Microsoft (R) Windows Debugger Version 6.11.0001.402 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [G:\kdfe_Dump_Analize\DumpS\Mini042609-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*symbols*
http://msdl.microsoft.com/download/symbols
Executable search path is: srv*symbols *
http://msdl.microsoft.com/download/symbols
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18226.amd64fre.vistasp1_gdr.090302-1506
Machine Name:
Kernel base = 0xfffff800`02664000 PsLoadedModuleList = 0xfffff800`02829db0
Debug session time: Sun Apr 26 17:07:37.277 2009 (GMT+6)
System Uptime: 0 days 1:24:54.620
Loading Kernel Symbols
.
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
..............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {10, 2, 1, fffffa6000e49c5e}
Unable to load image \SystemRoot\system32\DRIVERS\Rtlh64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rtlh64.sys
*** ERROR: Module load completed but symbols could not be loaded for Rtlh64.sys
Probably caused by : pacer.sys ( pacer!PcFilterSendNetBufferListsComplete+f4 )
Followup: MachineOwner
---------
0: kd> kd: Reading initial command '!analyze -v; q'
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffffa6000e49c5e, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff8000288d080
0000000000000010
CURRENT_IRQL: 2
FAULTING_IP:
ndis!ndisXlateSendCompleteNetBufferListToPacket+3e
fffffa60`00e49c5e 48c7411036434f4d mov qword ptr [rcx+10h],4D4F4336h
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: mplayerc.exe
TRAP_FRAME: fffff80003825270 -- (.trap 0xfffff80003825270)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa80067d50b0 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff80003825488 rsi=0000000000000000 rdi=0000000000000000
rip=fffffa6000e49c5e rsp=fffff80003825400 rbp=0000000000000000
r8=fffff80003825480 r9=fffffa80061a8780 r10=000000000000016c
r11=000000000000016c r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
ndis!ndisXlateSendCompleteNetBufferListToPacket+0x3e:
fffffa60`00e49c5e 48c7411036434f4d mov qword ptr [rcx+10h],4D4F4336h ds:1b88:00000000`00000010=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800026b83ee to fffff800026b8650
STACK_TEXT:
fffff800`03825128 fffff800`026b83ee : 00000000`0000000a 00000000`00000010 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff800`03825130 fffff800`026b72cb : 00000000`00000001 fffffa80`0673d138 00000000`00000000 fffffa80`040572b0 : nt!KiBugCheckDispatch+0x6e
fffff800`03825270 fffffa60`00e49c5e : fffffa60`0317ab78 00000000`00000000 00000000`00000001 fffff800`02622916 : nt!KiPageFault+0x20b
fffff800`03825400 fffffa60`00fb00fd : 00000000`00000001 fffffa80`061a8300 fffffa80`06261b70 fffff800`02622ff6 : ndis!ndisXlateSendCompleteNetBufferListToPacket+0x3e
fffff800`03825430 fffffa60`00fab0b2 : fffffa80`00000000 fffffa80`067d50b0 fffffa80`05ebb1a0 00000000`0000003e : ndis!ndisMSendNetBufferListsCompleteToNdisPackets+0x6d
fffff800`03825480 fffffa60`046ff8ec : fffffa80`05ebb1a0 00000000`00000000 fffffa80`0660a010 fffffa80`05ebb1a0 : ndis!ndisMSendCompleteNetBufferListsInternal+0xa2
fffff800`038254f0 fffffa60`00fab1ac : fffffa80`05ebb1a0 fffffa60`00e5f110 00000000`00000001 fffffa80`040572b0 : pacer!PcFilterSendNetBufferListsComplete+0xf4
fffff800`03825560 fffffa60`031789d7 : 00000000`00000000 fffffa80`061a8780 00000000`00000000 00000000`0000000e : ndis!NdisMSendNetBufferListsComplete+0x7c
fffff800`038255a0 00000000`00000000 : fffffa80`061a8780 00000000`00000000 00000000`0000000e fffffa80`06261b40 : Rtlh64+0x69d7
STACK_COMMAND: kb
FOLLOWUP_IP:
pacer!PcFilterSendNetBufferListsComplete+f4
fffffa60`046ff8ec 4c8d5c2450 lea r11,[rsp+50h]
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: pacer!PcFilterSendNetBufferListsComplete+f4
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: pacer
IMAGE_NAME: pacer.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 47f6dc22
FAILURE_BUCKET_ID: X64_0xD1_pacer!PcFilterSendNetBufferListsComplete+f4
BUCKET_ID: X64_0xD1_pacer!PcFilterSendNetBufferListsComplete+f4
Followup: MachineOwner
---------
