New
#1
BSoD WDF_VIOLATION
Windows 10 version 21H2 build 19044.3208
Attachment 394267
How does one find the involved driver, to go beyond mere suspicion (even if strong)?
WDF_VIOLATION (10d)
The Kernel-Mode Driver Framework was notified that Windows detected an error
in a framework-based driver. In general, the dump file will yield additional
information about the driver that caused this BugCheck.
Arguments:
Arg1: 0000000000000007, A driver attempted to delete a framework object incorrectly
by calling WdfObjectDereference to delete a handle instead
of calling WdfObjectDelete.
Arg2: 000019fc10bf48a8, Reserved.
Arg3: ffffe603ef40b750, Reserved.
Arg4: ffffe603edcf4de0, Reserved.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2937
Key : Analysis.Elapsed.mSec
Value: 3063
Key : Analysis.IO.Other.Mb
Value: 7
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 35
Key : Analysis.Init.CPU.mSec
Value: 749
Key : Analysis.Init.Elapsed.mSec
Value: 220953
Key : Analysis.Memory.CommitPeak.Mb
Value: 115
Key : Bugcheck.Code.KiBugCheckData
Value: 0x10d
Key : Bugcheck.Code.LegacyAPI
Value: 0x10d
Key : Failure.Bucket
Value: 0x10D_7_Wdf01000!FxVerifierBugCheckWorker
Key : Failure.Hash
Value: {9fffab3b-e3ef-9b86-453d-788731d56929}
Key : Hypervisor.Enlightenments.Value
Value: 68673420
Key : Hypervisor.Enlightenments.ValueHex
Value: 417df8c
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 21631230
Key : Hypervisor.Flags.ValueHex
Value: 14a10fe
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 3f7
Key : SecureKernel.HalpHvciEnabled
Value: 1
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 10d
BUGCHECK_P1: 7
BUGCHECK_P2: 19fc10bf48a8
BUGCHECK_P3: ffffe603ef40b750
BUGCHECK_P4: ffffe603edcf4de0
FILE_IN_CAB: MEMORY.DMP
TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
PROCESS_NAME: System
LOCK_ADDRESS: fffff80562244b80 -- (!locks fffff80562244b80)
Resource @ nt!PiEngineLock (0xfffff80562244b80) Exclusively owned
Contention Count = 50
Threads: ffffe603fd4b0040-01<*>
1 total locks
PNP_TRIAGE_DATA:
Lock address : 0xfffff80562244b80
Thread Count : 1
Thread address: 0xffffe603fd4b0040
Thread wait : 0x10b7919
STACK_TEXT:
fffffd03`0ed466e8 fffff805`63c2927c : 00000000`0000010d 00000000`00000007 000019fc`10bf48a8 ffffe603`ef40b750 : nt!KeBugCheckEx
fffffd03`0ed466f0 fffff805`63bf58bc : ffffe603`ef40b750 00000000`00000000 000019fc`10bf48a8 fffff805`63bd5676 : Wdf01000!FxVerifierBugCheckWorker+0x24 [minkernel\wdf\framework\shared\object\fxverifierbugcheck.cpp @ 68]
fffffd03`0ed46730 fffff805`63be425a : ffffe603`ef40b8d0 ffffe603`ef40b8d0 fffff805`63c6bf00 fffffd03`0ed46b00 : Wdf01000!FxObject::~FxObject+0x1df1c [minkernel\wdf\framework\shared\object\fxobject.cpp @ 146]
