*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002c83cdc, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: 0000000000000000
CURRENT_IRQL: 2
FAULTING_IP:
nt!KeWaitForSingleObject+17c
fffff800`02c83cdc 4c8938 mov qword ptr [rax],r15
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: ekrn.exe
TRAP_FRAME: fffff8800b154600 -- (.trap 0xfffff8800b154600)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff8a0002e6ac8
rdx=0000000000000028 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002c83cdc rsp=fffff8800b154790 rbp=0000000000000000
r8=fffff78000000008 r9=0000000000000000 r10=0000000000000000
r11=fffff880031d5180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
nt!KeWaitForSingleObject+0x17c:
fffff800`02c83cdc 4c8938 mov qword ptr [rax],r15 ds:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002c79ca9 to fffff80002c7a740
STACK_TEXT:
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KeWaitForSingleObject+17c
fffff800`02c83cdc 4c8938 mov qword ptr [rax],r15
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!KeWaitForSingleObject+17c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0xA_nt!KeWaitForSingleObject+17c
BUCKET_ID: X64_0xA_nt!KeWaitForSingleObject+17c
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CACHE_MANAGER (34)
See the comment for FAT_FILE_SYSTEM (0x23)
Arguments:
Arg1: 0000000000050830
Arg2: fffff8800337e808
Arg3: fffff8800337e070
Arg4: fffff80002f7edcf
Debugging Details:
------------------
EXCEPTION_RECORD: fffff8800337e808 -- (.exr 0xfffff8800337e808)
ExceptionAddress: fffff80002f7edcf (nt!MiSectionDelete+0x000000000000003f)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff8800337e070 -- (.cxr 0xfffff8800337e070)
rax=fffff8a00ec72110 rbx=6d536d4d00010311 rcx=fffff8a00f5f32a0
rdx=00000000746c6644 rsi=0000000000000000 rdi=fffff8a00f5f32a0
rip=fffff80002f7edcf rsp=fffff8800337ea40 rbp=0000000000000002
r8=fffffa8010e70750 r9=fffff8800337e8c8 r10=fffffa8007c0b7c0
r11=fffff8800337eab0 r12=fffff80002ec7800 r13=0000000000000000
r14=00000000ffffffff r15=0000000000000001
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!MiSectionDelete+0x3f:
fffff800`02f7edcf 0fba633814 bt dword ptr [rbx+38h],14h ds:002b:6d536d4d`00010349=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: ffffffffffffffff
FOLLOWUP_IP:
nt!MiSectionDelete+3f
fffff800`02f7edcf 0fba633814 bt dword ptr [rbx+38h],14h
FAULTING_IP:
nt!MiSectionDelete+3f
fffff800`02f7edcf 0fba633814 bt dword ptr [rbx+38h],14h
BUGCHECK_STR: 0x34
LAST_CONTROL_TRANSFER: from fffff80002c928b4 to fffff80002f7edcf
STACK_TEXT:
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiSectionDelete+3f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
STACK_COMMAND: .cxr 0xfffff8800337e070 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x34_nt!MiSectionDelete+3f
BUCKET_ID: X64_0x34_nt!MiSectionDelete+3f
Followup: MachineOwner
---------
yk62x64.sys Mon Sep 28 04:19:31 2009 (4AC07193)
[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Tue Jan 4 16:44:54.088 2011 (UTC - 5:00)
System Uptime: 0 days 0:12:27.883
*** WARNING: Unable to verify timestamp for atikmpag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmpag.sys
Probably caused by : atikmpag.sys ( atikmpag+7008 )
DEFAULT_BUCKET_ID: GRAPHICS_DRIVER_TDR_FAULT
BUGCHECK_STR: 0x116
PROCESS_NAME: System
FAILURE_BUCKET_ID: X64_0x116_IMAGE_atikmpag.sys
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]