1. Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
  2. Copyright (c) Microsoft Corporation. All rights reserved.
  5. Loading Dump File [C:\Users\Järjestelmänvalvoja\Desktop\121113-23727-01.dmp]
  6. Mini Kernel Dump File: Only registers and stack trace are available
  8. Symbol search path is: srv*C:\Symbols*http://msdl.microsoft.com/download/symbols
  9. Executable search path is:
  10. Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
  11. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  12. Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
  13. Machine Name:
  14. Kernel base = 0xfffff800`03204000 PsLoadedModuleList = 0xfffff800`034476d0
  15. Debug session time: Wed Dec 11 14:58:47.517 2013 (UTC + 2:00)
  16. System Uptime: 3 days 23:55:48.547
  17. Loading Kernel Symbols
  18. ...............................................................
  19. ................................................................
  20. ................................
  21. Loading User Symbols
  22. Loading unloaded module list
  23. ..................................................
  24. *******************************************************************************
  25. * *
  26. * Bugcheck Analysis *
  27. * *
  28. *******************************************************************************
  30. Use !analyze -v to get detailed debugging information.
  32. BugCheck D1, {fffff88006b48164, 2, 8, fffff88006b48164}
  34. Probably caused by : btfilter.sys ( btfilter+8164 )
  36. Followup: MachineOwner
  37. ---------
  39. 0: kd> !analyze -v
  40. *******************************************************************************
  41. * *
  42. * Bugcheck Analysis *
  43. * *
  44. *******************************************************************************
  46. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  47. An attempt was made to access a pageable (or completely invalid) address at an
  48. interrupt request level (IRQL) that is too high. This is usually
  49. caused by drivers using improper addresses.
  50. If kernel debugger is available get stack backtrace.
  51. Arguments:
  52. Arg1: fffff88006b48164, memory referenced
  53. Arg2: 0000000000000002, IRQL
  54. Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
  55. Arg4: fffff88006b48164, address which referenced memory
  57. Debugging Details:
  58. ------------------
  61. READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b1100
  62. fffff88006b48164
  64. CURRENT_IRQL: 2
  66. FAULTING_IP:
  67. btfilter+8164
  68. fffff880`06b48164 ?? ???
  70. CUSTOMER_CRASH_COUNT: 1
  72. DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
  74. BUGCHECK_STR: 0xD1
  76. PROCESS_NAME: System
  78. TRAP_FRAME: fffff80003c07290 -- (.trap 0xfffff80003c07290)
  79. NOTE: The trap frame does not contain all registers.
  80. Some register values may be zeroed or incorrect.
  81. rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8007a72358
  82. rdx=fffffa8007a72050 rsi=0000000000000000 rdi=0000000000000000
  83. rip=fffff88006b48164 rsp=fffff80003c07428 rbp=0000000000000000
  84. r8=00000000bb0b4c3e r9=0000000001cef670 r10=fffff80003204000
  85. r11=fffff80003c07470 r12=0000000000000000 r13=0000000000000000
  86. r14=0000000000000000 r15=0000000000000000
  87. iopl=0 nv up ei pl zr na po nc
  88. <Unloaded_btfilter.sys>+0x8164:
  89. fffff880`06b48164 ?? ???
  90. Resetting default scope
  92. IP_MODULE_UNLOADED:
  93. btfilter+8164
  94. fffff880`06b48164 ?? ???
  96. LAST_CONTROL_TRANSFER: from fffff80003279169 to fffff80003279bc0
  98. FAILED_INSTRUCTION_ADDRESS:
  99. btfilter+8164
  100. fffff880`06b48164 ?? ???
  102. STACK_TEXT:
  103. fffff800`03c07148 fffff800`03279169 : 00000000`0000000a fffff880`06b48164 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
  104. fffff800`03c07150 fffff800`03277de0 : fffffa80`08947030 fffff880`04fb8978 fffffa80`082b48c0 fffff800`03c074c0 : nt!KiBugCheckDispatch+0x69
  105. fffff800`03c07290 fffff880`06b48164 : fffff800`0328485c 00000000`00000000 00000000`00000000 fffff800`40f20000 : nt!KiPageFault+0x260
  106. fffff800`03c07428 fffff800`0328485c : 00000000`00000000 00000000`00000000 fffff800`40f20000 00000000`00000005 : <Unloaded_btfilter.sys>+0x8164
  107. fffff800`03c07430 fffff800`032846f6 : fffffa80`08e78468 fffffa80`08e78468 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x6c
  108. fffff800`03c074a0 fffff800`032845de : 00000324`13c66c47 fffff800`03c07b18 00000000`0151caf1 fffff800`033f90a8 : nt!KiProcessExpiredTimerList+0xc6
  109. fffff800`03c07af0 fffff800`032843c7 : 000000b4`260029c3 000000b4`0151caf1 000000b4`26002985 00000000`000000f1 : nt!KiTimerExpiration+0x1be
  110. fffff800`03c07b90 fffff800`032718ca : fffff800`033f4e80 fffff800`03402cc0 00000000`00000002 fffff880`00000000 : nt!KiRetireDpcList+0x277
  111. fffff800`03c07c40 00000000`00000000 : fffff800`03c08000 fffff800`03c02000 fffff800`03c07c00 00000000`00000000 : nt!KiIdleLoop+0x5a
  114. STACK_COMMAND: kb
  116. FOLLOWUP_IP:
  117. btfilter+8164
  118. fffff880`06b48164 ?? ???
