(win32ss\user\ntuser\msgqueue.c:1213) err: MsqSendMessage (blocked) timed out 1 Status 102
(sdk\lib\rtl\heap.c:4088) RtlSetHeapInformation() needs to enable LFH
(win32ss\gdi\eng\device.c:695) err: Could not open device \Device\Video1, 0xc0000022
(win32ss\gdi\eng\device.c:695) err: Could not open device \Device\Video1, 0xc0000022
(win32ss\gdi\eng\device.c:695) err: Could not open device \Device\Video1, 0xc0000022
(win32ss\gdi\eng\device.c:695) err: Could not open device \Device\Video1, 0xc0000022
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(ntoskrnl\ex\work.c:355) EX: Work Queue Deadlock detected: 1
(ntoskrnl\ex\work.c:357) Dynamic threads queued 10
(ntoskrnl\mm\ARM3\mdlsup.c:74) FIXME: Need to check for large pages
(win32ss\user\ntuser\msgqueue.c:2354) err: MQ Cleanup Post Messages FFFFF8A0012F2D90
Assertion D:\current_master\reactos\ntoskrnl\mm\ARM3\mdlsup.c(353): MiIsPteOnPdeBoundary(PointerPte + 1) || (NumberOfPages == 1)
nt!MiUnmapLockedPagesInUserSpace+0x3f9:
fffff800`004f3329 cd2c            int     2Ch
kd> .reload
Connected to Windows Server 2003 3790 x64 target at (Thu Jul 23 12:34:13.786 2026 (UTC - 8:00)), ptr64 TRUE
Loading Kernel Symbols
...........................................................
Loading User Symbols
................................
*** ERROR: Module load completed but symbols could not be loaded for wglgears.exe
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nvoglnt.DLL - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nv4_disp.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nv4_mini.sys - 
kd> kp
Child-SP          RetAddr           Call Site
fffff880`719b2820 fffff800`004f62a0 nt!MiUnmapLockedPagesInUserSpace(void * BaseAddress = 0x00000000`02fff000, struct _MDL * Mdl = 0xfffffa81`85579000)+0x3f9 [D:\current_master\reactos\ntoskrnl\mm\ARM3\mdlsup.c @ 353]
fffff880`719b28d0 fffff880`751f462f nt!MmUnmapLockedPages(void * BaseAddress = 0x00000000`02ec0000, struct _MDL * Mdl = 0xfffffa81`85579000)+0x3a0 [D:\current_master\reactos\ntoskrnl\mm\ARM3\mdlsup.c @ 924]
fffff880`719b2970 fffff880`752340ec nv4_mini+0x5e62f
fffff880`719b29a0 fffff880`75203fff nv4_mini+0x9e0ec
fffff880`719b2a00 fffff880`7520335a nv4_mini+0x6dfff
fffff880`719b2a70 fffff880`752079de nv4_mini+0x6d35a
fffff880`719b2b10 fffff880`751d8063 nv4_mini+0x719de
fffff880`719b2c60 fffff880`751d23f2 nv4_mini+0x42063
fffff880`719b2d00 fffff880`751d7ce7 nv4_mini+0x3c3f2
fffff880`719b2d50 fffff880`751d23f2 nv4_mini+0x41ce7
fffff880`719b2df0 fffff880`751f346f nv4_mini+0x3c3f2
fffff880`719b2e40 fffff880`7520a952 nv4_mini+0x5d46f
fffff880`719b2ea0 fffff880`7520b700 nv4_mini+0x74952
fffff880`719b2ee0 fffff880`751d24bc nv4_mini+0x75700
fffff880`719b2f30 fffff880`751d23f2 nv4_mini+0x3c4bc
fffff880`719b2f60 fffff880`751d844a nv4_mini+0x3c3f2
fffff880`719b2fb0 fffff880`75b2c1b1 nv4_mini+0x4244a
fffff880`719b3060 fffff880`7517619c nv4_mini!nvDumpConfig+0x97189
fffff880`719b31b0 fffff880`75174223 VIDEOPRT!VideoPortForwardDeviceControl(struct _DEVICE_OBJECT * DeviceObject = 0xfffffa81`86033080, struct _IRP * Irp = 0xfffffa81`855ddc90)+0x1ac [D:\current_master\reactos\win32ss\drivers\videoprt\dispatch.c @ 730]
fffff880`719b3270 fffff800`0049ebdf VIDEOPRT!IntVideoPortDispatchDeviceControl(struct _DEVICE_OBJECT * DeviceObject = 0xfffffa81`86033080, struct _IRP * Irp = 0xfffffa81`855ddc90)+0x723 [D:\current_master\reactos\win32ss\drivers\videoprt\dispatch.c @ 882]
fffff880`719b3320 fffff880`72bef012 nt!IofCallDriver(struct _DEVICE_OBJECT * DeviceObject = 0xfffffa81`86033080, struct _IRP * Irp = 0xfffffa81`855ddc90)+0xdf [D:\current_master\reactos\ntoskrnl\io\iomgr\irp.c @ 1288]
