| 1 |
|
|---|
| 2 | Microsoft (R) Windows Debugger Version 10.0.17074.1002 AMD64
|
|---|
| 3 | Copyright (c) Microsoft Corporation. All rights reserved.
|
|---|
| 4 |
|
|---|
| 5 |
|
|---|
| 6 | Loading Dump File [D:\MEMORY.DMP]
|
|---|
| 7 | Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
|
|---|
| 8 |
|
|---|
| 9 | Symbol search path is: srv*
|
|---|
| 10 | Executable search path is:
|
|---|
| 11 | Windows 10 Kernel Version 16299 MP (12 procs) Free x64
|
|---|
| 12 | Product: WinNt, suite: TerminalServer SingleUserTS
|
|---|
| 13 | Built by: 16299.15.amd64fre.rs3_release.170928-1534
|
|---|
| 14 | Machine Name:
|
|---|
| 15 | Kernel base = 0xfffff802`1ac10000 PsLoadedModuleList = 0xfffff802`1af77110
|
|---|
| 16 | Debug session time: Wed Feb 28 17:55:44.528 2018 (UTC + 8:00)
|
|---|
| 17 | System Uptime: 3 days 6:50:48.075
|
|---|
| 18 | Loading Kernel Symbols
|
|---|
| 19 | ...............................................................
|
|---|
| 20 | ................................................................
|
|---|
| 21 | ................................................................
|
|---|
| 22 | ...
|
|---|
| 23 | Loading User Symbols
|
|---|
| 24 | PEB is paged out (Peb.Ldr = 00000000`00e59018). Type ".hh dbgerr001" for details
|
|---|
| 25 | Loading unloaded module list
|
|---|
| 26 | .............................................
|
|---|
| 27 | *******************************************************************************
|
|---|
| 28 | * *
|
|---|
| 29 | * Bugcheck Analysis *
|
|---|
| 30 | * *
|
|---|
| 31 | *******************************************************************************
|
|---|
| 32 |
|
|---|
| 33 | Use !analyze -v to get detailed debugging information.
|
|---|
| 34 |
|
|---|
| 35 | BugCheck 1A, {61948, 2332810, 1, 2332810}
|
|---|
| 36 |
|
|---|
| 37 | Probably caused by : memory_corruption ( nt!MiDereferenceIoPages+ccea8 )
|
|---|
| 38 |
|
|---|
| 39 | Followup: MachineOwner
|
|---|
| 40 | ---------
|
|---|
| 41 |
|
|---|
| 42 | nt!KeBugCheckEx:
|
|---|
| 43 | fffff802`1ad85430 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffe68b`5f1bf1b0=000000000000001a
|
|---|
| 44 |
|
|---|
| 45 | ************* Path validation summary **************
|
|---|
| 46 | Response Time (ms) Location
|
|---|
| 47 | Deferred srv*
|
|---|
| 48 | 6: kd> !analyze -v
|
|---|
| 49 | *******************************************************************************
|
|---|
| 50 | * *
|
|---|
| 51 | * Bugcheck Analysis *
|
|---|
| 52 | * *
|
|---|
| 53 | *******************************************************************************
|
|---|
| 54 |
|
|---|
| 55 | MEMORY_MANAGEMENT (1a)
|
|---|
| 56 | # Any other values for parameter 1 must be individually examined.
|
|---|
| 57 | Arguments:
|
|---|
| 58 | Arg1: 0000000000061948, The subtype of the bugcheck.
|
|---|
| 59 | Arg2: 0000000002332810
|
|---|
| 60 | Arg3: 0000000000000001
|
|---|
| 61 | Arg4: 0000000002332810
|
|---|
| 62 |
|
|---|
| 63 | Debugging Details:
|
|---|
| 64 | ------------------
|
|---|
| 65 |
|
|---|
| 66 |
|
|---|
| 67 | KEY_VALUES_STRING: 1
|
|---|
| 68 |
|
|---|
| 69 |
|
|---|
| 70 | TIMELINE_ANALYSIS: 1
|
|---|
| 71 |
|
|---|
| 72 |
|
|---|
| 73 | DUMP_CLASS: 1
|
|---|
| 74 |
|
|---|
| 75 | DUMP_QUALIFIER: 401
|
|---|
| 76 |
|
|---|
| 77 | BUILD_VERSION_STRING: 16299.15.amd64fre.rs3_release.170928-1534
|
|---|
| 78 |
|
|---|
| 79 | SYSTEM_MANUFACTURER: MSI
|
|---|
| 80 |
|
|---|
| 81 | SYSTEM_PRODUCT_NAME: MS-7A37
|
|---|
| 82 |
|
|---|
| 83 | SYSTEM_SKU: To be filled by O.E.M.
|
|---|
| 84 |
|
|---|
| 85 | SYSTEM_VERSION: 1.0
|
|---|
| 86 |
|
|---|
| 87 | BIOS_VENDOR: American Megatrends Inc.
