Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.20738.amd64fre.win7_ldr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03060000 PsLoadedModuleList = 0xfffff800`03294eb0
Debug session time: Thu Nov 4 12:08:29.877 2010 (GMT-4)
System Uptime: 0 days 15:05:55.001
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
...................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {fffff69970000000, 1, fffff800030dc0d9, 5}
Could not read faulting driver name
Probably caused by : cdrom.sys ( cdrom!RequestProcessSerializedIoctl+cdb )
Followup: MachineOwner
---------
4: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff69970000000, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff800030dc0d9, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000005, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800032ff0e0
fffff69970000000
FAULTING_IP:
nt!IoFreeMdl+159
fffff800`030dc0d9 f348ab rep stos qword ptr [rdi]
MM_INTERNAL_CODE: 5
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: System
CURRENT_IRQL: 0
TRAP_FRAME: fffff8800337e6b0 -- (.trap 0xfffff8800337e6b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=000000000006f727
rdx=000000000006f726 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030dc0d9 rsp=fffff8800337e840 rbp=fffff69970000000
r8=00000000000004b1 r9=fffff88000fc7320 r10=fffffa8005cd0ac0
r11=fffff8800337e9d0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
nt!IoFreeMdl+0x159:
fffff800`030dc0d9 f348ab rep stos qword ptr [rdi]
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800030e1189 to fffff800030c6580
STACK_TEXT:
fffff880`0337e558 fffff800`030e1189 : 00000000`00000050 fffff699`70000000 00000000`00000001 fffff880`0337e6b0 : nt!KeBugCheckEx
fffff880`0337e560 fffff800`030c466e : 00000000`00000001 fffff699`70000000 fffffa80`065c7400 fffffa80`0601ba50 : nt!MmAccessFault+0x71a
fffff880`0337e6b0 fffff800`030dc0d9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
fffff880`0337e840 fffff880`00f734b1 : 00000000`00000000 fffffa80`0601b810 fffffa80`07488020 fffff880`009b2180 : nt!IoFreeMdl+0x159
fffff880`0337e8a0 fffff880`00f71102 : fffffa80`0601b810 00000000`00000000 00000000`00000000 00000000`00000000 : Wdf01000!FxDevice::FreeRequestMemory+0xc1
fffff880`0337e8d0 fffff880`00f9c0fb : fffffa80`07488020 00000000`00000000 00000000`00000000 00000000`00000000 : Wdf01000!FxRequestFromLookaside::SelfDestruct+0x8e
fffff880`0337e900 fffff880`00f70e8a : fffffa80`07488020 fffff800`030c8c16 fffffa80`05fb6953 fffff880`00f9e789 : Wdf01000!FxObject::FinalRelease+0x33
fffff880`0337e960 fffff880`00f9e282 : fffffa80`07488020 00000000`00000001 00000000`00000000 fffffa80`064ff010 : Wdf01000!FxRequest::Release+0x52
fffff880`0337e9a0 fffff880`00f6dc9f : fffffa80`07488020 00000000`00000000 00000000`00000001 fffffa80`06093c50 : Wdf01000!FxObject::DeleteEarlyDisposedObject+0x106
fffff880`0337ea00 fffff880`00f6da71 : 00000000`00000000 fffffa80`06093c00 fffffa80`06093c50 00000000`00000001 : Wdf01000!FxRequest::PostProcessCompletion+0x1eb
fffff880`0337ea50 fffff880`00f5e13e : 00000000`00000000 00000000`00000001 fffffa80`065c7401 fffffa80`05fb6760 : Wdf01000!FxRequest::CompleteInternal+0x665
fffff880`0337eb00 fffff880`019c2503 : 00000000`00000000 fffffa80`07488020 00000000`00000000 0000057f`f8b77fd8 : Wdf01000!imp_WdfRequestCompleteWithInformation+0x1aa
fffff880`0337eb70 fffff880`00f7c6fb : 00000000`00000000 fffffa80`05d7d7b0 fffffa80`06086320 fffff800`0326c658 : cdrom!RequestProcessSerializedIoctl+0xcdb
fffff880`0337ec50 fffff800`033c2743 : fffffa80`05faacc0 fffffa80`05d7d700 fffffa80`05522b60 fffffa80`05522b60 : Wdf01000!FxWorkItem::WorkItemThunk+0x113
fffff880`0337ec80 fffff800`030d3981 : fffff800`0326c600 fffff800`033c2720 fffffa80`05522b60 00000000`00000000 : nt!IopProcessWorkItem+0x23
fffff880`0337ecb0 fffff800`0336a336 : 01caba78`5a6ea47a fffffa80`05522b60 00000000`00000080 fffffa80`05507040 : nt!ExpWorkerThread+0x111
fffff880`0337ed40 fffff800`030a3106 : fffff880`0316a180 fffffa80`05522b60 fffff880`031750c0 00010000`0000071c : nt!PspSystemThreadStartup+0x5a
fffff880`0337ed80 00000000`00000000 : fffff880`0337f000 fffff880`03379000 fffff880`0337e770 00000000`00000000 : nt!KiStartSystemThread+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
cdrom!RequestProcessSerializedIoctl+cdb
fffff880`019c2503 4c8d9c24c0000000 lea r11,[rsp+0C0h]
SYMBOL_STACK_INDEX: c
SYMBOL_NAME: cdrom!RequestProcessSerializedIoctl+cdb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: cdrom
IMAGE_NAME: cdrom.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc11a
FAILURE_BUCKET_ID: X64_0x50_cdrom!RequestProcessSerializedIoctl+cdb
BUCKET_ID: X64_0x50_cdrom!RequestProcessSerializedIoctl+cdb
Followup: MachineOwner
---------
4: kd> lmtsmn
start end module name
fffff880`03f03000 fffff880`03f41000 1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00e00000 fffff880`00e57000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d44000 fffff880`02dce000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e0f000 fffff880`03e25000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00de7000 fffff880`00df2000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`03f49000 fffff880`03f6c000 AnyDVD AnyDVD.sys Tue Sep 14 09:16:14 2010 (4C8F759E)
fffff880`011d9000 fffff880`01200000 archlp archlp.sys Tue Jan 12 03:07:45 2010 (4B4C2DD1)
fffff880`03f41000 fffff880`03f49000 ASACPI ASACPI.sys Wed Jul 15 23:31:29 2009 (4A5E9F11)
fffff880`018ea000 fffff880`018f0000 AsIO AsIO.sys Mon Aug 03 03:03:16 2009 (4A768BB4)
fffff880`02cf7000 fffff880`02cfd000 AsUpIO AsUpIO.sys Sun Jul 05 22:21:38 2009 (4A515FB2)
fffff880`09190000 fffff880`0919b000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00ff6000 fffff880`00fff000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00db2000 fffff880`00ddc000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`051ba000 fffff880`051da000 AtihdW76 AtihdW76.sys Thu Jul 15 08:46:49 2010 (4C3F0339)
fffff880`04822000 fffff880`04fdd000 atikmdag atikmdag.sys Wed Aug 25 21:47:22 2010 (4C75C7AA)
fffff880`03caf000 fffff880`03cf9000 atikmpag atikmpag.sys Wed Aug 25 21:20:56 2010 (4C75C178)
fffff880`0184b000 fffff880`01852000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`019ed000 fffff880`019fe000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`040ed000 fffff880`0410b000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00690000 fffff960`006b7000 cdd cdd.dll Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`019ab000 fffff880`019d5000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00e7c000 fffff880`00f3c000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01945000 fffff880`01975000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cf7000 fffff880`00d55000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01800000 fffff880`01842000 cmdguard cmdguard.sys Fri Sep 10 18:07:10 2010 (4C8AAC0E)
fffff880`019e2000 fffff880`019ed000 cmdhlp cmdhlp.sys Fri Sep 10 18:06:39 2010 (4C8AABEF)
fffff880`01000000 fffff880`01073000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`03f82000 fffff880`03f92000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05e00000 fffff880`05e0e000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`02cd9000 fffff880`02cf7000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02cca000 fffff880`02cd9000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0192f000 fffff880`01945000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05d26000 fffff880`05d48000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`03f92000 fffff880`03f9e000 dsNcAdX64 dsNcAdX64.sys Tue Jun 19 02:47:32 2007 (46777C04)
fffff880`05d54000 fffff880`05d5d000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05d48000 fffff880`05d54000 dump_ataport dump_ataport.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05d5d000 fffff880`05d70000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05d70000 fffff880`05d7c000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03cf9000 fffff880`03ded000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`03c00000 fffff880`03c46000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`02cbe000 fffff880`02cca000 ElbyCDIO ElbyCDIO.sys Thu Sep 30 17:25:08 2010 (4CA50034)
fffff880`01121000 fffff880`01135000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010d5000 fffff880`01121000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013f1000 fffff880`013fb000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`018f5000 fffff880`0192f000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01589000 fffff880`015d3000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`03f6c000 fffff880`03f79000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`03017000 fffff800`03060000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03c46000 fffff880`03c6a000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05db5000 fffff880`05dce000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05dce000 fffff880`05dd6080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05da7000 fffff880`05db5000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`04025000 fffff880`040ed000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015ed000 fffff880`015f6000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`02c00000 fffff880`02c18000 inspect inspect.sys Fri Sep 10 18:07:36 2010 (4C8AAC28)
fffff880`01200000 fffff880`01216000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`05134000 fffff880`05143000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05c14000 fffff880`05c22000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbf000 fffff800`00bc9000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`03fac000 fffff880`03fef000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013c6000 fffff880`013e0000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0155e000 fffff880`01589000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`03fa6000 fffff880`03fab200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05dd7000 fffff880`05dea000 LHidFilt LHidFilt.Sys Wed Jun 17 12:49:39 2009 (4A391EA3)
fffff880`05c81000 fffff880`05c96000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05c00000 fffff880`05c14000 LMouFilt LMouFilt.Sys Wed Jun 17 12:49:43 2009 (4A391EA7)
fffff880`05c3d000 fffff880`05c60000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c9f000 fffff880`00ce3000 mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`03e00000 fffff880`03e0f000 modem modem.sys Mon Jul 13 20:10:48 2009 (4A5BCD08)
fffff880`09040000 fffff880`0904e000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`05143000 fffff880`05152000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05dea000 fffff880`05df7000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c6c000 fffff880`00c86000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0410b000 fffff880`04123000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04123000 fffff880`04150000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04150000 fffff880`0419e000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0419e000 fffff880`041c1000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00ddc000 fffff880`00de7000 msahci msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`018b0000 fffff880`018bb000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e60000 fffff880`00e6a000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01141000 fffff880`0119f000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02cb3000 fffff880`02cbe000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015db000 fffff880`015ed000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0140c000 fffff880`014fe000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0509b000 fffff880`050a7000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`050a7000 fffff880`050d6000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0505a000 fffff880`0506f000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c18000 fffff880`02c27000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cff000 fffff880`02d44000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`014fe000 fffff880`0155e000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`018bb000 fffff880`018cc000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02ca7000 fffff880`02cb3000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03060000 fffff800`03633000 nt ntkrnlmp.exe Sat Jun 19 00:09:07 2010 (4C1C42E3)
fffff880`01223000 fffff880`013c6000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01842000 fffff880`0184b000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`051a4000 fffff880`051ba000 nusb3hub nusb3hub.sys Fri Sep 25 09:58:23 2009 (4ABCCC7F)
fffff880`03c7d000 fffff880`03cad000 nusb3xhc nusb3xhc.sys Fri Sep 25 09:58:31 2009 (4ABCCC87)
fffff880`02dd7000 fffff880`02dfd000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00d88000 fffff880`00d9d000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d55000 fffff880`00d88000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fef000 fffff880`00ff6000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00c5c000 fffff880`00c6c000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013e0000 fffff880`013f1000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`076f9000 fffff880`0779f000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05ce9000 fffff880`05d26000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ce3000 fffff880`00cf7000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01135000 fffff880`01140380 PxHlpa64 PxHlpa64.sys Fri Feb 02 16:24:22 2007 (45C3AC06)
fffff880`05077000 fffff880`0509b000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`050d6000 fffff880`050f1000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`050f1000 fffff880`05112000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`05112000 fffff880`0512c000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c56000 fffff880`02ca7000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`01895000 fffff880`0189e000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0189e000 fffff880`018a7000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`018a7000 fffff880`018b0000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0119f000 fffff880`011d9000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0512c000 fffff880`05133680 RimSerial_AMD64 RimSerial_AMD64.sys Tue Jan 09 11:50:11 2007 (45A3C7C3)
