IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000002064014500, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8037a43d113, address which referenced memory
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4311
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-1IBQR0U
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.mSec
Value: 32496
Key : Analysis.Memory.CommitPeak.Mb
Value: 75
Key : Analysis.System
Value: CreateObject
Key : WER.OS.Branch
Value: rs5_release
Key : WER.OS.Timestamp
Value: 2018-09-14T14:34:00Z
Key : WER.OS.Version
Value: 10.0.17763.1
ADDITIONAL_XML: 1
OS_BUILD_LAYERS: 1
BUGCHECK_CODE: a
BUGCHECK_P1: 2064014500
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff8037a43d113
READ_ADDRESS: fffff8037a820e78: Unable to get Flags value from nt!KdVersionBlock
GetUlongFromAddress: unable to read from fffff8037a8e5380
fffff8037a960390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8037a820e78: Unable to get Flags value from nt!KdVersionBlock
0000002064014500
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXPNP: 1 (!blackboxpnp)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: svchost.exe
TRAP_FRAME: ffffb70b63ea9950 -- (.trap 0xffffb70b63ea9950)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000002064014500 rbx=0000000000000000 rcx=00000000001e7232
rdx=0000000000000420 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8037a43d113 rsp=ffffb70b63ea9ae0 rbp=0000000000001000
r8=000000000016bf66 r9=0000000000000000 r10=fffff5fafd7eb000
r11=fffff5fafd7eb7f8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!MiAllocateAccessLog+0xe3:
fffff803`7a43d113 48833800 cmp qword ptr [rax],0 ds:00000020`64014500=????????????????
Resetting default scope
STACK_TEXT:
ffffb70b`63ea9808 fffff803`7a5e3669 : 00000000`0000000a 00000020`64014500 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffb70b`63ea9810 fffff803`7a5dfa8e : ffffb90c`00000000 00000000`00000fff ffffb90c`000008f4 00000000`00001001 : nt!KiBugCheckDispatch+0x69
ffffb70b`63ea9950 fffff803`7a43d113 : ffffb90c`4133d9c0 fffff803`7a4e2376 ffffb90c`443159f0 fffff803`7ae92af6 : nt!KiPageFault+0x44e
ffffb70b`63ea9ae0 fffff803`7a4ce987 : fffff580`18221610 ffff9e00`0443e320 ffffcc00`5e825180 1a000001`ef733867 : nt!MiAllocateAccessLog+0xe3
ffffb70b`63ea9b10 fffff803`7a4ce23a : 1a000001`63ef4867 1a000001`00000000 00000000`00000000 80000001`6bf66847 : nt!MiLogPageAccess+0x397
ffffb70b`63ea9ba0 fffff803`7a4cdcf3 : 00000000`00000000 ffff9e00`0443e320 00000030`442c2000 ffffb90c`34a43178 : nt!MiClearPteAccessed+0x27a
ffffb70b`63ea9c20 fffff803`7a4cd724 : ffffb90c`4136cb00 ffffb90c`4133d9c0 ffffb70b`63eaa250 ffffb70b`63eaa350 : nt!MiAgePteWorker+0x1f3
ffffb70b`63ea9c80 fffff803`7a4c6587 : ffffb70b`00000004 00000000`00000000 00000000`00000003 fffff803`00000000 : nt!MiAgePte+0x134
ffffb70b`63ea9d10 fffff803`7a4c697a : ffffb70b`63eaa350 ffffb70b`00000000 fffff5fa`00000000 fffff803`00000000 : nt!MiWalkPageTablesRecursively+0x2c7
ffffb70b`63ea9e00 fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000001 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
ffffb70b`63ea9ef0 fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000002 ffffb90c`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
ffffb70b`63ea9fe0 fffff803`7a4c5e3a : ffffb70b`63eaa350 00000000`00000000 ffffb70b`00000003 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
ffffb70b`63eaa0d0 fffff803`7a4c54ee : ffffb70b`63eaa350 ffffb90c`00000002 ffffb90c`00000000 fffff803`00000000 : nt!MiWalkPageTables+0x1ea
ffffb70b`63eaa1c0 fffff803`7a4c4c46 : ffffb90c`4391d080 00000000`00000000 00000000`00000400 00000000`00000000 : nt!MiAgeWorkingSet+0x38e
