*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {0, 2, 1, fffff80002cce0cf}
*** WARNING: Unable to verify timestamp for SYMNETS.SYS
*** ERROR: Module load completed but symbols could not be loaded for [B]SYMNETS.SYS[/B]
Probably caused by : [B]NETIO.SYS[/B] ( NETIO!WfpExpireEntryLru+17 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cce0cf, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002efd100
GetUlongFromAddress: unable to read from fffff80002efd1c0
0000000000000000 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
fffff800`02cce0cf 488713 xchg rdx,qword ptr [rbx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: nis.exe
ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre
TRAP_FRAME: fffff8800bbcff30 -- (.trap 0xfffff8800bbcff30)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800b980ad0 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff8800bbd0130 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cce0cf rsp=fffff8800bbd00c0 rbp=0000000000000004
r8=fffff8800bbd0130 r9=fffff8800198ac90 r10=0000000000000000
r11=0000000000000040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f:
fffff800`02cce0cf 488713 xchg rdx,qword ptr [rbx] ds:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cc3469 to fffff80002cc3ec0
STACK_TEXT:
fffff880`0bbcfde8 fffff800`02cc3469 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0bbcfdf0 fffff800`02cc20e0 : 00000000`00000010 fffff880`0bbd0120 00000000`0000000b 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0bbcff30 fffff800`02cce0cf : 00000000`00000003 00000000`00000002 00000000`00000003 00000000`00000002 : nt!KiPageFault+0x260
fffff880`0bbd00c0 fffff880`017579c7 : 00000000`00000004 fffff880`0bbd03a0 00000000`0000d40d fffffa80`0c7eb7c8 : nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f
fffff880`0bbd0110 fffff880`018e608d : fffffa80`10c42580 fffffa80`0cfc8550 fffff880`0bbd03a0 00000000`0000d40d : NETIO!WfpExpireEntryLru+0x17
fffff880`0bbd0160 fffff880`018ad7b7 : 00000000`00000004 fffff8a0`08780032 fffff880`0bbd03d0 fffffa80`00000001 : tcpip!WfpAleCloseRemoteEndpointConnection+0x2d
fffff880`0bbd0190 fffff880`01925e5b : fffffa80`10c42580 fffffa80`107bb56a 00000000`00000001 fffffa80`10c42580 : tcpip! ?? ::FNODOBFM::`string'+0x20f72
fffff880`0bbd02e0 fffff880`019261e2 : 00000dd4`0000000b fffffa80`107bb4a0 fffffa80`09f6cea0 00000000`00000001 : tcpip!WfpAleHandleSendCompletion+0xeb
fffff880`0bbd0400 fffff880`019306b2 : 00000000`00000000 00000000`00000001 00000000`00000000 fffffa80`09fb84e8 : tcpip!WfpAlepAuthorizeSendCompletion+0x32
fffff880`0bbd0450 fffff880`01551af2 : 00000000`00000dd4 00000000`00000dd4 fffffa80`102a2e00 00000000`00000001 : tcpip!WfpAleCompleteOperation+0x162
fffff880`0bbd04f0 fffff880`0b41e7bb : 00000000`00000000 00000000`00000000 fffffa80`1055b130 00000000`00000030 : fwpkclnt!FwpsCompleteOperation0+0x1e
fffff880`0bbd0520 00000000`00000000 : 00000000`00000000 fffffa80`1055b130 00000000`00000030 00000000`00000dd4 : SYMNETS+0x1e7bb
STACK_COMMAND: kb
FOLLOWUP_IP:
NETIO!WfpExpireEntryLru+17
fffff880`017579c7 488b4310 mov rax,qword ptr [rbx+10h]
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: NETIO!WfpExpireEntryLru+17
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME: NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 5294760d
IMAGE_VERSION: 6.1.7601.18327
FAILURE_BUCKET_ID: X64_0xA_NETIO!WfpExpireEntryLru+17
BUCKET_ID: X64_0xA_NETIO!WfpExpireEntryLru+17
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0xa_netio!wfpexpireentrylru+17
FAILURE_ID_HASH: {fcdee258-ad7b-b100-5f3a-ac9544c5fd1f}
Followup: MachineOwner
---------