fffff880`719b3380 fffff880`725a6e4b win32k!EngDeviceIoControl(void * hDevice = 0xfffffa81`86033080, unsigned long dwIoControlCode = 0x80002000, void * lpInBuffer = 0xfffff880`719b34d8, unsigned long cjInBufferSize = 8, void * lpOutBuffer = 0xfffff880`719b34a0, unsigned long cjOutBufferSize = 0x10, unsigned long * lpBytesReturned = 0xfffff880`719b34d0)+0x182 [D:\current_master\reactos\win32ss\gdi\eng\device.c @ 1031]
fffff880`719b3460 fffff880`725a68fd nv4_disp+0x77be4b
fffff880`719b34d0 fffff880`72bf236a nv4_disp+0x77b8fd
fffff880`719b3510 fffff880`72d2aa42 win32k!DRIVEROBJ_vCleanup(void * pObject = 0xfffff8a0`004babc0)+0x3a [D:\current_master\reactos\win32ss\gdi\eng\driverobj.c @ 32]
fffff880`719b3560 fffff880`72d2a913 win32k!GDIOBJ_vFreeObject(struct _BASEOBJECT * pobj = 0xfffff8a0`004babc0)+0xb2 [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 625]
fffff880`719b35b0 fffff880`72d2a75a win32k!GDIOBJ_vDereferenceObject(struct _BASEOBJECT * pobj = 0xfffff8a0`004babc0)+0x1a3 [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 679]
fffff880`719b3610 fffff880`72d2afb3 win32k!GDIOBJ_vDeleteObject(struct _BASEOBJECT * pobj = 0xfffff8a0`004babc0)+0x9a [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 1149]
fffff880`719b3650 fffff880`72d2ddfa win32k!GDI_CleanupForProcess(struct _EPROCESS * Process = 0xfffffa81`85665af0)+0x103 [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 1624]
fffff880`719b36d0 fffff880`72c12615 win32k!GdiProcessDestroy(struct _EPROCESS * Process = 0xfffffa81`85665af0)+0x9a [D:\current_master\reactos\win32ss\gdi\ntgdi\init.c @ 58]
fffff880`719b3720 fffff880`72c14f0e win32k!ExitProcessCallback(struct _EPROCESS * Process = 0xfffffa81`85665af0)+0x1c5 [D:\current_master\reactos\win32ss\user\ntuser\main.c @ 329]
fffff880`719b3790 fffff800`005668a5 win32k!Win32kProcessCallback(struct _EPROCESS * Process = 0xfffffa81`85665af0, unsigned char Initialize = 0x00 '')+0xfe [D:\current_master\reactos\win32ss\user\ntuser\main.c @ 360]
fffff880`719b37e0 fffff800`00567314 nt!PspExitThread(long ExitStatus = 0n0)+0xb95 [D:\current_master\reactos\ntoskrnl\ps\kill.c @ 763]
fffff880`719b39b0 fffff800`00565014 nt!PspTerminateThreadByPointer(struct _ETHREAD * Thread = 0xfffffa81`85662bc0, long ExitStatus = 0n0, unsigned char bSelf = 0x01 '')+0xe4 [D:\current_master\reactos\ntoskrnl\ps\kill.c @ 1030]
fffff880`719b3a20 fffff800`004056b2 nt!NtTerminateProcess(void * ProcessHandle = 0xffffffff`ffffffff, long ExitStatus = 0n0)+0x1f4 [D:\current_master\reactos\ntoskrnl\ps\kill.c @ 1260]
fffff880`719b3ab0 000007ff`b70670f8 nt!KiSystemCallEntry64+0xe0
00000000`0022fc98 000007ff`b601fcea ntdll!ZwTerminateProcess+0xa
00000000`0022fca0 000007ff`b504ecaa kernel32!ExitProcess(unsigned int uExitCode = 0)+0xea [D:\current_master\reactos\dll\win32\kernel32\client\proc.c @ 1356]
00000000`0022fe30 00000000`00000000 msvcrt!exit(int exitcode = 0n0)+0xfa [D:\current_master\reactos\dll\win32\msvcrt\exit.c @ 383]
kd> !analyze -v
Connected to Windows Server 2003 3790 x64 target at (Thu Jul 23 12:35:15.016 2026 (UTC - 8:00)), ptr64 TRUE
Loading Kernel Symbols
...........................................................
Loading User Symbols
................................
*** ERROR: Module load completed but symbols could not be loaded for wglgears.exe
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nvoglnt.DLL - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nv4_disp.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nv4_mini.sys - 
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Unknown bugcheck code (0)
Unknown bugcheck description
Arguments:
Arg1: 0000000000000000
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 00000000e43c8675

