SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8021f4446f6, The address that the exception occurred at
Arg3: ffffb380058ff038, Exception Record Address
Arg4: ffffb380058fe870, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx adresindeki y nerge, 0x%08lx bellek adresine ba
FAULTING_IP:
navagio+2446f6
fffff802`1f4446f6 498b03 mov rax,qword ptr [r11]
EXCEPTION_RECORD: ffffb380058ff038 -- (.exr 0xffffb380058ff038)
ExceptionAddress: fffff8021f4446f6 (navagio+0x00000000002446f6)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000030
Attempt to read from address 0000000000000030
CONTEXT: ffffb380058fe870 -- (.cxr 0xffffb380058fe870;r)
rax=000000000000ebbb rbx=00000000fff61a75 rcx=fffff8021f25fba6
rdx=0000000000000048 rsi=0000000000000000 rdi=fffff8021f25f9ff
rip=fffff8021f4446f6 rsp=ffffb380058ff270 rbp=ffffb380058ff488
r8=fffff8021f4446e8 r9=fffffffffffccf6b r10=0000000000040206
r11=0000000000000030 r12=0000000000000000 r13=000000000000001f
r14=ffffb380058ff628 r15=ffffdd8d7861e040
iopl=0 nv up ei ng nz ac po cy
cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00050297
navagio+0x2446f6:
fffff802`1f4446f6 498b03 mov rax,qword ptr [r11] ds:002b:00000000`00000030=????????????????
Last set context:
rax=000000000000ebbb rbx=00000000fff61a75 rcx=fffff8021f25fba6
rdx=0000000000000048 rsi=0000000000000000 rdi=fffff8021f25f9ff
rip=fffff8021f4446f6 rsp=ffffb380058ff270 rbp=ffffb380058ff488
r8=fffff8021f4446e8 r9=fffffffffffccf6b r10=0000000000040206
r11=0000000000000030 r12=0000000000000000 r13=000000000000001f
r14=ffffb380058ff628 r15=ffffdd8d7861e040
iopl=0 nv up ei ng nz ac po cy
cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00050297
navagio+0x2446f6:
fffff802`1f4446f6 498b03 mov rax,qword ptr [r11] ds:002b:00000000`00000030=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx adresindeki y nerge, 0x%08lx bellek adresine ba
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000030
READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
0000000000000030
FOLLOWUP_IP:
navagio+2446f6
fffff802`1f4446f6 498b03 mov rax,qword ptr [r11]
BUGCHECK_STR: AV
DEFAULT_BUCKET_ID: CODE_CORRUPTION
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre
EXCEPTION_STR: 0x0
LAST_CONTROL_TRANSFER: from ffffb380058ff628 to fffff8021f4446f6
STACK_TEXT:
ffffb380`058ff270 ffffb380`058ff628 : 00000000`00000000 ffffdd8d`7861e040 00000000`00040203 00000000`00040203 : navagio+0x2446f6
ffffb380`058ff278 00000000`00000000 : ffffdd8d`7861e040 00000000`00040203 00000000`00040203 ffffb380`058ff5a0 : 0xffffb380`058ff628
CHKIMG_EXTENSION: !chkimg -lo 50 -d !FLTMGR
fffff8021d764429-fffff8021d76442a 2 bytes - FLTMGR!FltpPassThroughFastIo+59
[ 48 ff:4c 8b ]
fffff8021d764430-fffff8021d764434 5 bytes - FLTMGR!FltpPassThroughFastIo+60 (+0x07)
[ 0f 1f 44 00 00:e8 0b ab 0d 04 ]
fffff8021d764468-fffff8021d764469 2 bytes - FLTMGR!FltpPassThroughFastIo+98 (+0x38)
[ 48 ff:4c 8b ]
fffff8021d76446f-fffff8021d764473 5 bytes - FLTMGR!FltpPassThroughFastIo+9f (+0x07)
