BSOD not stable system

Question

BSOD not stable system

Anonymous

From new reports to the first. My system is feeling unstable since I installed it, I recently change the SSD because the same problem but in M2. Mostly unstable on streaming videos I think

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the BugCheck
Arg2: fffff8043132ae4b, Address of the instruction which caused the BugCheck
Arg3: ffffd68807331f20, Address of the context record for the exception that caused the BugCheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2686

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 6499

    Key  : Analysis.Init.CPU.mSec
    Value: 2077

    Key  : Analysis.Init.Elapsed.mSec
    Value: 69882

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 82

    Key  : Dump.Attributes.InsufficientDumpfileSize
    Value: 1

    Key  : Dump.Attributes.RequiredDumpfileSize
    Value: 0x8e69de54

DUMP_FILE_ATTRIBUTES: 0xc
  Insufficient Dumpfile Size
  Kernel Generated Triage Dump

BUGCHECK_CODE:  3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff8043132ae4b

BUGCHECK_P3: ffffd68807331f20

BUGCHECK_P4: 0

CONTEXT:  ffffd68807331f20 -- (.cxr 0xffffd68807331f20)
rax=ffff828c801d9318 rbx=0000000000000001 rcx=0000000000000002
rdx=0000000000000318 rsi=0000000000000001 rdi=ffffd68807332a68
rip=fffff8043132ae4b rsp=ffffd68807332920 rbp=ffffd68807332990
 r8=0000000000000002  r9=0000000000001000 r10=0000fffff804334b
r11=ffffd688073328f0 r12=0000000000501802 r13=0000000000000000
r14=ffff828c7f3f29b0 r15=0000000000000004
iopl=0         nv up ei pl nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050206
nt!EtwpLogKernelEvent+0x5b:
fffff804`3132ae4b 498b8424c8010000 mov     rax,qword ptr [r12+1C8h] ds:002b:00000000`005019ca=????????????????
Resetting default scope

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  setup.exe

STACK_TEXT:  
ffffd688`07332920 fffff804`31256e7d     : 00000000`00000000 ffff828c`7637a000 ffff20a3`5ec99522 00000000`00000001 : nt!EtwpLogKernelEvent+0x5b
ffffd688`073329d0 fffff804`315ac1e0     : 00000000`00000001 00000000`00000001 ffffd688`07332b80 ffffd855`a7d7825f : nt!EtwTraceSiloKernelEvent+0x99
ffffd688`07332a30 fffff804`3140faf9     : ffff828c`a733e680 fffff804`315ac1f0 00000000`00000114 00000000`00000001 : nt!PerfInfoLogSysCallExit+0x70
ffffd688`07332a90 00007ff9`9d2a1344     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2c4
00000023`676fd0b8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`9d2a1344

SYMBOL_NAME:  nt!EtwpLogKernelEvent+5b

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.19041.1081

STACK_COMMAND:  .cxr 0xffffd68807331f20 ; kb

BUCKET_ID_FUNC_OFFSET:  5b

FAILURE_BUCKET_ID:  0x3B_c0000005_VRFK_nt!EtwpLogKernelEvent

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {4be0b14c-ead4-69bd-aecd-a752678cb312}

Followup:     MachineOwner
---------

hmm idk, may the verifier could be involved, my windows 10 is had failed while navigating mostly with youtube videos

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

9 answers

Answer 1

Is this a new home build where the motherboard and various other major devices are still under warranty? If so, and really regardless of that status, please contact ASUS and the others Supports for diagnostics help and possible RAMs'.

======

The last 5 DMP files were 2 each 3B and 0A and 1 each A0 - that variance alone often indicates a possible hardware issue.

A detailed analysis of them also did not point to a lot of help which also usually implicates hardware.

ffffef0262688530 fffff80e97ee2de4Unable to load image aswNetHub.sys, Win32 error 0n2

*** WARNING: Unable to verify timestamp for aswNetHub.sys

*** ERROR: Module load completed but symbols could not be loaded for aswNetHub.sys aswNetHub+0x62de4

aswNetHub.sys <-- Avast

Avast is involved either as the direct cause or by helping to mask the cause. Fully uninstall Avast and use only Windows Defender, In Windows 8/8.1 & 10 WD is a full antivirus.

Avast - Uninstall Utility

http://www.avast.com/uninstall-utility

List of anti-malware program cleanup/uninstall tools

http://answers.microsoft.com/en-us/protect/wiki...

Eset - Remove Eset and many other makers/types of antivirus such as McAfee, Symantec/Norton, Avast, and others - also removes many other programs

https://support.eset.com/en/kb3527-eset-av-remo...

