*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7A, {fffff6fc40008ba8, ffffffffc000000e, 1d04e4860, fffff88001175840}
Unable to load image \SystemRoot\System32\win32k.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
GetPointerFromAddress: unable to read from fffff800032f9278
[COLOR=Red]Probably caused by : memory_corruption[/COLOR]
Followup: memory_corruption
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc40008ba8, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc000000e, error status (normally i/o status code)
Arg3: 00000001d04e4860, current process (virtual address for lock type 3, or PTE)
Arg4: fffff88001175840, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
Debugging Details:
------------------
[COLOR=Red]ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.
DISK_HARDWARE_ERROR: There was error with disk hardware
[/COLOR]
BUGCHECK_STR: 0x7a_c000000e
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: taskhost.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff8800a1a3980 -- (.trap 0xfffff8800a1a3980)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8800113d520 rbx=0000000000000000 rcx=fffff8a002f81860
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001175840 rsp=fffff8800a1a3b18 rbp=fffff8800a1a3ca0
r8=fffff8a002f818f0 r9=0000000000000000 r10=fffffa8006abee00
r11=fffffa800884c950 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
msrpc!LRPC_CASSOCIATION::`vector deleting destructor':
fffff880`01175840 b8e91000a0 mov eax,0A00010E9h
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80003137552 to fffff800030c9fc0
STACK_TEXT:
fffff880`0a1a36a8 fffff800`03137552 : 00000000`0000007a fffff6fc`40008ba8 ffffffff`c000000e 00000001`d04e4860 : nt!KeBugCheckEx
fffff880`0a1a36b0 fffff800`030f0cbf : fffffa80`09967e90 fffff880`0a1a37e0 fffff800`032fc540 fffff880`00961000 : nt! ?? ::FNODOBFM::`string'+0x36bea
fffff880`0a1a3790 fffff800`030d7589 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff fffff800`03354f4e : nt!MiIssueHardFault+0x28b
fffff880`0a1a3820 fffff800`030c80ee : 00000000`00000008 fffff880`01175840 00000000`00000000 fffff8a0`02f81860 : nt!MmAccessFault+0x1399
fffff880`0a1a3980 fffff880`01175840 : fffff880`0116fcf5 00000000`00000010 00000000`00010202 fffff880`0a1a3b48 : nt!KiPageFault+0x16e
fffff880`0a1a3b18 fffff880`0116fcf5 : 00000000`00000010 00000000`00010202 fffff880`0a1a3b48 00000000`00000018 : msrpc!LRPC_CASSOCIATION::`vector deleting destructor'
fffff880`0a1a3b20 fffff880`01154083 : fffff8a0`02f81860 00000000`00000006 fffff880`0a1a3b78 00000000`00000018 : msrpc!LRPC_CASSOCIATION::RemoveAssociationDictionaryReference+0x45
fffff880`0a1a3b50 fffff880`0115c727 : 00000000`00000000 00000000`00000006 00000000`00000000 00000000`00010246 : msrpc!RpcAsyncInitializeHandle+0xf6d
fffff880`0a1a3b80 fffff880`01169387 : fffff8a0`02f81860 fffffa80`0884c950 00000000`00000000 00000000`00000018 : msrpc!LRPC_FAST_BINDING_HANDLE::ResetBindState+0xb7
fffff880`0a1a3bc0 fffff960`0010a6ca : fffffa80`0884c950 00000000`00000000 00000000`00000020 00000000`00000000 : msrpc!RpcBindingUnbind+0x27
fffff880`0a1a3bf0 fffffa80`0884c950 : 00000000`00000000 00000000`00000020 00000000`00000000 00000000`00000020 : win32k+0xea6ca
fffff880`0a1a3bf8 00000000`00000000 : 00000000`00000020 00000000`00000000 00000000`00000020 fffff800`030c9253 : 0xfffffa80`0884c950