Debugging Details:
------------------


PROCESS_NAME:  wglgears.exe

FAULTING_IP: 
nt!MiUnmapLockedPagesInUserSpace+3f9 [D:\current_master\reactos\ntoskrnl\mm\ARM3\mdlsup.c @ 353]
fffff800`004f3329 cd2c            int     2Ch

EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: fffff800004f3329 (nt!MiUnmapLockedPagesInUserSpace+0x00000000000003f9)
   ExceptionCode: c0000420 (Assertion failure)
  ExceptionFlags: 00000000
NumberParameters: 0
Assertion D:\current_master\reactos\ntoskrnl\mm\ARM3\mdlsup.c(353): MiIsPteOnPdeBoundary(PointerPte + 1) || (NumberOfPages == 1)

ERROR_CODE: (NTSTATUS) 0xc0000420 - An assertion failure has occurred.

EXCEPTION_CODE: (NTSTATUS) 0xc0000420 - An assertion failure has occurred.

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x0

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800004f62a0 to fffff800004f3329

STACK_TEXT:  
fffff880`719b2820 fffff800`004f62a0 : 00000000`02fff000 fffffa81`85579000 fffff880`72aaa024 cccccccc`cccccccc : nt!MiUnmapLockedPagesInUserSpace+0x3f9 [D:\current_master\reactos\ntoskrnl\mm\ARM3\mdlsup.c @ 353]
fffff880`719b28d0 fffff880`751f462f : 00000000`02ec0000 fffffa81`85579000 fffffa81`859f9d70 fffffa81`859a2bc0 : nt!MmUnmapLockedPages+0x3a0 [D:\current_master\reactos\ntoskrnl\mm\ARM3\mdlsup.c @ 924]
fffff880`719b2970 fffff880`752340ec : fffffa81`855d6be0 00000000`02ec0000 fffffa81`85f65800 fffff880`75b71008 : nv4_mini+0x5e62f
fffff880`719b29a0 fffff880`75203fff : fffffa81`855d6be0 fffff800`0042953b 00000000`00000000 00000000`00000000 : nv4_mini+0x9e0ec
fffff880`719b2a00 fffff880`7520335a : 00000000`00000000 fffffa81`8557f0e0 00000000`caf0001a fffffa81`855d6c58 : nv4_mini+0x6dfff
fffff880`719b2a70 fffff880`752079de : 00000000`beef0003 00000000`beef0003 fffffa81`8557f0e0 00000000`00000000 : nv4_mini+0x6d35a
fffff880`719b2b10 fffff880`751d8063 : 00000000`00000338 fffffa81`8557f0e0 00000000`c1d00060 00000000`00000000 : nv4_mini+0x719de
fffff880`719b2c60 fffff880`751d23f2 : 00000000`caf0001a 00000000`ffffffff fffffa81`00000041 fffffa81`85f89000 : nv4_mini+0x42063
fffff880`719b2d00 fffff880`751d7ce7 : 00000000`00000008 00000000`00000000 fffffa81`855a1298 fffffa81`855d6c40 : nv4_mini+0x3c3f2
fffff880`719b2d50 fffff880`751d23f2 : 00000000`00000000 00000000`beef0003 fffffa81`855b1a58 fffffa81`85f89000 : nv4_mini+0x41ce7
fffff880`719b2df0 fffff880`751f346f : 00000000`00000006 fffffa81`855f1d40 00000000`00000000 fffffa81`855f0ae0 : nv4_mini+0x3c3f2
fffff880`719b2e40 fffff880`7520a952 : fffffa81`855f1d40 fffffa81`86088df0 00000000`00000000 fffff880`719b2f60 : nv4_mini+0x5d46f
