UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 82b6e400
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
Unable to load image \SystemRoot\system32\drivers\wd\WdFilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for WdFilter.sys
*** WARNING: Unable to verify timestamp for BEDaisy.sys
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
ReadVirtual: 80ce7288 not properly sign extended
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 3
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-VFOM7MS
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 42
Key : Analysis.Memory.CommitPeak.Mb
Value: 82
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: 7f
BUGCHECK_P1: 8
BUGCHECK_P2: ffffffff82b6e400
BUGCHECK_P3: 0
BUGCHECK_P4: 0
STACK_OVERFLOW: Stack Limit: dc659000. Use (kF) and (!stackusage) to investigate stack usage.
STACKUSAGE_FUNCTION: The function at address 0xffffffffbe00a66a was blamed for the stack overflow. It is using 5752 bytes of stack.
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
dc659014 82991771 00000f3a 00000000 540be400 hal!RtlULongLongMult+0x5b
dc659074 829915ea 02ab3cf3 00000f3a 00000001 hal!HalpSetTimer+0x161
dc659098 8227a2eb 00000001 0000c350 00000000 hal!HalpTimerClockArm+0x56
dc659100 8227a26c 0000000a 0000000a c2449b00 nt!KiSetClockTickRate+0x4f
dc659120 8227a16a 82b6935c 82b67120 dc6591b0 nt!KiSetClockIntervalToMinimumRequested+0x7c
dc659130 82321b3d c22d53e5 0000000a c22ca023 nt!KiSetClockIntervalOneShot+0x1e
dc6591b0 823213d8 00000002 82b67120 0004832f nt!KiCheckForTimerExpiration+0x40d
dc6591d0 8231f07f 0004832f 00000002 167d4a00 nt!KeAccumulateTicks+0x18
dc6591f8 8231d0f5 82990fe0 00000021 00000000 nt!KiUpdateRunTime+0x3f
dc659244 8231d5fa 85794068 85794000 00000000 nt!KiUpdateTime+0x1e5
dc6592c0 82991dd2 85794068 85794000 00000000 nt!KeClockInterruptNotify+0x16a
dc6592d8 8225eab9 85794000 00000000 85794000 hal!HalpTimerClockIpiRoutine+0x18
dc659318 8239a05b dc6593bc 82393b94 00000002 nt!KiCallInterruptServiceRoutine+0x239
dc659320 82393b94 00000002 000000d2 00000000 nt!KiInterruptDispatchNoLockNoEtwNoStack+0x2b
dc659320 822f2be9 00000002 000000d2 00000000 nt!KiUnexpectedInterruptTail+0x38d
dc659478 822f2964 0004832f 00000000 82b67120 nt!KiTransitionSchedulingGroupGeneration+0xf9
dc659498 822f233f 0004832f 00000000 82b67120 nt!KiGroupSchedulingGenerationEnd+0x3c
dc6594d8 822f1e0c 85794100 dc659560 dc65964c nt!KiGroupSchedulingQuantumEnd+0xa1
dc65956c 8239a247 857940d0 8298eff3 dc659600 nt!KiQuantumEnd+0x19c
dc659574 8298eff3 dc659600 00000100 00000001 nt!KiDispatchInterrupt+0x167
dc65958c 829a1e01 dc65964c 86e207c0 dc65964c hal!HalpDispatchSoftwareInterrupt+0x43
dc65959c 8298edf8 00000001 dc65964c 82393c20 hal!HalpInterruptCheckForSoftwareInterrupt+0x28
dc6595a8 82393c20 857940d0 dc65964c 001e3d00 hal!HalEndSystemInterrupt+0x78
dc6595a8 822d5aa4 857940d0 dc65964c 001e3d00 nt!KiUnexpectedInterruptTail+0x419
dc659850 822d5832 00000000 dc65986e dc659a98 nt!MmCheckCachedPageStates+0x1c4
dc659884 825dcf41 00000001 c348e000 be94742b nt!CcMapAndRead+0xc2
dc6598c8 8362302e 8e936768 dc659904 00000400 nt!CcMapData+0x91
dc6598fc 836344f0 12a4e000 00000000 00000400 Ntfs!NtfsMapStream+0x60
dc6599d0 836342d7 88192820 88192820 88192820 Ntfs!NtfsReadMftRecord+0x100
dc659a58 83633d93 88192818 88192820 00000000 Ntfs!NtfsReadFileRecord+0xa7
dc659aa8 836370ad 88192820 00000030 00000000 Ntfs!NtfsLookupInFileRecord+0x63
dc659b3c 83623fe0 99b55134 88192818 dc659b60 Ntfs!NtfsReadUsnWorker+0x53
dc659bd8 83623265 00000000 99b55134 be67d008 Ntfs!NtfsReadFileUsnData+0x13a
dc659c08 83622712 99b55134 be67d008 00000000 Ntfs!NtfsUserFsRequest+0xb9
dc659c7c 8362314e f34a2961 be67d008 8c3d8018 Ntfs!NtfsCommonFileSystemControl+0x48
dc659ce0 8229a328 8c3d8018 be67d008 b8b68c98 Ntfs!NtfsFsdFileSystemControl+0x10e
dc659cf8 82c04fb9 99682e28 b8b68c98 82c000c8 nt!IofCallDriver+0x48
dc659d34 82c02309 00000000 b8b68d2c b8b68d2c FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x279
dc659d98 82c21620 b8b68d2c ef3f69e1 ffffffff FLTMGR!FltPerformSynchronousIo+0x299
dc659df0 82c21563 00000003 ffffe400 000900eb FLTMGR!IssueControlOperation+0xb8
dc659e18 835647e5 8eb23518 99682e28 000900eb FLTMGR!FltFsControlFile+0x25
WARNING: Stack unwind information not available. Following frames may be wrong.
