KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: ffff9b8bb64056e0, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc0000010, error status (normally i/o status code)
Arg3: 000000022c8e18c0, current process (virtual address for lock type 3, or PTE)
Arg4: fffff80170fe003c, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for FACEIT.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4874
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 21645
Key : Analysis.Init.CPU.mSec
Value: 609
Key : Analysis.Init.Elapsed.mSec
Value: 3037
Key : Analysis.Memory.CommitPeak.Mb
Value: 74
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 7a
BUGCHECK_P1: ffff9b8bb64056e0
BUGCHECK_P2: ffffffffc0000010
BUGCHECK_P3: 22c8e18c0
BUGCHECK_P4: fffff80170fe003c
ERROR_CODE: (NTSTATUS) 0xc0000010 - Belirtilen istek, hedef ayg t i in ge erli bir i lem de il.
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: Corsair.Service.exe
TRAP_FRAME: ffff90003a5f61a0 -- (.trap 0xffff90003a5f61a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff80170fe003c rbx=0000000000000000 rcx=fffff80170fe0000
rdx=0000000000043fe3 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80122b1b5c6 rsp=ffff90003a5f6330 rbp=ffffffffff7e730d
r8=ffff90003a5f649c r9=fffff80122907ab9 r10=fffff80122b1b5be
r11=0000000000040286 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
FACEIT+0xb1b5c6:
fffff801`22b1b5c6 8b38 mov edi,dword ptr [rax] ds:fffff801`70fe003c=????????
Resetting default scope
STACK_TEXT:
ffff9000`3a5f5df8 fffff801`1f25df69 : 00000000`0000007a ffff9b8b`b64056e0 ffffffff`c0000010 00000002`2c8e18c0 : nt!KeBugCheckEx
ffff9000`3a5f5e00 fffff801`1f25bc75 : ffff9000`00005000 ffff9000`3a5f5f00 ffff9000`3a5f5f90 fffff801`00000000 : nt!MiWaitForInPageComplete+0x7d9
ffff9000`3a5f5ef0 fffff801`1f29f558 : 00000000`c0033333 00000000`00000000 fffff801`70fe003c 00000000`00000000 : nt!MiIssueHardFault+0x3c5
ffff9000`3a5f6000 fffff801`1f40535e : ffffad07`53016500 00000000`00000080 00000000`00000002 00000000`00000000 : nt!MmAccessFault+0x468
ffff9000`3a5f61a0 fffff801`22b1b5c6 : 00002229`760641c8 ffff9000`3a5f6539 ffffb229`4c592578 ffff9000`3a5f62e0 : nt!KiPageFault+0x35e
ffff9000`3a5f6330 00002229`760641c8 : ffff9000`3a5f6539 ffffb229`4c592578 ffff9000`3a5f62e0 00000000`00040286 : FACEIT+0xb1b5c6
ffff9000`3a5f6338 ffff9000`3a5f6539 : ffffb229`4c592578 ffff9000`3a5f62e0 00000000`00040286 00000000`00040202 : 0x00002229`760641c8
ffff9000`3a5f6340 ffffb229`4c592578 : ffff9000`3a5f62e0 00000000`00040286 00000000`00040202 00000000`00040286 : 0xffff9000`3a5f6539
ffff9000`3a5f6348 ffff9000`3a5f62e0 : 00000000`00040286 00000000`00040202 00000000`00040286 00000000`00040246 : 0xffffb229`4c592578
ffff9000`3a5f6350 00000000`00040286 : 00000000`00040202 00000000`00040286 00000000`00040246 00000000`00000004 : 0xffff9000`3a5f62e0
ffff9000`3a5f6358 00000000`00040202 : 00000000`00040286 00000000`00040246 00000000`00000004 fffff801`70fe0000 : 0x40286
ffff9000`3a5f6360 00000000`00040286 : 00000000`00040246 00000000`00000004 fffff801`70fe0000 00000000`00040296 : 0x40202
