| 1 | Microsoft (R) Windows Debugger Version 6.2.9200.16384 AMD64
|
|---|
| 2 | Copyright (c) Microsoft Corporation. All rights reserved.
|
|---|
| 3 |
|
|---|
| 4 |
|
|---|
| 5 | Loading Dump File [C:\Windows\MEMORY.DMP]
|
|---|
| 6 | Kernel Bitmap Dump File: Only kernel address space is available
|
|---|
| 7 |
|
|---|
| 8 | Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
|
|---|
| 9 | Executable search path is:
|
|---|
| 10 | Windows 8 Kernel Version 9200 MP (4 procs) Free x64
|
|---|
| 11 | Product: WinNt, suite: TerminalServer SingleUserTS
|
|---|
| 12 | Built by: 9200.16461.amd64fre.win8_gdr.121119-1606
|
|---|
| 13 | Machine Name:
|
|---|
| 14 | Kernel base = 0xfffff801`45c19000 PsLoadedModuleList = 0xfffff801`45ee3a80
|
|---|
| 15 | Debug session time: Wed Feb 6 22:00:37.498 2013 (UTC + 1:00)
|
|---|
| 16 | System Uptime: 0 days 11:19:03.150
|
|---|
| 17 | Loading Kernel Symbols
|
|---|
| 18 | ...............................................................
|
|---|
| 19 | ................................................................
|
|---|
| 20 | .............................................
|
|---|
| 21 | Loading User Symbols
|
|---|
| 22 |
|
|---|
| 23 | Loading unloaded module list
|
|---|
| 24 | ........................
|
|---|
| 25 | *******************************************************************************
|
|---|
| 26 | * *
|
|---|
| 27 | * Bugcheck Analysis *
|
|---|
| 28 | * *
|
|---|
| 29 | *******************************************************************************
|
|---|
| 30 |
|
|---|
| 31 | Use !analyze -v to get detailed debugging information.
|
|---|
| 32 |
|
|---|
| 33 | BugCheck 9F, {3, fffffa80069c49f0, fffff80145b3f920, fffffa8019ecae10}
|
|---|
| 34 |
|
|---|
| 35 | *** ERROR: Module load completed but symbols could not be loaded for VBoxNetFlt.sys
|
|---|
| 36 | Probably caused by : ntkrnlmp
|
|---|
| 37 |
|
|---|
| 38 | Followup: MachineOwner
|
|---|
| 39 | ---------
|
|---|
| 40 |
|
|---|
| 41 | 0: kd> !analyze -v
|
|---|
| 42 | *******************************************************************************
|
|---|
| 43 | * *
|
|---|
| 44 | * Bugcheck Analysis *
|
|---|
| 45 | * *
|
|---|
| 46 | *******************************************************************************
|
|---|
| 47 |
|
|---|
| 48 | DRIVER_POWER_STATE_FAILURE (9f)
|
|---|
| 49 | A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
|
|---|
| 50 | Arguments:
|
|---|
| 51 | Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
|
|---|
| 52 | Arg2: fffffa80069c49f0, Physical Device Object of the stack
|
|---|
| 53 | Arg3: fffff80145b3f920, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
|
|---|
| 54 | Arg4: fffffa8019ecae10, The blocked IRP
|
|---|
| 55 |
|
|---|
| 56 | Debugging Details:
|
|---|
| 57 | ------------------
|
|---|
| 58 |
|
|---|
| 59 |
|
|---|
| 60 | DRVPOWERSTATE_SUBCODE: 3
|
|---|
| 61 |
|
|---|
| 62 | IMAGE_NAME: ntkrnlmp
|
|---|
| 63 |
|
|---|
| 64 | DEBUG_FLR_IMAGE_TIMESTAMP: 0
|
|---|
| 65 |
|
|---|
| 66 | MODULE_NAME: ntkrnlmp
|
|---|
| 67 |
|
|---|
| 68 | FAULTING_MODULE: fffff88001000000 VBoxNetFlt
|
|---|
| 69 |
|
|---|
| 70 | DEVICE_OBJECT: fffffa8015cf0050
|
|---|
| 71 |
|
|---|
| 72 | DRIVER_OBJECT: fffffa8015d05a60
|
|---|
| 73 |
|
|---|
| 74 | IRP_ADDRESS: fffffa8019ecae10
|
|---|
| 75 |
|
|---|
| 76 | DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
|
|---|
| 77 |
|
|---|
| 78 | BUGCHECK_STR: 0x9F
|
|---|
| 79 |
|
|---|
| 80 | PROCESS_NAME: System
|
|---|
| 81 |
|
|---|
| 82 | CURRENT_IRQL: 2
|
|---|
| 83 |
|
|---|
| 84 | TAG_NOT_DEFINED_c000000f: FFFFF80145B45FB0
|
|---|
| 85 |
|
|---|
| 86 | STACK_TEXT:
|
|---|
| 87 | fffff801`45b3f8e8 fffff801`45da8f6e : 00000000`0000009f 00000000`00000003 fffffa80`069c49f0 fffff801`45b3f920 : nt!KeBugCheckEx
|
|---|
| 88 | fffff801`45b3f8f0 fffff801`45da8fa1 : fffffa80`16ccdc90 00000000`00000003 00000000`00000000 fffff801`4637ee3b : nt!PopIrpWatchdogBugcheck+0xe2
|
|---|
| 89 | fffff801`45b3f950 fffff801`45cc08e4 : 00000000`00000000 00000000`0020eeb9 00000000`00000000 00000000`00000002 : nt!PopIrpWatchdog+0x32
|
|---|
| 90 | fffff801`45b3f9a0 fffff801`45cc0fd5 : fffffa80`15fcc010 fffff801`45c89708 fffff801`45b3fbf0 00000000`0000004b : nt!KiProcessExpiredTimerList+0x214
|
|---|
| 91 | fffff801`45b3fae0 fffff801`45cc0e88 : fffff801`45f0f180 fffff801`45f11f80 00000000`00000002 00000000`0017b733 : nt!KiExpireTimerTable+0xa9
|
|---|
| 92 | fffff801`45b3fb80 fffff801`45cbb2d6 : fffffa80`15fcc010 00000000`ffffffff fffffa80`15fcc2e8 00000000`00000000 : nt!KiTimerExpiration+0xc8
|
|---|
| 93 | fffff801`45b3fc30 fffff801`45cbf67a : fffff801`45f0f180 fffff801`45f0f180 00000000`00183de0 fffff801`45f69880 : nt!KiRetireDpcList+0x1f6
|
|---|
| 94 | fffff801`45b3fda0 00000000`00000000 : fffff801`45b40000 fffff801`45b3a000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a
|
|---|
| 95 |
|
|---|
| 96 |
|
|---|
| 97 | STACK_COMMAND: kb
|
|---|
| 98 |
|
|---|
| 99 | FOLLOWUP_NAME: MachineOwner
|
|---|
| 100 |
|
|---|
| 101 | FAILURE_BUCKET_ID: 0x9F_3_POWER_DOWN_IMAGE_ntkrnlmp
|
|---|
| 102 |
|
|---|
| 103 | BUCKET_ID: 0x9F_3_POWER_DOWN_IMAGE_ntkrnlmp
|
|---|
| 104 |
|
|---|
| 105 | Followup: MachineOwner
|
|---|
| 106 | ---------
|
|---|
| 107 |
|
|---|
| 108 | 0: kd> !devobj fffffa8015cf0050 f
|
|---|
| 109 | Device object (fffffa8015cf0050) is for:
|
|---|
| 110 | NDMP8 \Driver\VBoxNetFlt DriverObject fffffa8015d05a60
|
|---|
| 111 | Current Irp 00000000 RefCount 0 Type 00000017 Flags 00002050
|
|---|
| 112 | Dacl fffff9a100166c31 DevExt fffffa8015cf01a0 DevObjExt fffffa8015cf1668
|
|---|
| 113 | ExtensionFlags (0x00000800) DOE_DEFAULT_SD_PRESENT
|
|---|
| 114 | Characteristics (0x00000100) FILE_DEVICE_SECURE_OPEN
|
|---|
| 115 | AttachedTo (Lower) fffffa80069c49f0 \Driver\PnpManager
|
|---|
| 116 | Device queue is not busy.
|
|---|
| 117 | 0: kd> !drvobj fffffa8015d05a60 f
|
|---|
| 118 | Driver object (fffffa8015d05a60) is for:
|
|---|
| 119 | \Driver\VBoxNetFlt
|
|---|
| 120 | Driver Extension List: (id , addr)
|
|---|
| 121 | (4e4d4944 fffffa8015ce3580)
|
|---|
| 122 | Device Object list:
|
|---|
| 123 | fffffa8016b5f840 fffffa8015cf0050 fffffa8015cee050
|
|---|
| 124 |
|
|---|
| 125 | DriverEntry: fffff88001007e40 VBoxNetFlt
|
|---|
| 126 | DriverStartIo: 00000000
|
|---|
| 127 | DriverUnload: fffff88001b1c1ec ndis!ndisMUnload
|
|---|
| 128 | AddDevice: fffff88001ae8f28 ndis!ndisPnPAddDevice
|
|---|
| 129 |
|
|---|
| 130 | Dispatch routines:
|
|---|
| 131 | [00] IRP_MJ_CREATE fffff88001a64460 ndis!ndisCreateIrpHandler
|
|---|
| 132 | [01] IRP_MJ_CREATE_NAMED_PIPE fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 133 | [02] IRP_MJ_CLOSE fffff88001a647a4 ndis!ndisCloseIrpHandler
|
|---|
| 134 | [03] IRP_MJ_READ fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 135 | [04] IRP_MJ_WRITE fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 136 | [05] IRP_MJ_QUERY_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 137 | [06] IRP_MJ_SET_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 138 | [07] IRP_MJ_QUERY_EA fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 139 | [08] IRP_MJ_SET_EA fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 140 | [09] IRP_MJ_FLUSH_BUFFERS fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 141 | [0a] IRP_MJ_QUERY_VOLUME_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 142 | [0b] IRP_MJ_SET_VOLUME_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 143 | [0c] IRP_MJ_DIRECTORY_CONTROL fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 144 | [0d] IRP_MJ_FILE_SYSTEM_CONTROL fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 145 | [0e] IRP_MJ_DEVICE_CONTROL fffff88001ade8b0 ndis!ndisDeviceControlIrpHandler
|
|---|
| 146 | [0f] IRP_MJ_INTERNAL_DEVICE_CONTROL fffff88001aa3640 ndis!ndisDeviceInternalIrpDispatch
|
|---|
| 147 | [10] IRP_MJ_SHUTDOWN fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 148 | [11] IRP_MJ_LOCK_CONTROL fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 149 | [12] IRP_MJ_CLEANUP fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 150 | [13] IRP_MJ_CREATE_MAILSLOT fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 151 | [14] IRP_MJ_QUERY_SECURITY fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 152 | [15] IRP_MJ_SET_SECURITY fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 153 | [16] IRP_MJ_POWER fffff88001a716e8 ndis!ndisPowerDispatch
|
|---|
| 154 | [17] IRP_MJ_SYSTEM_CONTROL fffff88001ae3880 ndis!ndisWMIDispatch
|
|---|
| 155 | [18] IRP_MJ_DEVICE_CHANGE fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 156 | [19] IRP_MJ_QUERY_QUOTA fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 157 | [1a] IRP_MJ_SET_QUOTA fffff88001adeffc ndis!ndisDummyIrpHandler
|
|---|
| 158 | [1b] IRP_MJ_PNP fffff88001ae3000 ndis!ndisPnPDispatch
|
|---|
| 159 |
|
|---|
| 160 | 0: kd> !irp fffffa8019ecae10
|
|---|
| 161 | Irp is active with 3 stacks 2 is current (= 0xfffffa8019ecaf28)
|
|---|
| 162 | No Mdl: No System Buffer: Thread 00000000: Irp stack trace.
