Windbg系统崩溃文件输出求解

Question

************* Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       srv*
Symbol search path is: srv*
Executable search path is: 
Windows 10 Kernel Version 26100 MP (28 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0xfffff801`89600000 PsLoadedModuleList = 0xfffff801`8a4f47c0
Debug session time: Tue Oct  7 20:54:37.753 2025 (UTC + 8:00)
System Uptime: 0 days 11:13:32.059
Loading Kernel Symbols
..

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

.............................................................
................................................................
................................................................
..................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000044`a3aa7018).  Type ".hh dbgerr001" for details
Loading unloaded module list
..................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff801`89ab7ce0 48894c2408      mov     qword ptr [rsp+8],rcx ss:fffffd06`4779ef40=00000000000000fc
11: kd> !process
PROCESS ffffaa0d2a088080
    SessionId: none  Cid: 1148    Peb: 44a3aa7000  ParentCid: 0abc
    DirBase: 3b2480000  ObjectTable: ffffcf80f60a4140  HandleCount: <Data Not Accessible>
    Image: PerfTune.exe
    VadRoot ffffaa0d349ede70 Vads 423 Clone 0 Private 62215. Modified 18449292. Locked 264.
    DeviceMap ffffcf80f31b2310
    Token                             ffffcf80f5f19170
    ReadMemory error: Cannot get nt!KeMaximumIncrement value.
fffff78000000000: Unable to get shared data
    ElapsedTime                       00:00:00.000
    UserTime                          00:00:00.000
    KernelTime                        00:00:00.000
    QuotaPoolUsage[PagedPool]         1136296
    QuotaPoolUsage[NonPagedPool]      58960
    Working Set Sizes (now,min,max)  (27059, 50, 345) (108236KB, 200KB, 1380KB)
    PeakWorkingSetSize                87463
    VirtualSize                       5298 Mb
    PeakVirtualSize                   5395 Mb
    PageFaultCount                    21244630
    MemoryPriority                    BACKGROUND
    BasePriority                      8
    CommitCharge                      93313
    Job                               ffffaa0d365e1060

        *** Error in reading nt!_ETHREAD @ ffffaa0d29fdd080

11: kd> !analyze -v
Loading Kernel Symbols
..

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

.............................................................
................................................................
................................................................
..................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000044`a3aa7018).  Type ".hh dbgerr001" for details
Loading unloaded module list
..................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory.  The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name is printed on
the BugCheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffffd064779f300, Virtual address for the attempted execute.
Arg2: 8a0000084e6aa963, PTE contents.
Arg3: fffffd064779f130, (reserved)
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1187

    Key  : Analysis.Elapsed.mSec
    Value: 23239

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 1

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 1296

    Key  : Analysis.Init.Elapsed.mSec
    Value: 91078

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 130

    Key  : Analysis.Version.DbgEng
    Value: 10.0.27920.1001

    Key  : Analysis.Version.Description
    Value: 10.2506.23.01 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2506.23.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0xfc

    Key  : Bugcheck.Code.TargetModel
    Value: 0xfc

    Key  : Dump.Attributes.AsUlong
    Value: 0x21008

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0x0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : Failure.Bucket
    Value: 0xFC_nt!MiCheckSystemNxFault

    Key  : Failure.Hash
    Value: {a6ae5288-6b71-974a-9b09-23f14d998164}

    Key  : WER.System.BIOSRevision
    Value: 1.28.0.0


BUGCHECK_CODE:  fc

BUGCHECK_P1: fffffd064779f300

BUGCHECK_P2: 8a0000084e6aa963

BUGCHECK_P3: fffffd064779f130

BUGCHECK_P4: 0

FILE_IN_CAB:  100725-8796-01.dmp

DUMP_FILE_ATTRIBUTES: 0x21008
  Kernel Generated Triage Dump

FAULTING_THREAD:  ffffaa0d36c7e080

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1 (!blackboxwinlogon)


CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  PerfTune.exe

STACK_TEXT:  
fffffd06`4779ef38 fffff801`898caa23     : 00000000`000000fc fffffd06`4779f300 8a000008`4e6aa963 fffffd06`4779f130 : nt!KeBugCheckEx
fffffd06`4779ef40 fffff801`898c769f     : 00000000`00000003 00000000`00000001 00000000`00000011 fffffd06`4779f000 : nt!MiCheckSystemNxFault+0x3f
fffffd06`4779ef80 fffff801`8988eb7e     : fffffd06`4779f300 fffffd06`4779f0c0 00000000`00000011 fffff801`899879b3 : nt!MiRaisedIrqlFault+0x24f
fffffd06`4779efc0 fffff801`89c880cb     : 00000000`00000011 fffff801`8998cd5a ffff8481`800053e8 00000000`00000071 : nt!MmAccessFault+0x29e
fffffd06`4779f130 fffffd06`4779f300     : ffffaa0d`4b674070 fffffd06`4779f3b8 fffffd06`4779f3a8 00000000`00000001 : nt!KiPageFault+0x38b
fffffd06`4779f2c8 ffffaa0d`4b674070     : fffffd06`4779f3b8 fffffd06`4779f3a8 00000000`00000001 0000007f`ffffffff : 0xfffffd06`4779f300
fffffd06`4779f2d0 fffffd06`4779f3b8     : fffffd06`4779f3a8 00000000`00000001 0000007f`ffffffff 00000000`00000000 : 0xffffaa0d`4b674070
fffffd06`4779f2d8 fffffd06`4779f3a8     : 00000000`00000001 0000007f`ffffffff 00000000`00000000 0000007f`ffffffff : 0xfffffd06`4779f3b8
fffffd06`4779f2e0 00000000`00000001     : 0000007f`ffffffff 00000000`00000000 0000007f`ffffffff 00000000`00000000 : 0xfffffd06`4779f3a8
fffffd06`4779f2e8 0000007f`ffffffff     : 00000000`00000000 0000007f`ffffffff 00000000`00000000 ffff6f17`0f7e2efc : 0x1
fffffd06`4779f2f0 00000000`00000000     : 0000007f`ffffffff 00000000`00000000 ffff6f17`0f7e2efc fffffd06`4779f490 : 0x0000007f`ffffffff


SYMBOL_NAME:  nt!MiCheckSystemNxFault+3f

MODULE_NAME: nt

IMAGE_VERSION:  10.0.26100.3323

STACK_COMMAND: .process /r /p 0xffffaa0d2a088080; .thread 0xffffaa0d36c7e080 ; kb

IMAGE_NAME:  ntkrnlmp.exe

BUCKET_ID_FUNC_OFFSET:  3f

FAILURE_BUCKET_ID:  0xFC_nt!MiCheckSystemNxFault

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {a6ae5288-6b71-974a-9b09-23f14d998164}

Followup:     MachineOwner
---------