DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff80476036020, address which referenced memory
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for NETIO.SYS
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 5187
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 29492
Key : Analysis.Init.CPU.mSec
Value: 890
Key : Analysis.Init.Elapsed.mSec
Value: 45002
Key : Analysis.Memory.CommitPeak.Mb
Value: 75
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
FILE_IN_CAB: 122221-27765-01.dmp
BUGCHECK_CODE: d1
BUGCHECK_P1: 0
BUGCHECK_P2: 2
BUGCHECK_P3: 1
BUGCHECK_P4: fffff80476036020
WRITE_ADDRESS: fffff80478cfb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
0000000000000000
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: dasHost.exe
TRAP_FRAME: fffff30bdbb5bdf0 -- (.trap 0xfffff30bdbb5bdf0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=00003f11f3ce5595
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80476036020 rsp=fffff30bdbb5bf88 rbp=fffff30bdbb5c090
r8=ffffce86b88f61f0 r9=0000000000000000 r10=fffff804782daa90
r11=ffff72fa89000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
WdNisDrv!_security_check_cookie:
fffff804`76036020 0000 add byte ptr [rax],al ds:00000000`00000000=??
Resetting default scope
STACK_TEXT:
fffff30b`dbb5bca8 fffff804`78407d69 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff30b`dbb5bcb0 fffff804`78404069 : ffffce86`b8a619b0 fffff30b`dbb5cd14 fffff30b`dbb5d018 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff30b`dbb5bdf0 fffff804`76036020 : fffff804`76033aab ffffce86`b8d87208 fffff30b`dbb5c090 00000000`000010ec : nt!KiPageFault+0x469
fffff30b`dbb5bf88 fffff804`76033aab : ffffce86`b8d87208 fffff30b`dbb5c090 00000000`000010ec 00000000`00000000 : WdNisDrv!_security_check_cookie
fffff30b`dbb5bf90 fffff804`760331b9 : ffffce86`b05dab90 00000000`00000000 00000000`00000000 00000000`00000000 : WdNisDrv!wfp_callout<implementation::wfp_callout,implementation::spin_lock,implementation::event,implementation::avl_table,stream_handler<implementation::stream_handler<implementation::irp,implementation::queue,implementation::csqueue,implementation::spin_lock,10000> >,running_processes<implementation::running_processes,implementation::avl_table,implementation::spin_lock,atomic_shared_ptr<excluded_paths,implementation::spin_lock>::accessor_t> >::flow_established_classify_+0x57b
fffff30b`dbb5c370 fffff804`7b9eca50 : ffffce86`b05dab90 ffffce86`b97a4d08 00000000`00000078 00000000`00000000 : WdNisDrv!wfp_callout<implementation::wfp_callout,implementation::spin_lock,implementation::event,implementation::avl_table,stream_handler<implementation::stream_handler<implementation::irp,implementation::queue,implementation::csqueue,implementation::spin_lock,10000> >,running_processes<implementation::running_processes,implementation::avl_table,implementation::spin_lock,atomic_shared_ptr<excluded_paths,implementation::spin_lock>::accessor_t> >::flow_established_classify+0x19
fffff30b`dbb5c3a0 ffffce86`b05dab90 : ffffce86`b97a4d08 00000000`00000078 00000000`00000000 ffffce86`b8cc4d00 : NETIO+0xca50
