Share via

BSOD due to Page fault caused in Network driver

Sinha, Aishwarya 1 Reputation point
2022-09-29T08:13:43.727+00:00

Hello ,

I am working on a driver that uses WFP redirection at the network layer . ( https://learn.microsoft.com/en-us/windows-hardware/drivers/network/using-bind-or-connect-redirection). This is leading to a page fault . I'm also attaching the crash dump. Can you suggest what could be causing the issue. Which parameter should I look into?

**

Bugcheck Analysis

**

SYSTEM_SERVICE_EXCEPTION (3b)

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000005, Exception code that caused the bugcheck

Arg2: fffff8017d02e6ec, Address of the instruction which caused the bugcheck

Arg3: ffffe10b571ce0e0, Address of the context record for the exception that caused the bugcheck

Arg4: 0000000000000000, zero.

Debugging Details:

------------------

DUMP_CLASS: 1

DUMP_QUALIFIER: 402

BUILD_VERSION_STRING: 19041.1.amd64fre.vb_release.191206-1406

SYSTEM_MANUFACTURER: Dell Inc.

SYSTEM_PRODUCT_NAME: Latitude 5300

SYSTEM_SKU: 08B7

BIOS_VENDOR: Dell Inc.

BIOS_VERSION: 1.13.1

BIOS_DATE: 01/22/2021

BASEBOARD_MANUFACTURER: Dell Inc.

BASEBOARD_PRODUCT: 0KD7NM

BASEBOARD_VERSION: A00

DUMP_TYPE: 0

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff8017d02e6ec

BUGCHECK_P3: ffffe10b571ce0e0

BUGCHECK_P4: 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

FAULTING_IP:

NETIO!FeApplyModifiedLayerData+2c

fffff801`7d02e6ec 80783800 cmp byte ptr [rax+38h],0

CONTEXT: ffffe10b571ce0e0 -- (.cxr 0xffffe10b571ce0e0)

rax=0000000000000000 rbx=0000000000000000 rcx=ffffa601b9482180

rdx=0000000000000000 rsi=0000000000000001 rdi=000176f3000105bf

rip=fffff8017d02e6ec rsp=ffffe10b571ceae0 rbp=ffff948ff5494770

r8=ffff948fd1dea620 r9=d7ef390748fe31d4 r10=fffff801760c6d30

r11=fffff8017d05a4f8 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=ffff948007fafb68

iopl=0 nv up ei ng nz na pe nc

cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050282

NETIO!FeApplyModifiedLayerData+0x2c:

fffff8017d02e6ec 80783800 cmp byte ptr [rax+38h],0 ds:002b:0000000000000038=??

Resetting default scope

CPU_COUNT: 8

CPU_MHZ: 840

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 8e

CPU_STEPPING: c

CPU_MICROCODE: 6,8e,c,0 (F,M,S,R) SIG: DE'00000000 (cache) DE'00000000 (init)

DEFAULT_BUCKET_ID: CODE_CORRUPTION

BUGCHECK_STR: 0x3B

PROCESS_NAME: EventReporting.AgentService.exe

CURRENT_IRQL: 0

ANALYSIS_SESSION_HOST: LT-040609

ANALYSIS_SESSION_TIME: 09-28-2022 13:37:42.0500

ANALYSIS_VERSION: 10.0.14321.1024 x86fre

LAST_CONTROL_TRANSFER: from fffff8017d3c793a to fffff8017d02e6ec

STACK_TEXT:

ffffe10b571ceae0 fffff8017d3c793a : 000176f3000105bf ffffe10b571ceca0 ffffe10b571cefe0 ffffe10b571cefe0 : NETIO!FeApplyModifiedLayerData+0x2c

ffffe10b571ceb10 fffff8018db126d4 : 000176f3000105bf 000000000000bb01 00000000b2096034 00000000b2096034 : fwpkclnt!FwpsApplyModifiedLayerData0+0x1a

ffffe10b571ceb40 fffff8018db13cde : 0000000000000000 00000000b2096000 0000000000000000 ffff948fb2096034 : WFPRedir+0x26d4

ffffe10b571ceb70 fffff8017d1f040b : 0000000000000000 0000000001000100 ffff948007fafb68 fffff8017ce75a39 : WFPRedir+0x3cde

