Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\DMP\051411-19562-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16792.amd64fre.win7_gdr.110408-1633
Machine Name:
Kernel base = 0xfffff800`03202000 PsLoadedModuleList = 0xfffff800`0343fe50
Debug session time: Sat May 14 10:17:03.375 2011 (UTC - 4:00)
System Uptime: 0 days 3:41:13.341
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {fffff8801b51bac9, 2, 0, fffff8000327e4da}
Probably caused by : ntkrnlmp.exe ( nt!KiTimerExpiration+1ca )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff8801b51bac9, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8000327e4da, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034aa0e0
fffff8801b51bac9
CURRENT_IRQL: 2
FAULTING_IP:
nt!KiTimerExpiration+1ca
fffff800`0327e4da 8b872c470000 mov eax,dword ptr [rdi+472Ch]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: fffff880030cbaa0 -- (.trap 0xfffff880030cbaa0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000400 rbx=0000000000000000 rcx=204ed1efa2e50000
rdx=fffff800033f1420 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000327e4da rsp=fffff880030cbc30 rbp=00000000000cfba1
r8=fffffa8003edb100 r9=000000000000000a r10=fffff80003202000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!KiTimerExpiration+0x1ca:
fffff800`0327e4da 8b872c470000 mov eax,dword ptr [rdi+472Ch] ds:00000000`0000472c=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80003271c69 to fffff80003272700
STACK_TEXT:
fffff880`030cb958 fffff800`03271c69 : 00000000`0000000a fffff880`1b51bac9 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`030cb960 fffff800`032708e0 : fffffa80`056fdd00 0000001e`e7873240 00000000`000cfba1 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`030cbaa0 fffff800`0327e4da : 0000001e`e7873240 fffff880`030cbc58 00000000`000cfba1 fffff880`030a69a8 : nt!KiPageFault+0x260
fffff880`030cbc30 fffff800`0327dcc7 : 0000000b`c53d7bc2 0000000b`000cfba1 0000000b`c53d7b33 00000000`000000a1 : nt!KiTimerExpiration+0x1ca
fffff880`030cbcd0 fffff800`0327aeea : fffff880`030a3180 fffff880`030ae040 00000000`00000000 fffff880`01687c50 : nt!KiRetireDpcList+0x277
fffff880`030cbd80 00000000`00000000 : fffff880`030cc000 fffff880`030c6000 fffff880`030cbd40 00000000`00000000 : nt!KiIdleLoop+0x5a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTimerExpiration+1ca
fffff800`0327e4da 8b872c470000 mov eax,dword ptr [rdi+472Ch]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!KiTimerExpiration+1ca
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4d9fdd34
FAILURE_BUCKET_ID: X64_0xA_nt!KiTimerExpiration+1ca
BUCKET_ID: X64_0xA_nt!KiTimerExpiration+1ca
Followup: MachineOwner
---------