fffff880`03fef000 fffff880`03ff7000 RootMdm RootMdm.sys Mon Jul 13 20:10:47 2009 (4A5BCD07)
fffff880`05c96000 fffff880`05cae000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05e0e000 fffff880`05ff8980 RTKVHD64 RTKVHD64.sys Wed Oct 14 05:31:17 2009 (4AD59A65)
fffff880`05161000 fffff880`05190000 SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`0779f000 fffff880`077aa000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03f9e000 fffff880`03fa6000 serscan serscan.sys Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`015d3000 fffff880`015db000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`09058000 fffff880`090ee000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07600000 fffff880`07667000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`077aa000 fffff880`077d7000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`05190000 fffff880`05191480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01600000 fffff880`017fd000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`077d7000 fffff880`077e9000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019d5000 fffff880`019e2000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`018cc000 fffff880`018ea000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c42000 fffff880`02c56000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00450000 fffff960`0045a000 TSDDD TSDDD.dll Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`05192000 fffff880`051a4000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0904e000 fffff880`09058000 umpass umpass.sys Mon Jul 13 20:06:52 2009 (4A5BCC1C)
fffff880`05d8a000 fffff880`05da7000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`03cad000 fffff880`03caef00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03e8d000 fffff880`03e9e000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05000000 fffff880`0505a000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03e37000 fffff880`03e8d000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05c22000 fffff880`05c3d000 USBSTOR USBSTOR.SYS Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`04fdd000 fffff880`04fea000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`05152000 fffff880`05161000 VClone VClone.sys Sun Aug 09 17:25:45 2009 (4A7F3ED9)
fffff880`00e6a000 fffff880`00e77000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01852000 fffff880`01860000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01860000 fffff880`01885000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00d9d000 fffff880`00db2000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c27000 fffff880`02c42000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01885000 fffff880`01895000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00f3c000 fffff880`00fe0000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00fe0000 fffff880`00fef000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dce000 fffff880`02dd7000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003af000 win32k win32k.sys Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`03f79000 fffff880`03f82000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00e57000 fffff880`00e60000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05c60000 fffff880`05c81000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`090ee000 fffff880`0911f000 WUDFRd WUDFRd.sys Mon Jul 13 20:06:06 2009 (4A5BCBEE)
fffff880`03e9e000 fffff880`03f03000 yk62x64 yk62x64.sys Mon Sep 28 04:19:31 2009 (4AC07193)
Unloaded modules:
fffff880`0900e000 fffff880`09018000 umpass.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09018000 fffff880`09024000 hiber_atapor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09024000 fffff880`0902d000 hiber_atapi.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0902d000 fffff880`09040000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09000000 fffff880`0900e000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091cd000 fffff880`091d7000 umpass.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091d7000 fffff880`091e3000 hiber_atapor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091e3000 fffff880`091ec000 hiber_atapi.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091ec000 fffff880`091ff000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0919b000 fffff880`091a5000 umpass.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091a5000 fffff880`091b1000 hiber_atapor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091b1000 fffff880`091ba000 hiber_atapi.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091ba000 fffff880`091cd000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`05d7c000 fffff880`05d8a000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0911f000 fffff880`09190000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01975000 fffff880`01983000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01983000 fffff880`0198f000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0198f000 fffff880`01998000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01998000 fffff880`019ab000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {fc7, 2, 0, fffff880014fae9b}
