(ntoskrnl\kd64\kdinit.c:94) ----------------------------------------------------- (ntoskrnl\kd64\kdinit.c:95) ReactOS 0.4.16-x86-dev (Build 20260228-0.4.16-dev-2310-g80bd460) (Commit 80bd4608363683131411f131e8783749e51835c5) (ntoskrnl\kd64\kdinit.c:96) 1 System Processor [384 MB Memory] (ntoskrnl\kd64\kdinit.c:100) Command Line: DEBUG DEBUGPORT=COM1 BAUDRATE=115200 SOS (ntoskrnl\kd64\kdinit.c:103) ARC Paths: multi(0)disk(0)rdisk(0)partition(1) \ multi(0)disk(0)rdisk(0)partition(1) \ReactOS\ Connected to Windows Server 2003 3790 x86 compatible target at (Sat Feb 28 13:58:03.298 2026 (UTC - 9:00)), ptr64 FALSE Kernel Debugger connection established. Symbol search path is: D:\fix-SURFACE_AllocSurface\msvc_pdb Executable search path is: Windows Server 2003 Kernel Version 3790 UP Checked x86 compatible Built by: 20260228-0.4.16-dev-2310-g80bd460.MSVC_19.29.30156.0 Machine Name: Kernel base = 0x80400000 PsLoadedModuleList = 0x805fd140 System Uptime: not available (ntoskrnl\ke\i386\cpu.c:454) Supported CPU features: KF_V86_VIS KF_RDTSC KF_CR4 KF_CMOV KF_GLOBAL_PAGE KF_LARGE_PAGE KF_MTRR KF_CMPXCHG8B KF_MMX KF_WORKING_PTE KF_PAT KF_FXSR KF_FAST_SYSCALL KF_XMMI X86_FEATURE_PAE (ntoskrnl\ke\i386\cpu.c:750) Prefetch Cache: 32 bytes L2 Cache: 524288 bytes L2 Cache Line: 64 bytes L2 Cache Associativity: 4 (hal\halx86\acpi\halacpi.c:782) ACPI Timer at: 8008h (EXT: 0) (hal\halx86\acpi\halacpi.c:928) ACPI v1.0-1.0b detected. Tables: [RSDT] [FACP] (hal\halx86\generic\x86bios.c:142) *x86BiosMemoryMapping: F000FF53, F000E2C3 (ntoskrnl\mm\mminit.c:138) 0x80000000 - 0x83000000 Boot Loaded Image (ntoskrnl\mm\mminit.c:142) 0xB0000000 - 0xB0361000 PFN Database (ntoskrnl\mm\mminit.c:146) 0xB0361000 - 0xB0F39000 ARM3 Non Paged Pool (ntoskrnl\mm\mminit.c:150) 0xB9400000 - 0xBB400000 System View Space (ntoskrnl\mm\mminit.c:154) 0xBB400000 - 0xC0000000 Session Space (ntoskrnl\mm\mminit.c:157) 0xC0000000 - 0xC03FFFFF Page Tables (ntoskrnl\mm\mminit.c:160) 0xC0300000 - 0xC0300FFF Page Directories (ntoskrnl\mm\mminit.c:163) 0xC0400000 - 0xC07FFFFF Hyperspace (ntoskrnl\mm\mminit.c:166) 0xC1000000 - 0xE0FFFFFF System Cache (ntoskrnl\mm\mminit.c:170) 0xE1000000 - 0xECC00000 ARM3 Paged Pool (ntoskrnl\mm\mminit.c:173) 0xECC00000 - 0xF7BE0000 System PTE Space (ntoskrnl\mm\mminit.c:176) 0xF7BE0000 - 0xFFBE0000 Non Paged Pool Expansion PTE Space ACPI Compatible Eisa/Isa HAL Detected WARNING: ArbBuildAssignmentOrdering at sdk\lib\drivers\arbiter\arbiter.c:275 is UNIMPLEMENTED! WARNING: ArbBuildAssignmentOrdering at sdk\lib\drivers\arbiter\arbiter.c:275 is UNIMPLEMENTED! WARNING: ArbBuildAssignmentOrdering at sdk\lib\drivers\arbiter\arbiter.c:275 is UNIMPLEMENTED! WARNING: ArbBuildAssignmentOrdering at sdk\lib\drivers\arbiter\arbiter.c:275 is UNIMPLEMENTED! WARNING: ArbBuildAssignmentOrdering at sdk\lib\drivers\arbiter\arbiter.c:275 is UNIMPLEMENTED! (ntoskrnl\io\iomgr\driver.c:655) '\Driver\sacdrv' initialization failed, status (0xc0000037) (ntoskrnl\io\iomgr\driver.c:83) Deleting driver object '\Driver\sacdrv' (ntoskrnl\mm\ARM3\sysldr.c:989) Leaking driver: sacdrv.sys (ntoskrnl\io\iomgr\driver.c:920) Driver 'sacdrv.sys' load failed, status (c0000365) (hal\halx86\legacy\bus\pcibus.c:816) WARNING: PCI Slot Resource Assignment is FOOBAR (drivers\storage\port\scsiport\fdo.c:328) Found device of type 0 at controller 0 bus 0 tid 0 lun 0, PDO: B0EBEA08 (drivers\storage\port\scsiport\fdo.c:328) Found