Troubleshooting Windows Server 2016 Abnormal Restart with MEMORY.DMP Analysis

Question

Windows Server 2016 has restarted abnormally, and a MEMORY.DMP file has been collected.

This is the OneDrive shared URL of MEMORY.DMP

https://1drv.ms/u/c/e14360d40b724833/EWUakMuhBklKsnKmm8TSSZ0By2SsehCntf-PdiDMplN-qw?e=DpbYct

Analyzing the dump file shows a potential issue with the astkmd.sys driver.

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)

An attempt was made to access a pageable (or completely invalid) address at an

interrupt request level (IRQL) that is too high. This is usually

caused by drivers using improper addresses.

If kernel debugger is available, get stack backtrace.

Arguments:

Arg1: fffff80f7ed4b4f0, memory referenced

Arg2: 0000000000000002, IRQL

Arg3: 0000000000000008, value 0 = read operation, 1 = write operation

Arg4: fffff80f7ed4b4f0, address which referenced memory

Debugging Details:

------------------

Unable to load image \SystemRoot\system32\DRIVERS\astkmd.sys, Win32 error 0n2

What steps can be taken to identify and resolve the issue?

Answer 1

Hello,

Thank you for posting in Microsoft Q&A.

Based on the description, I understand your question is related to DRIVER_IRQL_NOT_LESS_OR_EQUAL BSOD.

The DRIVER_IRQL_NOT_LESS_OR_EQUAL bug check has a value of 0x000000D1. This indicates that a kernel-mode driver attempted to access pageable memory while the process IRQL that was too high.

The astkmd.sys file is associated with the ASPEED Graphics Kernel Mode Driver. This driver is used for ASPEED graphics hardware.

Try disable this driver or check with the manufacturer website for ASPEED driver updates. Also, Install the latest windows update. Then, check if the issue disappears.

If the issue still not fix, it is recommended to contact ASPEED for further help.

Have a nice day.

Best Regards,

Molly

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it