*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa80048e8084, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff88002a2e224, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000000, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001eb4100
fffffa80048e8084
FAULTING_IP:
Maestro2+1224
fffff880`02a2e224 410fb74704 movzx eax,word ptr [r15+4]
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP
BUGCHECK_STR: 0x50
PROCESS_NAME: csrss.exe
CURRENT_IRQL: 0
DEVICE_OBJECT: fffffa80033784d0
TRAP_FRAME: fffff8800a1fbf80 -- (.trap 0xfffff8800a1fbf80)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000240 rbx=0000000000000000 rcx=0000000000000000
rdx=00000000ffffffff rsi=0000000000000000 rdi=0000000000000000
rip=fffff88002a2e224 rsp=fffff8800a1fc110 rbp=0000000000000000
r8=fffffa8001f6b770 r9=0000000000000004 r10=0000000000000000
r11=00000000ffffffff r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
Maestro2+0x1224:
fffff880`02a2e224 410fb74704 movzx eax,word ptr [r15+4] ds:a000:00000000`00000004=????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80001c30a0c to fffff80001c84d00
STACK_TEXT:
fffff880`0a1fbe18 fffff800`01c30a0c : 00000000`00000050 fffffa80`048e8084 00000000`00000000 fffff880`0a1fbf80 : nt!KeBugCheckEx
fffff880`0a1fbe20 fffff800`01c82e2e : 00000000`00000000 fffffa80`048e8084 00000000`00000000 fffffa80`048e7e40 : nt! ?? ::FNODOBFM::`string'+0x4621f
fffff880`0a1fbf80 fffff880`02a2e224 : 00000000`00000001 fffff800`01c8abcc ffffffff`ffb3b4c0 fffff880`02a225cf : nt!KiPageFault+0x16e
fffff880`0a1fc110 00000000`00000001 : fffff800`01c8abcc ffffffff`ffb3b4c0 fffff880`02a225cf fffffa80`048e7e40 : Maestro2+0x1224
fffff880`0a1fc118 fffff800`01c8abcc : ffffffff`ffb3b4c0 fffff880`02a225cf fffffa80`048e7e40 fffff880`02a225cf : 0x1
fffff880`0a1fc120 fffffa80`04bfd3e0 : 00000000`00000028 00000000`00000004 00000000`00000026 fffff880`02a1f0a0 : nt!ExAcquireResourceExclusiveLite+0x14f
fffff880`0a1fc190 00000000`00000028 : 00000000`00000004 00000000`00000026 fffff880`02a1f0a0 fffff900`c01c0027 : 0xfffffa80`04bfd3e0
fffff880`0a1fc198 00000000`00000004 : 00000000`00000026 fffff880`02a1f0a0 fffff900`c01c0027 fffff880`0a1fc218 : 0x28
fffff880`0a1fc1a0 00000000`00000026 : fffff880`02a1f0a0 fffff900`c01c0027 fffff880`0a1fc218 00000000`00000028 : 0x4
fffff880`0a1fc1a8 fffff880`02a1f0a0 : fffff900`c01c0027 fffff880`0a1fc218 00000000`00000028 fffff880`0a1fc218 : 0x26
fffff880`0a1fc1b0 fffff880`02a2067e : 00000000`00000048 00000000`00000048 ffffffff`fd050f80 fffff900`c01c9010 : kbdclass!WPP_RECORDER_SF_+0x98
fffff880`0a1fc1f0 fffff880`02a207e3 : fffffa80`04bfd3e0 fffffa80`04bfd300 00000000`00000103 00000000`00000000 : kbdclass!KeyboardClassReadCopyData+0x236
fffff880`0a1fc260 fffff880`02a208f5 : 00000000`00000103 fffffa80`033784d0 fffffa80`01f6ce30 fffffa80`01f6ce30 : kbdclass!KeyboardClassHandleRead+0x137
fffff880`0a1fc2b0 fffff880`02a2e742 : fffffa80`01f71f80 fffffa80`04bfd3e0 fffffa80`01f71e30 fffffa80`01f71e30 : kbdclass!KeyboardClassRead+0xf1
