*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: c0418a80, lock type that was held (value 1,2,3, or PTE address)
Arg2: c000000e, error status (normally i/o status code)
Arg3: 30aaf860, current process (virtual address for lock type 3, or PTE)
Arg4: 83150ab6, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
Debugging Details:
------------------
GetPointerFromAddress: unable to read from 82fba700
ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.
DISK_HARDWARE_ERROR: There was error with disk hardware
BUGCHECK_STR: 0x7a_c000000e
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
TRAP_FRAME: 8fb0baf8 -- (.trap 0xffffffff8fb0baf8)
ErrCode = 00000010
eax=855e6000 ebx=00000000 ecx=885e02a8 edx=00000000 esi=885e02a8 edi=00000000
eip=83150ab6 esp=8fb0bb6c ebp=8fb0bbcc iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!EtwpFreeUserBufferSpace:
83150ab6 0000 add byte ptr [eax],al ds:0023:855e6000=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 82f0661a to 82f2ed10
STACK_TEXT:
8fb0b954 82f0661a 0000007a c0418a80 c000000e nt!KeBugCheckEx+0x1e
8fb0b9c8 82efe0e5 863dbfbc 8fb0ba20 82f86540 nt!MiWaitForInPageComplete+0x2fd
8fb0ba5c 82ed9e5f 82f86540 83150ab6 863dbf28 nt!MiIssueHardFault+0x3b2
8fb0bae0 82e98638 00000008 83150ab6 00000000 nt!MmAccessFault+0x2656
8fb0bae0 83150ab6 00000008 83150ab6 00000000 nt!KiTrap0E+0xdc
8fb0bbcc 8308517d 855c5640 885e02a8 855e6000 nt!EtwpFreeUserBufferSpace
8fb0bbfc 8309708d 005e6000 855c5640 855e6000 nt!EtwpRealtimeDeliverBuffer+0x82
8fb0bc18 83092faa 855e6000 00000000 855e6000 nt!EtwpFlushBufferToRealtime+0x2c
8fb0bc3c 82ec4be6 00000000 00000000 855c5640 nt!EtwpFlushBuffer+0xa1
8fb0bd08 83084a5a 855c5640 00000000 00000000 nt!EtwpFlushActiveBuffers+0x2c0
8fb0bd50 830606d3 855c5640 a47500a4 00000000 nt!EtwpLogger+0x2a1
8fb0bd90 82f120f9 830847b9 855c5640 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
83150000-8315000e 15 bytes - nt!EtwpPsProvTraceThread+22b
[ 45 c0 8d 45 bc 89 45 ac:00 00 00 00 00 00 00 00 ]
83150012-8315003b 42 bytes - nt!EtwpPsProvTraceThread+23d (+0x12)
[ 89 5d b8 6a 0b 58 8d 8d:00 00 00 00 00 00 00 00 ]
8315003d-83150061 37 bytes - nt!EtwpPsProvTraceThread+268 (+0x2b)
[ 90 cc cc cc cc cc cc cc:00 00 00 00 00 00 00 00 ]
83150063-8315006b 9 bytes - nt!EtwpLogProcessPerfCtrs+f (+0x26)
[ 50 e8 d7 0d d4 ff 8b 86:00 00 00 00 00 00 00 00 ]
8315006f-83150074 6 bytes - nt!EtwpLogProcessPerfCtrs+1b (+0x0c)
[ 89 45 b4 8b 86 dc:00 00 00 00 00 00 ]
