0000 fffff800`22bfb000 IntelTA (deferred)
fffff800`22c20000 fffff800`22c8b000 intelpep (deferred)
fffff800`22c90000 fffff800`22ca7000 WindowsTrustedRT (deferred)
fffff800`22cb0000 fffff800`22cbb000 WindowsTrustedRTProxy (deferred)
fffff800`22cc0000 fffff800`22cd4000 pcw (deferred)
fffff800`22ce0000 fffff800`22cf5000 vdrvroot (deferred)
fffff800`22d00000 fffff800`22d2f000 pdc (deferred)
fffff800`22d30000 fffff800`22d49000 CEA (deferred)
fffff800`22d50000 fffff800`22d81000 partmgr (deferred)
fffff800`22d90000 fffff800`22e3a000 spaceport (deferred)
fffff800`22e40000 fffff800`22e59000 volmgr (deferred)
fffff800`22e60000 fffff800`22ec3000 volmgrx (deferred)
fffff800`22ed0000 fffff800`22eee000 mountmgr (deferred)
fffff800`22ef0000 fffff800`23ad2000 iaStorAC (deferred)
fffff800`23ae0000 fffff800`23b93000 storport (deferred)
fffff800`23ba0000 fffff800`23bbc000 EhStorClass (deferred)
fffff800`23bc0000 fffff800`23bda000 fileinfo (deferred)
fffff800`23bf0000 fffff800`23c30000 Wof (deferred)
fffff800`23c40000 fffff800`23caa000 WdFilter (deferred)
fffff800`23cb0000 fffff800`23f89000 Ntfs (deferred)
fffff800`23f90000 fffff800`23f9d000 Fs_Rec (deferred)
fffff800`23fa0000 fffff800`2410f000 ndis (deferred)
fffff800`24110000 fffff800`241a8000 NETIO (deferred)
fffff800`241b0000 fffff800`241e2000 ksecpkg (deferred)
fffff800`241f0000 fffff800`244dc000 tcpip (deferred)
fffff800`244e0000 fffff800`2455f000 fwpkclnt (deferred)
fffff800`24560000 fffff800`24590000 wfplwfs (deferred)
fffff800`245a0000 fffff800`24668000 fvevol (deferred)
fffff800`24670000 fffff800`24684000 amdkmpfd (deferred)
fffff800`24690000 fffff800`2469b000 volume (deferred)
fffff800`246a0000 fffff800`2470d000 volsnap (deferred)
fffff800`24710000 fffff800`24760000 rdyboost (deferred)
fffff800`24770000 fffff800`24796000 mup (deferred)
fffff800`247a0000 fffff800`247b2000 iorate (deferred)
fffff800`247e0000 fffff800`247fc000 disk (deferred)
fffff800`24800000 fffff800`2486c000 CLASSPNP (deferred)
fffff800`37600000 fffff800`381e2000 dump_iaStorAC (deferred)
fffff800`381f0000 fffff800`38235000 mrxsmb20 (deferred)
fffff800`38240000 fffff800`38293000 srvnet (deferred)
fffff800`382e0000 fffff800`382fe000 crashdmp (deferred)
fffff800`38300000 fffff800`38327000 Ndu (deferred)
fffff800`38400000 fffff800`38435000 idmwfp (deferred)
fffff800`38440000 fffff800`38472000 cdrom (deferred)
fffff800`38480000 fffff800`38495000 filecrypt (deferred)
fffff800`384a0000 fffff800`384ae000 tbs (deferred)
fffff800`384b0000 fffff800`384ba000 Null (deferred)
fffff800`384c0000 fffff800`384ca000 Beep (deferred)
fffff800`384d0000 fffff800`38874000 dxgkrnl (deferred)
fffff800`38880000 fffff800`38898000 watchdog (deferred)
fffff800`388a0000 fffff800`388b6000 BasicDisplay (deferred)
fffff800`388c0000 fffff800`388d1000 BasicRender (deferred)
fffff800`388e0000 fffff800`388fc000 Npfs (deferred)
fffff800`38900000 fffff800`38911000 Msfs (deferred)
fffff800`38920000 fffff800`3893e000 CimFS (deferred)
fffff800`38940000 fffff800`38962000 tdx (deferred)
fffff800`38970000 fffff800`38980000 TDI (deferred)
fffff800`38990000 fffff800`389ec000 netbt (deferred)
fffff800`389f0000 fffff800`38a03000 afunix (deferred)
fffff800`38a10000 fffff800`38ab6000 afd (deferred)
fffff800`38ac0000 fffff800`38ada000 vwififlt (deferred)
fffff800`38ae0000 fffff800`38b0b000 pacer (deferred)
fffff800`38b10000 fffff800`38b24000 ndiscap (deferred)
fffff800`38b30000 fffff800`38b44000 netbios (deferred)
fffff800`38b50000 fffff800`38bf2000 Vid (deferred)
fffff800`38c00000 fffff800`38c21000 winhvr (deferred)
fffff800`38c30000 fffff800`38cab000 rdbss (deferred)
fffff800`38cb0000 fffff800`38cc2000 nsiproxy (deferred)
fffff800`38cd0000 fffff800`38cde000 npsvctrig (deferred)
fffff800`38ce0000 fffff800`38cf0000 mssmbios (deferred)
fffff800`38d00000 fffff800`38d0a000 gpuenergydrv (deferred)
fffff800`38d10000 fffff800`38d3c000 dfsc (deferred)
fffff800`38d60000 fffff800`38dcc000 fastfat (deferred)
fffff800`38dd0000 fffff800`38de7000 bam (deferred)
fffff800`38df0000 fffff800`38e3e000 ahcache (deferred)
fffff800`38e40000 fffff800`38e4e000 amdxe (deferred)
fffff800`38e50000 fffff800`38e6a000 amdfendr (deferred)
fffff800`38e70000 fffff800`38e82000 CompositeBus (deferred)
fffff800`38e90000 fffff800`38e9d000 kdnic (deferred)
fffff800`38ea0000 fffff800`38eb5000 umbus (deferred)
fffff800`38ec0000 fffff800`38ed5000 CAD (deferred)
fffff800`39ad0000 fffff800`39af5000 bowser (deferred)
fffff800`39b00000 fffff800`39b12000 condrv (deferred)
fffff800`39b20000 fffff800`39bb4000 mrxsmb (deferred)
fffff800`3aa00000 fffff800`3aa44000 ucx01000 (deferred)
fffff800`3aa50000 fffff800`3aa80000 TeeDriverW8x64 (deferred)
fffff800`3aa90000 fffff800`3ab77000 rt640x64 (deferred)
fffff800`3ab80000 fffff800`3ac25000 UsbHub3 (deferred)
fffff800`3ac30000 fffff800`3ac97000 RtsUer (deferred)
fffff800`3aca0000 fffff800`3ace0000 ibtusb (deferred)
fffff800`3acf0000 fffff800`3ad11000 BTHUSB (deferred)
fffff800`3ad20000 fffff800`3aea4000 BTHport (deferred)
fffff800`3aeb0000 fffff800`3aeef000 HIDCLASS (deferred)
fffff800`3aef0000 fffff800`3af03000 HIDPARSE (deferred)
fffff800`3af10000 fffff800`3af92000 cldflt (deferred)
fffff800`3afa0000 fffff800`3afb8000 mslldp (deferred)
fffff800`3afc0000 fffff800`3afdb000 rspndr (deferred)
fffff800`3afe0000 fffff800`3affd000 wanarp (deferred)
fffff800`3b000000 fffff800`3b0bb000 nwifi (deferred)
fffff800`3b0c0000 fffff800`3b0d8000 ndisuio (deferred)
fffff800`3b0e0000 fffff800`3b136000 msquic (deferred)
fffff800`3b140000 fffff800`3b2c5000 HTTP (deferred)
fffff800`3b2d0000 fffff800`3b2ea000 mpsdrv (deferred)
fffff800`3b300000 fffff800`3bf46000 igdkmd64 (deferred)
fffff800`3bf50000 fffff800`3bfe8000 USBXHCI (deferred)
fffff800`3c110000 fffff800`3c11f000 CmBatt (deferred)
fffff800`3c120000 fffff800`3c130000 BATTC (deferred)
fffff800`3c140000 fffff800`3c155000 AcpiVpc (deferred)
fffff800`3c160000 fffff800`3c16c000 ICCWDT (deferred)
fffff800`3c170000 fffff800`3c191000 i8042prt (deferred)
fffff800`3c1a0000 fffff800`3c221000 ETD (deferred)
fffff800`3c230000 fffff800`3c244000 kbdclass (deferred)
fffff800`3c250000 fffff800`3c263000 mouclass (deferred)
fffff800`3c270000 fffff800`3c295000 HDAudBus (deferred)
fffff800`3c2a0000 fffff800`3c306000 portcls (deferred)
fffff800`3c310000 fffff800`3c331000 drmk (deferred)
fffff800`3c340000 fffff800`3c3b6000 ks (deferred)
fffff800`3c3c0000 fffff800`3c3cc000 wmiacpi (deferred)
fffff800`3c3d0000 fffff800`3c410000 intelppm (deferred)
fffff800`3c420000 fffff800`3c42b000 acpipagr (deferred)
fffff800`3c430000 fffff800`3c43e000 UEFI (deferred)
fffff800`3c440000 fffff800`3c44d000 NdisVirtualBus (deferred)
fffff800`3c450000 fffff800`3c45c000 swenum (deferred)
fffff800`3c460000 fffff800`3c464e00 LGBusEnum (deferred)
fffff800`3c470000 fffff800`3c47c800 LGJoyXlCore (deferred)
fffff800`3c480000 fffff800`3c48e000 rdpbus (deferred)
fffff800`3c490000 fffff800`3c618000 CHDRT64 (deferred)
fffff800`3c620000 fffff800`3c62f000 ksthunk (deferred)
fffff800`3c630000 fffff800`3c6f8000 IntcDAud (deferred)
fffff800`3c700000 fffff800`3c70e000 USBD (deferred)
fffff800`3c730000 fffff800`3cfb0000 Netwtw04 (deferred)
fffff800`3cfc0000 fffff800`3cff3000 usbccgp (deferred)
fffff800`3d000000 fffff800`3d0e1000 dxgmms2 (deferred)
fffff800`3d0f0000 fffff800`3d10b000 monitor (deferred)
fffff800`3d110000 fffff800`3d139000 luafv (deferred)
fffff800`3d140000 fffff800`3d176000 wcifs (deferred)
fffff800`3d180000 fffff800`3d19a000 storqosflt (deferred)
fffff800`3d1a0000 fffff800`3d1c8000 bindflt (deferred)
fffff800`3d1d0000 fffff800`3d1d8000 lgcoretemp (deferred)
fffff800`3d1e0000 fffff800`3f0f0000 rtsuvc (deferred)
fffff800`3f100000 fffff800`3f110000 mouhid (deferred)
fffff800`3f120000 fffff800`3f131000 kbdhid (deferred)
fffff800`3f150000 fffff800`3f15e000 dump_diskdump (deferred)
fffff800`3f180000 fffff800`3f19d000 dump_dumpfve (deferred)
fffff800`3f1a0000 fffff800`3f1b4000 mmcss (deferred)
fffff800`3f1e0000 fffff800`3f1f8000 lltdio (deferred)

Unloaded modules:
fffff800`20d80000 fffff800`20d91000 MSKSSRV.sys
fffff800`20d60000 fffff800`20d71000 MSKSSRV.sys
fffff800`20d40000 fffff800`20d51000 MSKSSRV.sys
fffff800`20d20000 fffff800`20d31000 MSKSSRV.sys
fffff800`20d00000 fffff800`20d11000 MSKSSRV.sys
fffff800`1d1a0000 fffff800`1d1b3000 hidusb.sys
fffff800`20ca0000 fffff800`20cb1000 MSKSSRV.sys
fffff800`20c80000 fffff800`20c91000 MSKSSRV.sys
fffff800`20c60000 fffff800`20c71000 MSKSSRV.sys
fffff800`20c40000 fffff800`20c51000 MSKSSRV.sys
fffff800`20c20000 fffff800`20c31000 MSKSSRV.sys
fffff800`1d200000 fffff800`1d20f000 hiber_storpo
fffff800`211e0000 fffff800`21dc3000 hiber_iaStor
fffff800`21dd0000 fffff800`21dee000 hiber_dumpfv
fffff800`1d150000 fffff800`1d164000 vwifimp.sys
fffff800`1d1e0000 fffff800`1d1f1000 MSKSSRV.sys
fffff800`1d1c0000 fffff800`1d1d1000 MSKSSRV.sys
fffff800`1d570000 fffff800`1d583000 hidusb.sys
fffff800`1d590000 fffff800`1d5a6000 LGSHidFilt.S
fffff800`1d490000 fffff800`1d4a4000 vwifimp.sys
fffff800`1d5f0000 fffff800`1d5ff000 hiber_storpo
fffff800`1f810000 fffff800`203f3000 hiber_iaStor
fffff800`1f600000 fffff800`1f61e000 hiber_dumpfv
fffff800`1d5d0000 fffff800`1d5e1000 MSKSSRV.sys
fffff800`1d5b0000 fffff800`1d5c1000 MSKSSRV.sys
fffff800`1d1a0000 fffff800`1d1b3000 hidusb.sys
fffff800`1d530000 fffff800`1d541000 MSKSSRV.sys
fffff800`1d510000 fffff800`1d521000 MSKSSRV.sys
fffff800`1d4f0000 fffff800`1d501000 MSKSSRV.sys
fffff800`1d4d0000 fffff800`1d4e1000 MSKSSRV.sys
fffff800`1d4b0000 fffff800`1d4c1000 MSKSSRV.sys
fffff800`1d300000 fffff800`1d316000 LGSHidFilt.S
fffff800`3c100000 fffff800`3c10f000 vwifibus.sys
fffff800`3c730000 fffff800`3cfb1000 Netwtw04.sys
fffff800`3c000000 fffff800`3c0f1000 wdiwifi.sys
fffff800`1d2e0000 fffff800`1d2f4000 vwifimp.sys
fffff800`1d360000 fffff800`1d371000 MSKSSRV.sys
fffff800`1d340000 fffff800`1d351000 MSKSSRV.sys
fffff800`1d320000 fffff800`1d331000 MSKSSRV.sys
fffff800`1d210000 fffff800`1d224000 vwifimp.sys
fffff800`1d2c0000 fffff800`1d2d1000 MSKSSRV.sys
fffff800`1d2a0000 fffff800`1d2b1000 MSKSSRV.sys
fffff800`1d250000 fffff800`1d261000 MSKSSRV.sys
fffff800`1d230000 fffff800`1d241000 MSKSSRV.sys
fffff800`1d1e0000 fffff800`1d1f4000 vwifimp.sys
fffff800`1d200000 fffff800`1d20f000 hiber_storpo
fffff800`1fd20000 fffff800`20903000 hiber_iaStor
fffff800`20910000 fffff800`2092e000 hiber_dumpfv
fffff800`1d150000 fffff800`1d164000 vwifimp.sys
fffff800`1d1c0000 fffff800`1d1d1000 MSKSSRV.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\063021-10828-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff803`77200000 PsLoadedModuleList = 0xfffff803`77e2a230
Debug session time: Wed Jun 30 00:59:54.132 2021 (UTC + 3:00)
System Uptime: 0 days 8:12:24.897
Loading Kernel Symbols
...............................................................
................................................................
................................................................
......
Loading User Symbols
Loading unloaded module list
..........................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`775f6c20 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffd007`a149d350=000000000000000a
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000018, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8037cc6fbcc, address which referenced memory

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for Netwtw04.sys
*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 6968

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 36556

Key : Analysis.Init.CPU.mSec
Value: 374

Key : Analysis.Init.Elapsed.mSec
Value: 26136

Key : Analysis.Memory.CommitPeak.Mb
Value: 98

Key : Memory.System.Errors.BadPageCount
Value: 1

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: d1

BUGCHECK_P1: 18

BUGCHECK_P2: 2

BUGCHECK_P3: 0

BUGCHECK_P4: fffff8037cc6fbcc

READ_ADDRESS: fffff80377efb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
0000000000000018

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

TRAP_FRAME: ffffd007a149d490 -- (.trap 0xffffd007a149d490)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffd007a149d648 rbx=0000000000000000 rcx=0000000000000010
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8037cc6fbcc rsp=ffffd007a149d620 rbp=ffffd007a149d6c9
r8=0000000000000005 r9=ffffbe8a6842c320 r10=fffff803774c31d0
r11=ffffd007a149d440 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
tcpip!IppCompleteAndFreePacketList+0x24:
fffff803`7cc6fbcc 488b4108 mov rax,qword ptr [rcx+8] ds:00000000`00000018=????????????????
Resetting default scope

STACK_TEXT:
ffffd007`a149d348 fffff803`77608b69 : 00000000`0000000a 00000000`00000018 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd007`a149d350 fffff803`77604e69 : ffffbe8a`6a9a7cc0 fffff803`91621010 ffffbe8a`64b610c0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd007`a149d490 fffff803`7cc6fbcc : ffffbe8a`683a2ba0 ffffbe8a`6857f530 fffff803`7cde9230 ffffd007`a149d6c9 : nt!KiPageFault+0x469
ffffd007`a149d620 fffff803`7cca69ef : 00000000`00000000 00000000`00000000 fffff803`7cde9230 00000000`00000000 : tcpip!IppCompleteAndFreePacketList+0x24
ffffd007`a149d650 fffff803`7cc256e3 : ffffbb01`5fe00004 00000000`00000000 fffff803`7cde9230 ffffbe8a`00000000 : tcpip!IppFragmentPackets+0x80a3f
ffffd007`a149d730 fffff803`7cc25368 : ffffbe8a`5ab2e8a8 00000000`00000001 00000000`00000000 00000000`000081e4 : tcpip!IppDispatchSendPacketHelper+0xbf
ffffd007`a149d800 fffff803`7cc23fb8 : ffffbe8a`5ab2e988 00000000`00000007 00000000`00000000 ffffbe8a`5ab2e8a8 : tcpip!IppPacketizeDatagrams+0x2e8
ffffd007`a149d930 fffff803`7cc22aa9 : ffffbe8a`62bf0b00 00000000`00000000 fffff803`7cde9230 ffffbe8a`65c3f230 : tcpip!IppSendDatagramsCommon+0x498
ffffd007`a149dab0 fffff803`7cc01c7e : ffffbe8a`70fee2b0 00000000`00000014 00000000`00000000 ffffbe8a`64c31b00 : tcpip!IpNlpFastSendDatagram+0x349
ffffd007`a149db70 fffff803`7cc03e46 : ffffbe8a`64c31b00 00000000`00000080 00000000`da76fb78 fffff803`7cde9598 : tcpip!TcpTcbHeaderSend+0x5ce
ffffd007`a149de20 fffff803`7cc6aa12 : ffffbe8a`5ab0d500 00000000`0000bb01 00000000`00000002 ffffbe8a`5ac2d801 : tcpip!TcpReceive+0x4d6
ffffd007`a149df10 fffff803`7cc2a8d1 : ffffbe8a`64e507b0 00000000`00000000 00000000`00000000 ffffbe8a`5aad63c0 : tcpip!TcpNlClientReceiveDatagrams+0x22
ffffd007`a149df50 fffff803`7cc2721b : 00000000`00000001 ffffd007`a149e000 00000000`00000000 ffffbe8a`5ac2d000 : tcpip!IppProcessDeliverList+0xc1
ffffd007`a149e030 fffff803`7cc2679f : fffff803`7cde9230 ffffbe8a`5a105010 ffffbe8a`5ac2d000 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x21b
ffffd007`a149e130 fffff803`7cc23aac : ffffbe8a`6857f530 ffffbe8a`66dfe7e0 00000000`00000001 00000000`00000000 : tcpip!IppFlcReceivePacketsCore+0x32f
ffffd007`a149e250 fffff803`7cc71010 : ffffbe8a`64e507b0 00000000`00000000 ffffd007`a149e321 00000000`00000000 : tcpip!IpFlcReceivePackets+0xc
ffffd007`a149e280 fffff803`7cc7060c : 00000000`00000001 ffffbe8a`6517e000 fffff803`7cc632c0 ffffd007`a149e65c : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x270
ffffd007`a149e380 fffff803`77498bc8 : ffffbe8a`5ac562a0 00000000`00000002 ffffbe8a`6515a040 ffffd007`a149e678 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0x17c
ffffd007`a149e4d0 fffff803`77498b3d : fffff803`7cc70490 ffffd007`a149e678 ffffbe8a`5aad61e0 fffff803`77473f97 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149e540 fffff803`7cc62e5d : 00000000`00000000 ffffd007`a149e640 00000001`ffffffff 00000000`646e5344 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149e580 fffff803`7cc6253d : 00000000`00000000 ffffd007`a149e6e0 ffffbe8a`6517e010 ffffbe8a`00000000 : tcpip!NetioExpandKernelStackAndCallout+0x8d
ffffd007`a149e5e0 fffff803`7c9a1eb1 : 00000000`00000001 ffffbe8a`6c5c5a81 00000000`00000020 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0x46d
ffffd007`a149e890 fffff803`7c9a1ccb : ffffbe8a`68db05a0 ffff0008`29a30001 ffffd007`00000000 ffffbe8a`00000008 : ndis!ndisMIndicateNetBufferListsToOpen+0x141
ffffd007`a149e970 fffff803`7c9ddbdf : ffffbe8a`6104d1a0 ffffe301`ab5e3901 ffffbe8a`66dfe7e0 ffffd007`a149eb68 : ndis!ndisMTopReceiveNetBufferLists+0x22b
ffffd007`a149e9f0 fffff803`7c9e3381 : 00000000`00000000 ffffbe8a`66af0c70 00000000`00000000 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x4b
ffffd007`a149eac0 fffff803`7c9a804e : ffffbe8a`66af0c70 00000000`00000001 ffffbe8a`00000000 00000000`00000008 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x3bf11
ffffd007`a149eb70 fffff803`978bd86c : ffffbe8a`61996010 00000000`00000001 ffffbe8a`66dfe7e0 ffffbe8a`619970e8 : ndis!NdisFIndicateReceiveNetBufferLists+0x6e
ffffd007`a149ebb0 fffff803`7c9a7ef1 : ffffbe8a`66af0c70 fffff803`978bd5a0 ffffbe8a`655cb020 00000000`00000000 : nwifi!Pt6Receive+0x2cc
ffffd007`a149ec10 fffff803`7c9b83be : ffffbe8a`6515a040 ffffd007`a149ede1 ffffd007`a149edc0 00000000`00000000 : ndis!ndisCallReceiveHandler+0x61
ffffd007`a149ec60 fffff803`77498bc8 : ffffd007`a149ede1 ffffbe8a`66af0c70 ffffbe8a`00000000 ffffbe8a`69e906f0 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd007`a149ecb0 fffff803`77498b3d : fffff803`7c9b8380 ffffd007`a149edc0 ffffbe8a`6511a520 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149ed20 fffff803`7c9dddd0 : 00000000`00000000 ffffbe8a`6b5649c0 00000000`00000000 ffffbe8a`6659dc70 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149ed60 fffff803`7c9e3381 : 00000000`00000000 ffffbe8a`64dbcc70 00000000`00000000 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x23c
ffffd007`a149ee30 fffff803`7c9a804e : ffffbe8a`64dbcc70 ffffbe8a`6511a520 fffff803`00000000 ffffbe8a`00000008 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x3bf11
ffffd007`a149eee0 fffff803`91605a8d : ffffbe8a`64f55c70 ffffbe8a`659e0260 00000000`00000000 00000000`00000008 : ndis!NdisFIndicateReceiveNetBufferLists+0x6e
ffffd007`a149ef20 fffff803`7c9a7ef1 : ffffbe8a`64dbcc70 fffff803`916059b0 ffffbe8a`659e0260 fffff803`7cee12bb : vwififlt!FilterReceiveNetBufferLists+0xdd
ffffd007`a149ef80 fffff803`7c9b83be : ffffbe8a`6515a040 ffffd007`a149f151 ffffd007`a149f130 00000000`00000000 : ndis!ndisCallReceiveHandler+0x61
ffffd007`a149efd0 fffff803`77498bc8 : ffffd007`a149f151 ffffbe8a`64dbcc70 fffff803`00000000 ffffbe8a`69e913b0 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd007`a149f020 fffff803`77498b3d : fffff803`7c9b8380 ffffd007`a149f130 ffffbe8a`6511a520 fffff803`7cb28d88 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149f090 fffff803`7c9dddd0 : 00000000`00000000 00000000`00000000 ffffbe8a`5abb3cd0 ffffbe8a`66af0c70 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149f0d0 fffff803`7c9e3381 : 00000000`00000000 ffffbe8a`65149c70 00000000`00000000 ffffbe8a`6511a520 : ndis!ndisInvokeNextReceiveHandler+0x23c
ffffd007`a149f1a0 fffff803`7c9a804e : ffffbe8a`65149c70 ffffbe8a`65149c70 fffff803`00000000 00000000`00000008 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x3bf11
ffffd007`a149f250 fffff803`7cf6131c : ffffbe8a`66feebf0 00000000`00000008 00000000`00000000 00000000`00000001 : ndis!NdisFIndicateReceiveNetBufferLists+0x6e
ffffd007`a149f290 fffff803`7c9a7ef1 : ffffbe8a`00000008 ffffbe8a`6511a520 00000000`00000000 ffffbe8a`6a2caa01 : wfplwfs!LwfLowerRecvNetBufferLists+0x17c
ffffd007`a149f350 fffff803`7c9b83be : ffffbe8a`6515a040 ffffd007`a149f521 ffffd007`a149f500 00000000`00000000 : ndis!ndisCallReceiveHandler+0x61
ffffd007`a149f3a0 fffff803`77498bc8 : ffffd007`a149f521 ffffbe8a`65149c70 00000000`00000000 00000000`00000002 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd007`a149f3f0 fffff803`77498b3d : fffff803`7c9b8380 ffffd007`a149f500 ffffbe8a`6511a520 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149f460 fffff803`7c9dddd0 : ffffbe8a`66feebf0 ffffbe8a`66eb1040 ffffbe8a`659e0260 fffff803`91606400 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149f4a0 fffff803`7c9a4a94 : 00000000`001cda39 00000000`00000000 ffffbe8a`6104d1a0 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x23c
ffffd007`a149f570 fffff803`92952d98 : 00000000`00000003 ffffbe8a`62bf0ba0 ffffd007`a149f660 ffffbe8a`6511a520 : ndis!NdisMIndicateReceiveNetBufferLists+0x104
ffffd007`a149f600 fffff803`92917167 : 00000000`00000008 00000000`00000000 ffffbe8a`00000000 00000000`00000000 : wdiwifi!CPort::IndicateFrames+0x2d8
ffffd007`a149f6a0 fffff803`928fbb67 : ffffbe8a`6511a520 ffffd007`a149f7c9 ffffbe8a`6842ebb0 fffff803`00000001 : wdiwifi!CAdapter::IndicateFrames+0x137
ffffd007`a149f710 fffff803`928fc2a6 : ffffbe8a`6842ebb0 ffffbe8a`00000008 ffffbe8a`6842ebb0 ffffbe8a`00000000 : wdiwifi!CRxMgr::RxProcessAndIndicateNblChain+0x7f7
ffffd007`a149f830 fffff803`928f8142 : ffffbe8a`6511a520 ffffd007`a149f970 ffffbe8a`00000000 ffffbe8a`0000002f : wdiwifi!CRxMgr::RxInOrderDataInd+0x35a
ffffd007`a149f8d0 fffff803`94bb5983 : ffffbe8a`66cfeb00 00000000`00000000 ffffbe8a`5aba40c0 fffff803`77412707 : wdiwifi!AdapterRxInorderDataInd+0x92
ffffd007`a149f920 ffffbe8a`66cfeb00 : 00000000`00000000 ffffbe8a`5aba40c0 fffff803`77412707 ffffd007`a149f978 : Netwtw04+0x55983
ffffd007`a149f928 00000000`00000000 : ffffbe8a`5aba40c0 fffff803`77412707 ffffd007`a149f978 ffffd007`a149f970 : 0xffffbe8a`66cfeb00


