Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\010711-23431-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`0280c000 PsLoadedModuleList = 0xfffff800`02a49e50
Debug session time: Fri Jan 7 19:37:22.054 2011 (UTC - 5:00)
System Uptime: 0 days 1:29:20.005
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff800029b08ed, fffff88005538c30, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+51d )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800029b08ed, Address of the instruction which caused the bugcheck
Arg3: fffff88005538c30, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExAllocatePoolWithTag+51d
fffff800`029b08ed 4c8b4908 mov r9,qword ptr [rcx+8]
CONTEXT: fffff88005538c30 -- (.cxr 0xfffff88005538c30)
rax=fffffa80079be060 rbx=fffffa8004e79700 rcx=8dfffa8004e79700
rdx=0000000000000003 rsi=0000000000001000 rdi=0000000000000001
rip=fffff800029b08ed rsp=fffff88005539610 rbp=fffffa8004e793c0
r8=0000000000000001 r9=fffff8000280c000 r10=fffffa8004e793c8
r11=0000000000000003 r12=0000000000000021 r13=0000000000000000
r14=fffffa80079be060 r15=0000000064536553
iopl=0 nv up ei ng nz na po cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010287
nt!ExAllocatePoolWithTag+0x51d:
fffff800`029b08ed 4c8b4908 mov r9,qword ptr [rcx+8] ds:002b:8dfffa80`04e79708=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff800029b08ed
STACK_TEXT:
fffff880`05539610 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x51d
FOLLOWUP_IP:
nt!ExAllocatePoolWithTag+51d
fffff800`029b08ed 4c8b4908 mov r9,qword ptr [rcx+8]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExAllocatePoolWithTag+51d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600
STACK_COMMAND: .cxr 0xfffff88005538c30 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithTag+51d
BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithTag+51d
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\010711-20467-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02811000 PsLoadedModuleList = 0xfffff800`02a4ee50
Debug session time: Fri Jan 7 20:09:50.575 2011 (UTC - 5:00)
System Uptime: 0 days 0:30:35.653
Loading Kernel Symbols
...............................................................
................................................................
..............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff8000288cd4f, fffff8800750de30, 0}
Probably caused by : ntkrnlmp.exe ( nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f )
Followup: MachineOwner
---------
6: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8000288cd4f, Address of the instruction which caused the bugcheck
Arg3: fffff8800750de30, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
fffff800`0288cd4f 488713 xchg rdx,qword ptr [rbx]
CONTEXT: fffff8800750de30 -- (.cxr 0xfffff8800750de30)
rax=fffffa8004f061b0 rbx=9efffa8004ea7ac8 rcx=0000000000000000
rdx=fffff8800750e880 rsi=fffff880030f7180 rdi=0000000000000000
rip=fffff8000288cd4f rsp=fffff8800750e810 rbp=00000000000007d8
r8=fffff8800750e880 r9=0000000000000001 r10=fffff80002811000
r11=000000000000000e r12=00000000000007d8 r13=00000000000007d8
r14=0000000000000001 r15=fffffa8005df3870
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f:
fffff800`0288cd4f 488713 xchg rdx,qword ptr [rbx] ds:002b:9efffa80`04ea7ac8=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff8000288cd4f
STACK_TEXT:
fffff880`0750e810 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f
FOLLOWUP_IP:
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
fffff800`0288cd4f 488713 xchg rdx,qword ptr [rbx]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600
STACK_COMMAND: .cxr 0xfffff8800750de30 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
BUCKET_ID: X64_0x3B_nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
Followup: MachineOwner
---------