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !msrpc
fffff88001175000-fffff8800117501b 28 bytes - msrpc!Ndr64MesTypeDecode+170
[ 90 33 d2 48 8b cb e8 95:00 00 00 00 00 00 00 00 ]
fffff8800117501e-fffff88001175023 6 bytes - msrpc!Ndr64MesTypeDecode+18d (+0x1e)
[ c0 74 20 81 fb 02:00 00 00 00 00 00 ]
fffff88001175026-fffff8800117502b 6 bytes - msrpc!Ndr64MesTypeDecode+195 (+0x08)
[ 80 74 18 81 fb 0c:00 00 00 00 00 00 ]
fffff8800117502d-fffff88001175033 7 bytes - msrpc!Ndr64MesTypeDecode+19c (+0x07)
[ 03 c0 74 10 81 fb 23:00 00 00 00 00 00 00 ]
fffff88001175035-fffff88001175042 14 bytes - msrpc!Ndr64MesTypeDecode+1a4 (+0x08)
[ 02 c0 74 08 8b cb e8 70:00 00 00 00 00 00 00 00 ]
fffff88001175044-fffff8800117504c 9 bytes - msrpc!Ndr64MesTypeDecode+1b2 (+0x0f)
[ 03 c0 e8 65 f6 fd ff cc:00 00 00 00 00 00 00 00 ]
fffff8800117504e-fffff880011750d1 132 bytes - msrpc!Ndr64MesTypeDecode+1b9 (+0x0a)
[ 90 48 8b 5c 24 58 48 8b:00 00 00 00 00 00 00 00 ]
fffff880011750d4-fffff880011750e3 16 bytes - msrpc!NdrMesTypeEncode3+14 (+0x86)
[ 48 8b 05 25 e0 fc ff 48:00 00 00 00 00 00 00 00 ]
fffff880011750e6-fffff880011750e9 4 bytes - msrpc!NdrMesTypeEncode3+26 (+0x12)
[ 8b 81 90 01:00 00 00 00 ]
fffff880011750ec-fffff880011750f4 9 bytes - msrpc!NdrMesTypeEncode3+2c (+0x06)
[ 49 8b e8 4c 8b 84 24 e8:00 00 00 00 00 00 00 00 ]
fffff880011750f7-fffff88001175110 26 bytes - msrpc!NdrMesTypeEncode3+37 (+0x0b)
[ 4d 8b f1 4c 8b fa 4c 8b:00 00 00 00 00 00 00 00 ]
fffff88001175113-fffff88001175135 35 bytes - msrpc!NdrMesTypeEncode3+53 (+0x1c)
[ e8 98 f5 fd ff cc 41 b9:00 00 00 00 00 00 00 00 ]
fffff88001175138-fffff88001175141 10 bytes - msrpc!NdrMesTypeEncode3+78 (+0x25)
[ eb 0a 41 8b c1 4c 8d 25:00 00 00 00 00 00 00 00 ]
fffff88001175144-fffff8800117515f 28 bytes - msrpc!NdrMesTypeEncode3+84 (+0x0c)
[ 33 c9 39 4d 20 7e 13 48:00 00 00 00 00 00 00 00 ]
fffff88001175161-fffff88001175183 35 bytes - msrpc!NdrMesTypeEncode3+a1 (+0x1d)
[ 02 c0 e8 48 f5 fd ff cc:00 00 00 00 00 00 00 00 ]
fffff88001175186-fffff88001175193 14 bytes - msrpc!NdrMesTypeEncode3+c6 (+0x25)
[ 49 8b 04 f6 44 8b 0c 88:00 00 00 00 00 00 00 00 ]
fffff88001175197-fffff8800117519c 6 bytes - msrpc!NdrMesTypeEncode3+d7 (+0x11)
[ 41 3b c2 0f 85 8e:00 00 00 00 00 00 ]
fffff880011751a0-fffff880011751a2 3 bytes - msrpc!NdrMesTypeEncode3+e0 (+0x09)
[ 48 8b 5d:00 00 00 ]
fffff880011751a4-fffff880011751ac 9 bytes - msrpc!NdrMesTypeEncode3+e4 (+0x04)
[ 48 8d 4c 24 40 33 d2 41:00 00 00 00 00 00 00 00 ]
fffff880011751ae - msrpc!NdrMesTypeEncode3+ee (+0x0a)
[ 01:00 ]
fffff880011751b1-fffff880011751c0 16 bytes - msrpc!NdrMesTypeEncode3+f1 (+0x03)
[ e8 ba c1 fb ff 4c 8b 44:00 00 00 00 00 00 00 00 ]
fffff880011751c3-fffff880011751c8 6 bytes - msrpc!NdrMesTypeEncode3+103 (+0x12)
[ 48 89 84 24 50 01:00 00 00 00 00 00 ]
fffff880011751cb-fffff880011751d0 6 bytes - msrpc!NdrMesTypeEncode3+10b (+0x08)
[ 48 8d 84 24 48 01:00 00 00 00 00 00 ]
fffff880011751d3-fffff880011751d8 6 bytes - msrpc!NdrMesTypeEncode3+113 (+0x08)
[ 48 c7 84 24 58 01:00 00 00 00 00 00 ]
fffff880011751dc - msrpc!NdrMesTypeEncode3+11c (+0x09)
[ 02:00 ]
fffff880011751df-fffff880011751e4 6 bytes - msrpc!NdrMesTypeEncode3+11f (+0x03)
[ 48 89 84 24 48 01:00 00 00 00 00 00 ]
fffff880011751e7-fffff880011751ef 9 bytes - msrpc!NdrMesTypeEncode3+127 (+0x08)
[ 48 8d 44 24 40 49 89 9d:00 00 00 00 00 00 00 00 ]
