API tools faq
paste
Guest User

Untitled

a guest
Nov 11th, 2018
105
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.74 KB | None | 0 0
raw download clone embed print report
  1.  
  2. Microsoft (R) Windows Debugger Version 10.0.18239.1000 AMD64
  3. Copyright (c) Microsoft Corporation. All rights reserved.
  4.  
  5.  
  6. Loading Dump File [C:\Users\luca\Downloads\Alle Bluescreen Informationen\111118-18281-01.dmp]
  7. Mini Kernel Dump File: Only registers and stack trace are available
  8.  
  9.  
  10. ************* Path validation summary **************
  11. Response Time (ms) Location
  12. Deferred srv*
  13. Symbol search path is: srv*
  14. Executable search path is:
  15. Windows 10 Kernel Version 17134 MP (8 procs) Free x64
  16. Product: WinNt, suite: TerminalServer SingleUserTS
  17. Built by: 17134.1.amd64fre.rs4_release.180410-1804
  18. Machine Name:
  19. Kernel base = 0xfffff803`35812000 PsLoadedModuleList = 0xfffff803`35bc0290
  20. Debug session time: Sun Nov 11 14:39:25.534 2018 (UTC + 1:00)
  21. System Uptime: 0 days 20:06:36.236
  22. Loading Kernel Symbols
  23. ...............................................................
  24. ................................................................
  25. .......................................................
  26. Loading User Symbols
  27. Loading unloaded module list
  28. ............
  29. *******************************************************************************
  30. * *
  31. * Bugcheck Analysis *
  32. * *
  33. *******************************************************************************
  34.  
  35. Use !analyze -v to get detailed debugging information.
  36.  
  37. BugCheck A, {100000000, 2, 0, fffff8033592c2d5}
  38.  
  39. Probably caused by : ntkrnlmp.exe ( nt!RtlAvlInsertNodeEx+65 )
  40.  
  41. Followup: MachineOwner
  42. ---------
  43.  
  44. nt!KeBugCheckEx:
  45. fffff803`359bb490 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffffd0f`181b59a0=000000000000000a
  46. 1: kd> !analyze -v
  47. *******************************************************************************
  48. * *
  49. * Bugcheck Analysis *
  50. * *
  51. *******************************************************************************
  52.  
  53. IRQL_NOT_LESS_OR_EQUAL (a)
  54. An attempt was made to access a pageable (or completely invalid) address at an
  55. interrupt request level (IRQL) that is too high. This is usually
  56. caused by drivers using improper addresses.
  57. If a kernel debugger is available get the stack backtrace.
  58. Arguments:
  59. Arg1: 0000000100000000, memory referenced
  60. Arg2: 0000000000000002, IRQL
  61. Arg3: 0000000000000000, bitfield :
  62. bit 0 : value 0 = read operation, 1 = write operation
  63. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  64. Arg4: fffff8033592c2d5, address which referenced memory
  65.  
  66. Debugging Details:
  67. ------------------
  68.  
  69.  
  70. KEY_VALUES_STRING: 1
  71.  
  72.  
  73. STACKHASH_ANALYSIS: 1
  74.  
  75. TIMELINE_ANALYSIS: 1
  76.  
  77.  
  78. DUMP_CLASS: 1
  79.  
  80. DUMP_QUALIFIER: 400
  81.  
  82. BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804
  83.  
  84. DUMP_TYPE: 2
  85.  
  86. BUGCHECK_P1: 100000000
  87.  
  88. BUGCHECK_P2: 2
  89.  
  90. BUGCHECK_P3: 0
  91.  
  92. BUGCHECK_P4: fffff8033592c2d5
  93.  
  94. READ_ADDRESS: fffff80335c5f388: Unable to get MiVisibleState
  95. Unable to get NonPagedPoolStart
  96. Unable to get NonPagedPoolEnd
  97. Unable to get PagedPoolStart
  98. Unable to get PagedPoolEnd
  99. 0000000100000000
  100.  
  101. CURRENT_IRQL: 2
  102.  
  103. FAULTING_IP:
  104. nt!RtlAvlInsertNodeEx+65
  105. fffff803`3592c2d5 48391a cmp qword ptr [rdx],rbx
  106.  
  107. CPU_COUNT: 8
  108.  
  109. CPU_MHZ: d50
  110.  
  111. CPU_VENDOR: GenuineIntel
  112.  
  113. CPU_FAMILY: 6
  114.  
  115. CPU_MODEL: 5e
  116.  
  117. CPU_STEPPING: 3
  118.  
  119. CUSTOMER_CRASH_COUNT: 1
  120.  
  121. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  122.  