fffffd03`0ed46790 fffff805`63c1d574 : ffffe603`ef40b750 ffffe603`ef40b8d0 fffff805`63c67da0 00000000`ffffffff : Wdf01000!FxNonPagedObject::~FxNonPagedObject+0x2a [minkernel\wdf\framework\shared\inc\private\common\FxNonPagedObject.hpp @ 112]
fffffd03`0ed467c0 fffff805`63c216bc : ffffe603`ef40b750 ffffe603`ef40b8d0 000019fc`116d6e08 ffffe603`ee9291f0 : Wdf01000!FxDeviceBase::~FxDeviceBase+0x6c [minkernel\wdf\framework\shared\core\fxdevicebase.cpp @ 68]
fffffd03`0ed467f0 fffff805`63c216f4 : 00000000`00000001 fffffd03`0ed46b00 00000000`ffffffff fffff805`61fb70b9 : Wdf01000!FxDevice::~FxDevice+0x29c [minkernel\wdf\framework\shared\core\fxdevice.cpp @ 362]
fffffd03`0ed46850 fffff805`63bd40cb : 00000000`00000000 00000000`ffffffff 00000000`00000000 ffffe603`ee3baee0 : Wdf01000!FxDevice::`scalar deleting destructor'+0x14
fffffd03`0ed46880 fffff805`63bd2a46 : fffffd03`0ed46b00 fffff805`63be8b0a ffffe603`ee3baf88 fffff805`00000000 : Wdf01000!FxObject::SelfDestruct+0x1b [minkernel\wdf\framework\shared\inc\private\common\fxobject.hpp @ 453]
fffffd03`0ed468b0 fffff805`63be3b02 : ffffffff`dc3cba00 fffffd03`0ed46b00 00000000`00000005 00000000`00000000 : Wdf01000!FxObject::Release+0x106 [minkernel\wdf\framework\shared\inc\private\common\fxobject.hpp @ 884]
fffffd03`0ed46900 fffff805`63bf6724 : ffffe603`edbfad00 ffffe603`fbd85968 00000000`00000000 fffff805`63c67da0 : Wdf01000!FxWorkItem::Dispose+0x72 [minkernel\wdf\framework\shared\core\fxworkitem.cpp @ 502]
fffffd03`0ed46940 fffff805`63bd41a9 : fffffd03`0ed46b00 00000000`00000000 fffff805`63c67da0 fffff805`63be273f : Wdf01000!FxObject::DisposeChildrenWorker+0x1e434 [minkernel\wdf\framework\shared\object\fxobjectstatemachine.cpp @ 1212]
fffffd03`0ed46990 fffff805`63bf66cb : ffffe603`ef40b750 ffffe603`ee3baf28 ffffe603`e6ff000c fffffd03`0ed46a58 : Wdf01000!FxObject::PerformDisposingDisposeChildrenLocked+0x35 [minkernel\wdf\framework\shared\object\fxobjectstatemachine.cpp @ 846]
fffffd03`0ed469c0 fffff805`63bd41a9 : fffffd03`0ed46b00 00000000`00000000 fffff805`63c67da0 fffff805`63bdea20 : Wdf01000!FxObject::DisposeChildrenWorker+0x1e3db [minkernel\wdf\framework\shared\object\fxobjectstatemachine.cpp @ 1191]
fffffd03`0ed46a10 fffff805`63be8a21 : ffffe603`ef40b750 ffffe603`ef40b701 fffff805`63c68c38 000019fc`10bf48a8 : Wdf01000!FxObject::PerformDisposingDisposeChildrenLocked+0x35 [minkernel\wdf\framework\shared\object\fxobjectstatemachine.cpp @ 846]
fffffd03`0ed46a40 fffff805`63be89b6 : ffffe603`ef40b750 ffffe603`ef40b788 ffffe603`ef40b788 fffff805`63c67da0 : Wdf01000!FxObject::PerformEarlyDisposeWorkerAndUnlock+0x49 [minkernel\wdf\framework\shared\object\fxobjectstatemachine.cpp @ 926]
