IRQL_GT_ZERO_AT_SYSTEM_SERVICE
Code: 0x4a (74)
As HRESULT:- S: 0 (Success)
- C: 0 (Microsoft-defined)
- N: 0 (Not an NTSTATUS value)
- Facility: 0x000 (FACILITY_NULL: Default)
- Code: 0x004a (74)
- Sev: 0 (STATUS_SEVERITY_SUCCESS)
- C: 0 (Microsoft-defined)
- Facility: 0x000 (Default)
- Code: 0x004a (74)
Parameters
| Parameter | Description |
|---|---|
| 1 | The address of the system function (system call routine) |
| 2 | The current IRQL |
| 3 | 0 |
| 4 | 0 |
Description
The IRQL_GT_ZERO_AT_SYSTEM_SERVICE bug check has a value of 0x0000004A. This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL.
Important
This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.
Resolution
The !analyze debug extension displays information about the bug check and can be helpful in determining the root cause.
Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.
Associated Modules
| Module | Code | Found in | Description |
|---|---|---|---|
| EventCreate.exe | 0x4a | 78.11011 | %1 |
| cipher.exe | 0x4a | 8.11011 | Enterprise Protected |
| dsreg.dll | 0x4a | 1011 | The existing NGC container was successfully deleted. User SID: %1 IDP domain: %2 Tenant domain: %3 |
| dssec.dll | 0x4a | 78.11011 | MS-TS-GatewayAccess |
| ehepgres.dll | 0x4a | 7 | %1 |
| nslookup.exe | 0x4a | 78.11011 | No response from server |
| webservices.dll | 0x4a | 78.11011 | The framing mode was not supported. |
| wevtutil.exe | 0x4a | 78.11011 | Provider %1 manifest has declared a channel %2 that uses a non-supported type %3 |
| 8 entries | |||