Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\Mini052709-05.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\temp*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18226.x86fre.vistasp1_gdr.090302-1506
Machine Name:
Kernel base = 0x81c04000 PsLoadedModuleList = 0x81d1bc70
Debug session time: Wed May 27 16:49:32.716 2009 (GMT+8)
System Uptime: 0 days 3:29:06.436
Loading Kernel Symbols
...............................................................
................................................................
.
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {8, 2, 0, 87941283}
Unable to load image \SystemRoot\system32\DRIVERS\VDFltIpVista.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for VDFltIpVista.sys
*** ERROR: Module load completed but symbols could not be loaded for VDFltIpVista.sys
Unable to load image \SystemRoot\system32\DRIVERS\e1e6032.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e1e6032.sys
*** ERROR: Module load completed but symbols could not be loaded for e1e6032.sys
Probably caused by : VDFltIpVista.sys ( VDFltIpVista+47bf )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000008, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 87941283, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 81d3b868
Unable to read MiSystemVaType memory at 81d1b420
00000008
CURRENT_IRQL: 2
FAULTING_IP:
ndis!ndisMSendCompleteX+a2
87941283 8b4808 mov ecx,dword ptr [eax+8]
CUSTOMER_CRASH_COUNT: 5
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: 81cf9ad4 -- (.trap 0xffffffff81cf9ad4)
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=00000004 edx=86eb00f8 esi=841732b8 edi=845c7f10
eip=87941283 esp=81cf9b48 ebp=81cf9b5c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
ndis!ndisMSendCompleteX+0xa2:
87941283 8b4808 mov ecx,dword ptr [eax+8] ds:0023:00000008=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 87941283 to 81c5ed24
STACK_TEXT:
81cf9ad4 87941283 badb0d00 86eb00f8 81cf9b18 nt!KiTrap0E+0x2ac
81cf9b5c 8cbda7bf 841732b8 845c7f10 00000000 ndis!ndisMSendCompleteX+0xa2
WARNING: Stack unwind information not available. Following frames may be wrong.
81cf9b80 879407c3 86eb00f8 845c7f10 00000000 VDFltIpVista+0x47bf
81cf9ba0 87940624 005a0008 845c7f10 00000000 ndis!ndisSendCompleteWithPause+0xaf
81cf9bc4 8793f41e 845a0008 00000000 00000001 ndis!ndisMSendNetBufferListsCompleteToNdisPackets+0x7c
81cf9bf8 8793f4dd 85dab0e8 86df1278 00000001 ndis!ndisMSendCompleteNetBufferListsInternal+0xb8
81cf9c18 8c1851a5 85dab0e8 86df1278 00000001 ndis!NdisMSendNetBufferListsComplete+0x70
81cf9c44 8c182858 85f11000 00000000 81cf9c70 e1e6032+0x41a5
81cf9c74 8c182aaf 00f11000 85d9a000 81cf9c9c e1e6032+0x1858
81cf9c84 8c182b4a 85f11000 00000000 00000000 e1e6032+0x1aaf
81cf9c9c 87931115 85f11000 00000000 00000000 e1e6032+0x1b4a
81cf9cc4 87872468 85d9ae18 8c182b30 00000000 ndis!ndisMiniportDpc+0x7a
81cf9ce8 81cba450 85d9ae18 85dab0e8 00000000 ndis!ndisInterruptDpc+0xc4
81cf9d50 81cb8edd 00000000 0000000e 00000000 nt!KiRetireDpcList+0x147
81cf9d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49
STACK_COMMAND: kb
FOLLOWUP_IP:
VDFltIpVista+47bf
8cbda7bf ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: VDFltIpVista+47bf
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: VDFltIpVista
IMAGE_NAME: VDFltIpVista.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 465fd86f
FAILURE_BUCKET_ID: 0xD1_VDFltIpVista+47bf
BUCKET_ID: 0xD1_VDFltIpVista+47bf
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000008, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 87941283, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 81d3b868
Unable to read MiSystemVaType memory at 81d1b420
00000008
CURRENT_IRQL: 2
FAULTING_IP:
ndis!ndisMSendCompleteX+a2
87941283 8b4808 mov ecx,dword ptr [eax+8]
CUSTOMER_CRASH_COUNT: 5
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
TRAP_FRAME: 81cf9ad4 -- (.trap 0xffffffff81cf9ad4)
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=00000004 edx=86eb00f8 esi=841732b8 edi=845c7f10
eip=87941283 esp=81cf9b48 ebp=81cf9b5c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
ndis!ndisMSendCompleteX+0xa2:
87941283 8b4808 mov ecx,dword ptr [eax+8] ds:0023:00000008=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 87941283 to 81c5ed24
STACK_TEXT:
81cf9ad4 87941283 badb0d00 86eb00f8 81cf9b18 nt!KiTrap0E+0x2ac
81cf9b5c 8cbda7bf 841732b8 845c7f10 00000000 ndis!ndisMSendCompleteX+0xa2
WARNING: Stack unwind information not available. Following frames may be wrong.
81cf9b80 879407c3 86eb00f8 845c7f10 00000000 VDFltIpVista+0x47bf
81cf9ba0 87940624 005a0008 845c7f10 00000000 ndis!ndisSendCompleteWithPause+0xaf
81cf9bc4 8793f41e 845a0008 00000000 00000001 ndis!ndisMSendNetBufferListsCompleteToNdisPackets+0x7c
81cf9bf8 8793f4dd 85dab0e8 86df1278 00000001 ndis!ndisMSendCompleteNetBufferListsInternal+0xb8
81cf9c18 8c1851a5 85dab0e8 86df1278 00000001 ndis!NdisMSendNetBufferListsComplete+0x70
81cf9c44 8c182858 85f11000 00000000 81cf9c70 e1e6032+0x41a5
81cf9c74 8c182aaf 00f11000 85d9a000 81cf9c9c e1e6032+0x1858
81cf9c84 8c182b4a 85f11000 00000000 00000000 e1e6032+0x1aaf
81cf9c9c 87931115 85f11000 00000000 00000000 e1e6032+0x1b4a
81cf9cc4 87872468 85d9ae18 8c182b30 00000000 ndis!ndisMiniportDpc+0x7a
81cf9ce8 81cba450 85d9ae18 85dab0e8 00000000 ndis!ndisInterruptDpc+0xc4
81cf9d50 81cb8edd 00000000 0000000e 00000000 nt!KiRetireDpcList+0x147
81cf9d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49
STACK_COMMAND: kb
FOLLOWUP_IP:
VDFltIpVista+47bf
8cbda7bf ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: VDFltIpVista+47bf
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: VDFltIpVista
IMAGE_NAME: VDFltIpVista.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 465fd86f
FAILURE_BUCKET_ID: 0xD1_VDFltIpVista+47bf
BUCKET_ID: 0xD1_VDFltIpVista+47bf
Followup: MachineOwner
---------
