Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Microsoft (R) Windows Debugger Version 10.0.22621.1 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [E:\Desktop\072222-66296-01.dmp]
- Mini Kernel Dump File: Only registers and stack trace are available
- Symbol search path is: srv*
- Executable search path is:
- Windows 10 Kernel Version 19041 MP (8 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
- Machine Name:
- Kernel base = 0xfffff802`2fe00000 PsLoadedModuleList = 0xfffff802`30a2a230
- Debug session time: Fri Jul 22 17:47:50.440 2022 (UTC + 3:00)
- System Uptime: 0 days 17:49:45.083
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ................................................................
- ...............
- Loading User Symbols
- Loading unloaded module list
- .................
- For analysis of this file, run !analyze -v
- 4: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- IRQL_NOT_LESS_OR_EQUAL (a)
- An attempt was made to access a pageable (or completely invalid) address at an
- interrupt request level (IRQL) that is too high. This is usually
- caused by drivers using improper addresses.
- If a kernel debugger is available get the stack backtrace.
- Arguments:
- Arg1: ffffffffffffffd0, memory referenced
- Arg2: 0000000000000002, IRQL
- Arg3: 0000000000000001, bitfield :
- bit 0 : value 0 = read operation, 1 = write operation
- bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
- Arg4: fffff80230033386, address which referenced memory
- Debugging Details:
- ------------------
- *** WARNING: Unable to verify timestamp for win32k.sys
- KEY_VALUES_STRING: 1
- Key : Analysis.CPU.mSec
- Value: 3405
- Key : Analysis.DebugAnalysisManager
- Value: Create
- Key : Analysis.Elapsed.mSec
- Value: 35813
- Key : Analysis.Init.CPU.mSec
- Value: 2921
- Key : Analysis.Init.Elapsed.mSec
- Value: 100570
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 91
- Key : WER.OS.Branch
- Value: vb_release
- Key : WER.OS.Timestamp
- Value: 2019-12-06T14:06:00Z
- Key : WER.OS.Version
- Value: 10.0.19041.1
- FILE_IN_CAB: 072222-66296-01.dmp
- BUGCHECK_CODE: a
- BUGCHECK_P1: ffffffffffffffd0
- BUGCHECK_P2: 2
- BUGCHECK_P3: 1
- BUGCHECK_P4: fffff80230033386
- WRITE_ADDRESS: fffff80230afb390: Unable to get MiVisibleState
- Unable to get NonPagedPoolStart
- Unable to get NonPagedPoolEnd
- Unable to get PagedPoolStart
- Unable to get PagedPoolEnd
- unable to get nt!MmSpecialPagesInUse
- ffffffffffffffd0
- BLACKBOXBSD: 1 (!blackboxbsd)
- BLACKBOXNTFS: 1 (!blackboxntfs)
- BLACKBOXPNP: 1 (!blackboxpnp)
- BLACKBOXWINLOGON: 1
- CUSTOMER_CRASH_COUNT: 1
- PROCESS_NAME: System
- TRAP_FRAME: ffff9683c925f530 -- (.trap 0xffff9683c925f530)
- NOTE: The trap frame does not contain all registers.
- Some register values may be zeroed or incorrect.
- rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
- rdx=00000000746c6644 rsi=0000000000000000 rdi=0000000000000000
- rip=fffff80230033386 rsp=ffff9683c925f6c0 rbp=0000000000000006
- r8=0000000000000002 r9=0000000001d89dda r10=fffff80230033340
- r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei pl zr na po nc
- nt!ObfDereferenceObjectWithTag+0x26:
- fffff802`30033386 f0480fc15ed0 lock xadd qword ptr [rsi-30h],rbx ds:ffffffff`ffffffd0=????????????????
- Resetting default scope
- STACK_TEXT:
- ffff9683`c925f3e8 fffff802`3020a569 : 00000000`0000000a ffffffff`ffffffd0 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
- ffff9683`c925f3f0 fffff802`30206869 : 00000000`00000000 00000000`00000001 00000000`00000000 ffff8680`3f480100 : nt!KiBugCheckDispatch+0x69
- ffff9683`c925f530 fffff802`30033386 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x469
- ffff9683`c925f6c0 fffff802`3003334e : ffffc98c`20e8caf0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObfDereferenceObjectWithTag+0x26
- ffff9683`c925f700 fffff802`4b52a218 : 00000000`00000001 ffff8680`3f480180 ffffc98c`0bf381e0 ffffc98c`185d6080 : nt!HalPutDmaAdapter+0xe
- ffff9683`c925f730 fffff802`4b52a190 : 00000000`00000000 ffffc98c`159b8de0 00000000`00000000 ffffc98c`0bff6080 : afd!AfdDerefPollInfoFileObjects+0x48
- ffff9683`c925f760 fffff802`4b52adee : 00000000`00000002 ffffc98c`20e8cb10 ffff8680`3f480180 ffff9683`c925fa10 : afd!AfdCompletePollIrp+0x74
- ffff9683`c925f7b0 fffff802`30022782 : ffffc98c`20e8cb50 ffff8680`3f480180 ffff8680`3f480180 00000000`00000002 : afd!AfdTimeoutPoll+0x2e
- ffff9683`c925f7e0 fffff802`300c9bfd : 00000000`00000000 00000000`00000000 00000000`00140001 00000000`00255c6a : nt!KiProcessExpiredTimerList+0x172
- ffff9683`c925f8d0 fffff802`301fc0fe : 00000000`00000000 ffff8680`3f480180 ffff8680`3f48b240 ffffc98c`0c0e60c0 : nt!KiRetireDpcList+0x5dd
- ffff9683`c925fb60 00000000`00000000 : ffff9683`c9260000 ffff9683`c9259000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x9e
- SYMBOL_NAME: afd!AfdDerefPollInfoFileObjects+48
- MODULE_NAME: afd
- IMAGE_NAME: afd.sys
- IMAGE_VERSION: 10.0.19041.1767
- STACK_COMMAND: .cxr; .ecxr ; kb
- BUCKET_ID_FUNC_OFFSET: 48
- FAILURE_BUCKET_ID: AV_afd!AfdDerefPollInfoFileObjects
- OS_VERSION: 10.0.19041.1
- BUILDLAB_STR: vb_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {9a846440-a090-65b4-c1d4-bc8c6183377b}
- Followup: MachineOwner
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement