Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 6f8, fffff80004302ddc}
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : MpFilter.sys ( MpFilter+17f4e )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80004302ddc
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre
LAST_CONTROL_TRANSFER: from fffff800042eea00 to fffff8000431965d
STACK_TEXT:
fffff880`02957280 fffff800`042eea00 : fffff880`029573d0 fffffa80`04639eb0 fffffa80`037817f0 fffffa80`04639c60 : nt! ?? ::FNODOBFM::`string'+0x35a3
fffff880`029572b0 fffff800`042b8535 : fffffa80`037818a0 00000000`00000000 fffffa80`00000000 fffffa80`04639eb0 : nt!RtlpGetStackLimits+0x14
fffff880`029572f0 fffff880`011c3f4e : 00000000`00000000 00000000`00000000 fffffa80`03781700 fffff880`01269400 : nt!IoGetStackLimits+0x15
fffff880`02957320 00000000`00000000 : 00000000`00000000 fffffa80`03781700 fffff880`01269400 fffff800`0443fe80 : MpFilter+0x17f4e
STACK_COMMAND: kb
FOLLOWUP_IP:
MpFilter+17f4e
fffff880`011c3f4e ?? ???
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: MpFilter+17f4e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: MpFilter
IMAGE_NAME: MpFilter.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 545532e8
FAILURE_BUCKET_ID: X64_0x7f_8_MpFilter+17f4e
BUCKET_ID: X64_0x7f_8_MpFilter+17f4e
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0x7f_8_mpfilter+17f4e
FAILURE_ID_HASH: {d46d2f7b-9618-cde0-78c0-8942cc91b721}
Followup: MachineOwner
---------