Author: CBMoorthy
Subject: VPS Server Issue
Posted: 13 August 2013 at 2:20pm
Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Subject: VPS Server Issue
Posted: 13 August 2013 at 2:20pm
Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [O:\ISSUE\MEMORY\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
WARNING: Inaccessible path: 'c:\image'
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\image
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`01618000 PsLoadedModuleList = 0xfffff800`01855e50
Debug session time: Mon Aug 12 16:24:19.615 2013 (UTC + 5:30)
System Uptime: 8 days 11:47:51.255
Loading Kernel Symbols
...............................................................
................................................................
................................................................
Loading User Symbols
Loading unloaded module list
.................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {a, 2, 0, fffff88003036459}
*** ERROR: Module load completed but symbols could not be loaded for vznetflt.sys
*** ERROR: Module load completed but symbols could not be loaded for vznetif.sys
*** ERROR: Module load completed but symbols could not be loaded for vzadapter.sys
*** ERROR: Module load completed but symbols could not be loaded for vzcore.sys
Page 218a86 not present in the dump file. Type ".hh dbgerr004" for details
Page 218a86 not present in the dump file. Type ".hh dbgerr004" for details
Page 218e06 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : memory_corruption
Followup: memory_corruption
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000000a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88003036459, address which referenced memory
Debugging Details:
------------------
Page 218a86 not present in the dump file. Type ".hh dbgerr004" for details
Page 218a86 not present in the dump file. Type ".hh dbgerr004" for details
Page 218e06 not present in the dump file. Type ".hh dbgerr004" for details
READ_ADDRESS: 000000000000000a
CURRENT_IRQL: 2
FAULTING_IP:
e1e6032e!FilterDhcpTxPacket+1f9
fffff880`03036459 f6470a05 test byte ptr [rdi+0Ah],5
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TAG_NOT_DEFINED_c000000f: FFFFF88001E1BFB0
TRAP_FRAME: fffff88001e1a8b0 -- (.trap 0xfffff88001e1a8b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000014 rbx=0000000000000000 rcx=0000000000000014
rdx=0000000000000011 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88003036459 rsp=fffff88001e1aa40 rbp=0000000000000006
r8=fffffa800ce12c16 r9=0000000000000008 r10=00000000000000ff
r11=fffff88001e1abb8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz ac pe cy
e1e6032e!FilterDhcpTxPacket+0x1f9:
fffff880`03036459 f6470a05 test byte ptr [rdi+0Ah],5 ds:00000000`0000000a=??
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80001689469 to fffff80001689f00
STACK_TEXT:
fffff880`01e1a768 fffff800`01689469 : 00000000`0000000a 00000000`0000000a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`01e1a770 fffff800`016880e0 : 00000000`00000000 00000000`00000000 fffffa80`0ce12c00 fffff880`01e1a8b0 : nt!KiBugCheckDispatch+0x69
