Share via

Constant crashes Win 11

Anonymous
2023-05-11T04:27:05+00:00

Hi all,

My Windows has been crashing nonstop for the past couple of months.

Here are the most recent minidumps: https://drive.google.com/drive/folders/1BoKV-P4-sll0dGSdbng8xqZU0iFWeHxg?usp=sharing

The bugcheck is always different, but here is the latest one:

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff8067515aba0, Address of the trap frame for the exception that caused the BugCheck
Arg3: fffff8067515aaf8, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1203

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 1778

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 108

    Key  : Analysis.Init.Elapsed.mSec
    Value: 4197

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 109

    Key  : Bugcheck.Code.DumpHeader
    Value: 0x139

    Key  : Bugcheck.Code.Register
    Value: 0x139

    Key  : Dump.Attributes.AsUlong
    Value: 1008

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : FailFast.Name
    Value: CORRUPT_LIST_ENTRY

    Key  : FailFast.Type
    Value: 3

FILE_IN_CAB:  051023-7562-01.dmp

DUMP_FILE_ATTRIBUTES: 0x1008
  Kernel Generated Triage Dump

BUGCHECK_CODE:  139

BUGCHECK_P1: 3

BUGCHECK_P2: fffff8067515aba0

BUGCHECK_P3: fffff8067515aaf8

BUGCHECK_P4: 0

TRAP_FRAME:  fffff8067515aba0 -- (.trap 0xfffff8067515aba0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8067515ade0 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000002 rsi=0000000000000000 rdi=0000000000000000
rip=fffff806983acb1c rsp=fffff8067515ad30 rbp=0000000000000004
 r8=01d983b58d870e94  r9=0000000000000000 r10=fffff80671035510
r11=fffff8067515ad00 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe cy
HIDCLASS!HidpDistributeInterruptReport+0x3dc:
fffff806`983acb1c cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  fffff8067515aaf8 -- (.exr 0xfffff8067515aaf8)
ExceptionAddress: fffff806983acb1c (HIDCLASS!HidpDistributeInterruptReport+0x00000000000003dc)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY 

