Microsoft (R) Windows Debugger Version 6.11.0001.404 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\Mini112009-02.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/downloads/symbols Executable search path is: Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Personal Built by: 6002.18082.amd64fre.vistasp2_gdr.090803-2339 Machine Name: Kernel base = 0xfffff800`0204b000 PsLoadedModuleList = 0xfffff800`0220fdd0 Debug session time: Fri Nov 20 09:20:30.806 2009 (GMT-5) System Uptime: 0 days 0:23:26.596 Loading Kernel Symbols ............................................................... ................................................................ ............ Loading User Symbols Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck A, {80, c, 1, fffff800020e2ecd} Probably caused by : ntkrnlmp.exe ( nt!KiUnwaitThread+19 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* IRQL_NOT_LESS_OR_EQUAL (a) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If a kernel debugger is available get the stack backtrace. Arguments: Arg1: 0000000000000080, memory referenced Arg2: 000000000000000c, IRQL Arg3: 0000000000000001, bitfield : bit 0 : value 0 = read operation, 1 = write operation bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status) Arg4: fffff800020e2ecd, address which referenced memory Debugging Details: ------------------ WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002272080 0000000000000080 CURRENT_IRQL: c FAULTING_IP: nt!KiUnwaitThread+19 fffff800`020e2ecd 48099180000000 or qword ptr [rcx+80h],rdx CUSTOMER_CRASH_COUNT: 2 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0xA PROCESS_NAME: System TRAP_FRAME: fffffa60005a3290 -- (.trap 0xfffffa60005a3290) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffffa60005a3448 rbx=0000000000000000 rcx=0000000000000000 rdx=0000000000000100 rsi=0000000000000000 rdi=0000000000000000 rip=fffff800020e2ecd rsp=fffffa60005a3420 rbp=fffffa8005953cd8 r8=0000000000000000 r9=0000000000000000 r10=fffffa8003caf660 r11=fffffa8007bfcb20 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na pe nc nt!KiUnwaitThread+0x19: fffff800`020e2ecd 48099180000000 or qword ptr [rcx+80h],rdx ds:0093:00000000`00000080=???????????????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff800020a51ee to fffff800020a5450 STACK_TEXT: fffffa60`005a3148 fffff800`020a51ee : 00000000`0000000a 00000000`00000080 00000000`0000000c 00000000`00000001 : nt!KeBugCheckEx fffffa60`005a3150 fffff800`020a40cb : 00000000`00000001 fffffa60`005a3350 00000000`00000000 fffffa80`05953c60 : nt!KiBugCheckDispatch+0x6e fffffa60`005a3290 fffff800`020e2ecd : fffffa80`03c8e690 00000000`00000000 00000000`00000000 fffffa80`05953cd8 : nt!KiPageFault+0x20b fffffa60`005a3420 fffff800`02055399 : fffffa80`05953c60 fffffa80`05953cd8 fffffa60`005a3570 00000000`00000000 : nt!KiUnwaitThread+0x19 fffffa60`005a3450 fffff800`020c6bae : 00000000`00000000 fffffa80`06276bb0 00000000`00000000 00000000`00000003 : nt! ?? ::FNODOBFM::`string'+0x277dd fffffa60`005a3510 fffff800`02069779 : fffff800`021dc8a0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x19e fffffa60`005a35b0 fffffa60`010a0d8f : fffffa80`064a3400 fffffa80`064a3180 fffff800`021dc8a0 fffff878`00000004 : nt!KiCheckForKernelApcDelivery+0x25 fffffa60`005a35e0 fffffa60`010c0f8f : fffffa60`005a3b00 fffff880`00160710 fffffa60`005a3700 00000000`00000000 : Ntfs!NtfsTrimUsnJournal+0x9f fffffa60`005a3690 fffffa60`010c4ae6 : fffffa80`07448060 fffffa80`06276bb0 fffffa80`00000000 fffffa60`01013900 : Ntfs!NtfsCheckpointVolume+0x190e fffffa60`005a39f0 fffffa60`010c42f2 : fffffa60`005a3b00 fffffa80`064a3188 fffffa60`005a3b00 00000000`0000003f : Ntfs!NtfsCheckpointAllVolumesWorker+0x56 fffffa60`005a3a40 fffffa60`010c3ff9 : fffffa60`005a3b00 fffffa60`005a3cb0 fffffa60`010c4a90 fffffa80`06276bb0 : Ntfs!NtfsForEachVcb+0x152 fffffa60`005a3ad0 fffff800`020ac8c3 : fffffa60`010c3f40 fffffa60`005a3d00 fffffa80`06276b00 fffffa60`005a3d58 : Ntfs!NtfsCheckpointAllVolumes+0xb9 fffffa60`005a3cf0 fffff800`022afec7 : fffffa60`01068fc8 fffffffe`9a5f4400 fffffa80`06276bb0 00000000`00000080 : nt!ExpWorkerThread+0xfb fffffa60`005a3d50 fffff800`020e2616 : fffffa60`005ec180 fffffa80`06276bb0 fffffa80`06277040 fffffa80`06277138 : nt!PspSystemThreadStartup+0x57 fffffa60`005a3d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16 STACK_COMMAND: kb FOLLOWUP_IP: nt!KiUnwaitThread+19 fffff800`020e2ecd 48099180000000 or qword ptr [rcx+80h],rdx SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: nt!KiUnwaitThread+19 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 4a7801eb FAILURE_BUCKET_ID: X64_0xA_nt!KiUnwaitThread+19 BUCKET_ID: X64_0xA_nt!KiUnwaitThread+19 Followup: MachineOwner ---------