- ************* Preparing the environment for Debugger Extensions Gallery repositories **************
- ExtensionRepository : Implicit
- UseExperimentalFeatureForNugetShare : true
- AllowNugetExeUpdate : true
- NonInteractiveNuget : true
- AllowNugetMSCredentialProviderInstall : true
- AllowParallelInitializationOfLocalRepositories : true
- EnableRedirectToV8JsProvider : false
- -- Configuring repositories
- ----> Repository : LocalInstalled, Enabled: true
- ----> Repository : UserExtensions, Enabled: true
- >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.063 seconds
- ************* Waiting for Debugger Extensions Gallery to Initialize **************
- >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.047 seconds
- ----> Repository : UserExtensions, Enabled: true, Packages count: 0
- ----> Repository : LocalInstalled, Enabled: true, Packages count: 29
- Microsoft (R) Windows Debugger Version 10.0.26100.1591 X86
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\Windows\MEMORY.DMP]
- Kernel Bitmap Dump File: Active memory is available
- Primary dump contents written successfully
- Symbol search path is: srv*
- Executable search path is:
- Page 200102875 too large to be in the dump file.
- Windows 10 Kernel Version 26100 MP (6 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Edition build lab: 26100.1.amd64fre.ge_release.240331-1435
- Kernel base = 0xfffff804`91400000 PsLoadedModuleList = 0xfffff804`922f4e80
- Debug session time: Sat Aug 30 11:23:12.637 2025 (UTC + 2:00)
- System Uptime: 0 days 0:12:59.832
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- .............................Page 1083b2 not present in the dump file. Type ".hh dbgerr004" for details
- ...................................
- Loading User Symbols
- ................................................................
- .................................
- Loading unloaded module list
- .....................................................
- For analysis of this file, run !analyze -v
- 5: kd> !analyze -v
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- MEMORY_MANAGEMENT (1a)
- # Any other values for parameter 1 must be individually examined.
- Arguments:
- Arg1: 0000000000041791, The subtype of the BugCheck.
- Arg2: ffffd40005683290
- Arg3: ffffa0000808cc18
- Arg4: 05da4400001eda44
- Debugging Details:
- ------------------
- Page 1083b2 not present in the dump file. Type ".hh dbgerr004" for details
- KEY_VALUES_STRING: 1
- Key : Analysis.CPU.mSec
- Value: 6108
- Key : Analysis.Elapsed.mSec
- Value: 15000
- Key : Analysis.IO.Other.Mb
- Value: 2
- Key : Analysis.IO.Read.Mb
- Value: 0
- Key : Analysis.IO.Write.Mb
- Value: 21
- Key : Analysis.Init.CPU.mSec
- Value: 4374
- Key : Analysis.Init.Elapsed.mSec
- Value: 34427
- Key : Analysis.Memory.CommitPeak.Mb
- Value: 116
- Key : Bugcheck.Code.KiBugCheckData
- Value: 0x1a
- Key : Bugcheck.Code.LegacyAPI
- Value: 0x1a
- Key : Dump.Attributes.AsUlong
- Value: 21040
- Key : Dump.Attributes.DiagDataWrittenToHeader
- Value: 1
- Key : Dump.Attributes.ErrorCode
- Value: 0
- Key : Dump.Attributes.FilterDumpFile
- Value: 1
- Key : Dump.Attributes.LastLine
- Value: Dump completed successfully.
- Key : Dump.Attributes.ProgressPercentage
- Value: 100
- Key : Failure.Bucket
- Value: 0x1a_41791_ntdll!NtReadVirtualMemoryEx
- Key : Failure.Hash
- Value: {abc0be70-0937-b2c3-2815-bc87094da565}
- Key : Hypervisor.Enlightenments.Value
- Value: 12576
- Key : Hypervisor.Enlightenments.ValueHex
- Value: 3120
- Key : Hypervisor.Flags.AnyHypervisorPresent
- Value: 1
- Key : Hypervisor.Flags.ApicEnlightened
- Value: 0
- Key : Hypervisor.Flags.ApicVirtualizationAvailable
- Value: 0
- Key : Hypervisor.Flags.AsyncMemoryHint
- Value: 0
- Key : Hypervisor.Flags.CoreSchedulerRequested
- Value: 0
- Key : Hypervisor.Flags.CpuManager
- Value: 0
- Key : Hypervisor.Flags.DeprecateAutoEoi
- Value: 1
- Key : Hypervisor.Flags.DynamicCpuDisabled
- Value: 0