[ 0f 1f 44 00 00:e8 8c 60 18 04 ]
fffff8021d7648fa-fffff8021d7648fb 2 bytes - FLTMGR!FltpDispatch+ca (+0x48b)
[ 48 ff:4c 8b ]
fffff8021d764901-fffff8021d764905 5 bytes - FLTMGR!FltpDispatch+d1 (+0x07)
[ 0f 1f 44 00 00:e8 da d5 16 04 ]
fffff8021d79b9a4-fffff8021d79b9a5 2 bytes - FLTMGR!FltpCreate+f4
[ 48 ff:4c 8b ]
fffff8021d79b9ab-fffff8021d79b9af 5 bytes - FLTMGR!FltpCreate+fb (+0x07)
[ 0f 1f 44 00 00:e8 c0 cc 14 04 ]
fffff8021d79cd05-fffff8021d79cd06 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+35 (+0x135a)
[ 48 ff:4c 8b ]
fffff8021d79cd0c-fffff8021d79cd10 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+3c (+0x07)
[ 0f 1f 44 00 00:e8 8f fd 09 04 ]
fffff8021d79cd1a-fffff8021d79cd1b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+4a (+0x0e)
[ 48 ff:4c 8b ]
fffff8021d79cd21-fffff8021d79cd25 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+51 (+0x07)
[ 0f 1f 44 00 00:e8 3a 3c 14 04 ]
fffff8021d79cd6a-fffff8021d79cd6b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+9a (+0x49)
[ 48 ff:4c 8b ]
fffff8021d79cd71-fffff8021d79cd77 7 bytes - FLTMGR!DeleteStreamListCtrlCallback+a1 (+0x07)
[ 0f 1f 44 00 00 48 ff:e8 3a 34 14 04 4c 8b ]
fffff8021d79cd7d-fffff8021d79cd81 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+ad (+0x0c)
[ 0f 1f 44 00 00:e8 0e 0f 07 04 ]
fffff8021d7b7740-fffff8021d7b7741 2 bytes - FLTMGR!FltpMiniFilterDriverUnload+20 (+0x1a9c3)
[ 48 ff:4c 8b ]
fffff8021d7b7747-fffff8021d7b774b 5 bytes - FLTMGR!FltpMiniFilterDriverUnload+27 (+0x07)
[ 0f 1f 44 00 00:e8 84 63 12 04 ]
fffff8021d7b7755-fffff8021d7b7756 2 bytes - FLTMGR!FltpMiniFilterDriverUnload+35 (+0x0e)
[ 48 ff:4c 8b ]
fffff8021d7b775c-fffff8021d7b7760 5 bytes - FLTMGR!FltpMiniFilterDriverUnload+3c (+0x07)
[ 0f 1f 44 00 00:e8 bf 95 12 04 ]
fffff8021d7b7771-fffff8021d7b7772 2 bytes - FLTMGR!FltpMiniFilterDriverUnload+51 (+0x15)
[ 48 ff:4c 8b ]
fffff8021d7b7778-fffff8021d7b777c 5 bytes - FLTMGR!FltpMiniFilterDriverUnload+58 (+0x07)
[ 0f 1f 44 00 00:e8 53 63 12 04 ]
fffff8021d7b7786-fffff8021d7b7787 2 bytes - FLTMGR!FltpMiniFilterDriverUnload+66 (+0x0e)
[ 48 ff:4c 8b ]
fffff8021d7b778d-fffff8021d7b7791 5 bytes - FLTMGR!FltpMiniFilterDriverUnload+6d (+0x07)
[ 0f 1f 44 00 00:e8 8e 95 12 04 ]
fffff8021d7b77bc-fffff8021d7b77bd 2 bytes - FLTMGR!FltpMiniFilterDriverUnload+9c (+0x2f)
[ 48 ff:4c 8b ]
fffff8021d7b77c3-fffff8021d7b77c9 7 bytes - FLTMGR!FltpMiniFilterDriverUnload+a3 (+0x07)
[ 0f 1f 44 00 00 48 ff:e8 e8 89 12 04 4c 8b ]
fffff8021d7b77cf-fffff8021d7b77d3 5 bytes - FLTMGR!FltpMiniFilterDriverUnload+af (+0x0c)
[ 0f 1f 44 00 00:e8 9c 89 12 04 ]
fffff8021d7b77e3-fffff8021d7b77e4 2 bytes - FLTMGR!FltpMiniFilterDriverUnload+c3 (+0x14)
[ 48 ff:4c 8b ]
fffff8021d7b77ea-fffff8021d7b77f0 7 bytes - FLTMGR!FltpMiniFilterDriverUnload+ca (+0x07)
[ 0f 1f 44 00 00 48 ff:e8 c1 89 12 04 4c 8b ]
fffff8021d7b77f6-fffff8021d7b77fa 5 bytes - FLTMGR!FltpMiniFilterDriverUnload+d6 (+0x0c)
[ 0f 1f 44 00 00:e8 75 89 12 04 ]
fffff8021d7b781e-fffff8021d7b781f 2 bytes - FLTMGR!FltpMiniFilterDriverUnload+fe (+0x28)
