PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffffff8c8b48c0, memory referenced.
Arg2: 0000000000000002, value 0 = read operation, 1 = write operation.
Arg3: fffff801677ac10a, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 3
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-HH6FM2D
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 10
Key : Analysis.Memory.CommitPeak.Mb
Value: 71
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: 50
BUGCHECK_P1: ffffffff8c8b48c0
BUGCHECK_P2: 2
BUGCHECK_P3: fffff801677ac10a
BUGCHECK_P4: 2
READ_ADDRESS: fffff80165d723b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff80165c293b8: Unable to get Flags value from nt!KdVersionBlock
fffff80165c293b8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
ffffffff8c8b48c0
MM_INTERNAL_CODE: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: dllhost.exe
TRAP_FRAME: ffffed0f58d17350 -- (.trap 0xffffed0f58d17350)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000001000 rbx=0000000000000000 rcx=ffffed0f58d17540
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801677ac10a rsp=ffffed0f58d174e0 rbp=ffff9f8d0a556f9c
r8=0000000000000000 r9=00000000d137c4cc r10=0000000000000000
r11=00000000fa6b6e9e r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
CI!CiValidateFullImagePages+0x222:
fffff801`677ac10a 418bc0 mov eax,r8d
Resetting default scope
STACK_TEXT:
ffffed0f`58d170a8 fffff801`659e31d6 : 00000000`00000050 ffffffff`8c8b48c0 00000000`00000002 ffffed0f`58d17350 : nt!KeBugCheckEx
ffffed0f`58d170b0 fffff801`658730bf : 00000163`98761db5 00000000`00000002 00000000`00000000 ffffffff`8c8b48c0 : nt!MiSystemFault+0x1d64a6
ffffed0f`58d171b0 fffff801`659cf120 : 00000000`00001000 fffff801`677c1283 ffffb281`14176000 00000000`0000800c : nt!MmAccessFault+0x34f
ffffed0f`58d17350 fffff801`677ac10a : ffffecd9`408a0b02 ffffecd9`408a0b02 ffffd78d`40ec4d28 fffff801`00000003 : nt!KiPageFault+0x360
ffffed0f`58d174e0 fffff801`677abe44 : ffff9f8d`0a555008 ffffee80`01b5aba0 ffffb281`14176000 ffff9f8d`0a555008 : CI!CiValidateFullImagePages+0x222
ffffed0f`58d175a0 fffff801`677ad459 : ffff9f8d`0a555000 00000000`00000000 00000000`00000000 ffffee80`031ddc90 : CI!CiValidateImagePages+0x98
ffffed0f`58d175f0 fffff801`65e81fed : ffff9f8d`0a555000 ffffd78d`40ec4f90 ffffd78d`4d5bcc20 ffffd78d`40ec4ce0 : CI!CiValidateImageData+0xc9
ffffed0f`58d17630 fffff801`65e81f3c : ffff9f8d`0a555000 ffffee80`01b5aba0 00000000`00000001 ffffd78d`4e2b09c0 : nt!SeValidateImageData+0x2d
ffffed0f`58d17680 fffff801`6588e64f : 00000000`00000000 00000000`0013ec00 ffffd78d`4e2b04c0 fffff801`ffffffff : nt!MiValidateImagePfn+0x154
ffffed0f`58d176f0 fffff801`6588df18 : ffffd78d`00000000 ffffecbf`00000000 00000000`00000000 ffffd78d`40ec4f90 : nt!MiValidateInPage+0x2df
ffffed0f`58d177a0 fffff801`6588d65d : 00000000`00000000 ffffed0f`00000000 ffffed0f`58d17908 ffffecf6`00000000 : nt!MiWaitForInPageComplete+0x278
ffffed0f`58d178b0 fffff801`6587317b : 00000000`c0033333 00000000`00000001 00007ffb`91ba161c 00000000`00000000 : nt!MiIssueHardFault+0x1ad
ffffed0f`58d17960 fffff801`659cf120 : ffffd78d`48c68080 ffffed0f`58d17b80 00000000`00000000 ffffd78d`40bdfb60 : nt!MmAccessFault+0x40b
ffffed0f`58d17b00 00007ffb`91a7cd03 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x360
00000014`86af5e60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`91a7cd03
SYMBOL_NAME: CI!CiValidateFullImagePages+222
MODULE_NAME: CI
IMAGE_NAME: CI.dll
IMAGE_VERSION: 10.0.18362.329
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 222
FAILURE_BUCKET_ID: AV_INVALID_CI!CiValidateFullImagePages
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {edcda5db-78de-33cc-a88b-872bcf8c8ac7}
Followup: MachineOwner
---------
3: kd> lmvm CI
Browse full module list
start end module name
fffff801`67760000 fffff801`6783c000 CI (pdb symbols) C:\ProgramData\Dbg\sym\ci.pdb\E81824EF86DE97426B53F8C082EFB2721\ci.pdb
Loaded symbol image file: CI.dll
Mapped memory image file: C:\ProgramData\Dbg\sym\CI.dll\64B700C8dc000\CI.dll
Image path: \SystemRoot\system32\CI.dll
Image name: CI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 64B700C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000E3DF3
ImageSize: 000DC000
File version: 10.0.18362.329
Product version: 10.0.18362.329
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ci.dll
OriginalFilename: ci.dll
ProductVersion: 10.0.18362.329
FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
FileDescription: Code Integrity Module
LegalCopyright: © Microsoft Corporation. All rights reserved.
