Unsolved
This post is more than 5 years old
1 Message
0
1531
August 28th, 2019 14:00
kernel mode heap corruption after first boot but not after reboot
hi,
I have an Inspiron 15 7560, with all updates applied and drivers updated.
since a few days ago, my Windows started booting up all the way to the login screen, and a few seconds later it goes BSOD due to a kernel mode heap corruption.
then, after the BSOD dumps and reboots, everything works fine the rest of the day. the BSOD only happens if I boot from power off. but the subsequent reboots (after bsod dump) are all fine.
I can send a minidump if it helps. I used Windows Debugger to process the memory dump and got the log below:
any hints?
thanks in advance
memory.dmp:
-----------------------
Microsoft (R) Windows Debugger Version 10.0.18914.1001 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 18362 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Kernel base = 0xfffff807`56800000 PsLoadedModuleList = 0xfffff807`56c46490
Debug session time: Wed Aug 28 17:36:06.225 2019 (UTC - 3:00)
System Uptime: 0 days 8:29:38.044
Loading Kernel Symbols
...............................................................
................................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.....................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff807`569bfcc0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffe30a`8ff37530=000000000000013a
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_HEAP_CORRUPTION (13a)
The kernel mode heap manager has detected corruption in a heap.
Arguments:
Arg1: 0000000000000011, Type of corruption detected
Arg2: ffffab8ae9802100, Address of the heap that reported the corruption
Arg3: ffffab8b0e5970b0, Address at which the corruption was detected
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 10
Key : Analysis.Elapsed.Sec
Value: 10
Key : Analysis.Memory.CommitPeak.Mb
Value: 61
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: Dell Inc.
SYSTEM_PRODUCT_NAME: Inspiron 7560
SYSTEM_SKU: 0782
BIOS_VENDOR: Dell Inc.
BIOS_VERSION: 1.10.0
BIOS_DATE: 01/11/2019
BASEBOARD_MANUFACTURER: Dell Inc.
BASEBOARD_PRODUCT: 09WC1G
BASEBOARD_VERSION: A01
DUMP_TYPE: 1
BUGCHECK_P1: 11
BUGCHECK_P2: ffffab8ae9802100
BUGCHECK_P3: ffffab8b0e5970b0
BUGCHECK_P4: 0
FAULTING_IP:
rdbss!RxpFreeConnectionConstructionContext+4b
fffff807`6e3c5a63 4883c420 add rsp,20h
POOL_ADDRESS: ffffab8b0e5970b0 Nonpaged pool
FREED_POOL_TAG: RxCo
BUGCHECK_STR: 0x13a_11_RxCo
CPU_COUNT: 4
CPU_MHZ: b58
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 8e
CPU_STEPPING: 9
CPU_MICROCODE: 6,8e,9,0 (F,M,S,R) SIG: 8E'00000000 (cache) 8E'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-A7A7MHS
ANALYSIS_SESSION_TIME: 08-28-2019 17:57:47.0266
ANALYSIS_VERSION: 10.0.18914.1001 amd64fre
LAST_CONTROL_TRANSFER: from fffff80756b19828 to fffff807569bfcc0
STACK_TEXT:
ffffe30a`8ff37528 fffff807`56b19828 : 00000000`0000013a 00000000`00000011 ffffab8a`e9802100 ffffab8b`0e5970b0 : nt!KeBugCheckEx
ffffe30a`8ff37530 fffff807`56b19888 : 00000000`00000011 00000000`00000000 ffffab8a`e9802100 00000000`00000400 : nt!RtlpHeapHandleError+0x40
ffffe30a`8ff37570 fffff807`56b194b1 : 00000000`00000150 ffffab8b`0e584000 ffffab8b`0d23d040 ffffab8b`0d23d180 : nt!RtlpHpHeapHandleError+0x58
ffffe30a`8ff375a0 fffff807`56a38d12 : 00000000`00000000 ffffab8b`0d23d180 ffffab8b`0c8b9040 00000000`00000000 : nt!RtlpLogHeapFailure+0x45
ffffe30a`8ff375d0 fffff807`56845777 : ffffab8a`e9802340 fffff807`5684beff ffffab8b`0c8b9040 00000000`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x1538d2
