[B][FONT=Book Antiqua]
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 3ce156e8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82c9d96c, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82d68828
Unable to read MiSystemVaType memory at 82d48d80
3ce156e8
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExDeleteResourceLite+89
82c9d96c 894804 mov dword ptr [eax+4],ecx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: 80e32a5c -- (.trap 0xffffffff80e32a5c)
ErrCode = 00000002
eax=3ce156e4 ebx=00000000 ecx=8585def9 edx=857a1d48 esi=82d69580 edi=85db2714
eip=82c9d96c esp=80e32ad0 ebp=80e32ae4 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!ExDeleteResourceLite+0x89:
82c9d96c 894804 mov dword ptr [eax+4],ecx ds:0023:3ce156e8=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82c9d96c to 82c41c9b
STACK_TEXT:
80e32a5c 82c9d96c badb0d00 857a1d48 82c633c4 nt!KiTrap0E+0x2cf
80e32ae4 8c50bbec 85db2714 85db26f0 80e32b00 nt!ExDeleteResourceLite+0x89
80e32af4 8c50c748 85db26f0 80e32b18 8c5a05ec Ntfs!NtfsFreeNonpagedIndexFcb+0x13
80e32b00 8c5a05ec 8c5392a0 85db26f0 85df05e8 Ntfs!ExFreeToNPagedLookasideList+0x1e
80e32b18 8c591199 85db26f0 00000000 85b3c240 Ntfs!NtfsDeleteNonpagedFcb+0x3c
80e32b40 8c50bb29 85df05e8 80e32b70 80e32b7a Ntfs!NtfsDeleteFcb+0xd5
80e32b94 8c5a0372 85df05e8 85b3c0d8 a9c06b08 Ntfs!NtfsTeardownFromLcb+0x24f
80e32be4 8c5102cb 85df05e8 a9c06bf8 01000000 Ntfs!NtfsTeardownStructures+0xf3
80e32c0c 8c5a4341 85df05e8 a9c06bf8 00000000 Ntfs!NtfsDecrementCloseCounts+0xaf
80e32c6c 8c5a8424 85df05e8 a9c06bf8 a9c06b08 Ntfs!NtfsCommonClose+0x4f2
80e32d00 82c64183 00000000 00000000 857a1d48 Ntfs!NtfsFspClose+0x118
80e32d50 82df1400 00000000 b08749c1 00000000 nt!ExpWorkerThread+0x10d
80e32d90 82c92979 82c64076 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExDeleteResourceLite+89
82c9d96c 894804 mov dword ptr [eax+4],ecx
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!ExDeleteResourceLite+89
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4d9fd76c
FAILURE_BUCKET_ID: 0xA_nt!ExDeleteResourceLite+89
BUCKET_ID: 0xA_nt!ExDeleteResourceLite+89
Followup: MachineOwner
--------[/FONT][/B][FONT=Book Antiqua][B]-[/B] [/FONT]