IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000994, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff805219a9a97, address which referenced memory
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4921
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-1IBQR0U
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.mSec
Value: 20685
Key : Analysis.Memory.CommitPeak.Mb
Value: 73
Key : Analysis.System
Value: CreateObject
Key : WER.OS.Branch
Value: 19h1_release
Key : WER.OS.Timestamp
Value: 2019-03-18T12:02:00Z
Key : WER.OS.Version
Value: 10.0.18362.1
ADDITIONAL_XML: 1
OS_BUILD_LAYERS: 1
BUGCHECK_CODE: a
BUGCHECK_P1: 994
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff805219a9a97
READ_ADDRESS: fffff80521d733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff80521c2a3b8: Unable to get Flags value from nt!KdVersionBlock
fffff80521c2a3b8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
0000000000000994
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
TRAP_FRAME: ffff820ea5f79240 -- (.trap 0xffff820ea5f79240)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000032000 rbx=0000000000000000 rcx=ffff820ea5f794b0
rdx=ffffca0c05ce1890 rsi=0000000000000000 rdi=0000000000000000
rip=fffff805219a9a97 rsp=ffff820ea5f793d0 rbp=ffff820ea5f79449
r8=ffffca0c05ce1860 r9=0000000000000003 r10=0000000000000000
r11=ffff820ea5f79620 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
nt!KiSwInterruptDispatch+0x27:
fffff805`219a9a97 f7879409000000001000 test dword ptr [rdi+994h],100000h ds:00000000`00000994=????????
Resetting default scope
STACK_TEXT:
ffff820e`a5f790f8 fffff805`219d41e9 : 00000000`0000000a 00000000`00000994 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffff820e`a5f79100 fffff805`219d0529 : 00000000`ffff8001 ffffca0b`fd4769d0 ffffca0b`00000000 ffffca0b`fd4769d0 : nt!KiBugCheckDispatch+0x69
ffff820e`a5f79240 fffff805`219a9a97 : 00000000`00000000 ffffca0c`05ce1040 ffffca0c`05ce1040 fffff805`219d3c18 : nt!KiPageFault+0x469
ffff820e`a5f793d0 fffff805`219c8338 : ffff820e`a5f794b0 ffff820e`a5f79620 ffff820e`a5f79530 00000000`00000000 : nt!KiSwInterruptDispatch+0x27
ffff820e`a5f794b0 fffff805`1d3a154f : fffff805`1d873900 00000000`00000000 ffffffff`80002a0c 00000000`00000008 : nt!KiSwInterrupt+0x368
ffff820e`a5f79648 fffff805`1d873900 : 00000000`00000000 ffffffff`80002a0c 00000000`00000008 ffffca0c`082c5000 : vgk+0x154f
ffff820e`a5f79650 00000000`00000000 : ffffffff`80002a0c 00000000`00000008 ffffca0c`082c5000 fffff805`21ebc4a0 : vgk+0x4d3900
SYMBOL_NAME: vgk+154f
MODULE_NAME: vgk
IMAGE_NAME: vgk.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 154f
FAILURE_BUCKET_ID: AV_vgk!unknown_function
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {56c5cf79-d160-8711-720f-03c630d4c72b}
Followup: MachineOwner
---------
0: kd> lmvm vgk
Browse full module list
start end module name
fffff805`1d3a0000 fffff805`1d8bf000 vgk (no symbols)
Loaded symbol image file: vgk.sys
Image path: \??\C:\Program Files\Riot Vanguard\vgk.sys
Image name: vgk.sys
Browse all global symbols functions data
Timestamp: Thu Jul 30 22:27:22 2020 (5F231F1A)
CheckSum: 0052800E
ImageSize: 0051F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