fffff880`719b2ea0 fffff880`7520b700 : fffff880`756cc530 00000000`d0d00000 fffff880`719b2f60 fffff880`751f48e6 : nv4_mini+0x74952
fffff880`719b2ee0 fffff880`751d24bc : 00000000`c1d00060 00000000`00000018 00000000`00000000 00000133`70354860 : nv4_mini+0x75700
fffff880`719b2f30 fffff880`751d23f2 : c1d00060`d0d00000 fffffa81`86030000 00000000`00000020 fffffa81`855f2918 : nv4_mini+0x3c4bc
fffff880`719b2f60 fffff880`751d844a : fffff880`719b34a0 fffffa81`86030000 fffff880`719b3260 fffffa81`855f2900 : nv4_mini+0x3c3f2
fffff880`719b2fb0 fffff880`75b2c1b1 : fffffa81`860333e0 fffff880`719b3208 fffff880`719b3260 00000000`00000000 : nv4_mini+0x4244a
fffff880`719b3060 fffff880`7517619c : fffffa81`0000001d fffff880`719b3208 fffff880`75188130 fffff880`75187713 : nv4_mini!nvDumpConfig+0x97189
fffff880`719b31b0 fffff880`75174223 : fffffa81`86033080 fffffa81`855ddc90 fffff880`751881c8 fffff880`75187713 : VIDEOPRT!VideoPortForwardDeviceControl+0x1ac [D:\current_master\reactos\win32ss\drivers\videoprt\dispatch.c @ 730]
fffff880`719b3270 fffff800`0049ebdf : fffffa81`86033080 fffffa81`855ddc90 fffff880`719b3450 fffff800`004d0d11 : VIDEOPRT!IntVideoPortDispatchDeviceControl+0x723 [D:\current_master\reactos\win32ss\drivers\videoprt\dispatch.c @ 882]
fffff880`719b3320 fffff880`72bef012 : fffffa81`86033080 fffffa81`855ddc90 fffff880`719b34d8 fffff800`00000008 : nt!IofCallDriver+0xdf [D:\current_master\reactos\ntoskrnl\io\iomgr\irp.c @ 1288]
fffff880`719b3380 fffff880`725a6e4b : fffffa81`86033080 fffff880`80002000 fffff880`719b34d8 00000000`00000008 : win32k!EngDeviceIoControl+0x182 [D:\current_master\reactos\win32ss\gdi\eng\device.c @ 1031]
fffff880`719b3460 fffff880`725a68fd : 00000000`00000000 fffff880`719b34a0 00000000`00000000 fffff8a0`004babd8 : nv4_disp+0x77be4b
fffff880`719b34d0 fffff880`72bf236a : fffff8a0`016395f8 00000000`00000001 00000000`002348e0 fffff800`0069b680 : nv4_disp+0x77b8fd
fffff880`719b3510 fffff880`72d2aa42 : fffff8a0`004babc0 fffff880`72d2903c fffff880`719b39a0 fffff800`00567d8b : win32k!DRIVEROBJ_vCleanup+0x3a [D:\current_master\reactos\win32ss\gdi\eng\driverobj.c @ 32]
fffff880`719b3560 fffff880`72d2a913 : fffff8a0`004babc0 00000001`00000000 00000001`00000000 00000001`00000000 : win32k!GDIOBJ_vFreeObject+0xb2 [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 625]
fffff880`719b35b0 fffff880`72d2a75a : fffff8a0`004babc0 00000000`002348e0 fffffa81`860e0b46 fffff880`72d2afb3 : win32k!GDIOBJ_vDereferenceObject+0x1a3 [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 679]
fffff880`719b3610 fffff880`72d2afb3 : fffff8a0`004babc0 fffff880`72d17b62 fffffa81`85d7cc10 fffff800`005ab306 : win32k!GDIOBJ_vDeleteObject+0x9a [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 1149]