ffffe30a`8ff37690 fffff807`56b6d0a9 : ffffab8a`f6cee790 ffffab8b`0e5970c0 ffffab8b`03a9d900 01000000`00100000 : nt!ExFreeHeapPool+0x357
ffffe30a`8ff377b0 fffff807`6e3c5a63 : ffffab8b`0e5970c0 00000000`c00000cc ffffab8b`0e597002 ffffab8a`f22803b0 : nt!ExFreePool+0x9
ffffe30a`8ff377e0 fffff807`6e3c53c8 : 00000002`01d8fb12 00000000`00000004 00000000`c00000cc 00000000`00000002 : rdbss!RxpFreeConnectionConstructionContext+0x4b
ffffe30a`8ff37810 fffff807`8194186f : ffffab8a`f5363b00 ffffab8a`f6cee790 00000000`00000000 00000000`00000006 : rdbss!RxFinishNetRootConstruction+0x188
ffffe30a`8ff378b0 fffff807`819421bd : 00000000`00000000 fffff807`6e384c00 ffffab8a`f5363b00 00000000`c00000cc : p9rdr!p9fs::Device::CreateNetRootAndVNetRoot+0x21f
ffffe30a`8ff37980 fffff807`81947f70 : ffffab8a`f18be780 fffff807`6e384c01 00000000`00000000 ffffab8a`f18be7b0 : p9rdr!::+0x6d
ffffe30a`8ff379b0 fffff807`8194811e : ffffab8a`f18be780 ffffab8a`f6cee590 00000000`00000000 ffffab8b`0c8b9180 : p9rdr!p9fs::UserCallback::CancelWaiters+0x94
ffffe30a`8ff379e0 fffff807`6e384d4f : 00000000`00000000 01000000`00100000 ffffab8a`f2fcea90 fffff807`56d8d240 : p9rdr!::+0xe
ffffe30a`8ff37a10 fffff807`568bcee5 : ffffab8b`0c8b9040 fffff807`6e384cc0 ffffab8a`e9eadcf0 ffffab8a`00001200 : rdbss!RxpProcessWorkItem+0x8f
ffffe30a`8ff37a70 fffff807`56929e95 : ffffab8b`0c8b9040 00000000`00000080 ffffab8a`e9ee6380 fffff807`569c87d0 : nt!ExpWorkerThread+0x105
ffffe30a`8ff37b10 fffff807`569c730a : fffff807`538e6180 ffffab8b`0c8b9040 fffff807`56929e40 df583c0d`c6391633 : nt!PspSystemThreadStartup+0x55
ffffe30a`8ff37b60 00000000`00000000 : ffffe30a`8ff38000 ffffe30a`8ff31000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a
THREAD_SHA1_HASH_MOD_FUNC: db5deef6e7f1b3a907367f4fead96d348bf95a4f
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: b178229395ef27ba8727503d04dd53bc839ad43e
THREAD_SHA1_HASH_MOD: f8b4fbb6ab041253eebc31f053836d8413c352dc
FOLLOWUP_IP:
rdbss!RxpFreeConnectionConstructionContext+4b
fffff807`6e3c5a63 4883c420 add rsp,20h
FAULT_INSTR_CODE: 20c48348
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: rdbss!RxpFreeConnectionConstructionContext+4b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: rdbss
IMAGE_NAME: rdbss.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 4b
FAILURE_BUCKET_ID: 0x13a_11_RxCo_rdbss!RxpFreeConnectionConstructionContext
BUCKET_ID: 0x13a_11_RxCo_rdbss!RxpFreeConnectionConstructionContext
PRIMARY_PROBLEM_CLASS: 0x13a_11_RxCo_rdbss!RxpFreeConnectionConstructionContext
TARGET_TIME: 2019-08-28T20:36:06.000Z
OSBUILD: 18362
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1998-05-30 18:12:57
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 2a8d
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x13a_11_rxco_rdbss!rxpfreeconnectionconstructioncontext
FAILURE_ID_HASH: {b0574f70-b830-08e6-5a4a-62264acc01cf}
Followup: MachineOwner
---------
C:\Windows\Minidump\082819-10031-01.dmp
Microsoft (R) Windows Debugger Version 10.0.18914.1001 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\082819-10031-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 18362 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Kernel base = 0xfffff807`56800000 PsLoadedModuleList = 0xfffff807`56c46490
Debug session time: Wed Aug 28 17:36:06.225 2019 (UTC - 3:00)
System Uptime: 0 days 8:29:38.044
Loading Kernel Symbols
...............................................................
