Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x83605000 PsLoadedModuleList = 0x8374d810
Debug session time: Sun Oct 31 11:44:59.587 2010 (GMT-4)
System Uptime: 0 days 0:09:27.961
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.......
2: kd> !Analyze
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, a8fab8fc, a8fab4e0, 8c3b382f}
Probably caused by : Ntfs.sys ( Ntfs!NtfsExtendedCompleteRequestInternal+107 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001904fb
Arg2: a8fab8fc
Arg3: a8fab4e0
Arg4: 8c3b382f
Debugging Details:
------------------
EXCEPTION_RECORD: a8fab8fc -- (.exr 0xffffffffa8fab8fc)
ExceptionAddress: 8c3b382f (fltmgr!TreeUnlinkNoBalance+0x00000009)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 2000000c
Attempt to read from address 2000000c
CONTEXT: a8fab4e0 -- (.cxr 0xffffffffa8fab4e0)
eax=ffffffff ebx=00000000 ecx=88ce9a60 edx=00000000 esi=20000000 edi=87041154
eip=8c3b382f esp=a8fab9c4 ebp=a8fab9c8 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
fltmgr!TreeUnlinkNoBalance+0x9:
8c3b382f ff760c push dword ptr [esi+0Ch] ds:0023:2000000c=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: chrome.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 2000000c
READ_ADDRESS: GetPointerFromAddress: unable to read from 8376d718
Unable to read MiSystemVaType memory at 8374d160
2000000c
FOLLOWUP_IP:
Ntfs!NtfsExtendedCompleteRequestInternal+107
8c44aa7b 5f pop edi
FAULTING_IP:
fltmgr!TreeUnlinkNoBalance+9
8c3b382f ff760c push dword ptr [esi+0Ch]
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from 8c3b3af4 to 8c3b382f
STACK_TEXT:
a8fab9c8 8c3b3af4 20000000 87041134 86d033dc fltmgr!TreeUnlinkNoBalance+0x9
a8fab9e0 8c3c7208 87041154 ffffffff ffffffff fltmgr!TreeUnlinkMulti+0x22
a8faba00 8c3c7962 87041100 00004000 ffffffff fltmgr!DeleteNameCacheNodes+0x84
a8faba28 8c3c79f5 86d03008 87041100 00000000 fltmgr!PurgeStreamNameCache+0x96
a8faba50 8c3c7bb5 86d03008 00000000 88ce0990 fltmgr!FltpPurgeVolumeNameCache+0x77
a8faba6c 8c3c81c9 85eb2d98 88dc3b60 00000000 fltmgr!FltpReinstateNameCaching+0x65
a8faba8c 8c3aeb40 86d03008 88dc3b60 00000000 fltmgr!FltpReinstateNameCachingAllFrames+0x45
a8fabaac 8366db33 86cfb300 8843f820 88ce0990 fltmgr!FltpPassThroughCompletion+0x92
a8fabaf4 8c44aa7b 0000000a b194c0f8 88cb10b8 nt!IopfCompleteRequest+0x128
a8fabb0c 8c4ebfbc 88cb10b8 8843f820 00000000 Ntfs!NtfsExtendedCompleteRequestInternal+0x107
a8fabb84 8c45832b 88cb10b8 8843f820 24bd70d3 Ntfs!NtfsCommonSetInformation+0x84d
a8fabbf0 836414bc 86d04020 8843f820 8843f820 Ntfs!NtfsFsdSetInformation+0x107
a8fabc08 8c3af20c 86cfb300 8843f820 00000000 nt!IofCallDriver+0x63
a8fabc2c 8c3af3cb a8fabc4c 86cfb300 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
a8fabc64 836414bc 86cfb300 8843f820 00000000 fltmgr!FltpDispatch+0xc5
a8fabc7c 8385597f 8f6544c7 000002a8 02bdf580 nt!IofCallDriver+0x63
a8fabd18 8364844a 000002a8 02bdf5f8 048743d0 nt!NtSetInformationFile+0xa3f
a8fabd18 775064f4 000002a8 02bdf5f8 048743d0 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
02bdf638 00000000 00000000 00000000 00000000 0x775064f4
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: Ntfs!NtfsExtendedCompleteRequestInternal+107
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bbf45
STACK_COMMAND: .cxr 0xffffffffa8fab4e0 ; kb
FAILURE_BUCKET_ID: 0x24_Ntfs!NtfsExtendedCompleteRequestInternal+107
BUCKET_ID: 0x24_Ntfs!NtfsExtendedCompleteRequestInternal+107
Followup: MachineOwner
---------