Domanda 11 Help debug BSOD

Ordina per data Ordina commenti per reazioni
T

TheWorm91

Helper
31 Marzo 2022
428
49
204
317
Ciao a tutti,
sul mio pc (win11) di lavoro (che non ha nemmeno un anno di vita) da fine febbraio si stanno verificando dei BSOD.
Ipotizzo che il responsabile sia firefox perchè su 4 bsod 3 sono avvenuti mentre ascoltavo musica su youtube e il processo firefox.exe viene indicato nel file minidump.
Di seguito l'ultimo file minidump:
Codice: 
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff800302ec4e4, address which referenced memory

Debugging Details:
------------------

KEY_VALUES_STRING: 1
    Key  : Analysis.CPU.mSec
    Value: 1233
    Key  : Analysis.Elapsed.mSec
    Value: 7089
    Key  : Analysis.IO.Other.Mb
    Value: 0
    Key  : Analysis.IO.Read.Mb
    Value: 0
    Key  : Analysis.IO.Write.Mb
    Value: 0
    Key  : Analysis.Init.CPU.mSec
    Value: 124
    Key  : Analysis.Init.Elapsed.mSec
    Value: 5341
    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 108
    Key  : Bugcheck.Code.LegacyAPI
    Value: 0xd1
    Key  : Bugcheck.Code.TargetModel
    Value: 0xd1
    Key  : Dump.Attributes.AsUlong
    Value: 1008
    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1
    Key  : Dump.Attributes.ErrorCode
    Value: 0
    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1
    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.
    Key  : Dump.Attributes.ProgressPercentage
    Value: 0
    Key  : Failure.Bucket
    Value: AV_NETIO!StreamInvokeCalloutAndNormalizeAction
    Key  : Failure.Hash
    Value: {c2ca2d1f-cfdc-88d5-c7bc-7693b8f0de04}
BUGCHECK_CODE:  d1
BUGCHECK_P1: 8
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff800302ec4e4
FILE_IN_CAB:  030524-8609-01.dmp
DUMP_FILE_ATTRIBUTES: 0x1008
  Kernel Generated Triage Dump
READ_ADDRESS: fffff8002b51c470: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 0000000000000008
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT:  1
PROCESS_NAME:  firefox.exe
TRAP_FRAME:  ffff8283dc77df40 -- (.trap 0xffff8283dc77df40)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffff8283dc77e248
rdx=ffff8d870ba89050 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800302ec4e4 rsp=ffff8283dc77e0d0 rbp=ffff8283dc77e149
 r8=ffff8d870ba89120  r9=00000000000004e1 r10=ffff8d870d5ba530
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!StreamInvokeCalloutAndNormalizeAction+0x5c:
fffff800`302ec4e4 488b4808        mov     rcx,qword ptr [rax+8] ds:00000000`00000008=????????????????
Resetting default scope