[ 48 ff:4c 8b ]
114 errors : !FLTMGR (fffff8021d764429-fffff8021d7b781f)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
STACK_COMMAND: .cxr 0xffffb380058fe870 ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
BUCKET_ID: MEMORY_CORRUPTION_LARGE
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_large
FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
Followup: memory_corruption
---------
0: kd> lm
start end module name
ffffc90b`3f800000 ffffc90b`3fae2000 win32kbase (deferred)
ffffc90b`3faf0000 ffffc90b`3fea6000 win32kfull (deferred)
ffffc90b`3ff00000 ffffc90b`3ff48000 cdd (deferred)
ffffc90b`40310000 ffffc90b`403aa000 win32k T (no symbols)
fffff802`1d3e0000 fffff802`1d66f000 mcupdate_GenuineIntel (deferred)
fffff802`1d670000 fffff802`1d676000 hal (deferred)
fffff802`1d680000 fffff802`1d68b000 kd (deferred)
fffff802`1d690000 fffff802`1d6b7000 tm (deferred)
fffff802`1d6c0000 fffff802`1d729000 CLFS (deferred)
fffff802`1d730000 fffff802`1d74a000 PSHED (deferred)
fffff802`1d750000 fffff802`1d75b000 BOOTVID (deferred)
fffff802`1d760000 fffff802`1d7cf000 FLTMGR (pdb symbols) C:\Program Files\Windows Kits\8.1\Debuggers\x86\sym\fltMgr.pdb\C3CA0BC721B145FE4F45FF7F65B7C5AD1\fltMgr.pdb
fffff802`1d7d0000 fffff802`1d7de000 cmimcext (deferred)
fffff802`1d800000 fffff802`1d893000 mrxsmb (deferred)
fffff802`1d8a0000 fffff802`1d8e5000 mrxsmb20 (deferred)
fffff802`1d8f0000 fffff802`1d9d2000 aow_drv_x64_ev (deferred)
fffff802`1d9e0000 fffff802`1da15000 idmwfp (deferred)
fffff802`1da20000 fffff802`1da72000 srvnet (deferred)
fffff802`1da80000 fffff802`1da94000 mmcss (deferred)
fffff802`1daa0000 fffff802`1dac7000 Ndu (deferred)
fffff802`1dad0000 fffff802`1dba6000 peauth (deferred)
fffff802`1dbb0000 fffff802`1dbc5000 tcpipreg (deferred)
fffff802`1dbd0000 fffff802`1dc97000 srv2 (deferred)
fffff802`1dca0000 fffff802`1dcbc000 rassstp (deferred)
fffff802`1dcc0000 fffff802`1dcdd000 NDProxy (deferred)
fffff802`1dce0000 fffff802`1dcf3000 condrv (deferred)
fffff802`1dd00000 fffff802`1dd07000 NTIOLib_X64 (deferred)
fffff802`1dd20000 fffff802`1dd47000 AgileVpn (deferred)
fffff802`1dd50000 fffff802`1dd71000 rasl2tp (deferred)
fffff802`1dd80000 fffff802`1dda1000 raspptp (deferred)
fffff802`1ddb0000 fffff802`1ddcc000 raspppoe (deferred)
fffff802`1ddd0000 fffff802`1dddf000 ndistapi (deferred)
fffff802`1dde0000 fffff802`1de1a000 ndiswan (deferred)
fffff802`1de30000 fffff802`1de36000 RTCore64 (deferred)
fffff802`1df90000 fffff802`1e116000 HTTP (deferred)
fffff802`1e120000 fffff802`1e145000 bowser (deferred)
fffff802`1e150000 fffff802`1e16a000 mpsdrv (deferred)
fffff802`1f200000 fffff802`1f552000 navagio T (no symbols)
fffff802`1f5d0000 fffff802`1f5d7000 NTIOLib_X64_fffff8021f5d0000 (deferred)
fffff802`1f5e0000 fffff802`1f5e7000 NTIOLib_X64_fffff8021f5e0000 (deferred)
fffff802`1f5f0000 fffff802`1f5f7000 NTIOLib_X64_fffff8021f5f0000 (deferred)
fffff802`1f870000 fffff802`1f87d000 rdpvideominiport (deferred)
