1: kd> !analyze -v
*******************************************************************************
*******************************************************************************
SYSTEM_PTE_MISUSE (da)
A driver has corrupted system PTEs.
Set HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\TrackPtes
to a DWORD 3 value and reboot. If the same BugCheck occurs again the stack trace will
identify the offending driver.
Arguments:
Arg1: 0000000000000504, Type of error.
Arg2: ffffcefc00b5ea80
Arg3: 0000000000000020
Arg4: 0000000000016bd5
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 6296
Key : Analysis.Elapsed.mSec
Value: 7717
Key : Analysis.IO.Other.Mb
Value: 6
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 25
Key : Analysis.Init.CPU.mSec
Value: 1593
Key : Analysis.Init.Elapsed.mSec
Value: 52296
Key : Analysis.Memory.CommitPeak.Mb
Value: 94
Key : Bugcheck.Code.LegacyAPI
Value: 0xda
Key : Dump.Attributes.AsUlong
Value: 1808
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: 0xDA_nt!MiReleaseSmallPteMappings
Key : Failure.Hash
Value: {757196dc-72df-254c-42bc-38793fa8a51d}
Key : Hypervisor.Enlightenments.ValueHex
Value: 1497cf94
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 1
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 0
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 0
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 4853999
Key : Hypervisor.Flags.ValueHex
Value: 4a10ef
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 3f7
BUGCHECK_CODE: da
BUGCHECK_P1: 504
BUGCHECK_P2: ffffcefc00b5ea80
BUGCHECK_P3: 20
BUGCHECK_P4: 16bd5
FILE_IN_CAB: 022224-13312-01.dmp
DUMP_FILE_ATTRIBUTES: 0x1808
Kernel Generated Triage Dump
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
fffffc8e`5c1007e8 fffff801`70416ff5 : 00000000`000000da 00000000`00000504 ffffcefc`00b5ea80 00000000`00000020 : nt!KeBugCheckEx
fffffc8e`5c1007f0 fffff801`7051fc97 : fffff801`70e69398 fffff801`70e69398 ffff9700`72c16180 00000000`00000000 : nt!MiReleaseSmallPteMappings+0x565
fffffc8e`5c100970 fffff801`7051f73b : fffff801`70e67f70 00000000`00000000 ffffb6e4`009f432a 0016bd60`009f4328 : nt!MiEmptyPteBins+0x157
fffffc8e`5c1009e0 fffff801`7051f019 : fffff801`70e6afc0 00000000`00000000 00000000`00000001 ffffae04`8825c290 : nt!MiAdjustPteBins+0x67
fffffc8e`5c100a40 fffff801`70591690 : 00000000`00000008 00000000`00000008 00000000`ffffffff ffff9700`72c16180 : nt!MiWorkingSetManager+0x189
fffffc8e`5c100b00 fffff801`70507317 : ffffae04`883ea040 00000000`00000080 fffff801`70e6afc0 84450574`e4844548 : nt!KeBalanceSetManager+0x150
fffffc8e`5c100bf0 fffff801`7061bcc4 : ffff9700`72c16180 ffffae04`883ea040 fffff801`705072c0 92b3894c`2f478d00 : nt!PspSystemThreadStartup+0x57
fffffc8e`5c100c40 00000000`00000000 : fffffc8e`5c101000 fffffc8e`5c0fb000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34
SYMBOL_NAME: nt!MiReleaseSmallPteMappings+565
MODULE_NAME: nt
IMAGE_VERSION: 10.0.22621.3155
STACK_COMMAND: .cxr; .ecxr ; kb
IMAGE_NAME: ntkrnlmp.exe
BUCKET_ID_FUNC_OFFSET: 565
FAILURE_BUCKET_ID: 0xDA_nt!MiReleaseSmallPteMappings
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {757196dc-72df-254c-42bc-38793fa8a51d}
Followup: MachineOwner
---------
1: kd> !blackboxbsd
Version: 0xc0
Product type: 1
Auto advanced boot: FALSE
Advanced boot menu timeout: 30
Last boot succeeded: TRUE
Last boot shutdown: FALSE
Sleep in progress: FALSE
Power button timestamp: 0x0
System running: TRUE
Connected standby in progress: FALSE
User shutdown in progress: FALSE
System shutdown in progress: FALSE
Sleep in progress: 0
Connected standby scenario instance id: 0
Connected standby entry reason: 20
Connected standby exit reason: 1
System sleep transitions to on: 3
Last reference time: 0x1da65a4bd014e0f
2024-02-22T15:35:18.87Z
Last reference time checksum: 0xbf8467b
Last update boot id: 351
Boot attempt count: 1
Last boot checkpoint: TRUE
Checksum: 0x6f
Last boot id: 351
Last successful shutdown boot id: 348
Last reported abnormal shutdown boot id: 350
Error info boot id: 0
Error info repeat count: 0
Error info other error count: 0
Error info code: 0
Error info status: 0x0
Power button last press time: 0x0
Power button cumulative press count: 0
Power button last press boot id: 0
Power button last power watchdog stage: 0
Power button watchdog armed: FALSE
Power button shutdown in progress: FALSE
Power button last release time: 0x0
Power button cumulative release count: 0
Power button last release boot id: 0
Power button error count: 0
Power button current connected standby phase: 0
Power button transition latest checkpoint id: 0
Power button transition latest checkpoint type: 0
Power button transition latest checkpoint sequence number: 0
Power transition Shutdown Device Type: 255
Power transition Setup In Progress: FALSE
Power transition OOBE In Progress: FALSE
Power transition Sleep Checkpoint Source: 0
Power transition Sleep Checkpoint: 16
Power transition Connected Standby Entry Reason Category: 0
Power transition Connected Standby Exit Reason Category: 0
Power transition Connected Standby Entry Scenario Instance Id: 0x6
Feature Configuration State : Boot Pending
1: kd> !blackboxntfs
NTFS Blackbox Data
0 Slow I/O Timeout Records Found
0 Oplock Break Timeout Records Found
1: kd> !blackboxpnp
PnpActivityId : {00000000-0000-0000-0000-000000000000}
PnpActivityTime : 133530887282580368
PnpEventInformation: 3
PnpEventInProgress : 0
PnpProblemCode : 24
PnpVetoType : 0
DeviceId : SW\{96E080C7-143C-11D1-B40F-00A0C9223196}\{3C0D501A-140B-11D1-B40F-00A0C9223196}
VetoString :