-
Notifications
You must be signed in to change notification settings - Fork 448
Open
Description
这里是windbg分析memory.dmp的结果,mactype版本2025.6.9 IFEO Support,系统windows11 10.0.26100:
0: kd> !analyze -v
Loading Kernel Symbols
...............................................................
................................................................
................................................................
................................................................
............................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`003fe018). Type ".hh dbgerr001" for details
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common BugCheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff804c0240e6e, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
Debugging Details:
------------------
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: ExceptionRecord ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: ContextRecord ***
*** ***
*************************************************************************
KEY_VALUES_STRING: 1
Key : AV.Page.Virtual
Value: 0xffffffffffff0000
Key : AV.Type
Value: Read
Key : Analysis.CPU.mSec
Value: 1687
Key : Analysis.Elapsed.mSec
Value: 1713
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 1
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 390
Key : Analysis.Init.Elapsed.mSec
Value: 2269
Key : Analysis.Memory.CommitPeak.Mb
Value: 93
Key : Analysis.Version.DbgEng
Value: 10.0.29482.1003
Key : Analysis.Version.Description
Value: 10.2509.29.03 amd64fre
Key : Analysis.Version.Ext
Value: 1.2509.29.3
Key : Bugcheck.Code.KiBugCheckData
Value: 0x1e
Key : Bugcheck.Code.LegacyAPI
Value: 0x1e
Key : Bugcheck.Code.TargetModel
Value: 0x1e
Key : Dump.Attributes.AsUlong
Value: 0x21800
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0x0
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 100
Key : Failure.Bucket
Value: AV_nt!NtWaitForSingleObject
Key : Failure.Exception.IP.Address
Value: 0xfffff804c0240e6e
Key : Failure.Exception.IP.Module
Value: nt
Key : Failure.Exception.IP.Offset
Value: 0x840e6e
Key : Failure.Hash
Value: {324069c8-4bfc-5ea6-5336-fd783534ab24}
Key : Faulting.IP.Type
Value: Paged
Key : Hypervisor.Enlightenments.ValueHex
Value: 0x7417df84
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 55185662
Key : Hypervisor.Flags.ValueHex
Value: 0x34a10fe
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 0x3f7
Key : SecureKernel.HalpHvciEnabled
Value: 0
Key : WER.OS.Branch
Value: ge_release
Key : WER.OS.Version
Value: 10.0.26100.1
Key : WER.System.BIOSRevision
Value: 5.27.0.0
BUGCHECK_CODE: 1e
BUGCHECK_P1: ffffffffc0000005
BUGCHECK_P2: fffff804c0240e6e
BUGCHECK_P3: 0
BUGCHECK_P4: ffffffffffffffff
FILE_IN_CAB: MEMORY.DMP
DUMP_FILE_ATTRIBUTES: 0x21800
FAULTING_THREAD: ffffb98e975e8080
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: ffffffffffffffff
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1 (!blackboxwinlogon)
PROCESS_NAME: MacTray.exe
IP_IN_PAGED_CODE:
nt!NtWaitForSingleObject+6e
fffff804`c0240e6e c3 ret
STACK_TEXT:
ffffb80c`20f5efa8 fffff804`bfddbf7b : 00000000`0000001e ffffffff`c0000005 fffff804`c0240e6e 00000000`00000000 : nt!KeBugCheckEx
ffffb80c`20f5efb0 fffff804`c00b6145 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x92b
ffffb80c`20f5f6a0 fffff804`c00b0e25 : ffffb98e`975e8080 00000000`00000000 00000000`00000000 fffff804`bfd13ec9 : nt!KiExceptionDispatch+0x145
ffffb80c`20f5f880 fffff804`c0240e6e : d9a94ff7`7b3f7b3f 2b8e3c50`86ce8135 32c9cf0e`e812ae63 6e7db4b0`eb00eb00 : nt!KiGeneralProtectionFault+0x365
ffffb80c`20f5fa18 d9a94ff7`7b3f7b3f : 2b8e3c50`86ce8135 32c9cf0e`e812ae63 6e7db4b0`eb00eb00 59b21b82`7ad53d26 : nt!NtWaitForSingleObject+0x6e
ffffb80c`20f5fa20 2b8e3c50`86ce8135 : 32c9cf0e`e812ae63 6e7db4b0`eb00eb00 59b21b82`7ad53d26 f944f944`5df01a03 : 0xd9a94ff7`7b3f7b3f
ffffb80c`20f5fa28 32c9cf0e`e812ae63 : 6e7db4b0`eb00eb00 59b21b82`7ad53d26 f944f944`5df01a03 32a030a1`e850e850 : 0x2b8e3c50`86ce8135
ffffb80c`20f5fa30 6e7db4b0`eb00eb00 : 59b21b82`7ad53d26 f944f944`5df01a03 32a030a1`e850e850 b660b669`f223eda3 : 0x32c9cf0e`e812ae63
ffffb80c`20f5fa38 59b21b82`7ad53d26 : f944f944`5df01a03 32a030a1`e850e850 b660b669`f223eda3 faf3f86b`911a911a : 0x6e7db4b0`eb00eb00
ffffb80c`20f5fa40 f944f944`5df01a03 : 32a030a1`e850e850 b660b669`f223eda3 faf3f86b`911a911a 29fd29fd`28e428e4 : 0x59b21b82`7ad53d26
ffffb80c`20f5fa48 32a030a1`e850e850 : b660b669`f223eda3 faf3f86b`911a911a 29fd29fd`28e428e4 78f884c7`d076d076 : 0xf944f944`5df01a03
ffffb80c`20f5fa50 b660b669`f223eda3 : faf3f86b`911a911a 29fd29fd`28e428e4 78f884c7`d076d076 e14505c7`4de44de4 : 0x32a030a1`e850e850
ffffb80c`20f5fa58 faf3f86b`911a911a : 29fd29fd`28e428e4 78f884c7`d076d076 e14505c7`4de44de4 b3e0b178`29432943 : 0xb660b669`f223eda3
ffffb80c`20f5fa60 29fd29fd`28e428e4 : 78f884c7`d076d076 e14505c7`4de44de4 b3e0b178`29432943 c7e0c578`75b275bb : 0xfaf3f86b`911a911a
ffffb80c`20f5fa68 78f884c7`d076d076 : e14505c7`4de44de4 b3e0b178`29432943 c7e0c578`75b275bb 831f831f`c19ec19e : 0x29fd29fd`28e428e4
ffffb80c`20f5fa70 e14505c7`4de44de4 : b3e0b178`29432943 c7e0c578`75b275bb 831f831f`c19ec19e e99be99b`80028002 : 0x78f884c7`d076d076
ffffb80c`20f5fa78 b3e0b178`29432943 : c7e0c578`75b275bb 831f831f`c19ec19e e99be99b`80028002 1dd41dd4`b247b247 : 0xe14505c7`4de44de4
ffffb80c`20f5fa80 c7e0c578`75b275bb : 831f831f`c19ec19e e99be99b`80028002 1dd41dd4`b247b247 30003000`6e4a6e4a : 0xb3e0b178`29432943
ffffb80c`20f5fa88 831f831f`c19ec19e : e99be99b`80028002 1dd41dd4`b247b247 30003000`6e4a6e4a ff0cff0c`466d466d : 0xc7e0c578`75b275bb
ffffb80c`20f5fa90 e99be99b`80028002 : 1dd41dd4`b247b247 30003000`6e4a6e4a ff0cff0c`466d466d c3c0c3c0`94a194a1 : 0x831f831f`c19ec19e
ffffb80c`20f5fa98 1dd41dd4`b247b247 : 30003000`6e4a6e4a ff0cff0c`466d466d c3c0c3c0`94a194a1 0f300f30`d86ad86a : 0xe99be99b`80028002
ffffb80c`20f5faa0 30003000`6e4a6e4a : ff0cff0c`466d466d c3c0c3c0`94a194a1 0f300f30`d86ad86a 26492649`253022cb : 0x1dd41dd4`b247b247
ffffb80c`20f5faa8 ff0cff0c`466d466d : c3c0c3c0`94a194a1 0f300f30`d86ad86a 26492649`253022cb 5fd15fd1`2bc92bc9 : 0x30003000`6e4a6e4a
ffffb80c`20f5fab0 c3c0c3c0`94a194a1 : 0f300f30`d86ad86a 26492649`253022cb 5fd15fd1`2bc92bc9 6c9a6c9a`7e937e93 : 0xff0cff0c`466d466d
ffffb80c`20f5fab8 0f300f30`d86ad86a : 26492649`253022cb 5fd15fd1`2bc92bc9 6c9a6c9a`7e937e93 eb03eb03`7d537d53 : 0xc3c0c3c0`94a194a1
ffffb80c`20f5fac0 26492649`253022cb : 5fd15fd1`2bc92bc9 6c9a6c9a`7e937e93 eb03eb03`7d537d53 096a096a`f7bff7bf : 0x0f300f30`d86ad86a
ffffb80c`20f5fac8 5fd15fd1`2bc92bc9 : 6c9a6c9a`7e937e93 eb03eb03`7d537d53 096a096a`f7bff7bf f2d5f2d5`81cf81cf : 0x26492649`253022cb
ffffb80c`20f5fad0 6c9a6c9a`7e937e93 : eb03eb03`7d537d53 096a096a`f7bff7bf f2d5f2d5`81cf81cf e2d4e2d4`09650965 : 0x5fd15fd1`2bc92bc9
ffffb80c`20f5fad8 eb03eb03`7d537d53 : 096a096a`f7bff7bf f2d5f2d5`81cf81cf e2d4e2d4`09650965 1d6f1d6f`dc38dc38 : 0x6c9a6c9a`7e937e93
ffffb80c`20f5fae0 096a096a`f7bff7bf : f2d5f2d5`81cf81cf e2d4e2d4`09650965 1d6f1d6f`dc38dc38 00000000`00000000 : 0xeb03eb03`7d537d53
ffffb80c`20f5fae8 f2d5f2d5`81cf81cf : e2d4e2d4`09650965 1d6f1d6f`dc38dc38 00000000`00000000 00000000`00000000 : 0x096a096a`f7bff7bf
ffffb80c`20f5faf0 e2d4e2d4`09650965 : 1d6f1d6f`dc38dc38 00000000`00000000 00000000`00000000 00000000`00000000 : 0xf2d5f2d5`81cf81cf
ffffb80c`20f5faf8 1d6f1d6f`dc38dc38 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xe2d4e2d4`09650965
ffffb80c`20f5fb00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x1d6f1d6f`dc38dc38
SYMBOL_NAME: nt!NtWaitForSingleObject+6e
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
STACK_COMMAND: .process /r /p 0xffffb98e97382080; .thread 0xffffb98e975e8080 ; kb
BUCKET_ID_FUNC_OFFSET: 6e
FAILURE_BUCKET_ID: AV_nt!NtWaitForSingleObject
OS_VERSION: 10.0.26100.1
BUILDLAB_STR: ge_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {324069c8-4bfc-5ea6-5336-fd783534ab24}
Followup: MachineOwner
---------
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels