IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffffffffffffff10, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8075d405ad2, address which referenced memory
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for FACEIT.sys
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd.
SYSTEM_PRODUCT_NAME: MS-7C00
SYSTEM_SKU: Default string
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1.60
BIOS_DATE: 12/27/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd.
BASEBOARD_PRODUCT: MAG Z390M MORTAR (MS-7C00)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffffffffffff10
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff8075d405ad2
READ_ADDRESS: fffff8075d9733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffffffffffff10
CURRENT_IRQL: 2
FAULTING_IP:
nt!ObReferenceObjectByPointer+22
fffff807`5d405ad2 0fb646e8 movzx eax,byte ptr [rsi-18h]
CPU_COUNT: 6
CPU_MHZ: e70
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: d
CPU_MICROCODE: 6,9e,d,0 (F,M,S,R) SIG: CA'00000000 (cache) CA'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: System
ANALYSIS_SESSION_HOST: DESKTOP-7KGVC4E
ANALYSIS_SESSION_TIME: 03-30-2020 19:12:59.0919
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
TRAP_FRAME: ffff918cf036f7e0 -- (.trap 0xffff918cf036f7e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00fffffffffffffe rbx=0000000000000000 rcx=00000000000000fe
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8075d405ad2 rsp=ffff918cf036f970 rbp=ffff918cf036fa08
r8=ffffbb0f672d2560 r9=0000000000000000 r10=ffffbb0f67202000
r11=ffff918cf036f900 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 ov up ei pl nz na pe cy
nt!ObReferenceObjectByPointer+0x22:
fffff807`5d405ad2 0fb646e8 movzx eax,byte ptr [rsi-18h] ds:ffffffff`ffffffe8=??
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8075d5d41e9 to fffff8075d5c2380
STACK_TEXT:
ffff918c`f036f698 fffff807`5d5d41e9 : 00000000`0000000a ffffffff`ffffff10 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffff918c`f036f6a0 fffff807`5d5d052b : ffffffff`ffffff28 fffff807`5b992a80 00000000`00000000 00000000`000000d8 : nt!KiBugCheckDispatch+0x69
ffff918c`f036f7e0 fffff807`5d405ad2 : 00000000`00000000 ffff918c`f036f900 00000000`00000100 ffffbb0f`672d2560 : nt!KiPageFault+0x46b
ffff918c`f036f970 fffff807`c30a8673 : 00000000`00000000 ffffffff`ffffff28 fffff807`6639c000 ffff918c`f036faa9 : nt!ObReferenceObjectByPointer+0x22
ffff918c`f036f9b0 00000000`00000000 : ffffffff`ffffff28 fffff807`6639c000 ffff918c`f036faa9 fffff807`5b98d180 : FACEIT+0x1228673
THREAD_SHA1_HASH_MOD_FUNC: d14485e17d8214f131b2b3abf4f1704a1e671c28
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 701dd28aa308d1303c2da4b858af9db09a0cab61
THREAD_SHA1_HASH_MOD: f708057e5099b86c33ebe00e9b943a2ae2856767
FOLLOWUP_IP:
FACEIT+1228673
fffff807`c30a8673 68fb021750 push 501702FBh
FAULT_INSTR_CODE: 1702fb68
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: FACEIT+1228673
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: FACEIT
IMAGE_NAME: FACEIT.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5e81d50d
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 1228673
FAILURE_BUCKET_ID: AV_FACEIT!unknown_function
BUCKET_ID: AV_FACEIT!unknown_function
PRIMARY_PROBLEM_CLASS: AV_FACEIT!unknown_function
TARGET_TIME: 2020-03-30T14:28:59.000Z
OSBUILD: 18362
OSSERVICEPACK: 720
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: unknown_date
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 233c
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_faceit!unknown_function
FAILURE_ID_HASH: {44e6f20c-7ace-d9ee-735b-d9e711e96ad0}
Followup: MachineOwner
---------