2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff950b3e2a7060, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffff950b3e2a6fb8, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 3077
Key : Analysis.Elapsed.mSec
Value: 4335
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 389
Key : Analysis.Init.Elapsed.mSec
Value: 6451
Key : Analysis.Memory.CommitPeak.Mb
Value: 93
Key : Bugcheck.Code.LegacyAPI
Value: 0x139
Key : Dump.Attributes.AsUlong
Value: 8
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY
Key : FailFast.Type
Value: 3
Key : Failure.Bucket
Value: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
Key : Failure.Hash
Value: {3aede96a-54dd-40d6-d4cb-2a161a843851}
BUGCHECK_CODE: 139
BUGCHECK_P1: 3
BUGCHECK_P2: ffff950b3e2a7060
BUGCHECK_P3: ffff950b3e2a6fb8
BUGCHECK_P4: 0
FILE_IN_CAB: 062323-12812-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
TRAP_FRAME: ffff950b3e2a7060 -- (.trap 0xffff950b3e2a7060)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffad8ab041c958 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80667add28f rsp=ffff950b3e2a71f0 rbp=ffff950b3e2a72b9
r8=0000000000000000 r9=0000000000000000 r10=ffff9d809d501180
r11=ffff950b3e2a73b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz ac po cy
nt!KeWaitForMultipleObjects+0x43f:
fffff806`67add28f cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff950b3e2a6fb8 -- (.exr 0xffff950b3e2a6fb8)
ExceptionAddress: fffff80667add28f (nt!KeWaitForMultipleObjects+0x000000000000043f)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: nvcontainer.ex
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
ffff950b`3e2a6d38 fffff806`67c10029 : 00000000`00000139 00000000`00000003 ffff950b`3e2a7060 ffff950b`3e2a6fb8 : nt!KeBugCheckEx
ffff950b`3e2a6d40 fffff806`67c10590 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff950b`3e2a6e80 fffff806`67c0e55d : ffff9d80`9d501100 ffffb0ef`a33c37b7 00000000`00000001 ffffad8a`b07541c0 : nt!KiFastFailDispatch+0xd0
ffff950b`3e2a7060 fffff806`67add28f : 00000000`0000007e 00000000`00000000 00000000`00000001 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x31d
ffff950b`3e2a71f0 fffff806`67e88a20 : ffff950b`3e2a75b0 00000000`00000001 ffffad8a`b041c920 ffff9d80`9d980180 : nt!KeWaitForMultipleObjects+0x43f
ffff950b`3e2a7300 fffff806`67e886f9 : 00000000`00000000 00000000`00000000 ffff950b`3e2a7848 00000000`00000000 : nt!ObWaitForMultipleObjects+0x2f0
ffff950b`3e2a7800 fffff806`67c0f7f8 : ffff950b`3e2a7b18 00000000`00000000 ffffad8a`b07540c0 ffffad8a`b163a750 : nt!NtWaitForMultipleObjects+0x119
ffff950b`3e2a7a90 00007fff`22b4dc04 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000b1`d10ff538 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`22b4dc04
SYMBOL_NAME: nt!KiFastFailDispatch+d0
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.3086
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
VIDEO_TDR_FAILURE (116)
Attempt to reset the display driver and recover from timeout failed.
Arguments:
Arg1: ffffc2063dd06010, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
Arg2: fffff8038911ad40, The pointer into responsible device driver module (e.g. owner tag).
Arg3: ffffffffc000009a, Optional error code (NTSTATUS) of the last failed operation.
Arg4: 0000000000000004, Optional internal context dependent data.
Debugging Details:
------------------
Unable to load image nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 3093
Key : Analysis.Elapsed.mSec
Value: 3948
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 437
Key : Analysis.Init.Elapsed.mSec
Value: 14603
Key : Analysis.Memory.CommitPeak.Mb
Value: 102
Key : Bugcheck.Code.LegacyAPI
Value: 0x116
Key : Dump.Attributes.AsUlong
Value: 8
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Failure.Bucket
Value: 0x116_IMAGE_nvlddmkm.sys
Key : Failure.Hash
Value: {c89bfe8c-ed39-f658-ef27-f2898997fdbd}
BUGCHECK_CODE: 116
BUGCHECK_P1: ffffc2063dd06010
BUGCHECK_P2: fffff8038911ad40
BUGCHECK_P3: ffffffffc000009a
BUGCHECK_P4: 4
FILE_IN_CAB: 061723-12906-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
VIDEO_TDR_CONTEXT: dt dxgkrnl!_TDR_RECOVERY_CONTEXT ffffc2063dd06010
Symbol dxgkrnl!_TDR_RECOVERY_CONTEXT not found.
PROCESS_OBJECT: 0000000000000004
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
fffffd8d`aa3cda18 fffff803`7b9565be : 00000000`00000116 ffffc206`3dd06010 fffff803`8911ad40 ffffffff`c000009a : nt!KeBugCheckEx
fffffd8d`aa3cda20 fffff803`7b906b64 : fffff803`8911ad40 ffffc206`4239a6a0 00000000`00002000 ffffc206`4239a760 : dxgkrnl!TdrBugcheckOnTimeout+0xfe
fffffd8d`aa3cda60 fffff803`7b8ff69c : ffffc206`425ea000 00000000`01000000 00000000`00000004 00000000`00000004 : dxgkrnl!ADAPTER_RENDER::Reset+0x174
fffffd8d`aa3cda90 fffff803`7b955ce5 : 00000000`00000100 ffffc206`425eaa70 00000000`00000000 ffffe79f`43a4d916 : dxgkrnl!DXGADAPTER::Reset+0x4dc
fffffd8d`aa3cdb10 fffff803`7b955e57 : fffff803`6b925440 ffffc206`3df65010 00000000`00000000 00000000`00000500 : dxgkrnl!TdrResetFromTimeout+0x15
fffffd8d`aa3cdb40 fffff803`6ae8e5c5 : ffffc206`4b6a4040 fffff803`7b955e30 ffffc206`34ca5c80 00000000`00000000 : dxgkrnl!TdrResetFromTimeoutWorkItem+0x27
fffffd8d`aa3cdb70 fffff803`6af268f5 : ffffc206`4b6a4040 00000000`00000080 ffffc206`34c910c0 00000000`00000000 : nt!ExpWorkerThread+0x105
fffffd8d`aa3cdc10 fffff803`6b004c68 : ffffd281`b3d01180 ffffc206`4b6a4040 fffff803`6af268a0 00000000`00000000 : nt!PspSystemThreadStartup+0x55
fffffd8d`aa3cdc60 00000000`00000000 : fffffd8d`aa3ce000 fffffd8d`aa3c8000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
SYMBOL_NAME: nvlddmkm+108ad40
MODULE_NAME: nvlddmkm
IMAGE_NAME: nvlddmkm.sys
STACK_COMMAND: .cxr; .ecxr ; kb
FAILURE_BUCKET_ID: 0x116_IMAGE_nvlddmkm.sys
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {c89bfe8c-ed39-f658-ef27-f2898997fdbd}
Followup: MachineOwner
---------