*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C9, {226, fffff88005b17644, fffff9800efc4d30, 0}
Unable to load image \SystemRoot\system32\DRIVERS\ew_usbenumfilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ew_usbenumfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for ew_usbenumfilter.sys
Probably caused by : ew_usbenumfilter.sys ( ew_usbenumfilter+2644 )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_VERIFIER_IOMANAGER_VIOLATION (c9)
The IO manager has caught a misbehaving driver.
Arguments:
Arg1: 0000000000000226, An IRP dispatch handler has returned without passing down or completing this IRP,
or someone forgot to return STATUS_PENDING.
Arg2: fffff88005b17644, The address in the driver's code where the error was detected.
Arg3: fffff9800efc4d30, IRP address.
Arg4: 0000000000000000
Debugging Details:
------------------
BUGCHECK_STR: 0xc9_226
DRIVER_VERIFIER_IO_VIOLATION_TYPE: 226
FAULTING_IP:
ew_usbenumfilter+2644
fffff880`05b17644 488bc4 mov rax,rsp
FOLLOWUP_IP:
ew_usbenumfilter+2644
fffff880`05b17644 488bc4 mov rax,rsp
IRP_ADDRESS: fffff9800efc4d30
DEVICE_OBJECT: fffffa800a3fb040
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME: System
CURRENT_IRQL: 2
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre
LOCK_ADDRESS: fffff80003088da0 -- (!locks fffff80003088da0)
Resource @ nt!PiEngineLock (0xfffff80003088da0) Available
WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.
WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.
1 total locks
PNP_TRIAGE:
Lock address : 0xfffff80003088da0
Thread Count : 0
Thread address: 0x0000000000000000
Thread wait : 0x0
LAST_CONTROL_TRANSFER: from fffff800033114ec to fffff80002e84bc0
STACK_TEXT:
fffff880`031a13d8 fffff800`033114ec : 00000000`000000c9 00000000`00000226 fffff880`05b17644 fffff980`0efc4d30 : nt!KeBugCheckEx
fffff880`031a13e0 fffff800`0331b58a : fffff800`0330fb00 fffff880`05b17644 fffff980`0efc4d30 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`031a1420 fffff800`0331c593 : 00000000`00000226 fffffa80`09eadff8 fffff980`0efc4d30 00000000`ffffffff : nt!ViErrorFinishReport+0xda
fffff880`031a1470 fffff800`033278ac : 00000000`00000000 fffffa80`09eadf40 fffffa80`09eadff8 fffffa80`09eb0ad0 : nt!VfErrorReport1+0x63
fffff880`031a1510 fffff800`03327c73 : fffffa80`09eadf40 00000000`00000002 fffffa80`0a3fb040 fffff800`0331a3b7 : nt!IovpCallDriver2+0x1bc
fffff880`031a1570 fffff800`0332dd3e : fffff980`0efc4d30 fffff980`0efc4d30 00000000`00000002 fffffa80`0a3fb040 : nt!VfAfterCallDriver+0x353
fffff880`031a15c0 fffff800`030f0571 : fffffa80`0a3fb040 fffff880`031a16c0 00000000`c00000bb fffffa80`09eadf40 : nt!IovCallDriver+0x57e
fffff880`031a1620 fffff800`03241b48 : 00000000`c00000bb fffff880`031a1860 fffff880`031a17d8 fffffa80`09eb8a00 : nt!IopSynchronousCall+0xe1
fffff880`031a1690 fffff800`03244590 : 00000000`00000000 fffffa80`0a3b39d0 00000000`00000000 fffffa80`0a3b39d0 : nt!PnpIrpQueryID+0x68
fffff880`031a1720 fffff800`03272cee : fffffa80`0a3b39d0 00000000`00000000 00000000`00000001 00000000`00000001 : nt!PnpQueryID+0x30
fffff880`031a1780 fffff800`03273f28 : fffffa80`09eb1af0 fffffa80`0a3b39d0 fffffa80`09de8780 00000000`00000001 : nt!PiProcessNewDeviceNode+0x12e
fffff880`031a1950 fffff800`03274468 : 00000000`00000000 00000000`00000000 00000000`00000010 fffff800`032743d0 : nt!PipProcessDevNodeTree+0x2e8
fffff880`031a1bc0 fffff800`02f87827 : 00000001`00000003 00000000`00000000 00000000`00000001 00000000`00000084 : nt!PiProcessReenumeration+0x98
fffff880`031a1c10 fffff800`02e8e261 : fffff800`02f87500 fffff800`0317bc01 fffffa80`06bc1b00 00000000`0000055a : nt!PnpDeviceActionWorker+0x327
fffff880`031a1cb0 fffff800`0312073a : 00000000`00000000 fffffa80`06bc1b50 00000000`00000080 fffffa80`06ba9ae0 : nt!ExpWorkerThread+0x111
fffff880`031a1d40 fffff800`02e758e6 : fffff880`02f64180 fffffa80`06bc1b50 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`031a1d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16
STACK_COMMAND: .bugcheck ; kb
SYMBOL_NAME: ew_usbenumfilter+2644
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ew_usbenumfilter
IMAGE_NAME: ew_usbenumfilter.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ba43c18
FAILURE_BUCKET_ID: X64_0xc9_226_VRF_ew_usbenumfilter+2644
BUCKET_ID: X64_0xc9_226_VRF_ew_usbenumfilter+2644
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:x64_0xc9_226_vrf_ew_usbenumfilter+2644
FAILURE_ID_HASH: {4a03b0c5-2d82-cddc-645a-85bf3cce666b}
Followup: MachineOwner
---------
3: kd> lmvm ew_usbenumfilter
start end module name
fffff880`05b15000 fffff880`05b18680 ew_usbenumfilter T (no symbols)
Loaded symbol image file: ew_usbenumfilter.sys
Image path: \SystemRoot\system32\DRIVERS\ew_usbenumfilter.sys
Image name: ew_usbenumfilter.sys
Timestamp: Sat Mar 20 08:38:08 2010 (4BA43C18)
CheckSum: 00011E8B
ImageSize: 00003680
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4