*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000228, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80452c06727, address which referenced memory

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2187

    Key  : Analysis.Elapsed.mSec
    Value: 3184

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 531

    Key  : Analysis.Init.Elapsed.mSec
    Value: 3313

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 100

    Key  : Analysis.Version.DbgEng
    Value: 10.0.27704.1001

    Key  : Analysis.Version.Description
    Value: 10.2408.27.01 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2408.27.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0xa

    Key  : Bugcheck.Code.TargetModel
    Value: 0xa

    Key  : Dump.Attributes.AsUlong
    Value: 1008

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : Failure.Bucket
    Value: AV_tdx!TdxSendDatagramTransportAddress

    Key  : Failure.Hash
    Value: {d3229518-0716-4c21-fc7d-5c0f5b47b7b4}


BUGCHECK_CODE:  a

BUGCHECK_P1: 228

BUGCHECK_P2: 2

BUGCHECK_P3: 0

BUGCHECK_P4: fffff80452c06727

FILE_IN_CAB:  092724-7515-01.dmp

DUMP_FILE_ATTRIBUTES: 0x1008
  Kernel Generated Triage Dump

FAULTING_THREAD:  ffffad878aadc0c0

READ_ADDRESS: fffff8045331d470: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 0000000000000228

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

TRAP_FRAME:  ffffe4843131f090 -- (.trap 0xffffe4843131f090)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000000200
rdx=0000000000000040 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80452c06727 rsp=ffffe4843131f220 rbp=ffffe4843131f361
 r8=0000000000000001  r9=0000000000000200 r10=0000000000000a32
r11=0000000000000003 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!ExpTrackTableGetMoreLimit+0x17:
fffff804`52c06727 4e8b54d910      mov     r10,qword ptr [rcx+r11*8+10h] ds:00000000`00000228=????????????????
Resetting default scope

STACK_TEXT:
ffffe484`3131ef48 fffff804`52a2bf29     : 00000000`0000000a 00000000`00000228 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffe484`3131ef50 fffff804`52a27389     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffe484`3131f090 fffff804`52c06727     : 00000000`00000040 ffffad87`8c0e613a 00000000`00000000 00000000`000007f4 : nt!KiPageFault+0x489
ffffe484`3131f220 fffff804`52a510a5     : 00000000`00000001 00000000`00000000 00000000`00000040 00000000`00000600 : nt!ExpTrackTableGetMoreLimit+0x17
ffffe484`3131f250 fffff804`52910564     : 00000000`00032fa0 ffffe484`3131f361 00000000`00000a32 fffff804`00000040 : nt!ExpPoolTrackerChargeEntry+0x9bcc9
ffffe484`3131f2a0 fffff804`5291018f     : 00000000`00000a32 00000000`00000000 00000000`42786454 00000000`00000000 : nt!ExAllocateHeapPool+0x3a4
ffffe484`3131f3c0 fffff804`530ab67d     : 00000000`00000040 00000000`00000001 00000000`00000600 ffffad87`00000000 : nt!ExpAllocatePoolWithTagFromNode+0x5f
ffffe484`3131f410 fffff804`6d8b1b9c     : 00000000`00000000 ffffe484`3131f581 00000000`0000084a fffff804`00000060 : nt!ExAllocatePool2+0xdd
ffffe484`3131f4c0 fffff804`6d8b19d2     : ffffe484`3131f600 fffff804`52808d00 ffffad87`865a1748 ffffad87`77511a20 : tdx!TdxSendDatagramTransportAddress+0x1ac
ffffe484`3131f5b0 fffff804`52912695     : ffffe484`3131f6d8 ffffad87`8458db30 ffffad87`7756d0b0 00000000`00000044 : tdx!TdxTdiDispatchInternalDeviceControl+0x52
ffffe484`3131f5e0 fffff804`6d91b647     : 00000000`0101a8c0 00000000`00000000 ffffe484`3131f6d8 ffffad87`80e41dc0 : nt!IofCallDriver+0x55
ffffe484`3131f620 fffff804`6d90e264     : ffffad87`865a1630 ffffad87`80e41f78 ffffad87`80e41f78 ffffe484`3131f730 : netbt!TdiSendDatagram+0x173
ffffe484`3131f690 fffff804`6d90dcb4     : ffffad87`00000000 ffffad87`80e41dc0 ffffe484`3131f7b0 00000000`c0a80101 : netbt!UdpSendDatagram+0x1d4
ffffe484`3131f730 fffff804`6d908be9     : ffffad87`8c896a00 ffffad87`82a09320 ffffad87`74443780 fffff804`6d907f40 : netbt!SendNameServiceRequest+0x3ac
ffffe484`3131f7f0 fffff804`6d906435     : ffffad87`80a29d60 ffffad87`82a09320 00000000`00000001 ffffad87`742a7060 : netbt!StartRefresh+0x29d
ffffe484`3131f880 fffff804`6d8f179a     : 00000000`00000000 fffff804`5323eb00 ffffad87`8c885600 fffff804`5334aac0 : netbt!DelayedNextRefresh+0x395
ffffe484`3131f900 fffff804`52952355     : ffffad87`70ae7bd0 fffff804`5334aac0 ffffad87`8aadc0c0 ffffe484`3131fa40 : netbt!NTExecuteWorker+0xba
ffffe484`3131f940 fffff804`52954d47     : ffffad87`8aadc0c0 00000000`000006d1 ffffad87`8aadc0c0 fffff804`52952200 : nt!ExpWorkerThread+0x155
ffffe484`3131fb30 fffff804`52a1b174     : ffff8000`aa7de180 ffffad87`8aadc0c0 fffff804`52954cf0 00000000`00000000 : nt!PspSystemThreadStartup+0x57
ffffe484`3131fb80 00000000`00000000     : ffffe484`31320000 ffffe484`31319000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34


SYMBOL_NAME:  tdx!TdxSendDatagramTransportAddress+1ac

MODULE_NAME: tdx

IMAGE_NAME:  tdx.sys

IMAGE_VERSION:  10.0.22621.4034

STACK_COMMAND:  .process /r /p 0xffffad8770af4040; .thread 0xffffad878aadc0c0 ; kb

BUCKET_ID_FUNC_OFFSET:  1ac

FAILURE_BUCKET_ID:  AV_tdx!TdxSendDatagramTransportAddress

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {d3229518-0716-4c21-fc7d-5c0f5b47b7b4}

Followup:     MachineOwner
---------