ffffe10b571ced30 fffff8017cfec7ee : ffff948ffda735a0 ffffe10b571cefe0 000000000000015a 0000000000000000 : tcpip!AlePostProcessClassify+0xfb

ffffe10b571ced80 fffff8017cfe95eb : 0000000000000042 ffff948004bca660 ffff948007fafb68 ffff948008dede60 : NETIO!ProcessCallout+0x7ce

ffffe10b571cef00 fffff8017cfe818a : ffff948ffcdf4870 ffff948004bca660 0000000000000000 ffffe10b571cf200 : NETIO!ArbitrateAndEnforce+0x71b

ffffe10b571cf060 fffff8017d1eff41 : 0000000000000000 0000000000000000 ffff948fcf7ee0c0 fffff801760a2226 : NETIO!KfdClassify+0x37a

ffffe10b571cf450 fffff8017d02e8bb : 000176f1000105be ffff948000000001 d57721b8aec8c67d 0000000000000000 : tcpip!AleInspectConnectRequestComplete+0x141

ffffe10b571cf640 fffff8017d3c7965 : ffff948ffb0778a0 0000000000000000 0000000000000000 000176f1000105be : NETIO!FeCompleteClassify+0x12b

ffffe10b571cf690 fffff8018cfb24a7 : 0000000000000000 fffff8018cfb8850 0000000000000000 fffff80176064472 : fwpkclnt!FwpsCompleteClassify0+0x15

ffffe10b571cf6c0 fffff8018cfaaef0 : ffff948ffb0778a0 0000000000000000 ffffe10b00000000 0000000000036e71 : EventReporting_CoreNetworkFilter+0x124a7

ffffe10b571cf6f0 fffff8018cfae052 : ffff94800c7fde10 ffff94800c7fde10 0000000000000001 0000000000000000 : EventReporting_CoreNetworkFilter+0xaef0

ffffe10b571cf740 fffff8018cfa932b : ffff94800c7fde10 000000000639fe00 ffffffffffffffff 0000000000000004 : EventReporting_CoreNetworkFilter+0xe052

ffffe10b571cf780 fffff8017604e565 : ffff94800c7fde10 ffffe10b571cfa80 ffff94800c7fde30 ffff948ffc816080 : EventReporting_CoreNetworkFilter+0x932b

ffffe10b571cf7b0 fffff8017640da18 : ffff94800c7fde10 0000000000000000 0000000000000000 00000000002d1364 : nt!IofCallDriver+0x55

ffffe10b571cf7f0 fffff801763fc89f : ffffe10b571cfa80 ffff94800c7fdf28 000000000639fd00 ffffe10b571cfa80 : nt!IopSynchronousServiceTail+0x1a8

ffffe10b571cf890 fffff801762096b5 : 0000000000000000 00000000000009e4 0000000000000000 000000000639fdc0 : nt!NtWriteFile+0x66f

ffffe10b571cf990 00007ffb286ece44 : 00007ffb2638ab4a 0000000000000000 000001bb00000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x25

000000000639fd08 00007ffb2638ab4a : 0000000000000000 000001bb00000000 0000000000000000 0000000000000000 : ntdll!NtWriteFile+0x14

000000000639fd10 00007ffb04ec2fa6 : 0000000000000000 000000000487b7ac 000000000487b7ac 0000000000000000 : KERNELBASE!WriteFile+0xfa

000000000639fd80 0000000000000000 : 000000000487b7ac 000000000487b7ac 0000000000000000 000000000639fdc0 : EventReporting_Nfapi+0x2fa6

CHKIMG_EXTENSION: !chkimg -lo 50 -d !NETIO 

fffff8017cfe10cc-fffff8017cfe10cd  2 bytes - NETIO!NcmTlObjSignalEvent+38   

[ 48 ff:4c 8b ]   

fffff8017cfe10d3-fffff8017cfe10d7  5 bytes - NETIO!NcmTlObjSignalEvent+3f (+0x07)   

[ 0f 1f 44 00 00:e8 28 5b 08 f9 ]   

fffff8017cfe10ea-fffff8017cfe10eb  2 bytes - NETIO!NcmTlObjSignalEvent+56 (+0x17)   

[ 48 ff:4c 8b ]   

fffff8017cfe10f1-fffff8017cfe10f5  5 bytes - NETIO!NcmTlObjSignalEvent+5d (+0x07)   