fffff30b`dbb5c3a8 ffffce86`b97a4d08 : 00000000`00000078 00000000`00000000 ffffce86`b8cc4d00 00000000`00000000 : 0xffffce86`b05dab90
fffff30b`dbb5c3b0 00000000`00000078 : 00000000`00000000 ffffce86`b8cc4d00 00000000`00000000 fffff30b`dbb5c600 : 0xffffce86`b97a4d08
fffff30b`dbb5c3b8 00000000`00000000 : ffffce86`b8cc4d00 00000000`00000000 fffff30b`dbb5c600 00000000`00000000 : 0x78
CHKIMG_EXTENSION: !chkimg -lo 50 -d !WdNisDrv
fffff80476036000-fffff8047603601a 27 bytes - WdNisDrv!WdmlibRtlInitUnicodeStringEx+38
[ 33 c0 66 44 89 41 02 48:20 00 00 20 00 00 00 40 ]
fffff80476036020-fffff80476036024 5 bytes - WdNisDrv!_security_check_cookie (+0x20)
[ 48 3b 0d 59 30:00 00 00 80 00 ]
fffff80476036027-fffff8047603603c 22 bytes - WdNisDrv!_security_check_cookie+7 (+0x07)
[ 75 10 48 c1 c1 10 66 f7:00 01 00 00 14 80 00 00 ]
fffff8047603603e-fffff80476036041 4 bytes - WdNisDrv!_security_check_cookie+1e (+0x17)
[ cc cc b9 02:00 00 40 00 ]
fffff80476036043-fffff80476036050 14 bytes - WdNisDrv!_report_gsfailure+3 (+0x05)
[ 00 00 cd 29 cc cc cc cc:20 48 00 00 01 00 00 00 ]
fffff80476036052-fffff8047603606f 30 bytes - WdNisDrv!guard_check_icall_nop+2 (+0x0f)
[ 00 cc cc cc cc cc cc cc:10 01 00 01 00 01 00 00 ]
fffff80476036073-fffff80476036074 2 bytes - WdNisDrv!_GSHandlerCheck+13 (+0x21)
[ b8 01:80 22 ]
fffff80476036078-fffff80476036085 14 bytes - WdNisDrv!_GSHandlerCheck+18 (+0x05)
[ 48 83 c4 28 c3 cc cc cc:00 00 00 00 01 00 02 00 ]
fffff80476036087-fffff80476036099 19 bytes - WdNisDrv!_GSHandlerCheckCommon+7 (+0x0f)
[ 4c 8b c9 44 8b d8 4c 8b:00 00 00 00 00 00 00 00 ]
fffff8047603609b-fffff804760360ea 80 bytes - WdNisDrv!_GSHandlerCheckCommon+1b (+0x14)
[ 08 4d 63 50 04 f7 d8 4c:00 04 00 00 40 00 00 00 ]
fffff804760360ef - WdNisDrv!_GSHandlerCheckCommon+6f (+0x54)
[ 00:10 ]
fffff804760360f5-fffff80476036109 21 bytes - WdNisDrv!guard_dispatch_icall_nop+5 (+0x06)
[ cc cc cc cc cc cc cc cc:00 01 10 03 00 00 00 03 ]
fffff8047603610c-fffff8047603613a 47 bytes - WdNisDrv!memcpy+c (+0x17)
[ 49 83 f8 4f 73 58 4d 8b:00 00 00 00 00 40 00 00 ]
fffff8047603613c-fffff8047603613e 3 bytes - WdNisDrv!memcpy+3c (+0x30)
[ 00 00 00:02 80 80 ]
fffff80476036140-fffff8047603615b 28 bytes - WdNisDrv!memcpy+40 (+0x04)
[ 8a 04 11 48 ff c1 49 ff:00 00 00 00 00 00 06 00 ]
fffff8047603615d - WdNisDrv!memcpy+5d (+0x1d)
[ 00:20 ]
fffff8047603615f-fffff80476036191 51 bytes - WdNisDrv!memcpy+5f (+0x02)
[ 00 90 90 90 90 90 90 90:40 00 20 00 00 00 00 00 ]
fffff80476036193 - WdNisDrv!memcpy+93 (+0x34)
[ 20:80 ]
fffff80476036196-fffff8047603619a 5 bytes - WdNisDrv!memcpy+96 (+0x03)
[ 0f 87 76 00 00:00 00 00 02 c0 ]
fffff8047603619c-fffff804760361cc 49 bytes - WdNisDrv!memcpy+9c (+0x06)
[ 49 83 e0 1f f3 0f 6f 04:00 00 00 01 00 00 00 00 ]
fffff804760361ce - WdNisDrv!memcpy+ce (+0x32)
[ 00:02 ]
fffff804760361d2-fffff804760361db 10 bytes - WdNisDrv!memcpy+d2 (+0x04)
[ 66 66 66 66 66 66 0f 1f:40 00 04 00 00 00 00 00 ]
fffff804760361e0-fffff804760361fa 27 bytes - WdNisDrv!memcpy+e0 (+0x0e)
[ f6 c1 0f 74 a3 8a 04 11:20 20 20 00 02 00 00 00 ]
