Windows 10: BSOD (Stop code : 0xc000021a)

Hi:

We have one BSOD issue while boot in OS, here is dump detail, could you please help to check if there is any?



Probably caused by : ntkrnlmp.exe ( nt!KeWriteProtectPAT+12aa )



Followup: MachineOwner

---------


3: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************


WINLOGON_FATAL_ERROR (c000021a)

The Winlogon process terminated unexpectedly.

Arguments:

Arg1: ffffd486a58b2270, String that identifies the problem.

Arg2: ffffffffc0000102, Error Code.

Arg3: 0000000000000000

Arg4: 0000021b00010000



Debugging Details:

------------------


***** Kernel symbols are WRONG. Please fix symbols to do analysis.

DUMP_CLASS: 1



DUMP_QUALIFIER: 401



BUILD_VERSION_STRING: 10.0.17763.1 (WinBuild.160101.0800)



SYSTEM_MANUFACTURER: LENOVO



SYSTEM_PRODUCT_NAME: 20KGS62A00



SYSTEM_SKU: LENOVO_MT_20KG_BU_Think_FM_ThinkPad X1 Carbon 6th



SYSTEM_VERSION: ThinkPad X1 Carbon 6th



BIOS_VENDOR: LENOVO



BIOS_VERSION: N23ET50W (1.25 )



BIOS_DATE: 06/25/2018



BASEBOARD_MANUFACTURER: LENOVO



BASEBOARD_PRODUCT: 20KGS62A00



BASEBOARD_VERSION: SDK0J40697 WIN



ADDITIONAL_DEBUG_TEXT:

You can run '.symfix; .reload' to try to fix the symbol path and load symbols.



WRONG_SYMBOLS_TIMESTAMP: 1fa44fc4



WRONG_SYMBOLS_SIZE: 9f1000



MODULE_NAME: nt



FAULTING_MODULE: fffff8053a8af000 nt



DEBUG_FLR_IMAGE_TIMESTAMP: 1fa44fc4



DUMP_TYPE: 1



BUGCHECK_P1: ffffd486a58b2270



BUGCHECK_P2: ffffffffc0000102



BUGCHECK_P3: 0



BUGCHECK_P4: 21b00010000



BUGCHECK_STR: 0xc000021a



IMAGE_NAME: ntkrnlmp.exe



CPU_COUNT: 8



CPU_MHZ: 708



CPU_VENDOR: GenuineIntel



CPU_FAMILY: 6



CPU_MODEL: 8e



CPU_STEPPING: a



CPU_MICROCODE: 0,0,0,0 (F,M,S,R) SIG: 96'00000000 (cache) 0'00000000 (init)



DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT



CURRENT_IRQL: 0



ANALYSIS_SESSION_HOST: CINDYCHU-NB



ANALYSIS_SESSION_TIME: 12-24-2018 18:09:15.0270



ANALYSIS_VERSION: 10.0.15063.468 amd64fre



LAST_CONTROL_TRANSFER: from fffff8053adad68a to fffff8053aa5ff30



STACK_TEXT:

ffff9302`dab8a498 fffff805`3adad68a : 00000000`0000004c 00000000`c000021a ffff9302`db16a2f0 ffffaf02`04efc660 : nt!KeBugCheckEx

ffff9302`dab8a4a0 fffff805`3ada4a7e : ffff9302`dab8a5c0 ffff9302`dab8a560 ffffffff`80000458 ffff9302`dab8a5c0 : nt!KeWriteProtectPAT+0x12aa

ffff9302`dab8a4e0 fffff805`3ad9dd9c : ffffaf02`02fef001 00000000`00000006 00000000`00000004 00000000`0002001f : nt!WheaConfigureErrorSource+0x160e

ffff9302`dab8a5a0 fffff805`3aa71085 : 00000000`00000000 fffff805`3a925f8b 00000000`00000010 00000000`00000082 : nt!MmMapUserAddressesToPage+0x6cdc

ffff9302`dab8a770 fffff805`3aa63c30 : fffff805`3af8d35d 00000000`00000006 00000000`c0000004 ffffc001`ae908180 : nt!setjmpex+0x77d5

ffff9302`dab8a908 fffff805`3af8d35d : 00000000`00000006 00000000`c0000004 ffffc001`ae908180 00000000`00000000 : nt!KeSynchronizeExecution+0x2b80

ffff9302`dab8a910 fffff805`3aef3f89 : ffffaf02`02fef040 fffff805`3a90cbe9 fffff801`2c68e000 fffff801`00000000 : nt!FsRtlRegisterFltMgrCalls+0x15f0d

ffff9302`dab8a9d0 fffff805`3a9cec4f : 00000000`00000001 00000000`00000002 00000000`00000000 ffffaf02`02c95d00 : nt!PoUserShutdownInitiated+0x259

ffff9302`dab8aa40 fffff805`3a90c11a : ffffaf02`00000001 ffffaf02`02fef040 fffff805`3a9cebc0 fffff805`3accc0a0 : nt!RtlIpv6StringToAddressW+0x24f

ffff9302`dab8aa70 fffff805`3a9d06c5 : ffffaf02`02fef040 ffffaf02`02c6f300 ffffaf02`02fef040 00000000`00000000 : nt!ExQueueWorkItem+0x1d5a

ffff9302`dab8ab10 fffff805`3aa6738c : ffffc001`ae908180 ffffaf02`02fef040 fffff805`3a9d0670 00000000`00000000 : nt!RtlIpv4StringToAddressW+0x155

ffff9302`dab8ab60 00000000`00000000 : ffff9302`dab8b000 ffff9302`dab84000 00000000`00000000 00000000`00000000 : nt!KeSynchronizeExecution+0x62dc





