Hello LC,
The first hint that the crash occurred while waiting for IPI was the routine name nt!KeFlushMultipleRangeTb in the crash stack ("Tb" may mean page table translation buffer):
00 nt!KeBugCheckEx
01 nt!KeAccumulateTicks
02 nt!KiUpdateRunTime
03 nt!KiUpdateTime
04 nt!KeClockInterruptNotify
05 nt!HalpTimerClockInterrupt
06 nt!KiCallInterruptServiceRoutine
07 nt!KiInterruptSubDispatchNoLockNoEtw
08 nt!KiInterruptDispatchNoLockNoEtw
09 nt!KeFlushMultipleRangeTb
0a nt!MiAgeWorkingSetTail
0b nt!MiWalkPageTablesRecursively
0c nt!MiWalkPageTablesRecursively
The !ipi debugger command confirms this suspicion; here is a truncated and compressed view of the command output:
IPI State for Processor 0
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 1
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 2
IPI State for Processor 3
IPI State for Processor 4
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 5
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 6
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 7
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 8
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 9
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
IPI State for Processor 10
As a sender, awaiting IPI completion from processor(s) 0, 1, 4, 5, 6, 7, 8, 9, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23.
IPI State for Processor 11
IPI State for Processor 12
As a receiver, unhandled requests are pending from processor(s) 10.
From processor a, active request of type: flush multiple
Flush Count b4 Flush List ffffffcb87b4844f (dp ffffffcb87b4844f lb4)
Processor 10 (the processor that triggered the crash) is awaiting a reply from most of the other processors (except processors 2, 3 and 11 which have replied).
The debugger command !running -t -i only shows stacks from processors 10 and 11 - processors 2 and 3 have possibly "frozen" after replying (processor 10 has been waiting for replies for 120 seconds before initiating the crash).
The processor register context for the frozen processors in the dump file is zeroed - presumably meaning that the processor context could not be retrieved from the frozen processors.
The obvious path of working step by step back to the cause of the problem ends here. There may well be hints about the cause of the problem in the dump, but it will take an inspired guess to find them.
Gary