2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800030890b6, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032bb0e0
0000000000000000
CURRENT_IRQL: 2
FAULTING_IP:
nt!KeSetEvent+226
fffff800`030890b6 488b09 mov rcx,qword ptr [rcx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: fffff88003116a90 -- (.trap 0xfffff88003116a90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88005b92310 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030890b6 rsp=fffff88003116c20 rbp=0000000000000000
r8=0000000000000000 r9=0000000000000100 r10=0000000000000000
r11=0000000000011677 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!KeSetEvent+0x226:
fffff800`030890b6 488b09 mov rcx,qword ptr [rcx] ds:6c50:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80003084469 to fffff80003084f00
STACK_TEXT:
fffff880`03116948 fffff800`03084469 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03116950 fffff800`030830e0 : 00000000`00000160 fffff880`05b92308 00000000`0000000d fffff800`03146bcb : nt!KiBugCheckDispatch+0x69
fffff880`03116a90 fffff800`030890b6 : fffffa80`0797c502 fffffa80`0797c5d0 00000000`00000000 fffff980`07b20ea0 : nt!KiPageFault+0x260
fffff880`03116c20 fffff880`057d9817 : fffff880`00000000 fffff980`00000008 fffff800`03231500 fffffa80`077581b0 : nt!KeSetEvent+0x226
fffff880`03116c90 fffff880`00000000 : fffff980`00000008 fffff800`03231500 fffffa80`077581b0 fffffa80`0797c5d0 : VMfilt64+0x1817
fffff880`03116c98 fffff980`00000008 : fffff800`03231500 fffffa80`077581b0 fffffa80`0797c5d0 fffff800`035292eb : 0xfffff880`00000000
fffff880`03116ca0 fffff800`03231500 : fffffa80`077581b0 fffffa80`0797c5d0 fffff800`035292eb fffffa80`0797c5d0 : 0xfffff980`00000008
fffff880`03116ca8 fffffa80`077581b0 : fffffa80`0797c5d0 fffff800`035292eb fffffa80`0797c5d0 fffffa80`0797c5d0 : nt!ViPendingWorkers+0x80
fffff880`03116cb0 fffffa80`0797c5d0 : fffff800`035292eb fffffa80`0797c5d0 fffffa80`0797c5d0 fffff980`07b21000 : 0xfffffa80`077581b0
fffff880`03116cb8 fffff800`035292eb : fffffa80`0797c5d0 fffffa80`0797c5d0 fffff980`07b21000 fffff980`07b20ea0 : 0xfffffa80`0797c5d0
fffff880`03116cc0 fffff800`0352936c : fffff800`032315a0 00000000`00000080 fffffa80`039e5b30 00000000`00000100 : nt!ViPendingCompleteAfterWait+0x7b
fffff880`03116d00 fffff800`03328166 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ViPendingWorkerThread+0x2c
fffff880`03116d40 fffff800`03063486 : fffff880`02d64180 fffffa80`04633040 fffff880`02d6f040 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03116d80 00000000`00000000 : fffff880`03117000 fffff880`03111000 fffff880`03116a10 00000000`00000000 : nt!KxStartSystemThread+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
VMfilt64+1817
fffff880`057d9817 ?? ???
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: VMfilt64+1817
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: VMfilt64
IMAGE_NAME: VMfilt64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a7267b0
FAILURE_BUCKET_ID: X64_0xA_VRF_VMfilt64+1817
BUCKET_ID: X64_0xA_VRF_VMfilt64+1817
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800030890b6, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 0000000000000000
CURRENT_IRQL: 2
FAULTING_IP:
nt!KeSetEvent+226
fffff800`030890b6 488b09 mov rcx,qword ptr [rcx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: fffff88003116a90 -- (.trap 0xfffff88003116a90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88005b92310 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030890b6 rsp=fffff88003116c20 rbp=0000000000000000
r8=0000000000000000 r9=0000000000000100 r10=0000000000000000
r11=0000000000011677 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!KeSetEvent+0x226:
fffff800`030890b6 488b09 mov rcx,qword ptr [rcx] ds:6c50:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80003084469 to fffff80003084f00
STACK_TEXT:
fffff880`03116948 fffff800`03084469 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03116950 fffff800`030830e0 : 00000000`00000160 fffff880`05b92308 00000000`0000000d fffff800`03146bcb : nt!KiBugCheckDispatch+0x69
fffff880`03116a90 fffff800`030890b6 : fffffa80`0797c502 fffffa80`0797c5d0 00000000`00000000 fffff980`07b20ea0 : nt!KiPageFault+0x260
fffff880`03116c20 fffff880`057d9817 : fffff880`00000000 fffff980`00000008 fffff800`03231500 fffffa80`077581b0 : nt!KeSetEvent+0x226
fffff880`03116c90 fffff880`00000000 : fffff980`00000008 fffff800`03231500 fffffa80`077581b0 fffffa80`0797c5d0 : VMfilt64+0x1817
fffff880`03116c98 fffff980`00000008 : fffff800`03231500 fffffa80`077581b0 fffffa80`0797c5d0 fffff800`035292eb : 0xfffff880`00000000
fffff880`03116ca0 fffff800`03231500 : fffffa80`077581b0 fffffa80`0797c5d0 fffff800`035292eb fffffa80`0797c5d0 : 0xfffff980`00000008
fffff880`03116ca8 fffffa80`077581b0 : fffffa80`0797c5d0 fffff800`035292eb fffffa80`0797c5d0 fffffa80`0797c5d0 : nt!ViPendingWorkers+0x80
fffff880`03116cb0 fffffa80`0797c5d0 : fffff800`035292eb fffffa80`0797c5d0 fffffa80`0797c5d0 fffff980`07b21000 : 0xfffffa80`077581b0
fffff880`03116cb8 fffff800`035292eb : fffffa80`0797c5d0 fffffa80`0797c5d0 fffff980`07b21000 fffff980`07b20ea0 : 0xfffffa80`0797c5d0
fffff880`03116cc0 fffff800`0352936c : fffff800`032315a0 00000000`00000080 fffffa80`039e5b30 00000000`00000100 : nt!ViPendingCompleteAfterWait+0x7b
fffff880`03116d00 fffff800`03328166 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ViPendingWorkerThread+0x2c
fffff880`03116d40 fffff800`03063486 : fffff880`02d64180 fffffa80`04633040 fffff880`02d6f040 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03116d80 00000000`00000000 : fffff880`03117000 fffff880`03111000 fffff880`03116a10 00000000`00000000 : nt!KxStartSystemThread+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
VMfilt64+1817
fffff880`057d9817 ?? ???
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: VMfilt64+1817
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: VMfilt64
IMAGE_NAME: VMfilt64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a7267b0
FAILURE_BUCKET_ID: X64_0xA_VRF_VMfilt64+1817
BUCKET_ID: X64_0xA_VRF_VMfilt64+1817
Followup: MachineOwner
---------