Eset - AV Remover - List of removable applications and instructions to run the Eset AV Remover tool program

https://support.eset.com/en/kb3527-eset-av-remo...

Carefully review ALL of A. - F. below.

3A. Check with ASUS, Nvidia, and the other major device makers' supports and forums for any known issues.

You have the latest BIOS though be sure you have the latest chipset and other major drivers available from ASUS and the other major device makers.

ASUS TUF B450M-PLUS GAMING <-- chipset and some other drivers/

https://www.asus.com/us/motherboards-components...

BiosVersion = 3202

BiosReleaseDate = 06/16/2021

BaseBoardManufacturer = ASUSTeK COMPUTER INC.

BaseBoardProduct = TUF B450M-PLUS GAMING

BaseBoardVersion = Rev X.0x

ASUS - Service <-- includes Live Chat - Chat Icon is on the lower right of page

https://www.asus.com/us/support/Download-Center/

ASUStek Support

https://www.asus.com/support/

ASUStek Forums are ZenTalk orROG (Republic of Gamers)

ZenTalk

https://www.asus.com/zentalk/portal.php?nocache=1

ROG - Republic of Gamers

https://rog.asus.com/forum/?_ga=2.79315284.1301...

ASUStek Drivers

https://www.asus.com/us/support/Download-Center/

3B. AFTER ALL the above now check with AMD for even newer chipset drivers.

AMD - Support and Drivers <-- set to chipsets

https://www.amd.com/en/support

AMD - Community and Forums

https://community.amd.com/

Another issue I found is the Realtek Audio drivers are nowhere to be found in any of the DMP files. This is a possible known issue and the fix is a tad tricky.

A. Use the DDU method to uninstall and then reinstall the Nvidia video drivers. This is to remove any possible corruption which also ties into the audio.

Check with Nvidia Support, their online docs, drives, diagnostics, and ask in their forums about any known issues. If there are no newer drivers you may need to revert back to an older stable driver per their instructions. Use the DDU method to remove and then install the video drivers.

Display Driver Uninstaller - Free

Display Driver Uninstaller Download version 18.0.3.9 (guru3d.com)

Nvidia - Drivers - Use OPTION 1 to manually enter your driver info to get the most current drivers.

http://www.nvidia.com/Download/index.aspx?lang=...

Nvidia Support - check with Support as it could be a known issue

http://www.nvidia.com/page/support.html

Nvidia Forums - also check for forums as it could be a known issue and/or others likely to have it

http://forums.nvidia.com/

B. Now re-install the latest Realtek Audio drivers from the ASUS site. <-- Even if you have already reinstalled them above.

If needed:

Run the memory tests (see methods in the previous post).
Use the tests in the previous post.
As needed use ALL the methods in the troubleshooters above and in the previous post.
After ALL the above if needed run Driver Verifier to see if it can indicate a

CAUSE (see Driver Verifier methods in the previous post).

Troubleshoot blue screen errors <-- read this link

http://windows.microsoft.com/en-us/windows-10/t...

A. Are you overclocking anything? If so STOP! OC can not only cause BSOD it can make troubleshooting virtually impossible.

B. Have you installed any performance or OC software such as MSI Afterburner, AMDRyzenMaster. Intel's Extreme Tuning or Performance Maximizer, or CPU-Z? Some of those and others change system settings during installation which are still in effect even when the program is not running. Even iCUE or other RGB hardware and/or software may be involved.

C. After both A. & B. reset the BIOS back to the system/motherboard maker's recommendations.

D. Be sure the SSD's have the latest firmware from their makers.

E. Try removing and reseating all cards, memory, and cables (both ends when possible) - actually remove and replace - do not just snug (on a PC) and clean out the dust bunnies and vents. (Of course remove ALL power prior to opening the case.) <-- Please do this as it is the number one cause of the issues you are experiencing (by far).

F. Try adding a fan blowing on high onto the motherboard's CPU & GPU areas. The point is to increase airflow to maximize heat dissipation. <-- Please do this no matter how much cooling you have now.

====================================================

Troubleshoot blue screen errors <-- read this link

http://windows.microsoft.com/en-us/windows-10/t...

Here to help,

Rob

Standard Disclaimer: Those may be non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Please let us know the results and if you need further assistance. Feedback definitely helps us help all.