|
|---|
| 163 | cmd flg cl Device File Completion-Context
|
|---|
| 164 | [ 0, 0] 0 0 00000000 00000000 00000000-00000000
|
|---|
| 165 |
|
|---|
| 166 | Args: 00000000 00000000 00000000 00000000
|
|---|
| 167 | >[ 16, 2] 0 e1 fffffa8015cf0050 00000000 fffff80145f7a720-fffffa8016ccdc90 Success Error Cancel pending
|
|---|
| 168 | \Driver\VBoxNetFlt nt!PopSystemIrpCompletion
|
|---|
| 169 | Args: 00015600 00000000 00000005 00000003
|
|---|
| 170 | [ 0, 0] 0 0 00000000 00000000 00000000-fffffa8016ccdc90
|
|---|
| 171 |
|
|---|
| 172 | Args: 00000000 00000000 00000000 00000000
|
|---|
| 173 | 0: kd> !irp fffffa8019ecae10 1
|
|---|
| 174 | Irp is active with 3 stacks 2 is current (= 0xfffffa8019ecaf28)
|
|---|
| 175 | No Mdl: No System Buffer: Thread 00000000: Irp stack trace.
|
|---|
| 176 | Flags = 00000000
|
|---|
| 177 | ThreadListEntry.Flink = fffffa8019ecae30
|
|---|
| 178 | ThreadListEntry.Blink = fffffa8019ecae30
|
|---|
| 179 | IoStatus.Status = c00000bb
|
|---|
| 180 | IoStatus.Information = 00000000
|
|---|
| 181 | RequestorMode = 00000000
|
|---|
| 182 | Cancel = 00
|
|---|
| 183 | CancelIrql = 0
|
|---|
| 184 | ApcEnvironment = 00
|
|---|
| 185 | UserIosb = 00000000
|
|---|
| 186 | UserEvent = 00000000
|
|---|
| 187 | Overlay.AsynchronousParameters.UserApcRoutine = 00000000
|
|---|
| 188 | Overlay.AsynchronousParameters.UserApcContext = 00000000
|
|---|
| 189 | Overlay.AllocationSize = 00000000 - 00000000
|
|---|
| 190 | CancelRoutine = 00000000
|
|---|
| 191 | UserBuffer = 00000000
|
|---|
| 192 | &Tail.Overlay.DeviceQueueEntry = fffffa8019ecae88
|
|---|
| 193 | Tail.Overlay.Thread = 00000000
|
|---|
| 194 | Tail.Overlay.AuxiliaryBuffer = 00000000
|
|---|
| 195 | Tail.Overlay.ListEntry.Flink = fffffa801abc5718
|
|---|
| 196 | Tail.Overlay.ListEntry.Blink = fffff80145eb0520
|
|---|
| 197 | Tail.Overlay.CurrentStackLocation = fffffa8019ecaf28
|
|---|
| 198 | Tail.Overlay.OriginalFileObject = 00000000
|
|---|
| 199 | Tail.Apc = 00000000
|
|---|
| 200 | Tail.CompletionKey = 00000000
|
|---|
| 201 | cmd flg cl Device File Completion-Context
|
|---|
| 202 | [ 0, 0] 0 0 00000000 00000000 00000000-00000000
|
|---|
| 203 |
|
|---|
| 204 | Args: 00000000 00000000 00000000 00000000
|
|---|
| 205 | >[ 16, 2] 0 e1 fffffa8015cf0050 00000000 fffff80145f7a720-fffffa8016ccdc90 Success Error Cancel pending
|
|---|
| 206 | \Driver\VBoxNetFlt nt!PopSystemIrpCompletion
|
|---|
| 207 | Args: 00015600 00000000 00000005 00000003
|
|---|
| 208 | [ 0, 0] 0 0 00000000 00000000 00000000-fffffa8016ccdc90
|
|---|
| 209 |
|
|---|
| 210 | Args: 00000000 00000000 00000000 00000000
|
|---|