PANIC_STACK_SWITCH

Code: 0x2b (43)

As HRESULT:

S: 0 (Success)
C: 0 (Microsoft-defined)
N: 0 (Not an NTSTATUS value)
Facility: 0x000 (FACILITY_NULL: Default)
Code: 0x002b (43)

As NTSTATUS:

Sev: 0 (STATUS_SEVERITY_SUCCESS)
C: 0 (Microsoft-defined)
Facility: 0x000 (Default)
Code: 0x002b (43)

Parameters

Parameter	Description
1	The trap frame
2	Reserved
3	Reserved
4	Reserved

Description

The PANIC_STACK_SWITCH bug check has a value of 0x0000002B. This indicates that the kernel mode stack was overrun.

Important
This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.

Cause

This error normally appears when a kernel-mode driver uses too much stack space. It can also appear when serious data corruption occurs in the kernel.

Resolution

The !analyze debug extension displays information about the bug check and can be helpful in determining the root cause.

Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.

Associated Modules

Module	Code	Found in	Description
EhStorAuthn.exe	0x2b	7	Feature is not supported
EventCreate.exe	0x2b	78.11011	%1
WinMgmtR.dll	0x2b	1011	Windows Management Instrumentation ADAP failed to connect to namespace %1 with the following error %2
cipher.exe	0x2b	78.11011	To remove as much data as possible, please close all other applications while running CIPHER /W.
compact.exe	0x2b	1011	Skipping processing of virtual directory %1
dsreg.dll	0x2b	1011	Unable to retrieve account information for security identifier (SID) %1. Error: %2
dssec.dll	0x2b	78.11011	Peek message
ehepgres.dll	0x2b	7	%1
hvloader.dll	0x2b	11	Hypervisor launch failed; EL2 not present.
nslookup.exe	0x2b	78.11011	Default Server:
reagentc.exe	0x2b	8.11011	%1: The description file cannot be found.
repair-bde.exe	0x2b	1011	Successfully created repair context.
sc.exe	0x2b	78.11011
w32time.dll	0x2b	1011	The time provider '%1' returned an error when notified of a network configuration change. The error will be ignored. The error was: %2
webservices.dll	0x2b	78.11011	The received To header '%1' did not match the endpoint URL '%2'.
wecutil.exe	0x2b	78.11011	Displays remote subscription configuration information. Usage: wecutil { gs \| get-subscription } SUBSCRIPTION_ID [/OPTION:VALUE [/OPTION:VALUE] ...] SUBSCRIPTION_ID String that uniquely identifies a subscription, specified by the tag of the XML configuration file used to create the subscription Options: You can use either the short (i.e. /f) or long (i.e. /format) version of the option names. Options and their values are case-insensitive. /f:VALUE (format) VALUE can be XML or Terse. If VALUE is XML, print output in XML. If VALUE is Terse (default), print value as name-value pairs. /u:VALUE (unicode) Display output in unicode (UTF-16). VALUE can be true or false. If VALUE is true then output is in Unicode. Example: Output configuration information on a subscription named sub1. wecutil gs sub1 Example output: Subscription Id: sub1 SubscriptionType: CollectorInitiated Description: Push Collector Initiated Subscription Enabled: true Uri: http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog ConfigurationMode: Custom DeliveryMode: Push DeliveryMaxItems: 1 DeliveryMaxLatencyTime: 1000 HostName: thisMachine.myDomain.com HeartbeatInterval: 60000 Expires: 2010-01-01T00:00:00.000Z Query: ReadExistingEvents: true TransportName: http ContentFormat: RenderedText Locale: en-US LogFile: ForwardedEvents CredentialsType: Default CommonUserName: Administrator CommonUserPassword: * EventSource[0]: Address: mySource.myDomain.com Enabled: true UserName: myUserName UserPassword: * EventSource[1]: Address: mySource1.myDomain.com Enabled: true UserName: myUserName UserPassword: *
wevtutil.exe	0x2b	78.11011	Displays event log configuration information, including whether the log is enabled, the current maximum size limit of the log and the path to the file where the log is stored. Usage: wevtutil { gl \| get-log } [/OPTION:VALUE [/OPTION:VALUE] ...] String that uniquely identifies a log. You can display a list of all the log names by running wevtutil el. Options: You can use either the short (for example, /f) or long (for example, /format) version of the option names. Options and their values are not case-sensitive. /{f \| format}:[XML\|Text] Specify the log file format. The default is Text. If XML is specified, output is stored in XML format. If Text is specified, output is stored without XML tags. Example: The following example displays configuration information about the local System log in XML format. wevtutil gl System /f:xml
whealogr.dll	0x2b	71011	A corrected hardware error has occurred. Component: PCI/PCI-X Bus Error Source: %1 Error Type: %5 The details view of this entry contains further information.
win32k.sys	0x2b	78.1	InactiveBorder
win32kbase.sys	0x2b	1011	InactiveBorder
wuaueng.dll	0x2b	1011	Installation Started: Windows has started installing the following update: %1
wuauengcore.dll	0x2b	11	Installation Started: Windows has started installing the following update: %1
22 entries