ffff9000`3a5f6368 00000000`00040246 : 00000000`00000004 fffff801`70fe0000 00000000`00040296 7fffffff`fffffffc : 0x40286
ffff9000`3a5f6370 00000000`00000004 : fffff801`70fe0000 00000000`00040296 7fffffff`fffffffc ffff9000`3a5f65e8 : 0x40246
ffff9000`3a5f6378 fffff801`70fe0000 : 00000000`00040296 7fffffff`fffffffc ffff9000`3a5f65e8 00000000`000046a0 : 0x4
ffff9000`3a5f6380 00000000`00040296 : 7fffffff`fffffffc ffff9000`3a5f65e8 00000000`000046a0 00000000`000004f0 : 0xfffff801`70fe0000
ffff9000`3a5f6388 7fffffff`fffffffc : ffff9000`3a5f65e8 00000000`000046a0 00000000`000004f0 00000000`00040286 : 0x40296
ffff9000`3a5f6390 ffff9000`3a5f65e8 : 00000000`000046a0 00000000`000004f0 00000000`00040286 00000000`00000000 : 0x7fffffff`fffffffc
ffff9000`3a5f6398 00000000`000046a0 : 00000000`000004f0 00000000`00040286 00000000`00000000 00000000`00002f88 : 0xffff9000`3a5f65e8
ffff9000`3a5f63a0 00000000`000004f0 : 00000000`00040286 00000000`00000000 00000000`00002f88 ffff9000`3a5f6c40 : 0x46a0
ffff9000`3a5f63a8 00000000`00040286 : 00000000`00000000 00000000`00002f88 ffff9000`3a5f6c40 00000000`00000000 : 0x4f0
ffff9000`3a5f63b0 00000000`00000000 : 00000000`00002f88 ffff9000`3a5f6c40 00000000`00000000 00000000`00000000 : 0x40286
SYMBOL_NAME: FACEIT+b1b5c6
MODULE_NAME: FACEIT
IMAGE_NAME: FACEIT.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: b1b5c6
FAILURE_BUCKET_ID: 0x7a_c0000010_FACEIT!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {2c2efbc1-4218-3c05-4f07-ef812473428a}
Followup: MachineOwner
---------
KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: ffffde089a436ab0, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc0000010, error status (normally i/o status code)
Arg3: 00000001557bc8c0, current process (virtual address for lock type 3, or PTE)
Arg4: fffff80390fb8000, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for cng.sys
*** WARNING: Unable to verify checksum for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 5218
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 15088
Key : Analysis.Init.CPU.mSec
Value: 608
Key : Analysis.Init.Elapsed.mSec
Value: 3748
Key : Analysis.Memory.CommitPeak.Mb
Value: 82
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 7a
BUGCHECK_P1: ffffde089a436ab0
BUGCHECK_P2: ffffffffc0000010
BUGCHECK_P3: 1557bc8c0
BUGCHECK_P4: fffff80390fb8000
ERROR_CODE: (NTSTATUS) 0xc0000010 - Belirtilen istek, hedef ayg t i in ge erli bir i lem de il.
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: svchost.exe
TRAP_FRAME: ffff99866e6060c0 -- (.trap 0xffff99866e6060c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffffffffd8e00 rbx=0000000000000000 rcx=ffff9c8df56037a0
rdx=00000000000007d0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8034394b66f rsp=ffff99866e606250 rbp=fffff80390fb01cc
r8=0000000000000034 r9=ffff99866e606310 r10=fffff80390fb7fcc
r11=ffff99866e6062c8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
cng+0x5b66f:
fffff803`4394b66f f3410f6f6a30 movdqu xmm5,xmmword ptr [r10+30h] ds:fffff803`90fb7ffc=????????????????????????????????