Answer 2

11: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * *******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 000000000000001e, Type of memory safety violation
Arg2: ffff92002029fe10, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffff92002029fd68, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 3468

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 14932

    Key  : Analysis.Init.CPU.mSec
    Value: 1062

    Key  : Analysis.Init.Elapsed.mSec
    Value: 47218

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 74

    Key  : FailFast.Name
    Value: INVALID_NEXT_THREAD

    Key  : FailFast.Type
    Value: 30

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Timestamp
    Value: 2019-12-06T14:06:00Z

    Key  : WER.OS.Version
    Value: 10.0.19041.1

BUGCHECK_CODE:  139

BUGCHECK_P1: 1e

BUGCHECK_P2: ffff92002029fe10

BUGCHECK_P3: ffff92002029fd68

BUGCHECK_P4: 0

IMAGE_NAME:  ntkrnlmp.exe

MODULE_NAME: ntkrnlmp

FAULTING_MODULE: fffff8045fe00000 nt

TRAP_FRAME:  ffff92002029fe10 -- (.trap 0xffff92002029fe10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000006 rbx=0000000000000000 rcx=000000000000001e
rdx=fffff80460afdcc0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80460297471 rsp=ffff92002029ffa0 rbp=ffff800139640180
 r8=0000000000000021  r9=ffff9200202a0330 r10=0000000000000000
r11=00000000000000ef r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!KeQueryValuesThread+0x13bf11:
fffff804`60297471 cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffff92002029fd68 -- (.exr 0xffff92002029fd68)
ExceptionAddress: fffff80460297471 (nt!KeQueryValuesThread+0x000000000013bf11)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 000000000000001e
Subcode: 0x1e FAST_FAIL_INVALID_NEXT_THREAD 

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  svchost.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  000000000000001e

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
ffff9200`2029fae8 fffff804`60208b69     : 00000000`00000139 00000000`0000001e ffff9200`2029fe10 ffff9200`2029fd68 : nt!KeBugCheckEx
ffff9200`2029faf0 fffff804`60208f90     : 00000000`00000000 00000000`00000002 ffffb387`ace15001 ffff9200`202a00e8 : nt!KiBugCheckDispatch+0x69
ffff9200`2029fc30 fffff804`60207323     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`000000d0 : nt!KiFastFailDispatch+0xd0
ffff9200`2029fe10 fffff804`60297471     : ffffe084`f6012040 00d00090`00000090 00000000`00000000 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
ffff9200`2029ffa0 fffff804`60508671     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeQueryValuesThread+0x13bf11
ffff9200`202a0020 fffff804`60508302     : ffffe085`027dc6a0 ffffe085`027dc920 ffffe085`021c5300 00000000`00000001 : nt!PsQueryStatisticsProcess+0x111
ffff9200`202a00a0 fffff804`603f4cc1     : 00000000`00000001 ffffe085`027dc0c0 00000000`ffffffff 00000000`00000000 : nt!ExpCopyProcessInfo+0x42
ffff9200`202a0120 fffff804`604fcbf7     : 00000000`1768cf96 00000000`00059752 00000000`00000040 00000000`00000000 : nt!ExpGetProcessInformation+0x9f1
ffff9200`202a0780 fffff804`604fbda7     : 00000000`00000001 00000000`00059770 00000000`00000000 00000000`00059752 : nt!ExpQuerySystemInformation+0xd07
ffff9200`202a0ac0 fffff804`602085b8     : ffffe085`021c0000 00007ffa`bc6d9524 ffff9200`202a0b80 ffffe084`ffccec80 : nt!NtQuerySystemInformation+0x37
ffff9200`202a0b00 00007ffa`bcd2d4e4     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000025`4d0fecd8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`bcd2d4e4

IMAGE_VERSION:  10.0.19041.1081

STACK_COMMAND:  .thread ; .cxr ; kb

FAILURE_BUCKET_ID:  0x139_1e_INVALID_NEXT_THREAD_IMAGE_ntkrnlmp.exe

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {64929928-a824-2134-285e-71128496d311}

Followup:     MachineOwner
---------

First bsod since I instatlled the SO

Answer 3

9: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * *******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff80309c043bb, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff80309c043bb, address which referenced memory

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 4421

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 36042

    Key  : Analysis.Init.CPU.mSec
    Value: 687

    Key  : Analysis.Init.Elapsed.mSec
    Value: 2744

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 81

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Timestamp
    Value: 2019-12-06T14:06:00Z

    Key  : WER.OS.Version
    Value: 10.0.19041.1

BUGCHECK_CODE:  d1

BUGCHECK_P1: fffff80309c043bb

BUGCHECK_P2: 2

BUGCHECK_P3: 8

BUGCHECK_P4: fffff80309c043bb

READ_ADDRESS: fffff8037cafb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 fffff80309c043bb 

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

TRAP_FRAME:  ffff8107a3c994b0 -- (.trap 0xffff8107a3c994b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffb801a6b54638
rdx=ffffb801a6b54e80 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80309c043bb rsp=ffff8107a3c99640 rbp=ffff8107a3c99740
 r8=0000000000000001  r9=0000000000000020 r10=000000000000007f
r11=ffffb801a6b54e98 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
fffff803`09c043bb ??              ???
Resetting default scope

FAILED_INSTRUCTION_ADDRESS: 
+0
fffff803`09c043bb ??              ???

