Microsoft (R) Windows Debugger Version 6.2.9200.16384 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Bitmap Dump File: Only kernel address space is available Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 8 Kernel Version 9200 MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 9200.16461.amd64fre.win8_gdr.121119-1606 Machine Name: Kernel base = 0xfffff801`45c19000 PsLoadedModuleList = 0xfffff801`45ee3a80 Debug session time: Wed Feb 6 22:00:37.498 2013 (UTC + 1:00) System Uptime: 0 days 11:19:03.150 Loading Kernel Symbols ............................................................... ................................................................ ............................................. Loading User Symbols Loading unloaded module list ........................ ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 9F, {3, fffffa80069c49f0, fffff80145b3f920, fffffa8019ecae10} *** ERROR: Module load completed but symbols could not be loaded for VBoxNetFlt.sys Probably caused by : ntkrnlmp Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_POWER_STATE_FAILURE (9f) A driver has failed to complete a power IRP within a specific time (usually 10 minutes). Arguments: Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time Arg2: fffffa80069c49f0, Physical Device Object of the stack Arg3: fffff80145b3f920, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack Arg4: fffffa8019ecae10, The blocked IRP Debugging Details: ------------------ DRVPOWERSTATE_SUBCODE: 3 IMAGE_NAME: ntkrnlmp DEBUG_FLR_IMAGE_TIMESTAMP: 0 MODULE_NAME: ntkrnlmp FAULTING_MODULE: fffff88001000000 VBoxNetFlt DEVICE_OBJECT: fffffa8015cf0050 DRIVER_OBJECT: fffffa8015d05a60 IRP_ADDRESS: fffffa8019ecae10 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT BUGCHECK_STR: 0x9F PROCESS_NAME: System CURRENT_IRQL: 2 TAG_NOT_DEFINED_c000000f: FFFFF80145B45FB0 STACK_TEXT: fffff801`45b3f8e8 fffff801`45da8f6e : 00000000`0000009f 00000000`00000003 fffffa80`069c49f0 fffff801`45b3f920 : nt!KeBugCheckEx fffff801`45b3f8f0 fffff801`45da8fa1 : fffffa80`16ccdc90 00000000`00000003 00000000`00000000 fffff801`4637ee3b : nt!PopIrpWatchdogBugcheck+0xe2 fffff801`45b3f950 fffff801`45cc08e4 : 00000000`00000000 00000000`0020eeb9 00000000`00000000 00000000`00000002 : nt!PopIrpWatchdog+0x32 fffff801`45b3f9a0 fffff801`45cc0fd5 : fffffa80`15fcc010 fffff801`45c89708 fffff801`45b3fbf0 00000000`0000004b : nt!KiProcessExpiredTimerList+0x214 fffff801`45b3fae0 fffff801`45cc0e88 : fffff801`45f0f180 fffff801`45f11f80 00000000`00000002 00000000`0017b733 : nt!KiExpireTimerTable+0xa9 fffff801`45b3fb80 fffff801`45cbb2d6 : fffffa80`15fcc010 00000000`ffffffff fffffa80`15fcc2e8 00000000`00000000 : nt!KiTimerExpiration+0xc8 fffff801`45b3fc30 fffff801`45cbf67a : fffff801`45f0f180 fffff801`45f0f180 00000000`00183de0 fffff801`45f69880 : nt!KiRetireDpcList+0x1f6 fffff801`45b3fda0 00000000`00000000 : fffff801`45b40000 fffff801`45b3a000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a STACK_COMMAND: kb FOLLOWUP_NAME: MachineOwner FAILURE_BUCKET_ID: 0x9F_3_POWER_DOWN_IMAGE_ntkrnlmp BUCKET_ID: 0x9F_3_POWER_DOWN_IMAGE_ntkrnlmp Followup: MachineOwner --------- 0: kd> !devobj fffffa8015cf0050 f Device object (fffffa8015cf0050) is for: NDMP8 \Driver\VBoxNetFlt DriverObject fffffa8015d05a60 Current Irp 00000000 RefCount 0 Type 00000017 Flags 00002050 Dacl fffff9a100166c31 DevExt fffffa8015cf01a0 DevObjExt fffffa8015cf1668 ExtensionFlags (0x00000800) DOE_DEFAULT_SD_PRESENT Characteristics (0x00000100) FILE_DEVICE_SECURE_OPEN AttachedTo (Lower) fffffa80069c49f0 \Driver\PnpManager Device queue is not busy. 0: kd> !drvobj fffffa8015d05a60 f Driver object (fffffa8015d05a60) is for: \Driver\VBoxNetFlt Driver Extension List: (id , addr) (4e4d4944 fffffa8015ce3580) Device Object list: fffffa8016b5f840 fffffa8015cf0050 fffffa8015cee050 DriverEntry: fffff88001007e40 VBoxNetFlt DriverStartIo: 00000000 DriverUnload: fffff88001b1c1ec ndis!ndisMUnload AddDevice: fffff88001ae8f28 ndis!ndisPnPAddDevice Dispatch routines: [00] IRP_MJ_CREATE fffff88001a64460 ndis!ndisCreateIrpHandler [01] IRP_MJ_CREATE_NAMED_PIPE fffff88001adeffc ndis!ndisDummyIrpHandler [02] IRP_MJ_CLOSE fffff88001a647a4 ndis!ndisCloseIrpHandler [03] IRP_MJ_READ fffff88001adeffc ndis!ndisDummyIrpHandler [04] IRP_MJ_WRITE fffff88001adeffc ndis!ndisDummyIrpHandler [05] IRP_MJ_QUERY_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler [06] IRP_MJ_SET_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler [07] IRP_MJ_QUERY_EA fffff88001adeffc ndis!ndisDummyIrpHandler [08] IRP_MJ_SET_EA fffff88001adeffc ndis!ndisDummyIrpHandler [09] IRP_MJ_FLUSH_BUFFERS fffff88001adeffc ndis!ndisDummyIrpHandler [0a] IRP_MJ_QUERY_VOLUME_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler [0b] IRP_MJ_SET_VOLUME_INFORMATION fffff88001adeffc ndis!ndisDummyIrpHandler [0c] IRP_MJ_DIRECTORY_CONTROL fffff88001adeffc ndis!ndisDummyIrpHandler [0d] IRP_MJ_FILE_SYSTEM_CONTROL fffff88001adeffc ndis!ndisDummyIrpHandler [0e] IRP_MJ_DEVICE_CONTROL fffff88001ade8b0 ndis!ndisDeviceControlIrpHandler [0f] IRP_MJ_INTERNAL_DEVICE_CONTROL fffff88001aa3640 ndis!ndisDeviceInternalIrpDispatch [10] IRP_MJ_SHUTDOWN fffff88001adeffc ndis!ndisDummyIrpHandler [11] IRP_MJ_LOCK_CONTROL fffff88001adeffc ndis!ndisDummyIrpHandler [12] IRP_MJ_CLEANUP fffff88001adeffc ndis!ndisDummyIrpHandler [13] IRP_MJ_CREATE_MAILSLOT fffff88001adeffc ndis!ndisDummyIrpHandler [14] IRP_MJ_QUERY_SECURITY fffff88001adeffc ndis!ndisDummyIrpHandler [15] IRP_MJ_SET_SECURITY fffff88001adeffc ndis!ndisDummyIrpHandler [16] IRP_MJ_POWER fffff88001a716e8 ndis!ndisPowerDispatch [17] IRP_MJ_SYSTEM_CONTROL fffff88001ae3880 ndis!ndisWMIDispatch [18] IRP_MJ_DEVICE_CHANGE fffff88001adeffc ndis!ndisDummyIrpHandler [19] IRP_MJ_QUERY_QUOTA fffff88001adeffc ndis!ndisDummyIrpHandler [1a] IRP_MJ_SET_QUOTA fffff88001adeffc ndis!ndisDummyIrpHandler [1b] IRP_MJ_PNP fffff88001ae3000 ndis!ndisPnPDispatch 0: kd> !irp fffffa8019ecae10 Irp is active with 3 stacks 2 is current (= 0xfffffa8019ecaf28) No Mdl: No System Buffer: Thread 00000000: Irp stack trace. cmd flg cl Device File Completion-Context [ 0, 0] 0 0 00000000 00000000 00000000-00000000 Args: 00000000 00000000 00000000 00000000 >[ 16, 2] 0 e1 fffffa8015cf0050 00000000 fffff80145f7a720-fffffa8016ccdc90 Success Error Cancel pending \Driver\VBoxNetFlt nt!PopSystemIrpCompletion Args: 00015600 00000000 00000005 00000003 [ 0, 0] 0 0 00000000 00000000 00000000-fffffa8016ccdc90 Args: 00000000 00000000 00000000 00000000 0: kd> !irp fffffa8019ecae10 1 Irp is active with 3 stacks 2 is current (= 0xfffffa8019ecaf28) No Mdl: No System Buffer: Thread 00000000: Irp stack trace. Flags = 00000000 ThreadListEntry.Flink = fffffa8019ecae30 ThreadListEntry.Blink = fffffa8019ecae30 IoStatus.Status = c00000bb IoStatus.Information = 00000000 RequestorMode = 00000000 Cancel = 00 CancelIrql = 0 ApcEnvironment = 00 UserIosb = 00000000 UserEvent = 00000000 Overlay.AsynchronousParameters.UserApcRoutine = 00000000 Overlay.AsynchronousParameters.UserApcContext = 00000000 Overlay.AllocationSize = 00000000 - 00000000 CancelRoutine = 00000000 UserBuffer = 00000000 &Tail.Overlay.DeviceQueueEntry = fffffa8019ecae88 Tail.Overlay.Thread = 00000000 Tail.Overlay.AuxiliaryBuffer = 00000000 Tail.Overlay.ListEntry.Flink = fffffa801abc5718 Tail.Overlay.ListEntry.Blink = fffff80145eb0520 Tail.Overlay.CurrentStackLocation = fffffa8019ecaf28 Tail.Overlay.OriginalFileObject = 00000000 Tail.Apc = 00000000 Tail.CompletionKey = 00000000 cmd flg cl Device File Completion-Context [ 0, 0] 0 0 00000000 00000000 00000000-00000000 Args: 00000000 00000000 00000000 00000000 >[ 16, 2] 0 e1 fffffa8015cf0050 00000000 fffff80145f7a720-fffffa8016ccdc90 Success Error Cancel pending \Driver\VBoxNetFlt nt!PopSystemIrpCompletion Args: 00015600 00000000 00000005 00000003 [ 0, 0] 0 0 00000000 00000000 00000000-fffffa8016ccdc90 Args: 00000000 00000000 00000000 00000000