Windows 7: bsod at various times browsing or playing games

tiarnac · 05 Dec 2013

Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF80002E7EAC5
BCP3: 0000000000000000
BCP4: FFFFFFFFFFFFFFFF
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

trying to help a friend figure out his bsod problem before he takes it to the repair shop for 300$. i believe i have provided the information asked for and the appropriate zip file.

YoYo155 · 05 Dec 2013

Welcome to SF tiarnac, please have your friend follow the Blue Screen of Death (BSOD) Posting Instructions :) .

What I can tell you based upon the dump file is the following.

Code:

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002e7eac5, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Arg1 gives us the exception code, in this case it was an Access Violation, this happens when a driver
attempts to access an invalid address or one that it doesn't own.
Arg4 is the address that the driver was attempting to access, it is clearly invalid.

Looking at the stack we can see the main activity is coming from network related drivers,
NETIO / ndis / tcpip / afd
and some from graphic drivers, atikmdag / dxgkrnl / dxgmms1.

Code:

0xfffff88006ba4e20 : 0xfffff80002e7eac5 : nt!ExpInterlockedPopEntrySListFault16
Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
0xfffff88006ba4ea8 : 0xfffff80003001e80 : nt!KiInitialPCR+0x180
0xfffff88006ba4f38 : 0xfffff80002e7eac5 : nt!ExpInterlockedPopEntrySListFault16
0xfffff88006ba5040 : 0x6134643836343d64 :  !da "d=468d4aa1&cb=lf"
0xfffff88006ba5048 : 0x666c3d6263263161 :  !da "a1&cb=lf"
0xfffff88006ba5128 : 0xfffff880014f82f7 : ndis!NdisFreeNetBufferList+0x87
0xfffff88006ba5158 : 0xfffff8800141f027 : NETIO!StreamFreeNetBufferList+0x17
0xfffff88006ba5188 : 0xfffff88001425d90 : NETIO!StreamRequestNetBufferListCompletionFn+0xd0
0xfffff88006ba51b8 : 0xfffff88001432774 : NETIO!StreamConvertSendRequestToNetBufferList+0x54
0xfffff88006ba51c8 : 0xfffff8800142cf4b : NETIO!StreamFreeInspectionCallContxt+0x5b
0xfffff88006ba51e8 : 0xfffff80003016588 : nt!NonPagedPoolDescriptor+0x8
0xfffff88006ba51f8 : 0xfffff88001440b34 : NETIO!WfpStreamInspectSend+0x164
0xfffff88006ba5228 : 0xfffff80003016580 : nt!NonPagedPoolDescriptor
0xfffff88006ba5238 : 0xfffff80002fba30d : nt!ExFreePoolWithTag+0x22d
0xfffff88006ba5298 : 0xfffff88001408469 : NETIO!MdpFree+0x79
0xfffff88006ba52a8 : 0xfffff880016671b4 : tcpip!TcpEnqueueTcbSend+0x284
0xfffff88006ba52b8 : 0xfffff880014f82f7 : ndis!NdisFreeNetBufferList+0x87
0xfffff88006ba52d8 : 0xfffff80002eae3d5 : nt!RtlGetExtendedContextLength+0x19
0xfffff88006ba52e8 : 0xfffff880014187e3 : NETIO!NetioCompleteCopyNetBufferListChain+0xa3
0xfffff88006ba5328 : 0xfffff88001402872 : NETIO!NetioDereferenceNetBufferListChain+0x132
0xfffff88006ba5388 : 0xfffff880016057e8 : tcpip!NetioCompleteCopyNetBufferListChain
0xfffff88006ba53f8 : 0xfffff8800167de81 : tcpip!TcpTlProviderReleaseIndicationList+0x81
0xfffff88006ba5428 : 0xfffff88002cd647d : afd!AfdTLReleaseIndications+0x2d
0xfffff88006ba5448 : 0xfffff8800415f0a1 : dxgmms1!VidSchiUpdateContextRunningTimeAtISR+0x45
0xfffff88006ba54a8 : 0xfffff80002e86242 : nt!KiExceptionDispatch+0xc2
0xfffff88006ba54e0 : 0x6134643836343d64 :  !da "d=468d4aa1&cb=lf"
0xfffff88006ba54e8 : 0x666c3d6263263161 :  !da "a1&cb=lf"
0xfffff88006ba5598 : 0xfffff8800406213f : dxgkrnl!DxgNotifyInterruptCB+0x83
0xfffff88006ba55a8 : 0xfffff8000315f9c5 : nt!ObReferenceObjectByHandle+0x25
0xfffff88006ba55f8 : 0xfffff80002e7eac5 : nt!ExpInterlockedPopEntrySListFault16
0xfffff88006ba5688 : 0xfffff80002e84b4a : nt!KiGeneralProtectionFault+0x10a
0xfffff88006ba5788 : 0xfffff80003001e80 : nt!KiInitialPCR+0x180
0xfffff88006ba57d8 : 0xfffff80002e89a8a : nt!KiSwapContext+0x7a
0xfffff88006ba57f8 : 0xfffff80002e7eac5 : nt!ExpInterlockedPopEntrySListFault16
0xfffff88006ba5828 : 0xfffff80002e96df5 : nt!MiResolveDemandZeroFault+0x865
0xfffff88006ba5918 : 0xfffff80002ea4d05 : nt!MiResolveProtoPteFault+0x4f5
0xfffff88006ba59a8 : 0xfffff80002ea34f3 : nt!MiDispatchFault+0x1c3
0xfffff88006ba5a18 : 0xfffff8800406749e : dxgkrnl!DpQueueDpc+0x8e
0xfffff88006ba5ab8 : 0xfffff80002e93179 : nt!MmAccessFault+0x359
0xfffff88006ba5bd8 : 0xfffff80002e89b02 : nt!KiDispatchInterrupt+0x12
0xfffff88006ba5c18 : 0xfffff80002e84cee : nt!KiPageFault+0x16e
0xfffff88006ba5c20 : 0x0000000000000001 :  Trap @ fffff88006ba5c20