  120. SYMBOL_STACK_INDEX: 3
  122. SYMBOL_NAME: btfilter+8164
  124. FOLLOWUP_NAME: MachineOwner
  126. MODULE_NAME: btfilter
  128. IMAGE_NAME: btfilter.sys
  130. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  132. FAILURE_BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_btfilter+8164
  134. BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_btfilter+8164
  136. Followup: MachineOwner
  137. ---------
  139. 0: kd> !analyze -v
  140. *******************************************************************************
  141. * *
  142. * Bugcheck Analysis *
  143. * *
  144. *******************************************************************************
  146. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  147. An attempt was made to access a pageable (or completely invalid) address at an
  148. interrupt request level (IRQL) that is too high. This is usually
  149. caused by drivers using improper addresses.
  150. If kernel debugger is available get stack backtrace.
  151. Arguments:
  152. Arg1: fffff88006b48164, memory referenced
  153. Arg2: 0000000000000002, IRQL
  154. Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
  155. Arg4: fffff88006b48164, address which referenced memory
  157. Debugging Details:
  158. ------------------
  161. READ_ADDRESS: fffff88006b48164
  163. CURRENT_IRQL: 2
  165. FAULTING_IP:
  166. btfilter+8164
  167. fffff880`06b48164 ?? ???
  169. CUSTOMER_CRASH_COUNT: 1
  171. DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
  173. BUGCHECK_STR: 0xD1
  175. PROCESS_NAME: System
  177. TRAP_FRAME: fffff80003c07290 -- (.trap 0xfffff80003c07290)
  178. NOTE: The trap frame does not contain all registers.
  179. Some register values may be zeroed or incorrect.
  180. rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8007a72358
  181. rdx=fffffa8007a72050 rsi=0000000000000000 rdi=0000000000000000
  182. rip=fffff88006b48164 rsp=fffff80003c07428 rbp=0000000000000000
  183. r8=00000000bb0b4c3e r9=0000000001cef670 r10=fffff80003204000
  184. r11=fffff80003c07470 r12=0000000000000000 r13=0000000000000000
  185. r14=0000000000000000 r15=0000000000000000
  186. iopl=0 nv up ei pl zr na po nc
  187. <Unloaded_btfilter.sys>+0x8164:
  188. fffff880`06b48164 ?? ???
  189. Resetting default scope
  191. IP_MODULE_UNLOADED:
  192. btfilter+8164
  193. fffff880`06b48164 ?? ???
  195. LAST_CONTROL_TRANSFER: from fffff80003279169 to fffff80003279bc0
  197. FAILED_INSTRUCTION_ADDRESS:
  198. btfilter+8164
  199. fffff880`06b48164 ?? ???
  201. STACK_TEXT:
  202. fffff800`03c07148 fffff800`03279169 : 00000000`0000000a fffff880`06b48164 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
  203. fffff800`03c07150 fffff800`03277de0 : fffffa80`08947030 fffff880`04fb8978 fffffa80`082b48c0 fffff800`03c074c0 : nt!KiBugCheckDispatch+0x69
  204. fffff800`03c07290 fffff880`06b48164 : fffff800`0328485c 00000000`00000000 00000000`00000000 fffff800`40f20000 : nt!KiPageFault+0x260
  205. fffff800`03c07428 fffff800`0328485c : 00000000`00000000 00000000`00000000 fffff800`40f20000 00000000`00000005 : <Unloaded_btfilter.sys>+0x8164
  206. fffff800`03c07430 fffff800`032846f6 : fffffa80`08e78468 fffffa80`08e78468 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x6c
  207. fffff800`03c074a0 fffff800`032845de : 00000324`13c66c47 fffff800`03c07b18 00000000`0151caf1 fffff800`033f90a8 : nt!KiProcessExpiredTimerList+0xc6
  208. fffff800`03c07af0 fffff800`032843c7 : 000000b4`260029c3 000000b4`0151caf1 000000b4`26002985 00000000`000000f1 : nt!KiTimerExpiration+0x1be
  209. fffff800`03c07b90 fffff800`032718ca : fffff800`033f4e80 fffff800`03402cc0 00000000`00000002 fffff880`00000000 : nt!KiRetireDpcList+0x277
  210. fffff800`03c07c40 00000000`00000000 : fffff800`03c08000 fffff800`03c02000 fffff800`03c07c00 00000000`00000000 : nt!KiIdleLoop+0x5a
  213. STACK_COMMAND: kb
  215. FOLLOWUP_IP:
  216. btfilter+8164
  217. fffff880`06b48164 ?? ???
  219. SYMBOL_STACK_INDEX: 3
  221. SYMBOL_NAME: btfilter+8164
  223. FOLLOWUP_NAME: MachineOwner
  225. MODULE_NAME: btfilter
  227. IMAGE_NAME: btfilter.sys
  229. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  231. FAILURE_BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_btfilter+8164
  233. BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_btfilter+8164
  235. Followup: MachineOwner
  236. ---------