83150078-8315007e 7 bytes - nt!EtwpLogProcessPerfCtrs+24 (+0x09)
[ 89 45 c4 8b 86 3c 02:00 00 00 00 00 00 00 ]
83150081-8315008a 10 bytes - nt!EtwpLogProcessPerfCtrs+2d (+0x09)
[ c1 e0 0c 89 45 c8 8b 86:00 00 00 00 00 00 00 00 ]
8315008d-83150098 12 bytes - nt!EtwpLogProcessPerfCtrs+39 (+0x0c)
[ c1 e0 0c 83 c4 0c 89 45:00 00 00 00 00 00 00 00 ]
8315009c-8315009f 4 bytes - nt!EtwpLogProcessPerfCtrs+48 (+0x0f)
[ 68 02 18 50:00 00 00 00 ]
831500a1-831500a6 6 bytes - nt!EtwpLogProcessPerfCtrs+4d (+0x05)
[ 89 45 d0 8b 86 c8:00 00 00 00 00 00 ]
831500aa-831500ac 3 bytes - nt!EtwpLogProcessPerfCtrs+56 (+0x09)
[ 83 65 f4:00 00 00 ]
831500ae-831500b0 3 bytes - nt!EtwpLogProcessPerfCtrs+5a (+0x04)
[ 83 65 fc:00 00 00 ]
831500b2 - nt!EtwpLogProcessPerfCtrs+5e (+0x04)
[ 6a:00 ]
831500b4-831500b6 3 bytes - nt!EtwpLogProcessPerfCtrs+60 (+0x02)
[ 68 20 03:00 00 00 ]
831500b9-831500cd 21 bytes - nt!EtwpLogProcessPerfCtrs+65 (+0x05)
[ 89 45 d4 8d 45 b4 6a 01:00 00 00 00 00 00 00 00 ]
831500d1-83150126 86 bytes - nt!EtwpLogProcessPerfCtrs+7d (+0x18)
[ e8 cf ab db ff c9 c3 cc:00 00 00 00 00 00 00 00 ]
8315012a-83150185 92 bytes - nt!EtwShutdown+b (+0x59)
[ a1 04 ba f7 82 33 c5 89:00 00 00 00 00 00 00 00 ]
83150189-83150195 13 bytes - nt!EtwShutdown+6a (+0x5f)
[ 89 85 44 ff ff ff e8 18:00 00 00 00 00 00 00 00 ]
83150199-831501a0 8 bytes - nt!EtwShutdown+7a (+0x10)
[ 56 8d 85 48 ff ff ff 6a:00 00 00 00 00 00 00 00 ]
831501a2-831501bf 30 bytes - nt!EtwShutdown+83 (+0x09)
[ 50 c6 05 7d ba f8 82 01:00 00 00 00 00 00 00 00 ]
831501c2 - nt!EtwShutdown+a3 (+0x20)
[ 02:00 ]
831501c4-831501c8 5 bytes - nt!EtwShutdown+a5 (+0x02)
[ 5b 0f bf cb 6a:00 00 00 00 00 ]
831501ca-831501de 21 bytes - nt!EtwShutdown+ab (+0x06)
[ e8 b5 c1 f8 ff 85 c0 74:00 00 00 00 00 00 00 00 ]
831501e0-83150200 33 bytes - nt!EtwShutdown+c1 (+0x16)
[ 8d 04 85 e0 d1 f8 82 83:00 00 00 00 00 00 00 00 ]
83150203-8315020c 10 bytes - nt!EtwShutdown+e4 (+0x23)
[ 66 89 8d 50 ff ff ff 8d:00 00 00 00 00 00 00 00 ]
83150210 - nt!EtwShutdown+f1 (+0x0d)
[ 8b:00 ]
83150212-831502d3 194 bytes - nt!EtwShutdown+f3 (+0x02)
[ 8d bd 60 ff ff ff a5 a5:00 00 00 00 00 00 00 00 ]
831502d5-831502db 7 bytes - nt!EtwpUpdatePoolTagFilter+49 (+0xc3)
[ 33 c0 40 c7 43 04 2a:00 00 00 00 00 00 00 ]
831502df-83150330 82 bytes - nt!EtwpUpdatePoolTagFilter+53 (+0x0a)
[ eb ea cc cc cc cc cc cc:00 00 00 00 00 00 00 00 ]
83150334 - nt!EtwpPrepareWmitraceLoggerInfo+5 (+0x55)
[ 6a:00 ]