fffff802`1f890000 fffff802`1fb9d000 BEDaisy (deferred)
fffff802`1fd10000 fffff802`202e8000 iqvw64e (deferred)
fffff802`202f0000 fffff802`20304000 qwavedrv (deferred)
fffff802`21600000 fffff802`22646000 nt (pdb symbols) C:\Program Files\Windows Kits\8.1\Debuggers\x86\sym\ntkrnlmp.pdb\641F55C592201DCC4F59FACC72EA54DA1\ntkrnlmp.pdb
fffff802`22c00000 fffff802`22d13000 clipsp (deferred)
fffff802`22d20000 fffff802`22d49000 ksecdd (deferred)
fffff802`22d50000 fffff802`22db2000 msrpc (deferred)
fffff802`22dc0000 fffff802`22dd1000 werkernel (deferred)
fffff802`22de0000 fffff802`22dec000 ntosext (deferred)
fffff802`22df0000 fffff802`22ed3000 CI (deferred)
fffff802`22ee0000 fffff802`22f97000 cng (deferred)
fffff802`22fa0000 fffff802`23071000 Wdf01000 (deferred)
fffff802`23080000 fffff802`23093000 WDFLDR (deferred)
fffff802`230a0000 fffff802`230af000 SleepStudyHelper (deferred)
fffff802`230b0000 fffff802`230c1000 WppRecorder (deferred)
fffff802`230d0000 fffff802`230f6000 acpiex (deferred)
fffff802`23100000 fffff802`2314b000 mssecflt (deferred)
fffff802`23150000 fffff802`2316a000 SgrmAgent (deferred)
fffff802`23170000 fffff802`2323c000 ACPI (deferred)
fffff802`23240000 fffff802`2324c000 WMILIB (deferred)
fffff802`23270000 fffff802`232db000 intelpep (deferred)
fffff802`232e0000 fffff802`232f7000 WindowsTrustedRT (deferred)
fffff802`23300000 fffff802`2330b000 IntelTA (deferred)
fffff802`23310000 fffff802`2331b000 WindowsTrustedRTProxy (deferred)
fffff802`23320000 fffff802`23334000 pcw (deferred)
fffff802`23340000 fffff802`2334b000 msisadrv (deferred)
fffff802`23350000 fffff802`233c8000 pci (deferred)
fffff802`233d0000 fffff802`233e5000 vdrvroot (deferred)
fffff802`233f0000 fffff802`233fd000 Fs_Rec (deferred)
fffff802`23400000 fffff802`2342f000 pdc (deferred)
fffff802`23430000 fffff802`23449000 CEA (deferred)
fffff802`23450000 fffff802`23481000 partmgr (deferred)
fffff802`23490000 fffff802`2353a000 spaceport (deferred)
fffff802`23540000 fffff802`23559000 volmgr (deferred)
fffff802`23560000 fffff802`235c3000 volmgrx (deferred)
fffff802`235d0000 fffff802`235ee000 mountmgr (deferred)
fffff802`235f0000 fffff802`241d5000 iaStorAC (deferred)
fffff802`241e0000 fffff802`24290000 storport (deferred)
fffff802`242a0000 fffff802`242bc000 EhStorClass (deferred)
fffff802`242c0000 fffff802`242da000 fileinfo (deferred)
fffff802`242e0000 fffff802`24320000 Wof (deferred)
fffff802`24330000 fffff802`2439c000 WdFilter (deferred)
fffff802`243a0000 fffff802`243d2000 ksecpkg (deferred)
fffff802`243f0000 fffff802`246c9000 Ntfs (deferred)
fffff802`246d0000 fffff802`2483f000 ndis (deferred)
fffff802`24840000 fffff802`248d8000 NETIO (deferred)
fffff802`248e0000 fffff802`24bcc000 tcpip (deferred)
fffff802`24bd0000 fffff802`24c4f000 fwpkclnt (deferred)
fffff802`24c50000 fffff802`24c80000 wfplwfs (deferred)
fffff802`24c90000 fffff802`24d59000 fvevol (deferred)
fffff802`24d60000 fffff802`24d6b000 volume (deferred)
fffff802`24d70000 fffff802`24ddd000 volsnap (deferred)
fffff802`24de0000 fffff802`24e30000 rdyboost (deferred)
