*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {1b9411fe0, 2, 1, fffff80002cb3ff0}
Probably caused by : [COLOR="Blue"]memory_corruption ( nt!MiResolveProtoPteFault+230 )[/COLOR]
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000001b9411fe0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cb3ff0, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec5100
00000001b9411fe0
CURRENT_IRQL: 2
FAULTING_IP:
nt!MiResolveProtoPteFault+230
fffff800`02cb3ff0 4183e01f and r8d,1Fh
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: dwm.exe
TRAP_FRAME: fffff88009505790 -- (.trap 0xfffff88009505790)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff68000000000
rdx=000007fee2649f80 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cb3ff0 rsp=fffff88009505920 rbp=fffff8a002dfa490
r8=07d4007d8df58021 r9=fffff683ff713248 r10=0000000000000000
r11=fffff68000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz ac po nc
nt!MiResolveProtoPteFault+0x230:
fffff800`02cb3ff0 4183e01f and r8d,1Fh
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002c95769 to fffff80002c961c0
STACK_TEXT:
fffff880`09505648 fffff800`02c95769 : 00000000`0000000a 00000001`b9411fe0 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`09505650 fffff800`02c943e0 : 000000f4`00000000 00000000`00000001 fffff8a0`14a09830 fa800fb1`beb00420 : nt!KiBugCheckDispatch+0x69
fffff880`09505790 fffff800`02cb3ff0 : 45100004`0bd1f025 00000004`0bd1f121 fffff880`095053d0 00000000`029dcaf0 : nt!KiPageFault+0x260
fffff880`09505920 fffff800`02cb2aa3 : 00000000`003f59a6 000007fe`e2649f80 fffff683`ff713248 fffffa80`0fa433f8 : nt!MiResolveProtoPteFault+0x230
fffff880`095059b0 fffff800`02ca2749 : 00000000`00000000 000007fe`e2649f80 00000000`00000000 00000000`00000000 : nt!MiDispatchFault+0x1c3
fffff880`09505ac0 fffff800`02c942ee : 00000000`00000000 000007fe`e2649f80 000007fe`00000001 00000000`0005ba9d : nt!MmAccessFault+0x359
fffff880`09505c20 00000000`77369c12 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`029dbef0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77369c12
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiResolveProtoPteFault+230
fffff800`02cb3ff0 4183e01f and r8d,1Fh
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!MiResolveProtoPteFault+230
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4fa390f3
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0xA_nt!MiResolveProtoPteFault+230
BUCKET_ID: X64_0xA_nt!MiResolveProtoPteFault+230
Followup: MachineOwner
---------