Unable to load image inspect.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for inspect.sys
*** ERROR: Module load completed but symbols could not be loaded for inspect.sys
Probably caused by : memory_corruption
Followup: memory_corruption
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000fc7, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880014fae9b, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032f20e0
0000000000000fc7
CURRENT_IRQL: 2
FAULTING_IP:
NETIO!ComputeIncomingHash+bb
fffff880`014fae9b 488b6824 mov rbp,qword ptr [rax+24h]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: fffff880030ae350 -- (.trap 0xfffff880030ae350)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000fa3 rbx=0000000000000000 rcx=0000000000000fa3
rdx=fffff880030aea6a rsi=0000000000000000 rdi=0000000000000000
rip=fffff880014fae9b rsp=fffff880030ae4e0 rbp=0000000000000004
r8=0000000000000000 r9=fffff880030ae568 r10=0000000000000002
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
NETIO!ComputeIncomingHash+0xbb:
fffff880`014fae9b 488b6824 mov rbp,qword ptr [rax+24h] ds:e4a0:00000000`00000fc7=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800030b8ae9 to fffff800030b9580
STACK_TEXT:
fffff880`030ae208 fffff800`030b8ae9 : 00000000`0000000a 00000000`00000fc7 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`030ae210 fffff800`030b7760 : 00000000`00000000 00000000`00000fc7 00000000`00000000 fffffa80`06f33900 : nt!KiBugCheckDispatch+0x69
fffff880`030ae350 fffff880`014fae9b : fffffa80`06f33900 fffffa80`06f4cbe0 fffffa80`062a7f58 fffff880`014fa9b5 : nt!KiPageFault+0x260
fffff880`030ae4e0 fffff880`014faaac : 00000000`00000000 00000000`00000000 fffffa80`00000002 00000000`00000fa3 : NETIO!ComputeIncomingHash+0xbb
fffff880`030ae550 fffff880`014fbccb : 00000000`00000003 00000000`00000010 fffffa80`05bb7830 fffff880`030ae9c0 : NETIO!IndexHashClassify+0x4c
fffff880`030ae5e0 fffff880`01640417 : fffff880`030ae9c0 fffff880`030ae9c0 00000000`000000ff fffffa80`0c7f54d0 : NETIO!KfdClassify+0xa4e
fffff880`030ae950 fffff880`0164336d : fffffa80`05bb7830 fffffa80`07ad3010 fffff880`030af508 fffffa80`080e0e10 : tcpip!WfpAleClassify+0x57
fffff880`030ae990 fffff880`01643695 : 00000000`00000000 fffffa80`00000000 00000000`00000000 fffff880`014c0002 : tcpip!WfpAlepReauthorizeInboundConnection+0x60d
fffff880`030aec90 fffff880`016725f1 : fffff880`030af150 00000000`00000000 fffffa80`00000011 fffffa80`080e0e10 : tcpip!WfpAleReauthorizeInboundConnection+0x1f5
fffff880`030aedf0 fffff880`016621ef : 00000000`00079e73 00000000`00000001 fffffa80`063bac80 fffffa80`080e0e10 : tcpip!WfpAleReauthorizeConnection+0x321
fffff880`030af080 fffff880`0163f36a : fffffa80`07ad3010 fffffa80`05bb0002 00000000`00000000 00000000`00000100 : tcpip!TlShimOptionalReauthorizeConnection+0x2cf
fffff880`030af1c0 fffff880`0168173d : fffff880`030af618 fffff880`01628ba4 fffffa80`07213002 fffffa80`0c7f54d0 : tcpip!ProcessALEForTransportPacket+0x3ea
fffff880`030af430 fffff880`01641050 : fffffa80`07ad3010 00000000`00000000 00000000`00000002 00000000`00000008 : tcpip!ProcessAleForNonTcpIn+0x1ad
fffff880`030af550 fffff880`01671fe1 : fffffa80`00000011 fffffa80`05fe0002 fffffa80`05d36c07 00000000`00006c07 : tcpip!WfpProcessInTransportStackIndication+0xb10
fffff880`030af8c0 fffff880`01641f63 : fffffa80`05fe5c20 fffffa80`05bfd820 00000000`00000000 fffffa80`05d30000 : tcpip!InetInspectReceiveDatagram+0x121
fffff880`030af960 fffff880`01642315 : fffffa80`05fe5c20 fffffa80`06d90500 fffffa80`05bc07eb fffffa80`05d30000 : tcpip!UdpBeginMessageIndication+0x83
fffff880`030afab0 fffff880`016428a4 : fffffa80`00000018 fffffa80`05fe5c20 00000000`00000000 fffffa80`074bd5ba : tcpip!UdpDeliverDatagrams+0xd5
fffff880`030afc40 fffff880`01660727 : fffffa80`05d25e30 00000000`00000000 fffffa80`063bac80 00000000`00000000 : tcpip!UdpReceiveDatagrams+0x324
fffff880`030afd30 fffff880`01660799 : fffff880`030afeb0 fffff880`0176e9a0 fffff880`030afec0 fffffa80`05b19a40 : tcpip!IppDeliverListToProtocol+0xf7
fffff880`030afdf0 fffff880`01660c90 : fffff880`0176e9a0 fffffa80`0c7f5600 00000000`00000011 fffff880`030afeb0 : tcpip!IppProcessDeliverList+0x59
