*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {8a, 2, 1, fffff88009134d95}
*** WARNING: Unable to verify timestamp for NETwNs64.sys
*** ERROR: Module load completed but symbols could not be loaded for NETwNs64.sys
Probably caused by : NETwNs64.sys ( NETwNs64+bbd95 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000008a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff88009134d95, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f02100
GetUlongFromAddress: unable to read from fffff80002f021c0
000000000000008a Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
NETwNs64+bbd95
fffff880`09134d95 20488b and byte ptr [rax-75h],cl
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: System
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
DPC_STACK_BASE: FFFFF88003122FB0
TRAP_FRAME: fffff8800311b680 -- (.trap 0xfffff8800311b680)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000000000ff rbx=0000000000000000 rcx=fffffa800916a250
rdx=fffffa800916a250 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88009134d95 rsp=fffff8800311b818 rbp=0000000000000000
r8=000000000001e115 r9=0000000000000000 r10=0001e1150001e115
r11=fffffa80093eacd8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
NETwNs64+0xbbd95:
fffff880`09134d95 20488b and byte ptr [rax-75h],cl ds:00000000`0000008a=??
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cca169 to fffff80002ccabc0
STACK_TEXT:
fffff880`0311b538 fffff800`02cca169 : 00000000`0000000a 00000000`0000008a 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0311b540 fffff800`02cc8de0 : 00000000`000005c7 fffff880`091404c7 fffffa80`0916a258 fffffa80`0916a250 : nt!KiBugCheckDispatch+0x69
fffff880`0311b680 fffff880`09134d95 : fffff880`09134ce1 00000000`0000420a fffffa80`0a2090b0 ffff0000`0a58f4b2 : nt!KiPageFault+0x260
fffff880`0311b818 fffff880`09134ce1 : 00000000`0000420a fffffa80`0a2090b0 ffff0000`0a58f4b2 fffff880`0914b144 : NETwNs64+0xbbd95
fffff880`0311b820 00000000`0000420a : fffffa80`0a2090b0 ffff0000`0a58f4b2 fffff880`0914b144 fffffa80`0916a250 : NETwNs64+0xbbce1
fffff880`0311b828 fffffa80`0a2090b0 : ffff0000`0a58f4b2 fffff880`0914b144 fffffa80`0916a250 fffff880`09134cb0 : 0x420a
fffff880`0311b830 ffff0000`0a58f4b2 : fffff880`0914b144 fffffa80`0916a250 fffff880`09134cb0 fffffa80`0916a5ac : 0xfffffa80`0a2090b0
fffff880`0311b838 fffff880`0914b144 : fffffa80`0916a250 fffff880`09134cb0 fffffa80`0916a5ac fffffa80`0916a258 : 0xffff0000`0a58f4b2
fffff880`0311b840 fffffa80`0916a250 : fffff880`09134cb0 fffffa80`0916a5ac fffffa80`0916a258 fffffa80`0a2090b0 : NETwNs64+0xd2144
fffff880`0311b848 fffff880`09134cb0 : fffffa80`0916a5ac fffffa80`0916a258 fffffa80`0a2090b0 fffffa80`0916a250 : 0xfffffa80`0916a250
fffff880`0311b850 fffffa80`0916a5ac : fffffa80`0916a258 fffffa80`0a2090b0 fffffa80`0916a250 fffffa80`093e8098 : NETwNs64+0xbbcb0
fffff880`0311b858 fffffa80`0916a258 : fffffa80`0a2090b0 fffffa80`0916a250 fffffa80`093e8098 fffff880`09131e21 : 0xfffffa80`0916a5ac
fffff880`0311b860 fffffa80`0a2090b0 : fffffa80`0916a250 fffffa80`093e8098 fffff880`09131e21 fffffa80`0916a250 : 0xfffffa80`0916a258
fffff880`0311b868 fffffa80`0916a250 : fffffa80`093e8098 fffff880`09131e21 fffffa80`0916a250 fffffa80`0916a250 : 0xfffffa80`0a2090b0
fffff880`0311b870 fffffa80`093e8098 : fffff880`09131e21 fffffa80`0916a250 fffffa80`0916a250 fffffa80`0a2090b0 : 0xfffffa80`0916a250
fffff880`0311b878 fffff880`09131e21 : fffffa80`0916a250 fffffa80`0916a250 fffffa80`0a2090b0 fffff880`09109002 : 0xfffffa80`093e8098
fffff880`0311b880 fffffa80`0916a250 : fffffa80`0916a250 fffffa80`0a2090b0 fffff880`09109002 00000000`00000000 : NETwNs64+0xb8e21
fffff880`0311b888 fffffa80`0916a250 : fffffa80`0a2090b0 fffff880`09109002 00000000`00000000 00000000`00000000 : 0xfffffa80`0916a250
fffff880`0311b890 fffffa80`0a2090b0 : fffff880`09109002 00000000`00000000 00000000`00000000 fffffa80`0916a250 : 0xfffffa80`0916a250
fffff880`0311b898 fffff880`09109002 : 00000000`00000000 00000000`00000000 fffffa80`0916a250 fffff880`09139e99 : 0xfffffa80`0a2090b0
fffff880`0311b8a0 00000000`00000000 : 00000000`00000000 fffffa80`0916a250 fffff880`09139e99 fffffa80`0a2090b0 : NETwNs64+0x90002
STACK_COMMAND: kb
FOLLOWUP_IP:
NETwNs64+bbd95
fffff880`09134d95 20488b and byte ptr [rax-75h],cl
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: NETwNs64+bbd95
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETwNs64
IMAGE_NAME: NETwNs64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4f1de2b7
FAILURE_BUCKET_ID: X64_0xD1_NETwNs64+bbd95
BUCKET_ID: X64_0xD1_NETwNs64+bbd95
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0xd1_netwns64+bbd95
FAILURE_ID_HASH: {1280c881-c840-875f-734b-b598ab1c2831}
Followup: MachineOwner
---------
1: kd> lmvm NETwNs64
start end module name
fffff880`09079000 fffff880`09901000 NETwNs64 T (no symbols)
Loaded symbol image file: NETwNs64.sys
Image path: NETwNs64.sys
Image name: NETwNs64.sys
Timestamp: Tue Jan 24 04:14:07 2012 (4F1DE2B7)
CheckSum: 00839C1E
ImageSize: 00888000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4