*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
REFERENCE_BY_POINTER (18)
Arguments:
Arg1: fffffa8006a82270, Object type of the object whose reference count is being lowered
Arg2: fffffa800be1e470, Object whose reference count is being lowered
Arg3: 0000000000000001, Reserved
Arg4: 0000000000000001, Reserved
The reference count of an object is illegal for the current state of the object.
Each time a driver uses a pointer to an object the driver calls a kernel routine
to increment the reference count of the object. When the driver is done with the
pointer the driver calls another kernel routine to decrement the reference count.
Drivers must match calls to the increment and decrement routines. This bugcheck
can occur because an object's reference count goes to zero while there are still
open handles to the object, in which case the fourth parameter indicates the number
of opened handles. It may also occur when the objects reference count drops below zero
whether or not there are open handles to the object, and in that case the fourth parameter
contains the actual value of the pointer references count.
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x18
PROCESS_NAME: hng.exe
CURRENT_IRQL: 2
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre
DPC_STACK_BASE: FFFFF80000BA2FB0
LAST_CONTROL_TRANSFER: from fffff80003c1bdbd to fffff80003c75bc0
STACK_TEXT:
fffff800`00ba2ae8 fffff800`03c1bdbd : 00000000`00000018 fffffa80`06a82270 fffffa80`0be1e470 00000000`00000001 : nt!KeBugCheckEx
fffff800`00ba2af0 fffff880`0f671820 : 00000000`0000001f fffff880`069e40f8 fffffa80`0be1e470 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x48d8a
fffff800`00ba2b50 00000000`0000001f : fffff880`069e40f8 fffffa80`0be1e470 00000000`00000000 00000000`75222450 : atikmdag+0x26820
fffff800`00ba2b58 fffff880`069e40f8 : fffffa80`0be1e470 00000000`00000000 00000000`75222450 00000000`00000022 : 0x1f
fffff800`00ba2b60 fffffa80`0be1e470 : 00000000`00000000 00000000`75222450 00000000`00000022 fffff800`00ba2c90 : 0xfffff880`069e40f8
fffff800`00ba2b68 00000000`00000000 : 00000000`75222450 00000000`00000022 fffff800`00ba2c90 fffff880`0f673388 : 0xfffffa80`0be1e470
STACK_COMMAND: kb
FOLLOWUP_IP:
atikmdag+26820
fffff880`0f671820 ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: atikmdag+26820
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: atikmdag
IMAGE_NAME: atikmdag.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 53bd610a
FAILURE_BUCKET_ID: X64_0x18_CORRUPT_REF_COUNT_atikmdag+26820
BUCKET_ID: X64_0x18_CORRUPT_REF_COUNT_atikmdag+26820
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0x18_corrupt_ref_count_atikmdag+26820
FAILURE_ID_HASH: {adf2330e-769c-9b39-2c9a-a33e24fb9262}
Followup: MachineOwner
---------
0: kd> lmvm atikmdag
start end module name
fffff880`0f64b000 fffff880`105f4000 atikmdag T (no symbols)
Loaded symbol image file: atikmdag.sys
Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
Image name: atikmdag.sys
Timestamp: Wed Jul 09 17:34:34 2014 (53BD610A)
CheckSum: 00F46306
ImageSize: 00FA9000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
