ATTEMPTED_WRITE_TO_READONLY_MEMORY (be) BSOD

Question

Recently cloned my windows installation SSD to a new SSD using clonezilla.

Seems to be working fine but under load I will get a BSOD: Unexpected_Store_Exception, Kernal_Data_Inpage_Error, Critical_Process_Died.

Any help would be appreciated!

Attached is the memorydump from latest bsod (Critical process died)

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory.  The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the BugCheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: ffff8a001b278808, Virtual address for the attempted write.
Arg2: 8a00000000200121, PTE contents.
Arg3: ffffcd0c5da59d00, (reserved)
Arg4: 000000000000000a, (reserved)

Debugging Details:
------------------

*** WARNING: Check Image - Checksum mismatch - Dump: 0xd67b, File: 0xf8a0 - C:\ProgramData\Dbg\sym\hal.dll\1865382A6000\hal.dll

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2421

    Key  : Analysis.Elapsed.mSec
    Value: 4491

    Key  : Analysis.IO.Other.Mb
    Value: 12

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 33

    Key  : Analysis.Init.CPU.mSec
    Value: 1078

    Key  : Analysis.Init.Elapsed.mSec
    Value: 133372

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 110

    Key  : Bugcheck.Code.KiBugCheckData
    Value: 0xbe

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0xbe

    Key  : Dump.Attributes.AsUlong
    Value: 1000

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 100

    Key  : Failure.Bucket
    Value: AV_nt!MiRaisedIrqlFault

    Key  : Failure.Hash
    Value: {3b24175f-7f5b-9c9f-8aaf-822c248bf0f5}

    Key  : Hypervisor.Enlightenments.Value
    Value: 0

    Key  : Hypervisor.Enlightenments.ValueHex
    Value: 0

    Key  : Hypervisor.Flags.AnyHypervisorPresent
    Value: 0

    Key  : Hypervisor.Flags.ApicEnlightened
    Value: 0

    Key  : Hypervisor.Flags.ApicVirtualizationAvailable
    Value: 1

    Key  : Hypervisor.Flags.AsyncMemoryHint
    Value: 0

    Key  : Hypervisor.Flags.CoreSchedulerRequested
    Value: 0

    Key  : Hypervisor.Flags.CpuManager
    Value: 0

    Key  : Hypervisor.Flags.DeprecateAutoEoi
    Value: 0

    Key  : Hypervisor.Flags.DynamicCpuDisabled
    Value: 0

    Key  : Hypervisor.Flags.Epf
    Value: 0

    Key  : Hypervisor.Flags.ExtendedProcessorMasks
    Value: 0

    Key  : Hypervisor.Flags.HardwareMbecAvailable
    Value: 1

    Key  : Hypervisor.Flags.MaxBankNumber
    Value: 0

    Key  : Hypervisor.Flags.MemoryZeroingControl
    Value: 0

    Key  : Hypervisor.Flags.NoExtendedRangeFlush
    Value: 0

    Key  : Hypervisor.Flags.NoNonArchCoreSharing
    Value: 0

    Key  : Hypervisor.Flags.Phase0InitDone
    Value: 0

    Key  : Hypervisor.Flags.PowerSchedulerQos
    Value: 0

    Key  : Hypervisor.Flags.RootScheduler
    Value: 0

    Key  : Hypervisor.Flags.SynicAvailable
    Value: 0

    Key  : Hypervisor.Flags.UseQpcBias
    Value: 0

    Key  : Hypervisor.Flags.Value
    Value: 16908288

    Key  : Hypervisor.Flags.ValueHex
    Value: 1020000

    Key  : Hypervisor.Flags.VpAssistPage
    Value: 0

    Key  : Hypervisor.Flags.VsmAvailable
    Value: 0

    Key  : Hypervisor.RootFlags.AccessStats
    Value: 0

    Key  : Hypervisor.RootFlags.CrashdumpEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.CreateVirtualProcessor
    Value: 0

