运行中蓝屏，Reference by pointer

[搬砖]

经常运行中突然蓝屏，未发现其他可疑的软硬件改动，运行过CHKDSK也未能解决，崩溃的信息如下。

[y2kim]

看蓝屏已经有新工具了

参考下面的回复内容用WinDbg Preview

更新重启就蓝屏 - 惠普支持社区 - 1066161 (hp.com)

开机出现蓝屏 - 惠普支持社区 - 1215977 (hp.com)

[搬砖]

感谢支持，新工具的分析信息如下：

Symbol search path is: srv*
Executable search path is: 
Windows 10 Kernel Version 22621 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 22621.1.amd64fre.ni_release.220506-1250
Machine Name:
Kernel base = 0xfffff805`3f000000 PsLoadedModuleList = 0xfffff805`3fc13430
Debug session time: Mon Mar 27 11:16:59.221 2023 (UTC + 8:00)
System Uptime: 4 days 17:31:11.587
Loading Kernel Symbols
...............................................................
................................................................
................................................................
............................................................
Loading User Symbols
Loading unloaded module list
..................................................
For analysis of this file, run !analyze -vnt!KeBugCheckEx:
fffff805`3f429400 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffc209`bafd6c50=0000000000000018
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

REFERENCE_BY_POINTER (18)
Arguments:
Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
Arg2: ffffd4896be61080, Object whose reference count is being lowered
Arg3: 0000000000000002, Reserved
Arg4: ffffffffffffffff, Reserved
	The reference count of an object is illegal for the current state of the object.
	Each time a driver uses a pointer to an object the driver calls a kernel routine
	to increment the reference count of the object. When the driver is done with the
	pointer the driver calls another kernel routine to decrement the reference count.
	Drivers must match calls to the increment and decrement routines. This BugCheck
	can occur because an object's reference count goes to zero while there are still
	open handles to the object, in which case the fourth parameter indicates the number
	of opened handles. It may also occur when the object's reference count drops below zero
	whether or not there are open handles to the object, and in that case the fourth parameter
	contains the actual value of the pointer references count.

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 671

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 52489

    Key  : Analysis.IO.Other.Mb
    Value: 4

    Key  : Analysis.IO.Read.Mb
    Value: 3

    Key  : Analysis.IO.Write.Mb
    Value: 38

    Key  : Analysis.Init.CPU.mSec
    Value: 265

    Key  : Analysis.Init.Elapsed.mSec
    Value: 41799

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 104

    Key  : Bugcheck.Code.DumpHeader
    Value: 0x18

    Key  : Bugcheck.Code.Register
    Value: 0x18

    Key  : WER.OS.Branch
    Value: ni_release

    Key  : WER.OS.Timestamp
    Value: 2022-05-06T12:50:00Z

    Key  : WER.OS.Version
    Value: 10.0.22621.1


FILE_IN_CAB:  032723-11484-01.dmp

BUGCHECK_CODE:  18

BUGCHECK_P1: 0

BUGCHECK_P2: ffffd4896be61080

BUGCHECK_P3: 2

BUGCHECK_P4: ffffffffffffffff

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  TranscreenServerMonitor.exe

STACK_TEXT:  
ffffc209`bafd6c48 fffff805`3f4975b9     : 00000000`00000018 00000000`00000000 ffffd489`6be61080 00000000`00000002 : nt!KeBugCheckEx
ffffc209`bafd6c50 fffff805`3f6dc1c8     : 00000000`00000001 00000000`00000001 00000000`000068d4 ffffb082`649ff350 : nt!ObfDereferenceObjectWithTag+0x1c7b19
ffffc209`bafd6c90 fffff805`3f6d98b9     : 00000000`00000000 00000000`00000000 ffffffff`800068d4 00000000`00000000 : nt!ObpCloseHandle+0x2d8
ffffc209`bafd6db0 fffff805`3f43e1e5     : ffffd489`61eac080 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtClose+0x39
ffffc209`bafd6de0 fffff805`3f42ec90     : fffff805`7a0fe85b ffffd489`56c69550 00002b76`96243e88 ffffd489`5c050c00 : nt!KiSystemServiceCopyEnd+0x25
ffffc209`bafd6f78 fffff805`7a0fe85b     : ffffd489`56c69550 00002b76`96243e88 ffffd489`5c050c00 ffffd489`69dbc170 : nt!KiServiceLinkage
ffffc209`bafd6f80 ffffd489`56c69550     : 00002b76`96243e88 ffffd489`5c050c00 ffffd489`69dbc170 ffffc209`bafd7008 : SynTP+0x4e85b
ffffc209`bafd6f88 00002b76`96243e88     : ffffd489`5c050c00 ffffd489`69dbc170 ffffc209`bafd7008 00000000`00000000 : 0xffffd489`56c69550
ffffc209`bafd6f90 ffffd489`5c050c00     : ffffd489`69dbc170 ffffc209`bafd7008 00000000`00000000 ffffd489`56c69548 : 0x00002b76`96243e88
ffffc209`bafd6f98 ffffd489`69dbc170     : ffffc209`bafd7008 00000000`00000000 ffffd489`56c69548 ffffd489`5c085b10 : 0xffffd489`5c050c00
ffffc209`bafd6fa0 ffffc209`bafd7008     : 00000000`00000000 ffffd489`56c69548 ffffd489`5c085b10 00000000`00000030 : 0xffffd489`69dbc170
ffffc209`bafd6fa8 00000000`00000000     : ffffd489`56c69548 ffffd489`5c085b10 00000000`00000030 00000000`00000000 : 0xffffc209`bafd7008


SYMBOL_NAME:  SynTP+4e85b

MODULE_NAME: SynTP

IMAGE_NAME:  SynTP.sys

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  4e85b

FAILURE_BUCKET_ID:  0x18_OVER_DEREFERENCE_SynTP!unknown_function

OS_VERSION:  10.0.22621.1

BUILDLAB_STR:  ni_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {a58cafc4-2416-c784-9b58-3d07c6c24f81}

Followup:     MachineOwner
---------

[y2kim]

触摸板驱动