fffff880`01e1a8b0 fffff880`03036459 : fffff880`009c6180 00000000`00002625 00000000`00002625 00000000`00000002 : nt!KiPageFault+0x260
fffff880`01e1aa40 fffff880`0301d973 : 00000000`00000000 00000000`00000000 fffffa80`07988560 00000000`00000000 : e1e6032e!FilterDhcpTxPacket+0x1f9
fffff880`01e1aaf0 fffff880`0301dfe5 : fffffa80`07988560 00000000`00000000 00000000`00000500 00000000`00000000 : e1e6032e!SendElementWithScatterGather+0x133
fffff880`01e1abc0 fffff800`01bf962f : 00000000`00000000 fffffa80`079a07f0 00000000`0000005e fffff800`0165ac8f : e1e6032e!E1000ProcessSGList+0x75
fffff880`01e1ac00 fffff880`00e14831 : fffffa80`08c1d160 fffffa80`08c1d160 00000000`00000064 fffff880`069dcb60 : hal!HalBuildScatterGatherList+0x203
fffff880`01e1ac70 fffff880`0301c671 : fffffa80`078241a0 fffff880`01e1adc4 fffffa80`07988560 fffffa80`08c1d160 : NDIS!NdisMAllocateNetBufferSGList+0x181
fffff880`01e1ad10 fffff880`0301c021 : 00000000`00000000 fffff880`0503521d fffff880`00000000 fffff880`01e1ad00 : e1e6032e!MiniportSendNetBufferList+0x351
fffff880`01e1ad80 fffff880`00ed06a1 : fffffa80`08c1d030 00000000`00000000 00000000`00000000 00000000`00000000 : e1e6032e!E1000SendNetBufferLists+0x351
fffff880`01e1add0 fffff880`00e14af4 : 00000000`00000000 fffffa80`07b63010 fffffa80`08c1d030 00000000`00000000 : NDIS!ndisMSendNBLToMiniport+0xb1
fffff880`01e1ae30 fffff880`02f2e3e0 : 00000000`00000000 00000000`00000000 fffffa80`08c1d030 fffffa80`08c1d030 : NDIS!NdisFSendNetBufferLists+0x64
fffff880`01e1ae70 fffff880`00e14af4 : fffffa80`07b64010 fffff880`06ba8240 fffff880`00000000 fffff880`00000000 : vznetflt+0x13e0
fffff880`01e1aed0 fffff880`02f08199 : fffffa80`09993000 fffffa80`078241a0 00000000`00000000 00000000`00000000 : NDIS!NdisFSendNetBufferLists+0x64
fffff880`01e1af10 fffff880`00e14a39 : fffffa80`00000001 00000000`00000000 00000000`00000000 00000000`0000000e : pacer!PcFilterSendNetBufferLists+0x29
fffff880`01e1b010 fffff880`00ed0785 : 00000000`00000000 00000000`00000000 fffffa80`078241a0 00000000`0000000e : NDIS!ndisSendNBLToFilter+0x69
fffff880`01e1b070 fffff880`0186404e : 00000000`00000000 00000000`0000000e fffffa80`0791aa60 fffff880`01960800 : NDIS!NdisSendNetBufferLists+0x85
fffff880`01e1b0d0 fffff880`0185baaf : fffff880`0196c9a0 00000000`00000000 fffffa80`07700000 00000000`01960800 : tcpip!IppFragmentPackets+0x39e
fffff880`01e1b1f0 fffff880`0185a272 : fffffa80`0777a400 00000000`00000000 fffffa80`07784301 00000000`00000001 : tcpip!IpFlcReceivePackets+0x8df
fffff880`01e1b3f0 fffff880`018736ba : fffffa80`077843e0 fffff880`01e1b520 fffffa80`077843e0 fffffa80`096c0000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`01e1b4d0 fffff800`0169964a : fffffa80`0bf00720 fffff880`01e16000 00000000`00004800 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff880`01e1b520 fffff880`018730e2 : fffff880`018735e0 fffff880`01e1b630 ffff0000`072b2402 00000000`00002625 : nt!KeExpandKernelStackAndCalloutEx+0xda