Resetting default scope
STACK_TEXT:
ffff9986`6e605d18 fffff803`40e5df69 : 00000000`0000007a ffffde08`9a436ab0 ffffffff`c0000010 00000001`557bc8c0 : nt!KeBugCheckEx
ffff9986`6e605d20 fffff803`40e5bc75 : ffff9986`00008000 ffff9986`6e605e00 ffff9986`6e605eb0 fffff803`00000000 : nt!MiWaitForInPageComplete+0x7d9
ffff9986`6e605e10 fffff803`40e9f568 : 00000000`c0033333 00000000`00000000 fffff803`90fb8000 00000000`00000000 : nt!MiIssueHardFault+0x3c5
ffff9986`6e605f20 fffff803`4100535e : 00000000`00000000 00000000`00029c10 fffff803`90fd7400 00000000`00000172 : nt!MmAccessFault+0x468
ffff9986`6e6060c0 fffff803`4394b66f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
ffff9986`6e606250 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : cng+0x5b66f
SYMBOL_NAME: cng+5b66f
MODULE_NAME: cng
IMAGE_NAME: cng.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 5b66f
FAILURE_BUCKET_ID: 0x7a_c0000010_cng!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {2a2cc5ce-57f6-1466-216a-4731ebce4c8c}
Followup: MachineOwner
---------
13: kd> lmvm cng
Browse full module list
start end module name
fffff803`438f0000 fffff803`439ab000 cng T (no symbols)
Loaded symbol image file: cng.sys
Image path: \SystemRoot\System32\drivers\cng.sys
Image name: cng.sys
Browse all global symbols functions data
Timestamp: Thu Oct 26 06:07:54 1989 (2546750A)
CheckSum: 000BEFF0
ImageSize: 000BB000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: ffffd083af6ee360, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc0000010, error status (normally i/o status code)
Arg3: 00000001eb2258c0, current process (virtual address for lock type 3, or PTE)
Arg4: fffff800dab6003c, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for FACEIT.sys
*** WARNING: Unable to verify checksum for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 5093
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 11894
Key : Analysis.Init.CPU.mSec
Value: 608
Key : Analysis.Init.Elapsed.mSec
Value: 2921
Key : Analysis.Memory.CommitPeak.Mb
Value: 82
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 7a
BUGCHECK_P1: ffffd083af6ee360
BUGCHECK_P2: ffffffffc0000010
BUGCHECK_P3: 1eb2258c0
BUGCHECK_P4: fffff800dab6003c
ERROR_CODE: (NTSTATUS) 0xc0000010 - Belirtilen istek, hedef ayg t i in ge erli bir i lem de il.
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: Corsair.Service.exe
TRAP_FRAME: ffff900653206190 -- (.trap 0xffff900653206190)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff800dab6003c rbx=0000000000000000 rcx=fffff800dab60000
rdx=0000000000043fe3 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8008271b5c6 rsp=ffff900653206320 rbp=ffffffffff7e730d
r8=ffff90065320648c r9=fffff80082507ab9 r10=fffff8008271b5be
r11=0000000000040286 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
FACEIT+0xb1b5c6:
fffff800`8271b5c6 8b38 mov edi,dword ptr [rax] ds:fffff800`dab6003c=????????
