DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff80212681ff1, address which referenced memory
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for ndis.sys
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
    Key  : Analysis.CPU.mSec
    Value: 4171
    Key  : Analysis.DebugAnalysisManager
    Value: Create
    Key  : Analysis.Elapsed.mSec
    Value: 48394
    Key  : Analysis.Init.CPU.mSec
    Value: 1843
    Key  : Analysis.Init.Elapsed.mSec
    Value: 81776
    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 75
    Key  : WER.OS.Branch
    Value: 19h1_release
    Key  : WER.OS.Timestamp
    Value: 2019-03-18T12:02:00Z
    Key  : WER.OS.Version
    Value: 10.0.18362.1
BUGCHECK_CODE:  d1
BUGCHECK_P1: 0
BUGCHECK_P2: 2
BUGCHECK_P3: 1
BUGCHECK_P4: fffff80212681ff1
WRITE_ADDRESS: fffff8020df733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 0000000000000000
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT:  1
PROCESS_NAME:  System
TRAP_FRAME:  fffff80213266260 -- (.trap 0xfffff80213266260)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffb202bb0afc00
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80212681ff1 rsp=fffff802132663f0 rbp=fffff802132664f0
 r8=ffffb202bb860780  r9=0000000000000300 r10=fffff8020da27e10
r11=fffff80213266230 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
tcpip+0x21ff1:
fffff802`12681ff1 4c8900          mov     qword ptr [rax],r8 ds:00000000`00000000=????????????????
Resetting default scope
STACK_TEXT:  
fffff802`13266118 fffff802`0dbd30e9     : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff802`13266120 fffff802`0dbcf42b     : 00000000`887b1256 00000000`00000004 ffffb202`bb0af8e0 00000000`88770d29 : nt!KiBugCheckDispatch+0x69
fffff802`13266260 fffff802`12681ff1     : ffffb202`bf4b8ba0 ffffb202`bb1159c8 ffffb202`bf55e1e0 fffff802`0b9d3dc2 : nt!KiPageFault+0x46b
fffff802`132663f0 fffff802`12680d90     : ffffb202`bb25c000 ffffb202`bb8612a0 ffffb202`b8c640c0 ffffb202`bb0b1200 : tcpip+0x21ff1
fffff802`13266640 fffff802`1267e91a     : 00000000`00000001 fffff802`13266991 00000000`00000001 00000000`00000000 : tcpip+0x20d90
fffff802`132668f0 fffff802`1267b232     : ffffb202`bb1f0bc2 fffff802`1268bb01 ffffb202`00000000 ffffb202`bf6e2001 : tcpip+0x1e91a
fffff802`132669f0 fffff802`126b9d12     : 00000000`00000014 ffffb202`bb25c140 ffffb202`bb860780 00000000`00000000 : tcpip+0x1b232
fffff802`13266a30 fffff802`1267f6d8     : 00000000`00000000 00000000`00000000 fffff802`13266bb9 fffff802`13266b80 : tcpip+0x59d12
fffff802`13266b20 fffff802`126b5daf     : fffff802`1285f2e0 ffffb202`bb0cc8a0 ffffb202`bb25c000 00000000`00000000 : tcpip+0x1f6d8
fffff802`13266c20 fffff802`126b5a4c     : ffffb202`bb9952c0 00000000`00000001 00000000`00000001 00000000`00000000 : tcpip+0x55daf
fffff802`13266d30 fffff802`126d85be     : ffffb202`bb860780 00000000`00000000 00000000`00000000 fffff802`13266db4 : tcpip+0x55a4c
fffff802`13266d60 fffff802`126d7a92     : 00000000`00000001 ffffb202`bba6d600 fffff802`126c5f90 fffff802`13267098 : tcpip+0x785be
fffff802`13266e50 fffff802`0da69e18     : fffff802`13267130 00000000`00000002 fffff802`0df91400 fffff802`132670b8 : tcpip+0x77a92
fffff802`13266f80 fffff802`0da69d8d     : fffff802`126d79c0 fffff802`132670b8 ffffb202`b58a2a70 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x78
fffff802`13266ff0 fffff802`126c64c1     : ffffb202`bb860780 fffff802`13267130 00000000`00000000 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0x1d
fffff802`13267030 fffff802`123cb530     : ffffb202`bba683f0 fffff802`13267430 00000000`00000000 00000000`00000000 : tcpip+0x664c1
fffff802`132672d0 ffffb202`bba683f0     : fffff802`13267430 00000000`00000000 00000000`00000000 00000000`00000001 : ndis+0xb530
fffff802`132672d8 fffff802`13267430     : 00000000`00000000 00000000`00000000 00000000`00000001 ffffb202`bb860c60 : 0xffffb202`bba683f0
fffff802`132672e0 00000000`00000000     : 00000000`00000000 00000000`00000001 ffffb202`bb860c60 00000000`00000001 : 0xfffff802`13267430
SYMBOL_NAME:  tcpip+21ff1
MODULE_NAME: tcpip
IMAGE_NAME:  tcpip.sys
IMAGE_VERSION:  10.0.18362.295
STACK_COMMAND:  .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET:  21ff1
FAILURE_BUCKET_ID:  AV_tcpip!unknown_function
OS_VERSION:  10.0.18362.1
BUILDLAB_STR:  19h1_release
OSPLATFORM_TYPE:  x64
OSNAME:  Windows 10
FAILURE_ID_HASH:  {c94484cf-8655-07ec-34a0-1379f617a790}
Followup:     MachineOwner
---------
0: kd> lmvm tcpip
Browse full module list
start             end                 module name
fffff802`12660000 fffff802`1294a000   tcpip      (no symbols)           
    Loaded symbol image file: tcpip.sys
    Mapped memory image file: C:\ProgramData\Dbg\sym\tcpip.sys\61AE25762ea000\tcpip.sys
    Image path: \SystemRoot\System32\drivers\tcpip.sys
    Image name: tcpip.sys
    Browse all global symbols  functions  data
    Image was built with /Brepro flag.
    Timestamp:        61AE2576 (This is a reproducible build file hash, not a timestamp)
    CheckSum:         002E66D9
    ImageSize:        002EA000
    File version:     10.0.18362.295
    Product version:  10.0.18362.295
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.6 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     tcpip.sys
        OriginalFilename: tcpip.sys
        ProductVersion:   10.0.18362.295
        FileVersion:      10.0.18362.295 (WinBuild.160101.0800)
        FileDescription:  TCP/IP Driver
        LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> lmvm tcpip
Browse full module list
start             end                 module name
fffff802`12660000 fffff802`1294a000   tcpip      (no symbols)           
    Loaded symbol image file: tcpip.sys
    Mapped memory image file: C:\ProgramData\Dbg\sym\tcpip.sys\61AE25762ea000\tcpip.sys
    Image path: \SystemRoot\System32\drivers\tcpip.sys
    Image name: tcpip.sys
    Browse all global symbols  functions  data
    Image was built with /Brepro flag.
    Timestamp:        61AE2576 (This is a reproducible build file hash, not a timestamp)
    CheckSum:         002E66D9
    ImageSize:        002EA000
    File version:     10.0.18362.295
    Product version:  10.0.18362.295
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.6 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     tcpip.sys
        OriginalFilename: tcpip.sys
        ProductVersion:   10.0.18362.295
        FileVersion:      10.0.18362.295 (WinBuild.160101.0800)
        FileDescription:  TCP/IP Driver
        LegalCopyright:   © Microsoft Corporation. All rights reserved.