83150336-8315033e 9 bytes - nt!EtwpPrepareWmitraceLoggerInfo+7 (+0x02)
[ 56 e8 04 0b d4 ff c7 06:00 00 00 00 00 00 00 00 ]
83150342-83150344 3 bytes - nt!EtwpPrepareWmitraceLoggerInfo+13 (+0x0c)
[ c7 46 2c:00 00 00 ]
83150347 - nt!EtwpPrepareWmitraceLoggerInfo+18 (+0x05)
[ 02:00 ]
83150349-8315035a 18 bytes - nt!EtwpPrepareWmitraceLoggerInfo+1a (+0x02)
[ a1 80 cc f8 82 83 c4 0c:00 00 00 00 00 00 00 00 ]
8315035d-83150373 23 bytes - nt!EtwpPrepareWmitraceLoggerInfo+2e (+0x14)
[ 66 89 46 08 c3 cc cc cc:00 00 00 00 00 00 00 00 ]
83150377-8315038b 21 bytes - nt!EtwWmitraceWorker+b (+0x1a)
[ a1 04 ba f7 82 33 c5 89:00 00 00 00 00 00 00 00 ]
8315038f-83150393 5 bytes - nt!EtwWmitraceWorker+23 (+0x18)
[ 3c 02 0f 84 97:00 00 00 00 00 ]
83150397-831503b6 32 bytes - nt!EtwWmitraceWorker+2b (+0x08)
[ 2c 04 3c 01 77 76 8d b5:00 00 00 00 00 00 00 00 ]
831503ba-831503ed 52 bytes - nt!EtwWmitraceWorker+4e (+0x23)
[ ff 35 98 cc f8 82 0f b6:00 00 00 00 00 00 00 00 ]
831503ef-831503f5 7 bytes - nt!EtwWmitraceWorker+83 (+0x35)
[ ff 35 80 cc f8 82 6a:00 00 00 00 00 00 00 ]
831503f7-83150408 18 bytes - nt!EtwWmitraceWorker+8b (+0x08)
[ 68 9c cc f8 82 e8 b8 2a:00 00 00 00 00 00 00 00 ]
8315040b-8315041d 19 bytes - nt!EtwWmitraceWorker+9f (+0x14)
[ 56 68 50 ca 07 83 eb 3a:00 00 00 00 00 00 00 00 ]
83150420-8315042b 12 bytes - nt!EtwWmitraceWorker+b4 (+0x15)
[ c0 e8 6f 62 dc ff 83 c4:00 00 00 00 00 00 00 00 ]
8315042e-8315045a 45 bytes - nt!EtwWmitraceWorker+c2 (+0x0e)
[ 8d b5 48 ff ff ff e8 f6:00 00 00 00 00 00 00 00 ]
8315045e - nt!EtwWmitraceWorker+f2 (+0x30)
[ 6a:00 ]
83150460-83150472 19 bytes - nt!EtwWmitraceWorker+f4 (+0x02)
[ 8d 85 48 ff ff ff 50 e8:00 00 00 00 00 00 00 00 ]
83150476-831504b1 60 bytes - nt!EtwWmitraceWorker+10a (+0x16)
[ 56 68 f0 c9 07 83 eb cf:00 00 00 00 00 00 00 00 ]
831504b3-83150540 142 bytes - nt!EtwWmitraceWorker+147 (+0x3d)
[ a1 50 cd f8 82 89 85 7c:00 00 00 00 00 00 00 00 ]
83150542-83150558 23 bytes - nt!EtwWmitraceWorker+1d6 (+0x8f)
[ 74 09 8d 45 c8 50 e8 af:00 00 00 00 00 00 00 00 ]
8315055a-831505b7 94 bytes - nt!EtwWmitraceWorker+1ee (+0x18)
[ 8b 4d fc 33 cd 5e e8 83:00 00 00 00 00 00 00 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
3788 errors : !nt (83150000-83150fff)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE_4096
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096
BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096
Followup: memory_corruption
---------