fffff802`24e40000 fffff802`24e66000 mup (deferred)
fffff802`24e70000 fffff802`24e82000 iorate (deferred)
fffff802`24eb0000 fffff802`24ecc000 disk (deferred)
fffff802`24ed0000 fffff802`24f3c000 CLASSPNP (deferred)
fffff802`37200000 fffff802`3721e000 crashdmp (deferred)
fffff802`37240000 fffff802`373cb000 cfosspeed6 (deferred)
fffff802`373d0000 fffff802`37471000 Vid (deferred)
fffff802`37480000 fffff802`374fb000 rdbss (deferred)
fffff802`37500000 fffff802`37594000 csc (deferred)
fffff802`375a0000 fffff802`375fa000 MEmuDrv (deferred)
fffff802`37600000 fffff802`3762c000 dfsc (deferred)
fffff802`37630000 fffff802`3769c000 fastfat (deferred)
fffff802`376a0000 fffff802`376ee000 ahcache (deferred)
fffff802`376f0000 fffff802`37702000 CompositeBus (deferred)
fffff802`37710000 fffff802`3771d000 kdnic (deferred)
fffff802`37720000 fffff802`37735000 umbus (deferred)
fffff802`38400000 fffff802`38414000 ndiscap (deferred)
fffff802`38420000 fffff802`38434000 netbios (deferred)
fffff802`38440000 fffff802`38461000 winhvr (deferred)
fffff802`38470000 fffff802`38482000 nsiproxy (deferred)
fffff802`38490000 fffff802`384a0000 mssmbios (deferred)
fffff802`384b0000 fffff802`384ba000 gpuenergydrv (deferred)
fffff802`384c0000 fffff802`384d7000 bam (deferred)
fffff802`384e0000 fffff802`390c5000 dump_iaStorAC (deferred)
fffff802`390d0000 fffff802`390e3000 afunix (deferred)
fffff802`390f0000 fffff802`39193000 afd (deferred)
fffff802`391a0000 fffff802`391ba000 vwififlt (deferred)
fffff802`391c0000 fffff802`391eb000 pacer (deferred)
fffff802`391f0000 fffff802`391fc000 tap0901 (deferred)
fffff802`39200000 fffff802`395a4000 dxgkrnl (deferred)
fffff802`395b0000 fffff802`395c8000 watchdog (deferred)
fffff802`395d0000 fffff802`395e6000 BasicDisplay (deferred)
fffff802`395f0000 fffff802`39601000 BasicRender (deferred)
fffff802`39610000 fffff802`3962c000 Npfs (deferred)
fffff802`39630000 fffff802`39641000 Msfs (deferred)
fffff802`39650000 fffff802`3966b000 CimFS (deferred)
fffff802`39670000 fffff802`3967a000 HWiNFO64A (deferred)
fffff802`3a2b0000 fffff802`3a2e0000 cdrom (deferred)
fffff802`3a2f0000 fffff802`3a305000 filecrypt (deferred)
fffff802`3a310000 fffff802`3a31e000 tbs (deferred)
fffff802`3a320000 fffff802`3a32a000 Null (deferred)
fffff802`3a330000 fffff802`3a33a000 Beep (deferred)
fffff802`3a340000 fffff802`3a362000 tdx (deferred)
fffff802`3a370000 fffff802`3a380000 TDI (deferred)
fffff802`3a390000 fffff802`3a3ec000 netbt (deferred)
fffff802`3a3f0000 fffff802`3a3fe000 npsvctrig (deferred)
fffff802`3a400000 fffff802`3a495000 e1d68x64 (deferred)
fffff802`3a4a0000 fffff802`3a4ac000 wmiacpi (deferred)
fffff802`3a4b0000 fffff802`3a4f0000 intelppm (deferred)
fffff802`3a500000 fffff802`3a50b000 acpipagr (deferred)
fffff802`3a510000 fffff802`3a51c000 acpitime (deferred)
fffff802`3a520000 fffff802`3a52e000 UEFI (deferred)
fffff802`3a530000 fffff802`3a541000 nvvad64v (deferred)
fffff802`3a550000 fffff802`3a55f000 ksthunk (deferred)
fffff802`3a560000 fffff802`3a56d000 NvModuleTracker (deferred)