ffffb70b`63eaa6d0 fffff803`7a5437d5 : 00000000`00000000 ffffb70b`63eaa980 ffffb70b`63eaa8b0 00000000`00000000 : nt!MiTrimOrAgeWorkingSet+0x3b6
ffffb70b`63eaa7b0 fffff803`7a5421b6 : fffff803`00000003 fffff803`00000000 fffff803`7a85b840 ffffb90c`34a430f0 : nt!MiProcessWorkingSets+0x255
ffffb70b`63eaa960 fffff803`7a59cb87 : 00000000`00000002 00000000`00000002 00000000`ffffffff 00000000`00000001 : nt!MiWorkingSetManager+0xaa
ffffb70b`63eaaa20 fffff803`7a45bb35 : ffffb90c`34bc6040 00000000`00000080 fffff803`7a59ca40 00000094`00007461 : nt!KeBalanceSetManager+0x147
ffffb70b`63eaab10 fffff803`7a5d935c : ffffcc00`5e825180 ffffb90c`34bc6040 fffff803`7a45bae0 00800c01`27000000 : nt!PspSystemThreadStartup+0x55
ffffb70b`63eaab60 00000000`00000000 : ffffb70b`63eab000 ffffb70b`63ea4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x1c
SYMBOL_NAME: nt!MiAllocateAccessLog+e3
MODULE_NAME: nt
IMAGE_VERSION: 10.0.17763.557
STACK_COMMAND: .thread ; .cxr ; kb
IMAGE_NAME: ntkrnlmp.exe
BUCKET_ID_FUNC_OFFSET: e3
FAILURE_BUCKET_ID: AV_nt!MiAllocateAccessLog
OS_VERSION: 10.0.17763.1
BUILDLAB_STR: rs5_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {e7398886-824d-2708-92f3-ea2c0b57746e}
Followup: MachineOwner
---------
1: kd> .bugcheck
Bugcheck code 0000000A
Arguments 00000020`64014500 00000000`00000002 00000000`00000000 fffff803`7a43d113
1: kd> kb
# RetAddr : Args to Child : Call Site
00 fffff803`7a5e3669 : 00000000`0000000a 00000020`64014500 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
01 fffff803`7a5dfa8e : ffffb90c`00000000 00000000`00000fff ffffb90c`000008f4 00000000`00001001 : nt!KiBugCheckDispatch+0x69
02 fffff803`7a43d113 : ffffb90c`4133d9c0 fffff803`7a4e2376 ffffb90c`443159f0 fffff803`7ae92af6 : nt!KiPageFault+0x44e
03 fffff803`7a4ce987 : fffff580`18221610 ffff9e00`0443e320 ffffcc00`5e825180 1a000001`ef733867 : nt!MiAllocateAccessLog+0xe3
04 fffff803`7a4ce23a : 1a000001`63ef4867 1a000001`00000000 00000000`00000000 80000001`6bf66847 : nt!MiLogPageAccess+0x397
05 fffff803`7a4cdcf3 : 00000000`00000000 ffff9e00`0443e320 00000030`442c2000 ffffb90c`34a43178 : nt!MiClearPteAccessed+0x27a
06 fffff803`7a4cd724 : ffffb90c`4136cb00 ffffb90c`4133d9c0 ffffb70b`63eaa250 ffffb70b`63eaa350 : nt!MiAgePteWorker+0x1f3
07 fffff803`7a4c6587 : ffffb70b`00000004 00000000`00000000 00000000`00000003 fffff803`00000000 : nt!MiAgePte+0x134
08 fffff803`7a4c697a : ffffb70b`63eaa350 ffffb70b`00000000 fffff5fa`00000000 fffff803`00000000 : nt!MiWalkPageTablesRecursively+0x2c7
09 fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000001 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
0a fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000002 ffffb90c`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
0b fffff803`7a4c5e3a : ffffb70b`63eaa350 00000000`00000000 ffffb70b`00000003 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
0c fffff803`7a4c54ee : ffffb70b`63eaa350 ffffb90c`00000002 ffffb90c`00000000 fffff803`00000000 : nt!MiWalkPageTables+0x1ea
0d fffff803`7a4c4c46 : ffffb90c`4391d080 00000000`00000000 00000000`00000400 00000000`00000000 : nt!MiAgeWorkingSet+0x38e
0e fffff803`7a5437d5 : 00000000`00000000 ffffb70b`63eaa980 ffffb70b`63eaa8b0 00000000`00000000 : nt!MiTrimOrAgeWorkingSet+0x3b6
0f fffff803`7a5421b6 : fffff803`00000003 fffff803`00000000 fffff803`7a85b840 ffffb90c`34a430f0 : nt!MiProcessWorkingSets+0x255
10 fffff803`7a59cb87 : 00000000`00000002 00000000`00000002 00000000`ffffffff 00000000`00000001 : nt!MiWorkingSetManager+0xaa
11 fffff803`7a45bb35 : ffffb90c`34bc6040 00000000`00000080 fffff803`7a59ca40 00000094`00007461 : nt!KeBalanceSetManager+0x147
12 fffff803`7a5d935c : ffffcc00`5e825180 ffffb90c`34bc6040 fffff803`7a45bae0 00800c01`27000000 : nt!PspSystemThreadStartup+0x55