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000100000098, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8067b2280c0, address which referenced memory
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 3
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-HH6FM2D
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 17
Key : Analysis.Memory.CommitPeak.Mb
Value: 68
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: a
BUGCHECK_P1: 100000098
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff8067b2280c0
READ_ADDRESS: fffff8067b7723b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8067b6293b8: Unable to get Flags value from nt!KdVersionBlock
fffff8067b6293b8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
0000000100000098
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
TRAP_FRAME: fffff8067e46b0d0 -- (.trap 0xfffff8067e46b0d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000ffffffd8 rbx=0000000000000000 rcx=0000000000000001
rdx=0000000000000006 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8067b2280c0 rsp=fffff8067e46b260 rbp=fffff8067e46b2f0
r8=0000000000000002 r9=fffff8067b647df0 r10=0000000000000001
r11=fffff8067e46b2e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!KiIntSteerCalculateDistribution+0x120:
fffff806`7b2280c0 4839b8c0000000 cmp qword ptr [rax+0C0h],rdi ds:00000001`00000098=????????????????
Resetting default scope
STACK_TEXT:
fffff806`7e46af88 fffff806`7b3d2ee9 : 00000000`0000000a 00000001`00000098 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff806`7e46af90 fffff806`7b3cf22b : ffff9e08`0000012c ffff9e08`00000000 00010000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff806`7e46b0d0 fffff806`7b2280c0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x46b
fffff806`7e46b260 fffff806`7b22737e : 00000000`00000001 0f0f0f0f`0f0f0f0f 00000000`00000002 00000000`00000002 : nt!KiIntSteerCalculateDistribution+0x120
fffff806`7e46b330 fffff806`7b227ba0 : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000001 : nt!PpmParkSteerInterrupts+0x45e
fffff806`7e46b7f0 fffff806`7b22672e : fffff806`7b6447e8 00000000`00000000 fffff806`7e46b9f0 fffff806`7b63a5c0 : nt!PpmCheckStart+0x120
fffff806`7e46b8a0 fffff806`7b26b065 : ffff9e08`d0254080 ffff9e08`d0254080 ffff9e08`d02541f0 fffff806`7b248c93 : nt!PpmCheckPeriodicStart+0x3e
fffff806`7e46b8f0 fffff806`7b26a6bf : 00000000`0000001e 00000000`00989680 00000000`002d94fb 00000000`00000013 : nt!KiExecuteAllDpcs+0x305
fffff806`7e46ba30 fffff806`7b3c4be4 : 00000000`00000000 fffff806`76322180 fffff806`7b790400 ffff9e08`ce711080 : nt!KiRetireDpcList+0x1ef
fffff806`7e46bc60 00000000`00000000 : fffff806`7e46c000 fffff806`7e466000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x84
SYMBOL_NAME: nt!KiIntSteerCalculateDistribution+120
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.18362.329
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 120
FAILURE_BUCKET_ID: AV_nt!KiIntSteerCalculateDistribution
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {3035e70d-e1a6-b78e-ff73-da6251b6f39c}
Followup: MachineOwner
---------