*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {fffffa000fdc4b60, 2, 1, fffff800044f318f}
Probably caused by : ntkrnlmp.exe ( nt!KeReleaseSemaphore+9f )
Followup: MachineOwner
---------
4: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa000fdc4b60, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800044f318f, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff8000470f100
GetUlongFromAddress: unable to read from fffff8000470f1c0
fffffa000fdc4b60
CURRENT_IRQL: 2
FAULTING_IP:
nt!KeReleaseSemaphore+9f
fffff800`044f318f 488908 mov qword ptr [rax],rcx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: LogonUI.exe
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
TRAP_FRAME: fffff880026d4680 -- (.trap 0xfffff880026d4680)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa000fdc4b60 rbx=0000000000000000 rcx=fffffa000fdc4b60
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800044f318f rsp=fffff880026d4810 rbp=fffffa000fdc4b60
r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
r11=fffff8a0058e0880 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe cy
nt!KeReleaseSemaphore+0x9f:
fffff800`044f318f 488908 mov qword ptr [rax],rcx ds:fffffa00`0fdc4b60=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800044d7169 to fffff800044d7bc0
STACK_TEXT:
fffff880`026d4538 fffff800`044d7169 : 00000000`0000000a fffffa00`0fdc4b60 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`026d4540 fffff800`044d5de0 : 00000000`00000000 00000000`00000001 fffff880`026d46c8 fffffa80`0fdc4b58 : nt!KiBugCheckDispatch+0x69
fffff880`026d4680 fffff800`044f318f : fffff880`03046cc0 fffff880`026d4850 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x260
fffff880`026d4810 fffff800`047e3e10 : fffffa80`00000000 fffff8a0`00000001 00000000`00000000 fffff8a0`058e0700 : nt!KeReleaseSemaphore+0x9f
fffff880`026d4890 fffff800`047e55fe : 00000000`00000000 00000000`00000200 fffffa80`1013aad0 fffff800`044daa8a : nt!AlpcpCompleteDispatchMessage+0xa10
fffff880`026d4920 fffff800`047e6071 : 00000000`00010002 fffff8a0`04c7ee78 00000000`00000000 00000000`00000000 : nt!AlpcpDispatchNewMessage+0x24e
fffff880`026d4980 fffff800`047abe13 : 00000000`00000030 fffff880`026d4ae0 00000000`00000000 fffffa80`1013aa00 : nt!AlpcpSendMessage+0x907
fffff880`026d4a90 fffff800`047ac531 : 000007ff`00000000 00000000`00000000 000007fe`fcdb2700 00000000`00000000 : nt!PspExitThread+0x223
fffff880`026d4b90 fffff800`047ac639 : fffffa80`1013aad0 00000000`00000000 fffffa80`1013aad0 00000000`0000ff00 : nt!PspTerminateThreadByPointer+0x4d
fffff880`026d4be0 fffff800`044d6e53 : fffffa80`1013aad0 fffff880`026d4ca0 00000000`770145c0 fffffa80`1003c6d0 : nt!NtTerminateThread+0x45
fffff880`026d4c20 00000000`76f617ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02fbf438 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f617ea
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KeReleaseSemaphore+9f
fffff800`044f318f 488908 mov qword ptr [rax],rcx
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!KeReleaseSemaphore+9f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 521ea035
IMAGE_VERSION: 6.1.7601.18247
FAILURE_BUCKET_ID: X64_0xA_nt!KeReleaseSemaphore+9f
BUCKET_ID: X64_0xA_nt!KeReleaseSemaphore+9f
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0xa_nt!kereleasesemaphore+9f
FAILURE_ID_HASH: {f3a81e12-c8c0-c08f-ca6b-de395fe4b101}
Followup: MachineOwner
---------