*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {8, 2, 0, fffff880017bea1d}
*** WARNING: Unable to verify timestamp for UrlFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for UrlFilter.sys
Probably caused by : NETIO.SYS ( NETIO!CalloutStreamDataInit+1d )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880017bea1d, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032fd100
GetUlongFromAddress: unable to read from fffff800032fd1c0
0000000000000008 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
NETIO!CalloutStreamDataInit+1d
fffff880`017bea1d 488b5808 mov rbx,qword ptr [rax+8]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: IMF.exe
TRAP_FRAME: fffff8800ad08ce0 -- (.trap 0xfffff8800ad08ce0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8004fe89f0
rdx=fffffa80082767a0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880017bea1d rsp=fffff8800ad08e70 rbp=fffffa8008276770
r8=fffff8800ad08ef0 r9=0000000000000000 r10=0000000000000265
r11=000000000000013c r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
NETIO!CalloutStreamDataInit+0x1d:
fffff880`017bea1d 488b5808 mov rbx,qword ptr [rax+8] ds:00000000`00000008=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800030c5169 to fffff800030c5bc0
STACK_TEXT:
fffff880`0ad08b98 fffff800`030c5169 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0ad08ba0 fffff800`030c3de0 : fffff880`0ad08d60 fffffa80`07856428 00000000`00000000 fffff880`0ad09090 : nt!KiBugCheckDispatch+0x69
fffff880`0ad08ce0 fffff880`017bea1d : fffffa80`04fe8a88 fffffa80`04fe8a80 00000000`00000001 fffff880`017d2807 : nt!KiPageFault+0x260
fffff880`0ad08e70 fffff880`017c80b4 : fffff880`0ad09090 fffff880`0ad09090 fffff880`0ad09290 fffff880`017c677d : NETIO!CalloutStreamDataInit+0x1d
fffff880`0ad08eb0 fffff880`017d3e78 : 00000000`00000000 fffff880`0ad09290 fffff880`0ad09040 fffff880`0ad090c8 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x54
fffff880`0ad08f50 fffff880`017d4e71 : fffffa80`08276770 fffff880`0ad09290 fffff880`0ad09090 fffff880`0ad096e0 : NETIO!StreamCalloutProcessData+0x48
fffff880`0ad08fa0 fffff880`017d5ec8 : fffff880`0ad09090 fffff880`0ad096e0 fffff880`0ad09201 fffffa80`08276770 : NETIO!StreamCalloutProcessingLoop+0xa1
fffff880`0ad09030 fffff880`017b6a2a : fffff880`0ad09290 fffff880`0b443690 00000000`00000000 fffffa80`0b490014 : NETIO!StreamProcessCallout+0x1e8
fffff880`0ad09120 fffff880`0179df58 : 00000000`00000014 fffffa80`0aef9840 fffffa80`0c647e08 fffff880`0ad096e0 : NETIO! ?? ::FNODOBFM::`string'+0x71f2
fffff880`0ad09240 fffff880`0179f5d2 : fffff880`0ad00014 fffffa80`0aef9840 fffffa80`0b496e40 00000000`00000000 : NETIO!ArbitrateAndEnforce+0x238
fffff880`0ad09310 fffff880`017d8393 : fffff880`0ad097b4 fffffa80`0aef9840 00000000`00000001 fffff880`0ad096e0 : NETIO!KfdClassify+0x934
fffff880`0ad09680 fffff880`017d897a : 00000000`00000000 00000000`00010000 00000000`0034682f fffffa80`0b496d80 : NETIO!StreamInternalClassify+0xf3
fffff880`0ad09750 fffff880`017d8d6e : 00000000`00000014 00000000`00000100 00000000`00000000 fffffa80`0c13db20 : NETIO!StreamInject+0x1ca
fffff880`0ad09820 fffff880`01634dd7 : fffffa80`0b496cd0 00000000`00000166 fffffa80`0aec6960 fffff800`031f9d00 : NETIO!FwppStreamInject+0x12e
fffff880`0ad098b0 fffff880`08a43c44 : fffffa80`0b698a80 00000000`00000000 00000000`00000000 fffffa80`03f0c970 : fwpkclnt!FwpsStreamInjectAsync0+0xcf
fffff880`0ad09910 fffffa80`0b698a80 : 00000000`00000000 00000000`00000000 fffffa80`03f0c970 00000000`00000166 : UrlFilter+0x1c44
fffff880`0ad09918 00000000`00000000 : 00000000`00000000 fffffa80`03f0c970 00000000`00000166 00000000`00000014 : 0xfffffa80`0b698a80
STACK_COMMAND: kb
FOLLOWUP_IP:
NETIO!CalloutStreamDataInit+1d
fffff880`017bea1d 488b5808 mov rbx,qword ptr [rax+8]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: NETIO!CalloutStreamDataInit+1d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME: NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 5034f6a0
FAILURE_BUCKET_ID: X64_0xD1_NETIO!CalloutStreamDataInit+1d
BUCKET_ID: X64_0xD1_NETIO!CalloutStreamDataInit+1d
Followup: MachineOwner
---------