*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000228, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80051206727, address which referenced memory

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2078

    Key  : Analysis.Elapsed.mSec
    Value: 2878

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 359

    Key  : Analysis.Init.Elapsed.mSec
    Value: 3962

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 89

    Key  : Analysis.Version.DbgEng
    Value: 10.0.27704.1001

    Key  : Analysis.Version.Description
    Value: 10.2408.27.01 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2408.27.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0xa

    Key  : Bugcheck.Code.TargetModel
    Value: 0xa

    Key  : Dump.Attributes.AsUlong
    Value: 1008

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : Failure.Bucket
    Value: AV_tdx!TdxSendDatagramTransportAddress

    Key  : Failure.Hash
    Value: {d3229518-0716-4c21-fc7d-5c0f5b47b7b4}


BUGCHECK_CODE:  a

BUGCHECK_P1: 228

BUGCHECK_P2: 2

BUGCHECK_P3: 0

BUGCHECK_P4: fffff80051206727

FILE_IN_CAB:  092424-7234-01.dmp

DUMP_FILE_ATTRIBUTES: 0x1008
  Kernel Generated Triage Dump

FAULTING_THREAD:  ffffaa8ae8dad040

READ_ADDRESS: fffff8005191d470: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 0000000000000228

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

TRAP_FRAME:  ffff948c11547090 -- (.trap 0xffff948c11547090)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000000200
rdx=0000000000000040 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80051206727 rsp=ffff948c11547220 rbp=ffff948c11547361
 r8=0000000000000001  r9=0000000000000200 r10=0000000000000a32
r11=0000000000000003 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!ExpTrackTableGetMoreLimit+0x17:
fffff800`51206727 4e8b54d910      mov     r10,qword ptr [rcx+r11*8+10h] ds:00000000`00000228=????????????????
Resetting default scope

STACK_TEXT:
ffff948c`11546f48 fffff800`5102bf29     : 00000000`0000000a 00000000`00000228 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffff948c`11546f50 fffff800`51027389     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff948c`11547090 fffff800`51206727     : 00000000`00000040 ffffaa8a`f56e6132 00000000`00000000 00000000`000007f4 : nt!KiPageFault+0x489
ffff948c`11547220 fffff800`510510a5     : 00000000`00000001 00000000`00000000 00000000`00000040 00000000`00000600 : nt!ExpTrackTableGetMoreLimit+0x17
ffff948c`11547250 fffff800`50f10564     : 00000000`00032fa0 ffff948c`11547361 00000000`00000a32 fffff800`00000040 : nt!ExpPoolTrackerChargeEntry+0x9bcc9
ffff948c`115472a0 fffff800`50f1018f     : 00000000`00000a32 00000000`00000000 00000000`42786454 00000000`00000000 : nt!ExAllocateHeapPool+0x3a4
ffff948c`115473c0 fffff800`516ab67d     : 00000000`00000040 00000000`00000001 00000000`00000600 ffffaa8a`00000000 : nt!ExpAllocatePoolWithTagFromNode+0x5f
ffff948c`11547410 fffff800`676b1b9c     : 00000000`00000000 ffff948c`11547581 00000000`0000084a fffff800`00000060 : nt!ExAllocatePool2+0xdd
ffff948c`115474c0 fffff800`676b19d2     : ffff948c`11547600 fffff800`50e08d00 ffffaa8a`f03637b8 ffffaa8a`e11c5380 : tdx!TdxSendDatagramTransportAddress+0x1ac
ffff948c`115475b0 fffff800`50f12695     : ffff948c`115476d8 ffffaa8a`f341f1f0 ffffaa8a`ddd5f2f0 00000000`00000044 : tdx!TdxTdiDispatchInternalDeviceControl+0x52
ffff948c`115475e0 fffff800`6771b647     : 00000000`0101a8c0 00000000`00000000 ffff948c`115476d8 ffffaa8a`ef6a1dc0 : nt!IofCallDriver+0x55
ffff948c`11547620 fffff800`6770e264     : ffffaa8a`f03636a0 ffffaa8a`ef6a1f78 ffffaa8a`ef6a1f78 ffff948c`11547730 : netbt!TdiSendDatagram+0x173
ffff948c`11547690 fffff800`6770dcb4     : ffffaa8a`00000000 ffffaa8a`ef6a1dc0 ffff948c`115477b0 00000000`c0a80101 : netbt!UdpSendDatagram+0x1d4
ffff948c`11547730 fffff800`67708be9     : ffffaa8a`f52c8c00 ffffaa8a`ee4dedc0 ffffaa8a`df034ec0 fffff800`67707f40 : netbt!SendNameServiceRequest+0x3ac
ffff948c`115477f0 fffff800`67706435     : ffffaa8a`e8aabe70 ffffaa8a`ee4dedc0 00000000`00000001 ffffaa8a`e7bda8f0 : netbt!StartRefresh+0x29d
ffff948c`11547880 fffff800`676f179a     : 00000000`00000000 fffff800`5183eb00 ffffaa8a`f5cc6f80 fffff800`5194aac0 : netbt!DelayedNextRefresh+0x395
ffff948c`11547900 fffff800`50f52355     : ffffaa8a`da74abb0 fffff800`5194aac0 ffffaa8a`e8dad040 ffff948c`11547a40 : netbt!NTExecuteWorker+0xba
ffff948c`11547940 fffff800`50f54d47     : ffffaa8a`e8dad040 00000000`00000453 ffffaa8a`e8dad040 fffff800`50f52200 : nt!ExpWorkerThread+0x155
ffff948c`11547b30 fffff800`5101b174     : ffffe581`111d0180 ffffaa8a`e8dad040 fffff800`50f54cf0 0003b91b`00000407 : nt!PspSystemThreadStartup+0x57
ffff948c`11547b80 00000000`00000000     : ffff948c`11548000 ffff948c`11541000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34


SYMBOL_NAME:  tdx!TdxSendDatagramTransportAddress+1ac

MODULE_NAME: tdx

IMAGE_NAME:  tdx.sys

IMAGE_VERSION:  10.0.22621.4034

STACK_COMMAND:  .process /r /p 0xffffaa8ada6d0040; .thread 0xffffaa8ae8dad040 ; kb

BUCKET_ID_FUNC_OFFSET:  1ac

FAILURE_BUCKET_ID:  AV_tdx!TdxSendDatagramTransportAddress

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {d3229518-0716-4c21-fc7d-5c0f5b47b7b4}

Followup:     MachineOwner
---------