fffffd03`0ed46a70 fffff805`63c4b054 : ffffe603`f09ad5c0 fffffd03`0ed46ba0 00000000`00000124 00000000`00000124 : Wdf01000!FxObject::EarlyDispose+0x5e [minkernel\wdf\framework\shared\object\fxobjectstatemachine.cpp @ 492]
fffffd03`0ed46aa0 fffff805`63c54359 : fffffd03`0ed40000 00000000`00000124 00000000`00000008 fffffd03`0ed46b60 : Wdf01000!FxPkgPnp::PnpEventRemovedCommonCode+0x84 [minkernel\wdf\framework\shared\irphandlers\pnp\pnpstatemachine.cpp @ 2055]
fffffd03`0ed46ad0 fffff805`63c4a644 : 00000000`00000004 fffffd03`0ed46b70 00000000`00000004 00000000`00000000 : Wdf01000!FxPkgFdo::PnpEventFdoRemovedOverload+0x9 [minkernel\wdf\framework\shared\irphandlers\pnp\fxpkgfdo.cpp @ 1242]
fffffd03`0ed46b00 fffff805`63c4a33b : 00000000`00000124 00000000`00000136 ffffe603`f328c8b0 00000000`00000000 : Wdf01000!FxPkgPnp::PnpEventFdoRemoved+0x14 [minkernel\wdf\framework\shared\irphandlers\pnp\pnpstatemachine.cpp @ 2728]
fffffd03`0ed46b30 fffff805`63c4c011 : ffffe603`f328c9e8 ffffe603`f328c8b0 ffffe603`f328c8b0 000002fc`f12b9340 : Wdf01000!FxPkgPnp::PnpEnterNewState+0x15f [minkernel\wdf\framework\shared\irphandlers\pnp\pnpstatemachine.cpp @ 1234]
fffffd03`0ed46bc0 fffff805`63c4bdda : ffffe603`f328c8b0 ffffe603`f3874d00 ffffe603`f328ca10 ffffe603`f328c9e8 : Wdf01000!FxPkgPnp::PnpProcessEventInner+0x1d1 [minkernel\wdf\framework\shared\irphandlers\pnp\pnpstatemachine.cpp @ 1152]
fffffd03`0ed46c30 fffff805`63c53222 : 00000000`00000000 00000000`00000001 ffffe603`f3874d00 fffffd03`0ed46d60 : Wdf01000!FxPkgPnp::PnpProcessEvent+0x182 [minkernel\wdf\framework\shared\irphandlers\pnp\pnpstatemachine.cpp @ 933]
fffffd03`0ed46cc0 fffff805`63bdcc60 : ffffe603`f328c8b0 ffffe603`ef40b750 ffffe603`ef40b750 00000000`00000000 : Wdf01000!FxPkgPnp::_PnpRemoveDevice+0xa2 [minkernel\wdf\framework\shared\irphandlers\pnp\fxpkgpnp.cpp @ 2519]
fffffd03`0ed46d30 fffff805`63bda867 : ffffe603`e354d7a0 ffffe603`eb7dd290 ffffe603`e354d7a0 00000000`00000000 : Wdf01000!FxPkgPnp::Dispatch+0xb0 [minkernel\wdf\framework\shared\irphandlers\pnp\fxpkgpnp.cpp @ 765]
fffffd03`0ed46da0 fffff805`618113a5 : 00000000`00000000 00000000`00000000 ffffe603`f3874dc0 00000000`80000000 : Wdf01000!FxDevice::DispatchWithLock+0x157 [minkernel\wdf\framework\shared\core\fxdevice.cpp @ 1447]
fffffd03`0ed46e00 fffff806`02613da9 : 00000000`00000010 00000000`00000000 00000000`00000200 00000000`00000000 : nt!IofCallDriver+0x55
fffffd03`0ed46e40 fffff806`02612f34 : ffffe603`f3874dc0 ffffe603`eb7dd290 ffffe603`e354d7a0 ffffe603`e354d7a0 : xboxgip!gipPnP+0x545
fffffd03`0ed46ed0 fffff805`618113a5 : ffffe603`f3874dc0 ffffe603`f3874f10 00000000`00000000 fffffd03`0ed47010 : xboxgip!gipGenDispatch+0x114
fffffd03`0ed46f20 fffff805`61bdd5dc : 00000000`00000000 ffffe603`f3874dc0 fffffd03`0ed47010 ffffe603`ef3f22d0 : nt!IofCallDriver+0x55
