Microsoft (R) Windows Debugger Version 10.0.17074.1002 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [D:\MEMORY.DMP] Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available. Symbol search path is: srv* Executable search path is: Windows 10 Kernel Version 16299 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 16299.15.amd64fre.rs3_release.170928-1534 Machine Name: Kernel base = 0xfffff802`1ac10000 PsLoadedModuleList = 0xfffff802`1af77110 Debug session time: Wed Feb 28 17:55:44.528 2018 (UTC + 8:00) System Uptime: 3 days 6:50:48.075 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ ... Loading User Symbols PEB is paged out (Peb.Ldr = 00000000`00e59018). Type ".hh dbgerr001" for details Loading unloaded module list ............................................. ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1A, {61948, 2332810, 1, 2332810} Probably caused by : memory_corruption ( nt!MiDereferenceIoPages+ccea8 ) Followup: MachineOwner --------- nt!KeBugCheckEx: fffff802`1ad85430 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffe68b`5f1bf1b0=000000000000001a ************* Path validation summary ************** Response Time (ms) Location Deferred srv* 6: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000061948, The subtype of the bugcheck. Arg2: 0000000002332810 Arg3: 0000000000000001 Arg4: 0000000002332810 Debugging Details: ------------------ KEY_VALUES_STRING: 1 TIMELINE_ANALYSIS: 1 DUMP_CLASS: 1 DUMP_QUALIFIER: 401 BUILD_VERSION_STRING: 16299.15.amd64fre.rs3_release.170928-1534 SYSTEM_MANUFACTURER: MSI SYSTEM_PRODUCT_NAME: MS-7A37 SYSTEM_SKU: To be filled by O.E.M. SYSTEM_VERSION: 1.0 BIOS_VENDOR: American Megatrends Inc. BIOS_VERSION: 1.70 BIOS_DATE: 09/19/2017 BASEBOARD_MANUFACTURER: MSI BASEBOARD_PRODUCT: B350M MORTAR (MS-7A37) BASEBOARD_VERSION: 1.0 DUMP_TYPE: 1 BUGCHECK_P1: 61948 BUGCHECK_P2: 2332810 BUGCHECK_P3: 1 BUGCHECK_P4: 2332810 BUGCHECK_STR: 0x1a_61948 CPU_COUNT: c CPU_MHZ: e10 CPU_VENDOR: AuthenticAMD CPU_FAMILY: 17 CPU_MODEL: 1 CPU_STEPPING: 1 BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXPNP: 1 (!blackboxpnp) DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT PROCESS_NAME: VirtualBox.exe CURRENT_IRQL: 2 ANALYSIS_SESSION_HOST: DESKTOP-N0IAVLP ANALYSIS_SESSION_TIME: 03-01-2018 09:57:04.0064 ANALYSIS_VERSION: 10.0.17074.1002 amd64fre LAST_CONTROL_TRANSFER: from fffff8021add1954 to fffff8021ad85430 STACK_TEXT: ffffe68b`5f1bf1a8 fffff802`1add1954 : 00000000`0000001a 00000000`00061948 00000000`02332810 00000000`00000001 : nt!KeBugCheckEx ffffe68b`5f1bf1b0 fffff802`1ac93ae3 : ffffd581`94c40180 00000000`00000000 00000000`00000001 00000000`00000001 : nt!MiDereferenceIoPages+0xccea8 ffffe68b`5f1bf260 fffff802`1ac90fd1 : 00000000`00000000 00000000`00000000 ffffe68b`5f1bf4e0 00000000`00000200 : nt!MiDeletePteRun+0x553 ffffe68b`5f1bf3e0 fffff802`1ac8c6a6 : 00000000`00000000 ffff828d`a73cd280 00000000`00000000 ffff828d`a5fe4080 : nt!MiDeleteVirtualAddresses+0x11b1 ffffe68b`5f1bf6e0 fffff802`1b10f452 : ffff828d`a73cd280 ffff828d`a502ed50 00000000`00000000 ffff828d`a73cd280 : nt!MiDeleteVad+0x3b6 ffffe68b`5f1bf830 fffff802`1b10f0a7 : ffff828d`a73cd280 ffff828d`00000000 ffff828d`a502ed50 ffff828d`a502ed50 : nt!MiUnmapVad+0x32 ffffe68b`5f1bf860 fffff802`1b10eeee : ffffffff`00000000 ffff828d`a3c70e00 ffff828d`a502ed50 ffff828d`a73cd280 : nt!MiCleanVad+0x27 ffffe68b`5f1bf890 fffff802`1b0aae75 : ffffffff`ffffffff ffff828d`a5fe4080 ffff828d`a5fe4378 ffff9987`00000000 : nt!MmCleanProcessAddressSpace+0x12e ffffe68b`5f1bf910 fffff802`1b11dae7 : ffff828d`a5fe4080 ffff9987`9cbb9060 ffffe68b`5f1bfb80 00000000`00000000 : nt!PspRundownSingleProcess+0x129 ffffe68b`5f1bf990 fffff802`1b06ede3 : 00000000`00000000 ffffe68b`5f1bfb01 00000000`00e5a000 ffff828d`a73cd280 : nt!PspExitThread+0x583 ffffe68b`5f1bfa90 fffff802`1ad98003 : 00000000`000022c4 ffff828d`a73cd280 ffff828d`a5fe4080 00000000`03990950 : nt!NtTerminateProcess+0xeb ffffe68b`5f1bfb00 00007ffc`da800404 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000000`010ff408 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`da800404 THREAD_SHA1_HASH_MOD_FUNC: 1b127f31d614b9e9028fd8cb00782a895d16903a THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 23e32034f7e2f3ca124636089685889b0f339497 THREAD_SHA1_HASH_MOD: dc844b1b94baa204d070855e43bbbd27eee98b94 FOLLOWUP_IP: nt!MiDereferenceIoPages+ccea8 fffff802`1add1954 cc int 3 FAULT_INSTR_CODE: 408bcccc SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt!MiDereferenceIoPages+ccea8 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt DEBUG_FLR_IMAGE_TIMESTAMP: 5a7e7659 STACK_COMMAND: .thread ; .cxr ; kb IMAGE_NAME: memory_corruption BUCKET_ID_FUNC_OFFSET: ccea8 FAILURE_BUCKET_ID: 0x1a_61948_nt!MiDereferenceIoPages BUCKET_ID: 0x1a_61948_nt!MiDereferenceIoPages PRIMARY_PROBLEM_CLASS: 0x1a_61948_nt!MiDereferenceIoPages TARGET_TIME: 2018-02-28T09:55:44.000Z OSBUILD: 16299 OSSERVICEPACK: 0 SERVICEPACK_NUMBER: 0 OS_REVISION: 0 SUITE_MASK: 272 PRODUCT_TYPE: 1 OSPLATFORM_TYPE: x64 OSNAME: Windows 10 OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS OS_LOCALE: USER_LCID: 0 OSBUILD_TIMESTAMP: 2018-02-10 12:34:33 BUILDDATESTAMP_STR: 170928-1534 BUILDLAB_STR: rs3_release BUILDOSVER_STR: 10.0.16299.15.amd64fre.rs3_release.170928-1534 ANALYSIS_SESSION_ELAPSED_TIME: b9a ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:0x1a_61948_nt!midereferenceiopages FAILURE_ID_HASH: {16899f95-043e-78ea-0aba-e664d76c4fc5} Followup: MachineOwner ---------