STACK_TEXT:  
ffff8107`a3c99368 fffff803`7c208b69     : 00000000`0000000a fffff803`09c043bb 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
ffff8107`a3c99370 fffff803`7c204e69     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff8107`a3c994b0 fffff803`09c043bb     : 00000000`09c043d6 00000000`00000000 ffff8107`a3c99740 00000000`00000009 : nt!KiPageFault+0x469
ffff8107`a3c99640 00000000`09c043d6     : 00000000`00000000 ffff8107`a3c99740 00000000`00000009 00000000`00000000 : 0xfffff803`09c043bb
ffff8107`a3c99648 00000000`00000000     : ffff8107`a3c99740 00000000`00000009 00000000`00000000 00000000`00000000 : 0x9c043d6

SYMBOL_NAME:  nt!KiPageFault+469

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.19041.1081

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  469

FAILURE_BUCKET_ID:  AV_CODE_AV_BAD_IP_nt!KiPageFault

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {73cd60cc-83fa-6b76-df08-1961c31d7403}

Followup:     MachineOwner
---------

Answer 4

more previus 9: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * *******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common BugCheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80579e23ebb, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------

*** WARNING: Unable to verify checksum for win32k.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 3796

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 27111

    Key  : Analysis.Init.CPU.mSec
    Value: 640

    Key  : Analysis.Init.Elapsed.mSec
    Value: 5717

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 82

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Timestamp
    Value: 2019-12-06T14:06:00Z

    Key  : WER.OS.Version
    Value: 10.0.19041.1

BUGCHECK_CODE:  1e

BUGCHECK_P1: ffffffffc0000005

BUGCHECK_P2: fffff80579e23ebb

BUGCHECK_P3: 0

BUGCHECK_P4: ffffffffffffffff

READ_ADDRESS: fffff8057a913390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 ffffffffffffffff 

EXCEPTION_PARAMETER2:  ffffffffffffffff

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

STACK_TEXT:  
ffff8001`956d28e8 fffff805`7a053905     : 00000000`0000001e ffffffff`c0000005 fffff805`79e23ebb 00000000`00000000 : nt!KeBugCheckEx
ffff8001`956d28f0 fffff805`7a00fa22     : 01010101`01010101 01010101`01010101 01010101`01010101 01010101`01010101 : nt!KiDispatchException+0x1b5985
ffff8001`956d2fb0 fffff805`7a00f9f0     : fffff805`7a020ca5 00000000`00000000 ffffb406`b51d83c8 00000000`00000000 : nt!KxExceptionDispatchOnExceptionStack+0x12
ffffc40b`c5e997b8 fffff805`7a020ca5     : 00000000`00000000 ffffb406`b51d83c8 00000000`00000000 00000000`00989680 : nt!KiExceptionDispatchOnExceptionStackContinue
ffffc40b`c5e997c0 fffff805`7a01c9e0     : ffffc40b`c5e99b40 ffffc40b`c5e99b70 00000000`00000000 ffffc40b`c5e99b31 : nt!KiExceptionDispatch+0x125
ffffc40b`c5e999a0 fffff805`79e23ebb     : ffff6ffb`b4400000 00000000`ffffffff 00000000`00000000 00000000`00000000 : nt!KiGeneralProtectionFault+0x320
ffffc40b`c5e99b30 ffff6ffb`b4400000     : 00000000`ffffffff 00000000`00000000 00000000`00000000 00000000`000004c8 : nt!KiCommitThreadWait+0x16b
ffffc40b`c5e99b38 00000000`ffffffff     : 00000000`00000000 00000000`00000000 00000000`000004c8 00000000`000006e8 : 0xffff6ffb`b4400000
ffffc40b`c5e99b40 00000000`00000000     : 00000000`00000000 00000000`000004c8 00000000`000006e8 00000000`00000000 : 0xffffffff

SYMBOL_NAME:  nt!KiCommitThreadWait+16b

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.19041.1081

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  16b

FAILURE_BUCKET_ID:  0x1E_c0000005_R_VRFK_nt!KiCommitThreadWait

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {7081a126-92ea-d35d-c8e6-b3c08b124b81}

