0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the BugCheck
Arg2: fffff8056e81b70c, Address of the instruction which caused the BugCheck
Arg3: fffff90ec22bbde0, Address of the context record for the exception that caused the BugCheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2593
Key : Analysis.Elapsed.mSec
Value: 3565
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 390
Key : Analysis.Init.Elapsed.mSec
Value: 1408
Key : Analysis.Memory.CommitPeak.Mb
Value: 89
Key : Bugcheck.Code.LegacyAPI
Value: 0x3b
Key : Failure.Bucket
Value: IP_MISALIGNED_AuthenticAMD.sys
Key : Failure.Hash
Value: {716d112a-8330-4bbb-160c-ec98297019d2}
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 3b
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff8056e81b70c
BUGCHECK_P3: fffff90ec22bbde0
BUGCHECK_P4: 0
FILE_IN_CAB: 022324-6015-01.dmp
CONTEXT: fffff90ec22bbde0 -- (.cxr 0xfffff90ec22bbde0)
rax=0000000000000048 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000040 rsi=0000000000000001 rdi=0000000000000000
rip=fffff8056e81b70c rsp=fffff90ec22bc7e0 rbp=0000000000000040
r8=0000000074416553 r9=0000000000000000 r10=0000000074416553
r11=0000000000001001 r12=ffffb18196f18118 r13=ffffb18197726a90
r14=0000000074416553 r15=0000000000000001
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050206
nt!AuthzBasepDuplicateSecurityAttributes+0x6c:
fffff805`6e81b70c 0000 add byte ptr [rax],al ds:002b:00000000`00000048=??
Resetting default scope
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: svchost.exe
MISALIGNED_IP:
nt!AuthzBasepDuplicateSecurityAttributes+6c
fffff805`6e81b70c 0000 add byte ptr [rax],al
STACK_TEXT:
fffff90e`c22bc7e0 fffff805`6e81b98e : 00000000`00000000 00000000`00000000 ffffb181`972ef858 ffffb181`972ef810 : nt!AuthzBasepDuplicateSecurityAttributes+0x6c
fffff90e`c22bc830 fffff805`6e81b789 : 00000000`00000000 00000000`00000000 ffffb181`978c2cd0 ffff8c0c`00000000 : nt!AuthzBasepAllocateSecurityAttribute+0x7e
fffff90e`c22bc860 fffff805`6ec1f8a1 : ffffb181`9768e830 00000000`00000000 ffffb181`97b4a000 ffffb181`97b4a060 : nt!AuthzBasepDuplicateSecurityAttributes+0xe9
fffff90e`c22bc8b0 fffff805`6ec1d904 : fffff90e`c22bcb80 fffff90e`c22bca30 fffff90e`c22bcb00 00000008`0000072c : nt!SepDuplicateToken+0x541
fffff90e`c22bc9a0 fffff805`6ec1d4c1 : ffff8c0c`2df26080 0000018a`00000008 0000018a`4408b401 00000000`00000002 : nt!NtOpenThreadTokenEx+0x434
fffff90e`c22bcac0 fffff805`6ea11138 : ffff8c0c`2df26080 ffff8c0c`2e074a80 0000018a`44055f00 ffff8c0c`00000210 : nt!NtOpenThreadToken+0x11
fffff90e`c22bcb00 00007ffe`0ff8d464 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000008`04ffe788 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`0ff8d464
SYMBOL_NAME: nt!AuthzBasepDuplicateSecurityAttributes+6c
IMAGE_VERSION: 10.0.19041.4046
STACK_COMMAND: .cxr 0xfffff90ec22bbde0 ; kb
MODULE_NAME: AuthenticAMD
IMAGE_NAME: AuthenticAMD.sys
FAILURE_BUCKET_ID: IP_MISALIGNED_AuthenticAMD.sys
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {716d112a-8330-4bbb-160c-ec98297019d2}
Followup: MachineOwner
---------