*** WARNING: Unable to verify timestamp for bckd.sys
*** ERROR: Module load completed but symbols could not be loaded for bckd.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {ffffffffc0000005, fffff8800c895d7b, fffff8800ca8d798, fffff8800ca8cff0}
Probably caused by : bckd.sys ( bckd+1d7b )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8800c895d7b, The address that the exception occurred at
Arg3: fffff8800ca8d798, Exception Record Address
Arg4: fffff8800ca8cff0, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
FAULTING_IP:
bckd+1d7b
fffff880`0c895d7b 448a09 mov r9b,byte ptr [rcx]
EXCEPTION_RECORD: fffff8800ca8d798 -- (.exr 0xfffff8800ca8d798)
ExceptionAddress: fffff8800c895d7b (bckd+0x0000000000001d7b)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000000
Attempt to read from address 0000000000000000
CONTEXT: fffff8800ca8cff0 -- (.cxr 0xfffff8800ca8cff0;r)
rax=0000000000000000 rbx=fffff8800c8a72a0 rcx=0000000000000000
rdx=fffff8800ca8da58 rsi=0000000000000000 rdi=0000000000001000
rip=fffff8800c895d7b rsp=fffff8800ca8d9d8 rbp=fffffa801618d0a8
r8=fffff8800ca8da60 r9=fffff80002ebd000 r10=0000000000000000
r11=fffff8800ca8d920 r12=fffffa8016bae340 r13=fffffa801618f0d8
r14=fffffa801618f260 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
bckd+0x1d7b:
fffff880`0c895d7b 448a09 mov r9b,byte ptr [rcx] ds:002b:00000000`00000000=??
Last set context:
rax=0000000000000000 rbx=fffff8800c8a72a0 rcx=0000000000000000
rdx=fffff8800ca8da58 rsi=0000000000000000 rdi=0000000000001000
rip=fffff8800c895d7b rsp=fffff8800ca8d9d8 rbp=fffffa801618d0a8
r8=fffff8800ca8da60 r9=fffff80002ebd000 r10=0000000000000000
r11=fffff8800ca8d920 r12=fffffa8016bae340 r13=fffffa801618f0d8
r14=fffffa801618f260 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
bckd+0x1d7b:
fffff880`0c895d7b 448a09 mov r9b,byte ptr [rcx] ds:002b:00000000`00000000=??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: NULL_DEREFERENCE
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030b7100
GetUlongFromAddress: unable to read from fffff800030b71c0
0000000000000000 Nonpaged pool
FOLLOWUP_IP:
bckd+1d7b
fffff880`0c895d7b 448a09 mov r9b,byte ptr [rcx]
BUGCHECK_STR: 0x7E
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
LAST_CONTROL_TRANSFER: from fffff8800c8976db to fffff8800c895d7b
STACK_TEXT:
fffff880`0ca8d9d8 fffff880`0c8976db : fffffa80`0f314800 fffff880`0c8a8090 00000000`00001000 fffffa80`1618f0d8 : bckd+0x1d7b
fffff880`0ca8d9e0 fffffa80`0f314800 : fffff880`0c8a8090 00000000`00001000 fffffa80`1618f0d8 fffff880`0c8ab0e0 : bckd+0x36db
fffff880`0ca8d9e8 fffff880`0c8a8090 : 00000000`00001000 fffffa80`1618f0d8 fffff880`0c8ab0e0 fffffa80`1618f260 : 0xfffffa80`0f314800
fffff880`0ca8d9f0 00000000`00001000 : fffffa80`1618f0d8 fffff880`0c8ab0e0 fffffa80`1618f260 fffffa80`1618d080 : bckd+0x14090
fffff880`0ca8d9f8 fffffa80`1618f0d8 : fffff880`0c8ab0e0 fffffa80`1618f260 fffffa80`1618d080 fffffa80`1618f260 : 0x1000
fffff880`0ca8da00 fffff880`0c8ab0e0 : fffffa80`1618f260 fffffa80`1618d080 fffffa80`1618f260 fffffa80`1618d000 : 0xfffffa80`1618f0d8
fffff880`0ca8da08 fffffa80`1618f260 : fffffa80`1618d080 fffffa80`1618f260 fffffa80`1618d000 00000000`00000001 : bckd+0x170e0
fffff880`0ca8da10 fffffa80`1618d080 : fffffa80`1618f260 fffffa80`1618d000 00000000`00000001 00000000`00001000 : 0xfffffa80`1618f260
fffff880`0ca8da18 fffffa80`1618f260 : fffffa80`1618d000 00000000`00000001 00000000`00001000 fffffa80`16bae340 : 0xfffffa80`1618d080
fffff880`0ca8da20 fffffa80`1618d000 : 00000000`00000001 00000000`00001000 fffffa80`16bae340 fffffa80`1618d0a8 : 0xfffffa80`1618f260
fffff880`0ca8da28 00000000`00000001 : 00000000`00001000 fffffa80`16bae340 fffffa80`1618d0a8 fffff880`0c89517b : 0xfffffa80`1618d000
fffff880`0ca8da30 00000000`00001000 : fffffa80`16bae340 fffffa80`1618d0a8 fffff880`0c89517b fffffa80`0f415468 : 0x1
fffff880`0ca8da38 fffffa80`16bae340 : fffffa80`1618d0a8 fffff880`0c89517b fffffa80`0f415468 fffffa80`1618d0b9 : 0x1000
fffff880`0ca8da40 fffffa80`1618d0a8 : fffff880`0c89517b fffffa80`0f415468 fffffa80`1618d0b9 00000000`00000fef : 0xfffffa80`16bae340
fffff880`0ca8da48 fffff880`0c89517b : fffffa80`0f415468 fffffa80`1618d0b9 00000000`00000fef fffff800`02ebd090 : 0xfffffa80`1618d0a8
fffff880`0ca8da50 fffffa80`0f415468 : fffffa80`1618d0b9 00000000`00000fef fffff800`02ebd090 fffffa80`1618d000 : bckd+0x117b
fffff880`0ca8da58 fffffa80`1618d0b9 : 00000000`00000fef fffff800`02ebd090 fffffa80`1618d000 fffffa80`16bae340 : 0xfffffa80`0f415468
fffff880`0ca8da60 00000000`00000fef : fffff800`02ebd090 fffffa80`1618d000 fffffa80`16bae340 00000000`0000005c : 0xfffffa80`1618d0b9
fffff880`0ca8da68 fffff800`02ebd090 : fffffa80`1618d000 fffffa80`16bae340 00000000`0000005c 00000000`00000000 : 0xfef
fffff880`0ca8da70 fffffa80`1618d000 : fffffa80`16bae340 00000000`0000005c 00000000`00000000 fffff880`0c8a1200 : nt! ?? ::FNODOBFM::`string'
fffff880`0ca8da78 fffffa80`16bae340 : 00000000`0000005c 00000000`00000000 fffff880`0c8a1200 fffffa80`0f17d001 : 0xfffffa80`1618d000
fffff880`0ca8da80 00000000`0000005c : 00000000`00000000 fffff880`0c8a1200 fffffa80`0f17d001 fffffa80`16bae340 : 0xfffffa80`16bae340
fffff880`0ca8da88 00000000`00000000 : fffff880`0c8a1200 fffffa80`0f17d001 fffffa80`16bae340 fffff880`0c89ed7a : 0x5c
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: bckd+1d7b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: bckd
IMAGE_NAME: bckd.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 52e29d52
STACK_COMMAND: .cxr 0xfffff8800ca8cff0 ; kb
FAILURE_BUCKET_ID: X64_0x7E_bckd+1d7b
BUCKET_ID: X64_0x7E_bckd+1d7b
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0x7e_bckd+1d7b
FAILURE_ID_HASH: {bb2078fb-e68a-81bb-931a-54936e164ef5}
Followup: MachineOwner
---------
3: kd> lmvm bckd
start end module name
fffff880`0c894000 fffff880`0c8b5000 bckd T (no symbols)
Loaded symbol image file: bckd.sys
Image path: \SystemRoot\system32\drivers\bckd.sys
Image name: bckd.sys
Timestamp: Fri Jan 24 22:35:22 2014 (52E29D52)
CheckSum: 00024AE8
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4