fffff80476036200-fffff80476036214 21 bytes - WdNisDrv!memcpy+100 (+0x20)
[ 90 90 90 90 90 90 90 90:00 00 00 10 00 00 24 80 ]
fffff80476036216 - WdNisDrv!memcpy+116 (+0x16)
[ 02:00 ]
fffff80476036218-fffff8047603621c 5 bytes - WdNisDrv!memcpy+118 (+0x02)
[ 00 72 81 b8 04:80 00 00 01 00 ]
fffff8047603621f-fffff8047603622c 14 bytes - WdNisDrv!memcpy+11f (+0x07)
[ 00 0f 18 04 11 0f 18 44:18 00 02 00 00 20 00 01 ]
fffff80476036230-fffff80476036236 7 bytes - WdNisDrv!memcpy+130 (+0x11)
[ ff c8 75 ec 48 81 e9:00 00 00 00 00 00 00 ]
fffff80476036238-fffff80476036239 2 bytes - WdNisDrv!memcpy+138 (+0x08)
[ 02 00:00 02 ]
fffff8047603623b-fffff8047603623c 2 bytes - WdNisDrv!memcpy+13b (+0x03)
[ b8 08:00 00 ]
fffff80476036240-fffff80476036277 56 bytes - WdNisDrv!memcpy+140 (+0x05)
[ f3 0f 6f 04 11 f3 0f 6f:00 00 80 00 00 40 02 00 ]
fffff80476036279-fffff8047603627b 3 bytes - WdNisDrv!memcpy+179 (+0x39)
[ 49 81 f8:00 00 00 ]
fffff8047603627d-fffff8047603629b 31 bytes - WdNisDrv!memcpy+17d (+0x04)
[ 02 00 00 73 99 f0 80 0c:00 10 40 00 00 10 20 00 ]
fffff8047603629e - WdNisDrv!memcpy+19e (+0x21)
[ 00:04 ]
fffff804760362a0-fffff804760362da 59 bytes - WdNisDrv!memcpy+1a0 (+0x02)
[ 90 90 90 90 90 90 90 90:40 00 08 00 00 00 00 00 ]
fffff804760362dc - WdNisDrv!memcpy+1dc (+0x3c)
[ 00:02 ]
fffff804760362e0-fffff8047603631d 62 bytes - WdNisDrv!memcpy+1e0 (+0x04)
[ 8a 44 11 ff 48 ff c9 49:00 00 10 00 40 80 00 42 ]
fffff8047603631f-fffff80476036331 19 bytes - WdNisDrv!memcpy+21f (+0x3f)
[ f0 f3 0f 7f 40 f0 48 03:00 02 40 00 02 00 60 00 ]
fffff80476036333 - WdNisDrv!memcpy+233 (+0x14)
[ 20:00 ]
fffff80476036336-fffff80476036338 3 bytes - WdNisDrv!memcpy+236 (+0x03)
[ 0f 87 76:00 00 40 ]
fffff8047603633c-fffff8047603636c 49 bytes - WdNisDrv!memcpy+23c (+0x06)
[ 49 83 e0 1f f3 0f 6f 44:00 00 00 00 00 00 00 00 ]
fffff80476036371-fffff8047603637a 10 bytes - WdNisDrv!memcpy+271 (+0x35)
[ 00 66 66 66 66 66 66 0f:40 00 00 00 40 00 00 04 ]
fffff80476036380-fffff8047603639a 27 bytes - WdNisDrv!memcpy+280 (+0x0f)
[ f6 c1 0f 74 a3 48 ff c9:00 00 01 00 00 01 00 00 ]
fffff8047603639c-fffff8047603639d 2 bytes - WdNisDrv!memcpy+29c (+0x1c)
[ 00 00:20 01 ]
fffff804760363a0-fffff804760363b4 21 bytes - WdNisDrv!memcpy+2a0 (+0x04)
[ 90 90 90 90 90 90 90 90:00 60 08 00 42 44 00 00 ]
fffff804760363b6-fffff804760363bc 7 bytes - WdNisDrv!memcpy+2b6 (+0x16)
[ fe ff ff 77 81 b8 04:00 02 00 08 04 02 00 ]
fffff804760363bf-fffff804760363c3 5 bytes - WdNisDrv!memcpy+2bf (+0x09)
[ 00 48 81 e9 80:04 00 00 00 00 ]
fffff804760363c5 - WdNisDrv!memcpy+2c5 (+0x06)
[ 00:10 ]
fffff804760363c7-fffff804760363d6 16 bytes - WdNisDrv!memcpy+2c7 (+0x02)
[ 0f 18 04 11 0f 18 44 11:00 00 00 00 00 08 00 00 ]
fffff804760363d8 - WdNisDrv!memcpy+2d8 (+0x11)
[ 02:00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
1199 errors : !WdNisDrv (fffff80476036000-fffff80476036528)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
MEMORY_CORRUPTOR: LARGE
STACK_COMMAND: .cxr; .ecxr ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
Followup: memory_corruption