Both drivers are old and needs to be updated.

Code:

lmvm Rt64win7

    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Browse all global symbols  functions  data
    Timestamp:        Tue Sep 27 17:50:33 2011

Driver Reference Table - Rt64win7.sys

Code:

lmvm atikmdag

    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Browse all global symbols  functions  data
    Timestamp:        Wed Jul 07 04:37:28 2010

Driver Reference Table - atikmdag.sys

x BlueRobot · 06 Dec 2013

@YoYo155

I think the exception may have happened, as a result of a the address of the pointer was pointing at, since this is x64 system, and will be forced to use a 48-bit virtual address space, I believe the address being pointed to is non-canonical.

Attachment 296407

Code:

2: kd> .trap fffff880`06ba5690
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000005cd010003 rbx=0000000000000000 rcx=fffffa8006905de0
rdx=fa800856c27004c1 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e7eac5 rsp=fffff88006ba5820 rbp=fffff88006ba5880
 r8=fa800856c27004c0  r9=00000000000000de r10=fffffa8006905de0
r11=fffff88006ba5c20 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02e7eac5 498b08          mov     rcx,qword ptr [r8] ds:fa800856`c27004c0=????????????????
2: kd> r.
Last set context:
rcx=fffffa80`06905de0  r8=fa800856`c27004c0  
2: kd> knL
  *** Stack trace for last set context - .thread/.cxr resets it
 # Child-SP          RetAddr           Call Site
00 fffff880`06ba5820 fffff800`02e96df5 nt!ExpInterlockedPopEntrySListFault16
01 fffff880`06ba5830 fffff800`02ea4d05 nt!MiResolveDemandZeroFault+0x865
02 fffff880`06ba5920 fffff800`02ea34f3 nt!MiResolveProtoPteFault+0x4f5
03 fffff880`06ba59b0 fffff800`02e93179 nt!MiDispatchFault+0x1c3
04 fffff880`06ba5ac0 fffff800`02e84cee nt!MmAccessFault+0x359
05 fffff880`06ba5c20 00000000`6d9a850b nt!KiPageFault+0x16e
06 00000000`0538f53c 00000000`00000000 0x6d9a850b

More Information - x86-64 - Wikipedia, the free encyclopedia