fffff802`3a570000 fffff802`3a580000 nvvhci (deferred)
fffff802`3a590000 fffff802`3a59d000 NdisVirtualBus (deferred)
fffff802`3a5a0000 fffff802`3a5ac000 swenum (deferred)
fffff802`3a5b0000 fffff802`3a5be000 rdpbus (deferred)
fffff802`3a5c0000 fffff802`3a663000 UsbHub3 (deferred)
fffff802`3a670000 fffff802`3a67e000 USBD (deferred)
fffff802`3a680000 fffff802`3a68b000 iocbios2 (deferred)
fffff802`3a690000 fffff802`3a6c8000 nvhda64v (deferred)
fffff802`3a6d0000 fffff802`3ad44000 RTKVHD64 (deferred)
fffff802`3ad50000 fffff802`3ad71000 BTHUSB (deferred)
fffff802`3ad80000 fffff802`3aeff000 BTHport (deferred)
fffff802`3af00000 fffff802`3af33000 usbccgp (deferred)
fffff802`3af40000 fffff802`3af52000 hidusb (deferred)
fffff802`3af60000 fffff802`3af9f000 HIDCLASS (deferred)
fffff802`3afa0000 fffff802`3afb3000 HIDPARSE (deferred)
fffff802`3afc0000 fffff802`3afd1000 kbdhid (deferred)
fffff802`3afe0000 fffff802`3aff4000 kbdclass (deferred)
fffff802`3b010000 fffff802`3b01e000 dump_diskdump (deferred)
fffff802`3b040000 fffff802`3b05d000 dump_dumpfve (deferred)
fffff802`3b060000 fffff802`3b141000 dxgmms2 (deferred)
fffff802`3b150000 fffff802`3b16b000 monitor (deferred)
fffff802`3b1a0000 fffff802`3b1d6000 wcifs (deferred)
fffff802`3b1e0000 fffff802`3b260000 cldflt (deferred)
fffff802`3b270000 fffff802`3b28a000 storqosflt (deferred)
fffff802`3b290000 fffff802`3b2b7000 bindflt (deferred)
fffff802`3b2c0000 fffff802`3b2d8000 mslldp (deferred)
fffff802`3b2e0000 fffff802`3b2f8000 lltdio (deferred)
fffff802`3b300000 fffff802`3b31b000 rspndr (deferred)
fffff802`3b320000 fffff802`3b33d000 wanarp (deferred)
fffff802`3b340000 fffff802`3b396000 msquic (deferred)
fffff802`3b3c0000 fffff802`3b46e000 UcmCxUcsiNvppc (deferred)
fffff802`3b470000 fffff802`3b49c000 UcmCx (deferred)
fffff802`3b4a0000 fffff802`3b4ec000 TeeDriverW10x64 (deferred)
fffff802`3b4f0000 fffff802`3b511000 i8042prt (deferred)
fffff802`3b520000 fffff802`3b533000 mouclass (deferred)
fffff802`3b540000 fffff802`3b55c000 serial (deferred)
fffff802`3b560000 fffff802`3b56f000 serenum (deferred)
fffff802`3b570000 fffff802`3b57c000 ICCWDT (deferred)
fffff802`3b580000 fffff802`3b58f000 Smb_driver_Intel (deferred)
fffff802`3c400000 fffff802`3c476000 ks (deferred)
fffff802`3c480000 fffff802`3c518000 USBXHCI (deferred)
fffff802`3c550000 fffff802`3e4be000 nvlddmkm (deferred)
fffff802`3e4c0000 fffff802`3e4e5000 HDAudBus (deferred)
fffff802`3e4f0000 fffff802`3e556000 portcls (deferred)
fffff802`3e560000 fffff802`3e581000 drmk (deferred)
fffff802`3e590000 fffff802`3e5d4000 ucx01000 (deferred)
Unloaded modules:
fffff802`1f5a0000 fffff802`1f5a8000 NTIOLib_X64.
fffff802`1f5b0000 fffff802`1f5b8000 amifldrv64.s
fffff802`1f590000 fffff802`1f598000 NTIOLib_X64.
fffff802`1f580000 fffff802`1f588000 NTIOLib_X64.
fffff802`1f570000 fffff802`1f578000 NTIOLib_X64.
fffff802`1f560000 fffff802`1f568000 NTIOLib_X64.
fffff802`1f5c0000 fffff802`1f5c8000 NTIOLib_X64.
fffff802`7f510000 fffff802`7f518000 NTIOLib_X64.