SYMBOL_NAME: tcpip!IppCompleteAndFreePacketList+24

MODULE_NAME: tcpip

IMAGE_NAME: tcpip.sys

IMAGE_VERSION: 10.0.19041.1052

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 24

FAILURE_BUCKET_ID: AV_tcpip!IppCompleteAndFreePacketList

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {c87eecc0-64b1-5c99-88b8-0c37f88df86a}

Followup: MachineOwner
---------

2: kd> lm
start end module name
ffffbc49`b6200000 ffffbc49`b64d8000 win32kbase (deferred)
ffffbc49`b64e0000 ffffbc49`b6896000 win32kfull (deferred)
ffffbc49`b6990000 ffffbc49`b6a2a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
ffffbc49`b6a80000 ffffbc49`b6aca000 cdd (deferred)
fffff803`75460000 fffff803`757fd000 mcupdate_GenuineIntel (deferred)
fffff803`75800000 fffff803`75806000 hal (deferred)
fffff803`75810000 fffff803`7581b000 kd (deferred)
fffff803`75820000 fffff803`75847000 tm (deferred)
fffff803`75850000 fffff803`7585b000 BOOTVID (deferred)
fffff803`77200000 fffff803`78246000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\FC57F1C841C2C3F793D57AC134DC0EFA1\ntkrnlmp.pdb
fffff803`7ae00000 fffff803`7ae6a000 CLFS (deferred)
fffff803`7ae70000 fffff803`7ae8a000 PSHED (deferred)
fffff803`7ae90000 fffff803`7afa4000 clipsp (deferred)
fffff803`7afb0000 fffff803`7b01f000 FLTMGR (deferred)
fffff803`7b020000 fffff803`7b049000 ksecdd (deferred)
fffff803`7b050000 fffff803`7b0b3000 msrpc (deferred)
fffff803`7b0c0000 fffff803`7b0ce000 cmimcext (deferred)
fffff803`7b0d0000 fffff803`7b0e1000 werkernel (deferred)
fffff803`7b0f0000 fffff803`7b0fc000 ntosext (deferred)
fffff803`7b100000 fffff803`7b1e3000 CI (deferred)
fffff803`7b1f0000 fffff803`7b2ab000 cng (deferred)
fffff803`7b2b0000 fffff803`7b382000 Wdf01000 (deferred)
fffff803`7b390000 fffff803`7b3a3000 WDFLDR (deferred)
fffff803`7b3b0000 fffff803`7b3bf000 SleepStudyHelper (deferred)
fffff803`7b3c0000 fffff803`7b3d1000 WppRecorder (deferred)
fffff803`7b3e0000 fffff803`7b406000 acpiex (deferred)
fffff803`7b410000 fffff803`7b42a000 SgrmAgent (deferred)
fffff803`7b430000 fffff803`7b4fc000 ACPI (deferred)
fffff803`7b500000 fffff803`7b50c000 WMILIB (deferred)
fffff803`7b510000 fffff803`7b51b000 msisadrv (deferred)
fffff803`7b520000 fffff803`7b597000 pci (deferred)
fffff803`7b5a0000 fffff803`7b5e4000 tpm (deferred)
fffff803`7b5f0000 fffff803`7b5fb000 IntelTA (deferred)
fffff803`7b620000 fffff803`7b68b000 intelpep (deferred)
fffff803`7b690000 fffff803`7b6a7000 WindowsTrustedRT (deferred)
fffff803`7b6b0000 fffff803`7b6bb000 WindowsTrustedRTProxy (deferred)
fffff803`7b6c0000 fffff803`7b6d4000 pcw (deferred)
fffff803`7b6e0000 fffff803`7b6f5000 vdrvroot (deferred)
fffff803`7b700000 fffff803`7b72f000 pdc (deferred)
fffff803`7b730000 fffff803`7b749000 CEA (deferred)
fffff803`7b750000 fffff803`7b781000 partmgr (deferred)
fffff803`7b790000 fffff803`7b83a000 spaceport (deferred)
fffff803`7b840000 fffff803`7b859000 volmgr (deferred)
fffff803`7b860000 fffff803`7b8c3000 volmgrx (deferred)
fffff803`7b8d0000 fffff803`7b8ee000 mountmgr (deferred)
fffff803`7b8f0000 fffff803`7c4d2000 iaStorAC (deferred)
fffff803`7c4e0000 fffff803`7c593000 storport (deferred)
fffff803`7c5a0000 fffff803`7c5bc000 EhStorClass (deferred)
fffff803`7c5c0000 fffff803`7c5da000 fileinfo (deferred)
fffff803`7c5f0000 fffff803`7c630000 Wof (deferred)
fffff803`7c640000 fffff803`7c6aa000 WdFilter (deferred)
fffff803`7c6b0000 fffff803`7c989000 Ntfs (deferred)
fffff803`7c990000 fffff803`7c99d000 Fs_Rec (deferred)
fffff803`7c9a0000 fffff803`7cb0f000 ndis (pdb symbols) C:\ProgramData\Dbg\sym\ndis.pdb\72DA27E04D05FAC4F68A0FCE1FEBCD201\ndis.pdb
fffff803`7cb10000 fffff803`7cba8000 NETIO (deferred)
fffff803`7cbb0000 fffff803`7cbe2000 ksecpkg (deferred)
fffff803`7cbf0000 fffff803`7cedc000 tcpip (pdb symbols) C:\ProgramData\Dbg\sym\tcpip.pdb\79E25843598F7D347EA24C46D56A94821\tcpip.pdb
fffff803`7cee0000 fffff803`7cf5f000 fwpkclnt (deferred)
fffff803`7cf60000 fffff803`7cf90000 wfplwfs # (pdb symbols) C:\ProgramData\Dbg\sym\wfplwfs.pdb\0D6CC29202502BB995AE4D09F1F784601\wfplwfs.pdb
fffff803`7cfa0000 fffff803`7d068000 fvevol (deferred)
fffff803`7d070000 fffff803`7d084000 amdkmpfd (deferred)
fffff803`7d090000 fffff803`7d09b000 volume (deferred)
fffff803`7d0a0000 fffff803`7d10d000 volsnap (deferred)
fffff803`7d110000 fffff803`7d160000 rdyboost (deferred)
fffff803`7d170000 fffff803`7d196000 mup (deferred)
fffff803`7d1a0000 fffff803`7d1b2000 iorate (deferred)
fffff803`7d1e0000 fffff803`7d1fc000 disk (deferred)
fffff803`7d200000 fffff803`7d26c000 CLASSPNP (deferred)
fffff803`90000000 fffff803`90be2000 dump_iaStorAC (deferred)
fffff803`90bf0000 fffff803`90c3e000 ahcache (deferred)
fffff803`90c40000 fffff803`90c52000 CompositeBus (deferred)
fffff803`90c60000 fffff803`90c75000 umbus (deferred)
fffff803`90c80000 fffff803`90c95000 CAD (deferred)
fffff803`90ca0000 fffff803`90d87000 rt640x64 (deferred)
fffff803`90f30000 fffff803`90f4e000 crashdmp (deferred)
fffff803`91000000 fffff803`9100a000 Beep (deferred)
fffff803`91010000 fffff803`913b4000 dxgkrnl (deferred)
fffff803`913c0000 fffff803`913d8000 watchdog (deferred)
fffff803`913e0000 fffff803`913f6000 BasicDisplay (deferred)
fffff803`91400000 fffff803`91411000 BasicRender (deferred)
fffff803`91420000 fffff803`9143c000 Npfs (deferred)
fffff803`91440000 fffff803`91451000 Msfs (deferred)
fffff803`91460000 fffff803`9147e000 CimFS (deferred)
fffff803`91480000 fffff803`914a2000 tdx (deferred)
fffff803`914b0000 fffff803`914c0000 TDI (deferred)
fffff803`914d0000 fffff803`9152c000 netbt (deferred)
fffff803`91530000 fffff803`91543000 afunix (deferred)
fffff803`91550000 fffff803`915f6000 afd (deferred)
fffff803`91600000 fffff803`9161a000 vwififlt # (pdb symbols) C:\ProgramData\Dbg\sym\vwififlt.pdb\5F730CDDBE01B1A7DEA0367C0A1C71101\vwififlt.pdb
fffff803`91620000 fffff803`9164b000 pacer (deferred)
fffff803`91650000 fffff803`91664000 ndiscap (deferred)
fffff803`91670000 fffff803`91684000 netbios (deferred)
fffff803`91690000 fffff803`91732000 Vid (deferred)
fffff803`91740000 fffff803`91761000 winhvr (deferred)
fffff803`91770000 fffff803`917eb000 rdbss (deferred)
fffff803`917f0000 fffff803`91802000 nsiproxy (deferred)
fffff803`91810000 fffff803`9181e000 npsvctrig (deferred)
fffff803`91820000 fffff803`91830000 mssmbios (deferred)
fffff803`91840000 fffff803`9184a000 gpuenergydrv (deferred)
fffff803`91850000 fffff803`9187c000 dfsc (deferred)
fffff803`91880000 fffff803`9189a000 amdfendr (deferred)
fffff803`918a0000 fffff803`9190c000 fastfat (deferred)
fffff803`91910000 fffff803`91927000 bam (deferred)
fffff803`91930000 fffff803`9193e000 amdxe (deferred)
fffff803`91940000 fffff803`9194d000 kdnic (deferred)
fffff803`92580000 fffff803`925b2000 cdrom (deferred)
fffff803`925c0000 fffff803`925d5000 filecrypt (deferred)
fffff803`925e0000 fffff803`925ee000 tbs (deferred)
fffff803`925f0000 fffff803`925fa000 Null (deferred)
fffff803`92800000 fffff803`92821000 raspptp (deferred)
fffff803`92830000 fffff803`9284c000 raspppoe (deferred)
fffff803`92850000 fffff803`9288a000 ndiswan (deferred)
fffff803`92890000 fffff803`928a7000 WdNisDrv (deferred)
fffff803`928b0000 fffff803`928bb000 semav6msr64 (deferred)
fffff803`928c0000 fffff803`928d5000 LGSHidFilt (deferred)
fffff803`928f0000 fffff803`929e0000 wdiwifi # (pdb symbols) C:\ProgramData\Dbg\sym\WdiWiFi.pdb\ECB765D83021997B162B0815A4E6CC631\WdiWiFi.pdb
fffff803`929f0000 fffff803`92a04000 qwavedrv (deferred)
fffff803`92b80000 fffff803`92d04000 BTHport (deferred)
fffff803`92d10000 fffff803`92d77000 RtsUer (deferred)
fffff803`92d80000 fffff803`92da7000 AgileVpn (deferred)
fffff803`92db0000 fffff803`92dd1000 rasl2tp (deferred)
fffff803`92de0000 fffff803`92df2000 hidusb (deferred)
fffff803`93400000 fffff803`93498000 USBXHCI (deferred)
fffff803`934a0000 fffff803`934e4000 ucx01000 (deferred)
fffff803`934f0000 fffff803`93520000 TeeDriverW8x64 (deferred)
fffff803`935b0000 fffff803`941f6000 igdkmd64 (deferred)
fffff803`94310000 fffff803`9431f000 CmBatt (deferred)
fffff803`94320000 fffff803`94330000 BATTC (deferred)
fffff803`94340000 fffff803`94355000 AcpiVpc (deferred)
fffff803`94360000 fffff803`9436c000 ICCWDT (deferred)
fffff803`94370000 fffff803`94391000 i8042prt (deferred)
fffff803`943a0000 fffff803`94421000 ETD (deferred)
fffff803`94430000 fffff803`94444000 kbdclass (deferred)
fffff803`94450000 fffff803`94463000 mouclass (deferred)
fffff803`94470000 fffff803`94495000 HDAudBus (deferred)
fffff803`944a0000 fffff803`94506000 portcls (deferred)
fffff803`94510000 fffff803`94531000 drmk (deferred)
fffff803`94540000 fffff803`945b6000 ks (deferred)
fffff803`945c0000 fffff803`945cc000 wmiacpi (deferred)
fffff803`945d0000 fffff803`94610000 intelppm (deferred)
fffff803`94620000 fffff803`9462b000 acpipagr (deferred)
fffff803`94630000 fffff803`9463e000 UEFI (deferred)
fffff803`94640000 fffff803`9464d000 NdisVirtualBus (deferred)
fffff803`94650000 fffff803`9465c000 swenum (deferred)
fffff803`94660000 fffff803`94664e00 LGBusEnum (deferred)
fffff803`94670000 fffff803`9467c800 LGJoyXlCore (deferred)
fffff803`94680000 fffff803`9468e000 rdpbus (deferred)
fffff803`94690000 fffff803`94735000 UsbHub3 (deferred)
fffff803`94740000 fffff803`9474e000 USBD (deferred)
fffff803`94750000 fffff803`948d8000 CHDRT64 (deferred)
fffff803`948e0000 fffff803`948ef000 ksthunk (deferred)
fffff803`948f0000 fffff803`949b8000 IntcDAud (deferred)
fffff803`949c0000 fffff803`949f3000 usbccgp (deferred)
fffff803`94a20000 fffff803`94a5f000 HIDCLASS (deferred)
fffff803`94a60000 fffff803`94a73000 HIDPARSE (deferred)
fffff803`94aa0000 fffff803`94ab0000 mouhid (deferred)
fffff803`94ac0000 fffff803`94ad1000 kbdhid (deferred)
fffff803`94ae0000 fffff803`94b20000 ibtusb (deferred)
fffff803`94b30000 fffff803`94b51000 BTHUSB (deferred)
fffff803`94b60000 fffff803`953e0000 Netwtw04 T (no symbols)
fffff803`97600000 fffff803`9761b000 monitor (deferred)
fffff803`97630000 fffff803`9763e000 dump_diskdump (deferred)
fffff803`97660000 fffff803`9767d000 dump_dumpfve (deferred)
fffff803`97680000 fffff803`976a9000 luafv (deferred)
fffff803`976b0000 fffff803`976e6000 wcifs (deferred)
fffff803`976f0000 fffff803`97772000 cldflt (deferred)
fffff803`97780000 fffff803`9779a000 storqosflt (deferred)
fffff803`977a0000 fffff803`977c8000 bindflt (deferred)
fffff803`977d0000 fffff803`977e4000 mmcss (deferred)
fffff803`977f0000 fffff803`977fd000 rdpvideominiport (deferred)
fffff803`97800000 fffff803`9780e000 vwifibus (deferred)
fffff803`97810000 fffff803`97828000 lltdio (deferred)
fffff803`97830000 fffff803`97848000 mslldp (deferred)
fffff803`97850000 fffff803`9786b000 rspndr (deferred)
fffff803`97870000 fffff803`9788d000 wanarp (deferred)
fffff803`97890000 fffff803`978a8000 ndisuio (deferred)
fffff803`978b0000 fffff803`9796b000 nwifi (pdb symbols) C:\ProgramData\Dbg\sym\nwifi.pdb\286B7E39218532AEBE3E97EA822EBC3A1\nwifi.pdb
fffff803`97970000 fffff803`979c6000 msquic (deferred)
fffff803`979d0000 fffff803`97b55000 HTTP (deferred)
fffff803`97b60000 fffff803`97b72000 condrv (deferred)
fffff803`97b80000 fffff803`97b9a000 mpsdrv (deferred)
fffff803`97ba0000 fffff803`97bc5000 bowser (deferred)
fffff803`97bd0000 fffff803`97c64000 mrxsmb (deferred)
fffff803`97c70000 fffff803`97cb5000 mrxsmb20 (deferred)
fffff803`97cc0000 fffff803`97cd3000 vwifimp (deferred)
fffff803`97ce0000 fffff803`97d15000 idmwfp (deferred)
fffff803`97d20000 fffff803`97d73000 srvnet (deferred)
fffff803`97d80000 fffff803`97d88000 lgcoretemp (deferred)
fffff803`97d90000 fffff803`97db7000 Ndu (deferred)
fffff803`97dc0000 fffff803`97e96000 peauth (deferred)
fffff803`97ea0000 fffff803`97eb5000 tcpipreg (deferred)
fffff803`97ec0000 fffff803`97f87000 srv2 (deferred)
fffff803`97f90000 fffff803`97fac000 rassstp (deferred)
fffff803`97fb0000 fffff803`97fcd000 NDProxy (deferred)
fffff803`97fd0000 fffff803`97fdf000 ndistapi (deferred)
fffff803`97fe0000 fffff803`99ef0000 rtsuvc (deferred)
fffff803`99f00000 fffff803`99fe1000 dxgmms2 (deferred)
fffff803`99ff0000 fffff803`99ff2500 LGVirHid (deferred)

Unloaded modules:
fffff803`92a10000 fffff803`92a21000 MSKSSRV.sys
fffff803`92a80000 fffff803`92a93000 hidusb.sys
fffff803`97cc0000 fffff803`97cd4000 vwifimp.sys
fffff803`92b60000 fffff803`92b6f000 hiber_storpo
fffff803`79af0000 fffff803`7a6d3000 hiber_iaStor
fffff803`7a6e0000 fffff803`7a6fe000 hiber_dumpfv
fffff803`92b40000 fffff803`92b51000 MSKSSRV.sys
fffff803`92b20000 fffff803`92b31000 MSKSSRV.sys
fffff803`92b00000 fffff803`92b11000 MSKSSRV.sys
fffff803`92ae0000 fffff803`92af1000 MSKSSRV.sys
fffff803`92ac0000 fffff803`92ad1000 MSKSSRV.sys
fffff803`92aa0000 fffff803`92ab1000 MSKSSRV.sys
fffff803`92a10000 fffff803`92a23000 hidusb.sys
fffff803`92a30000 fffff803`92a46000 LGSHidFilt.S
fffff803`97cc0000 fffff803`97cd4000 vwifimp.sys
fffff803`92a70000 fffff803`92a7f000 hiber_storpo
fffff803`74670000 fffff803`75253000 hiber_iaStor
fffff803`75260000 fffff803`7527e000 hiber_dumpfv
fffff803`92a50000 fffff803`92a61000 MSKSSRV.sys
fffff803`928d0000 fffff803`928e3000 hidusb.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`94300000 fffff803`9430f000 vwifibus.sys
fffff803`94ce0000 fffff803`95561000 Netwtw04.sys
fffff803`94200000 fffff803`942f1000 wdiwifi.sys
fffff803`97cc0000 fffff803`97cd4000 vwifimp.sys
fffff803`97800000 fffff803`9780d000 MSPCLOCK.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`97800000 fffff803p`9780d000 MSPCLOCK.sys
fffff803`977f0000 fffff803`97801000 MSKSSRV.sys
fffff803`94a00000 fffff803`94a13000 hidusb.sys
fffff803`94a80000 fffff803`94a96000 LGSHidFilt.S
fffff803`928c0000 fffff803`928cd000 MSPQM.sys
fffff803`977f0000 fffff803`97801000 MSKSSRV.sys
fffff803`977f0000 fffff803`97801000 MSKSSRV.sys
fffff803`90f60000 fffff803`90f6f000 dump_storpor
fffff803`91950000 fffff803`92533000 dump_iaStorA
fffff803`92560000 fffff803`9257e000 dump_dumpfve
fffff803`91880000 fffff803`9189c000 dam.sys
fffff803`7b600000 fffff803`7b612000 WdBoot.sys
fffff803`7d1c0000 fffff803`7d1d1000 hwpolicy.sys

[/CODE]

Saygılarımla.
 
Bir proxy yazılımı kullanıyorsanız kapatın. Ya da VPN. Hatta cihazınızdan silin.
Logitech Gaming Software - silin.
Realtek uvc driver - kamera driverınız aygıt yöneticisinden kamera sürücünüzü silin.
Realtek Wi-Fi driver - Wi-Fi driverınız aygıt yöneticisinden bulup sağ tık sürücü sil deyin.

Bunları yapmadan önce.
Adresinden Wi-Fi driverınızı ve kamera driverınızı indirmiş olun.
Bilgisayarınızı yeniden başlatın.
İndirdiğiniz dosyalardan driverlarınızı kurun. Windows otomatik kuruyorsa yine driverı silin bu sefer yeniden başlatmadan kurun.

Ek olarak Memory'den kaynaklanan hata da almışsınız. Bir Memtest yapıp 1 hata bile verirse bildirin.

Bunlara göre dönüş sağlayın.

