Share via

Win2012R2: STOP 0x139 or 0xD1 in NETIO!NsiEnumerateObjectsAllParametersEx+0x20d

  • Article

Status: Resolved

150516: Finally: https://support.microsoft.com/en-us/kb/3055343 has the updated version. Please install at earliest convenience!

150512: to all affected, please bear with us a few more days, until the new release is out. This should be later this week, or early next week. As soon as the hotfix is available, I will update this post.

150501: Thanks to all of you who sent me additional dumps for this. There have been additional releases of netcfgx.dll, for example in 3021052, and as part of the March Rollup. This explains why some of you started seeing this issue after March/April updates. Checking internally shows that the various issues seen in the dumps provided should be resolved with the May (REL15-05) release of netcfgx.dll. The root cause of the problem allows for this issue to exhibit itself in many different froms, which explains the various dumps and workarounds found by some of you. Stay tuned for the mid-May release! I will update here once it's available.

150429: one of my readers sent me that they had 0x139s after the April updates, like some of you are seem to be having. They appear to have resolved it by recreating their virtual switch. I suggest that if applicable you also try this step and share results.

150417: I only mentioned the workaround (uninstall KB2966087) below in the comments. Adding it here now. Note that this fix was encompassed in KB2975719, so if you do not have the first one installed check for the latter, which is the August Rollup.

150415: one of the blog readers sent me a minidump of a STOP 0x139 on Windows Server 2012 that might be confused with this issue. Do note that the issue below is specific to 2012R2. The 2012 issue was:

2883658 "0x00000139" Stop error on a Windows Server 2012-based computer that has many TCP connections
https://support.microsoft.com/kb/2883658/EN-US

Recently we're seeing quite a few STOP 0x139/0xD1 errors, where the 0x139 stack is below:

00 ffffd000`748c5fc8 fffff803`7b3d14e9 nt!KeBugCheckEx
01 ffffd000`748c5fd0 fffff803`7b3d1810 nt!KiBugCheckDispatch+0x69
02 ffffd000`748c6110 fffff803`7b3d0a34 nt!KiFastFailDispatch+0xd0
03 ffffd000`748c62f0 fffff800`6a2ee3b1 nt!KiRaiseSecurityCheckFailure+0xf4
04 ffffd000`748c6480 fffff800`6a209308 NDIS!ndisNsiEnumerateAllInterfaceInformation+0x24c51
05 ffffd000`748c65a0 fffff800`6b264fc1 NETIO!NsiEnumerateObjectsAllParametersEx+0x20d
06 ffffd000`748c6790 fffff800`6b264bea nsiproxy!NsippEnumerateObjectsAllParameters+0x201
07 ffffd000`748c6980 fffff803`7b6223ef nsiproxy!NsippDispatch+0x5a
08 ffffd000`748c69c0 fffff803`7b62198e nt!IopXxxControlFile+0xa4f
09 ffffd000`748c6b60 fffff803`7b3d11b3 nt!NtDeviceIoControlFile+0x56
0a ffffd000`748c6bd0 00007ff9`3d890dfa nt!KiSystemServiceCopyEnd+0x13

The issue is caused by a problem in netcfgx.dll. We currently have an internal repro, and we expect to resolve this in REL15-05 timeframe.

Note that this issue could also manifest itself as a STOP 0x3B.

As always, reach out when you have this issue!

