
昨晚8点蓝屏记录:
Microsoft (R) Windows Debugger Version 10.0.19041.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\ralph\Desktop\122021-5515-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (20 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff802`08000000 PsLoadedModuleList = 0xfffff802`08c2a1b0
Debug session time: Mon Dec 20 21:10:13.821 2021 (UTC + 8:00)
System Uptime: 0 days 0:18:13.514
Loading Kernel Symbols
...............................................................
................................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
.............
For analysis of this file, run !analyze -v
16: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: ffffdd433b858c90, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8021fbb1d60, address which referenced memory
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for 360AntiHacker64.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 6
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on MSI
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 13
Key : Analysis.Memory.CommitPeak.Mb
Value: 109
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: d1
BUGCHECK_P1: ffffdd433b858c90
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff8021fbb1d60
READ_ADDRESS: fffff80208cfb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff80208c0f378: Unable to get Flags value from nt!KdVersionBlock
fffff80208c0f378: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
ffffdd433b858c90
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: svchost.exe
TRAP_FRAME: ffffd98af604f330 -- (.trap 0xffffd98af604f330)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000007
rdx=ffffdd0b439cbeb8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8021fbb1d60 rsp=ffffd98af604f4c0 rbp=0000000000000001
r8=ffffdd0b3b3da948 r9=0000000000000000 r10=fffff802082d79f0
r11=ffffd98af604f490 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nsiproxy!NsippDeregisterChangeNotification+0x170:
fffff802`1fbb1d60 837b1000 cmp dword ptr [rbx+10h],0 ds:00000000`00000010=????????
Resetting default scope
STACK_TEXT:
ffffd98a`f604f1e8 fffff802`08409069 : 00000000`0000000a ffffdd43`3b858c90 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd98a`f604f1f0 fffff802`08405369 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd98a`f604f330 fffff802`1fbb1d60 : ffffdd0b`38f15d60 00000000`00000000 000000f9`edefebb0 ffffdd0b`42f86d78 : nt!KiPageFault+0x469
ffffd98a`f604f4c0 fffff802`1fbb27ba : 00000000`00000000 ffffdd0b`42f86d78 ffffdd0b`42f86c60 000000f9`edefebb0 : nsiproxy!NsippDeregisterChangeNotification+0x170
ffffd98a`f604f600 fffff802`0828f7d5 : 00000000`00000000 00000000`00000000 ffffdd0b`3b03e8e0 ffffdd0b`2d5b58f0 : nsiproxy!NsippDispatch+0x15a
ffffd98a`f604f650 fffff802`2003f4a5 : 00000000`00000000 fffff802`0820827e 00000000`00000000 ffffdd0b`439caa90 : nt!IofCallDriver+0x55
ffffd98a`f604f690 00000000`00000000 : fffff802`0820827e 00000000`00000000 ffffdd0b`439caa90 ffffdd0b`439caa90 : 360AntiHacker64+0xf4a5
SYMBOL_NAME: nsiproxy!NsippDeregisterChangeNotification+170
MODULE_NAME: nsiproxy
IMAGE_NAME: nsiproxy.sys
IMAGE_VERSION: 10.0.19041.1110
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 170
FAILURE_BUCKET_ID: AV_nsiproxy!NsippDeregisterChangeNotification
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {20438750-d2e4-afe3-107e-5522cc25d836}
Followup: MachineOwner
昨晚11点蓝屏记录:
Microsoft (R) Windows Debugger Version 10.0.19041.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\ralph\Desktop\122021-6031-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (20 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff801`1dc00000 PsLoadedModuleList = 0xfffff801`1e82a1b0
Debug session time: Mon Dec 20 23:07:55.375 2021 (UTC + 8:00)
System Uptime: 0 days 1:41:25.067
Loading Kernel Symbols
..
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
.............................................................
................................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
............
For analysis of this file, run !analyze -v
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff8091dc1a6a8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8011df16c3a, address which referenced memory
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 4
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on MSI
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 17
Key : Analysis.Memory.CommitPeak.Mb
Value: 113
Key : Analysis.System
Value: CreateObject
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_CODE: a
BUGCHECK_P1: fffff8091dc1a6a8
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff8011df16c3a
READ_ADDRESS: fffff8011e8fb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8011e80f378: Unable to get Flags value from nt!KdVersionBlock
fffff8011e80f378: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
fffff8091dc1a6a8
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: FIFA22.exe
TRAP_FRAME: ffffd98d97b76430 -- (.trap 0xffffd98d97b76430)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=7fffffffffffffff rbx=0000000000000000 rcx=fffff8011dc00000
rdx=0000001000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8011df16c3a rsp=ffffd98d97b765c0 rbp=0000000000000001
r8=0004000000000000 r9=0000000000000001 r10=0000000000000001
r11=0000000000000192 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!MiInsertLargePageInNodeList+0xba:
fffff801`1df16c3a 4a8b8ce1b0a60100 mov rcx,qword ptr [rcx+r12*8+1A6B0h] ds:fffff801`1dc1a6b0=0000000000040000
Resetting default scope
STACK_TEXT:
ffffd98d`97b762e8 fffff801`1e009069 : 00000000`0000000a fffff809`1dc1a6a8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd98d`97b762f0 fffff801`1e005369 : 00000008`ac3c7821 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd98d`97b76430 fffff801`1df16c3a : fffff480`00007000 00000000`00000001 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x469
ffffd98d`97b765c0 fffff801`1df16a64 : fffff180`00000003 fffff801`00000000 00000000`00000002 00000000`00000000 : nt!MiInsertLargePageInNodeList+0xba
ffffd98d`97b76680 fffff801`1df1653f : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : nt!MiInsertLargePageChain+0x1bc
ffffd98d`97b76740 fffff801`1df19e69 : 00000000`00000001 00000000`00000000 00000000`00000002 00000000`00000001 : nt!MiInsertDemotedPages+0x5f
ffffd98d`97b76790 fffff801`1dea4f43 : 00000000`0042c380 ffffdb82`00000000 00000000`00000001 00000000`0000009f : nt!MiGetLargePage+0x109
ffffd98d`97b768e0 fffff801`1dea27e8 : 00000000`00000001 ffffd98d`97b76c20 00000002`19c80000 00000000`00000001 : nt!MiGetPageChain+0x253
ffffd98d`97b76b20 fffff801`1dea1d38 : ffffd98d`97b76cb0 00000000`00000000 00000000`00000001 00000000`00000000 : nt!MiResolvePrivateZeroFault+0x6e8
ffffd98d`97b76c50 fffff801`1dea110d : 00000000`c0000016 00000000`00000002 00000000`00000000 00000000`00000002 : nt!MiResolveDemandZeroFault+0x208
ffffd98d`97b76d40 fffff801`1de9f1f9 : ff7f7f12`7f0f7f12 ffffdb82`0000001c 00000000`c0000016 00000000`00000000 : nt!MiDispatchFault+0x22d
ffffd98d`97b76e80 fffff801`1df45bec : ffff8542`a150a000 ffffdb82`3959c700 ffff8542`80008670 00000002`19c80000 : nt!MmAccessFault+0x189
ffffd98d`97b77020 fffff801`1de4e6ec : 00000000`00000001 ffff8500`010ce400 ffffd98d`97b77180 ffff8542`a150a850 : nt!MiFaultInProbeAddress+0xbc
ffffd98d`97b770d0 fffff801`1de4da33 : ffffd98d`97b771e0 00000000`00000000 ffffd98d`97b771f9 00000002`19c80000 : nt!MiLockPageLeafPageTable+0x28c
ffffd98d`97b77140 fffff801`1de4d8c9 : 00000000`00000000 00000000`00000000 00000000`00100000 00000000`00000000 : nt!MiProbeAndLockPages+0x153
ffffd98d`97b77260 fffff801`38c01a98 : ffffdb82`00000000 fffff801`1dffde56 00000000`00100000 ffff940b`0adc7d10 : nt!MmProbeAndLockPages+0x29
ffffd98d`97b77290 fffff801`38c01972 : ffff940b`0adc7d10 ffff940b`0adc7d10 00000000`00000f00 00000002`19c80000 : dxgmms2!VIDMM_MDL_RANGE::Lock+0x6c
ffffd98d`97b772f0 fffff801`38c03bb1 : ffff940b`0e745b60 ffff940b`089ca5a0 ffffdb82`00000000 ffffdb82`310eede0 : dxgmms2!VIDMM_RECYCLE_HEAP_PHYSICAL_VIEW::LockRange+0x10a
ffffd98d`97b77370 fffff801`38c03a57 : ffff940b`0e902310 00000000`00100000 00000000`00000000 ffff940b`089ca5a0 : dxgmms2!VIDMM_RECYCLE_RANGE::Lock+0xbd
ffffd98d`97b773d0 fffff801`38c041bb : ffff940b`10f7a610 00000000`00000000 00000000`00000000 00000000`00100000 : dxgmms2!VIDMM_RECYCLE_MULTIRANGE::Lock+0x83
ffffd98d`97b77430 fffff801`38c0fca6 : ffff940b`10f7a610 ffff940b`089ca500 00000000`00000000 ffffd98d`97b775d0 : dxgmms2!VIDMM_RECYCLE_HEAP_MGR::ProbeAndLockAllocation+0x7b
ffffd98d`97b774b0 fffff801`38c0ff08 : ffff940b`089ca500 ffffdb82`310eed00 ffff940b`00000000 ffffdb82`31425000 : dxgmms2!VIDMM_GLOBAL::ProbeAndLockAllocation+0x56
ffffd98d`97b77500 fffff801`38c10426 : ffff940b`089ca5a0 ffff940b`089ca5a0 ffff940b`089ca5a0 00000000`00000000 : dxgmms2!VIDMM_SEGMENT::LockAllocationBackingStore+0xc4
ffffd98d`97b775c0 fffff801`38c17ff1 : ffff940b`089ca5a0 ffff940b`089ca5a0 00000000`00000000 ffffdb82`3d062b10 : dxgmms2!VIDMM_SYSMEM_SEGMENT::CommitResource+0xb6
ffffd98d`97b77600 fffff801`38c16425 : ffff940b`00000000 00000000`00000000 ffffd98d`00000000 ffff940b`089ca5a0 : dxgmms2!VIDMM_GLOBAL::PageInOneAllocation+0x1d1
ffffd98d`97b77720 fffff801`38c2c65e : 00000000`00000001 00000000`00989680 ffff940a`fad39560 00000000`00000001 : dxgmms2!VIDMM_GLOBAL::ProcessDeferredCommand+0xe25
ffffd98d`97b77940 fffff801`38c36809 : ffff940a`fad39490 ffffdb82`312eb201 0a2b01d1`09277f00 00000000`02ffef00 : dxgmms2!VIDMM_WORKER_THREAD::Run+0xe5e
ffffd98d`97b77b20 fffff801`1df55935 : ffffdb82`312eb280 fffff801`38c36800 ffff940a`fad39490 002fe47f`bd9bbfff : dxgmms2!VidMmWorkerThreadProc+0x9
ffffd98d`97b77b50 fffff801`1dffe728 : ffffa481`af319180 ffffdb82`312eb280 fffff801`1df558e0 08f80080`40c37906 : nt!PspSystemThreadStartup+0x55
ffffd98d`97b77ba0 00000000`00000000 : ffffd98d`97b78000 ffffd98d`97b71000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
SYMBOL_NAME: dxgmms2!VIDMM_MDL_RANGE::Lock+6c
MODULE_NAME: dxgmms2
IMAGE_NAME: dxgmms2.sys
IMAGE_VERSION: 10.0.19041.1173
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 6c
FAILURE_BUCKET_ID: AV_dxgmms2!VIDMM_MDL_RANGE::Lock
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {2fc423dc-df72-83af-60bb-8fad8af64d2d}
Followup: MachineOwner
---------
