recurring BSOD

Question

I keep getting a BSOD when running Plex and streaming from my mounted google drive. here is the mini dump info.. is the googledrive for desktop app causing this issue?

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffec87ba047530, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffec87ba047488, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1327

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 1446

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 343

    Key  : Analysis.Init.Elapsed.mSec
    Value: 4176

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 99

    Key  : Bugcheck.Code.DumpHeader
    Value: 0x139

    Key  : Bugcheck.Code.KiBugCheckData
    Value: 0x139

    Key  : Bugcheck.Code.Register
    Value: 0x139

    Key  : FailFast.Name
    Value: CORRUPT_LIST_ENTRY

    Key  : FailFast.Type
    Value: 3

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Timestamp
    Value: 2019-12-06T14:06:00Z

    Key  : WER.OS.Version
    Value: 10.0.19041.1

FILE_IN_CAB:  MEMORY.DMP

BUGCHECK_CODE:  139

BUGCHECK_P1: 3

BUGCHECK_P2: ffffec87ba047530

BUGCHECK_P3: ffffec87ba047488

BUGCHECK_P4: 0

TRAP_FRAME:  ffffec87ba047530 -- (.trap 0xffffec87ba047530)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffda0f12975e90 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffda0f0ce46080 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80172429259 rsp=ffffec87ba0476c0 rbp=ffffec87ba047769
 r8=ffffda0f100c3bd0  r9=0000000000000000 r10=fffff80172428f70
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
googledrivefs3758+0x9259:
fffff801`72429259 cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffffec87ba047488 -- (.exr 0xffffec87ba047488)
ExceptionAddress: fffff80172429259 (googledrivefs3758+0x0000000000009259)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY 

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

PROCESS_NAME:  Plex Transcoder.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000003

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
ffffec87`ba047208 fffff801`5aa0e229     : 00000000`00000139 00000000`00000003 ffffec87`ba047530 ffffec87`ba047488 : nt!KeBugCheckEx
ffffec87`ba047210 fffff801`5aa0e790     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffec87`ba047350 fffff801`5aa0c75d     : 00000000`49742400 fffff801`5a81db37 00000000`00000010 00000000`00040286 : nt!KiFastFailDispatch+0xd0
ffffec87`ba047530 fffff801`72429259     : ffffda0f`100c3770 ffffda0f`06a34910 ffffec87`ba0477d0 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x31d
ffffec87`ba0476c0 fffff801`5a92c3af     : ffffda0f`14d82dc0 ffffda0f`17243ef8 ffffda0f`14d82dc0 ffffda0f`17243e01 : googledrivefs3758+0x9259
ffffec87`ba0477d0 fffff801`5ae91502     : 00000000`00000000 ffffda0f`17243ef8 00000000`00000001 00000000`00000000 : nt!IoCancelIrp+0x6f
ffffec87`ba047810 fffff801`5adf95c4     : ffffda0f`17243ef8 ffffda0f`14d82dc0 00000000`00000103 ffffda0f`17243ef8 : nt!IopCancelAlertedRequest+0x36
ffffec87`ba047850 fffff801`5ac11fe9     : ffffec87`ba047ac0 ffffda0e`e0dffe01 00000000`00000000 ffffec87`ba047ac0 : nt!IopSynchronousServiceTail+0x1bfb94
ffffec87`ba0478f0 fffff801`5aa0d9f5     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x599
ffffec87`ba0479d0 00007ffe`7e44d184     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
00000031`d0b7bf18 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`7e44d184

SYMBOL_NAME:  googledrivefs3758+9259

MODULE_NAME: googledrivefs3758

IMAGE_NAME:  googledrivefs3758.sys

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  9259

FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_googledrivefs3758!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {1a41d9fb-4da8-befa-81e5-c83001bdbbc7}

Followup:     MachineOwner
---------

any help would be greatly appreciated!

Thanks!

Answer 1

Please uninstall and reinstall google drive.

googledrivefs3758 googledrivefs3758 c:\windows\system32\drivers\googledrivefs3758.sys

Answer 2

hello,

here's the zip file from the V2 log collector

https://drive.google.com/file/d/1H5ooSSBVzwVIOgoDFB_jAWrh0-7Uj7Uw/view?usp=share_link

Answer 3

Hi Lester,

here's the dump files. Thank you!

https://drive.google.com/file/d/1ZzouN4NKqPpx_I3D_uhBkLLXZVFnt8F8/view?usp=share_link

Answer 4

Hi and thanks for reaching out. My name is Bernard a Windows fan like you. I'll be happy to help you out today.

I understand the issue you have, nothing to worry I am here to help, and just to confirm can you still use the affected device? if so, we need to analyze the error, can you please check if you have minidump files on the PC so that we can further examine what is the root cause of the issue?

Press Windows key + E (To open file explorer)

Click "This PC" > then follow the file path:

C:\Windows\Minidump

Copy the Minidump files and save them to another location like Desktop or Documents.

Then please upload it to Cloud storage and please share the shareable link here.

Let me know how it goes and I hope that helps.

Bernard

Answer 5

Please run the V2 log collector and post a share link into this thread using one drive, drop box, or google drive.

https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html https://www.elevenforum.com/t/bsod-posting-instructions.103/