Seemingly "Random" Bsods

jcgriff2 · 26 Mar 2010

Hi-

The bugchecks from the last 3 dumps -

0xa = invalid memory referenced

0xbe = attempt to write to read-only memory

0x3b (0xc0000005,,,) = system service threw an exception, 0xc0000005 = memory access violation. NVIDIA video named probable cause - it is the beta version as you mentioned -

Code:

nvlddmkm.sys Tue Mar 16 03:57:48 2010 (4B9F39FC)

However, one of the dumps showed a driver not seen before that has caused many BSODs - NVIDIA tweaking utility - which would obviously impact NVIDIA video -

Code:

RivaTuner64.sys Tue Jul 17 15:13:42 2007 (469D14E6)

Riva Tuner support --> RivaTuner

Just to note - these 2 are still around; no evidence either was involved in BSODs -

Code:

viahduaa.sys Thu Jul 09 23:07:01 2009 (4A56B055)
AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)

I'm surprised that the Driver Verifier did not flag Riva Tuner.

Update Riva Tuner or remove it and see if BSODs persist.

Have a good weekend!

jcgriff2

.

BUGCHECK SUMMARY

Code:

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Tue Mar 23 19:33:42.542 2010 (GMT-4)
System Uptime: 0 days 0:33:03.430
BugCheck A, {fffffa7b03a07a80, 2, 0, fffff80002a596ca}
Probably caused by : CLASSPNP.SYS ( CLASSPNP!TransferPktComplete+1ce )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Mon Mar 22 20:39:53.960 2010 (GMT-4)
System Uptime: 0 days 10:59:20.849
BugCheck BE, {400747, 8310000108bbb025, fffff8800531a6f0, a}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+40a84 )
BUGCHECK_STR:  0xBE
PROCESS_NAME:  Xfire.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Sun Mar 21 11:37:03.992 2010 (GMT-4)
System Uptime: 0 days 1:56:23.880
BugCheck 3B, {c0000005, fffff88013df5d53, fffff8800357c5f0, 0}
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+1c6d53 )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  BFBC2Game.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
by jcgriff2   
 
J. C. Griffith, Microsoft MVP 
 
https://mvp.support.microsoft.com/profile/Griffith 
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨

Gingermadman · 28 Mar 2010

I just recently installed RivaTuner as I've heard many problems of recent drivers not increasing fan speed as the load strengthened.

I don't think the driver has changed much from beta to Whql.

I got another Realtek based crashed, so I updated it once more but I've still BSOD. The most recent dump is from after I updated.

This thread here NDIS.SYS Blue Screen Error! is very interesting. I don't know if this at all applies to Avira anti virus or if it's even for Windows 7 but I'll see if I can work it out.

Edit. can't seem to find any options like this for my Realtek Card or anti virus, anyone got any ideas?

It seems like the same problem as everyone on that thread seems to have it saying it's also nvidia and memory problems.

Gingermadman · 28 Mar 2010

Turned off power saving on my network card (I guess that's the router it's affecting when it's turned off.). I'll see if that does anything.

I turned the power saving thing off on the adaptor settings in network connections, no change.

jcgriff2 · 29 Mar 2010

Hi -

3 dumps; 2 bugchecks -

0x3b (0xc0000005,,,) = system service threw an exception, 0xc0000005 = memory access violation. Probable cause listed as the Microsoft Win32 subsystem driver win32k.sys

(2) 0xd1 = attempt made by driver to access pageable (or bad) memory at a time that it should not have (process IRQL too high). Probable causes -

- ndis.sys = Microsoft Network Driver Interface Specification driver (NDIS wrapper)
- Rt64win7.sys = Realtek Ethernet driver

Code:

Rt64win7.sys      Tue Jan 12 01:37:27 2010 (4B4C18A7

win32k.sys nor ndis.sys is the issue here. They are innocent bystanders. What the real problem is exactly is unknown to me at this time.

You mentioned Avira - remove it and see -

Avira Removal --> Avira Solutions - Knowledge Base Problem Details

Install MSE --> http://www.microsoft.com/security_essentials/

I still don't understand given NVIDIA, what this ATI driver is doing here -

Code:

AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)

I have Windows 7 x64 w/ NVIDIA 9600M GT video and do not have the ATI driver in my system.

As far as Riva Tuner - it is from 2007, tweaks video and is an obvious candidate for interference with NVIDIA video - which could be related to the 0x3b system service crash & win32k.sys - possibly involving a transition from user-mode into kernel code territory; hence access violation. Just a theory, though!

Regards. . .

jcgriff2

.

BUGCHECK SUMMARY

Code:

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Sun Mar 28 16:45:00.185 2010 (GMT-4)
System Uptime: 0 days 4:01:22.419
BugCheck 3B, {c0000005, fffff96000142ad3, fffff88003a8f0c0, 0}
Probably caused by : win32k.sys ( win32k!TimersProc+73 )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  csrss.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Sun Mar 28 12:42:47.396 2010 (GMT-4)
System Uptime: 0 days 5:26:01.284
BugCheck D1, {7, 2, 1, fffff880014b1ad3}
Probably caused by : ndis.sys ( ndis!ndisReceiveWorkerThread+f3 )
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Sat Mar 27 18:05:57.670 2010 (GMT-4)
System Uptime: 0 days 3:40:22.559
BugCheck D1, {ce928030, 2, 1, fffff88013c1271c}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+1271c )
BUGCHECK_STR:  0xD1
PROCESS_NAME:  BFBC2Game.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
by jcgriff2   
 
J. C. Griffith, Microsoft MVP 
 
https://mvp.support.microsoft.com/profile/Griffith 
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨

Gingermadman · 29 Mar 2010

the ATiPCIe driver is a north bridge filter, and doesn't seem to be installed, as the only remnants I can find of it are two installers, both that won't work without Catalyst installed.

I'm sure it came when I installed something for my AMD processor, which will show up as ATi. I'll keep looking to see what I can do to get rid of it.

edit. Uninstalled all parts of ATi Catalyst, we'll see if that does the job. I had to reinstall all the ATi parts again, then go for an express uninstall everything.

Gingermadman · 30 Mar 2010

got a memory management bsod today, no dump from it though? strange that.

Also seemed to have went from either 781gb free to 790gb free. I lose data or something? hard drive has been checked and should of been fine with the chkdsk etc.

either that or I deleted something and I don't remember.

edit. all files I've used recently and saved recently all seem to be intact.

Guess it must be the RAM then, will see if I can get it returned soon.

Gingermadman · 01 Apr 2010

wish it would just go away now

Gingermadman · 01 Apr 2010

2 more today.

Gingermadman · 02 Apr 2010

memory corruption

zigzag3143 · 02 Apr 2010

Gingermadman said:

memory corruption

these crashes were caused by memory corruption. Because of which I would download memtestx86 for at least 5 passes

Let us know the results

Ken

Code:

Loading Dump File [C:\Users\K\Desktop\040310-17534-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*F:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a1e000 PsLoadedModuleList = 0xfffff800`02c5be50
Debug session time: Fri Apr  2 19:16:19.463 2010 (GMT-4)
System Uptime: 0 days 13:04:36.351
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff96000172ac0, fffff8800387f0c0, 0}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000172ac0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800387f0c0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!TimersProc+60
fffff960`00172ac0 8900            mov     dword ptr [rax],eax

CONTEXT:  fffff8800387f0c0 -- (.cxr 0xfffff8800387f0c0)
rax=000000000f99a027 rbx=0000000000000000 rcx=0000000002ce53f7
rdx=0000000000000000 rsi=000000007fffffff rdi=fffff900c39c1ea8
rip=fffff96000172ac0 rsp=fffff8800387faa0 rbp=000000000000000f
 r8=fffffa8006141968  r9=0000000000000000 r10=fffffffffffffffd
r11=0000000014b8e830 r12=0000000000000000 r13=fffff9600038f2c0
r14=0000000000000002 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
win32k!TimersProc+0x60:
fffff960`00172ac0 8900            mov     dword ptr [rax],eax ds:002b:00000000`0f99a027=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff960001735d4 to fffff96000172ac0

STACK_TEXT:  
fffff880`0387faa0 fffff960`001735d4 : 00000000`00000000 fffff960`0038fa90 00000000`00000004 00000000`00000001 : win32k!TimersProc+0x60
fffff880`0387faf0 fffff960`00104714 : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`800002b8 : win32k!RawInputThread+0x9b4
fffff880`0387fbc0 fffff960`00183ea6 : fffffa80`00000002 fffff880`03864f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`0387fbf0 fffff800`02a8f153 : fffffa80`06220760 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`0387fc20 000007fe`fd393d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01dcfaf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd393d3a


CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32k
5 errors : !win32k (fffff96000172ac1-fffff96000172af1)
fffff96000172ac0  89 *00  e2  c7  21  00  e9  f6  00  00  00  48  8d  5f  e8  0f ....!......H._..
fffff96000172ad0  0d *00  40  8b  53  48  f6  c2  20 *00  85  df  00  00  00  0f ..@.SH.. .......
fffff96000172ae0  ba *00  48  03  0f  82  cd  00  00  00  8b  4b  40  8b  c1  2b ..H........K@..+
fffff96000172af0  c5 *00  43  40  3b  cd  0f  87  bb  00  00  00  8b  43  44  89 ..C@;........CD.

