Microsoft (R) Windows Debugger Version 10.0.15063.468 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Users\Arawn\Desktop\110320-4906-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: srv* Executable search path is: Windows 10 Kernel Version 19041 MP (8 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Machine Name: Kernel base = 0xfffff806`16e00000 PsLoadedModuleList = 0xfffff806`17a2a310 Debug session time: Tue Nov 3 21:06:28.838 2020 (UTC + 1:00) System Uptime: 0 days 1:11:05.478 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ ............ Loading User Symbols Loading unloaded module list ............ ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 139, {0, 0, 0, ffffaa81dcbae920} Probably caused by : ntkrnlmp.exe ( nt!guard_icall_handler+1b ) Followup: MachineOwner --------- 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_SECURITY_CHECK_FAILURE (139) A kernel component has corrupted a critical data structure. The corruption could potentially allow a malicious user to gain control of this machine. Arguments: Arg1: 0000000000000000, A stack-based buffer has been overrun. Arg2: 0000000000000000, Address of the trap frame for the exception that caused the bugcheck Arg3: 0000000000000000, Address of the exception record for the exception that caused the bugcheck Arg4: ffffaa81dcbae920, Reserved Debugging Details: ------------------ DUMP_CLASS: 1 DUMP_QUALIFIER: 400 BUILD_VERSION_STRING: 10.0.19041.572 (WinBuild.160101.0800) SYSTEM_MANUFACTURER: System manufacturer SYSTEM_PRODUCT_NAME: System Product Name SYSTEM_SKU: SKU SYSTEM_VERSION: System Version BIOS_VENDOR: American Megatrends Inc. BIOS_VERSION: 1203 BIOS_DATE: 12/26/2017 BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC. BASEBOARD_PRODUCT: STRIX Z270F GAMING BASEBOARD_VERSION: Rev 1.xx DUMP_TYPE: 2 DUMP_FILE_ATTRIBUTES: 0xc Insufficient Dumpfile Size Kernel Generated Triage Dump BUGCHECK_P1: 0 BUGCHECK_P2: 0 BUGCHECK_P3: 0 BUGCHECK_P4: ffffaa81dcbae920 TRAP_FRAME: 0000000000000000 -- (.trap 0x0) EXCEPTION_RECORD: 0000000000000000 -- (.exr 0x0) Cannot read Exception record @ 0000000000000000 CPU_COUNT: 8 CPU_MHZ: 1068 CPU_VENDOR: GenuineIntel CPU_FAMILY: 6 CPU_MODEL: 9e CPU_STEPPING: 9 CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: B4'00000000 (cache) B4'00000000 (init) CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT BUGCHECK_STR: 0x139 PROCESS_NAME: System CURRENT_IRQL: 0 ANALYSIS_SESSION_HOST: DESKTOP-R3SHOR9 ANALYSIS_SESSION_TIME: 11-06-2020 21:45:16.0351 ANALYSIS_VERSION: 10.0.15063.468 amd64fre BAD_STACK_POINTER: ffffaa81dcbae168 LAST_CONTROL_TRANSFER: from fffff806171fd0db to fffff806171f45a0 STACK_TEXT: ffffaa81`dcbae168 fffff806`171fd0db : 00000000`00000139 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx ffffaa81`dcbae170 fffff806`171fd45f : fffff806`171fd0c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!guard_icall_handler+0x1b ffffaa81`dcbae1a0 fffff806`17052d97 : ffffaa81`dcbae710 00000000`00000000 ffffaa81`dcbae920 fffff806`171fd1b1 : nt!RtlpExecuteHandlerForException+0xf ffffaa81`dcbae1d0 fffff806`170519a6 : ffffe08f`2b42f1e8 ffffaa81`dcbaee20 ffffe08f`2b42f1e8 ffffaa81`dc9a8180 : nt!RtlDispatchException+0x297 ffffaa81`dcbae8f0 fffff806`171f5432 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x186 ffffaa81`dcbaefb0 fffff806`171f5400 : fffff806`172066a5 ffffe08f`2b42f280 00000000`001dfd02 00000000`0000000b : nt!KxExceptionDispatchOnExceptionStack+0x12 ffffe08f`2b42f0a8 fffff806`172066a5 : ffffe08f`2b42f280 00000000`001dfd02 00000000`0000000b ffffe283`7b181060 : nt!KiExceptionDispatchOnExceptionStackContinue ffffe08f`2b42f0b0 fffff806`172023e0 : 00000000`00000002 fffff806`170ceb87 00000000`000000ae ffff81c0`eaa077f0 : nt!KiExceptionDispatch+0x125 ffffe08f`2b42f290 fffff806`171fd1b1 : 00000000`00000002 c37bba61`18ff64f8 ffffaa81`dc9b0874 00000000`00000000 : nt!KiGeneralProtectionFault+0x320 ffffe08f`2b42f420 00000000`00000002 : c37bba61`18ff64f8 ffffaa81`dc9b0874 00000000`00000000 345b95f3`00000000 : nt!guard_dispatch_icall+0x71 ffffe08f`2b42f428 c37bba61`18ff64f8 : ffffaa81`dc9b0874 00000000`00000000 345b95f3`00000000 00001f80`0007000a : 0x2 ffffe08f`2b42f430 ffffaa81`dc9b0874 : 00000000`00000000 345b95f3`00000000 00001f80`0007000a 00000000`00000000 : 0xc37bba61`18ff64f8 ffffe08f`2b42f438 00000000`00000000 : 345b95f3`00000000 00001f80`0007000a 00000000`00000000 00000000`00000048 : 0xffffaa81`dc9b0874 STACK_COMMAND: kb THREAD_SHA1_HASH_MOD_FUNC: 71c112324759c0a58475aedbb04cf7aa2012692c THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 755ed4dd08ac0d8d13a7e3f00b8a79a86804a4dc THREAD_SHA1_HASH_MOD: bc100a5647b828107ac4e18055e00abcbe1ec406 FOLLOWUP_IP: nt!guard_icall_handler+1b fffff806`171fd0db 90 nop FAULT_INSTR_CODE: ccccc390 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt!guard_icall_handler+1b FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 0 IMAGE_VERSION: 10.0.19041.572 BUCKET_ID_FUNC_OFFSET: 1b FAILURE_BUCKET_ID: 0x139_0_LEGACY_GS_VIOLATION_STACKPTR_ERROR_nt!guard_icall_handler BUCKET_ID: 0x139_0_LEGACY_GS_VIOLATION_STACKPTR_ERROR_nt!guard_icall_handler PRIMARY_PROBLEM_CLASS: 0x139_0_LEGACY_GS_VIOLATION_STACKPTR_ERROR_nt!guard_icall_handler TARGET_TIME: 2020-11-03T20:06:28.000Z OSBUILD: 19041 OSSERVICEPACK: 572 SERVICEPACK_NUMBER: 0 OS_REVISION: 0 SUITE_MASK: 272 PRODUCT_TYPE: 1 OSPLATFORM_TYPE: x64 OSNAME: Windows 10 OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS OS_LOCALE: USER_LCID: 0 OSBUILD_TIMESTAMP: unknown_date BUILDDATESTAMP_STR: 160101.0800 BUILDLAB_STR: WinBuild BUILDOSVER_STR: 10.0.19041.572 ANALYSIS_SESSION_ELAPSED_TIME: 53b ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:0x139_0_legacy_gs_violation_stackptr_error_nt!guard_icall_handler FAILURE_ID_HASH: {cc22797a-8704-51a1-8d8b-9f258a5aa5db} Followup: MachineOwner ---------