fffffd03`0ed46f60 fffff805`61d41a70 : 00000000`00000002 ffffe603`ef3f22d0 ffffe603`ed854cc0 ffffe603`ef3f22d0 : nt!IopSynchronousCall+0xf8
fffffd03`0ed46fd0 fffff805`6196f81c : ffff9006`7688b700 ffffe603`ed854cc0 00000000`00000001 00000000`0000000a : nt!IopRemoveDevice+0x108
fffffd03`0ed47080 fffff805`61d41632 : ffffe603`ed854cc0 00000000`0000000a 00000000`00000000 fffff805`62244ae0 : nt!PnpRemoveLockedDeviceNode+0x1ac
fffffd03`0ed470e0 fffff805`61d41367 : ffffe603`ed854cc0 fffffd03`0ed47160 00000000`0000000a 00000000`00000000 : nt!PnpDeleteLockedDeviceNode+0x4e
fffffd03`0ed47120 fffff805`61d6da79 : ffffe603`ef3f22d0 00000000`00000002 ffffe603`f0fb0090 00000000`00000000 : nt!PnpDeleteLockedDeviceNodes+0xf7
fffffd03`0ed471a0 fffff805`61d6d9a4 : 00000000`00000000 fffffd03`0ed47220 ffffe603`ef3f22d0 00000000`00000000 : nt!PipRemoveDevicesInRelationList+0x8d
fffffd03`0ed471f0 fffff805`61d42c8d : ffffe603`f0fb0090 00000000`00000001 ffffe603`f0fb0090 00000000`00000000 : nt!PnpDelayedRemoveWorker+0x114
fffffd03`0ed47230 fffff805`619703c4 : 00000000`00000000 00000000`00000001 00000000`00000000 ffffe603`ed854cc0 : nt!PnpChainDereferenceComplete+0xfd
fffffd03`0ed47260 fffff805`61d3fb62 : 00000000`00000001 fffffd03`0ed47359 ffff9006`7e865d80 00000000`00000001 : nt!PnpIsChainDereferenced+0xac
fffffd03`0ed472e0 fffff805`61d39f5b : fffffd03`0ed47420 ffffe603`ed854c00 fffffd03`0ed47400 ffff9006`00000001 : nt!PnpProcessQueryRemoveAndEject+0x28a
fffffd03`0ed473c0 fffff805`61c4aa4e : ffff9006`7688b700 ffff9006`825cfe70 ffffe603`c6ac1c00 00000000`00000000 : nt!PnpProcessTargetDeviceEvent+0xeb
fffffd03`0ed473f0 fffff805`6188e5c5 : ffffe603`fd4b0040 ffffe603`fd4b0040 ffffe603`c6ac1c10 ffffe603`f1213250 : nt!PnpDeviceEventWorker+0x2ce
fffffd03`0ed47470 fffff805`61926915 : ffffe603`fd4b0040 00000000`00000080 ffffe603`c6ae9100 51434230`30324b62 : nt!ExpWorkerThread+0x105
fffffd03`0ed47510 fffff805`61a04cf8 : ffffb381`8eac0180 ffffe603`fd4b0040 fffff805`619268c0 2d756b66`52584f64 : nt!PspSystemThreadStartup+0x55
fffffd03`0ed47560 00000000`00000000 : fffffd03`0ed48000 fffffd03`0ed41000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
FAULTING_SOURCE_LINE: minkernel\wdf\framework\shared\object\fxverifierbugcheck.cpp
FAULTING_SOURCE_FILE: minkernel\wdf\framework\shared\object\fxverifierbugcheck.cpp
FAULTING_SOURCE_LINE_NUMBER: 68
SYMBOL_NAME: Wdf01000!FxVerifierBugCheckWorker+24
MODULE_NAME: Wdf01000
IMAGE_NAME: Wdf01000.sys
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: 24
FAILURE_BUCKET_ID: 0x10D_7_Wdf01000!FxVerifierBugCheckWorker
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {9fffab3b-e3ef-9b86-453d-788731d56929}
Followup: MachineOwner
---------