dc659e5c 83564c54 00800070 00000000 d9d59d54 WdFilter+0x1c7e5
dc659eb4 8355cb47 dc65a068 00000003 00000000 WdFilter+0x1cc54
dc659fc4 8355d98d bb7da7b0 86569808 dc659ff0 WdFilter+0x14b47
dc65a000 82c049f2 d9d59d54 dc65a068 bb7da7b0 WdFilter+0x1598d
dc65a080 82c0439c d490ed48 d9d59cc0 d490ed48 FLTMGR!FltpPerformPostCallbacksWorker+0x2e2
dc65a0a8 82c0503d d9d59cc0 00000000 8c386d68 FLTMGR!FltpPassThroughCompletionWorker+0xbc
dc65a0ec 82c22e62 00000000 ddc6bc98 8c386d68 FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2fd
dc65a148 8229a328 8c386d68 d490ed48 d490ef68 FLTMGR!FltpCreate+0x362
dc65a164 8229a3ff ddc6bc98 d490ed48 dc65a18c nt!IofCallDriver+0x48
dc65a18c 825c228e be944edf 8c3c1528 825c1d60 nt!IoCallDriverWithTracing+0x2f
dc65a23c 825c9afa 8c3c1540 04791d70 cf08ac98 nt!IopParseDevice+0x52e
dc65a344 825c91d7 00000200 85791d70 87001100 nt!ObpLookupObjectName+0x39a
dc65a3e0 825e677b dc65bb94 85791d70 87001100 nt!ObOpenObjectByNameEx+0x1c7
dc65a468 825e6440 dc65bb94 dc65a620 00000000 nt!IopCreateFile+0x32b
dc65a4a8 8239268b dc65a650 80000000 dc65bb94 nt!NtOpenFile+0x30
dc65a4a8 8237f9e1 dc65a650 80000000 dc65bb94 nt!KiSystemServicePostCall
dc65a538 be00a66a dc65a650 80000000 dc65bb94 nt!ZwOpenFile+0x11
dc65bbb0 826464a1 b3fff730 8e943000 8e943000 BEDaisy+0xa66a
dc65bbd8 82643988 da4e3ca8 00000000 00000000 nt!PnpCallDriverEntry+0x31
dc65bcc0 8264096b 00000000 dc65bce4 85740610 nt!IopLoadDriver+0x480
dc65bce8 82311e78 da4e3ca8 00000000 86e207c0 nt!IopLoadUnloadDriver+0x4d
dc65bd38 822ef9ba 85740610 be945193 00000000 nt!ExpWorkerThread+0xf8
dc65bd70 8239aa3d 82311d80 85740610 00000000 nt!PspSystemThreadStartup+0x4a
dc65bd7c 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x15
SYMBOL_NAME: BEDaisy+a66a
MODULE_NAME: BEDaisy
IMAGE_NAME: BEDaisy.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: a66a
FAILURE_BUCKET_ID: 0x7f_8_STACK_USAGE_BEDaisy!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x86
OSNAME: Windows 10
FAILURE_ID_HASH: {e7e6e20d-61d9-e646-e80d-6ce996a3e106}
Followup: MachineOwner
---------
ReadVirtual: 80ce7288 not properly sign extended