fffff880`0a1fc2f0 fffffa80`01f71f80 : fffffa80`04bfd3e0 fffffa80`01f71e30 fffffa80`01f71e30 fffffa80`04bfd3e0 : Maestro2+0x1742
fffff880`0a1fc2f8 fffffa80`04bfd3e0 : fffffa80`01f71e30 fffffa80`01f71e30 fffffa80`04bfd3e0 fffff800`01f8c8ab : 0xfffffa80`01f71f80
fffff880`0a1fc300 fffffa80`01f71e30 : fffffa80`01f71e30 fffffa80`04bfd3e0 fffff800`01f8c8ab 00000000`00000000 : 0xfffffa80`04bfd3e0
fffff880`0a1fc308 fffffa80`01f71e30 : fffffa80`04bfd3e0 fffff800`01f8c8ab 00000000`00000000 00000000`00000000 : 0xfffffa80`01f71e30
fffff880`0a1fc310 fffffa80`04bfd3e0 : fffff800`01f8c8ab 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffa80`01f71e30
fffff880`0a1fc318 fffff800`01f8c8ab : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`04bfd3e0 : 0xfffffa80`04bfd3e0
fffff880`0a1fc320 fffff800`01f6e223 : fffffa80`033784d0 00000000`00000000 fffffa80`033784d0 fffff880`01e5c180 : nt!IopSynchronousServiceTail+0xfb
fffff880`0a1fc390 fffff800`01c83f93 : 00000000`00000101 00000000`00000000 fffff960`00137fe0 fffff900`c0e639a0 : nt!NtReadFile+0x631
fffff880`0a1fc480 fffff800`01c80530 : fffff960`00193873 fffffa80`046b4830 00000000`00000000 00000000`00000001 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0a1fc688 fffff960`00193873 : fffffa80`046b4830 00000000`00000000 00000000`00000001 fffffa80`04a14490 : nt!KiServiceLinkage
fffff880`0a1fc690 fffff960`00138064 : fffff900`c0e639a0 00000000`00000000 00000000`00000010 00000000`00000282 : win32k!StartDeviceRead+0x1df
fffff880`0a1fc6f0 fffff800`01c783b1 : 00000000`00000100 00000000`00000000 0000020d`00000000 00000000`00000000 : win32k!InputApc+0x84
fffff880`0a1fc720 fffff800`01c8a19d : fffffa80`04a14440 00000000`00000000 fffff960`00137fe0 00000000`00000000 : nt!KiDeliverApc+0x201
fffff880`0a1fc7a0 fffff800`01c894aa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x3dd
fffff880`0a1fc830 fffff960`00103ab9 : 00000000`00000004 fffffa80`03527320 00000000`00000001 00000000`0000000d : nt!KeWaitForMultipleObjects+0x272
fffff880`0a1fcaf0 fffff960`0009474c : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`80000294 : win32k!RawInputThread+0x6ed
fffff880`0a1fcbc0 fffff960`0011459a : fffffa80`00000002 fffff880`0a1b7f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`0a1fcbf0 fffff800`01c83f93 : fffffa80`04a14440 00000000`00000004 000007ff`fffae000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`0a1fcc20 000007fe`fdd51eda : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00a9f9a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fdd51eda
STACK_COMMAND: kb
FOLLOWUP_IP:
Maestro2+1224
fffff880`02a2e224 410fb74704 movzx eax,word ptr [r15+4]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Maestro2+1224
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Maestro2
IMAGE_NAME: Maestro2.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 45500365
FAILURE_BUCKET_ID: X64_0x50_Maestro2+1224
BUCKET_ID: X64_0x50_Maestro2+1224
Followup: MachineOwner
---------