|
|---|
| 88 |
|
|---|
| 89 | BIOS_VERSION: 1.70
|
|---|
| 90 |
|
|---|
| 91 | BIOS_DATE: 09/19/2017
|
|---|
| 92 |
|
|---|
| 93 | BASEBOARD_MANUFACTURER: MSI
|
|---|
| 94 |
|
|---|
| 95 | BASEBOARD_PRODUCT: B350M MORTAR (MS-7A37)
|
|---|
| 96 |
|
|---|
| 97 | BASEBOARD_VERSION: 1.0
|
|---|
| 98 |
|
|---|
| 99 | DUMP_TYPE: 1
|
|---|
| 100 |
|
|---|
| 101 | BUGCHECK_P1: 61948
|
|---|
| 102 |
|
|---|
| 103 | BUGCHECK_P2: 2332810
|
|---|
| 104 |
|
|---|
| 105 | BUGCHECK_P3: 1
|
|---|
| 106 |
|
|---|
| 107 | BUGCHECK_P4: 2332810
|
|---|
| 108 |
|
|---|
| 109 | BUGCHECK_STR: 0x1a_61948
|
|---|
| 110 |
|
|---|
| 111 | CPU_COUNT: c
|
|---|
| 112 |
|
|---|
| 113 | CPU_MHZ: e10
|
|---|
| 114 |
|
|---|
| 115 | CPU_VENDOR: AuthenticAMD
|
|---|
| 116 |
|
|---|
| 117 | CPU_FAMILY: 17
|
|---|
| 118 |
|
|---|
| 119 | CPU_MODEL: 1
|
|---|
| 120 |
|
|---|
| 121 | CPU_STEPPING: 1
|
|---|
| 122 |
|
|---|
| 123 | BLACKBOXBSD: 1 (!blackboxbsd)
|
|---|
| 124 |
|
|---|
| 125 |
|
|---|
| 126 | BLACKBOXPNP: 1 (!blackboxpnp)
|
|---|
| 127 |
|
|---|
| 128 |
|
|---|
| 129 | DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
|
|---|
| 130 |
|
|---|
| 131 | PROCESS_NAME: VirtualBox.exe
|
|---|
| 132 |
|
|---|
| 133 | CURRENT_IRQL: 2
|
|---|
| 134 |
|
|---|
| 135 | ANALYSIS_SESSION_HOST: DESKTOP-N0IAVLP
|
|---|
| 136 |
|
|---|
| 137 | ANALYSIS_SESSION_TIME: 03-01-2018 09:57:04.0064
|
|---|
| 138 |
|
|---|
| 139 | ANALYSIS_VERSION: 10.0.17074.1002 amd64fre
|
|---|
| 140 |
|
|---|
| 141 | LAST_CONTROL_TRANSFER: from fffff8021add1954 to fffff8021ad85430
|
|---|
| 142 |
|
|---|
| 143 | STACK_TEXT:
|
|---|
| 144 | ffffe68b`5f1bf1a8 fffff802`1add1954 : 00000000`0000001a 00000000`00061948 00000000`02332810 00000000`00000001 : nt!KeBugCheckEx
|
|---|
| 145 | ffffe68b`5f1bf1b0 fffff802`1ac93ae3 : ffffd581`94c40180 00000000`00000000 00000000`00000001 00000000`00000001 : nt!MiDereferenceIoPages+0xccea8
|
|---|
| 146 | ffffe68b`5f1bf260 fffff802`1ac90fd1 : 00000000`00000000 00000000`00000000 ffffe68b`5f1bf4e0 00000000`00000200 : nt!MiDeletePteRun+0x553
|
|---|
| 147 | ffffe68b`5f1bf3e0 fffff802`1ac8c6a6 : 00000000`00000000 ffff828d`a73cd280 00000000`00000000 ffff828d`a5fe4080 : nt!MiDeleteVirtualAddresses+0x11b1
|
|---|
| 148 | ffffe68b`5f1bf6e0 fffff802`1b10f452 : ffff828d`a73cd280 ffff828d`a502ed50 00000000`00000000 ffff828d`a73cd280 : nt!MiDeleteVad+0x3b6
|
|---|
| 149 | ffffe68b`5f1bf830 fffff802`1b10f0a7 : ffff828d`a73cd280 ffff828d`00000000 ffff828d`a502ed50 ffff828d`a502ed50 : nt!MiUnmapVad+0x32
|
|---|
| 150 | ffffe68b`5f1bf860 fffff802`1b10eeee : ffffffff`00000000 ffff828d`a3c70e00 ffff828d`a502ed50 ffff828d`a73cd280 : nt!MiCleanVad+0x27
|
|---|
| 151 | ffffe68b`5f1bf890 fffff802`1b0aae75 : ffffffff`ffffffff ffff828d`a5fe4080 ffff828d`a5fe4378 ffff9987`00000000 : nt!MmCleanProcessAddressSpace+0x12e
|
|---|
| 152 | ffffe68b`5f1bf910 fffff802`1b11dae7 : ffff828d`a5fe4080 ffff9987`9cbb9060 ffffe68b`5f1bfb80 00000000`00000000 : nt!PspRundownSingleProcess+0x129
|
|---|
