Pep
New Member
- Joined
- Sep 4, 2020
- Messages
- 5
- Thread Author
- #1
Hello, I'been checking on this forum about how to fix bsod Memory management issue, I tried everything, I pass memtest more than 8 hours, no one error coming up, my system is Windows 10 64bits, version 1909
My specs are Cpu AMD threadripper 1950x
Nvidia Quadro P4000
48Gb Ram
I'm using my PC as workstation.
I've got this dump file, I hope someone could guide me what is wrong.
Thank you.
Luis.
Microsoft (R) Windows Debugger Version 10.0.19041.1 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Pep\Desktop\090320-9203-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred SRV*C:N-SymCache*Symbol information
Symbol search path is: SRV*C:N-SymCache*Symbol information
Executable search path is:
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPTE_TRANSITION ***
*** ***
*************************************************************************
Windows 10 Kernel Version 18362 MP (32 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Kernel base = 0xfffff806`48800000 PsLoadedModuleList = 0xfffff806`48c480f0
Debug session time: Thu Sep 3 00:11:56.130 2020 (UTC + 1:00)
System Uptime: 0 days 16:30:26.471
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPTE_TRANSITION ***
*** ***
*************************************************************************
Loading Kernel Symbols
.
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
..............................................................
................................................................
..................................................
Loading User Symbols
Loading unloaded module list
..............
************* Symbol Loading Error Summary **************
Module name Error
ntoskrnl The system cannot find the file specified
You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
For analysis of this file, run !analyze -v
21: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
the PTE. Parameters 3/4 contain the low/high parts of the PTE.
Arg2: fffff6bffee98000
Arg3: 0000000010000000
Arg4: 0000000000000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_EPROCESS ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KTHREAD ***
*** ***
*************************************************************************
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 0
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on PEP
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 0
Key : Analysis.Memory.CommitPeak.Mb
Value: 55
Key : Analysis.System
Value: CreateObject
ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
WRONG_SYMBOLS_TIMESTAMP: 7530c6d3
WRONG_SYMBOLS_SIZE: ab7000
FAULTING_MODULE: fffff80648800000 nt
BUGCHECK_CODE: 1a
BUGCHECK_P1: 41792
BUGCHECK_P2: fffff6bffee98000
BUGCHECK_P3: 10000000
BUGCHECK_P4: 0
MEMORY_CORRUPTOR: ONE_BIT
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
STACK_TEXT:
ffff9e83`cc88ab68 fffff806`48a0f56a : 00000000`0000001a 00000000`00041792 fffff6bf`fee98000 00000000`10000000 : nt+0x1c23c0
ffff9e83`cc88ab70 00000000`0000001a : 00000000`00041792 fffff6bf`fee98000 00000000`10000000 00000000`00000000 : nt+0x20f56a
ffff9e83`cc88ab78 00000000`00041792 : fffff6bf`fee98000 00000000`10000000 00000000`00000000 fffff806`00000000 : 0x1a
ffff9e83`cc88ab80 fffff6bf`fee98000 : 00000000`10000000 00000000`00000000 fffff806`00000000 ffffa50e`01fe3980 : 0x41792
ffff9e83`cc88ab88 00000000`10000000 : 00000000`00000000 fffff806`00000000 ffffa50e`01fe3980 ffff9e83`cc88b180 : 0xfffff6bf`fee98000
ffff9e83`cc88ab90 00000000`00000000 : fffff806`00000000 ffffa50e`01fe3980 ffff9e83`cc88b180 ffff9a00`00000000 : 0x10000000
SYMBOL_NAME: ONE_BIT
MODULE_NAME: hardware
IMAGE_NAME: memory_corruption
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
Followup: MachineOwner
---------
21: kd> lmvm hardware
Browse full module list
start end module name
My specs are Cpu AMD threadripper 1950x
Nvidia Quadro P4000
48Gb Ram
I'm using my PC as workstation.
I've got this dump file, I hope someone could guide me what is wrong.
Thank you.
Luis.
Microsoft (R) Windows Debugger Version 10.0.19041.1 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Pep\Desktop\090320-9203-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred SRV*C:N-SymCache*Symbol information
Symbol search path is: SRV*C:N-SymCache*Symbol information
Executable search path is:
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPTE_TRANSITION ***
*** ***
*************************************************************************
Windows 10 Kernel Version 18362 MP (32 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Kernel base = 0xfffff806`48800000 PsLoadedModuleList = 0xfffff806`48c480f0
Debug session time: Thu Sep 3 00:11:56.130 2020 (UTC + 1:00)
System Uptime: 0 days 16:30:26.471
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPTE_TRANSITION ***
*** ***
*************************************************************************
Loading Kernel Symbols
.
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
DBGHELP: c:n-symcache*Symbol information is not a valid store
..............................................................
................................................................
..................................................
Loading User Symbols
Loading unloaded module list
..............
************* Symbol Loading Error Summary **************
Module name Error
ntoskrnl The system cannot find the file specified
You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
For analysis of this file, run !analyze -v
21: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
the PTE. Parameters 3/4 contain the low/high parts of the PTE.
Arg2: fffff6bffee98000
Arg3: 0000000010000000
Arg4: 0000000000000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_EPROCESS ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KTHREAD ***
*** ***
*************************************************************************
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
DBGHELP: C:N-SymCache*Symbol information is not a valid store
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 0
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on PEP
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 0
Key : Analysis.Memory.CommitPeak.Mb
Value: 55
Key : Analysis.System
Value: CreateObject
ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
WRONG_SYMBOLS_TIMESTAMP: 7530c6d3
WRONG_SYMBOLS_SIZE: ab7000
FAULTING_MODULE: fffff80648800000 nt
BUGCHECK_CODE: 1a
BUGCHECK_P1: 41792
BUGCHECK_P2: fffff6bffee98000
BUGCHECK_P3: 10000000
BUGCHECK_P4: 0
MEMORY_CORRUPTOR: ONE_BIT
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
STACK_TEXT:
ffff9e83`cc88ab68 fffff806`48a0f56a : 00000000`0000001a 00000000`00041792 fffff6bf`fee98000 00000000`10000000 : nt+0x1c23c0
ffff9e83`cc88ab70 00000000`0000001a : 00000000`00041792 fffff6bf`fee98000 00000000`10000000 00000000`00000000 : nt+0x20f56a
ffff9e83`cc88ab78 00000000`00041792 : fffff6bf`fee98000 00000000`10000000 00000000`00000000 fffff806`00000000 : 0x1a
ffff9e83`cc88ab80 fffff6bf`fee98000 : 00000000`10000000 00000000`00000000 fffff806`00000000 ffffa50e`01fe3980 : 0x41792
ffff9e83`cc88ab88 00000000`10000000 : 00000000`00000000 fffff806`00000000 ffffa50e`01fe3980 ffff9e83`cc88b180 : 0xfffff6bf`fee98000
ffff9e83`cc88ab90 00000000`00000000 : fffff806`00000000 ffffa50e`01fe3980 ffff9e83`cc88b180 ffff9a00`00000000 : 0x10000000
SYMBOL_NAME: ONE_BIT
MODULE_NAME: hardware
IMAGE_NAME: memory_corruption
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
Followup: MachineOwner
---------
21: kd> lmvm hardware
Browse full module list
start end module name