[ 0f 1f 44 00 00:e8 7a 5b 08 f9 ]   

fffff8017cfe117c-fffff8017cfe117d  2 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+3c (+0x8b)   

[ 48 ff:4c 8b ]   

fffff8017cfe1183-fffff8017cfe1187  5 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+43 (+0x07)   

[ 0f 1f 44 00 00:e8 b8 71 0e f9 ]   

fffff8017cfe11af-fffff8017cfe11b0  2 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+6f (+0x2c)   

[ 48 ff:4c 8b ]   

fffff8017cfe11b6-fffff8017cfe11b7  2 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+76 (+0x07)   

[ 0f 1f:e8 75 ]   

fffff8017cfe11b9-fffff8017cfe11ba  2 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+79 (+0x03)   

[ 00 00:13 f9 ]   

fffff8017cfe122f-fffff8017cfe1230  2 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+ef (+0x76)   

[ 48 ff:4c 8b ]   

fffff8017cfe1236-fffff8017cfe123a  5 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+f6 (+0x07)   

[ 0f 1f 44 00 00:e8 f5 0d 7d f9 ]   

fffff8017cfe12e1-fffff8017cfe12e2  2 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+1a1 (+0xab)   

[ 48 ff:4c 8b ]   

fffff8017cfe12e8-fffff8017cfe12ec  5 bytes - NETIO!NcmAttachTlObjToNotificationChannelContext+1a8 (+0x07)   

[ 0f 1f 44 00 00:e8 43 5a 0e f9 ]   

fffff8017cfe1509-fffff8017cfe150a  2 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+49 (+0x221)   

[ 48 ff:4c 8b ]   

fffff8017cfe1510-fffff8017cfe1514  5 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+50 (+0x07)   

[ 0f 1f 44 00 00:e8 2b 6e 0e f9 ]   

fffff8017cfe151f-fffff8017cfe1520  2 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+5f (+0x0f)   

[ 48 ff:4c 8b ]   

fffff8017cfe1526-fffff8017cfe152a  5 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+66 (+0x07)   

[ 0f 1f 44 00 00:e8 d5 ee 0b f9 ]   

fffff8017cfe1545-fffff8017cfe1546  2 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+85 (+0x1f)   

[ 48 ff:4c 8b ]   

fffff8017cfe154c-fffff8017cfe1550  5 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+8c (+0x07)   

[ 0f 1f 44 00 00:e8 df 40 13 f9 ]   

fffff8017cfe1575-fffff8017cfe1576  2 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+b5 (+0x29)   

[ 48 ff:4c 8b ]   

fffff8017cfe157c-fffff8017cfe1580  5 bytes - NETIO!NcmCreateNotificationChannelContextWrapper+bc (+0x07)   

[ 0f 1f 44 00 00:e8 af 57 0e f9 ]   

fffff8017cfe1626-fffff8017cfe1627  2 bytes - NETIO!NcmCreateNotificationChannelContext+76 (+0xaa)   

[ 48 ff:4c 8b ]   

fffff8017cfe162d-fffff8017cfe1631  5 bytes - NETIO!NcmCreateNotificationChannelContext+7d (+0x07)   

[ 0f 1f 44 00 00:e8 3e fa 1e f9 ]   

fffff8017cfe1654-fffff8017cfe1655  2 bytes - NETIO!NcmCreateNotificationChannelContext+a4 (+0x27)   

[ 48 ff:4c 8b ]   

fffff8017cfe165b-fffff8017cfe165f  5 bytes - NETIO!NcmCreateNotificationChannelContext+ab (+0x07)   

[ 0f 1f 44 00 00:e8 d0 3f 13 f9 ]   

fffff8017cfe167a-fffff8017cfe167b  2 bytes - NETIO!NcmCreateNotificationChannelContext+ca (+0x1f)   

[ 48 ff:4c 8b ]   

fffff8017cfe1681-fffff8017cfe1685  5 bytes - NETIO!NcmCreateNotificationChannelContext+d1 (+0x07)   

[ 0f 1f 44 00 00:e8 aa 09 7d f9 ]   

fffff8017cfe16b6-fffff8017cfe16b7  2 bytes - NETIO!NcmCreateNotificationChannelContext+106 (+0x35)   