device of type 9 at controller 0 bus 1 tid 0 lun 0, PDO: B0EF8A08 (drivers\storage\port\scsiport\fdo.c:328) Found device of type 9 at controller 1 bus 1 tid 0 lun 0, PDO: B0F21A08 (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0x9 0x9 vs. 0x9 0x9) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0x9 0x9 vs. 0x9 0x9) (drivers\bus\acpi\buspdo.c:846) Failed to find a bus number (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xe 0xe vs. 0xe 0xe) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xe 0xe vs. 0xe 0xe) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xf 0xf vs. 0xf 0xf) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xf 0xf vs. 0xf 0xf) (ntoskrnl\io\iomgr\driver.c:655) '\Driver\BusLogic' initialization failed, status (0xc00000c0) (ntoskrnl\io\iomgr\driver.c:83) Deleting driver object '\Driver\BusLogic' (ntoskrnl\mm\ARM3\sysldr.c:989) Leaking driver: buslogic.sys (ntoskrnl\mm\ARM3\sysldr.c:560) multi(0)disk(0)rdisk(0)partition(1)\ReactOS\System32\drivers\scsiport.sys (ntoskrnl\io\iomgr\driver.c:920) Driver 'buslogic.sys' load failed, status (c0000365) (drivers\ksfilter\swenum\swenum.c:428) SWENUM loaded (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0x9 0x9 vs. 0x9 0x9) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0x9 0x9 vs. 0x9 0x9) (drivers\usb\usbport\endpoint.c:818) USBPORT_OpenPipe: DeviceHandle - B0E74280, FdoDevice - B0E72030, PipeHandle - B0E74288 (drivers\usb\usbport\endpoint.c:818) USBPORT_OpenPipe: DeviceHandle - B0E74280, FdoDevice - B0E72030, PipeHandle - B0E84C20 BOOT DRIVERS LOADED (drivers\storage\port\scsiport\ioctl.c:609) unknown ioctl code: 0x66001B (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\processr.sys at F762A000 with 8 pages (drivers\processor\processr\pnp.c:136) ZwQueryValueKey() failed (Status 0xc0000034) (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\nv3.sys at F75F9000 with 31 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\VIDEOPRT.SYS at F75D7000 with 22 pages (ntoskrnl\mm\ARM3\sysldr.c:2592) ImageBase 0xF75F9000 ImageSize 0x30600 Section 8 VA 0x2f980 Raw 0xc80 virt 0xc08 (win32ss\drivers\videoprt\videoprt.c:815) Using x86 emulator (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xb 0xb vs. 0xb 0xb) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xb 0xb vs. 0xb 0xb) (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\i8042prt.sys at F59C3000 with 14 pages (drivers\input\i8042prt\hwhacks.c:232) SMBiosTables HACK, see CORE-14867 (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\kbdclass.sys at F59B9000 with a pages (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0x1 0x1 vs. 0x1 0x1) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0x1 0x1 vs. 0x1 0x1) (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\mouclass.sys at F59AF000 with a pages (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xc 0xc vs. 0xc 0xc) (ntoskrnl\io\pnpmgr\pnpres.c:648) Resource conflict: IRQ (0xc 0xc vs. 0xc 0xc) (ntoskrnl\mm\ARM3\sysldr.c:3180) ZwOpenFile failed for '\SystemRoot\System32\drivers\serial.sys' with status 0xc0000034 (ntoskrnl\io\pnpmgr\devaction.c:514) Failed to load driver "serial" for ACPI\PNP0501\1 (status c0000034) (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\floppy.sys at F599A000 with 15 pages (ntoskrnl\io\iomgr\driver.c:655) '\Driver\Floppy' initialization failed, status (0xc000000e) (ntoskrnl\io\iomgr\driver.c:83) Deleting