Microsoft (R) Windows Debugger Version 10.0.21306.1007 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\mkere\AppData\Local\Temp\Rar$DIa11844.38157\032321-6328-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff804`1f000000 PsLoadedModuleList = 0xfffff804`1fc2a2b0
Debug session time: Tue Mar 23 05:02:39.926 2021 (UTC + 3:00)
System Uptime: 0 days 8:06:17.624
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.
Loading User Symbols
Loading unloaded module list
........
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff804`1f39d840 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffe38a`a8628e10=000000000000000a
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000fffffffff, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000fffffffff, address which referenced memory
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2639
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 20170
Key : Analysis.Init.CPU.mSec
Value: 546
Key : Analysis.Init.Elapsed.mSec
Value: 40159
Key : Analysis.Memory.CommitPeak.Mb
Value: 73
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: d1
BUGCHECK_P1: fffffffff
BUGCHECK_P2: 2
BUGCHECK_P3: 8
BUGCHECK_P4: fffffffff
READ_ADDRESS: fffff8041fcfa388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
0000000fffffffff
PROCESS_NAME: System
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
TRAP_FRAME: ffffe38aa8628f50 -- (.trap 0xffffe38aa8628f50)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=00000000000000df
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=0000000fffffffff rsp=ffffe38aa86290e0 rbp=ffffb180041eab80
r8=00000000000000de r9=ffffd080b1e80180 r10=00000000ffffffff
r11=0000000000000100 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
0000000f`ffffffff ?? ???
Resetting default scope
FAILED_INSTRUCTION_ADDRESS:
+0
0000000f`ffffffff ?? ???
STACK_TEXT:
ffffe38a`a8628e08 fffff804`1f3af729 : 00000000`0000000a 0000000f`ffffffff 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
ffffe38a`a8628e10 fffff804`1f3aba29 : 00000000`00000002 00000000`00000000 00000000`00000002 fffff804`1fc4ecc0 : nt!KiBugCheckDispatch+0x69
ffffe38a`a8628f50 0000000f`ffffffff : 00000000`00000002 ffffb180`041eab80 00000000`00000000 fffff804`1f276d03 : nt!KiPageFault+0x469
ffffe38a`a86290e0 00000000`00000002 : ffffb180`041eab80 00000000`00000000 fffff804`1f276d03 00000000`00060030 : 0x0000000f`ffffffff
ffffe38a`a86290e8 ffffb180`041eab80 : 00000000`00000000 fffff804`1f276d03 00000000`00060030 00000000`00000002 : 0x2
ffffe38a`a86290f0 00000000`00000000 : fffff804`1f276d03 00000000`00060030 00000000`00000002 ffffba8a`1530ba50 : 0xffffb180`041eab80
SYMBOL_NAME: nt!KiPageFault+469
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.1
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 469
FAILURE_BUCKET_ID: AV_CODE_AV_BAD_IP_nt!KiPageFault
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {73cd60cc-83fa-6b76-df08-1961c31d7403}
Followup: MachineOwner
---------