STACK_TEXT:
ffff8283`dc77ddf8 fffff800`2ac2c5e9     : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffff8283`dc77de00 fffff800`2ac27b34     : 00000000`00000000 00000000`00000002 ffff8d87`10bf3598 ffff8d86`f6c9c1e0 : nt!KiBugCheckDispatch+0x69
ffff8283`dc77df40 fffff800`302ec4e4     : ffff8283`dc77e210 ffff8d87`0ba89120 ffff8283`dc77e210 ffff8d87`0ba89120 : nt!KiPageFault+0x474
ffff8283`dc77e0d0 fffff800`302ebd8b     : ffff8d87`0ba89120 ffff8d87`0ba89050 ffff8d87`0d5ba501 00000000`00000000 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x5c
ffff8283`dc77e1a0 fffff800`302e992b     : ffff8d86`fd000014 fffff800`432b1af4 ffff8d86`00000002 ffff8283`dc77eb38 : NETIO!StreamProcessCallout+0x2c7
ffff8283`dc77e2d0 fffff800`302e89dd     : 00000001`00000014 ffff8283`dc77eb38 ffff8283`dc77eb60 ffff8283`dc77e9e0 : NETIO!ProcessCallout+0xa4b
ffff8283`dc77e450 fffff800`302e76ee     : 00000000`00000005 ffff8283`dc77eb60 ffff8d86`faf52aa0 00000000`00000000 : NETIO!ArbitrateAndEnforce+0x59d
ffff8283`dc77e580 fffff800`302e51d5     : ffff8283`dc77ef08 ffff8283`dc77ea30 ffff8283`dc77ea30 00000000`00000000 : NETIO!KfdClassify+0x33e
ffff8283`dc77e930 fffff800`302e4dd8     : ffff8283`dc77ebb0 00000000`0000002f 00000000`00000000 fffff800`2aa39913 : NETIO!StreamClassify+0x279
ffff8283`dc77ead0 fffff800`302e47b6     : ffff8283`dc77ef40 ffff8d86`fde634c0 00000000`00000000 00000000`00000014 : NETIO!StreamCommonInspect+0x2ac
ffff8283`dc77eec0 fffff800`303d3d8f     : ffff8d87`102087d0 00000000`00000000 ffff8283`dc77efc0 ffff8283`dc77efd8 : NETIO!WfpStreamInspectSend+0x256
ffff8283`dc77ef50 fffff800`303d3915     : 00000000`00000000 00000000`00000000 fffff800`303d38f0 ffff8d87`0d9331b8 : tcpip!TcpEnqueueTcbSend+0x45f
ffff8283`dc77f070 fffff800`2aaeb8aa     : 00000000`00000000 00000000`00000000 ffff8283`00000000 ffff8d86`fdbfe1f0 : tcpip!TcpTlConnectionSendCalloutRoutine+0x25
ffff8283`dc77f0b0 fffff800`2aaeb81d     : fffff800`303d38f0 ffff8283`dc77f190 ffff8d87`12444920 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x7a
ffff8283`dc77f120 fffff800`3044854d     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffff8283`dc77f160 fffff800`43a43070     : ffff8d87`12444920 ffff8283`dc77faa0 ffff8d87`091f6240 ffff8d87`091f6240 : tcpip!TcpTlConnectionSend+0x8d
ffff8283`dc77f1d0 fffff800`43a46989     : 00000000`00000000 00000000`00000000 00000000`00000002 00000000`00000001 : afd!AfdFastConnectionSend+0x550
ffff8283`dc77f3b0 fffff800`2af416ce     : 00000000`00000000 00000000`00000000 ffff8283`dc77faa0 ffff8d87`0e809408 : afd!AfdFastIoDeviceControl+0xfa9
ffff8283`dc77f750 fffff800`2af41256     : 00000000`00000001 ffffef8f`5359a9a3 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x45e
ffff8283`dc77f940 fffff800`2ac2bce5     : 00000203`e0da0048 00000203`e0da0040 00000203`e0da00a0 00000203`e0da0040 : nt!NtDeviceIoControlFile+0x56
ffff8283`dc77f9b0 00007ffc`a432f454     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
000000ef`f1cfd3b8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`a432f454

SYMBOL_NAME:  NETIO!StreamInvokeCalloutAndNormalizeAction+5c
MODULE_NAME: NETIO
IMAGE_NAME:  NETIO.SYS
IMAGE_VERSION:  10.0.22621.3155
STACK_COMMAND:  .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET:  5c
FAILURE_BUCKET_ID:  AV_NETIO!StreamInvokeCalloutAndNormalizeAction
OSPLATFORM_TYPE:  x64
OSNAME:  Windows 10
FAILURE_ID_HASH:  {c2ca2d1f-cfdc-88d5-c7bc-7693b8f0de04}
Followup:     MachineOwner

Sto cercando di capire la causa dell'errore, facendo un po' di ricerca mi sembra di capire che il problema sia un accesso a un indirizzo in memoria o a un registro con valore non valido, potrebbe essere un problema anche di un driver usato da firefox o solo software?

grazie per l'aiuto!
 