Resetting default scope
STACK_TEXT:
ffff9006`53205de8 fffff800`7d45df69 : 00000000`0000007a ffffd083`af6ee360 ffffffff`c0000010 00000001`eb2258c0 : nt!KeBugCheckEx
ffff9006`53205df0 fffff800`7d45bc75 : ffff9006`00005000 ffff9006`53205f00 ffff9006`53205f80 fffff800`00000000 : nt!MiWaitForInPageComplete+0x7d9
ffff9006`53205ee0 fffff800`7d49f568 : 00000000`c0033333 00000000`00000000 fffff800`dab6003c 00000000`00000000 : nt!MiIssueHardFault+0x3c5
ffff9006`53205ff0 fffff800`7d60535e : ffffba0d`15019380 00000000`00000080 00000000`00000002 00000000`00000000 : nt!MmAccessFault+0x468
ffff9006`53206190 fffff800`8271b5c6 : 0000b626`a43b63e7 ffff9006`53206529 ffff2620`f71b0747 ffff9006`532062d0 : nt!KiPageFault+0x35e
ffff9006`53206320 0000b626`a43b63e7 : ffff9006`53206529 ffff2620`f71b0747 ffff9006`532062d0 00000000`00040286 : FACEIT+0xb1b5c6
ffff9006`53206328 ffff9006`53206529 : ffff2620`f71b0747 ffff9006`532062d0 00000000`00040286 00000000`00040206 : 0x0000b626`a43b63e7
ffff9006`53206330 ffff2620`f71b0747 : ffff9006`532062d0 00000000`00040286 00000000`00040206 00000000`00040286 : 0xffff9006`53206529
ffff9006`53206338 ffff9006`532062d0 : 00000000`00040286 00000000`00040206 00000000`00040286 00000000`00040246 : 0xffff2620`f71b0747
ffff9006`53206340 00000000`00040286 : 00000000`00040206 00000000`00040286 00000000`00040246 00000000`00000004 : 0xffff9006`532062d0
ffff9006`53206348 00000000`00040206 : 00000000`00040286 00000000`00040246 00000000`00000004 fffff800`dab60000 : 0x40286
ffff9006`53206350 00000000`00040286 : 00000000`00040246 00000000`00000004 fffff800`dab60000 00000000`00040292 : 0x40206
ffff9006`53206358 00000000`00040246 : 00000000`00000004 fffff800`dab60000 00000000`00040292 7fffffff`fffffffc : 0x40286
ffff9006`53206360 00000000`00000004 : fffff800`dab60000 00000000`00040292 7fffffff`fffffffc ffff9006`532065d8 : 0x40246
ffff9006`53206368 fffff800`dab60000 : 00000000`00040292 7fffffff`fffffffc ffff9006`532065d8 00000000`000046a0 : 0x4
ffff9006`53206370 00000000`00040292 : 7fffffff`fffffffc ffff9006`532065d8 00000000`000046a0 00000000`000004f0 : 0xfffff800`dab60000
ffff9006`53206378 7fffffff`fffffffc : ffff9006`532065d8 00000000`000046a0 00000000`000004f0 00000000`00040286 : 0x40292
ffff9006`53206380 ffff9006`532065d8 : 00000000`000046a0 00000000`000004f0 00000000`00040286 00000000`00000000 : 0x7fffffff`fffffffc
ffff9006`53206388 00000000`000046a0 : 00000000`000004f0 00000000`00040286 00000000`00000000 00000000`00001de4 : 0xffff9006`532065d8
ffff9006`53206390 00000000`000004f0 : 00000000`00040286 00000000`00000000 00000000`00001de4 ffff9006`53206c30 : 0x46a0
ffff9006`53206398 00000000`00040286 : 00000000`00000000 00000000`00001de4 ffff9006`53206c30 00000000`00000000 : 0x4f0
ffff9006`532063a0 00000000`00000000 : 00000000`00001de4 ffff9006`53206c30 00000000`00000000 00000000`00000000 : 0x40286
SYMBOL_NAME: FACEIT+b1b5c6
MODULE_NAME: FACEIT
IMAGE_NAME: FACEIT.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: b1b5c6
FAILURE_BUCKET_ID: 0x7a_c0000010_FACEIT!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {2c2efbc1-4218-3c05-4f07-ef812473428a}
Followup: MachineOwner
---------
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffda8a2be0f2c0, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 5624
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 10034
Key : Analysis.Init.CPU.mSec
Value: 608
Key : Analysis.Init.Elapsed.mSec
Value: 1639
Key : Analysis.Memory.CommitPeak.Mb
Value: 75
Key : CriticalProcessDied.ExceptionCode
Value: 2e8ee080
Key : CriticalProcessDied.Process
