IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000730, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800046f0436, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800049080e0
0000000000000730
CURRENT_IRQL: 2
FAULTING_IP:
nt!IopCompleteRequest+c73
fffff800`046f0436 488b09 mov rcx,qword ptr [rcx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: nvtray.exe
IRP_ADDRESS: ffffffffffffff88
TRAP_FRAME: fffff88008d65350 -- (.trap 0xfffff88008d65350)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88008d65718 rbx=0000000000000000 rcx=0000000000000730
rdx=0000000000000730 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800046f0436 rsp=fffff88008d654e0 rbp=fffff88008d65630
r8=fffffa80074f5490 r9=fffff88008d655e0 r10=0000000000000002
r11=fffffa8006f63690 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz ac po cy
nt!IopCompleteRequest+0xc73:
fffff800`046f0436 488b09 mov rcx,qword ptr [rcx] ds:cf68:00000000`00000730=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800046cfca9 to fffff800046d0740
STACK_TEXT:
fffff880`08d65208 fffff800`046cfca9 : 00000000`0000000a 00000000`00000730 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`08d65210 fffff800`046ce920 : fffff880`08d653e0 fffffa80`09400010 fffffa80`0548b1a0 fffffa80`0548c601 : nt!KiBugCheckDispatch+0x69
fffff880`08d65350 fffff800`046f0436 : fffff880`00e8bb00 fffffa80`0955cf68 fffff900`c062d300 fffff880`00e776e4 : nt!KiPageFault+0x260
fffff880`08d654e0 fffff800`046ad0b7 : 00000000`00000000 fffff880`08d656b0 fffffa80`064f2c00 00000000`00000000 : nt!IopCompleteRequest+0xc73
fffff880`08d655b0 fffff800`046ad477 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`08d65630 fffff960`0016dedc : fffffa80`09590c90 00000000`00000030 00000000`00000001 fffff900`c09ea820 : nt!KiApcInterrupt+0xd7
fffff880`08d657c0 fffff960`0016d4d9 : 00000000`00000730 00000000`00000730 fffff880`08d65c00 00000000`ffffffff : win32k!HmgNextOwned+0x3c
fffff880`08d657f0 fffff960`00164cac : 00000000`00000730 fffff880`08d65c00 fffff900`c09ea820 fffff900`00000000 : win32k!NtGdiCloseProcess+0x85
fffff880`08d65850 fffff960`001643f3 : fffffa80`08f8f000 fffff880`08d65c20 fffffa80`09590000 fffffa80`09533060 : win32k!GdiProcessCallout+0x200
fffff880`08d658d0 fffff800`049b36f1 : fffffa80`08f8f090 00000000`00000000 00000000`00000000 fffffa80`09533060 : win32k!W32pProcessCallout+0x6b
fffff880`08d65900 fffff800`0498d735 : 00000000`00000000 fffffa80`09533001 fffffa80`78457300 00000000`00000000 : nt!PspExitThread+0x561
fffff880`08d659c0 fffff800`046ad1cb : 00000000`00000000 00000000`00000000 fffffa80`09548fb0 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`08d659f0 fffff800`046ad610 : 00000000`0035c4e0 fffff880`08d65a70 fffff800`0498d84c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`08d65a70 fffff800`046cfa37 : ffffffff`ffffffff 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitiateUserApc+0x70
fffff880`08d65bb0 00000000`7760f71a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`0288f508 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7760f71a
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!HmgNextOwned+3c
fffff960`0016dedc 385a06 cmp byte ptr [rdx+6],bl
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: win32k!HmgNextOwned+3c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4d23ecb0
FAILURE_BUCKET_ID: X64_0xA_win32k!HmgNextOwned+3c
BUCKET_ID: X64_0xA_win32k!HmgNextOwned+3c
Followup: MachineOwner
---------