[ 48 ff:4c 8b ]   

fffff8017cfe16bd-fffff8017cfe16c1  5 bytes - NETIO!NcmCreateNotificationChannelContext+10d (+0x07)   

[ 0f 1f 44 00 00:e8 ae f9 1e f9 ]   

fffff8017cfe16fa-fffff8017cfe16fb  2 bytes - NETIO!NcmCreateNotificationChannelContext+14a (+0x3d)   

[ 48 ff:4c 8b ]   

fffff8017cfe1701-fffff8017cfe1705  5 bytes - NETIO!NcmCreateNotificationChannelContext+151 (+0x07)   

[ 0f 1f 44 00 00:e8 5a d5 17 f9 ]   

fffff8017cfe1716-fffff8017cfe1717  2 bytes - NETIO!NcmCreateNotificationChannelContext+166 (+0x15)   

[ 48 ff:4c 8b ]   

fffff8017cfe171d-fffff8017cfe1721  5 bytes - NETIO!NcmCreateNotificationChannelContext+16d (+0x07)   

[ 0f 1f 44 00 00:e8 0e 09 7d f9 ]   

fffff8017cfe1771-fffff8017cfe1772  2 bytes - NETIO!NcmCreateNotificationChannelContext+1c1 (+0x54)   

[ 48 ff:4c 8b ]   

fffff8017cfe1778-fffff8017cfe177c  5 bytes - NETIO!NcmCreateNotificationChannelContext+1c8 (+0x07)   

[ 0f 1f 44 00 00:e8 e3 d4 17 f9 ]   

fffff8017cfe1790-fffff8017cfe1791  2 bytes - NETIO!NcmCreateNotificationChannelContext+1e0 (+0x18)   

[ 48 ff:4c 8b ]   

fffff8017cfe1797-fffff8017cfe179b  5 bytes - NETIO!NcmCreateNotificationChannelContext+1e7 (+0x07)   

[ 0f 1f 44 00 00:e8 94 08 7d f9 ]   

fffff8017cfe18bc-fffff8017cfe18bd  2 bytes - NETIO!NcmCreateNotificationChannelContext+30c (+0x125)   

[ 48 ff:4c 8b ]   

fffff8017cfe18c3-fffff8017cfe18c7  5 bytes - NETIO!NcmCreateNotificationChannelContext+313 (+0x07)   

[ 0f 1f 44 00 00:e8 58 2b 04 f9 ]   

fffff8017cfe18ec-fffff8017cfe18ed  2 bytes - NETIO!NcmCreateNotificationChannelContext+33c (+0x29)   

[ 48 ff:4c 8b ]   

fffff8017cfe18f3-fffff8017cfe18f7  5 bytes - NETIO!NcmCreateNotificationChannelContext+343 (+0x07)   

[ 0f 1f 44 00 00:e8 48 a9 0b f9 ]   

fffff8017cfe1bab-fffff8017cfe1bac  2 bytes - NETIO!NetioNcmFastActiveReferenceRequest+1b (+0x2b8)   

[ 48 ff:4c 8b ]   

fffff8017cfe1bb2-fffff8017cfe1bb6  5 bytes - NETIO!NetioNcmFastActiveReferenceRequest+22 (+0x07)   

[ 0f 1f 44 00 00:e8 f9 f6 e8 ff ]   

fffff8017cfe1d29-fffff8017cfe1d2a  2 bytes - NETIO!NetioNcmGetAllNotificationChannelContextParameters+49 (+0x177)   

[ 48 ff:4c 8b ]   

fffff8017cfe1d30-fffff8017cfe1d34  5 bytes - NETIO!NetioNcmGetAllNotificationChannelContextParameters+50 (+0x07)   

[ 0f 1f 44 00 00:e8 cb e6 0b f9 ]   

fffff8017cfe1d58-fffff8017cfe1d59  2 bytes - NETIO!NetioNcmGetAllNotificationChannelContextParameters+78 (+0x28)   

[ 48 ff:4c 8b ]   

fffff8017cfe1d5f-fffff8017cfe1d63  5 bytes - NETIO!NetioNcmGetAllNotificationChannelContextParameters+7f (+0x07)   

