Microsoft (R) Windows Debugger Version 6.11.0001.404 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\071920-7082-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.18741.amd64fre.win7sp1_gdr.150202-1526 Machine Name: Kernel base = 0xfffff800`0640f000 PsLoadedModuleList = 0xfffff800`06653890 Debug session time: Sun Jul 19 04:30:41.199 2020 (GMT+3) System Uptime: 0 days 0:58:31.979 Loading Kernel Symbols ............................................................... ................................................................ ...................................... Loading User Symbols Loading unloaded module list ....... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck A, {0, 2, 1, fffff8000648e0cf} Unable to load image klwfp.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for klwfp.sys *** ERROR: Module load completed but symbols could not be loaded for klwfp.sys Unable to load image kneps.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for kneps.sys *** ERROR: Module load completed but symbols could not be loaded for kneps.sys Probably caused by : NETIO.SYS ( NETIO!WfpExpireEntryLru+17 ) Followup: MachineOwner --------- 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* IRQL_NOT_LESS_OR_EQUAL (a) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If a kernel debugger is available get the stack backtrace. Arguments: Arg1: 0000000000000000, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000001, bitfield : bit 0 : value 0 = read operation, 1 = write operation bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status) Arg4: fffff8000648e0cf, address which referenced memory Debugging Details: ------------------ WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800066bd100 0000000000000000 CURRENT_IRQL: 2 FAULTING_IP: nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f fffff800`0648e0cf 488713 xchg rdx,qword ptr [rbx] CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0xA PROCESS_NAME: System TRAP_FRAME: fffff88003887560 -- (.trap 0xfffff88003887560) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffffa8007797040 rbx=0000000000000000 rcx=0000000000000000 rdx=fffff88003887760 rsi=0000000000000000 rdi=0000000000000000 rip=fffff8000648e0cf rsp=fffff880038876f0 rbp=0000000000000004 r8=fffff88003887760 r9=fffff88001f8acc0 r10=0000000000000000 r11=0000000000000040 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe nc nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f: fffff800`0648e0cf 488713 xchg rdx,qword ptr [rbx] ds:00000000`00000000=???????????????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff80006483469 to fffff80006483ec0 STACK_TEXT: fffff880`03887418 fffff800`06483469 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx fffff880`03887420 fffff800`064820e0 : 00000000`00000010 fffff880`03887750 00000000`00000003 00000000`00000000 : nt!KiBugCheckDispatch+0x69 fffff880`03887560 fffff800`0648e0cf : 00000000`00000003 00000000`00000001 00000000`00000003 00000000`00000001 : nt!KiPageFault+0x260 fffff880`038876f0 fffff880`01c2b9c7 : 00000000`00000004 fffff880`038879d0 00000000`00008900 fffffa80`075877c8 : nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f fffff880`03887740 fffff880`01ee608d : fffffa80`09cfe370 fffffa80`0a7b1010 fffff880`038879d0 00000000`00008900 : NETIO!WfpExpireEntryLru+0x17 fffff880`03887790 fffff880`01ead7b7 : 00000000`00000004 00000000`00000030 fffffa80`0a125430 00000000`00000001 : tcpip!WfpAleCloseRemoteEndpointConnection+0x2d fffff880`038877c0 fffff880`01f25e5b : fffffa80`09cfe370 fffffa80`0ae8ec2a fffffa80`0c278bf0 fffffa80`09cfe370 : tcpip! ?? ::FNODOBFM::`string'+0x20f72 fffff880`03887910 fffff880`01f261e2 : 00000000`00000000 fffffa80`0ae8eb60 fffff880`03887c50 fffffa80`0c278bf0 : tcpip!WfpAleHandleSendCompletion+0xeb fffff880`03887a30 fffff880`01f306b2 : fffff880`03887b40 fffff800`06458ee3 fffff880`039d5180 00000915`76de281d : tcpip!WfpAlepAuthorizeSendCompletion+0x32 fffff880`03887a80 fffff880`01c91af2 : 00000000`00000002 fffff800`064318dd fffff880`049e5000 fffffa80`0c278bf0 : tcpip!WfpAleCompleteOperation+0x162 fffff880`03887b20 fffff880`049d629e : fffff880`049e20f0 fffffa80`0c278bf0 00000000`00000001 00000000`00000001 : fwpkclnt!FwpsCompleteOperation0+0x1e fffff880`03887b50 fffff880`049e20f0 : fffffa80`0c278bf0 00000000`00000001 00000000`00000001 01d65d6c`36d82bb1 : klwfp+0x329e fffff880`03887b58 fffffa80`0c278bf0 : 00000000`00000001 00000000`00000001 01d65d6c`36d82bb1 00000000`00000004 : klwfp+0xf0f0 fffff880`03887b60 00000000`00000001 : 00000000`00000001 01d65d6c`36d82bb1 00000000`00000004 fffff880`023dcc50 : 0xfffffa80`0c278bf0 fffff880`03887b68 00000000`00000001 : 01d65d6c`36d82bb1 00000000`00000004 fffff880`023dcc50 00000000`00000008 : 0x1 fffff880`03887b70 01d65d6c`36d82bb1 : 00000000`00000004 fffff880`023dcc50 00000000`00000008 00000000`00000000 : 0x1 fffff880`03887b78 00000000`00000004 : fffff880`023dcc50 00000000`00000008 00000000`00000000 00000000`00000000 : 0x1d65d6c`36d82bb1 fffff880`03887b80 fffff880`023dcc50 : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : 0x4 fffff880`03887b88 00000000`00000008 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kneps+0x27c50 fffff880`03887b90 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x8 STACK_COMMAND: kb FOLLOWUP_IP: NETIO!WfpExpireEntryLru+17 fffff880`01c2b9c7 488b4310 mov rax,qword ptr [rbx+10h] SYMBOL_STACK_INDEX: 4 SYMBOL_NAME: NETIO!WfpExpireEntryLru+17 FOLLOWUP_NAME: MachineOwner MODULE_NAME: NETIO IMAGE_NAME: NETIO.SYS DEBUG_FLR_IMAGE_TIMESTAMP: 5294760d FAILURE_BUCKET_ID: X64_0xA_NETIO!WfpExpireEntryLru+17 BUCKET_ID: X64_0xA_NETIO!WfpExpireEntryLru+17 Followup: MachineOwner ---------