Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\110210-148434-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82a3b000 PsLoadedModuleList = 0x82b83810
Debug session time: Tue Nov 2 13:29:46.508 2010 (GMT-4)
System Uptime: 3 days 19:09:31.006
Loading Kernel Symbols
.
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
..............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {bbee405f, 0, 0, 82aad631}
Probably caused by : memory_corruption ( nt!MiAgeWorkingSet+1e5 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: bbee405f, memory referenced
Arg2: 00000000, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82aad631, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 82ba3718
Unable to read MiSystemVaType memory at 82b83160
bbee405f
CURRENT_IRQL: 0
FAULTING_IP:
nt!MiAgeWorkingSet+1e5
82aad631 0fb6460f movzx eax,byte ptr [esi+0Fh]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: 8df50a2c -- (.trap 0xffffffff8df50a2c)
ErrCode = 00000000
eax=00000000 ebx=8c825964 ecx=ffffffff edx=82b6f300 esi=bbee4050 edi=c0794788
eip=82aad631 esp=8df50aa0 ebp=8df50c10 iopl=0 nv up ei ng nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!MiAgeWorkingSet+0x1e5:
82aad631 0fb6460f movzx eax,byte ptr [esi+0Fh] ds:0023:bbee405f=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 82aad631 to 82a8182b
STACK_TEXT:
8df50a2c 82aad631 badb0d00 82b6f300 00000000 nt!KiTrap0E+0x2cf
8df50c10 82aae61b 82b6f300 00000001 00000001 nt!MiAgeWorkingSet+0x1e5
8df50c5c 82aae2e0 00000002 00000001 00000000 nt!MiProcessWorkingSets+0x25b
8df50c88 82ac421f 00000000 855d5988 00000000 nt!MmWorkingSetManager+0xa4
8df50d50 82c496d3 00000000 bdd8c810 00000000 nt!KeBalanceSetManager+0x1af
8df50d90 82afb0f9 82ac4070 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiAgeWorkingSet+1e5
82aad631 0fb6460f movzx eax,byte ptr [esi+0Fh]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiAgeWorkingSet+1e5
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c3fac
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0xA_nt!MiAgeWorkingSet+1e5
BUCKET_ID: 0xA_nt!MiAgeWorkingSet+1e5
Followup: MachineOwner
---------