Followup:     MachineOwner
---------

Answer 5

Previous bsod

8: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the BugCheck
Arg2: fffff80041e5b84a, Address of the instruction which caused the BugCheck
Arg3: fffffe0e7addec50, Address of the context record for the exception that caused the BugCheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2874

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 7164

    Key  : Analysis.Init.CPU.mSec
    Value: 921

    Key  : Analysis.Init.Elapsed.mSec
    Value: 16418

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 75

    Key  : Dump.Attributes.InsufficientDumpfileSize
    Value: 1

    Key  : Dump.Attributes.RequiredDumpfileSize
    Value: 0x7b9560c0

DUMP_FILE_ATTRIBUTES: 0xc
  Insufficient Dumpfile Size
  Kernel Generated Triage Dump

BUGCHECK_CODE:  3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff80041e5b84a

BUGCHECK_P3: fffffe0e7addec50

BUGCHECK_P4: 0

CONTEXT:  fffffe0e7addec50 -- (.cxr 0xfffffe0e7addec50)
rax=fffffe0e7addf698 rbx=0000000000000000 rcx=000000000000000a
rdx=ffffd282c1796000 rsi=ffffd282c1796000 rdi=000000000000000a
rip=fffff80041e5b84a rsp=fffffe0e7addf650 rbp=000000002b707249
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000fff
r11=ffffa5802b800000 r12=000000000000000a r13=fffffe0e7addfa40
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050246
nt!RtlpHpFreeHeap+0x1e:
fffff800`41e5b84a 8b4914          mov     ecx,dword ptr [rcx+14h] ds:002b:00000000`0000001e=????????
Resetting default scope

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  brave.exe

STACK_TEXT:  
fffffe0e`7addf650 fffff800`421bd011     : 00000000`02684c60 00000000`2b707249 ffffd282`c1796000 00000000`00000dc8 : nt!RtlpHpFreeHeap+0x1e
fffffe0e`7addf6a0 fffff800`42088b92     : ffffd282`860b0000 00000000`00000000 ffffd282`c1796e50 a2e64ead`a2e64ead : nt!ExpFreeHeapSpecialPool+0x221
fffffe0e`7addf6f0 fffff800`425bb149     : fffffe0e`7addf850 00000000`00000001 00000000`00000000 01000000`00100000 : nt!ExFreeHeapPool+0x16edf2
fffffe0e`7addf7d0 fffff800`425d83d2     : fffff800`41f21702 ffffd282`c1796e50 00000000`00000000 00000000`00000001 : nt!ExFreePool+0x9
fffffe0e`7addf800 fffff800`425cc22c     : ffffd282`906f69b0 ffffd282`c1796e50 ffffd282`00000002 fffffe0e`7addfb80 : nt!VfIoFreeIrp+0x196
fffffe0e`7addf840 fffff800`41f217be     : fffffe0e`7addfa40 000000cc`c61ff4d0 fffffe0e`7addfaa8 fffffe0e`7addfb80 : nt!IovFreeIrpPrivate+0x6c
fffffe0e`7addf880 fffff800`41e17522     : ffffd282`e382af80 00000000`00000001 fffffe0e`7addfa18 fffff800`00000002 : nt!IoFreeIrp+0x1e
fffffe0e`7addf8b0 fffff800`42289cdd     : 00000000`00000001 fffff800`42289ba0 fffffe0e`7addfb80 00000000`00501802 : nt!IoRemoveIoCompletion+0x3b2
fffffe0e`7addf9e0 fffff800`42010af1     : ffffd282`db126680 000000cc`c61ff3d8 fffffe0e`7addfaa8 0000753c`00555218 : nt!NtRemoveIoCompletion+0x13d
fffffe0e`7addfa90 00007fff`bffecf44     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2bc
000000cc`c61ff3b8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`bffecf44

SYMBOL_NAME:  nt!ExFreePool+9

IMAGE_NAME:  Pool_Corruption

IMAGE_VERSION:  10.0.19041.1081

MODULE_NAME: Pool_Corruption

STACK_COMMAND:  .cxr 0xfffffe0e7addec50 ; kb

BUCKET_ID_FUNC_OFFSET:  9

FAILURE_BUCKET_ID:  0x3B_c0000005_VRFK_nt!ExFreePool

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {06a2a36f-03dc-364a-f3b1-8d9a5da9dbca}

Followup:     Pool_corruption
---------

Share via

BSOD not stable system

9 answers