[ 0f 1f 44 00 00:e8 cc 38 13 f9 ]   

fffff8017cfe1dfd-fffff8017cfe1dfe  2 bytes - NETIO!NetioNcmGetAllNotificationChannelContextParameters+11d (+0x9e)   

[ 48 ff:4c 8b ]   

fffff8017cfe1e04-fffff8017cfe1e08  5 bytes - NETIO!NetioNcmGetAllNotificationChannelContextParameters+124 (+0x07)   

[ 0f 1f 44 00 00:e8 97 36 0a f9 ]   

fffff8017cfe1e86-fffff8017cfe1e87  2 bytes - NETIO!NetioAllocateMdl+56 (+0x82)   

[ 48 ff:4c 8b ]

WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output. 

fffff8017d06525e-fffff8017d06525f  2 bytes - NETIO!BfeFwpConditionValueValidate+b6   

[ 48 ff:4c 8b ]   

fffff8017d065265-fffff8017d065269  5 bytes - NETIO!BfeFwpConditionValueValidate+bd (+0x07)   

[ 0f 1f 44 00 00:e8 66 dd 42 f9 ]   

fffff8017d065284-fffff8017d065285  2 bytes - NETIO!BfeFwpConditionValueValidate+dc (+0x1f)   

[ 48 ff:4c 8b ]   

fffff8017d06528b-fffff8017d06528f  5 bytes - NETIO!BfeFwpConditionValueValidate+e3 (+0x07)   

[ 0f 1f 44 00 00:e8 10 02 4a f9 ]   

fffff8017d065358-fffff8017d065359  2 bytes - NETIO!BfeFwpConditionValueValidate+1b0 (+0xcd)   

[ 48 ff:4c 8b ]   

fffff8017d06535f-fffff8017d065363  5 bytes - NETIO!BfeFwpConditionValueValidate+1b7 (+0x07)   

[ 0f 1f 44 00 00:e8 1c 6f 3c f9 ]   

fffff8017d06553f-fffff8017d065540  2 bytes - NETIO!FlushEventEntryList+67 (+0x1e0)   

[ 48 ff:4c 8b ]   

fffff8017d065546-fffff8017d06554a  5 bytes - NETIO!FlushEventEntryList+6e (+0x07)   

[ 0f 1f 44 00 00:e8 45 74 03 f9 ]   

fffff8017d06562b-fffff8017d06562c  2 bytes - NETIO!TlgAggregateInternalProviderCallback+1b (+0xe5)   

[ 48 ff:4c 8b ]   

fffff8017d065632-fffff8017d065636  5 bytes - NETIO!TlgAggregateInternalProviderCallback+22 (+0x07)   

[ 0f 1f 44 00 00:e8 e9 11 09 f9 ]   

fffff8017d06574e-fffff8017d06574f  2 bytes - NETIO!IsHvsiContainer+6e (+0x11c)   

[ 48 ff:4c 8b ]   

fffff8017d065755-fffff8017d065759  5 bytes - NETIO!IsHvsiContainer+75 (+0x07)   

[ 0f 1f 44 00 00:e8 46 70 48 f9 ]   

fffff8017d0657cb-fffff8017d0657cc  2 bytes - NETIO!Pdcv2ActivationClientRegister+4b (+0x76)   

[ 48 ff:4c 8b ]   

fffff8017d0657d2-fffff8017d0657d6  5 bytes - NETIO!Pdcv2ActivationClientRegister+52 (+0x07)   

[ 0f 1f 44 00 00:e8 59 c8 74 f9 ]   

fffff8017d0658ec-fffff8017d0658ed  2 bytes - NETIO!PdcReleaseRwLockExclusive2+40 (+0x11a)   

[ 48 ff:4c 8b ]   

fffff8017d0658f3-fffff8017d0658f7  5 bytes - NETIO!PdcReleaseRwLockExclusive2+47 (+0x07)   

[ 0f 1f 44 00 00:e8 88 de fd f8 ]   

fffff8017d06594f-fffff8017d065950  2 bytes - NETIO!PdcAcquireRwLockExclusive2+33 (+0x5c)   

[ 48 ff:4c 8b ]   

fffff8017d065956-fffff8017d06595a  5 bytes - NETIO!PdcAcquireRwLockExclusive2+3a (+0x07)   