[CODE title="Kod"]
Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040821-10218-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff805`6d600000 PsLoadedModuleList = 0xfffff805`6e22a490
Debug session time: Thu Apr 8 15:42:12.323 2021 (UTC + 3:00)
System Uptime: 0 days 1:46:57.085
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
........
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff805`6d9f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff805`73a5d9b0=00000000000000f7
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer. This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned. This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: fffff80573a5d9f0, Actual security check cookie from the stack
Arg2: 000048714b2a45ef, Expected security check cookie
Arg3: ffffb78eb4d5ba10, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2812

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 13885

Key : Analysis.Init.CPU.mSec
Value: 390

Key : Analysis.Init.Elapsed.mSec
Value: 3366

Key : Analysis.Memory.CommitPeak.Mb
Value: 78

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: f7

BUGCHECK_P1: fffff80573a5d9f0

BUGCHECK_P2: 48714b2a45ef

BUGCHECK_P3: ffffb78eb4d5ba10

BUGCHECK_P4: 0

SECURITY_COOKIE: Expected 000048714b2a45ef found fffff80573a5d9f0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

STACK_TEXT:
fffff805`73a5d9a8 fffff805`6dab0cd5 : 00000000`000000f7 fffff805`73a5d9f0 00004871`4b2a45ef ffffb78e`b4d5ba10 : nt!KeBugCheckEx
fffff805`73a5d9b0 fffff805`6d870188 : 00000000`00000000 00001f80`0000000d 00000000`00000003 00000000`00000002 : nt!_report_gsfailure+0x25
fffff805`73a5d9f0 fffff805`6d9f9774 : 00000000`00000001 fffff805`6e327600 ffffb082`b9ad0280 00000000`0000054e : nt!PoIdle+0x3a8
fffff805`73a5db60 00000000`00000000 : fffff805`73a5e000 fffff805`73a57000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x54


SYMBOL_NAME: nt!_report_gsfailure+25

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 25

FAILURE_BUCKET_ID: 0xF7_MISSING_GSFRAME_nt!_report_gsfailure

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}

Followup: MachineOwner
---------

0: kd> !sysinfo machineid
Machine ID Information [From Smbios 2.8, DMIVersion 0, Size=3630]
BiosMajorRelease = 1
BiosMinorRelease = 47
FirmwareMajorRelease = 1
FirmwareMinorRelease = 47
BiosVendor = LENOVO
BiosVersion = D5CN47WW
BiosReleaseDate = 08/26/2016
SystemManufacturer = LENOVO
SystemProductName = 80Q7
SystemFamily = IDEAPAD
SystemVersion = Lenovo ideapad 300-15ISK
SystemSKU = LENOVO_MT_80Q7_BU_idea_FM_Lenovo ideapad 300-15ISK
BaseBoardManufacturer = LENOVO
BaseBoardProduct = Paris 5A8
BaseBoardVersion = SDK0J40679 WIN
0: kd> lm
start end module name
ffffd089`97fd0000 ffffd089`9806a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
ffffd089`98200000 ffffd089`985b6000 win32kfull (deferred)
ffffd089`985c0000 ffffd089`9860a000 cdd (deferred)
ffffd089`98ce0000 ffffd089`98fb9000 win32kbase (deferred)
fffff805`6b7f0000 fffff805`6bb8d000 mcupdate_GenuineIntel (deferred)
fffff805`6bb90000 fffff805`6bb96000 hal (deferred)
fffff805`6bba0000 fffff805`6bbab000 kd (deferred)
fffff805`6bbb0000 fffff805`6bbd7000 tm (deferred)
fffff805`6bbe0000 fffff805`6bbeb000 BOOTVID (deferred)
fffff805`6d600000 fffff805`6e646000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff805`71000000 fffff805`71069000 CLFS (deferred)
fffff805`71070000 fffff805`7108a000 PSHED (deferred)
fffff805`71090000 fffff805`711a3000 clipsp (deferred)
fffff805`711b0000 fffff805`7121f000 FLTMGR (deferred)
fffff805`71220000 fffff805`71249000 ksecdd (deferred)
fffff805`71250000 fffff805`712b2000 msrpc (deferred)
fffff805`712c0000 fffff805`712ce000 cmimcext (deferred)
fffff805`712d0000 fffff805`712e1000 werkernel (deferred)
fffff805`712f0000 fffff805`712fc000 ntosext (deferred)
fffff805`71300000 fffff805`713e3000 CI (deferred)
fffff805`713f0000 fffff805`714a7000 cng (deferred)
fffff805`714b0000 fffff805`71581000 Wdf01000 (deferred)
fffff805`71590000 fffff805`715a3000 WDFLDR (deferred)
fffff805`715b0000 fffff805`715bf000 SleepStudyHelper (deferred)
fffff805`715c0000 fffff805`715d1000 WppRecorder (deferred)
fffff805`715e0000 fffff805`71606000 acpiex (deferred)
fffff805`71610000 fffff805`7162a000 SgrmAgent (deferred)
fffff805`71630000 fffff805`716fc000 ACPI (deferred)
fffff805`71700000 fffff805`7170c000 WMILIB (deferred)
fffff805`71710000 fffff805`7171b000 msisadrv (deferred)
fffff805`71720000 fffff805`71796000 pci (deferred)
fffff805`717a0000 fffff805`717e4000 tpm (deferred)
fffff805`717f0000 fffff805`717fb000 IntelTA (deferred)
fffff805`71820000 fffff805`7188b000 intelpep (deferred)
fffff805`71890000 fffff805`718a7000 WindowsTrustedRT (deferred)
fffff805`718b0000 fffff805`718bb000 WindowsTrustedRTProxy (deferred)
fffff805`718c0000 fffff805`718d4000 pcw (deferred)
fffff805`718e0000 fffff805`718f5000 vdrvroot (deferred)
fffff805`71900000 fffff805`7192f000 pdc (deferred)
fffff805`71930000 fffff805`71949000 CEA (deferred)
fffff805`71950000 fffff805`71981000 partmgr (deferred)
fffff805`71990000 fffff805`71a3a000 spaceport (deferred)
fffff805`71a40000 fffff805`71a59000 volmgr (deferred)
fffff805`71a60000 fffff805`71ac3000 volmgrx (deferred)
fffff805`71ad0000 fffff805`71aee000 mountmgr (deferred)
fffff805`71af0000 fffff805`726d2000 iaStorAC (deferred)
fffff805`726e0000 fffff805`72793000 storport (deferred)
fffff805`727a0000 fffff805`727bc000 EhStorClass (deferred)
fffff805`727c0000 fffff805`727da000 fileinfo (deferred)
fffff805`727f0000 fffff805`7282f000 Wof (deferred)
fffff805`72830000 fffff805`72899000 WdFilter (deferred)
fffff805`728a0000 fffff805`72b79000 Ntfs (deferred)
fffff805`72b80000 fffff805`72b8d000 Fs_Rec (deferred)
fffff805`72b90000 fffff805`72cff000 ndis (deferred)
fffff805`72d00000 fffff805`72d98000 NETIO (deferred)
fffff805`72da0000 fffff805`72dd2000 ksecpkg (deferred)
fffff805`72de0000 fffff805`730cb000 tcpip (deferred)
fffff805`730d0000 fffff805`7314f000 fwpkclnt (deferred)
fffff805`73150000 fffff805`73180000 wfplwfs (deferred)
fffff805`73190000 fffff805`73258000 fvevol (deferred)
fffff805`73260000 fffff805`73274000 amdkmpfd (deferred)
fffff805`73280000 fffff805`7328b000 volume (deferred)
fffff805`73290000 fffff805`732fd000 volsnap (deferred)
fffff805`73300000 fffff805`73350000 rdyboost (deferred)
fffff805`73360000 fffff805`73386000 mup (deferred)
fffff805`73390000 fffff805`733a2000 iorate (deferred)
fffff805`733d0000 fffff805`733ec000 disk (deferred)
fffff805`733f0000 fffff805`7345c000 CLASSPNP (deferred)
fffff805`86350000 fffff805`8636e000 crashdmp (deferred)
fffff805`86400000 fffff805`864e2000 dxgmms2 (deferred)
fffff805`864f0000 fffff805`8650b000 monitor (deferred)
fffff805`86510000 fffff805`86539000 luafv (deferred)
fffff805`86540000 fffff805`86576000 wcifs (deferred)
fffff805`86580000 fffff805`86601000 cldflt (deferred)
fffff805`86610000 fffff805`86624000 mmcss (deferred)
fffff805`86630000 fffff805`8664a000 storqosflt (deferred)
fffff805`86650000 fffff805`86678000 bindflt (deferred)
fffff805`86680000 fffff805`8668b000 semav6msr64 (deferred)
fffff805`866a0000 fffff805`866b8000 lltdio (deferred)
fffff805`866c0000 fffff805`866d8000 mslldp (deferred)
fffff805`866e0000 fffff805`866fb000 rspndr (deferred)
fffff805`86700000 fffff805`8671d000 wanarp (deferred)
fffff805`86720000 fffff805`86738000 ndisuio (deferred)
fffff805`86740000 fffff805`867fb000 nwifi (deferred)
fffff805`86800000 fffff805`86856000 msquic (deferred)
fffff805`86860000 fffff805`869e5000 HTTP (deferred)
fffff805`869f0000 fffff805`86a03000 condrv (deferred)
fffff805`86a10000 fffff805`86a35000 bowser (deferred)
fffff805`86a40000 fffff805`86a5a000 mpsdrv (deferred)
fffff805`86a60000 fffff805`86af3000 mrxsmb (deferred)
fffff805`86b00000 fffff805`86b45000 mrxsmb20 (deferred)
fffff805`86b50000 fffff805`86b85000 idmwfp (deferred)
fffff805`86b90000 fffff805`86be3000 srvnet (deferred)
fffff805`86bf0000 fffff805`86bf8000 lgcoretemp (deferred)
fffff805`86c00000 fffff805`86c27000 Ndu (deferred)
fffff805`86c30000 fffff805`86d06000 peauth (deferred)
fffff805`86d10000 fffff805`86d25000 tcpipreg (deferred)
fffff805`86d30000 fffff805`86d43000 vwifimp (deferred)
fffff805`86d50000 fffff805`86d6c000 rassstp (deferred)
fffff805`86d70000 fffff805`86d8d000 NDProxy (deferred)
fffff805`86d90000 fffff805`86db8000 AgileVpn (deferred)
fffff805`86dc0000 fffff805`86dcf000 ndistapi (deferred)
fffff805`86dd0000 fffff805`879b2000 dump_iaStorAC (deferred)
fffff805`879e0000 fffff805`879fd000 dump_dumpfve (deferred)
fffff805`88000000 fffff805`883a4000 dxgkrnl (deferred)
fffff805`883b0000 fffff805`883c8000 watchdog (deferred)
fffff805`883d0000 fffff805`883e6000 BasicDisplay (deferred)
fffff805`883f0000 fffff805`88401000 BasicRender (deferred)
fffff805`88410000 fffff805`8842c000 Npfs (deferred)
fffff805`88430000 fffff805`88441000 Msfs (deferred)
fffff805`88450000 fffff805`8846b000 CimFS (deferred)
fffff805`88470000 fffff805`88492000 tdx (deferred)
fffff805`884a0000 fffff805`884b0000 TDI (deferred)
fffff805`884c0000 fffff805`8851c000 netbt (deferred)
fffff805`88520000 fffff805`88533000 afunix (deferred)
fffff805`88540000 fffff805`885e3000 afd (deferred)
fffff805`885f0000 fffff805`8860a000 vwififlt (deferred)
fffff805`88610000 fffff805`8863b000 pacer (deferred)
fffff805`88640000 fffff805`88654000 ndiscap (deferred)
fffff805`88660000 fffff805`88674000 netbios (deferred)
fffff805`88680000 fffff805`88721000 Vid (deferred)
fffff805`88730000 fffff805`88751000 winhvr (deferred)
fffff805`88760000 fffff805`887dc000 rdbss (deferred)
fffff805`887e0000 fffff805`887f2000 nsiproxy (deferred)
fffff805`88800000 fffff805`8880e000 npsvctrig (deferred)
fffff805`88810000 fffff805`88820000 mssmbios (deferred)
fffff805`88830000 fffff805`8883a000 gpuenergydrv (deferred)
fffff805`88840000 fffff805`8886c000 dfsc (deferred)
fffff805`88890000 fffff805`888fc000 fastfat (deferred)
fffff805`88900000 fffff805`88917000 bam (deferred)
fffff805`88920000 fffff805`8896e000 ahcache (deferred)
fffff805`88970000 fffff805`8897e000 amdxe (deferred)
fffff805`88980000 fffff805`8899a000 amdfendr (deferred)
fffff805`889a0000 fffff805`889b2000 CompositeBus (deferred)
fffff805`889c0000 fffff805`889cd000 kdnic (deferred)
fffff805`889d0000 fffff805`889e5000 umbus (deferred)
fffff805`889f0000 fffff805`88a05000 CAD (deferred)
fffff805`89b70000 fffff805`89ba0000 cdrom (deferred)
fffff805`89bb0000 fffff805`89bc5000 filecrypt (deferred)
fffff805`89bd0000 fffff805`89bde000 tbs (deferred)
fffff805`89be0000 fffff805`89bea000 Null (deferred)
fffff805`89bf0000 fffff805`89bfa000 Beep (deferred)
fffff805`8aa00000 fffff805`8aa98000 USBXHCI (deferred)
fffff805`8aaa0000 fffff805`8aae4000 ucx01000 (deferred)
fffff805`8aaf0000 fffff805`8ab20000 TeeDriverW8x64 (deferred)
fffff805`8ab30000 fffff805`8ac17000 rt640x64 (deferred)
fffff805`8ac20000 fffff805`8ada5000 BTHport (deferred)
fffff805`8b150000 fffff805`8bd96000 igdkmd64 (deferred)
fffff805`8be00000 fffff805`8bef0000 wdiwifi (deferred)
fffff805`8bf00000 fffff805`8bf0e000 vwifibus (deferred)
fffff805`8bf10000 fffff805`8bf1f000 CmBatt (deferred)
fffff805`8bf20000 fffff805`8bf30000 BATTC (deferred)
fffff805`8bf40000 fffff805`8bf55000 AcpiVpc (deferred)
fffff805`8bf60000 fffff805`8bf6c000 ICCWDT (deferred)
fffff805`8bf70000 fffff805`8bf91000 i8042prt (deferred)
fffff805`8bfa0000 fffff805`8c021000 ETD (deferred)
fffff805`8c030000 fffff805`8c044000 kbdclass (deferred)
fffff805`8c050000 fffff805`8c063000 mouclass (deferred)
fffff805`8c070000 fffff805`8c095000 HDAudBus (deferred)
fffff805`8c0a0000 fffff805`8c106000 portcls (deferred)
fffff805`8c110000 fffff805`8c131000 drmk (deferred)
fffff805`8c140000 fffff805`8c1b6000 ks (deferred)
fffff805`8c1c0000 fffff805`8c1cc000 wmiacpi (deferred)
fffff805`8c1d0000 fffff805`8c210000 intelppm (deferred)
fffff805`8c220000 fffff805`8c22b000 acpipagr (deferred)
fffff805`8c230000 fffff805`8c23e000 UEFI (deferred)
fffff805`8c240000 fffff805`8c24d000 NdisVirtualBus (deferred)
fffff805`8c250000 fffff805`8c25c000 swenum (deferred)
fffff805`8c260000 fffff805`8c264e00 LGBusEnum (deferred)
fffff805`8c270000 fffff805`8c27c800 LGJoyXlCore (deferred)
fffff805`8c280000 fffff805`8c28e000 rdpbus (deferred)
fffff805`8c290000 fffff805`8c418000 CHDRT64 (deferred)
fffff805`8c420000 fffff805`8c42f000 ksthunk (deferred)
fffff805`8c430000 fffff805`8c4f8000 IntcDAud (deferred)
fffff805`8c500000 fffff805`8c5a3000 UsbHub3 (deferred)
fffff805`8c5b0000 fffff805`8c5be000 USBD (deferred)
fffff805`8c5c0000 fffff805`8c5f3000 usbccgp (deferred)
fffff805`8c600000 fffff805`8c612000 hidusb (deferred)
fffff805`8c620000 fffff805`8c65f000 HIDCLASS (deferred)
fffff805`8c660000 fffff805`8c673000 HIDPARSE (deferred)
fffff805`8c680000 fffff805`8c695000 LGSHidFilt (deferred)
fffff805`8c6a0000 fffff805`8c6b0000 mouhid (deferred)
fffff805`8c6c0000 fffff805`8c6d1000 kbdhid (deferred)
fffff805`8c6e0000 fffff805`8c747000 RtsUer (deferred)
fffff805`8c8b0000 fffff805`8d132000 Netwtw04 (deferred)
fffff805`8f200000 fffff805`8f221000 raspptp (deferred)
fffff805`8f230000 fffff805`8f24c000 raspppoe (deferred)
fffff805`8f250000 fffff805`8f28a000 ndiswan (deferred)
fffff805`8f290000 fffff805`8f2a6000 WdNisDrv (deferred)
fffff805`8f2b0000 fffff805`8f2b2500 LGVirHid (deferred)
fffff805`8f2c0000 fffff805`8f2de000 MpKslDrv (deferred)
fffff805`8f330000 fffff805`91240000 rtsuvc (deferred)
fffff805`91250000 fffff805`91290000 ibtusb (deferred)
fffff805`912a0000 fffff805`912c1000 BTHUSB (deferred)
fffff805`912e0000 fffff805`912ee000 dump_diskdump (deferred)
fffff805`912f0000 fffff805`913b7000 srv2 (deferred)
fffff805`913c0000 fffff805`913e1000 rasl2tp (deferred)

Unloaded modules:
fffff805`86680000 fffff805`86691000 MSKSSRV.sys
fffff805`86680000 fffff805`86691000 MSKSSRV.sys
fffff805`86380000 fffff805`8638f000 dump_storpor
fffff805`88f40000 fffff805`89b23000 dump_iaStorA
fffff805`89b50000 fffff805`89b6e000 dump_dumpfve
fffff805`88870000 fffff805`8888c000 dam.sys
fffff805`71800000 fffff805`71812000 WdBoot.sys
fffff805`733b0000 fffff805`733c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040821-9906-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff803`1b000000 PsLoadedModuleList = 0xfffff803`1bc2a490
Debug session time: Thu Apr 8 16:20:52.976 2021 (UTC + 3:00)
System Uptime: 0 days 0:26:27.739
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`1b3f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff803`2165d9b0=00000000000000f7
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer. This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned. This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: fffff8032165d9f0, Actual security check cookie from the stack
Arg2: 0000ebc94e6598d4, Expected security check cookie
Arg3: ffff1436b19a672b, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2749

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 7410

Key : Analysis.Init.CPU.mSec
Value: 390

Key : Analysis.Init.Elapsed.mSec
Value: 4277

Key : Analysis.Memory.CommitPeak.Mb
Value: 78

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: f7

BUGCHECK_P1: fffff8032165d9f0

BUGCHECK_P2: ebc94e6598d4

BUGCHECK_P3: ffff1436b19a672b

BUGCHECK_P4: 0

SECURITY_COOKIE: Expected 0000ebc94e6598d4 found fffff8032165d9f0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

STACK_TEXT:
fffff803`2165d9a8 fffff803`1b4b0cd5 : 00000000`000000f7 fffff803`2165d9f0 0000ebc9`4e6598d4 ffff1436`b19a672b : nt!KeBugCheckEx
fffff803`2165d9b0 fffff803`1b270188 : 00000000`00000000 00001f80`0000000d 00000000`00000003 00000000`00000002 : nt!_report_gsfailure+0x25
fffff803`2165d9f0 fffff803`1b3f9774 : 00000000`00000000 fffff803`1bd27600 ffffa40b`62776080 00000000`0000063c : nt!PoIdle+0x3a8
fffff803`2165db60 00000000`00000000 : fffff803`2165e000 fffff803`21657000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x54


