1: kd> kb
RetAddr : Args to Child : Call Site
fffff802`999e657c : 00000000`000000c8 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff802`998d0d85 : fffff880`01af6310 fffff880`08a0d8e0 fffff880`063cf400 fffff880`0637d7e4 : nt!KeExpandKernelStackAndCalloutInternal+0x11686c
fffff880`01af65fe : 00000000`00000001 00000000`00000000 fffffa80`09ec84c0 fffffa80`076b11b0 : nt!KeExpandKernelStackAndCalloutEx+0x25
(Inline Function) : --------`-------- --------`-------- --------`-------- --------`-------- : tcpip!NetioExpandKernelStackAndCallout+0x59
fffff880`01862e2e : 00000000`00000000 00000000`00000001 00000000`ffffffff fffffa80`078b7810 : tcpip!FlReceiveNetBufferListChain+0xae
fffff880`01862750 : fffffa80`06b03e02 fffffa80`071f0000 fffffa80`00000000 00000000`00000001 : ndis!ndisMIndicateNetBufferListsToOpen+0x373
(Inline Function) : --------`-------- --------`-------- --------`-------- --------`-------- : ndis!ndisIndicateSortedNetBufferLists+0x43
(Inline Function) : --------`-------- --------`-------- --------`-------- --------`-------- : ndis!ndisMDispatchReceiveNetBufferListsInternal+0x1dd
(Inline Function) : --------`-------- --------`-------- --------`-------- --------`-------- : ndis!ndisMTopReceiveNetBufferLists+0x1fb
(Inline Function) : --------`-------- --------`-------- --------`-------- --------`-------- : ndis!ndisCallReceiveHandler+0x214
fffff880`01862a05 : fffffa80`078e81a0 00000000`00000000 00000000`00000001 d0000000`0000002f : ndis!ndisInvokeNextReceiveHandler+0x650
(Inline Function) : --------`-------- --------`-------- --------`-------- --------`-------- : ndis!ndisMIndicateReceiveNetBufferListsInternal+0x57
fffff880`0a4c3fa2 : fffffa80`067725c0 00000000`00000080 fffffa80`09bd15e8 fffffa80`09bd1798 : ndis!NdisMIndicateReceiveNetBufferLists+0xc5
fffffa80`067725c0 : 00000000`00000080 fffffa80`09bd15e8 fffffa80`09bd1798 ffff0000`00000001 : athurx+0x14fa2
1: kd> .bugcheck
Bugcheck code 000000C8
Arguments 00000000`00000000 00000000`00000002 00000000`00000000 00000000`00000000
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_UNEXPECTED_VALUE (c8)
The processor's IRQL is not what it should be at this time. This is
usually caused by a lower level routine changing IRQL for some period
and not restoring IRQL at the end of that period (eg acquires spinlock
but doesn't release it).
if UniqueValue is 0 or 1
2 = APC->KernelRoutine
3 = APC
4 = APC->NormalRoutine
Arguments:
Arg1: 0000000000000000, (Current IRQL << 16) | (Expected IRQL << 8) | UniqueValue
Arg2: 0000000000000002
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for athurx.sys
*** ERROR: Module load completed but symbols could not be loaded for athurx.sys
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xC8
PROCESS_NAME: System
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff802999e657c to fffff8029988f040
STACK_TEXT:
fffff880`08a0d768 fffff802`999e657c : 00000000`000000c8 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`08a0d770 fffff802`998d0d85 : fffff880`01af6310 fffff880`08a0d8e0 fffff880`063cf400 fffff880`0637d7e4 : nt!KeExpandKernelStackAndCalloutInternal+0x11686c
fffff880`08a0d870 fffff880`01af65fe : 00000000`00000001 00000000`00000000 fffffa80`09ec84c0 fffffa80`076b11b0 : nt!KeExpandKernelStackAndCalloutEx+0x25
fffff880`08a0d8b0 fffff880`01862e2e : 00000000`00000000 00000000`00000001 00000000`ffffffff fffffa80`078b7810 : tcpip!FlReceiveNetBufferListChain+0xae
fffff880`08a0d930 fffff880`01862750 : fffffa80`06b03e02 fffffa80`071f0000 fffffa80`00000000 00000000`00000001 : ndis!ndisMIndicateNetBufferListsToOpen+0x373
fffff880`08a0d9d0 fffff880`01862a05 : fffffa80`078e81a0 00000000`00000000 00000000`00000001 d0000000`0000002f : ndis!ndisInvokeNextReceiveHandler+0x650
fffff880`08a0daa0 fffff880`0a4c3fa2 : fffffa80`067725c0 00000000`00000080 fffffa80`09bd15e8 fffffa80`09bd1798 : ndis!NdisMIndicateReceiveNetBufferLists+0xc5
fffff880`08a0db20 fffffa80`067725c0 : 00000000`00000080 fffffa80`09bd15e8 fffffa80`09bd1798 ffff0000`00000001 : athurx+0x14fa2
fffff880`08a0db28 00000000`00000080 : fffffa80`09bd15e8 fffffa80`09bd1798 ffff0000`00000001 fffff880`0a4d0923 : 0xfffffa80`067725c0
fffff880`08a0db30 fffffa80`09bd15e8 : fffffa80`09bd1798 ffff0000`00000001 fffff880`0a4d0923 fffffa80`00000000 : 0x80
fffff880`08a0db38 fffffa80`09bd1798 : ffff0000`00000001 fffff880`0a4d0923 fffffa80`00000000 00000000`00000000 : 0xfffffa80`09bd15e8
fffff880`08a0db40 ffff0000`00000001 : fffff880`0a4d0923 fffffa80`00000000 00000000`00000000 fffffa80`078b7810 : 0xfffffa80`09bd1798
fffff880`08a0db48 fffff880`0a4d0923 : fffffa80`00000000 00000000`00000000 fffffa80`078b7810 00000001`00000001 : 0xffff0000`00000001
fffff880`08a0db50 fffffa80`00000000 : 00000000`00000000 fffffa80`078b7810 00000001`00000001 fffff802`99814000 : athurx+0x21923
fffff880`08a0db58 00000000`00000000 : fffffa80`078b7810 00000001`00000001 fffff802`99814000 fffffa80`09bd1750 : 0xfffffa80`00000000
STACK_COMMAND: kb
FOLLOWUP_IP:
athurx+14fa2
fffff880`0a4c3fa2 ?? ???
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: athurx+14fa2
FOLLOWUP_NAME: wintriag
MODULE_NAME: athurx
IMAGE_NAME: athurx.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4b0f4c3a
FAILURE_BUCKET_ID: 0xC8_athurx+14fa2
BUCKET_ID: 0xC8_athurx+14fa2
1: kd> lmvm athurx
start end module name
fffff880`0a4af000 fffff880`0a649000 athurx T (no symbols)
Loaded symbol image file: athurx.sys
Image path: \SystemRoot\system32\DRIVERS\athurx.sys
Image name: athurx.sys
Timestamp: Thu Nov 26 22:49:14 2009 (4B0F4C3A)
CheckSum: 0019CA72
ImageSize: 0019A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4