    Key  : Hypervisor.RootFlags.DisableHyperthreading
    Value: 0

    Key  : Hypervisor.RootFlags.HostTimelineSync
    Value: 0

    Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
    Value: 0

    Key  : Hypervisor.RootFlags.IsHyperV
    Value: 0

    Key  : Hypervisor.RootFlags.LivedumpEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.MapDeviceInterrupt
    Value: 0

    Key  : Hypervisor.RootFlags.MceEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.Nested
    Value: 0

    Key  : Hypervisor.RootFlags.StartLogicalProcessor
    Value: 0

    Key  : Hypervisor.RootFlags.Value
    Value: 0

    Key  : Hypervisor.RootFlags.ValueHex
    Value: 0

    Key  : SecureKernel.HalpHvciEnabled
    Value: 0

    Key  : WER.OS.Branch
    Value: ni_release

    Key  : WER.OS.Version
    Value: 10.0.22621.1

BUGCHECK_CODE:  be

BUGCHECK_P1: ffff8a001b278808

BUGCHECK_P2: 8a00000000200121

BUGCHECK_P3: ffffcd0c5da59d00

BUGCHECK_P4: a

FILE_IN_CAB:  MEMORY.DMP

DUMP_FILE_ATTRIBUTES: 0x1000

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

PROCESS_NAME:  Intel_PIE_Service.exe

TRAP_FRAME:  ffffcd0c5da59d00 -- (.trap 0xffffcd0c5da59d00)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=11b8966fa49a0000
rdx=ffffa954aa5527f8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80221a526f5 rsp=ffffcd0c5da59e90 rbp=ffff8a001b2787f0
 r8=ffffa9549ffe9d08  r9=0000000000000000 r10=0000fffff80221a5
r11=ffffaaf96f200000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe cy
nt!MiAgePteWorker+0x345:
fffff802`21a526f5 f0480fba6d183f  lock bts qword ptr [rbp+18h],3Fh ss:0018:ffff8a00`1b278808=????????????????
Resetting default scope

STACK_TEXT:  
ffffcd0c`5da59b88 fffff802`21cc5942     : 00000000`000000be ffff8a00`1b278808 8a000000`00200121 ffffcd0c`5da59d00 : nt!KeBugCheckEx
ffffcd0c`5da59b90 fffff802`21a62e53     : 8a000000`00200121 00000000`00000003 ffffcd0c`5da59c99 00000000`00000000 : nt!MiRaisedIrqlFault+0x1812f2
ffffcd0c`5da59be0 fffff802`21c27629     : 00000000`00000000 fffff802`21a9f034 ffff8a00`036f8880 ffff9684`8739a700 : nt!MmAccessFault+0x363
ffffcd0c`5da59d00 fffff802`21a526f5     : ffff9684`87c9b700 ffff8a00`032786a0 00000000`00000000 ffff9684`76e57220 : nt!KiPageFault+0x369
ffffcd0c`5da59e90 fffff802`21a5206e     : 00000000`00000001 ffff8a00`1b2787f0 00000000`00000000 00000000`00000003 : nt!MiAgePteWorker+0x345
ffffcd0c`5da59ef0 fffff802`21a8a4e6     : ffffcd0c`5da5a450 ffffcd0c`5da5a450 ffffcd0c`5da5a450 00000000`00000000 : nt!MiAgePte+0x14e
ffffcd0c`5da59f90 fffff802`21a8a8aa     : ffffcd0c`5da5a450 ffff9684`87c9b700 ffffa954`00000000 ffffcd0c`5da5a4a0 : nt!MiWalkPageTablesRecursively+0x266
ffffcd0c`5da5a020 fffff802`21a8a8aa     : ffffcd0c`5da5a450 ffff9684`87c9b700 ffffa954`00000000 ffffcd0c`5da5a4b0 : nt!MiWalkPageTablesRecursively+0x62a
ffffcd0c`5da5a0b0 fffff802`21a8a8aa     : ffffcd0c`5da5a450 ffff9684`87c9b700 ffffa954`00000000 ffffcd0c`5da5a4c0 : nt!MiWalkPageTablesRecursively+0x62a
ffffcd0c`5da5a140 fffff802`21a8a181     : 00000000`00000000 ffff9684`87c9b700 00000000`00000000 ffffcd0c`5da5a4d0 : nt!MiWalkPageTablesRecursively+0x62a
ffffcd0c`5da5a1d0 fffff802`21a89a9c     : ffffcd0c`5da5a450 ffffcd0c`00000002 00000000`00000002 00000000`00000000 : nt!MiWalkPageTables+0x371
ffffcd0c`5da5a2d0 fffff802`21a89685     : ffff9684`00000000 00000000`00000000 ffff9684`87c9b700 fffff802`21b1d803 : nt!MiAgeWorkingSet+0x21c
ffffcd0c`5da5a7d0 fffff802`21b1d249     : ffffcd0c`5da5a950 ffff9684`87c9b700 00000000`00000400 ffff9684`87c9b7b8 : nt!MiTrimOrAgeWorkingSet+0xd5
ffffcd0c`5da5a850 fffff802`21b1ef2c     : 00000000`00000000 fffff802`2246b0c0 fffff802`2246b0c0 ffff9684`76e571a0 : nt!MiProcessWorkingSets+0x319
ffffcd0c`5da5aa00 fffff802`21b921b0     : 00000000`00000007 00000000`00000007 00000000`ffffffff ffffbb01`68701180 : nt!MiWorkingSetManager+0x12c
ffffcd0c`5da5aac0 fffff802`21b07287     : ffff9684`76fcb040 00000000`00000080 fffff802`2246b0c0 00000000`00000000 : nt!KeBalanceSetManager+0x150
ffffcd0c`5da5abb0 fffff802`21c1b954     : ffffbb01`687d5180 ffff9684`76fcb040 fffff802`21b07230 00000400`000001e0 : nt!PspSystemThreadStartup+0x57
ffffcd0c`5da5ac00 00000000`00000000     : ffffcd0c`5da5b000 ffffcd0c`5da54000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34

SYMBOL_NAME:  nt!MiRaisedIrqlFault+1812f2

MODULE_NAME: nt

STACK_COMMAND:  .cxr; .ecxr ; kb

IMAGE_NAME:  ntkrnlmp.exe

BUCKET_ID_FUNC_OFFSET:  1812f2

FAILURE_BUCKET_ID:  AV_nt!MiRaisedIrqlFault

OS_VERSION:  10.0.22621.1

BUILDLAB_STR:  ni_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {3b24175f-7f5b-9c9f-8aaf-822c248bf0f5}

Followup:     MachineOwner
---------

0: kd> !vad 
VAD             Level         Start             End              Commit
ffff968487520ef0  6           7ffe0           7ffe0               1 Private      READONLY           
ffff968487521120  5           7ffe8           7ffe8               1 Private      READONLY           
ffff968486a9a810  6         9829800         98299ff               9 Private      READWRITE          
ffff968486a9aa40  4         9829a00         9829aff              30 Private      READWRITE          
ffff96849dbca040  6         9829b00         9829bff               5 Private      READWRITE          
ffff96849aea39a0  5         9829c00         9829cff               5 Private      READWRITE          
ffff968487521bc0  3         9829e00         9829eff               5 Private      READWRITE          
ffff968487c58020  4        1eddbf00        1eddbf0f               0 Mapped       READWRITE          Pagefile section, shared commit 0x10
ffff968487c58200  5        1eddbf10        1eddbf12               0 Mapped       READONLY           \Windows\System32\l_intl.nls
ffff968487c56ea0  2        1eddbf20        1eddbf3e               0 Mapped       READONLY           Pagefile section, shared commit 0x1f
ffff968487c56360  4        1eddbf40        1eddbf43               0 Mapped       READONLY           Pagefile section, shared commit 0x4
ffff968487c56400  5        1eddbf50        1eddbf50               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968486a9a630  3        1eddbf60        1eddbf61               2 Private      READWRITE          
ffff968487c564a0  4        1eddbf70        1eddbf80               0 Mapped       READONLY           \Windows\System32\C_1252.NLS
ffff968487c56540  1        1eddbf90        1eddbfa0               0 Mapped       READONLY           \Windows\System32\C_437.NLS
ffff968487c57300  4        1eddbfb0        1eddbfb2               0 Mapped       READONLY           \Windows\System32\l_intl.nls
ffff968486aa4b30  3        1eddbfc0        1eddc021               2 Private      READWRITE          
ffff968487c578a0  2        1eddc030        1eddc0fd               0 Mapped       READONLY           \Windows\System32\locale.nls
ffff968487c57e40  5        1eddc100        1eddc110               0 Mapped       READONLY           \Windows\System32\C_1252.NLS
ffff968487c57620  4        1eddc120        1eddc130               0 Mapped       READONLY           \Windows\System32\C_437.NLS
ffff968487c57a80  5        1eddc140        1eddc147               0 Mapped       READONLY           Pagefile section, shared commit 0x7
ffff968487c58c00  3        1eddc150        1eddc150               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968487c594c0  4        1eddc160        1eddc160               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968487c59060  5        1eddc170        1eddc170               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968486aa5a30  0        1eddc180        1eddc27f             137 Private      READWRITE          
ffff96848a1956a0  4        1eddc280        1eddc2e1               1 Private      READWRITE          
ffff968487c591a0  5        1eddc2f0        1eddc2f0               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff96848a196050  3        1eddc300        1eddc30f               7 Private      READWRITE          
ffff968487c57260  4        1eddc310        1eddc50f               0 Mapped       READONLY           Pagefile section, shared commit 0x7
ffff968487c57c60  2        1eddc510        1eddc690               0 Mapped       READONLY           Pagefile section, shared commit 0x181
ffff968487c59920  5        1eddc6a0        1eddc760               0 Mapped       READONLY           Pagefile section, shared commit 0x26
ffff968487c59600  4        1eddc770        1eddc770               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968487c59740  6        1eddc780        1eddc780               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968487c5a460  5        1eddc790        1eddc790               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968487c57ee0  6       7df40b200       7df40b2ff               0 Mapped       READONLY           Pagefile section, shared commit 0x5
ffff968486aa3820  3       7df40b300       7df50b31f               0 Private      READWRITE          
ffff968486aa4130  4       7df50b320       7df50d320               1 Private      READWRITE          
ffff968487c56e00  5       7df50d330       7df50d330               0 Mapped       READONLY           Pagefile section, shared commit 0x1
ffff968487c571c0  1       7df50d340       7ff50d33f               8 Mapped       NO_ACCESS          Pagefile section, shared commit 0x44bd
ffff968487c56220  6       7ff74f390       7ff74f409               7 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_6ea7dc2752605c07\Intel_PIE_Service.exe
ffff968487c59e20  7       7ffa4e0e0       7ffa4e11e               4 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\deviceaccess.dll
ffff968487c5aa00  5       7ffa4e120       7ffa4e150               3 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\PortableDeviceTypes.dll
ffff968487c58d40  7       7ffa4e160       7ffa4e1a0               5 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\SensorsNativeApi.V2.dll
ffff968487c58b60  6       7ffa4e1b0       7ffa4e1dd               3 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\SensorsUtilsV2.dll
ffff968487c597e0  7       7ffa4e1e0       7ffa4e246               5 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\SensorsApi.dll
ffff968487c58ca0  4       7ffa4e3d0       7ffa4e499               6 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_6ea7dc2752605c07\IntelIHVPipeClient.dll
ffff968487c58de0  7       7ffa6d820       7ffa6d920               5 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\propsys.dll
ffff968487c5a820  6       7ffa70430       7ffa70442               3 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\umpdc.dll
ffff968487c58e80  7       7ffa70450       7ffa7049c               3 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\powrprof.dll
ffff968487c592e0  5       7ffa70690       7ffa706a7               4 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\kernel.appcore.dll
ffff968487c583e0  6       7ffa71310       7ffa7135d               5 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\cfgmgr32.dll
ffff968487c57da0  3       7ffa71600       7ffa719a4               9 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\KernelBase.dll
ffff968487c579e0  5       7ffa71b20       7ffa71c38               9 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\gdi32full.dll
ffff968487c59420  6       7ffa71c40       7ffa71cb9               2 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\bcryptprimitives.dll
ffff968487c57800  4       7ffa71cc0       7ffa71dd0               4 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\ucrtbase.dll
ffff968487c573a0  5       7ffa71f10       7ffa71f35               2 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\win32u.dll
ffff968487c57760  2       7ffa71f40       7ffa71fd9               7 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\msvcp_win.dll
ffff968487c57580  6       7ffa71fe0       7ffa72085               6 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\sechost.dll
ffff968487c59ce0  5       7ffa720a0       7ffa72176               6 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\oleaut32.dll
ffff968487c574e0  6       7ffa72670       7ffa72ec8              17 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\shell32.dll
ffff968487c57940  4       7ffa72ed0       7ffa72ef8               4 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\gdi32.dll
ffff968487c57440  6       7ffa730c0       7ffa7325f               6 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\ole32.dll
ffff968487c596a0  5       7ffa73370       7ffa7341f               9 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\clbcatq.dll
ffff968487c58340  6       7ffa73420       7ffa737a8               9 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\combase.dll
ffff968487c58160  3       7ffa737b0       7ffa73873               7 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\kernel32.dll
ffff968487c576c0  6       7ffa73a00       7ffa73b16               5 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\rpcrt4.dll
ffff968487c57d00  5       7ffa73b70       7ffa73d1d               6 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\user32.dll
ffff968487c58980  6       7ffa73d20       7ffa73e12               5 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\SHCore.dll
ffff968487c585c0  4       7ffa73e20       7ffa73ed0               8 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\advapi32.dll
ffff968487c58520  5       7ffa741a0       7ffa74246               9 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\msvcrt.dll
ffff968487c56cc0  6       7ffa74290       7ffa744a6              17 Mapped  Exe  EXECUTE_WRITECOPY  \Windows\System32\ntdll.dll