fffff880`030afe60 fffff880`0165fb21 : 00000000`faffffef fffffa80`05d30000 fffff880`0176e9a0 00000000`063c1001 : tcpip!IppReceiveHeaderBatch+0x231
fffff880`030aff40 fffff880`0165e592 : fffffa80`063a2d00 00000000`00000000 fffffa80`063c1001 00000000`00000001 : tcpip!IpFlcReceivePackets+0x651
fffff880`030b0140 fffff880`01677e5a : fffffa80`063c1010 fffff880`030b0270 fffffa80`063c1010 fffff880`030b0000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`030b0220 fffff800`030c8daa : fffffa80`0c7f54d0 fffff880`030ab000 00000000`00004800 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff880`030b0270 fffff880`01677882 : fffff880`01677d80 fffff880`030b0380 00000000`00000002 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0xda
fffff880`030b0350 fffff880`014c00eb : fffffa80`063c2010 00000000`00000000 fffffa80`060451a0 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`030b03c0 fffff880`01489fc6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff880`030b0430 fffff880`0140ca24 : fffffa80`060451a0 00000000`00000002 00000000`00000001 fffff800`030c6638 : ndis!ndisMDispatchReceiveNetBufferLists+0x1d6
fffff880`030b08b0 fffff880`0140c9e9 : 00000000`00000000 fffff800`76636552 00000000`00000000 fffff800`032496c8 : ndis!ndisMTopReceiveNetBufferLists+0x24
fffff880`030b08f0 fffff880`0140c980 : 00000000`00000000 fffff880`02d85b3b fffffa80`07d6b170 fffff880`02d832d0 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x29
fffff880`030b0930 fffff880`02d81fa5 : fffffa80`074bd550 fffffa80`062f7e20 00000000`00000000 fffffa80`063b4990 : ndis!NdisFIndicateReceiveNetBufferLists+0x50
fffff880`030b0970 fffffa80`074bd550 : fffffa80`062f7e20 00000000`00000000 fffffa80`063b4990 00000000`00000001 : inspect+0x1fa5
fffff880`030b0978 fffffa80`062f7e20 : 00000000`00000000 fffffa80`063b4990 00000000`00000001 fffff880`014295b1 : 0xfffffa80`074bd550
fffff880`030b0980 00000000`00000000 : fffffa80`063b4990 00000000`00000001 fffff880`014295b1 fffffa80`05f48250 : 0xfffffa80`062f7e20
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !NETIO
fffff880014fae9d - NETIO!ComputeIncomingHash+bd
[ 6c:68 ]
1 error : !NETIO (fffff880014fae9d)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: ONE_BIT
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {ffffba8007251b70, 2, 1, fffff800030c2b70}
Probably caused by : ntkrnlmp.exe ( nt!KiProcessExpiredTimerList+110 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffffba8007251b70, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800030c2b70, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800032f00e0
ffffba8007251b70
CURRENT_IRQL: 2
FAULTING_IP:
nt!KiProcessExpiredTimerList+110
fffff800`030c2b70 f00fba2f07 lock bts dword ptr [rdi],7
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: fffff88002f8c450 -- (.trap 0xfffff88002f8c450)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=fffffa800725d7a8
rdx=fffffa800a9df580 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030c2b70 rsp=fffff88002f8c5e0 rbp=fffffa800a9df010
r8=000000000000001d r9=0000000000000000 r10=000000000000001b
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz ac po cy
nt!KiProcessExpiredTimerList+0x110:
fffff800`030c2b70 f00fba2f07 lock bts dword ptr [rdi],7 ds:d000:00000000`00000000=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800030b6ae9 to fffff800030b7580
STACK_TEXT:
fffff880`02f8c308 fffff800`030b6ae9 : 00000000`0000000a ffffba80`07251b70 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`02f8c310 fffff800`030b5760 : 00000000`00000001 ffffba80`07251b70 fffff880`02f64100 fffffa80`0a9df190 : nt!KiBugCheckDispatch+0x69
fffff880`02f8c450 fffff800`030c2b70 : fffffa80`06ca2060 fffffa80`065b6010 fffffa80`065b6010 00000000`00000000 : nt!KiPageFault+0x260
fffff880`02f8c5e0 fffff800`030c375e : 00000030`688b0e4f fffff880`02f8cc58 00000000`0014561b fffff880`02f668e8 : nt!KiProcessExpiredTimerList+0x110
fffff880`02f8cc30 fffff800`030c2e97 : fffff880`02f641c1 fffffa80`0014561b 0000000c`a86f44f7 00000000`0000001b : nt!KiTimerExpiration+0x1be
fffff880`02f8ccd0 fffff800`030bfefa : fffff880`02f64180 fffff880`02f6f0c0 00000000`00000000 fffff800`031da330 : nt!KiRetireDpcList+0x277
fffff880`02f8cd80 00000000`00000000 : fffff880`02f8d000 fffff880`02f87000 fffff880`02f8cd40 00000000`00000000 : nt!KiIdleLoop+0x5a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiProcessExpiredTimerList+110
fffff800`030c2b70 f00fba2f07 lock bts dword ptr [rdi],7
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!KiProcessExpiredTimerList+110
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c42e3
FAILURE_BUCKET_ID: X64_0xA_nt!KiProcessExpiredTimerList+110
BUCKET_ID: X64_0xA_nt!KiProcessExpiredTimerList+110
Followup: MachineOwner
---------