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000003

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
fffff806`7515a878 fffff806`7123e9a9     : 00000000`00000139 00000000`00000003 fffff806`7515aba0 fffff806`7515aaf8 : nt!KeBugCheckEx
fffff806`7515a880 fffff806`7123ef32     : ffffe506`fffffffe 00000000`00000001 ffffffff`7cffffff 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff806`7515a9c0 fffff806`7123cd06     : ffffe506`00000808 ffffe506`76a836a0 fffff806`43646948 ffffe506`7fa19120 : nt!KiFastFailDispatch+0xb2
fffff806`7515aba0 fffff806`983acb1c     : ffffe506`6dda76d0 00000000`00000002 00000000`00000003 00000000`00000040 : nt!KiRaiseSecurityCheckFailure+0x346
fffff806`7515ad30 fffff806`983ac14d     : ffffe506`76be21d0 ffffe506`76be2102 ffffe506`76be21d0 00000000`00000040 : HIDCLASS!HidpDistributeInterruptReport+0x3dc
fffff806`7515ae30 fffff806`710d5754     : 00000000`00000000 ffffe506`76c118c0 fffff806`7515af01 ffffe506`76c11d01 : HIDCLASS!HidpInterruptReadComplete+0x44d
fffff806`7515aee0 fffff806`710d5587     : ffffe506`76c118c0 00000000`00000000 ffffe506`76bde9f0 00000000`00000004 : nt!IopfCompleteRequest+0x1b4
fffff806`7515afd0 fffff806`755d3cc6     : 00000000`00000002 00000000`00000000 00000000`00000000 fffff806`75612e7d : nt!IofCompleteRequest+0x17
fffff806`7515b000 fffff806`755d2031     : ffffe506`76c118c0 00000000`00000001 ffffe506`6d9c9ad0 ffffe506`83b93020 : Wdf01000!FxRequest::CompleteInternal+0x246 [minkernel\wdf\framework\shared\core\fxrequest.cpp @ 869] 
fffff806`7515b090 fffff806`755d1fbf     : 00000000`00000000 ffffe506`76bdedd0 ffffe506`83b931c0 fffff806`7515b1a8 : Wdf01000!FxRequest::Complete+0x4d [minkernel\wdf\framework\shared\inc\private\common\FxRequest.hpp @ 806] 
fffff806`7515b0f0 fffff806`85953060     : ffffe506`83b93020 00000000`ffffffff 00000000`00000004 fffff806`7515b1c0 : Wdf01000!imp_WdfRequestComplete+0x3f [minkernel\wdf\framework\shared\core\fxrequestapi.cpp @ 437] 
fffff806`7515b120 fffff806`859517c7     : ffffe506`83b931c0 00000000`00000040 ffffe506`83b93250 fffff806`7515b338 : USBXHCI!Bulk_Transfer_CompleteCancelable+0xc8
fffff806`7515b180 fffff806`85951350     : 00000000`00000004 fffff806`7515b2f0 00000000`00000000 ffffe506`76bc9a20 : USBXHCI!Bulk_ProcessTransferEventWithED1+0x463
fffff806`7515b230 fffff806`85949b88     : 00000000`00000004 fffff806`7515b308 00000000`00000008 fffff806`7515b310 : USBXHCI!Bulk_EP_TransferEventHandler+0x10
fffff806`7515b260 fffff806`859491f8     : ffffe506`6dd2ce40 ffffe506`6dcb8300 ffffe506`6dd7fea0 ffffe506`6dd2ce40 : USBXHCI!Endpoint_TransferEventHandler+0x108
fffff806`7515b2c0 fffff806`85948aac     : fffff806`71192280 fffff806`7515b3e8 ffffe506`6dd2cc40 fffff806`9857814b : USBXHCI!Interrupter_DeferredWorkProcessor+0x738
fffff806`7515b3c0 fffff806`755d6d2d     : ffffe506`67ef9430 fffff806`9e543c4b 00000000`00000010 ffffe506`67ef9000 : USBXHCI!Interrupter_WdfEvtInterruptDpc+0xc
fffff806`7515b3f0 fffff806`755d6cd5     : 00000000`00000510 fffff806`9e543cd0 ffffe506`6dd2cc40 fffff806`7515b4e0 : Wdf01000!FxInterrupt::DpcHandler+0x49 [minkernel\wdf\framework\shared\irphandlers\pnp\km\interruptobjectkm.cpp @ 75] 
fffff806`7515b420 fffff806`7102a1da     : 00000000`00000000 ffffe506`679cf000 ffffe506`76f37010 00000000`00000002 : Wdf01000!FxInterrupt::_InterruptDpcThunk+0x35 [minkernel\wdf\framework\shared\irphandlers\pnp\km\interruptobjectkm.cpp @ 410] 
fffff806`7515b460 fffff806`710299e4     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExecuteAllDpcs+0x54a
fffff806`7515b9b0 fffff806`7122e19e     : 00000000`00000000 fffff806`6e1b7180 fffff806`71b4c6c0 ffffe506`6d070040 : nt!KiRetireDpcList+0xfe4
fffff806`7515bc40 00000000`00000000     : fffff806`7515c000 fffff806`75156000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x9e

SYMBOL_NAME:  HIDCLASS!HidpDistributeInterruptReport+3dc

MODULE_NAME: HIDCLASS

IMAGE_NAME:  HIDCLASS.SYS

IMAGE_VERSION:  10.0.22621.1774

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  3dc

FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_HIDCLASS!HidpDistributeInterruptReport

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {bb453199-d75e-af6d-39db-a19f4a74367d}

Followup:     MachineOwner
Windows for home | Windows 11 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

1 answer

Sort by: Most helpful
  1. Anonymous
    2023-05-11T04:37:22+00:00

    Please run the V2 log collector and post a share link into this thread using one drive, drop box, or google drive.

    BSOD - Posting Instructions - Windows 10 Forums (tenforums.com)

    BSOD - Posting Instructions | Windows 11 Forum (elevenforum.com)

    Was this answer helpful?

    0 comments No comments