................................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.....................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff807`569bfcc0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffe30a`8ff37530=000000000000013a
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_HEAP_CORRUPTION (13a)
The kernel mode heap manager has detected corruption in a heap.
Arguments:
Arg1: 0000000000000011, Type of corruption detected
Arg2: ffffab8ae9802100, Address of the heap that reported the corruption
Arg3: ffffab8b0e5970b0, Address at which the corruption was detected
Arg4: 0000000000000000
Debugging Details:
------------------
fffff80756d713b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
HeapDbgInitExtension Failed
*** WARNING: Unable to verify checksum for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 15
Key : Analysis.Elapsed.Sec
Value: 36
Key : Analysis.Memory.CommitPeak.Mb
Value: 70
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: Dell Inc.
SYSTEM_PRODUCT_NAME: Inspiron 7560
SYSTEM_SKU: 0782
BIOS_VENDOR: Dell Inc.
BIOS_VERSION: 1.10.0
BIOS_DATE: 01/11/2019
BASEBOARD_MANUFACTURER: Dell Inc.
BASEBOARD_PRODUCT: 09WC1G
BASEBOARD_VERSION: A01
DUMP_TYPE: 2
BUGCHECK_P1: 11
BUGCHECK_P2: ffffab8ae9802100
BUGCHECK_P3: ffffab8b0e5970b0
BUGCHECK_P4: 0
FAULTING_IP:
rdbss!RxpFreeConnectionConstructionContext+4b
fffff807`6e3c5a63 4883c420 add rsp,20h
POOL_ADDRESS: Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
ffffab8b0e5970b0
FREED_POOL_TAG: RxCo
BUGCHECK_STR: 0x13a_11_RxCo
CPU_COUNT: 4
CPU_MHZ: b58
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 8e
CPU_STEPPING: 9
CPU_MICROCODE: 6,8e,9,0 (F,M,S,R) SIG: 8E'00000000 (cache) 8E'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-A7A7MHS
ANALYSIS_SESSION_TIME: 08-28-2019 18:02:17.0019
ANALYSIS_VERSION: 10.0.18914.1001 amd64fre
LAST_CONTROL_TRANSFER: from fffff80756b19828 to fffff807569bfcc0
STACK_TEXT:
ffffe30a`8ff37528 fffff807`56b19828 : 00000000`0000013a 00000000`00000011 ffffab8a`e9802100 ffffab8b`0e5970b0 : nt!KeBugCheckEx
ffffe30a`8ff37530 fffff807`56b19888 : 00000000`00000011 00000000`00000000 ffffab8a`e9802100 00000000`00000400 : nt!RtlpHeapHandleError+0x40
ffffe30a`8ff37570 fffff807`56b194b1 : 00000000`00000150 ffffab8b`0e584000 ffffab8b`0d23d040 ffffab8b`0d23d180 : nt!RtlpHpHeapHandleError+0x58
ffffe30a`8ff375a0 fffff807`56a38d12 : 00000000`00000000 ffffab8b`0d23d180 ffffab8b`0c8b9040 00000000`00000000 : nt!RtlpLogHeapFailure+0x45
ffffe30a`8ff375d0 fffff807`56845777 : ffffab8a`e9802340 fffff807`5684beff ffffab8b`0c8b9040 00000000`00000000 : nt!RtlpHpLfhSubsegmentFreeBlock+0x1538d2
ffffe30a`8ff37690 fffff807`56b6d0a9 : ffffab8a`f6cee790 ffffab8b`0e5970c0 ffffab8b`03a9d900 01000000`00100000 : nt!ExFreeHeapPool+0x357
ffffe30a`8ff377b0 fffff807`6e3c5a63 : ffffab8b`0e5970c0 00000000`c00000cc ffffab8b`0e597002 ffffab8a`f22803b0 : nt!ExFreePool+0x9
ffffe30a`8ff377e0 fffff807`6e3c53c8 : 00000002`01d8fb12 00000000`00000004 00000000`c00000cc 00000000`00000002 : rdbss!RxpFreeConnectionConstructionContext+0x4b