SYMBOL_NAME: nt!_report_gsfailure+25

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 25

FAILURE_BUCKET_ID: 0xF7_MISSING_GSFRAME_nt!_report_gsfailure

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}

Followup: MachineOwner
---------

0: kd> lm
start end module name
ffff803c`68c00000 ffff803c`68ed9000 win32kbase (deferred)
ffff803c`690a0000 ffff803c`6913a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
ffff803c`69f10000 ffff803c`6a2c6000 win32kfull (deferred)
ffff803c`6a2d0000 ffff803c`6a31a000 cdd (deferred)
fffff803`193c0000 fffff803`1975d000 mcupdate_GenuineIntel (deferred)
fffff803`19760000 fffff803`19766000 hal (deferred)
fffff803`19770000 fffff803`1977b000 kd (deferred)
fffff803`19780000 fffff803`197a7000 tm (deferred)
fffff803`197b0000 fffff803`197bb000 BOOTVID (deferred)
fffff803`1b000000 fffff803`1c046000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff803`1ec00000 fffff803`1ec69000 CLFS (deferred)
fffff803`1ec70000 fffff803`1ec8a000 PSHED (deferred)
fffff803`1ec90000 fffff803`1eda3000 clipsp (deferred)
fffff803`1edb0000 fffff803`1ee1f000 FLTMGR (deferred)
fffff803`1ee20000 fffff803`1ee49000 ksecdd (deferred)
fffff803`1ee50000 fffff803`1eeb2000 msrpc (deferred)
fffff803`1eec0000 fffff803`1eece000 cmimcext (deferred)
fffff803`1eed0000 fffff803`1eee1000 werkernel (deferred)
fffff803`1eef0000 fffff803`1eefc000 ntosext (deferred)
fffff803`1ef00000 fffff803`1efe3000 CI (deferred)
fffff803`1eff0000 fffff803`1f0a7000 cng (deferred)
fffff803`1f0b0000 fffff803`1f181000 Wdf01000 (deferred)
fffff803`1f190000 fffff803`1f1a3000 WDFLDR (deferred)
fffff803`1f1b0000 fffff803`1f1bf000 SleepStudyHelper (deferred)
fffff803`1f1c0000 fffff803`1f1d1000 WppRecorder (deferred)
fffff803`1f1e0000 fffff803`1f206000 acpiex (deferred)
fffff803`1f210000 fffff803`1f22a000 SgrmAgent (deferred)
fffff803`1f230000 fffff803`1f2fc000 ACPI (deferred)
fffff803`1f300000 fffff803`1f30c000 WMILIB (deferred)
fffff803`1f310000 fffff803`1f31b000 msisadrv (deferred)
fffff803`1f320000 fffff803`1f396000 pci (deferred)
fffff803`1f3a0000 fffff803`1f3e4000 tpm (deferred)
fffff803`1f3f0000 fffff803`1f3fb000 IntelTA (deferred)
fffff803`1f420000 fffff803`1f48b000 intelpep (deferred)
fffff803`1f490000 fffff803`1f4a7000 WindowsTrustedRT (deferred)
fffff803`1f4b0000 fffff803`1f4bb000 WindowsTrustedRTProxy (deferred)
fffff803`1f4c0000 fffff803`1f4d4000 pcw (deferred)
fffff803`1f4e0000 fffff803`1f4f5000 vdrvroot (deferred)
fffff803`1f500000 fffff803`1f52f000 pdc (deferred)
fffff803`1f530000 fffff803`1f549000 CEA (deferred)
fffff803`1f550000 fffff803`1f581000 partmgr (deferred)
fffff803`1f590000 fffff803`1f63a000 spaceport (deferred)
fffff803`1f640000 fffff803`1f659000 volmgr (deferred)
fffff803`1f660000 fffff803`1f6c3000 volmgrx (deferred)
fffff803`1f6d0000 fffff803`1f6ee000 mountmgr (deferred)
fffff803`1f6f0000 fffff803`202d2000 iaStorAC (deferred)
fffff803`202e0000 fffff803`20393000 storport (deferred)
fffff803`203a0000 fffff803`203bc000 EhStorClass (deferred)
fffff803`203c0000 fffff803`203da000 fileinfo (deferred)
fffff803`203f0000 fffff803`2042f000 Wof (deferred)
fffff803`20430000 fffff803`20499000 WdFilter (deferred)
fffff803`204a0000 fffff803`20779000 Ntfs (deferred)
fffff803`20780000 fffff803`2078d000 Fs_Rec (deferred)
fffff803`20790000 fffff803`208ff000 ndis (deferred)
fffff803`20900000 fffff803`20998000 NETIO (deferred)
fffff803`209a0000 fffff803`209d2000 ksecpkg (deferred)
fffff803`209e0000 fffff803`20ccb000 tcpip (deferred)
fffff803`20cd0000 fffff803`20d4f000 fwpkclnt (deferred)
fffff803`20d50000 fffff803`20d80000 wfplwfs (deferred)
fffff803`20d90000 fffff803`20e58000 fvevol (deferred)
fffff803`20e60000 fffff803`20e74000 amdkmpfd (deferred)
fffff803`20e80000 fffff803`20e8b000 volume (deferred)
fffff803`20e90000 fffff803`20efd000 volsnap (deferred)
fffff803`20f00000 fffff803`20f50000 rdyboost (deferred)
fffff803`20f60000 fffff803`20f86000 mup (deferred)
fffff803`20f90000 fffff803`20fa2000 iorate (deferred)
fffff803`20fd0000 fffff803`20fec000 disk (deferred)
fffff803`20ff0000 fffff803`2105c000 CLASSPNP (deferred)
fffff803`33e00000 fffff803`349e2000 dump_iaStorAC (deferred)
fffff803`34b00000 fffff803`34b1e000 crashdmp (deferred)
fffff803`34c00000 fffff803`34c0e000 tbs (deferred)
fffff803`34c10000 fffff803`34c1a000 Null (deferred)
fffff803`34c20000 fffff803`34c2a000 Beep (deferred)
fffff803`34c30000 fffff803`34fd4000 dxgkrnl (deferred)
fffff803`34fe0000 fffff803`34ff8000 watchdog (deferred)
fffff803`35000000 fffff803`35016000 BasicDisplay (deferred)
fffff803`35020000 fffff803`35031000 BasicRender (deferred)
fffff803`35040000 fffff803`3505c000 Npfs (deferred)
fffff803`35060000 fffff803`35071000 Msfs (deferred)
fffff803`35080000 fffff803`3509b000 CimFS (deferred)
fffff803`350a0000 fffff803`350c2000 tdx (deferred)
fffff803`350d0000 fffff803`350e0000 TDI (deferred)
fffff803`350f0000 fffff803`3514c000 netbt (deferred)
fffff803`35150000 fffff803`35163000 afunix (deferred)
fffff803`35170000 fffff803`35213000 afd (deferred)
fffff803`35220000 fffff803`3523a000 vwififlt (deferred)
fffff803`35240000 fffff803`3526b000 pacer (deferred)
fffff803`35270000 fffff803`35284000 ndiscap (deferred)
fffff803`35290000 fffff803`352a4000 netbios (deferred)
fffff803`352b0000 fffff803`35351000 Vid (deferred)
fffff803`35360000 fffff803`35381000 winhvr (deferred)
fffff803`35390000 fffff803`3540c000 rdbss (deferred)
fffff803`35410000 fffff803`35422000 nsiproxy (deferred)
fffff803`35430000 fffff803`3543e000 npsvctrig (deferred)
fffff803`35440000 fffff803`35450000 mssmbios (deferred)
fffff803`35460000 fffff803`3546a000 gpuenergydrv (deferred)
fffff803`35470000 fffff803`3549c000 dfsc (deferred)
fffff803`354c0000 fffff803`3552c000 fastfat (deferred)
fffff803`35530000 fffff803`35547000 bam (deferred)
fffff803`35550000 fffff803`3559e000 ahcache (deferred)
fffff803`355a0000 fffff803`355ae000 amdxe (deferred)
fffff803`355b0000 fffff803`355ca000 amdfendr (deferred)
fffff803`355d0000 fffff803`355e2000 CompositeBus (deferred)
fffff803`355f0000 fffff803`355fd000 kdnic (deferred)
fffff803`35600000 fffff803`35615000 umbus (deferred)
fffff803`35620000 fffff803`35635000 CAD (deferred)
fffff803`363a0000 fffff803`363d0000 cdrom (deferred)
fffff803`363e0000 fffff803`363f5000 filecrypt (deferred)
fffff803`37200000 fffff803`372e7000 rt640x64 (deferred)
fffff803`37440000 fffff803`38086000 igdkmd64 (deferred)
fffff803`38090000 fffff803`38128000 USBXHCI (deferred)
fffff803`38130000 fffff803`38174000 ucx01000 (deferred)
fffff803`38180000 fffff803`381b0000 TeeDriverW8x64 (deferred)
fffff803`38200000 fffff803`382f0000 wdiwifi (deferred)
fffff803`38300000 fffff803`3830e000 vwifibus (deferred)
fffff803`38310000 fffff803`3831f000 CmBatt (deferred)
fffff803`38320000 fffff803`38330000 BATTC (deferred)
fffff803`38340000 fffff803`38355000 AcpiVpc (deferred)
fffff803`38360000 fffff803`3836c000 ICCWDT (deferred)
fffff803`38370000 fffff803`38391000 i8042prt (deferred)
fffff803`383a0000 fffff803`38421000 ETD (deferred)
fffff803`38430000 fffff803`38444000 kbdclass (deferred)
fffff803`38450000 fffff803`38463000 mouclass (deferred)
fffff803`38470000 fffff803`38495000 HDAudBus (deferred)
fffff803`384a0000 fffff803`38506000 portcls (deferred)
fffff803`38510000 fffff803`38531000 drmk (deferred)
fffff803`38540000 fffff803`385b6000 ks (deferred)
fffff803`385c0000 fffff803`385cc000 wmiacpi (deferred)
fffff803`385d0000 fffff803`38610000 intelppm (deferred)
fffff803`38620000 fffff803`3862b000 acpipagr (deferred)
fffff803`38630000 fffff803`3863e000 UEFI (deferred)
fffff803`38640000 fffff803`3864d000 NdisVirtualBus (deferred)
fffff803`38650000 fffff803`3865c000 swenum (deferred)
fffff803`38660000 fffff803`38664e00 LGBusEnum (deferred)
fffff803`38670000 fffff803`3867c800 LGJoyXlCore (deferred)
fffff803`38680000 fffff803`3868e000 rdpbus (deferred)
fffff803`38690000 fffff803`38818000 CHDRT64 (deferred)
fffff803`38820000 fffff803`3882f000 ksthunk (deferred)
fffff803`38830000 fffff803`388f8000 IntcDAud (deferred)
fffff803`38900000 fffff803`389a3000 UsbHub3 (deferred)
fffff803`389b0000 fffff803`389be000 USBD (deferred)
fffff803`389c0000 fffff803`389f3000 usbccgp (deferred)
fffff803`38a00000 fffff803`38a12000 hidusb (deferred)
fffff803`38a20000 fffff803`38a5f000 HIDCLASS (deferred)
fffff803`38a60000 fffff803`38a73000 HIDPARSE (deferred)
fffff803`38a80000 fffff803`38a95000 LGSHidFilt (deferred)
fffff803`38aa0000 fffff803`38ab0000 mouhid (deferred)
fffff803`38ac0000 fffff803`38ad1000 kbdhid (deferred)
fffff803`38ae0000 fffff803`38b47000 RtsUer (deferred)
fffff803`38cb0000 fffff803`39532000 Netwtw04 (deferred)
fffff803`3b600000 fffff803`3b785000 BTHport (deferred)
fffff803`3b7a0000 fffff803`3b7ae000 dump_diskdump (deferred)
fffff803`3b7d0000 fffff803`3b7ed000 dump_dumpfve (deferred)
fffff803`3b7f0000 fffff803`3b8d2000 dxgmms2 (deferred)
fffff803`3b8e0000 fffff803`3b8fb000 monitor (deferred)
fffff803`3b900000 fffff803`3b929000 luafv (deferred)
fffff803`3b930000 fffff803`3b966000 wcifs (deferred)
fffff803`3b970000 fffff803`3b9f1000 cldflt (deferred)
fffff803`3ba00000 fffff803`3ba14000 mmcss (deferred)
fffff803`3ba20000 fffff803`3ba3a000 storqosflt (deferred)
fffff803`3ba40000 fffff803`3ba68000 bindflt (deferred)
fffff803`3ba90000 fffff803`3baa8000 lltdio (deferred)
fffff803`3bab0000 fffff803`3bac8000 mslldp (deferred)
fffff803`3bad0000 fffff803`3baeb000 rspndr (deferred)
fffff803`3baf0000 fffff803`3bb0d000 wanarp (deferred)
fffff803`3bb10000 fffff803`3bbcb000 nwifi (deferred)
fffff803`3bbd0000 fffff803`3bbe8000 ndisuio (deferred)
fffff803`3bbf0000 fffff803`3bc46000 msquic (deferred)
fffff803`3bc50000 fffff803`3bdd5000 HTTP (deferred)
fffff803`3bde0000 fffff803`3bdf3000 condrv (deferred)
fffff803`3be00000 fffff803`3be1a000 mpsdrv (deferred)
fffff803`3be20000 fffff803`3be45000 bowser (deferred)
fffff803`3be50000 fffff803`3bee3000 mrxsmb (deferred)
fffff803`3bef0000 fffff803`3bf35000 mrxsmb20 (deferred)
fffff803`3bf40000 fffff803`3bf53000 vwifimp (deferred)
fffff803`3bf60000 fffff803`3bf95000 idmwfp (deferred)
fffff803`3bfa0000 fffff803`3bff3000 srvnet (deferred)
fffff803`3c000000 fffff803`3c008000 lgcoretemp (deferred)
fffff803`3c010000 fffff803`3c037000 Ndu (deferred)
fffff803`3c040000 fffff803`3c116000 peauth (deferred)
fffff803`3c120000 fffff803`3c1e7000 srv2 (deferred)
fffff803`3c1f0000 fffff803`3c205000 tcpipreg (deferred)
fffff803`3c210000 fffff803`3c22c000 rassstp (deferred)
fffff803`3c230000 fffff803`3c24d000 NDProxy (deferred)
fffff803`3c250000 fffff803`3c278000 AgileVpn (deferred)
fffff803`3c280000 fffff803`3c2a1000 rasl2tp (deferred)
fffff803`3c2b0000 fffff803`3c2d1000 raspptp (deferred)
fffff803`3c2e0000 fffff803`3c2fc000 raspppoe (deferred)
fffff803`3c300000 fffff803`3c30f000 ndistapi (deferred)
fffff803`3c310000 fffff803`3c34a000 ndiswan (deferred)
fffff803`3c350000 fffff803`3c366000 WdNisDrv (deferred)
fffff803`3c370000 fffff803`3c372500 LGVirHid (deferred)
fffff803`3c380000 fffff803`3c38b000 semav6msr64 (deferred)
fffff803`3e2b0000 fffff803`3e2f0000 ibtusb (deferred)
fffff803`3e300000 fffff803`3e321000 BTHUSB (deferred)
fffff803`3e400000 fffff803`3e41e000 MpKslDrv (deferred)
fffff803`3e8b0000 fffff803`407c0000 rtsuvc (deferred)

Unloaded modules:
fffff803`3c390000 fffff803`3c3a1000 MSKSSRV.sys
fffff803`3e450000 fffff803`3e45b000 drmkaud.sys
fffff803`3e440000 fffff803`3e44e000 MSTEE.sys
fffff803`3e430000 fffff803`3e43d000 MSPQM.sys
fffff803`3e420000 fffff803`3e42d000 MSPCLOCK.sys
fffff803`407f0000 fffff803`407fe000 MSTEE.sys
fffff803`407e0000 fffff803`407ed000 MSPQM.sys
fffff803`407d0000 fffff803`407dd000 MSPCLOCK.sys
fffff803`3c390000 fffff803`3e2a1000 rtsuvc.sys
fffff803`3ba70000 fffff803`3ba81000 MSKSSRV.sys
fffff803`34b30000 fffff803`34b3f000 dump_storpor
fffff803`35770000 fffff803`36353000 dump_iaStorA
fffff803`36380000 fffff803`3639e000 dump_dumpfve
fffff803`354a0000 fffff803`354bc000 dam.sys
fffff803`1f400000 fffff803`1f412000 WdBoot.sys
fffff803`20fb0000 fffff803`20fc1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040921-10281-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff803`63600000 PsLoadedModuleList = 0xfffff803`6422a490
Debug session time: Fri Apr 9 15:40:11.040 2021 (UTC + 3:00)
System Uptime: 0 days 6:46:04.803
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
........................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`639f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff9f03`040bec40=0000000000000139
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff9f03040bef60, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffff9f03040beeb8, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------


KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2733

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 14057

Key : Analysis.Init.CPU.mSec
Value: 327

Key : Analysis.Init.Elapsed.mSec
Value: 3159

Key : Analysis.Memory.CommitPeak.Mb
Value: 74

Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY

Key : FailFast.Type
Value: 3

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: 139

BUGCHECK_P1: 3

BUGCHECK_P2: ffff9f03040bef60

BUGCHECK_P3: ffff9f03040beeb8

BUGCHECK_P4: 0

TRAP_FRAME: ffff9f03040bef60 -- (.trap 0xffff9f03040bef60)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000003
rdx=ffff8903d53d41f0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80363843edf rsp=ffff9f03040bf0f0 rbp=ffff9f03040bf1b9
r8=0000000000000000 r9=0000000000000000 r10=fffff803609af180
r11=ffff9f03040bf2b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz ac po cy
nt!KeWaitForMultipleObjects+0x43f:
fffff803`63843edf cd29 int 29h
Resetting default scope

EXCEPTION_RECORD: ffff9f03040beeb8 -- (.exr 0xffff9f03040beeb8)
ExceptionAddress: fffff80363843edf (nt!KeWaitForMultipleObjects+0x000000000000043f)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: MsMpEng.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000003

EXCEPTION_STR: 0xc0000409

STACK_TEXT:
ffff9f03`040bec38 fffff803`63a07b69 : 00000000`00000139 00000000`00000003 ffff9f03`040bef60 ffff9f03`040beeb8 : nt!KeBugCheckEx
ffff9f03`040bec40 fffff803`63a07f90 : fffff803`609af180 00000000`00000002 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff9f03`040bed80 fffff803`63a06323 : ffffcb01`7b1b6100 ffff02d4`0e952cd1 00000000`00000001 ffff8903`d53d4180 : nt!KiFastFailDispatch+0xd0
ffff9f03`040bef60 fffff803`63843edf : 00000000`000000c8 00000000`00000000 00000000`00000001 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
ffff9f03`040bf0f0 fffff803`63bf7ac0 : ffff9f03`040bf4b0 00000000`00000001 ffff8903`d56f4c30 ffffcb01`7adea180 : nt!KeWaitForMultipleObjects+0x43f
ffff9f03`040bf200 fffff803`63bf7799 : 00000000`00000002 fffff803`6384b0b6 ffff9f03`040bf748 ffff8903`d7928080 : nt!ObWaitForMultipleObjects+0x2f0
ffff9f03`040bf700 fffff803`63a075b5 : ffff9f03`040bfa00 00000000`00000000 ffff8903`d53d4080 ffff8903`d57cf3d0 : nt!NtWaitForMultipleObjects+0x119
ffff9f03`040bf990 00007fff`9e5ad764 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
0000009a`f1dff598 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`9e5ad764


SYMBOL_NAME: nt!KiFastFailDispatch+d0

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: d0

FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}

Followup: MachineOwner
---------

0: kd> lm
start end module name
fffff4e1`1aa00000 fffff4e1`1acd9000 win32kbase (deferred)
fffff4e1`1ace0000 fffff4e1`1b096000 win32kfull (deferred)
fffff4e1`1b0a0000 fffff4e1`1b0ea000 cdd (deferred)
fffff4e1`1b490000 fffff4e1`1b52a000 win32k (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff803`61ac0000 fffff803`61e5d000 mcupdate_GenuineIntel (deferred)
fffff803`61e60000 fffff803`61e66000 hal (deferred)
fffff803`61e70000 fffff803`61e7b000 kd (deferred)
fffff803`61e80000 fffff803`61ea7000 tm (deferred)
fffff803`61eb0000 fffff803`61ebb000 BOOTVID (deferred)
fffff803`63600000 fffff803`64646000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff803`67400000 fffff803`67469000 CLFS (deferred)
fffff803`67470000 fffff803`6748a000 PSHED (deferred)
fffff803`67490000 fffff803`675a3000 clipsp (deferred)
fffff803`675b0000 fffff803`6761f000 FLTMGR (deferred)
fffff803`67620000 fffff803`67649000 ksecdd (deferred)
fffff803`67650000 fffff803`676b2000 msrpc (deferred)
fffff803`676c0000 fffff803`676ce000 cmimcext (deferred)
fffff803`676d0000 fffff803`676e1000 werkernel (deferred)
fffff803`676f0000 fffff803`676fc000 ntosext (deferred)
fffff803`67700000 fffff803`677e3000 CI (deferred)
fffff803`677f0000 fffff803`678a7000 cng (deferred)
fffff803`678b0000 fffff803`67981000 Wdf01000 (deferred)
fffff803`67990000 fffff803`679a3000 WDFLDR (deferred)
fffff803`679b0000 fffff803`679bf000 SleepStudyHelper (deferred)
fffff803`679c0000 fffff803`679d1000 WppRecorder (deferred)
fffff803`679e0000 fffff803`67a06000 acpiex (deferred)
fffff803`67a10000 fffff803`67a2a000 SgrmAgent (deferred)
fffff803`67a30000 fffff803`67afc000 ACPI (deferred)
fffff803`67b00000 fffff803`67b0c000 WMILIB (deferred)
fffff803`67b10000 fffff803`67b1b000 msisadrv (deferred)
fffff803`67b20000 fffff803`67b96000 pci (deferred)
fffff803`67ba0000 fffff803`67be4000 tpm (deferred)
fffff803`67bf0000 fffff803`67bfb000 IntelTA (deferred)
fffff803`67c20000 fffff803`67c8b000 intelpep (deferred)
fffff803`67c90000 fffff803`67ca7000 WindowsTrustedRT (deferred)
fffff803`67cb0000 fffff803`67cbb000 WindowsTrustedRTProxy (deferred)
fffff803`67cc0000 fffff803`67cd4000 pcw (deferred)
fffff803`67ce0000 fffff803`67cf5000 vdrvroot (deferred)
fffff803`67d00000 fffff803`67d2f000 pdc (deferred)
fffff803`67d30000 fffff803`67d49000 CEA (deferred)
fffff803`67d50000 fffff803`67d81000 partmgr (deferred)
fffff803`67d90000 fffff803`67e3a000 spaceport (deferred)
fffff803`67e40000 fffff803`67e59000 volmgr (deferred)
fffff803`67e60000 fffff803`67ec3000 volmgrx (deferred)
fffff803`67ed0000 fffff803`67eee000 mountmgr (deferred)
fffff803`67ef0000 fffff803`68ad2000 iaStorAC (deferred)
fffff803`68ae0000 fffff803`68b93000 storport (deferred)
fffff803`68ba0000 fffff803`68bbc000 EhStorClass (deferred)
fffff803`68bc0000 fffff803`68bda000 fileinfo (deferred)
fffff803`68bf0000 fffff803`68c2f000 Wof (deferred)
fffff803`68c30000 fffff803`68c99000 WdFilter (deferred)
fffff803`68ca0000 fffff803`68f79000 Ntfs (deferred)
fffff803`68f80000 fffff803`68f8d000 Fs_Rec (deferred)
fffff803`68f90000 fffff803`690ff000 ndis (deferred)
fffff803`69100000 fffff803`69198000 NETIO (deferred)
fffff803`691a0000 fffff803`691d2000 ksecpkg (deferred)
fffff803`691e0000 fffff803`694cb000 tcpip (deferred)
fffff803`694d0000 fffff803`6954f000 fwpkclnt (deferred)
fffff803`69550000 fffff803`69580000 wfplwfs (deferred)
fffff803`69590000 fffff803`69658000 fvevol (deferred)
fffff803`69660000 fffff803`69674000 amdkmpfd (deferred)
fffff803`69680000 fffff803`6968b000 volume (deferred)
fffff803`69690000 fffff803`696fd000 volsnap (deferred)
fffff803`69700000 fffff803`69750000 rdyboost (deferred)
fffff803`69760000 fffff803`69786000 mup (deferred)
fffff803`69790000 fffff803`697a2000 iorate (deferred)
fffff803`697d0000 fffff803`697ec000 disk (deferred)
fffff803`697f0000 fffff803`6985c000 CLASSPNP (deferred)
fffff803`7c600000 fffff803`7c61e000 crashdmp (deferred)
fffff803`7c620000 fffff803`7c6f6000 peauth (deferred)
fffff803`7c700000 fffff803`7c7c7000 srv2 (deferred)
fffff803`7c7d0000 fffff803`7c7f8000 AgileVpn (deferred)
fffff803`7c800000 fffff803`7c821000 rasl2tp (deferred)
fffff803`7c830000 fffff803`7c851000 raspptp (deferred)
fffff803`7c860000 fffff803`7c87c000 raspppoe (deferred)
fffff803`7c880000 fffff803`7c8ba000 ndiswan (deferred)
fffff803`7c8c0000 fffff803`7c8d6000 WdNisDrv (deferred)
fffff803`7c8e0000 fffff803`7c8fe000 MpKslDrv (deferred)
fffff803`7c910000 fffff803`7c91b000 semav6msr64 (deferred)
fffff803`7d230000 fffff803`7d29c000 fastfat (deferred)
fffff803`7d2a0000 fffff803`7d2b5000 umbus (deferred)
fffff803`7d2c0000 fffff803`7d2d5000 CAD (deferred)
fffff803`7d2e0000 fffff803`7d468000 CHDRT64 (deferred)
fffff803`7d470000 fffff803`7d538000 IntcDAud (deferred)
fffff803`7d600000 fffff803`7d9a4000 dxgkrnl (deferred)
fffff803`7d9b0000 fffff803`7d9c8000 watchdog (deferred)
fffff803`7d9d0000 fffff803`7d9e6000 BasicDisplay (deferred)
fffff803`7d9f0000 fffff803`7da01000 BasicRender (deferred)
fffff803`7da10000 fffff803`7da2c000 Npfs (deferred)
fffff803`7da30000 fffff803`7da41000 Msfs (deferred)
fffff803`7da50000 fffff803`7da6b000 CimFS (deferred)
fffff803`7da70000 fffff803`7da92000 tdx (deferred)
fffff803`7daa0000 fffff803`7dab0000 TDI (deferred)
fffff803`7dac0000 fffff803`7db1c000 netbt (deferred)
fffff803`7db20000 fffff803`7db33000 afunix (deferred)
fffff803`7db40000 fffff803`7dbe3000 afd (deferred)
fffff803`7dbf0000 fffff803`7dc0a000 vwififlt (deferred)
fffff803`7dc10000 fffff803`7dc3b000 pacer (deferred)
fffff803`7dc40000 fffff803`7dc54000 ndiscap (deferred)
fffff803`7dc60000 fffff803`7dc74000 netbios (deferred)
fffff803`7dc80000 fffff803`7dd21000 Vid (deferred)
fffff803`7dd30000 fffff803`7dd51000 winhvr (deferred)
fffff803`7dd60000 fffff803`7dddc000 rdbss (deferred)
fffff803`7dde0000 fffff803`7ddf2000 nsiproxy (deferred)
fffff803`7de00000 fffff803`7de0e000 npsvctrig (deferred)
fffff803`7de10000 fffff803`7de20000 mssmbios (deferred)
fffff803`7de30000 fffff803`7de3a000 gpuenergydrv (deferred)
fffff803`7de40000 fffff803`7de6c000 dfsc (deferred)
fffff803`7de70000 fffff803`7de7e000 amdxe (deferred)
fffff803`7de80000 fffff803`7de8d000 kdnic (deferred)
fffff803`7de90000 fffff803`7dea7000 bam (deferred)
fffff803`7deb0000 fffff803`7deca000 amdfendr (deferred)
fffff803`7ded0000 fffff803`7dee2000 CompositeBus (deferred)
fffff803`7def0000 fffff803`7ead2000 dump_iaStorAC (deferred)
fffff803`7eae0000 fffff803`7eafc000 rassstp (deferred)
fffff803`7eb00000 fffff803`7eb1d000 NDProxy (deferred)
fffff803`7eb20000 fffff803`7eb50000 cdrom (deferred)
fffff803`7eb60000 fffff803`7eb75000 filecrypt (deferred)
fffff803`7eb80000 fffff803`7eb8e000 tbs (deferred)
fffff803`7eb90000 fffff803`7eb9a000 Null (deferred)
fffff803`7eba0000 fffff803`7ebaa000 Beep (deferred)
fffff803`7ebb0000 fffff803`7ebfe000 ahcache (deferred)
fffff803`7ec00000 fffff803`7ec10000 mouhid (deferred)
fffff803`7ec20000 fffff803`7ec31000 kbdhid (deferred)
fffff803`7f830000 fffff803`7f845000 tcpipreg (deferred)
fffff803`7f850000 fffff803`7f8f3000 UsbHub3 (deferred)
fffff803`7f900000 fffff803`7f90e000 USBD (deferred)
fffff803`7f910000 fffff803`7f943000 usbccgp (deferred)
fffff803`7f950000 fffff803`7f962000 hidusb (deferred)
fffff803`7f970000 fffff803`7f9af000 HIDCLASS (deferred)
fffff803`7f9b0000 fffff803`7f9c3000 HIDPARSE (deferred)
fffff803`7f9d0000 fffff803`7f9e5000 LGSHidFilt (deferred)
fffff803`7f9f0000 fffff803`7f9f2500 LGVirHid (deferred)
fffff803`7fa00000 fffff803`7fae7000 rt640x64 (deferred)
fffff803`7faf0000 fffff803`80372000 Netwtw04 (deferred)
fffff803`80380000 fffff803`80470000 wdiwifi (deferred)
fffff803`80480000 fffff803`8048e000 vwifibus (deferred)
fffff803`80490000 fffff803`8049f000 CmBatt (deferred)
fffff803`804a0000 fffff803`804b0000 BATTC (deferred)
fffff803`804c0000 fffff803`804d5000 AcpiVpc (deferred)
fffff803`804e0000 fffff803`804ec000 ICCWDT (deferred)
fffff803`804f0000 fffff803`80511000 i8042prt (deferred)
fffff803`80520000 fffff803`805a1000 ETD (deferred)
fffff803`805b0000 fffff803`805c4000 kbdclass (deferred)
fffff803`805d0000 fffff803`805e3000 mouclass (deferred)
fffff803`805f0000 fffff803`80615000 HDAudBus (deferred)
fffff803`80620000 fffff803`80686000 portcls (deferred)
fffff803`80690000 fffff803`806b1000 drmk (deferred)
fffff803`806c0000 fffff803`80736000 ks (deferred)
fffff803`80740000 fffff803`8074c000 wmiacpi (deferred)
fffff803`80750000 fffff803`80790000 intelppm (deferred)
fffff803`807a0000 fffff803`807ab000 acpipagr (deferred)
fffff803`807b0000 fffff803`807be000 UEFI (deferred)
fffff803`807c0000 fffff803`807cd000 NdisVirtualBus (deferred)
fffff803`807d0000 fffff803`807dc000 swenum (deferred)
fffff803`807e0000 fffff803`807e4e00 LGBusEnum (deferred)
fffff803`807f0000 fffff803`807fc800 LGJoyXlCore (deferred)
fffff803`80800000 fffff803`81446000 igdkmd64 (deferred)
fffff803`81450000 fffff803`814e8000 USBXHCI (deferred)
fffff803`814f0000 fffff803`81534000 ucx01000 (deferred)
fffff803`81540000 fffff803`81570000 TeeDriverW8x64 (deferred)
fffff803`81580000 fffff803`8158e000 rdpbus (deferred)
fffff803`81590000 fffff803`8159f000 ksthunk (deferred)
fffff803`815a0000 fffff803`815f3000 srvnet (deferred)
fffff803`83600000 fffff803`83785000 BTHport (deferred)
fffff803`837a0000 fffff803`837ae000 dump_diskdump (deferred)
fffff803`837d0000 fffff803`837ed000 dump_dumpfve (deferred)
fffff803`837f0000 fffff803`838d2000 dxgmms2 (deferred)
fffff803`838e0000 fffff803`838fb000 monitor (deferred)
fffff803`83900000 fffff803`83929000 luafv (deferred)
fffff803`83930000 fffff803`83966000 wcifs (deferred)
fffff803`83970000 fffff803`839f1000 cldflt (deferred)
fffff803`83a00000 fffff803`83a14000 mmcss (deferred)
fffff803`83a20000 fffff803`83a3a000 storqosflt (deferred)
fffff803`83a40000 fffff803`83a68000 bindflt (deferred)
fffff803`83a90000 fffff803`83aa8000 lltdio (deferred)
fffff803`83ab0000 fffff803`83ac8000 mslldp (deferred)
fffff803`83ad0000 fffff803`83aeb000 rspndr (deferred)
fffff803`83af0000 fffff803`83b0d000 wanarp (deferred)
fffff803`83b10000 fffff803`83b28000 ndisuio (deferred)
fffff803`83b30000 fffff803`83beb000 nwifi (deferred)
fffff803`83bf0000 fffff803`83c46000 msquic (deferred)
fffff803`83c50000 fffff803`83dd5000 HTTP (deferred)
fffff803`83de0000 fffff803`83df3000 condrv (deferred)
fffff803`83e00000 fffff803`83e25000 bowser (deferred)
fffff803`83e30000 fffff803`83e4a000 mpsdrv (deferred)
fffff803`83e50000 fffff803`83ee3000 mrxsmb (deferred)
fffff803`83ef0000 fffff803`83f17000 Ndu (deferred)
fffff803`83f20000 fffff803`83f2f000 ndistapi (deferred)
fffff803`83f30000 fffff803`85e40000 rtsuvc (deferred)
fffff803`85e50000 fffff803`85eb7000 RtsUer (deferred)
fffff803`85ec0000 fffff803`85f00000 ibtusb (deferred)
fffff803`85f10000 fffff803`85f31000 BTHUSB (deferred)
fffff803`85f40000 fffff803`85f85000 mrxsmb20 (deferred)
fffff803`85f90000 fffff803`85fa3000 vwifimp (deferred)
fffff803`85fb0000 fffff803`85fe5000 idmwfp (deferred)
fffff803`85ff0000 fffff803`85ff8000 lgcoretemp (deferred)