Value: svchost.exe
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: ef
BUGCHECK_P1: ffffda8a2be0f2c0
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: svchost.exe
CRITICAL_PROCESS: svchost.exe
ERROR_CODE: (NTSTATUS) 0x2e8ee080 - <Unable to get error code text>
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
STACK_TEXT:
ffffd787`de53f8f8 fffff805`76f07f52 : 00000000`000000ef ffffda8a`2be0f2c0 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffffd787`de53f900 fffff805`76e0ed11 : 00000000`00000000 fffff805`768fd6ed 00000000`00000002 fffff805`768fcd07 : nt!PspCatchCriticalBreak+0x10e
ffffd787`de53f9a0 fffff805`76cb3674 : ffffda8a`00000000 00000000`00000000 ffffda8a`2be0f2c0 ffffda8a`2be0f6f8 : nt!PspTerminateAllThreads+0x15bdd5
ffffd787`de53fa10 fffff805`76cb399c : ffffda8a`2be0f2c0 00000000`00000000 00000080`790ff7ec fffff805`76c007ca : nt!PspTerminateProcess+0xe0
ffffd787`de53fa50 fffff805`76a08bb8 : ffffda8a`2be0f2c0 ffffda8a`2e8ee080 ffffd787`de53fb40 ffffda8a`2be0f2c0 : nt!NtTerminateProcess+0x9c
ffffd787`de53fac0 00007ffb`dc60d2f4 : 00007ffb`dc682b53 00007ffb`dc6b6708 00000080`790ff7b0 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000080`790fd8e8 00007ffb`dc682b53 : 00007ffb`dc6b6708 00000080`790ff7b0 00000000`00000000 00007ffb`dc570000 : 0x00007ffb`dc60d2f4
00000080`790fd8f0 00007ffb`dc6b6708 : 00000080`790ff7b0 00000000`00000000 00007ffb`dc570000 00000000`00000004 : 0x00007ffb`dc682b53
00000080`790fd8f8 00000080`790ff7b0 : 00000000`00000000 00007ffb`dc570000 00000000`00000004 00007ffb`dc6152ed : 0x00007ffb`dc6b6708
00000080`790fd900 00000000`00000000 : 00007ffb`dc570000 00000000`00000004 00007ffb`dc6152ed 00007ffb`dc6b6708 : 0x00000080`790ff7b0
SYMBOL_NAME: nt!PspCatchCriticalBreak+10e
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.1237
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 10e
FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_2e8ee080_nt!PspCatchCriticalBreak
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {a92b00b6-6204-acdf-646b-a5738bacc6fb}
Followup: MachineOwner
---------
KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: ffffe7835e9fe148, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc0000010, error status (normally i/o status code)
Arg3: 00000002fb8de8c0, current process (virtual address for lock type 3, or PTE)
Arg4: fffff8078ac15600, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for FACEIT.sys
*** WARNING: Unable to verify checksum for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4406
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 14925
Key : Analysis.Init.CPU.mSec
Value: 655
Key : Analysis.Init.Elapsed.mSec
Value: 2886
Key : Analysis.Memory.CommitPeak.Mb
Value: 82
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 7a
BUGCHECK_P1: ffffe7835e9fe148
BUGCHECK_P2: ffffffffc0000010
BUGCHECK_P3: 2fb8de8c0
BUGCHECK_P4: fffff8078ac15600
ERROR_CODE: (NTSTATUS) 0xc0000010 - Belirtilen istek, hedef ayg t i in ge erli bir i lem de il.
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: svchost.exe
TRAP_FRAME: ffffb880988960f0 -- (.trap 0xffffb880988960f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff8078ac15600
rdx=fffffffffff67800 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80794ef0ef3 rsp=ffffb88098896280 rbp=00000000ff62f853
r8=000000000001d0b7 r9=fffff80794dacffa r10=ffffb88098896498
r11=fffff8078ac15600 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 ov up ei pl nz ac po cy
FACEIT+0xb00ef3:
fffff807`94ef0ef3 8b11 mov edx,dword ptr [rcx] ds:fffff807`8ac15600=????????