- Key : Hypervisor.Flags.Epf
- Value: 0
- Key : Hypervisor.Flags.ExtendedProcessorMasks
- Value: 0
- Key : Hypervisor.Flags.HardwareMbecAvailable
- Value: 0
- Key : Hypervisor.Flags.MaxBankNumber
- Value: 0
- Key : Hypervisor.Flags.MemoryZeroingControl
- Value: 0
- Key : Hypervisor.Flags.NoExtendedRangeFlush
- Value: 1
- Key : Hypervisor.Flags.NoNonArchCoreSharing
- Value: 0
- Key : Hypervisor.Flags.Phase0InitDone
- Value: 1
- Key : Hypervisor.Flags.PowerSchedulerQos
- Value: 0
- Key : Hypervisor.Flags.RootScheduler
- Value: 0
- Key : Hypervisor.Flags.SynicAvailable
- Value: 1
- Key : Hypervisor.Flags.UseQpcBias
- Value: 0
- Key : Hypervisor.Flags.Value
- Value: 536632
- Key : Hypervisor.Flags.ValueHex
- Value: 83038
- Key : Hypervisor.Flags.VpAssistPage
- Value: 1
- Key : Hypervisor.Flags.VsmAvailable
- Value: 0
- Key : Hypervisor.RootFlags.AccessStats
- Value: 0
- Key : Hypervisor.RootFlags.CrashdumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.CreateVirtualProcessor
- Value: 0
- Key : Hypervisor.RootFlags.DisableHyperthreading
- Value: 0
- Key : Hypervisor.RootFlags.HostTimelineSync
- Value: 0
- Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
- Value: 0
- Key : Hypervisor.RootFlags.IsHyperV
- Value: 0
- Key : Hypervisor.RootFlags.LivedumpEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.MapDeviceInterrupt
- Value: 0
- Key : Hypervisor.RootFlags.MceEnlightened
- Value: 0
- Key : Hypervisor.RootFlags.Nested
- Value: 0
- Key : Hypervisor.RootFlags.StartLogicalProcessor
- Value: 0
- Key : Hypervisor.RootFlags.Value
- Value: 0
- Key : Hypervisor.RootFlags.ValueHex
- Value: 0
- Key : SecureKernel.HalpHvciEnabled
- Value: 0
- Key : WER.OS.Branch
- Value: ge_release
- Key : WER.OS.Version
- Value: 10.0.26100.1
- BUGCHECK_CODE: 1a
- BUGCHECK_P1: 41791
- BUGCHECK_P2: ffffd40005683290
- BUGCHECK_P3: ffffa0000808cc18
- BUGCHECK_P4: 5da4400001eda44
- FILE_IN_CAB: MEMORY.DMP
- DUMP_FILE_ATTRIBUTES: 0x21040
- Filter Dump
- BLACKBOXBSD: 1 (!blackboxbsd)
- BLACKBOXNTFS: 1 (!blackboxntfs)
- BLACKBOXPNP: 1 (!blackboxpnp)
- BLACKBOXWINLOGON: 1
- PROCESS_NAME: MsMpEng.exe
- STACK_TEXT:
- ffffe10e`bb8bc498 fffff804`9170335d : 00000000`0000001a 00000000`00041791 ffffd400`05683290 ffffa000`0808cc18 : nt!KeBugCheckEx
- ffffe10e`bb8bc4a0 fffff804`916d3b5d : 00000000`00000103 ffffe10e`bb8bc6a0 00000000`00000001 00000000`00000000 : nt!MiUnlockPageTableCharges+0x20d
- ffffe10e`bb8bc500 fffff804`91dd450e : ffffe10e`bb8bc6a0 00000000`00000103 ffffe10e`00000002 00000000`001cd663 : nt!MmUnlockPages+0x29d
- ffffe10e`bb8bc580 fffff804`91dd383f : 00000000`00001578 00000000`00000010 ffffe78c`326a93f0 00000000`00000001 : nt!MiCopyVirtualMemory+0x80e
- ffffe10e`bb8bc9a0 fffff804`91881e33 : ffffe78c`39ff8080 000001c1`7b850000 0000019b`bd6727a0 00000098`00a7d8d8 : nt!MiReadWriteVirtualMemory+0x1cf
- ffffe10e`bb8bca20 fffff804`91ab7c55 : ffffe10e`bb8bcb60 0000019b`b18cbc00 ffffe10e`bb8bcb60 00000000`00000002 : nt!NtReadVirtualMemoryEx+0x23
- ffffe10e`bb8bca70 00007ffa`d6a65784 : 00007ffa`b826a01a 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
- 00000098`00a7d8b8 00007ffa`b826a01a : 00000000`00000000 00000000`00000000 00000000`00000000 0000019b`bd6727a0 : ntdll!NtReadVirtualMemoryEx+0x14
- 00000098`00a7d8c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : mpengine!MpContainerOpen+0x3146a
- SYMBOL_NAME: ntdll!NtReadVirtualMemoryEx+14
- MODULE_NAME: ntdll
- IMAGE_NAME: ntdll.dll
- STACK_COMMAND: .cxr; .ecxr ; kb
- BUCKET_ID_FUNC_OFFSET: 14
- FAILURE_BUCKET_ID: 0x1a_41791_ntdll!NtReadVirtualMemoryEx
- OS_VERSION: 10.0.26100.1
- BUILDLAB_STR: ge_release
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- FAILURE_ID_HASH: {abc0be70-0937-b2c3-2815-bc87094da565}
- Followup: MachineOwner
- ---------
Windows 11 crash with global mount building bash
Posted by Anonymous on Sat 30th Aug 2025 10:33
raw | new post
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.