Unloaded modules:
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`83a80000 fffff803`83a8d000 MSPQM.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`7c920000 fffff803`7c92d000 MSPQM.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`83a80000 fffff803`83a8d000 MSPQM.sys
fffff803`83a70000 fffff803`83a7d000 MSPQM.sys
fffff803`7c900000 fffff803`7c90d000 MSPQM.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`83a70000 fffff803`83a81000 MSKSSRV.sys
fffff803`7c630000 fffff803`7c63f000 dump_storpor
fffff803`7def0000 fffff803`7ead3000 dump_iaStorA
fffff803`7eb00000 fffff803`7eb1e000 dump_dumpfve
fffff803`7de70000 fffff803`7de8c000 dam.sys
fffff803`67c00000 fffff803`67c12000 WdBoot.sys
fffff803`697b0000 fffff803`697c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\040921-10515-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff800`32c00000 PsLoadedModuleList = 0xfffff800`3382a490
Debug session time: Fri Apr 9 08:53:40.627 2021 (UTC + 3:00)
System Uptime: 0 days 16:32:24.206
Loading Kernel Symbols
...............................................................
................................................................
................................................................
......
Loading User Symbols
Loading unloaded module list
.................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`32ff5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff800`36e5d9b0=00000000000000f7
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer. This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned. This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: fffff80036e5d9f0, Actual security check cookie from the stack
Arg2: 00007bf7360090fa, Expected security check cookie
Arg3: ffff8408c9ff6f05, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2811

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 17094

Key : Analysis.Init.CPU.mSec
Value: 343

Key : Analysis.Init.Elapsed.mSec
Value: 4055

Key : Analysis.Memory.CommitPeak.Mb
Value: 78

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: f7

BUGCHECK_P1: fffff80036e5d9f0

BUGCHECK_P2: 7bf7360090fa

BUGCHECK_P3: ffff8408c9ff6f05

BUGCHECK_P4: 0

SECURITY_COOKIE: Expected 00007bf7360090fa found fffff80036e5d9f0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

STACK_TEXT:
fffff800`36e5d9a8 fffff800`330b0cd5 : 00000000`000000f7 fffff800`36e5d9f0 00007bf7`360090fa ffff8408`c9ff6f05 : nt!KeBugCheckEx
fffff800`36e5d9b0 fffff800`32e70188 : 00000000`00000000 00001f80`0000000d 00000000`00000003 00000000`00000002 : nt!_report_gsfailure+0x25
fffff800`36e5d9f0 fffff800`32ff9774 : 00000000`00000000 fffff800`33927600 ffffd208`8fd5f040 00000000`0000128e : nt!PoIdle+0x3a8
fffff800`36e5db60 00000000`00000000 : fffff800`36e5e000 fffff800`36e57000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x54


SYMBOL_NAME: nt!_report_gsfailure+25

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

IMAGE_VERSION: 10.0.19041.867

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 25

FAILURE_BUCKET_ID: 0xF7_MISSING_GSFRAME_nt!_report_gsfailure

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {82d2c1b5-b0cb-60a5-9a5d-78c8c4284f84}

Followup: MachineOwner
---------

0: kd> lm
start end module name
ffff8613`6e400000 ffff8613`6e6d9000 win32kbase (deferred)
ffff8613`6e6e0000 ffff8613`6ea96000 win32kfull (deferred)
ffff8613`6eaa0000 ffff8613`6eaea000 cdd (deferred)
ffff8613`6ed20000 ffff8613`6edba000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff800`2ead0000 fffff800`2ee6d000 mcupdate_GenuineIntel (deferred)
fffff800`2ee70000 fffff800`2ee76000 hal (deferred)
fffff800`2ee80000 fffff800`2ee8b000 kd (deferred)
fffff800`2ee90000 fffff800`2eeb7000 tm (deferred)
fffff800`2eec0000 fffff800`2eecb000 BOOTVID (deferred)
fffff800`32c00000 fffff800`33c46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff800`34400000 fffff800`34469000 CLFS (deferred)
fffff800`34470000 fffff800`3448a000 PSHED (deferred)
fffff800`34490000 fffff800`345a3000 clipsp (deferred)
fffff800`345b0000 fffff800`3461f000 FLTMGR (deferred)
fffff800`34620000 fffff800`34649000 ksecdd (deferred)
fffff800`34650000 fffff800`346b2000 msrpc (deferred)
fffff800`346c0000 fffff800`346ce000 cmimcext (deferred)
fffff800`346d0000 fffff800`346e1000 werkernel (deferred)
fffff800`346f0000 fffff800`346fc000 ntosext (deferred)
fffff800`34700000 fffff800`347e3000 CI (deferred)
fffff800`347f0000 fffff800`348a7000 cng (deferred)
fffff800`348b0000 fffff800`34981000 Wdf01000 (deferred)
fffff800`34990000 fffff800`349a3000 WDFLDR (deferred)
fffff800`349b0000 fffff800`349bf000 SleepStudyHelper (deferred)
fffff800`349c0000 fffff800`349d1000 WppRecorder (deferred)
fffff800`349e0000 fffff800`34a06000 acpiex (deferred)
fffff800`34a10000 fffff800`34a2a000 SgrmAgent (deferred)
fffff800`34a30000 fffff800`34afc000 ACPI (deferred)
fffff800`34b00000 fffff800`34b0c000 WMILIB (deferred)
fffff800`34b10000 fffff800`34b1b000 msisadrv (deferred)
fffff800`34b20000 fffff800`34b96000 pci (deferred)
fffff800`34ba0000 fffff800`34be4000 tpm (deferred)
fffff800`34bf0000 fffff800`34bfb000 IntelTA (deferred)
fffff800`34c20000 fffff800`34c8b000 intelpep (deferred)
fffff800`34c90000 fffff800`34ca7000 WindowsTrustedRT (deferred)
fffff800`34cb0000 fffff800`34cbb000 WindowsTrustedRTProxy (deferred)
fffff800`34cc0000 fffff800`34cd4000 pcw (deferred)
fffff800`34ce0000 fffff800`34cf5000 vdrvroot (deferred)
fffff800`34d00000 fffff800`34d2f000 pdc (deferred)
fffff800`34d30000 fffff800`34d49000 CEA (deferred)
fffff800`34d50000 fffff800`34d81000 partmgr (deferred)
fffff800`34d90000 fffff800`34e3a000 spaceport (deferred)
fffff800`34e40000 fffff800`34e59000 volmgr (deferred)
fffff800`34e60000 fffff800`34ec3000 volmgrx (deferred)
fffff800`34ed0000 fffff800`34eee000 mountmgr (deferred)
fffff800`34ef0000 fffff800`35ad2000 iaStorAC (deferred)
fffff800`35ae0000 fffff800`35b93000 storport (deferred)
fffff800`35ba0000 fffff800`35bbc000 EhStorClass (deferred)
fffff800`35bc0000 fffff800`35bda000 fileinfo (deferred)
fffff800`35bf0000 fffff800`35c2f000 Wof (deferred)
fffff800`35c30000 fffff800`35c99000 WdFilter (deferred)
fffff800`35ca0000 fffff800`35f79000 Ntfs (deferred)
fffff800`35f80000 fffff800`35f8d000 Fs_Rec (deferred)
fffff800`35f90000 fffff800`360ff000 ndis (deferred)
fffff800`36100000 fffff800`36198000 NETIO (deferred)
fffff800`361a0000 fffff800`361d2000 ksecpkg (deferred)
fffff800`361e0000 fffff800`364cb000 tcpip (deferred)
fffff800`364d0000 fffff800`3654f000 fwpkclnt (deferred)
fffff800`36550000 fffff800`36580000 wfplwfs (deferred)
fffff800`36590000 fffff800`36658000 fvevol (deferred)
fffff800`36660000 fffff800`36674000 amdkmpfd (deferred)
fffff800`36680000 fffff800`3668b000 volume (deferred)
fffff800`36690000 fffff800`366fd000 volsnap (deferred)
fffff800`36700000 fffff800`36750000 rdyboost (deferred)
fffff800`36760000 fffff800`36786000 mup (deferred)
fffff800`36790000 fffff800`367a2000 iorate (deferred)
fffff800`367d0000 fffff800`367ec000 disk (deferred)
fffff800`367f0000 fffff800`3685c000 CLASSPNP (deferred)
fffff800`49600000 fffff800`4961e000 crashdmp (deferred)
fffff800`49660000 fffff800`49674000 qwavedrv (deferred)
fffff800`49e00000 fffff800`49ee2000 dxgmms2 (deferred)
fffff800`49ef0000 fffff800`49f0b000 monitor (deferred)
fffff800`49f10000 fffff800`49f39000 luafv (deferred)
fffff800`49f40000 fffff800`49f76000 wcifs (deferred)
fffff800`49f80000 fffff800`4ab62000 dump_iaStorAC (deferred)
fffff800`4ab90000 fffff800`4abad000 dump_dumpfve (deferred)
fffff800`4abb0000 fffff800`4abca000 storqosflt (deferred)
fffff800`4abd0000 fffff800`4abe4000 mmcss (deferred)
fffff800`4abf0000 fffff800`4abf8000 lgcoretemp (deferred)
fffff800`4c000000 fffff800`4c015000 filecrypt (deferred)
fffff800`4c020000 fffff800`4c02e000 tbs (deferred)
fffff800`4c030000 fffff800`4c03a000 Null (deferred)
fffff800`4c040000 fffff800`4c04a000 Beep (deferred)
fffff800`4c050000 fffff800`4c3f4000 dxgkrnl (deferred)
fffff800`4c400000 fffff800`4c418000 watchdog (deferred)
fffff800`4c420000 fffff800`4c436000 BasicDisplay (deferred)
fffff800`4c440000 fffff800`4c451000 BasicRender (deferred)
fffff800`4c460000 fffff800`4c47c000 Npfs (deferred)
fffff800`4c480000 fffff800`4c491000 Msfs (deferred)
fffff800`4c4a0000 fffff800`4c4bb000 CimFS (deferred)
fffff800`4c4c0000 fffff800`4c4e2000 tdx (deferred)
fffff800`4c4f0000 fffff800`4c500000 TDI (deferred)
fffff800`4c510000 fffff800`4c56c000 netbt (deferred)
fffff800`4c570000 fffff800`4c583000 afunix (deferred)
fffff800`4c590000 fffff800`4c633000 afd (deferred)
fffff800`4c640000 fffff800`4c65a000 vwififlt (deferred)
fffff800`4c660000 fffff800`4c68b000 pacer (deferred)
fffff800`4c690000 fffff800`4c6a4000 ndiscap (deferred)
fffff800`4c6b0000 fffff800`4c6c4000 netbios (deferred)
fffff800`4c6d0000 fffff800`4c771000 Vid (deferred)
fffff800`4c780000 fffff800`4c7a1000 winhvr (deferred)
fffff800`4c7b0000 fffff800`4c82c000 rdbss (deferred)
fffff800`4c830000 fffff800`4c842000 nsiproxy (deferred)
fffff800`4c850000 fffff800`4c85e000 npsvctrig (deferred)
fffff800`4c860000 fffff800`4c870000 mssmbios (deferred)
fffff800`4c880000 fffff800`4c88a000 gpuenergydrv (deferred)
fffff800`4c890000 fffff800`4c8bc000 dfsc (deferred)
fffff800`4c8c0000 fffff800`4c8de000 MpKslDrv (deferred)
fffff800`4c8e0000 fffff800`4c94c000 fastfat (deferred)
fffff800`4c950000 fffff800`4c967000 bam (deferred)
fffff800`4c970000 fffff800`4c9be000 ahcache (deferred)
fffff800`4c9c0000 fffff800`4c9ce000 amdxe (deferred)
fffff800`4c9d0000 fffff800`4c9ea000 amdfendr (deferred)
fffff800`4c9f0000 fffff800`4ca02000 CompositeBus (deferred)
fffff800`4ca10000 fffff800`4ca1d000 kdnic (deferred)
fffff800`4ca20000 fffff800`4ca35000 umbus (deferred)
fffff800`4ca40000 fffff800`4ca55000 CAD (deferred)
fffff800`4d650000 fffff800`4d717000 srv2 (deferred)
fffff800`4d720000 fffff800`4d741000 raspptp (deferred)
fffff800`4d750000 fffff800`4d78a000 ndiswan (deferred)
fffff800`4d790000 fffff800`4d7a6000 WdNisDrv (deferred)
fffff800`4d7b0000 fffff800`4d7e0000 cdrom (deferred)
fffff800`4e600000 fffff800`4e6e7000 rt640x64 (deferred)
fffff800`4e6f0000 fffff800`4e875000 HTTP (deferred)
fffff800`4e880000 fffff800`4e8d3000 srvnet (deferred)
fffff800`4e8e0000 fffff800`4e9b6000 peauth (deferred)
fffff800`4e9c0000 fffff800`4e9dd000 NDProxy (deferred)
fffff800`4e9e0000 fffff800`4e9ef000 ndistapi (deferred)
fffff800`4ea00000 fffff800`4f646000 igdkmd64 (deferred)
fffff800`4f650000 fffff800`4f6e8000 USBXHCI (deferred)
fffff800`4f6f0000 fffff800`4f734000 ucx01000 (deferred)
fffff800`4f740000 fffff800`4f770000 TeeDriverW8x64 (deferred)
fffff800`4f780000 fffff800`4f7a8000 AgileVpn (deferred)
fffff800`4f7b0000 fffff800`4f7d1000 rasl2tp (deferred)
fffff800`4f7e0000 fffff800`4f7fc000 raspppoe (deferred)
fffff800`4f800000 fffff800`4f8f0000 wdiwifi (deferred)
fffff800`4f900000 fffff800`4f90e000 vwifibus (deferred)
fffff800`4f910000 fffff800`4f91f000 CmBatt (deferred)
fffff800`4f920000 fffff800`4f930000 BATTC (deferred)
fffff800`4f940000 fffff800`4f955000 AcpiVpc (deferred)
fffff800`4f960000 fffff800`4f96c000 ICCWDT (deferred)
fffff800`4f970000 fffff800`4f991000 i8042prt (deferred)
fffff800`4f9a0000 fffff800`4fa21000 ETD (deferred)
fffff800`4fa30000 fffff800`4fa44000 kbdclass (deferred)
fffff800`4fa50000 fffff800`4fa63000 mouclass (deferred)
fffff800`4fa70000 fffff800`4fa95000 HDAudBus (deferred)
fffff800`4faa0000 fffff800`4fb06000 portcls (deferred)
fffff800`4fb10000 fffff800`4fb31000 drmk (deferred)
fffff800`4fb40000 fffff800`4fbb6000 ks (deferred)
fffff800`4fbc0000 fffff800`4fbcc000 wmiacpi (deferred)
fffff800`4fbd0000 fffff800`4fc10000 intelppm (deferred)
fffff800`4fc20000 fffff800`4fc2b000 acpipagr (deferred)
fffff800`4fc30000 fffff800`4fc3e000 UEFI (deferred)
fffff800`4fc40000 fffff800`4fc4d000 NdisVirtualBus (deferred)
fffff800`4fc50000 fffff800`4fc5c000 swenum (deferred)
fffff800`4fc60000 fffff800`4fc64e00 LGBusEnum (deferred)
fffff800`4fc70000 fffff800`4fc7c800 LGJoyXlCore (deferred)
fffff800`4fc80000 fffff800`4fc8e000 rdpbus (deferred)
fffff800`4fc90000 fffff800`4fd33000 UsbHub3 (deferred)
fffff800`4fd40000 fffff800`4fd4e000 USBD (deferred)
fffff800`4fd50000 fffff800`4fed8000 CHDRT64 (deferred)
fffff800`4fee0000 fffff800`4feef000 ksthunk (deferred)
fffff800`4fef0000 fffff800`4ffb8000 IntcDAud (deferred)
fffff800`4ffc0000 fffff800`4fff3000 usbccgp (deferred)
fffff800`50000000 fffff800`50012000 hidusb (deferred)
fffff800`50020000 fffff800`5005f000 HIDCLASS (deferred)
fffff800`50060000 fffff800`50073000 HIDPARSE (deferred)
fffff800`50080000 fffff800`50095000 LGSHidFilt (deferred)
fffff800`500a0000 fffff800`500b0000 mouhid (deferred)
fffff800`500c0000 fffff800`500d1000 kbdhid (deferred)
fffff800`500e0000 fffff800`50107000 Ndu (deferred)
fffff800`50110000 fffff800`50992000 Netwtw04 (deferred)
fffff800`509a0000 fffff800`509d5000 idmwfp (deferred)
fffff800`509e0000 fffff800`509fc000 rassstp (deferred)
fffff800`54a00000 fffff800`54b85000 BTHport (deferred)
fffff800`54ba0000 fffff800`54bae000 dump_diskdump (deferred)
fffff800`54bb0000 fffff800`54c31000 cldflt (deferred)
fffff800`54c40000 fffff800`54c68000 bindflt (deferred)
fffff800`54c70000 fffff800`54c72500 LGVirHid (deferred)
fffff800`54c80000 fffff800`54c8b000 semav6msr64 (deferred)
fffff800`54c90000 fffff800`54ca8000 lltdio (deferred)
fffff800`54cb0000 fffff800`54cc8000 mslldp (deferred)
fffff800`54cd0000 fffff800`54ceb000 rspndr (deferred)
fffff800`54cf0000 fffff800`54d0d000 wanarp (deferred)
fffff800`54d10000 fffff800`54dcb000 nwifi (deferred)
fffff800`54dd0000 fffff800`54de8000 ndisuio (deferred)
fffff800`54df0000 fffff800`54e46000 msquic (deferred)
fffff800`54e50000 fffff800`54e63000 condrv (deferred)
fffff800`54e70000 fffff800`54e95000 bowser (deferred)
fffff800`54ea0000 fffff800`54eba000 mpsdrv (deferred)
fffff800`54ec0000 fffff800`54f05000 mrxsmb20 (deferred)
fffff800`54f10000 fffff800`56e20000 rtsuvc (deferred)
fffff800`56e30000 fffff800`56e97000 RtsUer (deferred)
fffff800`56ea0000 fffff800`56ee0000 ibtusb (deferred)
fffff800`56ef0000 fffff800`56f11000 BTHUSB (deferred)
fffff800`56f20000 fffff800`56fb3000 mrxsmb (deferred)
fffff800`56fc0000 fffff800`56fd3000 vwifimp (deferred)
fffff800`56fe0000 fffff800`56ff5000 tcpipreg (deferred)

Unloaded modules:
fffff800`4e9f0000 fffff800`4e9fd000 MSPQM.sys
fffff800`49760000 fffff800`49771000 MSKSSRV.sys
fffff800`49740000 fffff800`49751000 MSKSSRV.sys
fffff800`49720000 fffff800`49731000 MSKSSRV.sys
fffff800`49700000 fffff800`49711000 MSKSSRV.sys
fffff800`496e0000 fffff800`496f1000 MSKSSRV.sys
fffff800`496c0000 fffff800`496d1000 MSKSSRV.sys
fffff800`496a0000 fffff800`496b1000 MSKSSRV.sys
fffff800`49680000 fffff800`49691000 MSKSSRV.sys
fffff800`49640000 fffff800`49651000 MSKSSRV.sys
fffff800`54c70000 fffff800`54c81000 MSKSSRV.sys
fffff800`49630000 fffff800`4963f000 dump_storpor
fffff800`4cb80000 fffff800`4d763000 dump_iaStorA
fffff800`4d790000 fffff800`4d7ae000 dump_dumpfve
fffff800`4c8c0000 fffff800`4c8dc000 dam.sys
fffff800`34c00000 fffff800`34c12000 WdBoot.sys
fffff800`367b0000 fffff800`367c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\041121-10187-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff806`7e400000 PsLoadedModuleList = 0xfffff806`7f02a490
Debug session time: Sun Apr 11 19:05:54.450 2021 (UTC + 3:00)
System Uptime: 0 days 6:51:13.213
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
..................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff806`7e7f5c50 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffe380`a973d420=0000000000000139
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffe380a973d740, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffe380a973d698, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for Netwtw04.sys
*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 3812

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 66824

Key : Analysis.Init.CPU.mSec
Value: 327

Key : Analysis.Init.Elapsed.mSec
Value: 7868

Key : Analysis.Memory.CommitPeak.Mb
Value: 87

Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY

Key : FailFast.Type
Value: 3

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: 139

BUGCHECK_P1: 3

BUGCHECK_P2: ffffe380a973d740

BUGCHECK_P3: ffffe380a973d698

BUGCHECK_P4: 0

TRAP_FRAME: ffffe380a973d740 -- (.trap 0xffffe380a973d740)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=0000000000000003
rdx=ffff94824b8c7d88 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80684997f8c rsp=ffffe380a973d8d0 rbp=ffff948242fd49c0
r8=ffff94824d0702a8 r9=ffffe380a973d9d0 r10=fffff8067e6e4740
r11=ffff94825138b490 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
ndis!ndisFreeNblToNPagedPool+0x7c:
fffff806`84997f8c cd29 int 29h
Resetting default scope

EXCEPTION_RECORD: ffffe380a973d698 -- (.exr 0xffffe380a973d698)
ExceptionAddress: fffff80684997f8c (ndis!ndisFreeNblToNPagedPool+0x000000000000007c)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000003

