bug check code: 0x3B

leftbackfielder

hi, everybody i write a Virtual keyboard, and send a virtual key to the keyboardclass by KeyboardClassServiceCallback. First, my pc is lenveo thinkpad T430,when the syntp.sys driver is running, my virtual keyboard is crash until send vitual key. i guardian the .dump file:

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880010c754a, Address of the instruction which caused the bugcheck
Arg3: fffff8801bf0b0b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx

FAULTING_IP:
Wdf01000+3754a
fffff880`010c754a 664439400a cmp word ptr [rax+0Ah],r8w

CONTEXT: fffff8801bf0b0b0 -- (.cxr 0xfffff8801bf0b0b0)
rax=0000000000000000 rbx=fffff8801bf0bb38 rcx=fffffa8007baedc0
rdx=fffffa800849b4d0 rsi=fffff8801bf0bba0 rdi=fffff8801bf0bbac
rip=fffff880010c754a rsp=fffff8801bf0bab0 rbp=fffff8801bf0bec0
r8=0000000000000000 r9=fffff8801bf0bb38 r10=fffff880009ca180
r11=fffffa8004de8b00 r12=0000000000000000 r13=0000000000000000
r14=fffffa8004670280 r15=fffffa8004670280
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00210282
Wdf01000+0x3754a:
fffff880`010c754a 664439400a cmp word ptr [rax+0Ah],r8w ds:002b:00000000`0000000a=????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3B

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff880010c754a

STACK_TEXT:
fffff880`1bf0bab0 00000000`00000000 : fffff800`09262630 00000000`00000010 00000000`00200086 fffff880`1bf0bae8 : Wdf01000+0x3754a

FOLLOWUP_IP:
Wdf01000+3754a
fffff880`010c754a 664439400a cmp word ptr [rax+0Ah],r8w

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: Wdf01000+3754a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Wdf01000

IMAGE_NAME: Wdf01000.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 51c51641

STACK_COMMAND: .cxr 0xfffff8801bf0b0b0 ; kb

FAILURE_BUCKET_ID: X64_0x3B_Wdf01000+3754a

BUCKET_ID: X64_0x3B_Wdf01000+3754a

Followup: MachineOwner

In the DeviceTree, the keyboardfdo is upper syntp fdo, i guess , the crash may be related to the fdo orders~~