[ 0f 1f 44 00 00:e8 f5 e2 fe f8 ]   

fffff8017d0659da-fffff8017d0659db  2 bytes - NETIO!PdcRwLockInitialize2+22 (+0x84)   

[ 48 ff:4c 8b ]   

fffff8017d0659e1-fffff8017d0659e5  5 bytes - NETIO!PdcRwLockInitialize2+29 (+0x07)   

[ 0f 1f 44 00 00:e8 4a c6 74 f9 ]   

fffff8017d065a01-fffff8017d065a02  2 bytes - NETIO!PdcRwLockInitialize2+49 (+0x20)   

[ 48 ff:4c 8b ]   

fffff8017d065a08-fffff8017d065a0c  5 bytes - NETIO!PdcRwLockInitialize2+50 (+0x07)   

[ 0f 1f 44 00 00:e8 63 48 0a f9 ]   

fffff8017d065ac0-fffff8017d065ac1  2 bytes - NETIO!WdmlibInit+18 (+0xb8)   

[ 48 ff:4c 8b ]   

fffff8017d065ac7-fffff8017d065acb  5 bytes - NETIO!WdmlibInit+1f (+0x07)   

[ 0f 1f 44 00 00:e8 84 a9 03 f9 ]   

fffff8017d065ad1-fffff8017d065ad2  2 bytes - NETIO!WdmlibInit+29 (+0x0a)   

[ 48 ff:4c 8b ]   

fffff8017d065ad8-fffff8017d065adc  5 bytes - NETIO!WdmlibInit+30 (+0x07)   

[ 0f 1f 44 00 00:e8 93 b3 43 f9 ]   

fffff8017d065af9-fffff8017d065afa  2 bytes - NETIO!WdmlibInit+51 (+0x21)   

[ 48 ff:4c 8b ]   

fffff8017d065b00-fffff8017d065b04  5 bytes - NETIO!WdmlibInit+58 (+0x07)   

[ 0f 1f 44 00 00:e8 4b a9 03 f9 ]   

fffff8017d065b0a-fffff8017d065b0b  2 bytes - NETIO!WdmlibInit+62 (+0x0a)   

[ 48 ff:4c 8b ]   

fffff8017d065b11-fffff8017d065b15  5 bytes - NETIO!WdmlibInit+69 (+0x07)   

[ 0f 1f 44 00 00:e8 5a b3 43 f9 ]   

fffff8017d065c2f-fffff8017d065c30  2 bytes - NETIO!WppLoadTracingSupport+1f (+0x11e)   

[ 48 ff:4c 8b ]   

fffff8017d065c36-fffff8017d065c3a  5 bytes - NETIO!WppLoadTracingSupport+26 (+0x07)   

[ 0f 1f 44 00 00:e8 15 a8 03 f9 ]   

fffff8017d065c3f-fffff8017d065c40  2 bytes - NETIO!WppLoadTracingSupport+2f (+0x09)   

[ 48 ff:4c 8b ]   

fffff8017d065c46-fffff8017d065c4a  5 bytes - NETIO!WppLoadTracingSupport+36 (+0x07)   

[ 0f 1f 44 00 00:e8 25 b2 43 f9 ]   

fffff8017d065c5d-fffff8017d065c5e  2 bytes - NETIO!WppLoadTracingSupport+4d (+0x17)   

[ 48 ff:4c 8b ]   

fffff8017d065c64-fffff8017d065c68  5 bytes - NETIO!WppLoadTracingSupport+54 (+0x07)   

[ 0f 1f 44 00 00:e8 e7 a7 03 f9 ]   

fffff8017d065c6d-fffff8017d065c6e  2 bytes - NETIO!WppLoadTracingSupport+5d (+0x09)   

[ 48 ff:4c 8b ]   

fffff8017d065c74-fffff8017d065c78  5 bytes - NETIO!WppLoadTracingSupport+64 (+0x07)   

[ 0f 1f 44 00 00:e8 f7 b1 43 f9 ]   

fffff8017d065c8b-fffff8017d065c8c  2 bytes - NETIO!WppLoadTracingSupport+7b (+0x17)   

[ 48 ff:4c 8b ]   

fffff8017d065c92-fffff8017d065c96  5 bytes - NETIO!WppLoadTracingSupport+82 (+0x07)   