13 00000000`00000000 : ffffb70b`63eab000 ffffb70b`63ea4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x1c
1: kd> kv
# Child-SP RetAddr : Args to Child : Call Site
00 ffffb70b`63ea9808 fffff803`7a5e3669 : 00000000`0000000a 00000020`64014500 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
01 ffffb70b`63ea9810 fffff803`7a5dfa8e : ffffb90c`00000000 00000000`00000fff ffffb90c`000008f4 00000000`00001001 : nt!KiBugCheckDispatch+0x69
02 ffffb70b`63ea9950 fffff803`7a43d113 : ffffb90c`4133d9c0 fffff803`7a4e2376 ffffb90c`443159f0 fffff803`7ae92af6 : nt!KiPageFault+0x44e (TrapFrame @ ffffb70b`63ea9950)
03 ffffb70b`63ea9ae0 fffff803`7a4ce987 : fffff580`18221610 ffff9e00`0443e320 ffffcc00`5e825180 1a000001`ef733867 : nt!MiAllocateAccessLog+0xe3
04 ffffb70b`63ea9b10 fffff803`7a4ce23a : 1a000001`63ef4867 1a000001`00000000 00000000`00000000 80000001`6bf66847 : nt!MiLogPageAccess+0x397
05 ffffb70b`63ea9ba0 fffff803`7a4cdcf3 : 00000000`00000000 ffff9e00`0443e320 00000030`442c2000 ffffb90c`34a43178 : nt!MiClearPteAccessed+0x27a
06 ffffb70b`63ea9c20 fffff803`7a4cd724 : ffffb90c`4136cb00 ffffb90c`4133d9c0 ffffb70b`63eaa250 ffffb70b`63eaa350 : nt!MiAgePteWorker+0x1f3
07 ffffb70b`63ea9c80 fffff803`7a4c6587 : ffffb70b`00000004 00000000`00000000 00000000`00000003 fffff803`00000000 : nt!MiAgePte+0x134
08 ffffb70b`63ea9d10 fffff803`7a4c697a : ffffb70b`63eaa350 ffffb70b`00000000 fffff5fa`00000000 fffff803`00000000 : nt!MiWalkPageTablesRecursively+0x2c7
09 ffffb70b`63ea9e00 fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000001 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
0a ffffb70b`63ea9ef0 fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000002 ffffb90c`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
0b ffffb70b`63ea9fe0 fffff803`7a4c5e3a : ffffb70b`63eaa350 00000000`00000000 ffffb70b`00000003 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
0c ffffb70b`63eaa0d0 fffff803`7a4c54ee : ffffb70b`63eaa350 ffffb90c`00000002 ffffb90c`00000000 fffff803`00000000 : nt!MiWalkPageTables+0x1ea
0d ffffb70b`63eaa1c0 fffff803`7a4c4c46 : ffffb90c`4391d080 00000000`00000000 00000000`00000400 00000000`00000000 : nt!MiAgeWorkingSet+0x38e
0e ffffb70b`63eaa6d0 fffff803`7a5437d5 : 00000000`00000000 ffffb70b`63eaa980 ffffb70b`63eaa8b0 00000000`00000000 : nt!MiTrimOrAgeWorkingSet+0x3b6
0f ffffb70b`63eaa7b0 fffff803`7a5421b6 : fffff803`00000003 fffff803`00000000 fffff803`7a85b840 ffffb90c`34a430f0 : nt!MiProcessWorkingSets+0x255
10 ffffb70b`63eaa960 fffff803`7a59cb87 : 00000000`00000002 00000000`00000002 00000000`ffffffff 00000000`00000001 : nt!MiWorkingSetManager+0xaa
11 ffffb70b`63eaaa20 fffff803`7a45bb35 : ffffb90c`34bc6040 00000000`00000080 fffff803`7a59ca40 00000094`00007461 : nt!KeBalanceSetManager+0x147
12 ffffb70b`63eaab10 fffff803`7a5d935c : ffffcc00`5e825180 ffffb90c`34bc6040 fffff803`7a45bae0 00800c01`27000000 : nt!PspSystemThreadStartup+0x55
13 ffffb70b`63eaab60 00000000`00000000 : ffffb70b`63eab000 ffffb70b`63ea4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x1c
1: kd> .trap 63ea9950
Unable to read trap frame at 00000000`63ea9950
1: kd> .trap ffffb70b`63ea9950
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000002064014500 rbx=0000000000000000 rcx=00000000001e7232
rdx=0000000000000420 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8037a43d113 rsp=ffffb70b63ea9ae0 rbp=0000000000001000
r8=000000000016bf66 r9=0000000000000000 r10=fffff5fafd7eb000
r11=fffff5fafd7eb7f8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!MiAllocateAccessLog+0xe3:
fffff803`7a43d113 48833800 cmp qword ptr [rax],0 ds:00000020`64014500=????????????????
