Thanks a lot!
We have two consistent bug checks:
PAGE_FAULT_IN_NONPAGED_AREA (50)
This indicates that invalid system memory has been referenced.
Bug check 0x50 usually occurs after the installation of faulty hardware or in the event of failure of installed hardware (usually related to defective RAM, be it main memory, L2 RAM cache, or video RAM).
Another common cause is the installation of a faulty system service.
Antivirus software can also trigger this error, as can a corrupted NTFS volume.
If we take a look at the call stack:
Code:
1: kd> kv
Child-SP RetAddr : Args to Child : Call Site
fffff880`0a2b77c8 fffff800`03292bf6 : 00000000`00000050 fffff900`c0639770 00000000`00000000 fffff880`0a2b7920 : nt!KeBugCheckEx
fffff880`0a2b77d0 fffff800`0327466e : 00000000`00000000 fffff900`c0639770 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x218b
fffff880`0a2b7920 fffff960`00676d15 : 00000000`000006d0 00000000`00000000 00000000`3e120a12 00000000`00000020 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`0a2b7920)
fffff880`0a2b7ab0 fffff960`00297ec9 : 00000000`00000000 fffff900`c21dcb20 00000000`037ffaf0 00000040`000001c7 : [COLOR=#ff0000][I][B]cdd!DrvAssociateSharedSurface+0x51[/B][/I][/COLOR]
fffff880`0a2b7b10 fffff960`002bb05d : 00000000`00000001 fffff880`0a2b7c60 00000000`037ffaf0 00000000`00007328 : win32k!GreSetRedirectionSurfaceSignaling+0x125
fffff880`0a2b7b60 fffff800`032757d3 : fffffa80`0909d740 fffffa80`090941e0 fffffa80`09117550 fffffa80`090941e0 : win32k!NtGdiHLSurfSetInformation+0x209
fffff880`0a2b7be0 000007fe`fd314efa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0a2b7be0)
00000000`037ffa28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd314efa
We have a cdd.dll routine call (Canonical Display Driver).
SYSTEM_SERVICE_EXCEPTION (3b)
This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This error has been linked to excessive paged pool usage and may occur due to user-mode graphics drivers crossing over and passing bad data to the kernel code.
If we take a look at the call stack:
Code:
0: kd> kv
Child-SP RetAddr : Args to Child : Call Site
fffff880`0a09a7e8 fffff800`03269ae9 : 00000000`0000003b 00000000`c0000005 fffff800`032328ae fffff880`0a09b0b0 : nt!KeBugCheckEx
fffff880`0a09a7f0 fffff800`0326943c : fffff880`0a09b848 fffff880`0a09b0b0 00000000`00000000 fffff960`0033d0f0 : nt!KiBugCheckDispatch+0x69
fffff880`0a09a930 fffff800`0329523d : fffff960`0038e0f0 00000000`00000000 fffff960`000a0000 fffff880`0a09b848 : nt!KiSystemServiceHandler+0x7c
fffff880`0a09a970 fffff800`0329d2b0 : fffff800`033bbd24 fffff880`0a09a9e8 fffff880`0a09b848 fffff800`03204000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0a09a9a0 fffff800`032ab73f : fffff880`0a09b848 fffff880`0a09b0b0 fffff880`00000000 fffffa80`090c6060 : nt!RtlDispatchException+0x410
fffff880`0a09b080 fffff800`03269bc2 : fffff880`0a09b848 00000000`00000000 fffff880`0a09b8f0 fffff900`c2455740 : nt!KiDispatchException+0x16f
fffff880`0a09b710 fffff800`0326873a : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`0a09b8f0 fffff800`032328ae : fffff880`0a09bb00 fffff880`04319906 fffff900`c00c0010 00000000`09120dfd : nt!KiPageFault+0x23a (TrapFrame @ fffff880`0a09b8f0)
fffff880`0a09ba80 fffff960`00796d3f : 00000000`00000000 00000000`00000000 00000000`09120d12 00000000`00000020 : nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x26
fffff880`0a09bab0 fffff960`00277ec9 : 00000000`00000000 fffff900`c245a9f0 00000000`038ffa30 00000040`000001c7 : [COLOR=#ff0000][I][B]cdd!DrvAssociateSharedSurface+0x7b[/B][/I][/COLOR]
fffff880`0a09bb10 00000000`00000000 : fffff900`c245a9f0 00000000`038ffa30 00000040`000001c7 fffffa80`00000000 : win32k+0x1d7ec9
We have the same routine being called here as well.
Code:
0: kd> ln fffff800032328ae
(fffff800`03232888) nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x26
It appears the exception occurred in
ExEnterCriticalRegionAndAcquireFastMutexUnsafe.
----------------
1. Ensure you have the latest video card drivers. If you are already on the latest video card drivers, uninstall and install a version or a few versions behind the latest to ensure it's not a latest driver only issue. If you have already experimented with the latest video card driver and many previous versions, please give the beta driver for your card a try.
2. Run Memtest for NO LESS than ~8 passes (several hours):
Memtest86+:
Download Memtest86+ here:
Memtest86+ - Advanced Memory Diagnostic Tool
Which should I download?
You can either download the pre-compiled ISO that you would burn to a CD and then boot from the CD, or you can download the auto-installer for the USB key. What this will do is format your USB drive, make it a bootable device, and then install the necessary files. Both do the same job, it's just up to you which you choose, or which you have available (whether it's CD or USB).
How Memtest works:
Memtest86 writes a series of test patterns to most memory addresses, reads back the data written, and compares it for errors.
The default pass does 9 different tests, varying in access patterns and test data. A tenth test, bit fade, is selectable from the menu. It writes all memory with zeroes, then sleeps for 90 minutes before checking to see if bits have changed (perhaps because of refresh problems). This is repeated with all ones for a total time of 3 hours per pass.
Many chipsets can report RAM speeds and timings via SPD (Serial Presence Detect) or EPP (Enhanced Performance Profiles), and some even support changing the expected memory speed. If the expected memory speed is overclocked, Memtest86 can test that memory performance is error-free with these faster settings.
Some hardware is able to report the "PAT status" (PAT: enabled or PAT: disabled). This is a reference to Intel Performance acceleration technology; there may be BIOS settings which affect this aspect of memory timing.
This information, if available to the program, can be displayed via a menu option.
Any other questions, they can most likely be answered by reading this great guide here:
FAQ : please read before posting
Regards,
Patrick