Total VADs: 71, average level: 5, maximum depth: 7
Total private commit: 0x19e pages (1656 KB)
Total shared commit:  0x46aa pages (72360 KB)

Answer 1

I think I have fixed the issue. Posting this in case any future people run into this issue.

I believe it was an issue with my new Samsung 990 pro 2TB NVME drives and the motherboard, ASUS ROG Crosshair Hero VIII Wifi with a Ryzen 5800.

The problem was any time under load the system would BSOD with different errors.

I went down the rabbit hole and tried multiple different things. Ran check disk, /sfc scan now, 6 hour RAM testing with Memtest86, which were all normal.

I followedthis guide and ran Driver Verifier. This resulted in multiple boot loops and would give me an error for various innocuous drivers such as steam streaming microphone, etc. Each time I removed the driver in question and re-tested it would give me a different one. Next I did a complete fresh install of windows and I would still crash, this time without the BSOD showing up or a minidump being created. I reset the motherboard BIOS to stock default and it would still crash.

Finally I updated the motherboard BIOS to the latest version, 4702, and that seems to have fixed the problem. The prior BIOS never gave any indication that is had problems with the NVME drive and had loaded the drivers fine.

Answer 2

Hello MattORules.

Thanks for your reply.

I'm glad that you find a way to solve your issue, I will mark your reply as an answer that will let other users meet the same issues and find a way

to solve these issues more easily.

Best Regards,

Tommy-MSFT | Microsoft Community Support Specialist

Answer 3

Hello MattORules.

Welcome to Microsoft Community.

Regarding to your information I assume that you meet BSOD issues after you clone your system to the new ssd.

Based on the dump log analysis you provided, it seems to be a problem caused by Intel drivers.

Intel_PIE_Service.exe

(Intel_PIE_Service.exe is an executable file that is part of the Intel PROSet/Wireless WiFi Software.)

You can try uninstalling the relevant drivers to see if the issue persists. Since you encountered multiple different error codes,

I would recommend uploading the other dump files as well.

If simply uninstalling the drivers doesn't work, it would be worth trying to reinstall them and see if that resolves the issue.

If there is anything not clear, please do not hesitate to let me know.

Best Regards,

Tommy-MSFT | Microsoft Community Support Specialist