driver object '\Driver\Floppy' (ntoskrnl\mm\ARM3\sysldr.c:989) Leaking driver: floppy.sys (ntoskrnl\io\iomgr\driver.c:2059) IopInitializeDriverModule() failed (Status c0000365) (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\cdrom.sys at F5956000 with 40 pages WDFTrace: new WDFKEY object open failed, !STATUS! (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\fs_rec.sys at F594C000 with a pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\null.sys at F5945000 with 7 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\beep.sys at F593E000 with 7 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\blue.sys at F5934000 with a pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\vgapnp.sys at F592B000 with 9 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\vga.sys at F5924000 with 7 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\msfs.sys at F591C000 with 8 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\npfs.sys at F590A000 with 12 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\tcpip.sys at F58C9000 with 41 pages Unhandled event type: 6 (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\ndisuio.sys at F58BB000 with a pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\afd.sys at F58A1000 with 1a pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\system32\drivers\netio.sys at F5895000 with c pages (ntoskrnl\mm\ARM3\sysldr.c:3180) ZwOpenFile failed for '\SystemRoot\System32\drivers\serial.sys' with status 0xc0000034 WARNING: RtlCreateTagHeap at sdk\lib\rtl\heap.c:4043 is UNIMPLEMENTED! WARNING: IoInitializeCrashDump at ntoskrnl\io\iomgr\iomgr.c:652 is UNIMPLEMENTED! Boot took 12741235020 cycles! Interrupts: 1261 System Calls: 31517 Context Switches: 1158 (ntoskrnl\config\cmsysini.c:1186) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl\config\cmsysini.c:1186) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl\config\cmsysini.c:1186) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl\config\cmsysini.c:1186) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl\config\cmsysini.c:1186) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl\config\cmsysini.c:1186) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl\config\cmsysini.c:1186) CmpGetRegistryPath: ConfigPath = '\SystemRoot\System32\Config\' (ntoskrnl\mm\ARM3\session.c:795) Session 0 is ready to go: 0xBF7F0000 0xF5867000, 200e 0xB0D30B48 (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\win32k.sys at F56A0000 with 1c7 pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\ftfd.dll at F55C9000 with d7 pages (win32ss\gdi\ntgdi\d3dkmt.c:27) DxStartupDxgkInt: Entry (win32ss\reactx\ntddraw\ddraw.c:57) Warning: trying loading xp/2003/windows7/reactos dxg.sys (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\dxg.sys at F55AE000 with b pages (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\drivers\dxgthk.sys at F55A7000 with 7 pages (win32ss\reactx\ntddraw\ddraw.c:112) DirectX interface is activated (win32ss\drivers\videoprt\int10.c:750) Could not initialize the x86 emulator; falling back to V86 mode (win32ss\gdi\eng\device.c:581) err: EngpPnPTargetRelationRequest() failed with status 0xc0000010 (win32ss\gdi\eng\device.c:83) err: Could not open \REGISTRY\Machine\System\CONTROLSET001\SERVICES\NV3\Video registry key: 0xc0000034 (win32ss\user\ntuser\winsta.c:243) err: Invalid window station handle (win32ss\user\ntuser\clipboard.c:31) err: Cannot open winsta (win32ss\user\ntuser\winsta.c:548) err: Initializing input window station (win32ss\user\ntuser\class.c:2396) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss\user\ntuser\class.c:2396) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss\user\ntuser\class.c:2396) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss\user\ntuser\class.c:2396) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss\user\ntuser\class.c:2396) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss\user\ntuser\class.c:2396) err: SYSTEMCUR(ARROW) == NULL, should not happen!! (win32ss\user\ntuser\desktop.c:3397) err: The process 0xB0CB2020 'winlogon.exe' didn't have an assigned startup desktop before, assigning it now! (win32ss\user\ntuser\desktop.c:3335) err: Attempted to change thread desktop although the thread has windows! (win32ss\user\winsrv\usersrv\init.c:171) We are logged off (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\kbdus.dll at F5879000 with 4 pages (ntoskrnl\ps\query.c:2303) NtSetInformationThread(ThreadInformationClass: ThreadNameInformation): Class validation failed! (Status: 0xc0000003) (base\system\services\services.c:64) CheckSetup() (ntoskrnl\ps\query.c:2303) NtSetInformationThread(ThreadInformationClass: ThreadNameInformation): Class validation failed! (Status: 0xc0000003) (ntoskrnl\ps\query.c:2303) NtSetInformationThread(ThreadInformationClass: ThreadNameInformation): Class validation failed! (Status: 0xc0000003) WARNING: HvHiveWillShrink at sdk\lib\cmlib\hivewrt.c:574 is UNIMPLEMENTED! (win32ss\gdi\eng\mouse.c:811) Failed to lock the DC. (ntoskrnl\ps\query.c:2303) NtSetInformationThread(ThreadInformationClass: ThreadNameInformation): Class validation failed! (Status: 0xc0000003) fixme:(dll\win32\rpcrt4\rpc_server.c:1736) (0x1000): stub (base\system\services\services.c:185) ScmLogEvent: RegisterEventSourceW failed 1722 (ntoskrnl\mm\ARM3\sysldr.c:170) Loading: \SystemRoot\System32\nv3.dll at F54C2000 with 1f pages (ntoskrnl\mm\ARM3\sysldr.c:2592) ImageBase 0xF54C2000 ImageSize 0x1e380 Section 6 VA 0x1df00 Raw 0x480 virt 0x44c WARNING: LDEVOBJ_bUnloadImage at win32ss\gdi\eng\ldevobj.c:290 is UNIMPLEMENTED! (ntoskrnl\ke\bug.c:280) RealFrameCount =10 WARNING: getMacAddress at base\services\dcomlaunch\network.c:32 is UNIMPLEMENTED! (base\services\dcomlaunch\network.c:136) Failed finding a proper MAC address, will generate seed (ntoskrnl\ps\query.c:2303) NtSetInformationThread(ThreadInformationClass: ThreadNameInformation): Class validation failed! (Status: 0xc0000003) (base\system\services\services.c:185) ScmLogEvent: RegisterEventSourceW failed 1722 (ntoskrnl\mm\ARM3\virtual.c:5719) MM:MmGetPhysicalAddressFailed base address was E1638000 (win32ss\reactx\ntddraw\dxeng.c:286) ReactX Calling : DxEngGetHdevData, Type: 12 (win32ss\reactx\ntddraw\dxeng.c:289) hDev: E161F008 (win32ss\reactx\ntddraw\dxeng.c:343) requested DxEGShDevData_display (win32ss\reactx\ntddraw\dxeng.c:376) retVal: 00000001 (win32ss\reactx\ntddraw\dxeng.c:286) ReactX Calling : DxEngGetHdevData, Type: 7 (win32ss\reactx\ntddraw\dxeng.c:289) hDev: E161F008 (win32ss\reactx\ntddraw\dxeng.c:323) requested DxEGShDevData_eddg (win32ss\reactx\ntddraw\dxeng.c:376) retVal: e161f8f0 (win32ss\reactx\ntddraw\dxeng.c:286) ReactX Calling : DxEngGetHdevData, Type: 6 (win32ss\reactx\ntddraw\dxeng.c:289) hDev: E161F008 (win32ss\reactx\ntddraw\dxeng.c:319) requested