1: kd> kb
*** Stack trace for last set context - .thread/.cxr resets it
# RetAddr : Args to Child : Call Site
00 fffff803`7a4ce987 : fffff580`18221610 ffff9e00`0443e320 ffffcc00`5e825180 1a000001`ef733867 : nt!MiAllocateAccessLog+0xe3
01 fffff803`7a4ce23a : 1a000001`63ef4867 1a000001`00000000 00000000`00000000 80000001`6bf66847 : nt!MiLogPageAccess+0x397
02 fffff803`7a4cdcf3 : 00000000`00000000 ffff9e00`0443e320 00000030`442c2000 ffffb90c`34a43178 : nt!MiClearPteAccessed+0x27a
03 fffff803`7a4cd724 : ffffb90c`4136cb00 ffffb90c`4133d9c0 ffffb70b`63eaa250 ffffb70b`63eaa350 : nt!MiAgePteWorker+0x1f3
04 fffff803`7a4c6587 : ffffb70b`00000004 00000000`00000000 00000000`00000003 fffff803`00000000 : nt!MiAgePte+0x134
05 fffff803`7a4c697a : ffffb70b`63eaa350 ffffb70b`00000000 fffff5fa`00000000 fffff803`00000000 : nt!MiWalkPageTablesRecursively+0x2c7
06 fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000001 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
07 fffff803`7a4c697a : ffffb70b`63eaa350 00000000`00000000 fffff5fa`00000002 ffffb90c`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
08 fffff803`7a4c5e3a : ffffb70b`63eaa350 00000000`00000000 ffffb70b`00000003 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6ba
09 fffff803`7a4c54ee : ffffb70b`63eaa350 ffffb90c`00000002 ffffb90c`00000000 fffff803`00000000 : nt!MiWalkPageTables+0x1ea
0a fffff803`7a4c4c46 : ffffb90c`4391d080 00000000`00000000 00000000`00000400 00000000`00000000 : nt!MiAgeWorkingSet+0x38e
0b fffff803`7a5437d5 : 00000000`00000000 ffffb70b`63eaa980 ffffb70b`63eaa8b0 00000000`00000000 : nt!MiTrimOrAgeWorkingSet+0x3b6
0c fffff803`7a5421b6 : fffff803`00000003 fffff803`00000000 fffff803`7a85b840 ffffb90c`34a430f0 : nt!MiProcessWorkingSets+0x255
0d fffff803`7a59cb87 : 00000000`00000002 00000000`00000002 00000000`ffffffff 00000000`00000001 : nt!MiWorkingSetManager+0xaa
0e fffff803`7a45bb35 : ffffb90c`34bc6040 00000000`00000080 fffff803`7a59ca40 00000094`00007461 : nt!KeBalanceSetManager+0x147
0f fffff803`7a5d935c : ffffcc00`5e825180 ffffb90c`34bc6040 fffff803`7a45bae0 00800c01`27000000 : nt!PspSystemThreadStartup+0x55
10 00000000`00000000 : ffffb70b`63eab000 ffffb70b`63ea4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x1c
1: kd> !pool
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8037a820e78: Unable to get Flags value from nt!KdVersionBlock
The pool page you have specified is not in this dump.
1: kd> ln
Browse module
Set bu breakpoint
(fffff803`7a43d030) nt!MiAllocateAccessLog+0xe3 | (fffff803`7a43d144) nt!MiInitializePageAccessLogging
1: kd> !pte
VA 0000000000000000
PXE at FFFFF5FAFD7EB000 PPE at FFFFF5FAFD600000 PDE at FFFFF5FAC0000000 PTE at FFFFF58000000000
Unable to get PXE FFFFF5FAFD600000
