Have a new laptop with windows 11 preinstalled. It has been BSODing for a couple of months now once a week or so absolutely randomly. And every time it failed to create a dump file. Also I noticed that the crashing happened only when I moved the laptop.
Today the screen went blue once again, but a dump file got created.
Wondering if anyone can help analyse it. Thanks
P.S. sorry for my english
Microsoft (R) Windows Debugger Version 10.0.25200.1003 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\032223-12390-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 22621 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff80030c00000 PsLoadedModuleList = 0xfffff80031813430
Debug session time: Wed Mar 22 17:58:46.082 2023 (UTC + 3:00)
System Uptime: 4 days 7:19:53.947
Loading Kernel Symbols
..
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
.............................................................
................................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
..................................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff80031029400 48894c2408 mov qword ptr [rsp+8],rcx ss:ffffe30901237220=0000000000000139
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffe30901237540, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffe30901237498, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
Debugging Details:
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4671
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 9560
Key : Analysis.IO.Other.Mb
Value: 5
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 30
Key : Analysis.Init.CPU.mSec
Value: 1530
Key : Analysis.Init.Elapsed.mSec
Value: 79064
Key : Analysis.Memory.CommitPeak.Mb
Value: 98
Key : Bugcheck.Code.DumpHeader
Value: 0x139
Key : Bugcheck.Code.Register
Value: 0x139
Key : Dump.Attributes.AsUlong
Value: 1008
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : FailFast.Name
Value: CORRUPT\_LIST\_ENTRY
Key : FailFast.Type
Value: 3
FILE_IN_CAB: 032223-12390-01.dmp
DUMP_FILE_ATTRIBUTES: 0x1008
Kernel Generated Triage Dump
BUGCHECK_CODE: 139
BUGCHECK_P1: 3
BUGCHECK_P2: ffffe30901237540
BUGCHECK_P3: ffffe30901237498
BUGCHECK_P4: 0
TRAP_FRAME: ffffe30901237540 -- (.trap 0xffffe30901237540)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9600614b09a0 rbx=0000000000000000 rcx=0000000000000003
rdx=004000000017a891 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800676f1ec7 rsp=ffffe309012376d0 rbp=ffffcc0c9e1ef9b0
r8=ffffc88000000000 r9=0000000000000000 r10=0000000000000004
r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz ac pe nc
AsusNUMPADFilter+0x11ec7:
fffff800`676f1ec7 ?? ???
Resetting default scope
EXCEPTION_RECORD: ffffe30901237498 -- (.exr 0xffffe30901237498)
ExceptionAddress: fffff800676f1ec7 (AsusNUMPADFilter+0x0000000000011ec7)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000409 - . .
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
DPC_STACK_BASE: FFFFE30901237FB0
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
ffffe30901237218 fffff8003103eaa9 : 0000000000000139 0000000000000003 ffffe30901237540 ffffe30901237498 : nt!KeBugCheckEx
ffffe30901237220 fffff8003103f032 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiBugCheckDispatch+0x69
ffffe30901237360 fffff8003103ce06 : ffff960058919b30 ffffcc0c9e286150 0000000000000000 0000000000000000 : nt!KiFastFailDispatch+0xb2
ffffe30901237540 fffff800676f1ec7 : ffffcc0ca9af0aa0 ffffcc0c00000000 ffffcc0c9e1ef9b0 ffffcc0c9e1efbb8 : nt!KiRaiseSecurityCheckFailure+0x346
ffffe309012376d0 ffffcc0ca9af0aa0 : ffffcc0c00000000 ffffcc0c9e1ef9b0 ffffcc0c9e1efbb8 ffffcc0c00000000 : AsusNUMPADFilter+0x11ec7
ffffe309012376d8 ffffcc0c00000000 : ffffcc0c9e1ef9b0 ffffcc0c9e1efbb8 ffffcc0c00000000 fffff80040000020 : 0xffffcc0c`a9af0aa0
ffffe309012376e0 ffffcc0c9e1ef9b0 : ffffcc0c9e1efbb8 ffffcc0c00000000 fffff80040000020 ffffcc0c9e1ef180 : 0xffffcc0c`00000000
ffffe309012376e8 ffffcc0c9e1efbb8 : ffffcc0c00000000 fffff80040000020 ffffcc0c9e1ef180 ffffcc0ca9e821d0 : 0xffffcc0c`9e1ef9b0
ffffe309012376f0 ffffcc0c00000000 : fffff80040000020 ffffcc0c9e1ef180 ffffcc0ca9e821d0 0000000000000000 : 0xffffcc0c`9e1efbb8
ffffe309012376f8 fffff80040000020 : ffffcc0c9e1ef180 ffffcc0ca9e821d0 0000000000000000 ffffcc0c9e1ef288 : 0xffffcc0c`00000000
ffffe30901237700 ffffcc0c9e1ef180 : ffffcc0ca9e821d0 0000000000000000 ffffcc0c9e1ef288 ffffcc0ca44b7820 : 0xfffff800`40000020
ffffe30901237708 ffffcc0ca9e821d0 : 0000000000000000 ffffcc0c9e1ef288 ffffcc0ca44b7820 fffff800676f1cf3 : 0xffffcc0c`9e1ef180
ffffe30901237710 0000000000000000 : ffffcc0c9e1ef288 ffffcc0ca44b7820 fffff800676f1cf3 ffffcc0c9e1ef9b0 : 0xffffcc0c`a9e821d0
SYMBOL_NAME: AsusNUMPADFilter+11ec7
MODULE_NAME: AsusNUMPADFilter
IMAGE_NAME: AsusNUMPADFilter.sys
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: 11ec7
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_AsusNUMPADFilter!unknown_function
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {10b0b00e-198d-fea2-01a9-fee06a8ab226}
Followup: MachineOwner