STACK_COMMAND: kb



THREAD_SHA1_HASH_MOD_FUNC: 84494b2b97d02ed40a1b3765a3faae4bc8542598



THREAD_SHA1_HASH_MOD_FUNC_OFFSET: b28b70852c18ee68faf87a79d7dad09f87332559



THREAD_SHA1_HASH_MOD: dc844b1b94baa204d070855e43bbbd27eee98b94



FOLLOWUP_IP:

nt!KeWriteProtectPAT+12aa

fffff805`3adad68a cc int 3



FAULT_INSTR_CODE: 58b48cc



SYMBOL_STACK_INDEX: 1



SYMBOL_NAME: nt!KeWriteProtectPAT+12aa



FOLLOWUP_NAME: MachineOwner



IMAGE_VERSION: 10.0.17763.1



BUCKET_ID_FUNC_OFFSET: 12aa



FAILURE_BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe



BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe



PRIMARY_PROBLEM_CLASS: OLD_IMAGE_ntkrnlmp.exe



TARGET_TIME: 2018-12-21T13:17:19.000Z



OSBUILD: 17763



OSSERVICEPACK: 1



SERVICEPACK_NUMBER: 0



OS_REVISION: 0



SUITE_MASK: 272



PRODUCT_TYPE: 1



OSPLATFORM_TYPE: x64



OSNAME: Windows 10



OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS



OS_LOCALE:



USER_LCID: 0



OSBUILD_TIMESTAMP: 1986-10-28 13:40:20



BUILDDATESTAMP_STR: 160101.0800



BUILDLAB_STR: WinBuild



BUILDOSVER_STR: 10.0.17763.1



ANALYSIS_SESSION_ELAPSED_TIME: 9c



ANALYSIS_SOURCE: KM



FAILURE_ID_HASH_STRING: kmld_image_ntkrnlmp.exe



FAILURE_ID_HASH: {9c0c4046-5b69-0146-b800-16bdd4721e0b}



Followup: MachineOwner

---------



3: kd> lmvm nt

Browse full module list

start end module name

fffff805`3a8af000 fffff805`3b2a0000 nt (export symbols) ntkrnlmp.exe

Loaded symbol image file: ntkrnlmp.exe

Image path: ntkrnlmp.exe

Image name: ntkrnlmp.exe

Browse all global symbols functions data

Timestamp: Tue Oct 28 13:40:20 1986 (1FA44FC4)

CheckSum: 0094B32C

ImageSize: 009F1000

File version: 10.0.17763.1

Product version: 10.0.17763.1

File flags: 0 (Mask 3F)

File OS: 40004 NT Win32

File type: 1.0 App

File date: 00000000.00000000

Translations: 0409.04b0

CompanyName: Microsoft Corporation

ProductName: Microsoft® Windows® Operating System

InternalName: ntkrnlmp.exe

OriginalFilename: ntkrnlmp.exe

ProductVersion: 10.0.17763.1

FileVersion: 10.0.17763.1 (WinBuild.160101.0800)

FileDescription: NT Kernel & System

LegalCopyright: © Microsoft Corporation. All rights reserved.

:)

 

Stop code 0xc000021a BSOD

Hi,

The blue screen with the stop code 0xc000021a error that you've encountered can be triggered due to corrupted or missing registry files. To effectively assist you with your concern, we suggest that you boot your device in Safe Mode trough the Windows Recovery
Environment. Here are the steps on how to trigger Safe Mode:

• Turn on your computer.
• When the Windows logo appear, unplug the power source of your computer.
• Perform this step three times. On the fourth time, wait for the Windows Recovery Environment (WinRE) to appear.
• On the Choose an option screen, select Troubleshoot
  > Advanced options > Startup Settings and click
  Restart.
• Once your computer restarts, you will see a list of options. Press the
  F4 key to start your computer in Safe Mode.

Once you're done, wait for your device to turn on and check if you encounter the same issue.

Feel free to post back if you encounter any challenges along the process.

 

Stop code 0xc000021a BSOD

Dear Darwin,

I have tried your method.

Up until Step 5, the computer restart when I press F4 to proceed into Safe Mode. Unfortunately the screen turn into blue screen with stop code 0xc000021a during the startup process.

Looks like the computer turn blue screen in every restarting process after showing logo and 3 turning rounds.

 

0xc000021a Stopcode

Hi Stephen,

One of the possible reasons why you’re getting the stop error code 0xc000021a is because of an incompatible hardware that's connected to the computer. To get started with troubleshooting this, you can follow the suggested fixes provided by
MohammandEskandary on this
thread.

In the event that it doesn't work, we suggest that you check this
article for more troubleshooting steps in resolving this stop code error 0xc000021a.

Let us know if the issue has been resolved. Otherwise, we’ll be here if you need further assistance.