Comments

  • Anonymous
    January 01, 2003
    Thank you for the useful information.
  • Anonymous
    January 01, 2003
    @Goose: workaround is to uninstall KB2966087 for now, until the new fix is available.
  • Anonymous
    January 01, 2003
    @Koen: if you see an issue without KB2966087, it is likely a different issue. Please open a support case with us for further investigation.
  • Anonymous
    January 01, 2003
    Can I get on the list to be notified when there is a resolution?
  • Anonymous
    January 01, 2003
    @smarty: ok, that version is later than KB 2975719, so it should be good.
  • Anonymous
    January 01, 2003
    No crashes since the patch!!!!!
  • Anonymous
    March 26, 2015
    I have this Problem avery 24h too.
    This began on 23th march after Windows Updates.
  • Anonymous
    April 01, 2015
    Same here win8.1 x64 after 23th march update
  • Anonymous
    April 05, 2015
    @Rob Scheepens , Could you provide more details, this update is not installed on my machine, but the problem remains
  • Anonymous
    April 20, 2015
    So, is the workaround now to remove the entire August 2014 rollup (KB2975719)? That's an awful lot of updates...
  • Anonymous
    April 27, 2015
    What does REL15-05? I do not understand. This means May 2015 or 2015.05.15?
  • Anonymous
    April 27, 2015
    Same here win8.1 x64 KERNEL_SECURITY_CHECK_FAILURE bug check 0x00000139.
    But the fact is that KB2975719 was installed 2014.09.06 whereas problem emerged a week ago - before everything was fine. So some of the recent update was the trigger. My minidump is here - ihttp://goo.gl/TRUCjz
    Subj work like a charm with Ubuntu. I especially left it running for a few days. No problem...
  • Anonymous
    April 27, 2015
    Got this Problem either. It started on April 03rd. For one week it always happend at least 1x in 24h. but suddenly it starts to happen every 15 minutes :(
  • Anonymous
    April 27, 2015
    @smarty: REL15-05 means the release cycle of month 05 (May) in year 15.
  • Anonymous
    April 28, 2015
    @smarty: what version of netcfgx.dll do you have on the machine? Further troubleshooting would require a support case.
  • Anonymous
    April 28, 2015
    @Zetup-EXE: sorry to see you're affected by this in the way you describe. For assistance, please open a support case.
  • Anonymous
    April 28, 2015
    to Rob Scheepens
    "CompanyName", "Microsoft Corporation"
    "FileDescription", "Network Configuration Objects"
    "FileVersion", "6.3.9600.17415 (winblue_r4.141028-1500)"
    "InternalName", "netcfgx.dll"
    "LegalCopyright", "© Microsoft Corporation. All rights reserved."
    "OriginalFilename", "netcfgx.dll"
    "ProductName", "Microsoft® Windows® Operating System"
    "ProductVersion", "6.3.9600.17415"
  • Anonymous
    April 29, 2015
    sfc / scannow cannot find anything suspicious, but the problem continues :-(
  • Anonymous
    April 29, 2015
    It starts to annoy me already
  • Anonymous
    April 30, 2015
    We have this stop code every week in our company. Happens only on Direct Access enabled computer.
  • Anonymous
    May 09, 2015
    I had this issue reoccur recently when trying the Office 2016 preview. I've been BSOD'ing every 20 minutes.
  • Anonymous
    May 11, 2015
    Windows 8.1 Pro
    A similar problem. BSOD exactly every 10 minutes, if the computer is turned on and left alone. If i work on computer, then BSOD randomly (5-6 times a day)
  • Anonymous
    May 11, 2015
    I've been getting this problem for the past few weeks, and it is increasing in frequency. It seems to happen almost every night now. I have a dump file, but unfortunately I had it set to complete rather than kernel dump, so it's 16GB. Compressed, it's 10GB. There's no way I can upload that in a reasonable timeframe on my <1Mbps upload connection, especially if my machine BSODs again. If the May updates don't fix the issue I'll upload a kernel dump file.
  • Anonymous
    May 12, 2015
    A few days ago I had this BSOD for the third or fourth time. It occurred the first time about half a year ago. Luckily it happens relatively infrequently (compared to the other reports here). Still, it's pretty annoying and I am glad a fix is coming soon.
  • Anonymous
    May 12, 2015
    It's a bit ominous that you've had an internal repro for a month or more, and the patch doesn't make it in time for Patch Tuesday. Do you know if the update will hit Windows Update as it's released, or will it be a hotfix KB that we have to manually install?
  • Anonymous
    May 12, 2015
    Good reason not to patch soon after release of updates
  • Anonymous
    May 27, 2015
    Wanted to stop by with a thank you for the insight and even more the fix.
    No more daily tilts since aaplying the hotfix. So far no sideeffects from it either.
    Much appreciated.
  • Anonymous
    June 02, 2015
    @Mark T. Scott: A patch - Where? :)