  123. BUGCHECK_STR: AV
  124.  
  125. PROCESS_NAME: svchost.exe
  126.  
  127. ANALYSIS_SESSION_HOST: DESKTOP-C91JAG4
  128.  
  129. ANALYSIS_SESSION_TIME: 11-11-2018 16:11:51.0166
  130.  
  131. ANALYSIS_VERSION: 10.0.18239.1000 amd64fre
  132.  
  133. TRAP_FRAME: fffffd0f181b5ae0 -- (.trap 0xfffffd0f181b5ae0)
  134. NOTE: The trap frame does not contain all registers.
  135. Some register values may be zeroed or incorrect.
  136. rax=0000000000000001 rbx=0000000000000000 rcx=ffffa58d50286ba8
  137. rdx=0000000100000000 rsi=0000000000000000 rdi=0000000000000000
  138. rip=fffff8033592c2d5 rsp=fffffd0f181b5c70 rbp=fffffd0f181b5e20
  139. r8=0000000000000001 r9=0000000000000001 r10=ffffa58d6002e260
  140. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
  141. r14=0000000000000000 r15=0000000000000000
  142. iopl=0 nv up ei pl nz na po nc
  143. nt!RtlAvlInsertNodeEx+0x65:
  144. fffff803`3592c2d5 48391a cmp qword ptr [rdx],rbx ds:00000001`00000000=????????????????
  145. Resetting default scope
  146.  
  147. LAST_CONTROL_TRANSFER: from fffff803359cc069 to fffff803359bb490
  148.  
  149. STACK_TEXT:
  150. fffffd0f`181b5998 fffff803`359cc069 : 00000000`0000000a 00000001`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  151. fffffd0f`181b59a0 fffff803`359c8ce5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  152. fffffd0f`181b5ae0 fffff803`3592c2d5 : ffffa58d`5d31a700 ffffa58d`502868f0 00000000`00010000 ffffa58d`50286580 : nt!KiPageFault+0x425
  153. fffffd0f`181b5c70 fffff803`3590e183 : ffffa58d`5d31a700 ffffa58d`532925d0 00000000`000a2e30 fffff803`35d9fe47 : nt!RtlAvlInsertNodeEx+0x65
  154. fffffd0f`181b5cb0 fffff803`358e1eea : 00000000`00000100 ffffa58d`50286580 ffffa58d`5d31a700 ffffa58d`00000000 : nt!MiInsertVad+0xf3
  155. fffffd0f`181b5ce0 fffff803`35cfafdc : 00000000`00000100 fffffd0f`181b5e20 fffffd0f`181b6000 00000000`00080000 : nt!MiInsertPrivateVad+0x66
  156. fffffd0f`181b5d20 fffff803`35dbec8b : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiAllocateVirtualMemory+0x63c
  157. fffffd0f`181b5ed0 fffff803`35dbe9da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiAllocateUserStack+0x77
  158. fffffd0f`181b5f80 fffff803`35dbe6a5 : 00000000`00000000 fffffd0f`181b6820 00000000`00000000 00000000`00000000 : nt!MiAllocateVirtualMemoryCommon+0x15a
  159. fffffd0f`181b60a0 fffff803`35dbc96c : 00000000`00000028 fffffd0f`181b6690 fffffd0f`181b6810 00000000`00000000 : nt!MmAllocateUserStack+0x79
  160. fffffd0f`181b6140 fffff803`359cbb43 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtSetInformationProcess+0x20fc
  161. fffffd0f`181b6610 fffff803`359bee90 : fffff803`35d27667 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
  162. fffffd0f`181b67a8 fffff803`35d27667 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiServiceLinkage
  163. fffffd0f`181b67b0 fffff803`35d274cb : 00000000`00008000 00000000`00080000 ffffe205`21e17bc0 fffff803`35da35cc : nt!RtlCreateUserStack+0xff
  164. fffffd0f`181b6870 fffff803`35cff57b : 00000000`00000000 00000000`000030e0 fffffd0f`181b6bc0 00000000`00000000 : nt!PspSetupUserStack+0x6f
  165. fffffd0f`181b6930 fffff803`35cb63a7 : ffffa58d`50286580 00000000`00000000 ffffa58d`4c43f500 00000000`00000000 : nt!PspAllocateThread+0x693