DxEGShDevData_dhpdev (win32ss\reactx\ntddraw\dxeng.c:376) retVal: e1622000 (win32ss\reactx\ntddraw\dxeng.c:534) ReactX Calling : DxEngLockHdev (win32ss\reactx\ntddraw\dxeng.c:536) hDev: E161F008 (win32ss\reactx\ntddraw\dxeng.c:286) ReactX Calling : DxEngGetHdevData, Type: 5 (win32ss\reactx\ntddraw\dxeng.c:289) hDev: E161F008 (win32ss\reactx\ntddraw\dxeng.c:315) requested DxEGShDevData_DrvFuncs (win32ss\reactx\ntddraw\dxeng.c:376) retVal: e161f2f4 (win32ss\reactx\ntddraw\dxeng.c:286) ReactX Calling : DxEngGetHdevData, Type: 9 (win32ss\reactx\ntddraw\dxeng.c:289) hDev: E161F008 (win32ss\reactx\ntddraw\dxeng.c:331) requested DxEGShDevData_dd_flags (win32ss\reactx\ntddraw\dxeng.c:376) retVal: 00000000 (win32ss\reactx\ntddraw\dxeng.c:571) ReactX Calling : DxEngUnlockHdev err:(win32ss\user\user32\windows\cursoricon.c:274) Loading System Cursors (base\system\services\services.c:185) ScmLogEvent: RegisterEventSourceW failed 1722 err:(win32ss\user\user32\misc\dllmain.c:607) hIconSmWindows 0002006C hIconWindows 0002006A (win32ss\user\ntuser\callback.c:1149) err: hIconSmWindows 0002006C hIconWindows 0002006A (win32ss\user\ntuser\desktop.c:3335) err: Attempted to change thread desktop although the thread has windows! Access violation - code c0000005 (!!! second chance !!!) nv3_f54c2000!DrvSetPointerShape+0x23: f54d4769 8b4710 mov eax,dword ptr [edi+10h] kd> .reload Connected to Windows Server 2003 3790 x86 compatible target at (Sat Feb 28 13:59:02.031 2026 (UTC - 9:00)), ptr64 FALSE Loading Kernel Symbols ......................................................... Loading User Symbols ................... kd> kp ChildEBP RetAddr f559666c f56c195d nv3_f54c2000!DrvSetPointerShape+0x23 f55966b8 f56c183b win32k!IntEngSetPointerShape(struct _SURFOBJ * pso = 0xe1628f98, struct _SURFOBJ * psoMask = 0x00000000, struct _SURFOBJ * psoColor = 0xe1668010, struct _XLATEOBJ * pxlo = 0xf5596720, long xHot = 0n2, long yHot = 0n2, long x = 0n960, long y = 0n600, struct _RECTL * prcl = 0xe161f490, unsigned long fl = 0x11)+0x8d [C:\fix-SURFACE_AllocSurface\win32ss\gdi\eng\mouse.c @ 642] f5596774 f5741299 win32k!GreSetPointerShape(struct HDC__ * hdc = 0x0001004a, struct HBITMAP__ * hbmMask = 0x00000000, struct HBITMAP__ * hbmColor = 0x01050053, long xHot = 0n2, long yHot = 0n2, long x = 0n960, long y = 0n600, unsigned long fl = 0x10)+0x30b [C:\fix-SURFACE_AllocSurface\win32ss\gdi\eng\mouse.c @ 767] f55967d8 f56f772c win32k!UserSetCursor(struct _CURICON_OBJECT * NewCursor = 0xbc40e078, int ForceChange = 0n0)+0x219 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 152] f5596854 f573408b win32k!DesktopWindowProc(struct _WND * Wnd = 0xbc950c20, unsigned int Msg = 0x20, unsigned int wParam = 0x20026, long lParam = 0n33554432, long * lResult = 0xf55968c8)+0x19c [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\desktop.c @ 1512] f55968fc f5733b84 win32k!co_IntSendMessageTimeoutSingle(struct HWND__ * hWnd = 0x00020026, unsigned int Msg = 0x20, unsigned int wParam = 0x20026, long lParam = 0n33554432, unsigned int uFlags = 0, unsigned int uTimeout = 0, unsigned long * uResult = 0xf5596954)+0x3bb [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1583] f5596934 f5733a54 win32k!co_IntSendMessageTimeout(struct HWND__ * hWnd = 0x00020026, unsigned int Msg = 0x20, unsigned int wParam = 0x20026, long lParam = 0n33554432, unsigned int uFlags = 0, unsigned int uTimeout = 0, unsigned long * uResult = 0xf5596954)+0x54 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1721] f5596964 f57452fb win32k!co_IntSendMessage(struct HWND__ * hWnd = 0x00020026, unsigned int Msg = 0x20, unsigned int wParam = 0x20026, long lParam = 0n33554432)+0x44 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1502] f5596a58 f57443f2 win32k!co_IntProcessMouseMessage(struct tagMSG * msg = 0xf5596ae4, int * RemoveMessages = 0xf5596b28, int * NotForUs = 0xf5596b10, long ExtraInfo = 0n0, unsigned int first = 0, unsigned int last = 0)+0x9bb [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 1703] f5596a78 f57458e5 win32k!co_IntProcessHardwareMessage(struct tagMSG * Msg = 0xf5596ae4, int * RemoveMessages = 0xf5596b28, int * NotForUs = 0xf5596b10, long ExtraInfo = 0n0, unsigned int first = 0, unsigned int last = 0)+0x52 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 1901] f5596b1c f5738330 win32k!co_MsqPeekHardwareMessage(struct _THREADINFO * pti = 0xb0c9f008, int Remove = 0n1, struct _WND * Window = 0x00000000, unsigned int MsgFilterLow = 0, unsigned int MsgFilterHigh = 0, unsigned int QSflags = 0x4ff, struct tagMSG * pMsg = 0xf5596c14)+0x265 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 2009] f5596b94 f5737e81 win32k!co_IntPeekMessage(struct tagMSG * Msg = 0xf5596c14, struct _WND * Window = 0x00000000, unsigned int MsgFilterMin = 0, unsigned int MsgFilterMax = 0, unsigned int RemoveMsg = 0x4ff0001, long * ExtraInfo = 0xf5596bd0, int bGMSG = 0n1)+0x230 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1108] f5596be8 f56fbacc win32k!co_IntGetPeekMessage(struct tagMSG * pMsg = 0xf5596c14, struct HWND__ * hWnd = 0x00000000, unsigned int MsgFilterMin = 0, unsigned int MsgFilterMax = 0, unsigned int RemoveMsg = 0x4ff0001, int bGMSG = 0n1)+0xf1 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1274] f5596c38 f56ed47d win32k!DesktopThreadMain(void)+0x6c [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\desktop.c @ 1577] f5596c60 f575b8f5 win32k!UserSystemThreadProc(int bRemoteProcess = 0n0)+0x19d [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\csr.c @ 237] f5596cf8 8040405e win32k!NtUserCallOneParam(unsigned long Param = 0, unsigned long Routine = 0x22)+0x5e5 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\simplecall.c @ 403] f5596d10 805703c8 nt!KiSystemCallTrampoline+0x19 f5596d5c 80403ea5 nt!KiSystemServiceHandler(struct _KTRAP_FRAME * TrapFrame = 0xf5596d64, void * Arguments = 0x00a1ffe8)+0x278 [C:\fix-SURFACE_AllocSurface\ntoskrnl\ke\i386\traphdlr.c @ 1840] f5596d5c 7c93605e nt!KiFastCallEntry+0x96 00c4ff30 00000000 ntdll!KiFastSystemCallRet kd> !analyze -v Connected to Windows Server 2003 3790 x86 compatible target at (Sat Feb 28 13:59:43.262 2026 (UTC - 9:00)), ptr64 FALSE Loading Kernel Symbols ......................................................... Loading User Symbols ................... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Unknown bugcheck code (0) Unknown bugcheck description Arguments: Arg1: 00000000 Arg2: 00000000 Arg3: 00000000 Arg4: e43c8675 Debugging Details: ------------------ PROCESS_NAME: csrss.exe FAULTING_IP: nv3_f54c2000!DrvSetPointerShape+23 f54d4769 8b4710 mov eax,dword ptr [edi+10h] EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff) ExceptionAddress: f54d4769 (nv3_f54c2000!DrvSetPointerShape+0x00000023) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 00000000 