fffff880`01e1b600 fffff880`00ed00eb : fffffa80`077858d0 00000000`00000000 fffffa80`0788c1a0 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`01e1b670 fffff880`00e99fc6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : NDIS!ndisMIndicateNetBufferListsToOpen+0xdb
fffff880`01e1b6e0 fffff880`00e1ca24 : fffffa80`0788c1a0 00000000`00000002 00000000`00000001 fffffa80`0765da00 : NDIS!ndisMDispatchReceiveNetBufferLists+0x1d6
fffff880`01e1bb60 fffff880`00e1c9e9 : fffffa80`0776c7f0 00000000`00000000 fffffa80`0ce17b00 fffff880`02f2e6d1 : NDIS!ndisMTopReceiveNetBufferLists+0x24
fffff880`01e1bba0 fffff880`00e1c980 : 00000000`00000000 00000000`00000028 fffffa80`089d2370 00000000`00000001 : NDIS!ndisFilterIndicateReceiveNetBufferLists+0x29
fffff880`01e1bbe0 fffff880`02f2f746 : 00000000`00000000 fffffa80`0776c7f0 fffffa80`0c508230 fffff880`01e1bcd8 : NDIS!NdisFIndicateReceiveNetBufferLists+0x50
fffff880`01e1bc20 fffff880`05023fde : 00000000`00000000 00000000`00000002 fffffa80`0776c7f0 fffffa80`0c508230 : vznetflt+0x2746
fffff880`01e1bc80 fffff800`016955dc : 00000000`00000000 fffffa80`08d6de01 fffff880`009c6180 fffffa80`087eb0c0 : vznetif+0x2fde
fffff880`01e1bf00 fffff800`01690065 : 48107403`1846f600 fffffa80`09740740 00000000`00000000 fffff880`05023b30 : nt!KiRetireDpcList+0x1bc
fffff880`01e1bfb0 fffff800`0168fe7c : 00000000`00000000 fffffa80`0ce3e740 fffffa80`08dfce02 80000002`00000000 : nt!KyRetireDpcList+0x5
fffff880`09b543d0 fffff800`016d565c : 00000000`0000b4ff fffff880`09b54490 ffff0000`0f7fd2de fffff880`06b9de65 : nt!KiDispatchInterruptContinue
fffff880`09b54400 fffff800`0169746a : 00000000`0000dd86 fffff880`00000000 00000000`00000000 fffffa80`08d85001 : nt!KiDpcInterrupt+0xcc
fffff880`09b54590 fffff880`03004374 : fffffa80`08131cb0 fffff880`09b54650 fffffa80`0668d368 fffffa80`09993000 : nt!KeReleaseSpinLock+0x2a
fffff880`09b545c0 fffff880`030046b9 : fffffa80`00000000 fffffa80`099943b0 fffffa80`08d6de30 00000000`00000000 : vzadapter+0x4374
fffff880`09b54640 fffff880`0300581d : 00000000`0000dd86 fffff880`09b54998 fffffa80`08d85040 fffffa80`08fa9258 : vzadapter+0x46b9
fffff880`09b54670 fffff880`03005bf0 : fffffa80`09993000 fffffa80`08131cb0 fffffa80`0668d368 fffffa80`08d850b6 : vzadapter+0x581d
fffff880`09b546d0 fffff880`03005d6e : fffff880`09b54810 fffffa80`09993000 00000000`00000000 00000000`0000002a : vzadapter+0x5bf0
fffff880`09b54720 fffff880`06a85f6e : fffffa80`0cd1b0b0 00000000`00000001 fffffa80`00000001 fffff880`06a2a110 : vzadapter+0x5d6e
fffff880`09b54750 fffff880`06a86047 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`06a2a110 : VPS_00000100_ndis!ndisMSendPacketsXToMiniport+0xfe
fffff880`09b547b0 fffff880`069c9af4 : fffffa80`09665220 00000000`00000000 00000000`00000000 00000000`00000000 : VPS_00000100_ndis!ndisMSendNetBufferListsToPackets+0x97
fffff880`09b54870 fffff880`05e01199 : fffffa80`0cafc030 fffffa80`094bb1a0 00000000`00000000 fffffa80`0c9f0d30 : VPS_00000100_ndis!NdisFSendNetBufferLists+0x64
fffff880`09b548b0 fffff880`069c9a39 : 00000000`00000500 fffffa80`09027080 fffffa80`0cf7abd0 fffffa80`0c5fdd10 : VPS_00000100_pacer!PcFilterSendNetBufferLists+0x29
fffff880`09b549b0 fffff880`06a85785 : fffffa80`0c5fdd10 00000000`00000000 fffffa80`094bb1a0 fffff880`06b88ec0 : VPS_00000100_ndis!ndisSendNBLToFilter+0x69
fffff880`09b54a10 fffff880`06b89192 : 00000000`00000000 00000000`0000000e fffffa80`09674790 00000000`00000000 : VPS_00000100_ndis!NdisSendNetBufferLists+0x85
fffff880`09b54a70 fffff880`06b899fb : fffffa80`0cf7aa00 fffffa80`09683460 fffff880`050c5d00 fffffa80`08d52140 : VPS_00000100_tcpip!Fl48pSendArpPacket+0x292
fffff880`09b54b20 fffff880`06b89d0a : fffff8a0`0ae87d20 00000000`00000000 00000000`00000000 fffffa80`09bcef10 : VPS_00000100_tcpip!Fl48SendNeighborSolicitation+0x2b
fffff880`09b54b60 fffff880`06b89b40 : fffffa80`09683460 fffffa80`08d52140 fffffa80`0c5fdc30 00000000`00000000 : VPS_00000100_tcpip!Ipv4pSendNeighborSolicitation+0x7a
fffff880`09b54bc0 fffff880`06b89904 : fffffa80`0c5fdc30 00060000`00000000 fffff880`06ccb830 00000000`00000000 : VPS_00000100_tcpip!IppSendNeighborSolicitation+0xa0
fffff880`09b54c30 fffff800`01983527 : fffffa80`09009010 fffffa80`09021230 fffffa80`091b99c0 fffffa80`08caf098 : VPS_00000100_tcpip!IppNeighborSolicitationWorker+0x119
fffff880`09b54c90 fffff880`050c6605 : fffff8a0`0a793db0 fffff800`01983504 fffffa80`72777a56 fffffa80`0000073a : nt!IopProcessWorkItem+0x23
fffff880`09b54cc0 fffff800`0192d166 : 00000000`00000000 ffffffff`dc3cba00 fffffa80`09740740 fffff800`01681d87 : vzcore+0x20605
fffff880`09b54d40 fffff800`01668486 : fffff800`01802e80 fffffa80`09740740 fffffa80`0876b520 fffff880`0145e534 : nt!PspSystemThreadStartup+0x5a
fffff880`09b54d80 00000000`00000000 : fffff880`09b55000 fffff880`09b4f000 fffff880`09b53fb0 00000000`00000000 : nt!KiStartSystemThread+0x16
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff800016265e8-fffff800016265ed 6 bytes - nt!KiSetAffinityThread
[ 48 89 5c 24 08 55:ff 25 32 8a fd fe ]
fffff800016267cc-fffff800016267d1 6 bytes - nt!KiSelectNextThread (+0x1e4)
[ 8b 81 98 44 00 00:ff 25 6e 86 fd fe ]
fffff8000162895f-fffff80001628965 7 bytes - nt!RtlWalkFrameChain+8f (+0x2193)
[ 90 90 90 90 90 48 8b:e9 84 6e fd fe eb f9 ]
fffff8000163081b-fffff80001630821 7 bytes - nt!MmIsSessionAddress+2b (+0x7ebc)
[ 90 90 90 90 90 48 89:e9 18 16 fc fe eb f9 ]
fffff8000163b0fb-fffff8000163b101 7 bytes - nt!EtwpCreateActivityId (+0xa8e0)
[ 90 90 90 90 90 48 8b:e9 48 81 fb fe eb f9 ]
fffff8000163b36b-fffff8000163b371 7 bytes - nt!WPP_SF_qdqXXd+8f (+0x270)
[ 90 90 90 90 90 48 89:e9 f8 a9 fa fe eb f9 ]
fffff8000163e25b-fffff8000163e261 7 bytes - nt!KiCustomAccessRoutine5+2b (+0x2ef0)
[ 90 90 90 90 90 48 89:e9 28 1c fc fe eb f9 ]
fffff80001640a74-fffff80001640a79 6 bytes - nt!KiQuantumEnd (+0x2819)
[ 48 89 5c 24 10 48:ff 25 f6 e5 fb fe ]
fffff80001645af9-fffff80001645afd 5 bytes - nt!KiSetSystemAffinityThread+1 (+0x5085)
[ f3 55 57 48 83:25 e2 93 fb fe ]
fffff8000164a71f-fffff8000164a725 7 bytes - nt!SepRmCallLsa+123 (+0x4c26)
[ 90 90 90 90 90 48 89:e9 04 d9 fa fe eb f9 ]
fffff8000164a83b-fffff8000164a841 7 bytes - nt!SepRmDispatchDataToLsa+117 (+0x11c)
[ 90 90 90 90 90 48 89:e9 58 dc fa fe eb f9 ]
fffff80001652ed0-fffff80001652ed5 6 bytes - nt!KiRemoveBoostThread (+0x8695)
[ 48 89 5c 24 08 48:ff 25 1a bf fa fe ]
fffff80001653c20-fffff80001653c25 6 bytes - nt!NtYieldExecution (+0xd50)
[ 48 89 5c 24 10 48:ff 25 9a b4 fa fe ]
fffff8000165b22b-fffff8000165b231 7 bytes - nt!DeleteNodeFromTree+19b (+0x760b)
[ 90 90 90 90 90 48 89:e9 98 7b f9 fe eb f9 ]
fffff80001661f07-fffff80001661f0d 7 bytes - nt!RtlpImageDirectoryEntryToData32+77 (+0x6cdc)
[ 90 90 90 90 90 48 89:e9 9c d6 f9 fe eb f9 ]
fffff800016627eb-fffff800016627f1 7 bytes - nt!RtlLookupFunctionTable+2 (+0x8e4)
[ 90 90 90 90 90 48 8b:e9 68 d4 f9 fe eb f9 ]
fffff8000166548b-fffff80001665491 7 bytes - nt!RtlSidHashInitialize+af (+0x2ca0)
[ 90 90 90 90 90 ff f3:e9 38 b0 f7 fe eb f9 ]
fffff800016657ab-fffff800016657b1 7 bytes - nt!KeUnstackDetachProcess+31b (+0x320)
[ 90 90 90 90 90 ff f3:e9 48 af f7 fe eb f9 ]
fffff8000166fec3-fffff8000166fec9 7 bytes - nt!KeQueryLogicalProcessorRelationship+643 (+0xa718)
[ 90 90 90 90 90 ff f3:e9 a0 88 f7 fe eb f9 ]
fffff800016702af-fffff800016702b5 7 bytes - nt!NtTraceEvent+3e4 (+0x3ec)
[ 90 90 90 90 90 48 89:e9 e4 48 f7 fe eb f9 ]
fffff80001674cb7-fffff80001674cbd 7 bytes - nt!PfFbLogEntryReserve+c7 (+0x4a08)
[ 90 90 90 90 90 4c 8b:e9 dc 7a f7 fe eb f9 ]
fffff8000167d9ac-fffff8000167d9b1 6 bytes - nt!KiSetPriorityThread (+0x8cf5)
[ 48 89 5c 24 08 48:ff 25 1e 16 f8 fe ]
fffff8000167ffab-fffff8000167ffb1 7 bytes - nt!KeRemoveQueue+3b (+0x25ff)
[ 90 90 90 90 90 48 89:e9 f8 fa f6 fe eb f9 ]
fffff8000168c16b-fffff8000168c171 7 bytes - nt!memset+eb (+0xc1c0)
[ 90 90 90 90 90 4c 8b:e9 88 ff f5 fe eb f9 ]
fffff8000168e6e0-fffff8000168e6e5 6 bytes - nt!KiDeferredReadyThread (+0x2575)
[ 48 89 5c 24 10 48:ff 25 2a 0a f7 fe ]
fffff8000168fd60-fffff8000168fd65 6 bytes - nt!KiSwapContext (+0x1680)
[ 48 81 ec 38 01 00:ff 25 4a f4 f6 fe ]
fffff80001690080-fffff80001690085 6 bytes - nt!SwapContext (+0x320)
[ 48 83 ec 38 48 89:ff 25 ca f1 f6 fe ]
fffff80001690320-fffff80001690325 6 bytes - nt!EnlightenedSwapContext (+0x2a0)
[ 48 83 ec 38 48 89:ff 25 da ee f6 fe ]
fffff80001690a5b-fffff80001690a61 7 bytes - nt!KeAcquireSpinLockAtDpcLevel+8b (+0x73b)
[ 90 90 90 90 90 ff f3:e9 c8 dd f6 fe eb f9 ]
fffff8000169179b-fffff800016917a1 7 bytes - nt!KiCancelTimer+14b (+0xd40)
[ 90 90 90 90 90 ff f6:e9 48 e5 f5 fe eb f9 ]
fffff80001691c71-fffff80001691c75 5 bytes - nt!KiSearchForNewThread+1 (+0x4d6)
[ f3 57 48 83 ec:25 1a d2 f6 fe ]
fffff8000169227b-fffff80001692281 7 bytes - nt!ExEnterPriorityRegionAndAcquireResourceExclusive+a (+0x60a)
[ 90 90 90 90 90 48 89:e9 e8 d0 f6 fe eb f9 ]
fffff800016927f0-fffff800016927f5 6 bytes - nt!KiQueueReadyThread (+0x575)
[ 48 89 5c 24 08 48:ff 25 6a c9 f6 fe ]
fffff8000169426b-fffff80001694271 7 bytes - nt!ExpReleaseResourceForThreadLite+4d6 (+0x1a7b)
[ 90 90 90 90 90 48 83:e9 b8 32 f6 fe eb f9 ]
fffff80001695cbb-fffff80001695cc1 7 bytes - nt!ExEnterPriorityRegionAndAcquireResourceShared+33 (+0x1a50)
[ 90 90 90 90 90 ff f3:e9 08 6d f5 fe eb f9 ]
fffff8000169924b-fffff80001699251 7 bytes - nt!IopAllocateIrpPrivate+2eb (+0x3590)
[ 90 90 90 90 90 ff f3:e9 78 9c f4 fe eb f9 ]
fffff8000169b25c-fffff8000169b261 6 bytes - nt!KiScanReadyQueues (+0x2011)
[ 4c 8b dc 49 89 5b:ff 25 1e 3d f6 fe ]
fffff8000169e53b-fffff8000169e541 7 bytes - nt!MiCheckAndProcessCcAccessLog+1b (+0x32df)
[ 90 90 90 90 90 ff f3:e9 18 1b f4 fe eb f9 ]
fffff8000169e66f-fffff8000169e675 7 bytes - nt!KeDetachProcess+12f (+0x134)
[ 90 90 90 90 90 48 89:e9 54 0a f4 fe eb f9 ]
fffff800016a3bdb-fffff800016a3be1 7 bytes - nt!PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion+2b (+0x556c)
[ 90 90 90 90 90 48 89:e9 a8 96 f4 fe eb f9 ]
fffff800016a683b-fffff800016a6841 7 bytes - nt!MiCheckAging+17b (+0x2c60)
[ 90 90 90 90 90 48 89:e9 c8 6e f4 fe eb f9 ]
fffff800016aeabb-fffff800016aeac1 7 bytes - nt!CcSetFileSizesEx+50b (+0x8280)
[ 90 90 90 90 90 ff f6:e9 68 13 f3 fe eb f9 ]
fffff800016afa9b-fffff800016afaa1 7 bytes - nt!MiPfnReferenceCountIsZero+6b (+0xfe0)
[ 90 90 90 90 90 48 89:e9 68 35 f4 fe eb f9 ]
fffff800016b7feb-fffff800016b7ff1 7 bytes - nt!RtlUnwindEx+943 (+0x8550)
[ 90 90 90 90 90 48 89:e9 28 7a f4 fe eb f9 ]
fffff8000171e9bb-fffff8000171e9c1 7 bytes - nt!MigrateOOBELanguageToInstallationLanguage+1eb (+0x669d0)
[ 90 90 90 90 90 33 c0:e9 98 21 ec fe eb f9 ]
fffff80001732d3b-fffff80001732d41 7 bytes - nt!PnpDeviceCompletionQueueIsEmpty+14b (+0x14380)
[ 90 90 90 90 90 48 89:e9 18 fc eb fe eb f9 ]
fffff800017336cb-fffff800017336d1 7 bytes - nt!IoStartTimer+15b (+0x990)
[ 90 90 90 90 90 48 89:e9 88 8e eb fe eb f9 ]
fffff8000174127b-fffff80001741281 7 bytes - nt!PpmCheckRun+ab (+0xdbb0)
[ 90 90 90 90 90 ff f3:e9 18 1a ea fe eb f9 ]
fffff800017412eb-fffff800017412f1 7 bytes - nt!BCryptGenRandom+6b (+0x70)
[ 90 90 90 90 90 48 89:e9 68 17 ea fe eb f9 ]
fffff800017413ab-fffff800017413b1 7 bytes - nt!BCryptDecrypt+bb (+0xc0)
[ 90 90 90 90 90 48 89:e9 68 14 ea fe eb f9 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
fffff800018c4103 - nt!PopAcquirePolicyLock+47
[ 90:e9 ]
fffff800018c4105-fffff800018c4109 5 bytes - nt!PopAcquirePolicyLock+49 (+0x02)
[ 90 90 90 48 89:ef d1 fe eb f9 ]
fffff800018cc83b-fffff800018cc841 7 bytes - nt!ExpSetSystemTime+bb (+0x8736)
[ 90 90 90 90 90 ff f3:e9 e8 d4 d2 fe eb f9 ]
fffff800018d80eb-fffff800018d80f1 7 bytes - nt!PopGracefulShutdown+29b (+0xb8b0)
[ 90 90 90 90 90 48 89:e9 88 82 d1 fe eb f9 ]
fffff800018ea19b-fffff800018ea1a1 7 bytes - nt! ?? ::NNGAKEGL::`string'+5403d
[ 90 90 90 90 90 48 89:e9 c8 0d d0 fe eb f9 ]
fffff800018ecc53-fffff800018ecc59 7 bytes - nt!RtlOemStringToUnicodeString+df (+0x2ab8)
[ 90 90 90 90 90 48 8b:e9 70 bf cf fe eb f9 ]
fffff800018f1883-fffff800018f1889 7 bytes - nt!EtwpReleaseLoggerContext+33 (+0x4c30)
[ 90 90 90 90 90 48 89:e9 c0 39 cf fe eb f9 ]
fffff800018f36db-fffff800018f36e1 7 bytes - nt!NtNotifyChangeDirectoryFile+327 (+0x1e58)
[ 90 90 90 90 90 4c 8b:e9 c8 00 cf fe eb f9 ]
fffff800018f520f-fffff800018f5215 7 bytes - nt!PnpDeviceEventWorker+24f (+0x1b34)
[ 90 90 90 90 90 48 89:e9 e4 e6 cf fe eb f9 ]
fffff800018f54af-fffff800018f54b5 7 bytes - nt!PnpReportTargetDeviceChangeAsyncWorker+4b (+0x2a0)
[ 90 90 90 90 90 48 89:e9 04 e2 cf fe eb f9 ]
fffff800018f5a5f-fffff800018f5a65 7 bytes - nt!PiControlGetInterfaceDeviceList+19f (+0x5b0)
[ 90 90 90 90 90 48 8b:e9 44 02 d0 fe eb f9 ]
fffff800018f604b-fffff800018f6051 7 bytes - nt!PiGetDeviceRegistryProperty+3 (+0x5ec)
[ 90 90 90 90 90 ff f3:e9 28 c0 cf fe eb f9 ]
fffff800018f63ef-fffff800018f63f5 7 bytes - nt!IoCreateDevice+39f (+0x3a4)
[ 90 90 90 90 90 4c 8b:e9 24 fd cf fe eb f9 ]
fffff800018f8473-fffff800018f8479 7 bytes - nt!IoWMISystemControl+18b (+0x2084)
[ 90 90 90 90 90 4c 8b:e9 80 c8 cf fe eb f9 ]
fffff800018f9b9b-fffff800018f9ba1 7 bytes - nt!WmipHexStringToDword+7b (+0x1728)
[ 90 90 90 90 90 48 89:e9 08 48 d0 fe eb f9 ]
fffff800018fa693 - nt!IopOpenOrCreateDeviceRegistryKey+217 (+0xaf8)
[ 90:e9 ]
fffff800018fa695-fffff800018fa699 5 bytes - nt!IopOpenOrCreateDeviceRegistryKey+219 (+0x02)
[ 90 90 90 48 89:70 cf fe eb f9 ]
fffff80001901373-fffff80001901379 7 bytes - nt!CmpLockTwoKcbsExclusive+ff (+0x6cde)
[ 90 90 90 90 90 4c 8b:e9 80 be cf fe eb f9 ]
fffff80001904d27-fffff80001904d2d 7 bytes - nt!TmpInitializeEnlistment+797 (+0x39b4)
[ 90 90 90 90 90 48 8b:e9 ac 14 ce fe eb f9 ]
fffff8000190716b-fffff80001907171 7 bytes - nt!TmpCreateInternalCrmEnlistment+2e3 (+0x2444)
[ 90 90 90 90 90 48 8b:e9 68 0f ce fe eb f9 ]
fffff80001907c67-fffff80001907c6d 7 bytes - nt!TmpSetNotificationResourceManager+20f (+0xafc)
[ 90 90 90 90 90 48 89:e9 ec ff cd fe eb f9 ]
fffff80001907d0b-fffff80001907d11 7 bytes - nt!TmpNamespaceInsert+9f (+0xa4)
[ 90 90 90 90 90 48 83:e9 28 08 ce fe eb f9 ]
fffff8000190860b-fffff80001908611 7 bytes - nt!CmpAccountForLogReservation+ab (+0x900)
[ 90 90 90 90 90 48 89:e9 98 e4 cd fe eb f9 ]
fffff80001908f4b-fffff80001908f51 7 bytes - nt!CmpParseCacheAddHive+227 (+0x940)
[ 90 90 90 90 90 48 89:e9 68 c7 cd fe eb f9 ]
fffff8000190c8e3-fffff8000190c8e9 7 bytes - nt!CmRmFinalizeRecovery+9f (+0x3998)
[ 90 90 90 90 90 48 89:e9 80 9f cd fe eb f9 ]
fffff8000190d74b-fffff8000190d751 7 bytes - nt!HvInitializeHive+2ef (+0xe68)
[ 90 90 90 90 90 ff f3:e9 e8 8e cd fe eb f9 ]
fffff8000191036b-fffff80001910371 7 bytes - nt!HvpAllocateMap+97 (+0x2c20)
[ 90 90 90 90 90 48 89:e9 48 cc ce fe eb f9 ]
fffff80001910ccf-fffff80001910cd5 7 bytes - nt!CmpAllocateUnitOfWork+6b (+0x964)
[ 90 90 90 90 90 48 89:e9 c4 71 cd fe eb f9 ]
fffff8000191198b-fffff80001911991 7 bytes - nt!TmpRemoveEnlistmentResourceManager+4f (+0xcbc)
[ 90 90 90 90 90 4c 8b:e9 38 ab ce fe eb f9 ]
fffff80001913abb-fffff80001913ac1 7 bytes - nt!CmpTryAcquireIXLockExclusive+b (+0x2130)
[ 90 90 90 90 90 4c 8b:e9 68 8e ce fe eb f9 ]
fffff800019146ff-fffff80001914705 7 bytes - nt!CmpFreeKeyByCell+1a3 (+0xc44)
[ 90 90 90 90 90 48 83:e9 a4 2e cd fe eb f9 ]
fffff8000191472b-fffff80001914731 7 bytes - nt!TmpNamespaceLock+27 (+0x2c)
[ 90 90 90 90 90 48 89:e9 e8 32 cd fe eb f9 ]
fffff8000191479f-fffff800019147a5 7 bytes - nt!TmpNamespaceRemove+6f (+0x74)
[ 90 90 90 90 90 48 83:e9 d4 2b cd fe eb f9 ]
fffff800019147e3 - nt!CmListGetNextElement+2b (+0x44)
[ 90:e9 ]
fffff800019147e5-fffff800019147e9 5 bytes - nt!CmListGetNextElement+2d (+0x02)
[ 90 90 90 48 89:2f cd fe eb f9 ]
fffff80001914bbb-fffff80001914bc1 7 bytes - nt!TmpNamespaceFreeEntry+f (+0x3d6)
[ 90 90 90 90 90 48 8b:e9 c8 81 ce fe eb f9 ]
fffff8000191517b-fffff80001915181 7 bytes - nt!NtUnloadKey2+5ba (+0x5c0)
[ 90 90 90 90 90 48 8b:e9 28 0e cd fe eb f9 ]
fffff80001916997-fffff8000191699d 7 bytes - nt!TmpCloseResourceManager+113 (+0x181c)
[ 90 90 90 90 90 ff f3:e9 ac 07 cd fe eb f9 ]
fffff8000191860b-fffff80001918611 7 bytes - nt!IoFreeMiniCompletionPacket+b (+0x1c74)
[ 90 90 90 90 90 65 48:e9 a8 57 cd fe eb f9 ]
fffff80001918677-fffff8000191867d 7 bytes - nt!ExpGenuinePolicyCacheProvider+33 (+0x6c)
[ 90 90 90 90 90 48 89:e9 9c bd cd fe eb f9 ]
fffff8000191901b-fffff80001919021 7 bytes - nt!PopCurrentPowerState+a3 (+0x9a4)
[ 90 90 90 90 90 48 89:e9 d8 81 cc fe eb f9 ]
fffff8000191978f-fffff80001919795 7 bytes - nt!PoGetPerfStateAndParkingInfo+ef (+0x774)
[ 90 90 90 90 90 48 89:e9 04 81 cc fe eb f9 ]
fffff8000191d50f-fffff8000191d515 7 bytes - nt!NtCreateTimer+14f (+0x3d80)
[ 90 90 90 90 90 4c 8b:e9 44 a2 cd fe eb f9 ]
fffff8000191dcf7-fffff8000191dcfd 7 bytes - nt!SeSetMandatoryPolicyToken+b3 (+0x7e8)
[ 90 90 90 90 90 48 8b:e9 8c 9c cd fe eb f9 ]
fffff8000191f06b-fffff8000191f071 7 bytes - nt!NtCreateToken+78f (+0x1374)
[ 90 90 90 90 90 48 89:e9 78 8d cd fe eb f9 ]
fffff800019200db-fffff800019200e1 7 bytes - nt!EtwpQueryTrace+3 (+0x1070)
[ 90 90 90 90 90 48 8b:e9 78 b4 cd fe eb f9 ]
fffff80001923283-fffff80001923289 7 bytes - nt!NtAlpcCreatePortSection+1cf (+0x31a8)
[ 90 90 90 90 90 48 89:e9 d0 58 cd fe eb f9 ]
fffff8000192375b-fffff80001923761 7 bytes - nt!NtMakeTemporaryObject+3 (+0x4d8)
[ 90 90 90 90 90 48 89:e9 38 56 cd fe eb f9 ]
fffff80001923e73-fffff80001923e79 7 bytes - nt!RtlpValidateSidBuffer+2f (+0x718)
[ 90 90 90 90 90 4c 8b:e9 10 16 cc fe eb f9 ]
fffff80001924843-fffff80001924849 7 bytes - nt!IopCleanupProcessResources+3b (+0x9d0)
[ 90 90 90 90 90 48 89:e9 20 99 cd fe eb f9 ]
fffff80001924ebb-fffff80001924ec1 7 bytes - nt!ObpCompareNamespaceEntry+63 (+0x678)
[ 90 90 90 90 90 48 8b:e9 18 eb cb fe eb f9 ]
fffff80001925dfb-fffff80001925e01 7 bytes - nt!ObpInsertDirectoryEntry+7 (+0xf40)
[ 90 90 90 90 90 4c 8b:e9 98 64 cd fe eb f9 ]
fffff8000192763b-fffff80001927641 7 bytes - nt!CmCreateKey+388 (+0x1840)
[ 90 90 90 90 90 48 83:e9 b8 50 cd fe eb f9 ]
fffff80001929023-fffff80001929029 7 bytes - nt!SepCompareSidAndAttributeArrays+9b (+0x19e8)
[ 90 90 90 90 90 48 89:e9 b0 ff cc fe eb f9 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
Page 218a86 not present in the dump file. Type ".hh dbgerr004" for details
Page 218a86 not present in the dump file. Type ".hh dbgerr004" for details
Page 218e06 not present in the dump file. Type ".hh dbgerr004" for details
1737 errors : !nt (fffff800016265e8-fffff80001b070d1)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
Followup: memory_corruption
---------