TheWorm91 ha detto:
Ciao a tutti,
sul mio pc (win11) di lavoro (che non ha nemmeno un anno di vita) da fine febbraio si stanno verificando dei BSOD.
Ipotizzo che il responsabile sia firefox perchè su 4 bsod 3 sono avvenuti mentre ascoltavo musica su youtube e il processo firefox.exe viene indicato nel file minidump.
Di seguito l'ultimo file minidump:
Codice: 
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff800302ec4e4, address which referenced memory

Debugging Details:
------------------

KEY_VALUES_STRING: 1
    Key  : Analysis.CPU.mSec
    Value: 1233
    Key  : Analysis.Elapsed.mSec
    Value: 7089
    Key  : Analysis.IO.Other.Mb
    Value: 0
    Key  : Analysis.IO.Read.Mb
    Value: 0
    Key  : Analysis.IO.Write.Mb
    Value: 0
    Key  : Analysis.Init.CPU.mSec
    Value: 124
    Key  : Analysis.Init.Elapsed.mSec
    Value: 5341
    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 108
    Key  : Bugcheck.Code.LegacyAPI
    Value: 0xd1
    Key  : Bugcheck.Code.TargetModel
    Value: 0xd1
    Key  : Dump.Attributes.AsUlong
    Value: 1008
    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1
    Key  : Dump.Attributes.ErrorCode
    Value: 0
    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1
    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.
    Key  : Dump.Attributes.ProgressPercentage
    Value: 0
    Key  : Failure.Bucket
    Value: AV_NETIO!StreamInvokeCalloutAndNormalizeAction
    Key  : Failure.Hash
    Value: {c2ca2d1f-cfdc-88d5-c7bc-7693b8f0de04}
BUGCHECK_CODE:  d1
BUGCHECK_P1: 8
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff800302ec4e4
FILE_IN_CAB:  030524-8609-01.dmp
DUMP_FILE_ATTRIBUTES: 0x1008
  Kernel Generated Triage Dump
READ_ADDRESS: fffff8002b51c470: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 0000000000000008
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT:  1
PROCESS_NAME:  firefox.exe
TRAP_FRAME:  ffff8283dc77df40 -- (.trap 0xffff8283dc77df40)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffff8283dc77e248
rdx=ffff8d870ba89050 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800302ec4e4 rsp=ffff8283dc77e0d0 rbp=ffff8283dc77e149
 r8=ffff8d870ba89120  r9=00000000000004e1 r10=ffff8d870d5ba530
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!StreamInvokeCalloutAndNormalizeAction+0x5c:
fffff800`302ec4e4 488b4808        mov     rcx,qword ptr [rax+8] ds:00000000`00000008=????????????????
Resetting default scope