| 153 | ffffe68b`5f1bf990 fffff802`1b06ede3 : 00000000`00000000 ffffe68b`5f1bfb01 00000000`00e5a000 ffff828d`a73cd280 : nt!PspExitThread+0x583
|
|---|
| 154 | ffffe68b`5f1bfa90 fffff802`1ad98003 : 00000000`000022c4 ffff828d`a73cd280 ffff828d`a5fe4080 00000000`03990950 : nt!NtTerminateProcess+0xeb
|
|---|
| 155 | ffffe68b`5f1bfb00 00007ffc`da800404 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
|
|---|
| 156 | 00000000`010ff408 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`da800404
|
|---|
| 157 |
|
|---|
| 158 |
|
|---|
| 159 | THREAD_SHA1_HASH_MOD_FUNC: 1b127f31d614b9e9028fd8cb00782a895d16903a
|
|---|
| 160 |
|
|---|
| 161 | THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 23e32034f7e2f3ca124636089685889b0f339497
|
|---|
| 162 |
|
|---|
| 163 | THREAD_SHA1_HASH_MOD: dc844b1b94baa204d070855e43bbbd27eee98b94
|
|---|
| 164 |
|
|---|
| 165 | FOLLOWUP_IP:
|
|---|
| 166 | nt!MiDereferenceIoPages+ccea8
|
|---|
| 167 | fffff802`1add1954 cc int 3
|
|---|
| 168 |
|
|---|
| 169 | FAULT_INSTR_CODE: 408bcccc
|
|---|
| 170 |
|
|---|
| 171 | SYMBOL_STACK_INDEX: 1
|
|---|
| 172 |
|
|---|
| 173 | SYMBOL_NAME: nt!MiDereferenceIoPages+ccea8
|
|---|
| 174 |
|
|---|
| 175 | FOLLOWUP_NAME: MachineOwner
|
|---|
| 176 |
|
|---|
| 177 | MODULE_NAME: nt
|
|---|
| 178 |
|
|---|
| 179 | DEBUG_FLR_IMAGE_TIMESTAMP: 5a7e7659
|
|---|
| 180 |
|
|---|
| 181 | STACK_COMMAND: .thread ; .cxr ; kb
|
|---|
| 182 |
|
|---|
| 183 | IMAGE_NAME: memory_corruption
|
|---|
| 184 |
|
|---|
| 185 | BUCKET_ID_FUNC_OFFSET: ccea8
|
|---|
| 186 |
|
|---|
| 187 | FAILURE_BUCKET_ID: 0x1a_61948_nt!MiDereferenceIoPages
|
|---|
| 188 |
|
|---|
| 189 | BUCKET_ID: 0x1a_61948_nt!MiDereferenceIoPages
|
|---|
| 190 |
|
|---|
| 191 | PRIMARY_PROBLEM_CLASS: 0x1a_61948_nt!MiDereferenceIoPages
|
|---|
| 192 |
|
|---|
| 193 | TARGET_TIME: 2018-02-28T09:55:44.000Z
|
|---|
| 194 |
|
|---|
| 195 | OSBUILD: 16299
|
|---|
| 196 |
|
|---|
| 197 | OSSERVICEPACK: 0
|
|---|
| 198 |
|
|---|
| 199 | SERVICEPACK_NUMBER: 0
|
|---|
| 200 |
|
|---|
| 201 | OS_REVISION: 0
|
|---|
| 202 |
|
|---|
| 203 | SUITE_MASK: 272
|
|---|
| 204 |
|
|---|
| 205 | PRODUCT_TYPE: 1
|
|---|
| 206 |
|
|---|
| 207 | OSPLATFORM_TYPE: x64
|
|---|
| 208 |
|
|---|
| 209 | OSNAME: Windows 10
|
|---|
| 210 |
|
|---|
| 211 | OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
|
|---|
| 212 |
|
|---|
| 213 | OS_LOCALE:
|
|---|
| 214 |
|
|---|
| 215 | USER_LCID: 0
|
|---|
| 216 |
|
|---|
| 217 | OSBUILD_TIMESTAMP: 2018-02-10 12:34:33
|
|---|
| 218 |
|
|---|
| 219 | BUILDDATESTAMP_STR: 170928-1534
|
|---|
| 220 |
|
|---|
| 221 | BUILDLAB_STR: rs3_release
|
|---|
| 222 |
|
|---|
| 223 | BUILDOSVER_STR: 10.0.16299.15.amd64fre.rs3_release.170928-1534
|
|---|
| 224 |
|
|---|
| 225 | ANALYSIS_SESSION_ELAPSED_TIME: b9a
|
|---|
| 226 |
|
|---|
| 227 | ANALYSIS_SOURCE: KM
|
|---|
| 228 |
|
|---|
| 229 | FAILURE_ID_HASH_STRING: km:0x1a_61948_nt!midereferenceiopages
|
|---|
| 230 |
|
|---|
| 231 | FAILURE_ID_HASH: {16899f95-043e-78ea-0aba-e664d76c4fc5}
|
|---|
| 232 |
|
|---|
| 233 | Followup: MachineOwner
|
|---|
| 234 | ---------
|
|---|
| 235 |
|
|---|