EXCEPTION_STR: 0xc0000409

STACK_TEXT:
ffffe380`a973d418 fffff806`7e807b69 : 00000000`00000139 00000000`00000003 ffffe380`a973d740 ffffe380`a973d698 : nt!KeBugCheckEx
ffffe380`a973d420 fffff806`7e807f90 : ffffe380`a973d9c0 ffff9482`3d5ea500 0000f990`00000000 ffff9482`501d9a40 : nt!KiBugCheckDispatch+0x69
ffffe380`a973d560 fffff806`7e806323 : 00000000`00000000 fffff806`84bf76ac 00000000`00000007 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffe380`a973d740 fffff806`84997f8c : ffff9482`430aca40 ffff9482`4b8c7da0 00000000`00000001 ffff9482`4aff5a90 : nt!KiRaiseSecurityCheckFailure+0x323
ffffe380`a973d8d0 fffff806`8499542d : ffff9482`3e7fdae0 fffff806`9dae4735 ffff9482`4aff5a20 fffff806`84b19147 : ndis!ndisFreeNblToNPagedPool+0x7c
ffffe380`a973d900 fffff806`9d9dac01 : ffff9482`3d84aad0 ffff9482`4b8c7da0 ffff9482`3e814dc0 fffff806`9e2395af : ndis!NdisFreeNetBufferList+0x11d
ffffe380`a973d940 ffff9482`3d84aad0 : ffff9482`4b8c7da0 ffff9482`3e814dc0 fffff806`9e2395af ffff9482`00000000 : Netwtw04+0x5ac01
ffffe380`a973d948 ffff9482`4b8c7da0 : ffff9482`3e814dc0 fffff806`9e2395af ffff9482`00000000 fffff806`9ddce4f0 : 0xffff9482`3d84aad0
ffffe380`a973d950 ffff9482`3e814dc0 : fffff806`9e2395af ffff9482`00000000 fffff806`9ddce4f0 ffffe380`a973d901 : 0xffff9482`4b8c7da0
ffffe380`a973d958 fffff806`9e2395af : ffff9482`00000000 fffff806`9ddce4f0 ffffe380`a973d901 00000000`00080000 : 0xffff9482`3e814dc0
ffffe380`a973d960 ffff9482`42fd49c0 : ffff9482`3d5726d0 ffff9482`4b8c7da0 ffff9482`4eb33dc0 00000000`00000000 : wdiwifi!CAdapter::FreeWfcFrame+0xaf
ffffe380`a973d9a0 ffff9482`3d5726d0 : ffff9482`4b8c7da0 ffff9482`4eb33dc0 00000000`00000000 ffff9482`3d5726d0 : 0xffff9482`42fd49c0
ffffe380`a973d9a8 ffff9482`4b8c7da0 : ffff9482`4eb33dc0 00000000`00000000 ffff9482`3d5726d0 fffff806`9d9c3823 : 0xffff9482`3d5726d0
ffffe380`a973d9b0 ffff9482`4eb33dc0 : 00000000`00000000 ffff9482`3d5726d0 fffff806`9d9c3823 00000000`00000000 : 0xffff9482`4b8c7da0
ffffe380`a973d9b8 00000000`00000000 : ffff9482`3d5726d0 fffff806`9d9c3823 00000000`00000000 00000000`00000000 : 0xffff9482`4eb33dc0


SYMBOL_NAME: Netwtw04+5ac01

MODULE_NAME: Netwtw04

IMAGE_NAME: Netwtw04.sys

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 5ac01

FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_Netwtw04!unknown_function

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {1af349bb-d631-4907-5a48-ea9e99f38d40}

Followup: MachineOwner
---------

2: kd> lm
start end module name
ffff81b5`6be00000 ffff81b5`6c0d9000 win32kbase (deferred)
ffff81b5`6c0e0000 ffff81b5`6c496000 win32kfull (deferred)
ffff81b5`6c4a0000 ffff81b5`6c4ea000 cdd (deferred)
ffff81b5`6c990000 ffff81b5`6ca2a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff806`7c400000 fffff806`7c453000 srvnet (deferred)
fffff806`7c460000 fffff806`7c487000 Ndu (deferred)
fffff806`7c490000 fffff806`7c566000 peauth (deferred)
fffff806`7c570000 fffff806`7c585000 tcpipreg (deferred)
fffff806`7c590000 fffff806`7c598000 lgcoretemp (deferred)
fffff806`7c5a0000 fffff806`7c667000 srv2 (deferred)
fffff806`7c670000 fffff806`7c68c000 rassstp (deferred)
fffff806`7c690000 fffff806`7c6ad000 NDProxy (deferred)
fffff806`7c6b0000 fffff806`7c6d8000 AgileVpn (deferred)
fffff806`7c6e0000 fffff806`7c701000 rasl2tp (deferred)
fffff806`7c710000 fffff806`7c731000 raspptp (deferred)
fffff806`7c740000 fffff806`7c75c000 raspppoe (deferred)
fffff806`7c760000 fffff806`7c76f000 ndistapi (deferred)
fffff806`7c770000 fffff806`7c7aa000 ndiswan (deferred)
fffff806`7c7d0000 fffff806`7c7d2500 LGVirHid (deferred)
fffff806`7c800000 fffff806`7c80b000 semav6msr64 (deferred)
fffff806`7c830000 fffff806`7c89a000 WdFilter (deferred)
fffff806`7c8a0000 fffff806`7c8be000 MpKslDrv (deferred)
fffff806`7c8c0000 fffff806`7c8d6000 WdNisDrv (deferred)
fffff806`7cc90000 fffff806`7ce15000 HTTP (deferred)
fffff806`7ce20000 fffff806`7ce3a000 mpsdrv (deferred)
fffff806`7ce40000 fffff806`7ce65000 bowser (deferred)
fffff806`7ce70000 fffff806`7ce83000 condrv (deferred)
fffff806`7ce90000 fffff806`7cf23000 mrxsmb (deferred)
fffff806`7cf30000 fffff806`7cf75000 mrxsmb20 (deferred)
fffff806`7cf80000 fffff806`7cf93000 vwifimp (deferred)
fffff806`7cfa0000 fffff806`7cfd5000 idmwfp (deferred)
fffff806`7d4f0000 fffff806`7d88d000 mcupdate_GenuineIntel (deferred)
fffff806`7d890000 fffff806`7d896000 hal (deferred)
fffff806`7d8a0000 fffff806`7d8ab000 kd (deferred)
fffff806`7d8b0000 fffff806`7d8d7000 tm (deferred)
fffff806`7d8e0000 fffff806`7d8eb000 BOOTVID (deferred)
fffff806`7e400000 fffff806`7f446000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\3FCC539FF307DD2D9C509206D352B9AA1\ntkrnlmp.pdb
fffff806`82e00000 fffff806`82e69000 CLFS (deferred)
fffff806`82e70000 fffff806`82e8a000 PSHED (deferred)
fffff806`82e90000 fffff806`82fa3000 clipsp (deferred)
fffff806`82fb0000 fffff806`8301f000 FLTMGR (deferred)
fffff806`83020000 fffff806`83049000 ksecdd (deferred)
fffff806`83050000 fffff806`830b2000 msrpc (deferred)
fffff806`830c0000 fffff806`830ce000 cmimcext (deferred)
fffff806`830d0000 fffff806`830e1000 werkernel (deferred)
fffff806`830f0000 fffff806`830fc000 ntosext (deferred)
fffff806`83100000 fffff806`831e3000 CI (deferred)
fffff806`831f0000 fffff806`832a7000 cng (deferred)
fffff806`832b0000 fffff806`83381000 Wdf01000 (deferred)
fffff806`83390000 fffff806`833a3000 WDFLDR (deferred)
fffff806`833b0000 fffff806`833bf000 SleepStudyHelper (deferred)
fffff806`833c0000 fffff806`833d1000 WppRecorder (deferred)
fffff806`833e0000 fffff806`83406000 acpiex (deferred)
fffff806`83410000 fffff806`8342a000 SgrmAgent (deferred)
fffff806`83430000 fffff806`834fc000 ACPI (deferred)
fffff806`83500000 fffff806`8350c000 WMILIB (deferred)
fffff806`83510000 fffff806`8351b000 msisadrv (deferred)
fffff806`83520000 fffff806`83596000 pci (deferred)
fffff806`835a0000 fffff806`835e4000 tpm (deferred)
fffff806`835f0000 fffff806`835fb000 IntelTA (deferred)
fffff806`83620000 fffff806`8368b000 intelpep (deferred)
fffff806`83690000 fffff806`836a7000 WindowsTrustedRT (deferred)
fffff806`836b0000 fffff806`836bb000 WindowsTrustedRTProxy (deferred)
fffff806`836c0000 fffff806`836d4000 pcw (deferred)
fffff806`836e0000 fffff806`836f5000 vdrvroot (deferred)
fffff806`83700000 fffff806`8372f000 pdc (deferred)
fffff806`83730000 fffff806`83749000 CEA (deferred)
fffff806`83750000 fffff806`83781000 partmgr (deferred)
fffff806`83790000 fffff806`8383a000 spaceport (deferred)
fffff806`83840000 fffff806`83859000 volmgr (deferred)
fffff806`83860000 fffff806`838c3000 volmgrx (deferred)
fffff806`838d0000 fffff806`838ee000 mountmgr (deferred)
fffff806`838f0000 fffff806`844d2000 iaStorAC (deferred)
fffff806`844e0000 fffff806`84593000 storport (deferred)
fffff806`845a0000 fffff806`845bc000 EhStorClass (deferred)
fffff806`845c0000 fffff806`845da000 fileinfo (deferred)
fffff806`845f0000 fffff806`8462f000 Wof (deferred)
fffff806`846a0000 fffff806`84979000 Ntfs (deferred)
fffff806`84980000 fffff806`8498d000 Fs_Rec (deferred)
fffff806`84990000 fffff806`84aff000 ndis (pdb symbols) C:\ProgramData\Dbg\sym\ndis.pdb\CE00DB8867ECE459409E420F8AB285E61\ndis.pdb
fffff806`84b00000 fffff806`84b98000 NETIO (deferred)
fffff806`84ba0000 fffff806`84bd2000 ksecpkg (deferred)
fffff806`84be0000 fffff806`84ecb000 tcpip (deferred)
fffff806`84ed0000 fffff806`84f4f000 fwpkclnt (deferred)
fffff806`84f50000 fffff806`84f80000 wfplwfs (deferred)
fffff806`84f90000 fffff806`85058000 fvevol (deferred)
fffff806`85060000 fffff806`85074000 amdkmpfd (deferred)
fffff806`85080000 fffff806`8508b000 volume (deferred)
fffff806`85090000 fffff806`850fd000 volsnap (deferred)
fffff806`85100000 fffff806`85150000 rdyboost (deferred)
fffff806`85160000 fffff806`85186000 mup (deferred)
fffff806`85190000 fffff806`851a2000 iorate (deferred)
fffff806`851d0000 fffff806`851ec000 disk (deferred)
fffff806`851f0000 fffff806`8525c000 CLASSPNP (deferred)
fffff806`98000000 fffff806`983a4000 dxgkrnl (deferred)
fffff806`983b0000 fffff806`98451000 Vid (deferred)
fffff806`98460000 fffff806`984dc000 rdbss (deferred)
fffff806`984e0000 fffff806`984f0000 mssmbios (deferred)
fffff806`98500000 fffff806`9852c000 dfsc (deferred)
fffff806`98550000 fffff806`985bc000 fastfat (deferred)
fffff806`985c0000 fffff806`985d7000 bam (deferred)
fffff806`985e0000 fffff806`9862e000 ahcache (deferred)
fffff806`98630000 fffff806`9864a000 amdfendr (deferred)
fffff806`98650000 fffff806`98662000 CompositeBus (deferred)
fffff806`98670000 fffff806`9867d000 kdnic (deferred)
fffff806`98680000 fffff806`98695000 umbus (deferred)
fffff806`986a0000 fffff806`986b5000 CAD (deferred)
fffff806`986c0000 fffff806`987a7000 rt640x64 (deferred)
fffff806`987b0000 fffff806`98806000 msquic (deferred)
fffff806`988d0000 fffff806`988ee000 crashdmp (deferred)
fffff806`99600000 fffff806`9a1e2000 dump_iaStorAC (deferred)
fffff806`9a230000 fffff806`9a260000 cdrom (deferred)
fffff806`9a270000 fffff806`9a285000 filecrypt (deferred)
fffff806`9a290000 fffff806`9a29e000 tbs (deferred)
fffff806`9a2a0000 fffff806`9a2aa000 Null (deferred)
fffff806`9a2b0000 fffff806`9a2ba000 Beep (deferred)
fffff806`9a2c0000 fffff806`9a2d8000 watchdog (deferred)
fffff806`9a2e0000 fffff806`9a2f6000 BasicDisplay (deferred)
fffff806`9a300000 fffff806`9a311000 BasicRender (deferred)
fffff806`9a320000 fffff806`9a33c000 Npfs (deferred)
fffff806`9a340000 fffff806`9a351000 Msfs (deferred)
fffff806`9a360000 fffff806`9a37b000 CimFS (deferred)
fffff806`9a380000 fffff806`9a3a2000 tdx (deferred)
fffff806`9a3b0000 fffff806`9a3c0000 TDI (deferred)
fffff806`9a3d0000 fffff806`9a42c000 netbt (deferred)
fffff806`9a430000 fffff806`9a443000 afunix (deferred)
fffff806`9a450000 fffff806`9a4f3000 afd (deferred)
fffff806`9a500000 fffff806`9a51a000 vwififlt (deferred)
fffff806`9a520000 fffff806`9a52e000 amdxe (deferred)
fffff806`9b120000 fffff806`9b14b000 pacer (deferred)
fffff806`9b150000 fffff806`9b164000 ndiscap (deferred)
fffff806`9b170000 fffff806`9b184000 netbios (deferred)
fffff806`9b190000 fffff806`9b1b1000 winhvr (deferred)
fffff806`9b1c0000 fffff806`9b1d2000 nsiproxy (deferred)
fffff806`9b1e0000 fffff806`9b1ee000 npsvctrig (deferred)
fffff806`9b1f0000 fffff806`9b1fa000 gpuenergydrv (deferred)
fffff806`9c000000 fffff806`9c098000 USBXHCI (deferred)
fffff806`9c0a0000 fffff806`9c0e4000 ucx01000 (deferred)
fffff806`9c0f0000 fffff806`9c120000 TeeDriverW8x64 (deferred)
fffff806`9c160000 fffff806`9cda6000 igdkmd64 (deferred)
fffff806`9ce00000 fffff806`9ce81000 ETD (deferred)
fffff806`9ce90000 fffff806`9cea4000 kbdclass (deferred)
fffff806`9ceb0000 fffff806`9cec3000 mouclass (deferred)
fffff806`9ced0000 fffff806`9cef5000 HDAudBus (deferred)
fffff806`9cf00000 fffff806`9cf66000 portcls (deferred)
fffff806`9cf70000 fffff806`9cf91000 drmk (deferred)
fffff806`9cfa0000 fffff806`9d016000 ks (deferred)
fffff806`9d020000 fffff806`9d02c000 wmiacpi (deferred)
fffff806`9d030000 fffff806`9d070000 intelppm (deferred)
fffff806`9d080000 fffff806`9d08b000 acpipagr (deferred)
fffff806`9d090000 fffff806`9d09e000 UEFI (deferred)
fffff806`9d0a0000 fffff806`9d0ad000 NdisVirtualBus (deferred)
fffff806`9d0b0000 fffff806`9d0bc000 swenum (deferred)
fffff806`9d0c0000 fffff806`9d0c4e00 LGBusEnum (deferred)
fffff806`9d0d0000 fffff806`9d0dc800 LGJoyXlCore (deferred)
fffff806`9d0e0000 fffff806`9d0ee000 rdpbus (deferred)
fffff806`9d0f0000 fffff806`9d193000 UsbHub3 (deferred)
fffff806`9d1a0000 fffff806`9d1ae000 USBD (deferred)
fffff806`9d1b0000 fffff806`9d338000 CHDRT64 (deferred)
fffff806`9d340000 fffff806`9d34f000 ksthunk (deferred)
fffff806`9d350000 fffff806`9d418000 IntcDAud (deferred)
fffff806`9d420000 fffff806`9d453000 usbccgp (deferred)
fffff806`9d460000 fffff806`9d5e5000 BTHport (deferred)
fffff806`9d5f0000 fffff806`9d6d2000 dxgmms2 (deferred)
fffff806`9d6e0000 fffff806`9d761000 cldflt (deferred)
fffff806`9d770000 fffff806`9d78a000 storqosflt (deferred)
fffff806`9d790000 fffff806`9d7b8000 bindflt (deferred)
fffff806`9d7e0000 fffff806`9d7f8000 lltdio (deferred)
fffff806`9d800000 fffff806`9d81b000 rspndr (deferred)
fffff806`9d820000 fffff806`9d83d000 wanarp (deferred)
fffff806`9d840000 fffff806`9d858000 mslldp (deferred)
fffff806`9d860000 fffff806`9d878000 ndisuio (deferred)
fffff806`9d880000 fffff806`9d93b000 nwifi (deferred)
fffff806`9d980000 fffff806`9e202000 Netwtw04 T (no symbols)
fffff806`9e210000 fffff806`9e300000 wdiwifi # (pdb symbols) C:\ProgramData\Dbg\sym\WdiWiFi.pdb\6D5DF71075FA759A34C00CCDB7C2F4981\WdiWiFi.pdb
fffff806`9e310000 fffff806`9e31e000 vwifibus (deferred)
fffff806`9e320000 fffff806`9e32f000 CmBatt (deferred)
fffff806`9e330000 fffff806`9e340000 BATTC (deferred)
fffff806`9e350000 fffff806`9e365000 AcpiVpc (deferred)
fffff806`9e370000 fffff806`9e37c000 ICCWDT (deferred)
fffff806`9e380000 fffff806`9e3a1000 i8042prt (deferred)
fffff806`a0400000 fffff806`a0413000 HIDPARSE (deferred)
fffff806`a0420000 fffff806`a0435000 LGSHidFilt (deferred)
fffff806`a0440000 fffff806`a0450000 mouhid (deferred)
fffff806`a0460000 fffff806`a0471000 kbdhid (deferred)
fffff806`a0480000 fffff806`a04c0000 ibtusb (deferred)
fffff806`a04d0000 fffff806`a04f1000 BTHUSB (deferred)
fffff806`a0510000 fffff806`a051e000 dump_diskdump (deferred)
fffff806`a0540000 fffff806`a055d000 dump_dumpfve (deferred)
fffff806`a0560000 fffff806`a057b000 monitor (deferred)
fffff806`a0580000 fffff806`a05a9000 luafv (deferred)
fffff806`a05b0000 fffff806`a05e6000 wcifs (deferred)
fffff806`a05f0000 fffff806`a0604000 mmcss (deferred)
fffff806`a0610000 fffff806`a2520000 rtsuvc (deferred)
fffff806`a2530000 fffff806`a2597000 RtsUer (deferred)
fffff806`a25a0000 fffff806`a25b2000 hidusb (deferred)
fffff806`a25c0000 fffff806`a25ff000 HIDCLASS (deferred)

Unloaded modules:
fffff806`7c9a0000 fffff806`7c9b1000 MSKSSRV.sys
fffff806`7c980000 fffff806`7c991000 MSKSSRV.sys
fffff806`7c960000 fffff806`7c971000 MSKSSRV.sys
fffff806`7c940000 fffff806`7c951000 MSKSSRV.sys
fffff806`7c920000 fffff806`7c931000 MSKSSRV.sys
fffff806`7c900000 fffff806`7c911000 MSKSSRV.sys
fffff806`7c8e0000 fffff806`7c8f1000 MSKSSRV.sys
fffff806`84630000 fffff806`8469a000 WdFilter.sys
fffff806`7c810000 fffff806`7c82f000 MpKslDrv.sys
fffff806`7c7b0000 fffff806`7c7c7000 WdNisDrv.sys
fffff806`7c7e0000 fffff806`7c7f1000 MSKSSRV.sys
fffff806`9d7c0000 fffff806`9d7d1000 MSKSSRV.sys
fffff806`98900000 fffff806`9890f000 dump_storpor
fffff806`99600000 fffff806`9a1e3000 dump_iaStorA
fffff806`9a210000 fffff806`9a22e000 dump_dumpfve
fffff806`98530000 fffff806`9854c000 dam.sys
fffff806`83600000 fffff806`83612000 WdBoot.sys
fffff806`851b0000 fffff806`851c1000 hwpolicy.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\062921-11859-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff800`1e400000 PsLoadedModuleList = 0xfffff800`1f02a230
Debug session time: Tue Jun 29 16:46:57.773 2021 (UTC + 3:00)
System Uptime: 2 days 5:10:01.485
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.......
Loading User Symbols
Loading unloaded module list
..................................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`1e7f6c20 48894c2408 mov qword ptr [rsp+8],rcx ss:fffff287`47547670=000000000000001a
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000006000, The subtype of the BugCheck.
Arg2: ffff8d815be8b790
Arg3: ffffffffc0000225
Arg4: 0000000000000000

Debugging Details:
------------------


KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 3171

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 16245

Key : Analysis.Init.CPU.mSec
Value: 327

Key : Analysis.Init.Elapsed.mSec
Value: 8773

Key : Analysis.Memory.CommitPeak.Mb
Value: 80

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: 1a

BUGCHECK_P1: 6000

BUGCHECK_P2: ffff8d815be8b790

BUGCHECK_P3: ffffffffc0000225

BUGCHECK_P4: 0

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: MsMpEng.exe

STACK_TEXT:
fffff287`47547668 fffff800`1e86742b : 00000000`0000001a 00000000`00006000 ffff8d81`5be8b790 ffffffff`c0000225 : nt!KeBugCheckEx
fffff287`47547670 fffff800`1e65da8b : ffff8d81`5be8b7b0 fffff800`00000009 ffff8d81`5be8b700 00000000`00000000 : nt!MiStoreFaultComplete+0x16cf5b
fffff287`475476b0 fffff800`1e65bc75 : fffff287`00001000 fffff287`47547700 fffff287`475477f0 ffff8d81`00000000 : nt!MiWaitForInPageComplete+0x2fb
fffff287`475477a0 fffff800`1e728278 : 00000000`c0033333 00000000`00000001 000001a0`a8f3dbf8 00000000`00000000 : nt!MiIssueHardFault+0x3c5
fffff287`47547860 fffff800`1e804d5e : ffff8d81`00000000 000001a0`00000001 0000004d`668ff678 fffff287`47547a80 : nt!MmAccessFault+0x468
fffff287`47547a00 00007ffb`2e19c443 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
0000004d`668fe9f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`2e19c443


SYMBOL_NAME: nt!MiStoreFaultComplete+16cf5b

MODULE_NAME: nt

IMAGE_VERSION: 10.0.19041.1052

STACK_COMMAND: .thread ; .cxr ; kb

IMAGE_NAME: ntkrnlmp.exe

BUCKET_ID_FUNC_OFFSET: 16cf5b

FAILURE_BUCKET_ID: 0x1a_6000_nt!MiStoreFaultComplete

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {5aeab764-ac22-f5da-da84-a57cd09c5d73}

Followup: MachineOwner
---------

0: kd> lm
start end module name
ffff812c`08400000 ffff812c`086d8000 win32kbase (deferred)
ffff812c`086e0000 ffff812c`08a96000 win32kfull (deferred)
ffff812c`08d70000 ffff812c`08dba000 cdd (deferred)
ffff812c`09100000 ffff812c`0919a000 win32k # (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
fffff800`1caa0000 fffff800`1ce3d000 mcupdate_GenuineIntel (deferred)
fffff800`1ce40000 fffff800`1ce46000 hal (deferred)
fffff800`1ce50000 fffff800`1ce5b000 kd (deferred)
fffff800`1ce60000 fffff800`1ce87000 tm (deferred)
fffff800`1ce90000 fffff800`1ce9b000 BOOTVID (deferred)
fffff800`1d000000 fffff800`1d01d000 NDProxy (deferred)
fffff800`1d020000 fffff800`1d047000 AgileVpn (deferred)
fffff800`1d050000 fffff800`1d071000 rasl2tp (deferred)
fffff800`1d080000 fffff800`1d0a1000 raspptp (deferred)
fffff800`1d0b0000 fffff800`1d0cc000 raspppoe (deferred)
fffff800`1d0d0000 fffff800`1d0df000 ndistapi (deferred)
fffff800`1d0e0000 fffff800`1d11a000 ndiswan (deferred)
fffff800`1d120000 fffff800`1d137000 WdNisDrv (deferred)
fffff800`1d140000 fffff800`1d14b000 semav6msr64 (deferred)
fffff800`1d170000 fffff800`1d172500 LGVirHid (deferred)
fffff800`1d180000 fffff800`1d194000 qwavedrv (deferred)
fffff800`1d270000 fffff800`1d290000 MpKslDrv (deferred)
fffff800`1d380000 fffff800`1d470000 wdiwifi (deferred)
fffff800`1d480000 fffff800`1d48e000 vwifibus (deferred)
fffff800`1d560000 fffff800`1d56d000 rdpvideominiport (deferred)
fffff800`1d600000 fffff800`1d6d6000 peauth (deferred)
fffff800`1d6e0000 fffff800`1d6f5000 tcpipreg (deferred)
fffff800`1d700000 fffff800`1d7c7000 srv2 (deferred)
fffff800`1d7d0000 fffff800`1d7ec000 rassstp (deferred)
fffff800`1e400000 fffff800`1f446000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\FC57F1C841C2C3F793D57AC134DC0EFA1\ntkrnlmp.pdb
fffff800`20c00000 fffff800`20c13000 vwifimp (deferred)
fffff800`20cc0000 fffff800`20cd2000 hidusb (deferred)
fffff800`20ce0000 fffff800`20cf5000 LGSHidFilt (deferred)
fffff800`22400000 fffff800`2246a000 CLFS (deferred)
fffff800`22470000 fffff800`2248a000 PSHED (deferred)
fffff800`22490000 fffff800`225a4000 clipsp (deferred)
fffff800`225b0000 fffff800`2261f000 FLTMGR (deferred)
fffff800`22620000 fffff800`22649000 ksecdd (deferred)
fffff800`22650000 fffff800`226b3000 msrpc (deferred)
fffff800`226c0000 fffff800`226ce000 cmimcext (deferred)
fffff800`226d0000 fffff800`226e1000 werkernel (deferred)
fffff800`226f0000 fffff800`226fc000 ntosext (deferred)
fffff800`22700000 fffff800`227e3000 CI (deferred)
fffff800`227f0000 fffff800`228ab000 cng (deferred)
fffff800`228b0000 fffff800`22982000 Wdf01000 (deferred)
fffff800`22990000 fffff800`229a3000 WDFLDR (deferred)
fffff800`229b0000 fffff800`229bf000 SleepStudyHelper (deferred)
fffff800`229c0000 fffff800`229d1000 WppRecorder (deferred)
fffff800`229e0000 fffff800`22a06000 acpiex (deferred)
fffff800`22a10000 fffff800`22a2a000 SgrmAgent (deferred)
fffff800`22a30000 fffff800`22afc000 ACPI (deferred)
fffff800`22b00000 fffff800`22b0c000 WMILIB (deferred)
fffff800`22b10000 fffff800`22b1b000 msisadrv (deferred)
fffff800`22b20000 fffff800`22b97000 pci (deferred)
fffff800`22ba0000 fffff800`22be4000 tpm (deferred)
fffff800`22bf0000 fffff800`22bfb000 IntelTA (deferred)
fffff800`22c20000 fffff800`22c8b000 intelpep (deferred)
fffff800`22c90000 fffff800`22ca7000 WindowsTrustedRT (deferred)
fffff800`22cb0000 fffff800`22cbb000 WindowsTrustedRTProxy (deferred)
fffff800`22cc0000 fffff800`22cd4000 pcw (deferred)
fffff800`22ce0000 fffff800`22cf5000 vdrvroot (deferred)
fffff800`22d00000 fffff800`22d2f000 pdc (deferred)
fffff800`22d30000 fffff800`22d49000 CEA (deferred)
fffff800`22d50000 fffff800`22d81000 partmgr (deferred)
fffff800`22d90000 fffff800`22e3a000 spaceport (deferred)
fffff800`22e40000 fffff800`22e59000 volmgr (deferred)
fffff800`22e60000 fffff800`22ec3000 volmgrx (deferred)
fffff800`22ed0000 fffff800`22eee000 mountmgr (deferred)
fffff800`22ef0000 fffff800`23ad2000 iaStorAC (deferred)
fffff800`23ae0000 fffff800`23b93000 storport (deferred)
fffff800`23ba0000 fffff800`23bbc000 EhStorClass (deferred)
fffff800`23bc0000 fffff800`23bda000 fileinfo (deferred)
fffff800`23bf0000 fffff800`23c30000 Wof (deferred)
fffff800`23c40000 fffff800`23caa000 WdFilter (deferred)
fffff800`23cb0000 fffff800`23f89000 Ntfs (deferred)
fffff800`23f90000 fffff800`23f9d000 Fs_Rec (deferred)
fffff800`23fa0000 fffff800`2410f000 ndis (deferred)
fffff800`24110000 fffff800`241a8000 NETIO (deferred)
fffff800`241b0000 fffff800`241e2000 ksecpkg (deferred)
fffff800`241f0000 fffff800`244dc000 tcpip (deferred)
fffff800`244e0000 fffff800`2455f000 fwpkclnt (deferred)
fffff800`24560000 fffff800`24590000 wfplwfs (deferred)
fffff800`245a0000 fffff800`24668000 fvevol (deferred)
fffff800`24670000 fffff800`24684000 amdkmpfd (deferred)
fffff800`24690000 fffff800`2469b000 volume (deferred)
fffff800`246a0000 fffff800`2470d000 volsnap (deferred)
fffff800`24710000 fffff800`24760000 rdyboost (deferred)
fffff800`24770000 fffff800`24796000 mup (deferred)
fffff800`247a0000 fffff800`247b2000 iorate (deferred)
fffff800`247e0000 fffff800`247fc000 disk (deferred)
fffff800`24800000 fffff800`2486c000 CLASSPNP (deferred)
fffff800`37600000 fffff800`381e2000 dump_iaStorAC (deferred)
fffff800`381f0000 fffff800`38235000 mrxsmb20 (deferred)
fffff800`38240000 fffff800`38293000 srvnet (deferred)
fffff800`382e0000 fffff800`382fe000 crashdmp (deferred)
fffff800`38300000 fffff800`38327000 Ndu (deferred)
fffff800`38400000 fffff800`38435000 idmwfp (deferred)
fffff800`38440000 fffff800`38472000 cdrom (deferred)
fffff800`38480000 fffff800`38495000 filecrypt (deferred)
fffff800`384a0000 fffff800`384ae000 tbs (deferred)
fffff800`384b0000 fffff800`384ba000 Null (deferred)
fffff800`384c0000 fffff800`384ca000 Beep (deferred)
fffff800`384d0000 fffff800`38874000 dxgkrnl (deferred)
fffff800`38880000 fffff800`38898000 watchdog (deferred)
fffff800`388a0000 fffff800`388b6000 BasicDisplay (deferred)
fffff800`388c0000 fffff800`388d1000 BasicRender (deferred)
fffff800`388e0000 fffff800`388fc000 Npfs (deferred)
fffff800`38900000 fffff800`38911000 Msfs (deferred)
fffff800`38920000 fffff800`3893e000 CimFS (deferred)
fffff800`38940000 fffff800`38962000 tdx (deferred)
fffff800`38970000 fffff800`38980000 TDI (deferred)
fffff800`38990000 fffff800`389ec000 netbt (deferred)
fffff800`389f0000 fffff800`38a03000 afunix (deferred)
fffff800`38a10000 fffff800`38ab6000 afd (deferred)
fffff800`38ac0000 fffff800`38ada000 vwififlt (deferred)
fffff800`38ae0000 fffff800`38b0b000 pacer (deferred)
fffff800`38b10000 fffff800`38b24000 ndiscap (deferred)
fffff800`38b30000 fffff800`38b44000 netbios (deferred)
fffff800`38b50000 fffff800`38bf2000 Vid (deferred)
fffff800`38c00000 fffff800`38c21000 winhvr (deferred)
fffff800`38c30000 fffff800`38cab000 rdbss (deferred)
fffff800`38cb0000 fffff800`38cc2000 nsiproxy (deferred)
fffff800`38cd0000 fffff800`38cde000 npsvctrig (deferred)
fffff800`38ce0000 fffff800`38cf0000 mssmbios (deferred)
fffff800`38d00000 fffff800`38d0a000 gpuenergydrv (deferred)
fffff800`38d10000 fffff800`38d3c000 dfsc (deferred)
fffff800`38d60000 fffff800`38dcc000 fastfat (deferred)
fffff800`38dd0000 fffff800`38de7000 bam (deferred)
fffff800`38df0000 fffff800`38e3e000 ahcache (deferred)
fffff800`38e40000 fffff800`38e4e000 amdxe (deferred)
fffff800`38e50000 fffff800`38e6a000 amdfendr (deferred)
fffff800`38e70000 fffff800`38e82000 CompositeBus (deferred)
fffff800`38e90000 fffff800`38e9d000 kdnic (deferred)
fffff800`38ea0000 fffff800`38eb5000 umbus (deferred)
fffff800`38ec0000 fffff800`38ed5000 CAD (deferred)
fffff800`39ad0000 fffff800`39af5000 bowser (deferred)
fffff800`39b00000 fffff800`39b12000 condrv (deferred)
fffff800`39b20000 fffff800`39bb4000 mrxsmb (deferred)
fffff800`3aa00000 fffff800`3aa44000 ucx01000 (deferred)
fffff800`3aa50000 fffff800`3aa80000 TeeDriverW8x64 (deferred)
fffff800`3aa90000 fffff800`3ab77000 rt640x64 (deferred)
fffff800`3ab80000 fffff800`3ac25000 UsbHub3 (deferred)
fffff800`3ac30000 fffff800`3ac97000 RtsUer (deferred)
fffff800`3aca0000 fffff800`3ace0000 ibtusb (deferred)
fffff800`3acf0000 fffff800`3ad11000 BTHUSB (deferred)
fffff800`3ad20000 fffff800`3aea4000 BTHport (deferred)
fffff800`3aeb0000 fffff800`3aeef000 HIDCLASS (deferred)
fffff800`3aef0000 fffff800`3af03000 HIDPARSE (deferred)
fffff800`3af10000 fffff800`3af92000 cldflt (deferred)
fffff800`3afa0000 fffff800`3afb8000 mslldp (deferred)
fffff800`3afc0000 fffff800`3afdb000 rspndr (deferred)
fffff800`3afe0000 fffff800`3affd000 wanarp (deferred)
fffff800`3b000000 fffff800`3b0bb000 nwifi (deferred)
fffff800`3b0c0000 fffff800`3b0d8000 ndisuio (deferred)
fffff800`3b0e0000 fffff800`3b136000 msquic (deferred)
fffff800`3b140000 fffff800`3b2c5000 HTTP (deferred)
fffff800`3b2d0000 fffff800`3b2ea000 mpsdrv (deferred)
fffff800`3b300000 fffff800`3bf46000 igdkmd64 (deferred)
fffff800`3bf50000 fffff800`3bfe8000 USBXHCI (deferred)
fffff800`3c110000 fffff800`3c11f000 CmBatt (deferred)
fffff800`3c120000 fffff800`3c130000 BATTC (deferred)
fffff800`3c140000 fffff800`3c155000 AcpiVpc (deferred)
fffff800`3c160000 fffff800`3c16c000 ICCWDT (deferred)
fffff800`3c170000 fffff800`3c191000 i8042prt (deferred)
fffff800`3c1a0000 fffff800`3c221000 ETD (deferred)
fffff800`3c230000 fffff800`3c244000 kbdclass (deferred)
fffff800`3c250000 fffff800`3c263000 mouclass (deferred)
fffff800`3c270000 fffff800`3c295000 HDAudBus (deferred)
fffff800`3c2a0000 fffff800`3c306000 portcls (deferred)
fffff800`3c310000 fffff800`3c331000 drmk (deferred)
fffff800`3c340000 fffff800`3c3b6000 ks (deferred)
fffff800`3c3c0000 fffff800`3c3cc000 wmiacpi (deferred)
fffff800`3c3d0000 fffff800`3c410000 intelppm (deferred)
fffff800`3c420000 fffff800`3c42b000 acpipagr (deferred)
fffff800`3c430000 fffff800`3c43e000 UEFI (deferred)
fffff800`3c440000 fffff800`3c44d000 NdisVirtualBus (deferred)
fffff800`3c450000 fffff800`3c45c000 swenum (deferred)
fffff800`3c460000 fffff800`3c464e00 LGBusEnum (deferred)
fffff800`3c470000 fffff800`3c47c800 LGJoyXlCore (deferred)
fffff800`3c480000 fffff800`3c48e000 rdpbus (deferred)
fffff800`3c490000 fffff800`3c618000 CHDRT64 (deferred)
fffff800`3c620000 fffff800`3c62f000 ksthunk (deferred)
fffff800`3c630000 fffff800`3c6f8000 IntcDAud (deferred)
fffff800`3c700000 fffff800`3c70e000 USBD (deferred)
fffff800`3c730000 fffff800`3cfb0000 Netwtw04 (deferred)
fffff800`3cfc0000 fffff800`3cff3000 usbccgp (deferred)
fffff800`3d000000 fffff800`3d0e1000 dxgmms2 (deferred)
fffff800`3d0f0000 fffff800`3d10b000 monitor (deferred)
fffff800`3d110000 fffff800`3d139000 luafv (deferred)
fffff800`3d140000 fffff800`3d176000 wcifs (deferred)
fffff800`3d180000 fffff800`3d19a000 storqosflt (deferred)
fffff800`3d1a0000 fffff800`3d1c8000 bindflt (deferred)
fffff800`3d1d0000 fffff800`3d1d8000 lgcoretemp (deferred)
fffff800`3d1e0000 fffff800`3f0f0000 rtsuvc (deferred)
fffff800`3f100000 fffff800`3f110000 mouhid (deferred)
fffff800`3f120000 fffff800`3f131000 kbdhid (deferred)
fffff800`3f150000 fffff800`3f15e000 dump_diskdump (deferred)
fffff800`3f180000 fffff800`3f19d000 dump_dumpfve (deferred)
fffff800`3f1a0000 fffff800`3f1b4000 mmcss (deferred)
fffff800`3f1e0000 fffff800`3f1f8000 lltdio (deferred)

Unloaded modules:
fffff800`20d80000 fffff800`20d91000 MSKSSRV.sys
fffff800`20d60000 fffff800`20d71000 MSKSSRV.sys
fffff800`20d40000 fffff800`20d51000 MSKSSRV.sys
fffff800`20d20000 fffff800`20d31000 MSKSSRV.sys
fffff800`20d00000 fffff800`20d11000 MSKSSRV.sys
fffff800`1d1a0000 fffff800`1d1b3000 hidusb.sys
fffff800`20ca0000 fffff800`20cb1000 MSKSSRV.sys
fffff800`20c80000 fffff800`20c91000 MSKSSRV.sys
fffff800`20c60000 fffff800`20c71000 MSKSSRV.sys
fffff800`20c40000 fffff800`20c51000 MSKSSRV.sys
fffff800`20c20000 fffff800`20c31000 MSKSSRV.sys
fffff800`1d200000 fffff800`1d20f000 hiber_storpo
fffff800`211e0000 fffff800`21dc3000 hiber_iaStor
fffff800`21dd0000 fffff800`21dee000 hiber_dumpfv
fffff800`1d150000 fffff800`1d164000 vwifimp.sys
fffff800`1d1e0000 fffff800`1d1f1000 MSKSSRV.sys
fffff800`1d1c0000 fffff800`1d1d1000 MSKSSRV.sys
fffff800`1d570000 fffff800`1d583000 hidusb.sys
fffff800`1d590000 fffff800`1d5a6000 LGSHidFilt.S
fffff800`1d490000 fffff800`1d4a4000 vwifimp.sys
fffff800`1d5f0000 fffff800`1d5ff000 hiber_storpo
fffff800`1f810000 fffff800`203f3000 hiber_iaStor
fffff800`1f600000 fffff800`1f61e000 hiber_dumpfv
fffff800`1d5d0000 fffff800`1d5e1000 MSKSSRV.sys
fffff800`1d5b0000 fffff800`1d5c1000 MSKSSRV.sys
fffff800`1d1a0000 fffff800`1d1b3000 hidusb.sys
fffff800`1d530000 fffff800`1d541000 MSKSSRV.sys
fffff800`1d510000 fffff800`1d521000 MSKSSRV.sys
fffff800`1d4f0000 fffff800`1d501000 MSKSSRV.sys
fffff800`1d4d0000 fffff800`1d4e1000 MSKSSRV.sys
fffff800`1d4b0000 fffff800`1d4c1000 MSKSSRV.sys
fffff800`1d300000 fffff800`1d316000 LGSHidFilt.S
fffff800`3c100000 fffff800`3c10f000 vwifibus.sys
fffff800`3c730000 fffff800`3cfb1000 Netwtw04.sys
fffff800`3c000000 fffff800`3c0f1000 wdiwifi.sys
fffff800`1d2e0000 fffff800`1d2f4000 vwifimp.sys
fffff800`1d360000 fffff800`1d371000 MSKSSRV.sys
fffff800`1d340000 fffff800`1d351000 MSKSSRV.sys
fffff800`1d320000 fffff800`1d331000 MSKSSRV.sys
fffff800`1d210000 fffff800`1d224000 vwifimp.sys
fffff800`1d2c0000 fffff800`1d2d1000 MSKSSRV.sys
fffff800`1d2a0000 fffff800`1d2b1000 MSKSSRV.sys
fffff800`1d250000 fffff800`1d261000 MSKSSRV.sys
fffff800`1d230000 fffff800`1d241000 MSKSSRV.sys
fffff800`1d1e0000 fffff800`1d1f4000 vwifimp.sys
fffff800`1d200000 fffff800`1d20f000 hiber_storpo
fffff800`1fd20000 fffff800`20903000 hiber_iaStor
fffff800`20910000 fffff800`2092e000 hiber_dumpfv
fffff800`1d150000 fffff800`1d164000 vwifimp.sys
fffff800`1d1c0000 fffff800`1d1d1000 MSKSSRV.sys


Microsoft (R) Windows Debugger Version 10.0.21349.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\msiga\Desktop\_Bug\063021-10828-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff803`77200000 PsLoadedModuleList = 0xfffff803`77e2a230
Debug session time: Wed Jun 30 00:59:54.132 2021 (UTC + 3:00)
System Uptime: 0 days 8:12:24.897
Loading Kernel Symbols
...............................................................
................................................................
................................................................
......
Loading User Symbols
Loading unloaded module list
..........................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`775f6c20 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffd007`a149d350=000000000000000a
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000018, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8037cc6fbcc, address which referenced memory

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for Netwtw04.sys
*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 6968

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 36556

Key : Analysis.Init.CPU.mSec
Value: 374

Key : Analysis.Init.Elapsed.mSec
Value: 26136

Key : Analysis.Memory.CommitPeak.Mb
Value: 98

Key : Memory.System.Errors.BadPageCount
Value: 1

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: d1

BUGCHECK_P1: 18

BUGCHECK_P2: 2

BUGCHECK_P3: 0

BUGCHECK_P4: fffff8037cc6fbcc

READ_ADDRESS: fffff80377efb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
0000000000000018

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

TRAP_FRAME: ffffd007a149d490 -- (.trap 0xffffd007a149d490)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffd007a149d648 rbx=0000000000000000 rcx=0000000000000010
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8037cc6fbcc rsp=ffffd007a149d620 rbp=ffffd007a149d6c9
r8=0000000000000005 r9=ffffbe8a6842c320 r10=fffff803774c31d0
r11=ffffd007a149d440 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
tcpip!IppCompleteAndFreePacketList+0x24:
fffff803`7cc6fbcc 488b4108 mov rax,qword ptr [rcx+8] ds:00000000`00000018=????????????????
Resetting default scope

STACK_TEXT:
ffffd007`a149d348 fffff803`77608b69 : 00000000`0000000a 00000000`00000018 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd007`a149d350 fffff803`77604e69 : ffffbe8a`6a9a7cc0 fffff803`91621010 ffffbe8a`64b610c0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd007`a149d490 fffff803`7cc6fbcc : ffffbe8a`683a2ba0 ffffbe8a`6857f530 fffff803`7cde9230 ffffd007`a149d6c9 : nt!KiPageFault+0x469
ffffd007`a149d620 fffff803`7cca69ef : 00000000`00000000 00000000`00000000 fffff803`7cde9230 00000000`00000000 : tcpip!IppCompleteAndFreePacketList+0x24
ffffd007`a149d650 fffff803`7cc256e3 : ffffbb01`5fe00004 00000000`00000000 fffff803`7cde9230 ffffbe8a`00000000 : tcpip!IppFragmentPackets+0x80a3f
ffffd007`a149d730 fffff803`7cc25368 : ffffbe8a`5ab2e8a8 00000000`00000001 00000000`00000000 00000000`000081e4 : tcpip!IppDispatchSendPacketHelper+0xbf
ffffd007`a149d800 fffff803`7cc23fb8 : ffffbe8a`5ab2e988 00000000`00000007 00000000`00000000 ffffbe8a`5ab2e8a8 : tcpip!IppPacketizeDatagrams+0x2e8
ffffd007`a149d930 fffff803`7cc22aa9 : ffffbe8a`62bf0b00 00000000`00000000 fffff803`7cde9230 ffffbe8a`65c3f230 : tcpip!IppSendDatagramsCommon+0x498
ffffd007`a149dab0 fffff803`7cc01c7e : ffffbe8a`70fee2b0 00000000`00000014 00000000`00000000 ffffbe8a`64c31b00 : tcpip!IpNlpFastSendDatagram+0x349
ffffd007`a149db70 fffff803`7cc03e46 : ffffbe8a`64c31b00 00000000`00000080 00000000`da76fb78 fffff803`7cde9598 : tcpip!TcpTcbHeaderSend+0x5ce
ffffd007`a149de20 fffff803`7cc6aa12 : ffffbe8a`5ab0d500 00000000`0000bb01 00000000`00000002 ffffbe8a`5ac2d801 : tcpip!TcpReceive+0x4d6
ffffd007`a149df10 fffff803`7cc2a8d1 : ffffbe8a`64e507b0 00000000`00000000 00000000`00000000 ffffbe8a`5aad63c0 : tcpip!TcpNlClientReceiveDatagrams+0x22
ffffd007`a149df50 fffff803`7cc2721b : 00000000`00000001 ffffd007`a149e000 00000000`00000000 ffffbe8a`5ac2d000 : tcpip!IppProcessDeliverList+0xc1
ffffd007`a149e030 fffff803`7cc2679f : fffff803`7cde9230 ffffbe8a`5a105010 ffffbe8a`5ac2d000 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x21b
ffffd007`a149e130 fffff803`7cc23aac : ffffbe8a`6857f530 ffffbe8a`66dfe7e0 00000000`00000001 00000000`00000000 : tcpip!IppFlcReceivePacketsCore+0x32f
ffffd007`a149e250 fffff803`7cc71010 : ffffbe8a`64e507b0 00000000`00000000 ffffd007`a149e321 00000000`00000000 : tcpip!IpFlcReceivePackets+0xc
ffffd007`a149e280 fffff803`7cc7060c : 00000000`00000001 ffffbe8a`6517e000 fffff803`7cc632c0 ffffd007`a149e65c : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x270
ffffd007`a149e380 fffff803`77498bc8 : ffffbe8a`5ac562a0 00000000`00000002 ffffbe8a`6515a040 ffffd007`a149e678 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0x17c
ffffd007`a149e4d0 fffff803`77498b3d : fffff803`7cc70490 ffffd007`a149e678 ffffbe8a`5aad61e0 fffff803`77473f97 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149e540 fffff803`7cc62e5d : 00000000`00000000 ffffd007`a149e640 00000001`ffffffff 00000000`646e5344 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149e580 fffff803`7cc6253d : 00000000`00000000 ffffd007`a149e6e0 ffffbe8a`6517e010 ffffbe8a`00000000 : tcpip!NetioExpandKernelStackAndCallout+0x8d
ffffd007`a149e5e0 fffff803`7c9a1eb1 : 00000000`00000001 ffffbe8a`6c5c5a81 00000000`00000020 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0x46d
ffffd007`a149e890 fffff803`7c9a1ccb : ffffbe8a`68db05a0 ffff0008`29a30001 ffffd007`00000000 ffffbe8a`00000008 : ndis!ndisMIndicateNetBufferListsToOpen+0x141
ffffd007`a149e970 fffff803`7c9ddbdf : ffffbe8a`6104d1a0 ffffe301`ab5e3901 ffffbe8a`66dfe7e0 ffffd007`a149eb68 : ndis!ndisMTopReceiveNetBufferLists+0x22b
ffffd007`a149e9f0 fffff803`7c9e3381 : 00000000`00000000 ffffbe8a`66af0c70 00000000`00000000 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x4b
ffffd007`a149eac0 fffff803`7c9a804e : ffffbe8a`66af0c70 00000000`00000001 ffffbe8a`00000000 00000000`00000008 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x3bf11
ffffd007`a149eb70 fffff803`978bd86c : ffffbe8a`61996010 00000000`00000001 ffffbe8a`66dfe7e0 ffffbe8a`619970e8 : ndis!NdisFIndicateReceiveNetBufferLists+0x6e
ffffd007`a149ebb0 fffff803`7c9a7ef1 : ffffbe8a`66af0c70 fffff803`978bd5a0 ffffbe8a`655cb020 00000000`00000000 : nwifi!Pt6Receive+0x2cc
ffffd007`a149ec10 fffff803`7c9b83be : ffffbe8a`6515a040 ffffd007`a149ede1 ffffd007`a149edc0 00000000`00000000 : ndis!ndisCallReceiveHandler+0x61
ffffd007`a149ec60 fffff803`77498bc8 : ffffd007`a149ede1 ffffbe8a`66af0c70 ffffbe8a`00000000 ffffbe8a`69e906f0 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd007`a149ecb0 fffff803`77498b3d : fffff803`7c9b8380 ffffd007`a149edc0 ffffbe8a`6511a520 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149ed20 fffff803`7c9dddd0 : 00000000`00000000 ffffbe8a`6b5649c0 00000000`00000000 ffffbe8a`6659dc70 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149ed60 fffff803`7c9e3381 : 00000000`00000000 ffffbe8a`64dbcc70 00000000`00000000 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x23c
ffffd007`a149ee30 fffff803`7c9a804e : ffffbe8a`64dbcc70 ffffbe8a`6511a520 fffff803`00000000 ffffbe8a`00000008 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x3bf11
ffffd007`a149eee0 fffff803`91605a8d : ffffbe8a`64f55c70 ffffbe8a`659e0260 00000000`00000000 00000000`00000008 : ndis!NdisFIndicateReceiveNetBufferLists+0x6e
ffffd007`a149ef20 fffff803`7c9a7ef1 : ffffbe8a`64dbcc70 fffff803`916059b0 ffffbe8a`659e0260 fffff803`7cee12bb : vwififlt!FilterReceiveNetBufferLists+0xdd
ffffd007`a149ef80 fffff803`7c9b83be : ffffbe8a`6515a040 ffffd007`a149f151 ffffd007`a149f130 00000000`00000000 : ndis!ndisCallReceiveHandler+0x61
ffffd007`a149efd0 fffff803`77498bc8 : ffffd007`a149f151 ffffbe8a`64dbcc70 fffff803`00000000 ffffbe8a`69e913b0 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd007`a149f020 fffff803`77498b3d : fffff803`7c9b8380 ffffd007`a149f130 ffffbe8a`6511a520 fffff803`7cb28d88 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149f090 fffff803`7c9dddd0 : 00000000`00000000 00000000`00000000 ffffbe8a`5abb3cd0 ffffbe8a`66af0c70 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149f0d0 fffff803`7c9e3381 : 00000000`00000000 ffffbe8a`65149c70 00000000`00000000 ffffbe8a`6511a520 : ndis!ndisInvokeNextReceiveHandler+0x23c
ffffd007`a149f1a0 fffff803`7c9a804e : ffffbe8a`65149c70 ffffbe8a`65149c70 fffff803`00000000 00000000`00000008 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x3bf11
ffffd007`a149f250 fffff803`7cf6131c : ffffbe8a`66feebf0 00000000`00000008 00000000`00000000 00000000`00000001 : ndis!NdisFIndicateReceiveNetBufferLists+0x6e
ffffd007`a149f290 fffff803`7c9a7ef1 : ffffbe8a`00000008 ffffbe8a`6511a520 00000000`00000000 ffffbe8a`6a2caa01 : wfplwfs!LwfLowerRecvNetBufferLists+0x17c
ffffd007`a149f350 fffff803`7c9b83be : ffffbe8a`6515a040 ffffd007`a149f521 ffffd007`a149f500 00000000`00000000 : ndis!ndisCallReceiveHandler+0x61
ffffd007`a149f3a0 fffff803`77498bc8 : ffffd007`a149f521 ffffbe8a`65149c70 00000000`00000000 00000000`00000002 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd007`a149f3f0 fffff803`77498b3d : fffff803`7c9b8380 ffffd007`a149f500 ffffbe8a`6511a520 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x78
ffffd007`a149f460 fffff803`7c9dddd0 : ffffbe8a`66feebf0 ffffbe8a`66eb1040 ffffbe8a`659e0260 fffff803`91606400 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffffd007`a149f4a0 fffff803`7c9a4a94 : 00000000`001cda39 00000000`00000000 ffffbe8a`6104d1a0 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x23c
ffffd007`a149f570 fffff803`92952d98 : 00000000`00000003 ffffbe8a`62bf0ba0 ffffd007`a149f660 ffffbe8a`6511a520 : ndis!NdisMIndicateReceiveNetBufferLists+0x104
ffffd007`a149f600 fffff803`92917167 : 00000000`00000008 00000000`00000000 ffffbe8a`00000000 00000000`00000000 : wdiwifi!CPort::IndicateFrames+0x2d8
ffffd007`a149f6a0 fffff803`928fbb67 : ffffbe8a`6511a520 ffffd007`a149f7c9 ffffbe8a`6842ebb0 fffff803`00000001 : wdiwifi!CAdapter::IndicateFrames+0x137
ffffd007`a149f710 fffff803`928fc2a6 : ffffbe8a`6842ebb0 ffffbe8a`00000008 ffffbe8a`6842ebb0 ffffbe8a`00000000 : wdiwifi!CRxMgr::RxProcessAndIndicateNblChain+0x7f7
ffffd007`a149f830 fffff803`928f8142 : ffffbe8a`6511a520 ffffd007`a149f970 ffffbe8a`00000000 ffffbe8a`0000002f : wdiwifi!CRxMgr::RxInOrderDataInd+0x35a
ffffd007`a149f8d0 fffff803`94bb5983 : ffffbe8a`66cfeb00 00000000`00000000 ffffbe8a`5aba40c0 fffff803`77412707 : wdiwifi!AdapterRxInorderDataInd+0x92
ffffd007`a149f920 ffffbe8a`66cfeb00 : 00000000`00000000 ffffbe8a`5aba40c0 fffff803`77412707 ffffd007`a149f978 : Netwtw04+0x55983
ffffd007`a149f928 00000000`00000000 : ffffbe8a`5aba40c0 fffff803`77412707 ffffd007`a149f978 ffffd007`a149f970 : 0xffffbe8a`66cfeb00