[ 0f 1f 44 00 00:e8 b9 a7 03 f9 ]   

fffff8017d065c9b-fffff8017d065c9c  2 bytes - NETIO!WppLoadTracingSupport+8b (+0x09)   

[ 48 ff:4c 8b ]   

fffff8017d065ca2-fffff8017d065ca6  5 bytes - NETIO!WppLoadTracingSupport+92 (+0x07)   

[ 0f 1f 44 00 00:e8 c9 b1 43 f9 ]   

fffff8017d065ce7-fffff8017d065ce8  2 bytes - NETIO!WppLoadTracingSupport+d7 (+0x45)   

[ 48 ff:4c 8b ]   

fffff8017d065cee-fffff8017d065cf2  5 bytes - NETIO!WppLoadTracingSupport+de (+0x07)   

[ 0f 1f 44 00 00:e8 5d a7 03 f9 ]   

fffff8017d065cf7-fffff8017d065cf8  2 bytes - NETIO!WppLoadTracingSupport+e7 (+0x09)   

[ 48 ff:4c 8b ]   

fffff8017d065cfe-fffff8017d065d02  5 bytes - NETIO!WppLoadTracingSupport+ee (+0x07)   

[ 0f 1f 44 00 00:e8 6d b1 43 f9 ]   

fffff8017d065d1a-fffff8017d065d1b  2 bytes - NETIO!WppLoadTracingSupport+10a (+0x1c)   

[ 48 ff:4c 8b ]   

fffff8017d065d21-fffff8017d065d25  5 bytes - NETIO!WppLoadTracingSupport+111 (+0x07)   

[ 0f 1f 44 00 00:e8 2a a7 03 f9 ]   

fffff8017d065d2a-fffff8017d065d2b  2 bytes - NETIO!WppLoadTracingSupport+11a (+0x09)   

[ 48 ff:4c 8b ]   

fffff8017d065d31-fffff8017d065d35  5 bytes - NETIO!WppLoadTracingSupport+121 (+0x07)   

[ 0f 1f 44 00 00:e8 3a b1 43 f9 ]

WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.

9325 errors : !NETIO (fffff8017cfe10cc-fffff8017d069f4d)

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

FOLLOWUP_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MEMORY_CORRUPTOR: LARGE

STACK_COMMAND: .cxr 0xffffe10b571ce0e0 ; kb

FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE

BUCKET_ID: MEMORY_CORRUPTION_LARGE

PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE

TARGET_TIME: 2022-06-05T18:23:55.000Z

OSBUILD: 19041

OSSERVICEPACK: 0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 1970-12-28 11:01:39

BUILDDATESTAMP_STR: 191206-1406

BUILDLAB_STR: vb_release

BUILDOSVER_STR: 10.0.19041.1.amd64fre.vb_release.191206-1406

ANALYSIS_SESSION_ELAPSED_TIME: 1fc2

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:memory_corruption_large

FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}

Followup: memory_corruption

Windows 10 Network
Windows 10 Network
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Network: A group of devices that communicate either wirelessly or via a physical connection.
2,369 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wesley Li-MSFT 4,496 Reputation points Microsoft Vendor
    2022-09-30T03:14:01.913+00:00

    Hi,

    SYSTEM_SERVICE_EXCEPTION （3b）This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.

    This can happen because a NULL pointer dereferenced or a random incorrect address was accessed. This in turn can be caused by memory being freed prematurely, or data structure corruption.

    To debug this problem, use the .cxr (display context record) command with Parameter 3, and then use kb (display stack backtrace). You can also set a breakpoint in the code that precedes this stop code and attempt to single-step forward into the faulting code. Use the u, ub, uu (unassemble) commands to see the assembly program code.

    This error has been linked to excessive use of the paged pool, which may occur due to user-mode graphics drivers crossing over and passing bad data to the kernel code. If you suspect this is the case, use the pool options in Driver Verifier to gather additional information.
    https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/driver-verifier

    You can also visit the developer forums where you can get better help:
    https://social.msdn.microsoft.com/Forums/windowshardware/en-US/home?forum=wdk

    0 comments
  2. anup kataria 0 Reputation points
    2023-06-13T13:49:36.1733333+00:00

    I am also facing the same issue where underlying driver is eventreporting. Have you solved this?

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.