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  STRIDE

STACK_COMMAND:  .cxr 0xfffff8800387f0c0 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000172ac0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800387f0c0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!TimersProc+60
fffff960`00172ac0 8900            mov     dword ptr [rax],eax

CONTEXT:  fffff8800387f0c0 -- (.cxr 0xfffff8800387f0c0)
rax=000000000f99a027 rbx=0000000000000000 rcx=0000000002ce53f7
rdx=0000000000000000 rsi=000000007fffffff rdi=fffff900c39c1ea8
rip=fffff96000172ac0 rsp=fffff8800387faa0 rbp=000000000000000f
 r8=fffffa8006141968  r9=0000000000000000 r10=fffffffffffffffd
r11=0000000014b8e830 r12=0000000000000000 r13=fffff9600038f2c0
r14=0000000000000002 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
win32k!TimersProc+0x60:
fffff960`00172ac0 8900            mov     dword ptr [rax],eax ds:002b:00000000`0f99a027=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff960001735d4 to fffff96000172ac0

STACK_TEXT:  
fffff880`0387faa0 fffff960`001735d4 : 00000000`00000000 fffff960`0038fa90 00000000`00000004 00000000`00000001 : win32k!TimersProc+0x60
fffff880`0387faf0 fffff960`00104714 : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`800002b8 : win32k!RawInputThread+0x9b4
fffff880`0387fbc0 fffff960`00183ea6 : fffffa80`00000002 fffff880`03864f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`0387fbf0 fffff800`02a8f153 : fffffa80`06220760 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`0387fc20 000007fe`fd393d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01dcfaf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd393d3a


CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32k
5 errors : !win32k (fffff96000172ac1-fffff96000172af1)
fffff96000172ac0  89 *00  e2  c7  21  00  e9  f6  00  00  00  48  8d  5f  e8  0f ....!......H._..
fffff96000172ad0  0d *00  40  8b  53  48  f6  c2  20 *00  85  df  00  00  00  0f ..@.SH.. .......
fffff96000172ae0  ba *00  48  03  0f  82  cd  00  00  00  8b  4b  40  8b  c1  2b ..H........K@..+
fffff96000172af0  c5 *00  43  40  3b  cd  0f  87  bb  00  00  00  8b  43  44  89 ..C@;........CD.

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  STRIDE

STACK_COMMAND:  .cxr 0xfffff8800387f0c0 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000172ac0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800387f0c0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!TimersProc+60
fffff960`00172ac0 8900            mov     dword ptr [rax],eax

CONTEXT:  fffff8800387f0c0 -- (.cxr 0xfffff8800387f0c0)
rax=000000000f99a027 rbx=0000000000000000 rcx=0000000002ce53f7
rdx=0000000000000000 rsi=000000007fffffff rdi=fffff900c39c1ea8
rip=fffff96000172ac0 rsp=fffff8800387faa0 rbp=000000000000000f
 r8=fffffa8006141968  r9=0000000000000000 r10=fffffffffffffffd
r11=0000000014b8e830 r12=0000000000000000 r13=fffff9600038f2c0
r14=0000000000000002 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
win32k!TimersProc+0x60:
fffff960`00172ac0 8900            mov     dword ptr [rax],eax ds:002b:00000000`0f99a027=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff960001735d4 to fffff96000172ac0

STACK_TEXT:  
fffff880`0387faa0 fffff960`001735d4 : 00000000`00000000 fffff960`0038fa90 00000000`00000004 00000000`00000001 : win32k!TimersProc+0x60
fffff880`0387faf0 fffff960`00104714 : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`800002b8 : win32k!RawInputThread+0x9b4
fffff880`0387fbc0 fffff960`00183ea6 : fffffa80`00000002 fffff880`03864f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`0387fbf0 fffff800`02a8f153 : fffffa80`06220760 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`0387fc20 000007fe`fd393d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01dcfaf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd393d3a


CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32k
5 errors : !win32k (fffff96000172ac1-fffff96000172af1)
fffff96000172ac0  89 *00  e2  c7  21  00  e9  f6  00  00  00  48  8d  5f  e8  0f ....!......H._..
fffff96000172ad0  0d *00  40  8b  53  48  f6  c2  20 *00  85  df  00  00  00  0f ..@.SH.. .......
fffff96000172ae0  ba *00  48  03  0f  82  cd  00  00  00  8b  4b  40  8b  c1  2b ..H........K@..+
fffff96000172af0  c5 *00  43  40  3b  cd  0f  87  bb  00  00  00  8b  43  44  89 ..C@;........CD.

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  STRIDE

STACK_COMMAND:  .cxr 0xfffff8800387f0c0 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

Followup: memory_corruption
---------