Microsoft (R) Windows Debugger Version 10.0.27668.1000 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Us\Desktop\092024-6109-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 22621 MP (16 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0xfffff800`5c600000 PsLoadedModuleList = 0xfffff800`5d2134f0
Debug session time: Fri Sep 20 07:56:31.805 2024 (UTC + 8:00)
System Uptime: 0 days 0:00:25.499
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.................................................
Loading User Symbols
Loading unloaded module list
.........................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`5ca16000 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffb78b`752d6f00=000000000000000a
7: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff800ca5c35d4, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff800ca5c35d4, address which referenced memory
READ_ADDRESS: fffff8005d31d470: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
fffff800ca5c35d4
TRAP_FRAME: ffffb78b752d7040 -- (.trap 0xffffb78b752d7040)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff800ca5c35d4 rbx=0000000000000000 rcx=ffff978e087687e0
rdx=ffff978e087687a0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800ca5c35d4 rsp=ffffb78b752d71d8 rbp=ffffb78b752d72a9
r8=000000008d15f81c r9=0000000001db0aef r10=0000fffff800ca5c
r11=ffffccfcc7800000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz ac po cy
<Unloaded_BtL2caScoIf.>+0x35d4:
fffff800`ca5c35d4 ?? ???
Resetting default scope