fffff802`1f880000 fffff802`1f88f000 hiber_storpo
fffff802`7e900000 fffff802`7f4e6000 hiber_iaStor
fffff802`7f4f0000 fffff802`7f50e000 hiber_dumpfv
fffff802`1f560000 fffff802`1f86e000 BEDaisy.sys
fffff802`1f200000 fffff802`1f553000 navagio.sys
fffff802`1de20000 fffff802`1de28000 amifldrv64.s
fffff802`1dd10000 fffff802`1dd18000 NTIOLib_X64.
fffff802`3b170000 fffff802`3b19a000 luafv.sys
fffff802`37230000 fffff802`3723f000 dump_storpor
fffff802`39680000 fffff802`3a266000 dump_iaStorA
fffff802`3a290000 fffff802`3a2ae000 dump_dumpfve
fffff802`384c0000 fffff802`384dc000 dam.sys
fffff802`23250000 fffff802`23261000 WdBoot.sys
fffff802`24e90000 fffff802`24ea1000 hwpolicy.sys
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff9d83005f7280, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff9d83005f71d8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
TRAP_FRAME: ffff9d83005f7280 -- (.trap 0xffff9d83005f7280)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffd3044767c680 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8051e4c98cd rsp=ffff9d83005f7410 rbp=ffffd304478e8440
r8=0000000000000001 r9=0000000000000002 r10=ffffd304402eef00
r11=fffff8051b939180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!KiExitDispatcher+0x1ad:
fffff805`1e4c98cd cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff9d83005f71d8 -- (.exr 0xffff9d83005f71d8)
ExceptionAddress: fffff8051e4c98cd (nt!KiExitDispatcher+0x00000000000001ad)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre
EXCEPTION_STR: 0x0
LAST_CONTROL_TRANSFER: from fffff8051e605e69 to fffff8051e5f3ea0
STACK_TEXT:
ffff9d83`005f6f58 fffff805`1e605e69 : 00000000`00000139 00000000`00000003 ffff9d83`005f7280 ffff9d83`005f71d8 : nt!KeBugCheckEx
ffff9d83`005f6f60 fffff805`1e606290 : 00000000`0000003f 00000000`00000000 ffff9280`00000000 ffff92c9`74c11038 : nt!KiBugCheckDispatch+0x69
ffff9d83`005f70a0 fffff805`1e604623 : 00000000`0000003f 00000000`00000000 00000000`00000000 55555555`55555555 : nt!KiFastFailDispatch+0xd0
ffff9d83`005f7280 fffff805`1e4c98cd : 00000000`00000000 ffff9d83`005f74c1 ffffd304`4c1a4000 fffff805`1e4e3313 : nt!KiRaiseSecurityCheckFailure+0x323
ffff9d83`005f7410 fffff805`1e40c191 : fffff805`1b939180 00000000`00000000 fffff805`1b939101 fffff805`1ebb2094 : nt!KiExitDispatcher+0x1ad
ffff9d83`005f7480 fffff805`39fe42f2 : 00000000`00000200 ffffd304`4f0240a8 ffffe301`3efd65a0 00000000`00000002 : nt!KeInsertQueueApc+0x151
ffff9d83`005f7520 00000000`00000200 : ffffd304`4f0240a8 ffffe301`3efd65a0 00000000`00000002 00000000`00000000 : BEDaisy+0x3042f2
ffff9d83`005f7528 ffffd304`4f0240a8 : ffffe301`3efd65a0 00000000`00000002 00000000`00000000 00000000`00000000 : 0x200
ffff9d83`005f7530 ffffe301`3efd65a0 : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffd304`4f0240a8
ffff9d83`005f7538 00000000`00000002 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffe301`3efd65a0
ffff9d83`005f7540 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffd000`e945ea00 : 0x2
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff8051e5963af-fffff8051e5963b1 3 bytes - nt!MiFreeUltraMapping+33
[ 7d fb f6:64 c9 92 ]
3 errors : !nt (fffff8051e5963af-fffff8051e5963b1)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
BUCKET_ID: MEMORY_CORRUPTION_LARGE
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_large
FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
Followup: memory_corruption
---------
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff850b57f12280, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff850b57f121d8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