ffffe30a`8ff37810 fffff807`8194186f : ffffab8a`f5363b00 ffffab8a`f6cee790 00000000`00000000 00000000`00000006 : rdbss!RxFinishNetRootConstruction+0x188
ffffe30a`8ff378b0 fffff807`819421bd : 00000000`00000000 fffff807`6e384c00 ffffab8a`f5363b00 00000000`c00000cc : p9rdr!p9fs::Device::CreateNetRootAndVNetRoot+0x21f
ffffe30a`8ff37980 fffff807`81947f70 : ffffab8a`f18be780 fffff807`6e384c01 00000000`00000000 ffffab8a`f18be7b0 : p9rdr!::+0x6d
ffffe30a`8ff379b0 fffff807`8194811e : ffffab8a`f18be780 ffffab8a`f6cee590 00000000`00000000 ffffab8b`0c8b9180 : p9rdr!p9fs::UserCallback::CancelWaiters+0x94
ffffe30a`8ff379e0 fffff807`6e384d4f : 00000000`00000000 01000000`00100000 ffffab8a`f2fcea90 fffff807`56d8d240 : p9rdr!::+0xe
ffffe30a`8ff37a10 fffff807`568bcee5 : ffffab8b`0c8b9040 fffff807`6e384cc0 ffffab8a`e9eadcf0 ffffab8a`00001200 : rdbss!RxpProcessWorkItem+0x8f
ffffe30a`8ff37a70 fffff807`56929e95 : ffffab8b`0c8b9040 00000000`00000080 ffffab8a`e9ee6380 fffff807`569c87d0 : nt!ExpWorkerThread+0x105
ffffe30a`8ff37b10 fffff807`569c730a : fffff807`538e6180 ffffab8b`0c8b9040 fffff807`56929e40 df583c0d`c6391633 : nt!PspSystemThreadStartup+0x55
ffffe30a`8ff37b60 00000000`00000000 : ffffe30a`8ff38000 ffffe30a`8ff31000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a
THREAD_SHA1_HASH_MOD_FUNC: db5deef6e7f1b3a907367f4fead96d348bf95a4f
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: b178229395ef27ba8727503d04dd53bc839ad43e
THREAD_SHA1_HASH_MOD: f8b4fbb6ab041253eebc31f053836d8413c352dc
FOLLOWUP_IP:
rdbss!RxpFreeConnectionConstructionContext+4b
fffff807`6e3c5a63 4883c420 add rsp,20h
FAULT_INSTR_CODE: 20c48348
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: rdbss!RxpFreeConnectionConstructionContext+4b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: rdbss
IMAGE_NAME: rdbss.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION: 10.0.18362.10031
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 4b
FAILURE_BUCKET_ID: 0x13a_11_RxCo_rdbss!RxpFreeConnectionConstructionContext
BUCKET_ID: 0x13a_11_RxCo_rdbss!RxpFreeConnectionConstructionContext
PRIMARY_PROBLEM_CLASS: 0x13a_11_RxCo_rdbss!RxpFreeConnectionConstructionContext
TARGET_TIME: 2019-08-28T20:36:06.000Z
OSBUILD: 18362
OSSERVICEPACK: 295
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1998-05-30 18:12:57
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 8fb0
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x13a_11_rxco_rdbss!rxpfreeconnectionconstructioncontext
FAILURE_ID_HASH: {b0574f70-b830-08e6-5a4a-62264acc01cf}
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_HEAP_CORRUPTION (13a)
The kernel mode heap manager has detected corruption in a heap.
Arguments:
Arg1: 0000000000000011, Type of corruption detected
Arg2: ffffab8ae9802100, Address of the heap that reported the corruption
Arg3: ffffab8b0e5970b0, Address at which the corruption was detected
Arg4: 0000000000000000
Debugging Details:
------------------
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd