麻煩再看一下這個DMP檔的問題在哪裡?
Microsoft (R) Windows Debugger Version 10.0.25200.1003 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\010823-12406-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 22621 MP (16 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff802`18a00000 PsLoadedModuleList = 0xfffff802`19612fc0
Debug session time: Sun Jan 8 03:53:47.835 2023 (UTC + 8:00)
System Uptime: 0 days 0:00:17.668
Loading Kernel Symbols
..
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
.............................................................
................................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
......
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff802`18e28700 48894c2408 mov qword ptr [rsp+8],rcx ss:ffffa88b`f52a5510=000000000000000a
14: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 000000000aaca04b, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80218e3e7ba, address which referenced memory
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 1578
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 3645
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 125
Key : Analysis.Init.Elapsed.mSec
Value: 15018
Key : Analysis.Memory.CommitPeak.Mb
Value: 87
Key : Bugcheck.Code.DumpHeader
Value: 0xa
Key : Bugcheck.Code.Register
Value: 0xa
Key : Dump.Attributes.AsUlong
Value: 1008
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
FILE_IN_CAB: 010823-12406-01.dmp
DUMP_FILE_ATTRIBUTES: 0x1008
Kernel Generated Triage Dump
BUGCHECK_CODE: a
BUGCHECK_P1: aaca04b
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff80218e3e7ba
READ_ADDRESS: fffff8021971c468: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
000000000aaca04b
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: sihost.exe
TRAP_FRAME: ffffa88bf52a5650 -- (.trap 0xffffa88bf52a5650)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000000aaca04b rbx=0000000000000000 rcx=ffffdc0b5bdc4946
rdx=ffffcc80994e0eba rsi=0000000000000000 rdi=0000000000000000
rip=fffff80218e3e7ba rsp=ffffa88bf52a57e0 rbp=0000000000000000
r8=0000000000000000 r9=000000000000000d r10=ffffdc0b5bdc48a4
r11=000000000000006e r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!memcpy+0x7a:
fffff802`18e3e7ba 8400 test byte ptr [rax],al ds:00000000`0aaca04b=??
Resetting default scope
MISALIGNED_IP:
nt!memcpy+7a
fffff802`18e3e7ba 8400 test byte ptr [rax],al
STACK_TEXT:
ffffa88b`f52a5508 fffff802`18e3dda9 : 00000000`0000000a 00000000`0aaca04b 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffa88b`f52a5510 fffff802`18e39434 : 00000000`000000ff 00000000`00000000 ffff8001`3df19180 fffff802`18c1a915 : nt!KiBugCheckDispatch+0x69
ffffa88b`f52a5650 fffff802`18e3e7ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x474
ffffa88b`f52a57e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00f29e6e : nt!memcpy+0x7a
SYMBOL_NAME: nt!KiPageFault+474
IMAGE_VERSION: 10.0.22621.963
STACK_COMMAND: .cxr; .ecxr ; kb
MODULE_NAME: AuthenticAMD
IMAGE_NAME: AuthenticAMD.sys
FAILURE_BUCKET_ID: IP_MISALIGNED_AuthenticAMD.sys
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {716d112a-8330-4bbb-160c-ec98297019d2}
Followup: MachineOwner
---------