STACK_TEXT:
ffff8283`dc77ddf8 fffff800`2ac2c5e9     : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffff8283`dc77de00 fffff800`2ac27b34     : 00000000`00000000 00000000`00000002 ffff8d87`10bf3598 ffff8d86`f6c9c1e0 : nt!KiBugCheckDispatch+0x69
ffff8283`dc77df40 fffff800`302ec4e4     : ffff8283`dc77e210 ffff8d87`0ba89120 ffff8283`dc77e210 ffff8d87`0ba89120 : nt!KiPageFault+0x474
ffff8283`dc77e0d0 fffff800`302ebd8b     : ffff8d87`0ba89120 ffff8d87`0ba89050 ffff8d87`0d5ba501 00000000`00000000 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x5c
ffff8283`dc77e1a0 fffff800`302e992b     : ffff8d86`fd000014 fffff800`432b1af4 ffff8d86`00000002 ffff8283`dc77eb38 : NETIO!StreamProcessCallout+0x2c7
ffff8283`dc77e2d0 fffff800`302e89dd     : 00000001`00000014 ffff8283`dc77eb38 ffff8283`dc77eb60 ffff8283`dc77e9e0 : NETIO!ProcessCallout+0xa4b
ffff8283`dc77e450 fffff800`302e76ee     : 00000000`00000005 ffff8283`dc77eb60 ffff8d86`faf52aa0 00000000`00000000 : NETIO!ArbitrateAndEnforce+0x59d
ffff8283`dc77e580 fffff800`302e51d5     : ffff8283`dc77ef08 ffff8283`dc77ea30 ffff8283`dc77ea30 00000000`00000000 : NETIO!KfdClassify+0x33e
ffff8283`dc77e930 fffff800`302e4dd8     : ffff8283`dc77ebb0 00000000`0000002f 00000000`00000000 fffff800`2aa39913 : NETIO!StreamClassify+0x279
ffff8283`dc77ead0 fffff800`302e47b6     : ffff8283`dc77ef40 ffff8d86`fde634c0 00000000`00000000 00000000`00000014 : NETIO!StreamCommonInspect+0x2ac
ffff8283`dc77eec0 fffff800`303d3d8f     : ffff8d87`102087d0 00000000`00000000 ffff8283`dc77efc0 ffff8283`dc77efd8 : NETIO!WfpStreamInspectSend+0x256
ffff8283`dc77ef50 fffff800`303d3915     : 00000000`00000000 00000000`00000000 fffff800`303d38f0 ffff8d87`0d9331b8 : tcpip!TcpEnqueueTcbSend+0x45f
ffff8283`dc77f070 fffff800`2aaeb8aa     : 00000000`00000000 00000000`00000000 ffff8283`00000000 ffff8d86`fdbfe1f0 : tcpip!TcpTlConnectionSendCalloutRoutine+0x25
ffff8283`dc77f0b0 fffff800`2aaeb81d     : fffff800`303d38f0 ffff8283`dc77f190 ffff8d87`12444920 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x7a
ffff8283`dc77f120 fffff800`3044854d     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffff8283`dc77f160 fffff800`43a43070     : ffff8d87`12444920 ffff8283`dc77faa0 ffff8d87`091f6240 ffff8d87`091f6240 : tcpip!TcpTlConnectionSend+0x8d
ffff8283`dc77f1d0 fffff800`43a46989     : 00000000`00000000 00000000`00000000 00000000`00000002 00000000`00000001 : afd!AfdFastConnectionSend+0x550
ffff8283`dc77f3b0 fffff800`2af416ce     : 00000000`00000000 00000000`00000000 ffff8283`dc77faa0 ffff8d87`0e809408 : afd!AfdFastIoDeviceControl+0xfa9
ffff8283`dc77f750 fffff800`2af41256     : 00000000`00000001 ffffef8f`5359a9a3 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x45e
ffff8283`dc77f940 fffff800`2ac2bce5     : 00000203`e0da0048 00000203`e0da0040 00000203`e0da00a0 00000203`e0da0040 : nt!NtDeviceIoControlFile+0x56
ffff8283`dc77f9b0 00007ffc`a432f454     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
000000ef`f1cfd3b8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`a432f454

SYMBOL_NAME:  NETIO!StreamInvokeCalloutAndNormalizeAction+5c
MODULE_NAME: NETIO
IMAGE_NAME:  NETIO.SYS
IMAGE_VERSION:  10.0.22621.3155
STACK_COMMAND:  .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET:  5c
FAILURE_BUCKET_ID:  AV_NETIO!StreamInvokeCalloutAndNormalizeAction
OSPLATFORM_TYPE:  x64
OSNAME:  Windows 10
FAILURE_ID_HASH:  {c2ca2d1f-cfdc-88d5-c7bc-7693b8f0de04}
Followup:     MachineOwner

Sto cercando di capire la causa dell'errore, facendo un po' di ricerca mi sembra di capire che il problema sia un accesso a un indirizzo in memoria o a un registro con valore non valido, potrebbe essere un problema anche di un driver usato da firefox o solo software?

grazie per l'aiuto!
Clicca per espandere...
Non ti soffermare su "Firefox" in quanto è solamente un software e normalmente un software non può causare un BSOD, mi spiego meglio, il BSOD è la causa di un problema hardware o driver, sicuramente riproducendo le stesse cose con altri browser o software ti succede comunque.
Ad ogni modo il BSOD DRIVER_IRQL_NOT_LESS_OR_EQUAL è generalmente dato quando c'è un problema con la scheda video oppure con la ram (più il primo del secondo). Potresti provare a disinstallare completamente i driver video magari con ddu e reinstallarli e vedere come va. Inoltre un memtest non fa mai male..

Fammi sapere
 
  • Grazie
Reazioni: TheWorm91
Top Bottom
Indietro