Windows 家庭版
Microsoft 操作系统系列,可跨个人计算机、平板电脑、笔记本电脑、手机、物联网设备、独立混合现实头戴显示设备、大型协作屏幕和其他设备运行。
CPU 7800X3D,显卡9070GRE,以为下为WINBG分析后的结果内容
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff306034de710, Address of the trap frame for the exception that caused the BugCheck
Arg3: fffff306034de668, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 1062
Key : Analysis.Elapsed.mSec
Value: 1062
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 40
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 468
Key : Analysis.Init.Elapsed.mSec
Value: 24086
Key : Analysis.Memory.CommitPeak.Mb
Value: 76
Key : Analysis.Version.DbgEng
Value: 10.0.29547.1002
Key : Analysis.Version.Description
Value: 10.2602.27.2 amd64fre
Key : Analysis.Version.Ext
Value: 1.2602.27.2
Key : Bugcheck.Code.LegacyAPI
Value: 0x139
Key : Bugcheck.Code.TargetModel
Value: 0x139
Key : Dump.Attributes.AsUlong
Value: 0x8
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY
Key : FailFast.Type
Value: 3
Key : Failure.Bucket
Value: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiSwapThread
Key : Failure.Exception.Code
Value: 0xc0000409
Key : Failure.Exception.Record
Value: 0xfffff306034de668
Key : Failure.Hash
Value: {364d2a10-fb5b-e8e9-9b5b-39c85a1b5a41}
Key : WER.System.BIOSRevision
Value: 5.41.0.0
BUGCHECK_CODE: 139
BUGCHECK_P1: 3
BUGCHECK_P2: fffff306034de710
BUGCHECK_P3: fffff306034de668
BUGCHECK_P4: 0
FILE_IN_CAB: 060126-14031-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
FAULTING_THREAD: ffffe1035c7f5600
TRAP_FRAME: fffff306034de710 -- (.trap 0xfffff306034de710)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe1031ba99030 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffe1035c7f5ab0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80459cc3baa rsp=fffff306034de8a0 rbp=fffff306034de9b9
r8=0000000000000038 r9=0000000000000000 r10=ffffe1035c7f5600
r11=ffffe10365a46940 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe cy
nt!IopCompleteRequest+0x9fa:
fffff804`59cc3baa cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff306034de668 -- (.exr 0xfffff306034de668)
ExceptionAddress: fffff80459cc3baa (nt!IopCompleteRequest+0x00000000000009fa)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1 (!blackboxwinlogon) (!blackboxwinlogonnotify)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: audiodg.exe
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
IRP_ADDRESS: ffffffffffffff88
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
fffff306`034de3e8 fffff804`59e11da9 : 00000000`00000139 00000000`00000003 fffff306`034de710 fffff306`034de668 : nt!KeBugCheckEx
fffff306`034de3f0 fffff804`59e12350 : 00000000`0000bc10 ffff9880`99008780 fffff306`034de830 ffffe103`5f8bcfe0 : nt!KiBugCheckDispatch+0x69
fffff306`034de530 fffff804`59e101f2 : 00000000`00000000 fffff804`59cc281d ffffe103`13010000 ffffe103`13010100 : nt!KiFastFailDispatch+0xd0
fffff306`034de710 fffff804`59cc3baa : ffffe103`1ba99088 fffff306`034de9b9 ffffe103`5ab409e0 fffff804`00400000 : nt!KiRaiseSecurityCheckFailure+0x332
fffff306`034de8a0 fffff804`59c4a33b : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopCompleteRequest+0x9fa
fffff306`034de960 fffff804`59cc7587 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x27b
fffff306`034dea20 fffff804`59cc678f : 00000000`00000000 00000000`0000000f fffff306`034dec10 00000000`00000000 : nt!KiSwapThread+0x827
fffff306`034dead0 fffff804`59c4b7be : ffffe103`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x14f
fffff306`034deb70 fffff804`59ffd0b0 : 00000000`00000000 00000000`00000000 ffffe103`69be21b0 ffffe103`5a999db0 : nt!KeWaitForMultipleObjects+0x2be
fffff306`034dec80 fffff804`59ffcd89 : ffffe103`5a98f280 00000000`00000500 00000000`00000000 00000000`00000000 : nt!ObWaitForMultipleObjects+0x2f0
fffff306`034df180 fffff804`59e11508 : 00000000`00000000 00000000`00000000 ffffe103`5c7f5600 fffff804`5a068e20 : nt!NtWaitForMultipleObjects+0x119
fffff306`034df410 00007ff9`4322e0f4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000ec`497ff508 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`4322e0f4
SYMBOL_NAME: nt!KiSwapThread+827
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.6456
STACK_COMMAND: .process /r /p 0xffffe1035f5ef080; .thread /r /p 0xffffe1035c7f5600 ; kb
BUCKET_ID_FUNC_OFFSET: 827
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiSwapThread
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {364d2a10-fb5b-e8e9-9b5b-39c85a1b5a41}
Followup: MachineOwner
Microsoft 操作系统系列,可跨个人计算机、平板电脑、笔记本电脑、手机、物联网设备、独立混合现实头戴显示设备、大型协作屏幕和其他设备运行。
根据你提供的 WinDbg 分析,这次的蓝屏错误是 KERNEL_SECURITY_CHECK_FAILURE (139),参数显示 LIST_ENTRY 被破坏(可能发生了双重移除),并且崩溃直接指向内核定时器列表损坏 (KTIMER_LIST_CORRUPTION)。触发崩溃的进程是 audiodg.exe(Windows 音频设备图形隔离进程),本质上是内核在切换线程时检查到了严重的数据结构异常。
这类问题通常和驱动程序错误操作内核对象有关,尤其是音频、显卡、芯片组以及一些带内核钩子的软件。结合你的新平台配置(7800X3D + RX 9070 GRE),很大概率是驱动兼容性或稳定性问题。
建议你重装音频相关驱动或者关闭内核保护和内存完整性校验