  166. fffffd0f`181b6ac0 fffff803`35cb5f91 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : nt!PspCreateThread+0x1e7
  167. fffffd0f`181b6d70 fffff803`359cbb43 : 00000000`00000010 ffffa58d`5d31a700 00000000`00000000 00000000`00000001 : nt!NtCreateThreadEx+0x1f5
  168. fffffd0f`181b7540 fffff803`359bee90 : fffff803`35dcb6ee ffffffff`ffffffff ffffa58d`50459ad0 fffffd0f`181b77c4 : nt!KiSystemServiceCopyEnd+0x13
  169. fffffd0f`181b7748 fffff803`35dcb6ee : ffffffff`ffffffff ffffa58d`50459ad0 fffffd0f`181b77c4 00000000`00000001 : nt!KiServiceLinkage
  170. fffffd0f`181b7750 fffff803`3594d252 : ffffa58d`504c0470 fffff803`35cf6b02 ffffa58d`504c0470 00000000`00000000 : nt!RtlpCreateUserThreadEx+0x122
  171. fffffd0f`181b7890 fffff803`3594ce4e : fffffd0f`181b7950 fffffd0f`181b7950 00000000`00000000 fffff803`3594cadc : nt!ExpWorkerFactoryCreateThread+0xc6
  172. fffffd0f`181b7930 fffff803`3594c9e8 : ffffa58d`5d31a700 00000000`00000000 ffffa58d`504c0470 ffffa58d`504c0470 : nt!ExpWorkerFactoryCheckCreate+0x1ae
  173. fffffd0f`181b7980 fffff803`359cbb43 : ffffa58d`5d31a700 ffffa58d`504c0470 fffffd0f`181b7a80 ffffa58d`50285470 : nt!NtReleaseWorkerFactoryWorker+0x1b8
  174. fffffd0f`181b7a00 00007fff`b1f8cbc4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
  175. 0000000a`2deff4f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`b1f8cbc4
  176.  
  177.  
  178. THREAD_SHA1_HASH_MOD_FUNC: 03a951ae500256ab699ebef15fa58be3d9a4eaf9
  179.  
  180. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 7dfeee4a6cbb41ac80e3ce7f0a613869e6eff8fd
  181.  
  182. THREAD_SHA1_HASH_MOD: 05a9d0920d205a190d9dc9aca93a7c846f76f5b0
  183.  
  184. FOLLOWUP_IP:
  185. nt!RtlAvlInsertNodeEx+65
  186. fffff803`3592c2d5 48391a cmp qword ptr [rdx],rbx
  187.  
  188. FAULT_INSTR_CODE: 4c1a3948
  189.  
  190. SYMBOL_STACK_INDEX: 3
  191.  
  192. SYMBOL_NAME: nt!RtlAvlInsertNodeEx+65
  193.  
  194. FOLLOWUP_NAME: MachineOwner
  195.  
  196. MODULE_NAME: nt
  197.  
  198. IMAGE_NAME: ntkrnlmp.exe
  199.  
  200. DEBUG_FLR_IMAGE_TIMESTAMP: 5ba316ae
  201.  
  202. IMAGE_VERSION: 10.0.17134.345
  203.  
  204. STACK_COMMAND: .thread ; .cxr ; kb
  205.  
  206. BUCKET_ID_FUNC_OFFSET: 65
  207.  
  208. FAILURE_BUCKET_ID: AV_nt!RtlAvlInsertNodeEx
  209.  
  210. BUCKET_ID: AV_nt!RtlAvlInsertNodeEx
  211.  
  212. PRIMARY_PROBLEM_CLASS: AV_nt!RtlAvlInsertNodeEx
  213.  
  214. TARGET_TIME: 2018-11-11T13:39:25.000Z
  215.  
  216. OSBUILD: 17134
  217.  
  218. OSSERVICEPACK: 345
  219.  
  220. SERVICEPACK_NUMBER: 0
  221.  
  222. OS_REVISION: 0
  223.  
  224. SUITE_MASK: 272
  225.  
  226. PRODUCT_TYPE: 1
  227.  
  228. OSPLATFORM_TYPE: x64
  229.  
  230. OSNAME: Windows 10
  231.  
  232. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  233.  
  234. OS_LOCALE:
  235.  
  236. USER_LCID: 0
  237.  
  238. OSBUILD_TIMESTAMP: 2018-09-20 05:40:30
  239.  
  240. BUILDDATESTAMP_STR: 180410-1804
  241.  
  242. BUILDLAB_STR: rs4_release
  243.  
  244. BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804
  245.  
  246. ANALYSIS_SESSION_ELAPSED_TIME: 15a8
  247.  
  248. ANALYSIS_SOURCE: KM
  249.  
  250. FAILURE_ID_HASH_STRING: km:av_nt!rtlavlinsertnodeex
  251.  
  252. FAILURE_ID_HASH: {5534c61b-8588-1c8e-dde4-5603d0a8d33b}
  253.  
  254. Followup: MachineOwner
  255. ---------
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!