SYMBOL_NAME: tcpip!IppCompleteAndFreePacketList+24

MODULE_NAME: tcpip

IMAGE_NAME: tcpip.sys

IMAGE_VERSION: 10.0.19041.1052

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 24

FAILURE_BUCKET_ID: AV_tcpip!IppCompleteAndFreePacketList

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {c87eecc0-64b1-5c99-88b8-0c37f88df86a}

Followup: MachineOwner
---------

2: kd> lm
start end module name
ffffbc49`b6200000 ffffbc49`b64d8000 win32kbase (deferred)
ffffbc49`b64e0000 ffffbc49`b6896000 win32kfull (deferred)
ffffbc49`b6990000 ffffbc49`b6a2a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
ffffbc49`b6a80000 ffffbc49`b6aca000 cdd (deferred)
fffff803`75460000 fffff803`757fd000 mcupdate_GenuineIntel (deferred)
fffff803`75800000 fffff803`75806000 hal (deferred)
fffff803`75810000 fffff803`7581b000 kd (deferred)
fffff803`75820000 fffff803`75847000 tm (deferred)
fffff803`75850000 fffff803`7585b000 BOOTVID (deferred)
fffff803`77200000 fffff803`78246000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\FC57F1C841C2C3F793D57AC134DC0EFA1\ntkrnlmp.pdb
fffff803`7ae00000 fffff803`7ae6a000 CLFS (deferred)
fffff803`7ae70000 fffff803`7ae8a000 PSHED (deferred)
fffff803`7ae90000 fffff803`7afa4000 clipsp (deferred)
fffff803`7afb0000 fffff803`7b01f000 FLTMGR (deferred)
fffff803`7b020000 fffff803`7b049000 ksecdd (deferred)
fffff803`7b050000 fffff803`7b0b3000 msrpc (deferred)
fffff803`7b0c0000 fffff803`7b0ce000 cmimcext (deferred)
fffff803`7b0d0000 fffff803`7b0e1000 werkernel (deferred)
fffff803`7b0f0000 fffff803`7b0fc000 ntosext (deferred)
fffff803`7b100000 fffff803`7b1e3000 CI (deferred)
fffff803`7b1f0000 fffff803`7b2ab000 cng (deferred)
fffff803`7b2b0000 fffff803`7b382000 Wdf01000 (deferred)
fffff803`7b390000 fffff803`7b3a3000 WDFLDR (deferred)
fffff803`7b3b0000 fffff803`7b3bf000 SleepStudyHelper (deferred)
fffff803`7b3c0000 fffff803`7b3d1000 WppRecorder (deferred)
fffff803`7b3e0000 fffff803`7b406000 acpiex (deferred)
fffff803`7b410000 fffff803`7b42a000 SgrmAgent (deferred)
fffff803`7b430000 fffff803`7b4fc000 ACPI (deferred)
fffff803`7b500000 fffff803`7b50c000 WMILIB (deferred)
fffff803`7b510000 fffff803`7b51b000 msisadrv (deferred)
fffff803`7b520000 fffff803`7b597000 pci (deferred)
fffff803`7b5a0000 fffff803`7b5e4000 tpm (deferred)
fffff803`7b5f0000 fffff803`7b5fb000 IntelTA (deferred)
fffff803`7b620000 fffff803`7b68b000 intelpep (deferred)
fffff803`7b690000 fffff803`7b6a7000 WindowsTrustedRT (deferred)
fffff803`7b6b0000 fffff803`7b6bb000 WindowsTrustedRTProxy (deferred)
fffff803`7b6c0000 fffff803`7b6d4000 pcw (deferred)
fffff803`7b6e0000 fffff803`7b6f5000 vdrvroot (deferred)
fffff803`7b700000 fffff803`7b72f000 pdc (deferred)
fffff803`7b730000 fffff803`7b749000 CEA (deferred)
fffff803`7b750000 fffff803`7b781000 partmgr (deferred)
fffff803`7b790000 fffff803`7b83a000 spaceport (deferred)
fffff803`7b840000 fffff803`7b859000 volmgr (deferred)
fffff803`7b860000 fffff803`7b8c3000 volmgrx (deferred)
fffff803`7b8d0000 fffff803`7b8ee000 mountmgr (deferred)
fffff803`7b8f0000 fffff803`7c4d2000 iaStorAC (deferred)
fffff803`7c4e0000 fffff803`7c593000 storport (deferred)
fffff803`7c5a0000 fffff803`7c5bc000 EhStorClass (deferred)
fffff803`7c5c0000 fffff803`7c5da000 fileinfo (deferred)
fffff803`7c5f0000 fffff803`7c630000 Wof (deferred)
fffff803`7c640000 fffff803`7c6aa000 WdFilter (deferred)
fffff803`7c6b0000 fffff803`7c989000 Ntfs (deferred)
fffff803`7c990000 fffff803`7c99d000 Fs_Rec (deferred)
fffff803`7c9a0000 fffff803`7cb0f000 ndis (pdb symbols) C:\ProgramData\Dbg\sym\ndis.pdb\72DA27E04D05FAC4F68A0FCE1FEBCD201\ndis.pdb
fffff803`7cb10000 fffff803`7cba8000 NETIO (deferred)
fffff803`7cbb0000 fffff803`7cbe2000 ksecpkg (deferred)
fffff803`7cbf0000 fffff803`7cedc000 tcpip (pdb symbols) C:\ProgramData\Dbg\sym\tcpip.pdb\79E25843598F7D347EA24C46D56A94821\tcpip.pdb
fffff803`7cee0000 fffff803`7cf5f000 fwpkclnt (deferred)
fffff803`7cf60000 fffff803`7cf90000 wfplwfs # (pdb symbols) C:\ProgramData\Dbg\sym\wfplwfs.pdb\0D6CC29202502BB995AE4D09F1F784601\wfplwfs.pdb
fffff803`7cfa0000 fffff803`7d068000 fvevol (deferred)
fffff803`7d070000 fffff803`7d084000 amdkmpfd (deferred)
fffff803`7d090000 fffff803`7d09b000 volume (deferred)
fffff803`7d0a0000 fffff803`7d10d000 volsnap (deferred)
fffff803`7d110000 fffff803`7d160000 rdyboost (deferred)
fffff803`7d170000 fffff803`7d196000 mup (deferred)
fffff803`7d1a0000 fffff803`7d1b2000 iorate (deferred)
fffff803`7d1e0000 fffff803`7d1fc000 disk (deferred)
fffff803`7d200000 fffff803`7d26c000 CLASSPNP (deferred)
fffff803`90000000 fffff803`90be2000 dump_iaStorAC (deferred)
fffff803`90bf0000 fffff803`90c3e000 ahcache (deferred)
fffff803`90c40000 fffff803`90c52000 CompositeBus (deferred)
fffff803`90c60000 fffff803`90c75000 umbus (deferred)
fffff803`90c80000 fffff803`90c95000 CAD (deferred)
fffff803`90ca0000 fffff803`90d87000 rt640x64 (deferred)
fffff803`90f30000 fffff803`90f4e000 crashdmp (deferred)
fffff803`91000000 fffff803`9100a000 Beep (deferred)
fffff803`91010000 fffff803`913b4000 dxgkrnl (deferred)
fffff803`913c0000 fffff803`913d8000 watchdog (deferred)
fffff803`913e0000 fffff803`913f6000 BasicDisplay (deferred)
fffff803`91400000 fffff803`91411000 BasicRender (deferred)
fffff803`91420000 fffff803`9143c000 Npfs (deferred)
fffff803`91440000 fffff803`91451000 Msfs (deferred)
fffff803`91460000 fffff803`9147e000 CimFS (deferred)
fffff803`91480000 fffff803`914a2000 tdx (deferred)
fffff803`914b0000 fffff803`914c0000 TDI (deferred)
fffff803`914d0000 fffff803`9152c000 netbt (deferred)
fffff803`91530000 fffff803`91543000 afunix (deferred)
fffff803`91550000 fffff803`915f6000 afd (deferred)
fffff803`91600000 fffff803`9161a000 vwififlt # (pdb symbols) C:\ProgramData\Dbg\sym\vwififlt.pdb\5F730CDDBE01B1A7DEA0367C0A1C71101\vwififlt.pdb
fffff803`91620000 fffff803`9164b000 pacer (deferred)
fffff803`91650000 fffff803`91664000 ndiscap (deferred)
fffff803`91670000 fffff803`91684000 netbios (deferred)
fffff803`91690000 fffff803`91732000 Vid (deferred)
fffff803`91740000 fffff803`91761000 winhvr (deferred)
fffff803`91770000 fffff803`917eb000 rdbss (deferred)
fffff803`917f0000 fffff803`91802000 nsiproxy (deferred)
fffff803`91810000 fffff803`9181e000 npsvctrig (deferred)
fffff803`91820000 fffff803`91830000 mssmbios (deferred)
fffff803`91840000 fffff803`9184a000 gpuenergydrv (deferred)
fffff803`91850000 fffff803`9187c000 dfsc (deferred)
fffff803`91880000 fffff803`9189a000 amdfendr (deferred)
fffff803`918a0000 fffff803`9190c000 fastfat (deferred)
fffff803`91910000 fffff803`91927000 bam (deferred)
fffff803`91930000 fffff803`9193e000 amdxe (deferred)
fffff803`91940000 fffff803`9194d000 kdnic (deferred)
fffff803`92580000 fffff803`925b2000 cdrom (deferred)
fffff803`925c0000 fffff803`925d5000 filecrypt (deferred)
fffff803`925e0000 fffff803`925ee000 tbs (deferred)
fffff803`925f0000 fffff803`925fa000 Null (deferred)
fffff803`92800000 fffff803`92821000 raspptp (deferred)
fffff803`92830000 fffff803`9284c000 raspppoe (deferred)
fffff803`92850000 fffff803`9288a000 ndiswan (deferred)
fffff803`92890000 fffff803`928a7000 WdNisDrv (deferred)
fffff803`928b0000 fffff803`928bb000 semav6msr64 (deferred)
fffff803`928c0000 fffff803`928d5000 LGSHidFilt (deferred)
fffff803`928f0000 fffff803`929e0000 wdiwifi # (pdb symbols) C:\ProgramData\Dbg\sym\WdiWiFi.pdb\ECB765D83021997B162B0815A4E6CC631\WdiWiFi.pdb
fffff803`929f0000 fffff803`92a04000 qwavedrv (deferred)
fffff803`92b80000 fffff803`92d04000 BTHport (deferred)
fffff803`92d10000 fffff803`92d77000 RtsUer (deferred)
fffff803`92d80000 fffff803`92da7000 AgileVpn (deferred)
fffff803`92db0000 fffff803`92dd1000 rasl2tp (deferred)
fffff803`92de0000 fffff803`92df2000 hidusb (deferred)
fffff803`93400000 fffff803`93498000 USBXHCI (deferred)
fffff803`934a0000 fffff803`934e4000 ucx01000 (deferred)
fffff803`934f0000 fffff803`93520000 TeeDriverW8x64 (deferred)
fffff803`935b0000 fffff803`941f6000 igdkmd64 (deferred)
fffff803`94310000 fffff803`9431f000 CmBatt (deferred)
fffff803`94320000 fffff803`94330000 BATTC (deferred)
fffff803`94340000 fffff803`94355000 AcpiVpc (deferred)
fffff803`94360000 fffff803`9436c000 ICCWDT (deferred)
fffff803`94370000 fffff803`94391000 i8042prt (deferred)
fffff803`943a0000 fffff803`94421000 ETD (deferred)
fffff803`94430000 fffff803`94444000 kbdclass (deferred)
fffff803`94450000 fffff803`94463000 mouclass (deferred)
fffff803`94470000 fffff803`94495000 HDAudBus (deferred)
fffff803`944a0000 fffff803`94506000 portcls (deferred)
fffff803`94510000 fffff803`94531000 drmk (deferred)
fffff803`94540000 fffff803`945b6000 ks (deferred)
fffff803`945c0000 fffff803`945cc000 wmiacpi (deferred)
fffff803`945d0000 fffff803`94610000 intelppm (deferred)
fffff803`94620000 fffff803`9462b000 acpipagr (deferred)
fffff803`94630000 fffff803`9463e000 UEFI (deferred)
fffff803`94640000 fffff803`9464d000 NdisVirtualBus (deferred)
fffff803`94650000 fffff803`9465c000 swenum (deferred)
fffff803`94660000 fffff803`94664e00 LGBusEnum (deferred)
fffff803`94670000 fffff803`9467c800 LGJoyXlCore (deferred)
fffff803`94680000 fffff803`9468e000 rdpbus (deferred)
fffff803`94690000 fffff803`94735000 UsbHub3 (deferred)
fffff803`94740000 fffff803`9474e000 USBD (deferred)
fffff803`94750000 fffff803`948d8000 CHDRT64 (deferred)
fffff803`948e0000 fffff803`948ef000 ksthunk (deferred)
fffff803`948f0000 fffff803`949b8000 IntcDAud (deferred)
fffff803`949c0000 fffff803`949f3000 usbccgp (deferred)
fffff803`94a20000 fffff803`94a5f000 HIDCLASS (deferred)
fffff803`94a60000 fffff803`94a73000 HIDPARSE (deferred)
fffff803`94aa0000 fffff803`94ab0000 mouhid (deferred)
fffff803`94ac0000 fffff803`94ad1000 kbdhid (deferred)
fffff803`94ae0000 fffff803`94b20000 ibtusb (deferred)
fffff803`94b30000 fffff803`94b51000 BTHUSB (deferred)
fffff803`94b60000 fffff803`953e0000 Netwtw04 T (no symbols)
fffff803`97600000 fffff803`9761b000 monitor (deferred)
fffff803`97630000 fffff803`9763e000 dump_diskdump (deferred)
fffff803`97660000 fffff803`9767d000 dump_dumpfve (deferred)
fffff803`97680000 fffff803`976a9000 luafv (deferred)
fffff803`976b0000 fffff803`976e6000 wcifs (deferred)
fffff803`976f0000 fffff803`97772000 cldflt (deferred)
fffff803`97780000 fffff803`9779a000 storqosflt (deferred)
fffff803`977a0000 fffff803`977c8000 bindflt (deferred)
fffff803`977d0000 fffff803`977e4000 mmcss (deferred)
fffff803`977f0000 fffff803`977fd000 rdpvideominiport (deferred)
fffff803`97800000 fffff803`9780e000 vwifibus (deferred)
fffff803`97810000 fffff803`97828000 lltdio (deferred)
fffff803`97830000 fffff803`97848000 mslldp (deferred)
fffff803`97850000 fffff803`9786b000 rspndr (deferred)
fffff803`97870000 fffff803`9788d000 wanarp (deferred)
fffff803`97890000 fffff803`978a8000 ndisuio (deferred)
fffff803`978b0000 fffff803`9796b000 nwifi (pdb symbols) C:\ProgramData\Dbg\sym\nwifi.pdb\286B7E39218532AEBE3E97EA822EBC3A1\nwifi.pdb
fffff803`97970000 fffff803`979c6000 msquic (deferred)
fffff803`979d0000 fffff803`97b55000 HTTP (deferred)
fffff803`97b60000 fffff803`97b72000 condrv (deferred)
fffff803`97b80000 fffff803`97b9a000 mpsdrv (deferred)
fffff803`97ba0000 fffff803`97bc5000 bowser (deferred)
fffff803`97bd0000 fffff803`97c64000 mrxsmb (deferred)
fffff803`97c70000 fffff803`97cb5000 mrxsmb20 (deferred)
fffff803`97cc0000 fffff803`97cd3000 vwifimp (deferred)
fffff803`97ce0000 fffff803`97d15000 idmwfp (deferred)
fffff803`97d20000 fffff803`97d73000 srvnet (deferred)
fffff803`97d80000 fffff803`97d88000 lgcoretemp (deferred)
fffff803`97d90000 fffff803`97db7000 Ndu (deferred)
fffff803`97dc0000 fffff803`97e96000 peauth (deferred)
fffff803`97ea0000 fffff803`97eb5000 tcpipreg (deferred)
fffff803`97ec0000 fffff803`97f87000 srv2 (deferred)
fffff803`97f90000 fffff803`97fac000 rassstp (deferred)
fffff803`97fb0000 fffff803`97fcd000 NDProxy (deferred)
fffff803`97fd0000 fffff803`97fdf000 ndistapi (deferred)
fffff803`97fe0000 fffff803`99ef0000 rtsuvc (deferred)
fffff803`99f00000 fffff803`99fe1000 dxgmms2 (deferred)
fffff803`99ff0000 fffff803`99ff2500 LGVirHid (deferred)

Unloaded modules:
fffff803`92a10000 fffff803`92a21000 MSKSSRV.sys
fffff803`92a80000 fffff803`92a93000 hidusb.sys
fffff803`97cc0000 fffff803`97cd4000 vwifimp.sys
fffff803`92b60000 fffff803`92b6f000 hiber_storpo
fffff803`79af0000 fffff803`7a6d3000 hiber_iaStor
fffff803`7a6e0000 fffff803`7a6fe000 hiber_dumpfv
fffff803`92b40000 fffff803`92b51000 MSKSSRV.sys
fffff803`92b20000 fffff803`92b31000 MSKSSRV.sys
fffff803`92b00000 fffff803`92b11000 MSKSSRV.sys
fffff803`92ae0000 fffff803`92af1000 MSKSSRV.sys
fffff803`92ac0000 fffff803`92ad1000 MSKSSRV.sys
fffff803`92aa0000 fffff803`92ab1000 MSKSSRV.sys
fffff803`92a10000 fffff803`92a23000 hidusb.sys
fffff803`92a30000 fffff803`92a46000 LGSHidFilt.S
fffff803`97cc0000 fffff803`97cd4000 vwifimp.sys
fffff803`92a70000 fffff803`92a7f000 hiber_storpo
fffff803`74670000 fffff803`75253000 hiber_iaStor
fffff803`75260000 fffff803`7527e000 hiber_dumpfv
fffff803`92a50000 fffff803`92a61000 MSKSSRV.sys
fffff803`928d0000 fffff803`928e3000 hidusb.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`94300000 fffff803`9430f000 vwifibus.sys
fffff803`94ce0000 fffff803`95561000 Netwtw04.sys
fffff803`94200000 fffff803`942f1000 wdiwifi.sys
fffff803`97cc0000 fffff803`97cd4000 vwifimp.sys
fffff803`97800000 fffff803`9780d000 MSPCLOCK.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`977f0000 fffff803`977fd000 MSPQM.sys
fffff803`97800000 fffff803p`9780d000 MSPCLOCK.sys
fffff803`977f0000 fffff803`97801000 MSKSSRV.sys
fffff803`94a00000 fffff803`94a13000 hidusb.sys
fffff803`94a80000 fffff803`94a96000 LGSHidFilt.S
fffff803`928c0000 fffff803`928cd000 MSPQM.sys
fffff803`977f0000 fffff803`97801000 MSKSSRV.sys
fffff803`977f0000 fffff803`97801000 MSKSSRV.sys
fffff803`90f60000 fffff803`90f6f000 dump_storpor
fffff803`91950000 fffff803`92533000 dump_iaStorA
fffff803`92560000 fffff803`9257e000 dump_dumpfve
fffff803`91880000 fffff803`9189c000 dam.sys
fffff803`7b600000 fffff803`7b612000 WdBoot.sys
fffff803`7d1c0000 fffff803`7d1d1000 hwpolicy.sys

[/CODE]

Saygılarımla.
Teşekkürler, fırsat bulamadım bakmaya. Kamera ve wifi driverını silip tekrar yükledim ama lenovo sitesindeki driverı kurmadı. Uygun driver bulunamadı gibi bir hata verdi ve silmeden önceki bulunan versiyonu tekrar kurdu. 22.50 sürümünü yine yüklemedi. Logitech gaming software'i kullanmak zorundayım mouse'un asıl sağ/sol tuşları bozuk yazılımdan başka tuşlara atayarak kullanıyorum.
Memtest'i de deneyeceğim fırsat bulunca, uzun sürüyormuş biraz.
 

Yeni konular

Geri
Yukarı