fffff880`719b3650 fffff880`72d2ddfa : fffffa81`85665af0 fffff800`0061a160 fffff880`719b39a0 fffff800`00567dcb : win32k!GDI_CleanupForProcess+0x103 [D:\current_master\reactos\win32ss\gdi\ntgdi\gdiobj.c @ 1624]
fffff880`719b36d0 fffff880`72c12615 : fffffa81`85665af0 fffff800`0057551b 00000000`00000001 00000000`00000001 : win32k!GdiProcessDestroy+0x9a [D:\current_master\reactos\win32ss\gdi\ntgdi\init.c @ 58]
fffff880`719b3720 fffff880`72c14f0e : fffffa81`85665af0 cccccccc`cccccccc cccccccc`cccccccc cccccccc`cccccccc : win32k!ExitProcessCallback+0x1c5 [D:\current_master\reactos\win32ss\user\ntuser\main.c @ 329]
fffff880`719b3790 fffff800`005668a5 : fffffa81`85665af0 fffff880`00000000 fffff880`00000001 fffff880`719b3850 : win32k!Win32kProcessCallback+0xfe [D:\current_master\reactos\win32ss\user\ntuser\main.c @ 360]
fffff880`719b37e0 fffff800`00567314 : 002b0053`00000000 00000000`43504154 00000000`00000001 fffffa81`85665d78 : nt!PspExitThread+0xb95 [D:\current_master\reactos\ntoskrnl\ps\kill.c @ 763]
fffff880`719b39b0 fffff800`00565014 : fffffa81`85662bc0 fffffa81`00000000 fffffa81`8620ad01 cccccccc`cccccc01 : nt!PspTerminateThreadByPointer+0xe4 [D:\current_master\reactos\ntoskrnl\ps\kill.c @ 1030]
fffff880`719b3a20 fffff800`004056b2 : ffffffff`ffffffff 00000000`00000000 00000000`0022fcd0 fffff880`75fbc2be : nt!NtTerminateProcess+0x1f4 [D:\current_master\reactos\ntoskrnl\ps\kill.c @ 1260]
fffff880`719b3ab0 000007ff`b70670f8 : 000007ff`b601fcea 00000000`0022fcd0 00000000`00000000 00000000`00010003 : nt!KiSystemCallEntry64+0xe0
00000000`0022fc98 000007ff`b601fcea : 00000000`0022fcd0 00000000`00000000 00000000`00010003 00000000`00000004 : ntdll!ZwTerminateProcess+0xa
00000000`0022fca0 000007ff`b504ecaa : 000007ff`00000000 00000000`91010141 00000000`0022e458 00000000`0022fe80 : kernel32!ExitProcess+0xea [D:\current_master\reactos\dll\win32\kernel32\client\proc.c @ 1356]
00000000`0022fe30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : msvcrt!exit+0xfa [D:\current_master\reactos\dll\win32\msvcrt\exit.c @ 383]


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nv4_mini+5e62f
fffff880`751f462f 488b5c2430      mov     rbx,qword ptr [rsp+30h]

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nv4_mini+5e62f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nv4_mini

IMAGE_NAME:  nv4_mini.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5782c9f8

FAILURE_BUCKET_ID:  X64_0x0_nv4_mini+5e62f

BUCKET_ID:  X64_0x0_nv4_mini+5e62f

Followup: MachineOwner
---------