Resetting default scope
STACK_TEXT:
ffffb880`98895d48 fffff807`35e5df69 : 00000000`0000007a ffffe783`5e9fe148 ffffffff`c0000010 00000002`fb8de8c0 : nt!KeBugCheckEx
ffffb880`98895d50 fffff807`35e5bc75 : ffffb880`00008000 ffffb880`98895e00 ffffb880`98895ee0 fffff807`00000000 : nt!MiWaitForInPageComplete+0x7d9
ffffb880`98895e40 fffff807`35e9f568 : 00000000`c0033333 00000000`00000000 fffff807`8ac15600 00000000`00000000 : nt!MiIssueHardFault+0x3c5
ffffb880`98895f50 fffff807`3600535e : 00000200`00000000 00000000`00000000 ffffb880`988963e0 fffff807`35ffdc15 : nt!MmAccessFault+0x468
ffffb880`988960f0 fffff807`94ef0ef3 : 7fffffff`fffffffc fffff806`543f0000 fffff807`8ac00000 00000001`bf264abe : nt!KiPageFault+0x35e
ffffb880`98896280 7fffffff`fffffffc : fffff806`543f0000 fffff807`8ac00000 00000001`bf264abe fffff807`8ac15600 : FACEIT+0xb00ef3
ffffb880`98896288 fffff806`543f0000 : fffff807`8ac00000 00000001`bf264abe fffff807`8ac15600 00000000`00017b48 : 0x7fffffff`fffffffc
ffffb880`98896290 fffff807`8ac00000 : 00000001`bf264abe fffff807`8ac15600 00000000`00017b48 00000000`00015600 : 0xfffff806`543f0000
ffffb880`98896298 00000001`bf264abe : fffff807`8ac15600 00000000`00017b48 00000000`00015600 fffff807`8ac001a0 : 0xfffff807`8ac00000
ffffb880`988962a0 fffff807`8ac15600 : 00000000`00017b48 00000000`00015600 fffff807`8ac001a0 fffff807`8ac02548 : 0x00000001`bf264abe
ffffb880`988962a8 00000000`00017b48 : 00000000`00015600 fffff807`8ac001a0 fffff807`8ac02548 fffff807`8ac17b48 : 0xfffff807`8ac15600
ffffb880`988962b0 00000000`00015600 : fffff807`8ac001a0 fffff807`8ac02548 fffff807`8ac17b48 00000000`00000000 : 0x17b48
ffffb880`988962b8 fffff807`8ac001a0 : fffff807`8ac02548 fffff807`8ac17b48 00000000`00000000 00000000`c000a000 : 0x15600
ffffb880`988962c0 fffff807`8ac02548 : fffff807`8ac17b48 00000000`00000000 00000000`c000a000 00000000`00002548 : 0xfffff807`8ac001a0
ffffb880`988962c8 fffff807`8ac17b48 : 00000000`00000000 00000000`c000a000 00000000`00002548 00000000`00040282 : 0xfffff807`8ac02548
ffffb880`988962d0 00000000`00000000 : 00000000`c000a000 00000000`00002548 00000000`00040282 fffff807`8ac17b48 : 0xfffff807`8ac17b48
SYMBOL_NAME: FACEIT+b00ef3
MODULE_NAME: FACEIT
IMAGE_NAME: FACEIT.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: b00ef3
FAILURE_BUCKET_ID: 0x7a_c0000010_FACEIT!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {2c2efbc1-4218-3c05-4f07-ef812473428a}
Followup: MachineOwner
---------
9: kd> lmvm FACEIT
Browse full module list
start end module name
fffff807`943f0000 fffff807`94ff7000 FACEIT T (no symbols)
Loaded symbol image file: FACEIT.sys
Image path: \SystemRoot\System32\Drivers\FACEIT.sys
Image name: FACEIT.sys
Browse all global symbols functions data
Timestamp: Fri Sep 10 11:30:42 2021 (613B17B2)
CheckSum: 00C0AEE0
ImageSize: 00C07000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