fffff880011751f3-fffff880011751f7 5 bytes - msrpc!NdrMesTypeEncode3+133 (+0x0c)
[ 49 89 85 60 01:00 00 00 00 00 ]
fffff880011751fa-fffff880011751ff 6 bytes - msrpc!NdrMesTypeEncode3+13a (+0x07)
[ 4c 8d 9c 24 60 01:00 00 00 00 00 00 ]
fffff88001175202-fffff88001175207 6 bytes - msrpc!NdrMesTypeEncode3+142 (+0x08)
[ 4c 89 9c 24 40 01:00 00 00 00 00 00 ]
fffff8800117520a-fffff8800117521a 17 bytes - msrpc!NdrMesTypeEncode3+14a (+0x08)
[ 48 8b 43 08 49 89 45 78:00 00 00 00 00 00 00 00 ]
fffff8800117521e-fffff88001175222 5 bytes - msrpc!NdrMesTypeEncode3+15e (+0x14)
[ 41 0f ba ad c0:00 00 00 00 00 ]
fffff88001175226-fffff8800117522a 5 bytes - msrpc!NdrMesTypeEncode3+166 (+0x08)
[ 08 49 89 85 80:00 00 00 00 00 ]
fffff8800117522e-fffff88001175233 6 bytes - msrpc!NdrMesTypeEncode3+16e (+0x08)
[ 44 8b 8c 24 e0 03:00 00 00 00 00 00 ]
fffff88001175236-fffff88001175245 16 bytes - msrpc!NdrMesTypeEncode3+176 (+0x08)
[ 49 8b 04 f6 4e 8b 0c c8:00 00 00 00 00 00 00 00 ]
fffff88001175247-fffff88001175251 11 bytes - msrpc!NdrMesTypeEncode3+187 (+0x11)
[ 49 8b d7 49 8b cd 48 89:00 00 00 00 00 00 00 00 ]
fffff88001175255-fffff8800117525d 9 bytes - msrpc!NdrMesTypeEncode3+195 (+0x0e)
[ 41 ff d4 48 8b 8c 24 60:00 00 00 00 00 00 00 00 ]
fffff88001175260-fffff8800117526c 13 bytes - msrpc!NdrMesTypeEncode3+1a0 (+0x0b)
[ 48 33 cc e8 f2 c1 fb ff:00 00 00 00 00 00 00 00 ]
fffff8800117526f-fffff880011752a8 58 bytes - msrpc!NdrMesTypeEncode3+1af (+0x0f)
[ 41 5f 41 5e 41 5d 41 5c:00 00 00 00 00 00 00 00 ]
fffff880011752ab-fffff880011752be 20 bytes - msrpc!NdrCorrelationPass+1b (+0x3c)
[ 33 ff 48 8b f1 39 7b 14:00 00 00 00 00 00 00 00 ]
fffff880011752c0-fffff8800117533a 123 bytes - msrpc!NdrCorrelationPass+30 (+0x15)
[ 4c 8b 45 f8 48 8b 55 f0:00 00 00 00 00 00 00 00 ]
fffff8800117533c-fffff88001175343 8 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+3c (+0x7c)
[ 11 48 8b 51 10 0f 84 b0:00 00 00 00 00 00 00 00 ]
fffff88001175347-fffff88001175349 3 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+47 (+0x0b)
[ 0f 86 9f:00 00 00 ]
fffff8800117534d-fffff8800117534e 2 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+4d (+0x06)
[ 80 7d:00 00 ]
fffff88001175350-fffff88001175354 5 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+50 (+0x03)
[ 13 76 71 80 7d:00 00 00 00 00 ]
fffff88001175356-fffff8800117535a 5 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+56 (+0x06)
[ 14 74 4c 80 7d:00 00 00 00 00 ]
fffff8800117535c-fffff8800117535f 4 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+5c (+0x06)
[ 2f 0f 85 89:00 00 00 00 ]
fffff88001175363-fffff8800117536a 8 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+63 (+0x07)
[ f6 47 61 20 74 0b b9 41:00 00 00 00 00 00 00 00 ]
fffff8800117536c-fffff8800117537f 20 bytes - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+6c (+0x09)
[ 02 c0 e8 3d f3 fd ff cc:00 00 00 00 00 00 00 00 ]
fffff88001175382 - msrpc!NDR_MRSHL_POINTER_QUEUE_ELEMENT::Dispatch+82 (+0x16)
[ 02:00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
3875 errors : !msrpc (fffff88001175000-fffff88001175fff)
MODULE_NAME: memory_corruption
[COLOR=Red]IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE_4096
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE_4096
BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE_4096[/COLOR]
Followup: memory_corruption
---------