Parameter[1]: 00000010 Attempt to read from address 00000010 ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s. EXCEPTION_PARAMETER1: 00000000 EXCEPTION_PARAMETER2: 00000010 READ_ADDRESS: 00000010 FOLLOWUP_IP: nv3_f54c2000!DrvSetPointerShape+23 f54d4769 8b4710 mov eax,dword ptr [edi+10h] BUGCHECK_STR: ACCESS_VIOLATION DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from f56c195d to f54d4769 STACK_TEXT: f559666c f56c195d e1628f98 00000000 e1668010 nv3_f54c2000!DrvSetPointerShape+0x23 f55966b8 f56c183b e1628f98 00000000 e1668010 win32k!IntEngSetPointerShape+0x8d [C:\fix-SURFACE_AllocSurface\win32ss\gdi\eng\mouse.c @ 642] f5596774 f5741299 0001004a 00000000 01050053 win32k!GreSetPointerShape+0x30b [C:\fix-SURFACE_AllocSurface\win32ss\gdi\eng\mouse.c @ 767] f55967d8 f56f772c f55968fc f5596868 cccccccc win32k!UserSetCursor+0x219 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 152] f5596854 f573408b 00020026 02000000 f55968c8 win32k!DesktopWindowProc+0x19c [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\desktop.c @ 1512] f55968fc f5733b84 00020026 02000000 00000000 win32k!co_IntSendMessageTimeoutSingle+0x3bb [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1583] f5596934 f5733a54 00020026 02000000 00000000 win32k!co_IntSendMessageTimeout+0x54 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1721] f5596964 f57452fb 00020026 02000000 f5596ad0 win32k!co_IntSendMessage+0x44 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1502] f5596a58 f57443f2 f5596ae4 f5596b28 f5596b10 win32k!co_IntProcessMouseMessage+0x9bb [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 1703] f5596a78 f57458e5 f5596ae4 f5596b28 f5596b10 win32k!co_IntProcessHardwareMessage+0x52 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 1901] f5596b1c f5738330 b0c9f008 00000001 00000000 win32k!co_MsqPeekHardwareMessage+0x265 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\msgqueue.c @ 2009] f5596b94 f5737e81 f5596c14 00000000 00000000 win32k!co_IntPeekMessage+0x230 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1108] f5596be8 f56fbacc f5596c14 00000000 00000000 win32k!co_IntGetPeekMessage+0xf1 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\message.c @ 1274] f5596c38 f56ed47d f5596c6c cccccccc 00000002 win32k!DesktopThreadMain+0x6c [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\desktop.c @ 1577] f5596c60 f575b8f5 00000000 f5596d08 00a1fff0 win32k!UserSystemThreadProc+0x19d [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\csr.c @ 237] f5596cf8 8040405e 00000000 00000022 f5880d5c win32k!NtUserCallOneParam+0x5e5 [C:\fix-SURFACE_AllocSurface\win32ss\user\ntuser\simplecall.c @ 403] f5596d10 805703c8 f575b310 00a1ffe8 00000008 nt!KiSystemCallTrampoline+0x19 f5596d5c 80403ea5 00a1fff4 7c93605e badb0d00 nt!KiSystemServiceHandler+0x278 [C:\fix-SURFACE_AllocSurface\ntoskrnl\ke\i386\traphdlr.c @ 1840] f5596d5c 7c93605e 00a1fff4 7c93605e badb0d00 nt!KiFastCallEntry+0x96 00c4ff30 00000000 00000000 00000000 00000000 ntdll!KiFastSystemCallRet STACK_COMMAND: kb SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: nv3_f54c2000!DrvSetPointerShape+23 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nv3_f54c2000 IMAGE_NAME: nv3.dll DEBUG_FLR_IMAGE_TIMESTAMP: 3b7dfec3 FAILURE_BUCKET_ID: ACCESS_VIOLATION_nv3_f54c2000!DrvSetPointerShape+23 BUCKET_ID: ACCESS_VIOLATION_nv3_f54c2000!DrvSetPointerShape+23 Followup: MachineOwner ---------