TRAP_FRAME: ffff850b57f12280 -- (.trap 0xffff850b57f12280)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9f031eb96a30 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8002cac98cd rsp=ffff850b57f12410 rbp=ffff9f031ee80440
r8=0000000000000001 r9=0000000000000002 r10=ffff9f031c8ef500
r11=ffffb20180a00180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!KiExitDispatcher+0x1ad:
fffff800`2cac98cd cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff850b57f121d8 -- (.exr 0xffff850b57f121d8)
ExceptionAddress: fffff8002cac98cd (nt!KiExitDispatcher+0x00000000000001ad)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre
EXCEPTION_STR: 0x0
LAST_CONTROL_TRANSFER: from fffff8002cc05e69 to fffff8002cbf3ea0
STACK_TEXT:
ffff850b`57f11f58 fffff800`2cc05e69 : 00000000`00000139 00000000`00000003 ffff850b`57f12280 ffff850b`57f121d8 : nt!KeBugCheckEx
ffff850b`57f11f60 fffff800`2cc06290 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff850b`57f120a0 fffff800`2cc04623 : 00000000`0000003f 00000000`00000000 00000000`00000000 55555555`55555555 : nt!KiFastFailDispatch+0xd0
ffff850b`57f12280 fffff800`2cac98cd : 00000000`00000000 ffff850b`57f124c1 ffff9f03`2a52f500 fffff800`2cae3313 : nt!KiRaiseSecurityCheckFailure+0x323
ffff850b`57f12410 fffff800`2ca0c191 : ffffb201`80a00180 00000000`00000000 ffffb201`80a00101 fffff800`2d1b2094 : nt!KiExitDispatcher+0x1ad
ffff850b`57f12480 fffff800`88be42f2 : 00000000`00000200 ffff9f03`29ad7738 ffff8d89`4d89f5a0 00000000`00000002 : nt!KeInsertQueueApc+0x151
ffff850b`57f12520 00000000`00000200 : ffff9f03`29ad7738 ffff8d89`4d89f5a0 00000000`00000002 00000000`00000000 : BEDaisy+0x3042f2
ffff850b`57f12528 ffff9f03`29ad7738 : ffff8d89`4d89f5a0 00000000`00000002 00000000`00000000 00000000`00000000 : 0x200
ffff850b`57f12530 ffff8d89`4d89f5a0 : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffff9f03`29ad7738
ffff850b`57f12538 00000000`00000002 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffff8d89`4d89f5a0
ffff850b`57f12540 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffcd2e`92746100 : 0x2
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !srv2
fffff8002904a522-fffff8002904a523 2 bytes - srv2!RfspThreadPoolNodeWorkerRun+122
[ 48 ff:4c 8b ]
fffff8002904a529-fffff8002904a52d 5 bytes - srv2!RfspThreadPoolNodeWorkerRun+129 (+0x07)
[ 0f 1f 44 00 00:e8 b2 39 9c 03 ]
fffff8002904a54e-fffff8002904a54f 2 bytes - srv2!RfspThreadPoolNodeWorkerRun+14e (+0x25)
[ 48 ff:4c 8b ]
fffff8002904a555-fffff8002904a559 5 bytes - srv2!RfspThreadPoolNodeWorkerRun+155 (+0x07)
[ 0f 1f 44 00 00:e8 26 39 9c 03 ]
fffff8002904a56e-fffff8002904a56f 2 bytes - srv2!RfspThreadPoolNodeWorkerRun+16e (+0x19)
[ 48 ff:4c 8b ]
fffff8002904a575-fffff8002904a579 5 bytes - srv2!RfspThreadPoolNodeWorkerRun+175 (+0x07)
[ 0f 1f 44 00 00:e8 86 86 9f 03 ]
fffff8002904a582-fffff8002904a583 2 bytes - srv2!RfspThreadPoolNodeWorkerRun+182 (+0x0d)
[ 48 ff:4c 8b ]
fffff8002904a589-fffff8002904a58d 5 bytes - srv2!RfspThreadPoolNodeWorkerRun+189 (+0x07)
[ 0f 1f 44 00 00:e8 82 7a 16 04 ]
fffff8002904a60b-fffff8002904a60c 2 bytes - srv2!RfspThreadPoolNodeCreate+2b (+0x82)
[ 48 ff:4c 8b ]
30 errors : !srv2 (fffff8002904a522-fffff8002904a60c)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
BUCKET_ID: MEMORY_CORRUPTION_LARGE
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_large
FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
Followup: memory_corruption
---------
