BSOD Crashing

********************************************************************************                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************


Use !analyze -v to get detailed debugging information.


BugCheck D1, {28, 2, 0, fffff88001d83532}


Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+22 )


Followup: MachineOwner
---------


4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************


DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88001d83532, address which referenced memory


Debugging Details:
------------------




READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800263cf168
GetUlongFromAddress: unable to read from fffff800263cf1f8
 0000000000000028 Nonpaged pool


CURRENT_IRQL:  2


FAULTING_IP: 
NETIO!RtlCopyBufferToMdl+22
fffff880`01d83532 8b5228          mov     edx,dword ptr [rdx+28h]


CUSTOMER_CRASH_COUNT:  1


DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT


BUGCHECK_STR:  AV


PROCESS_NAME:  System


TRAP_FRAME:  fffff88003569830 -- (.trap 0xfffff88003569830)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000100000000 rbx=0000000000000000 rcx=fffffa800fc707b0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001d83532 rsp=fffff880035699c0 rbp=fffff88003569ae0
 r8=00000000ffffffbc  r9=0000000000000044 r10=0000000000000000
r11=fffff880035699f0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
NETIO!RtlCopyBufferToMdl+0x22:
fffff880`01d83532 8b5228          mov     edx,dword ptr [rdx+28h] ds:00000000`00000028=????????
Resetting default scope


LAST_CONTROL_TRANSFER:  from fffff800260d0569 to fffff800260d1240


STACK_TEXT:  
fffff880`035696e8 fffff800`260d0569 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`035696f0 fffff800`260cede0 : 00000000`00000000 00000000`00000000 fffffa80`0757f400 fffff880`03569830 : nt!KiBugCheckDispatch+0x69
fffff880`03569830 fffff880`01d83532 : fffffa80`077ca5f0 fffff880`0210dd2e fffffa80`0f843100 fffffa80`0f843100 : nt!KiPageFault+0x260
fffff880`035699c0 fffff880`020e8b36 : fffffa80`075c6fa0 00000000`6a636b93 fffffa80`0f7fed10 fffff880`03569d40 : NETIO!RtlCopyBufferToMdl+0x22
fffff880`03569a20 fffff880`020e26e6 : 00000000`00000000 00000000`00000000 fffff880`03569b08 fffff880`6a636b93 : tcpip!TcpTcbReassemblyRetrieveSegments+0x1d6
fffff880`03569a90 fffff880`0210d2f4 : 00000000`00000000 fffff880`01d6eada fffffa80`0c5aca20 00000000`00000000 : tcpip!TcpTcbCarefulDatagram+0x726
fffff880`03569cc0 fffff880`0210c110 : fffff880`0356a238 fffff880`0356a228 00000000`00000000 00000000`00000000 : tcpip!TcpTcbReceive+0x474
fffff880`03569e20 fffff880`0210d801 : fffffa80`0dcaa202 fffffa80`077f6000 00000000`00000000 fffffa80`077f6000 : tcpip!TcpMatchReceive+0x1f0
fffff880`03569f90 fffff880`0211e603 : fffffa80`075b6870 00000000`0000ff3c fffffa80`077f7ad9 fffffa80`075b6870 : tcpip!TcpPreValidatedReceive+0x381
fffff880`0356a070 fffff880`0211e8f8 : fffff880`0356a299 fffffa80`0e8831b0 00000000`00000000 fffffa80`075b5b0c : tcpip!IppDeliverListToProtocol+0x93
fffff880`0356a120 fffff880`021228db : fffff880`02235f30 00000000`00000000 fffff880`02230b00 fffff880`0356a238 : tcpip!IppProcessDeliverList+0x68
fffff880`0356a1d0 fffff880`021203da : fffffa80`073f9620 fffff880`0356a400 00000000`00000000 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x21b
fffff880`0356a300 fffff880`02121c63 : fffffa80`0c0dfbd0 00000000`00000000 00000000`00000000 fffffa80`0dbfe400 : tcpip!IpFlcReceivePackets+0x64a
fffff880`0356a520 fffff880`0212c81d : 00000000`00000000 00000000`00000000 fffff880`0211fca0 00000000`00000000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2ce
fffff880`0356a5f0 fffff800`261267a6 : fffffa80`00000001 fffff880`03565000 fffff880`0356a730 00000000`00000002 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0x12c
fffff880`0356a6f0 fffff800`26129205 : fffff880`0212c6f0 fffff880`0356a860 fffff880`0314ff00 fffff800`261b49e6 : nt!KeExpandKernelStackAndCalloutInternal+0xe6
fffff880`0356a7f0 fffff880`0212c8fe : fffff880`0356aab0 fffff880`05c8f7ab fffff880`0356aab0 fffff880`05c8f7ab : nt!KeExpandKernelStackAndCalloutEx+0x25
fffff880`0356a830 fffff880`01c6fe4e : 00000000`00000000 00000000`00000100 00000000`ffffffff fffff800`26303ac8 : tcpip!FlReceiveNetBufferListChain+0xae
fffff880`0356a8b0 fffff880`01c6f37d : 00000000`00000702 fffffa80`070a0000 00000000`00000000 00000000`00000002 : ndis!ndisMIndicateNetBufferListsToOpen+0x373
fffff880`0356a950 fffff880`01c6fa25 : fffffa80`0b3aa1a0 00000000`00000000 00000000`00000100 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x25d
fffff880`0356aa20 fffff880`00a9bcec : 00000000`00000002 00000000`00000000 fffff880`00a980d0 fffffa80`073fd060 : ndis!NdisMIndicateReceiveNetBufferLists+0xc5
fffff880`0356aaa0 fffff880`00a980ee : fffff880`00aad178 fffff880`00a980d0 ffffe7a6`ea8e10c3 fffff880`01b20803 : tunnel!TeredoWfpIndicationWorker+0x70
fffff880`0356aae0 fffff800`2611f997 : fffffa80`0d6c9290 fffff880`05c2265c fffffa80`0b9fa290 fffff880`01a60e25 : tunnel!LwWorker+0x1e
fffff880`0356ab10 fffff800`2610f0d1 : fffff800`262fd1d0 fffffa80`06735800 fffff800`2611f938 fffff800`260daa00 : nt!IopProcessWorkItem+0x5f
fffff880`0356ab80 fffff800`260a3e45 : a622e800`0000c88b 00000000`00000080 fffff800`2610ef90 fffffa80`06735800 : nt!ExpWorkerThread+0x142
fffff880`0356ac10 fffff800`26158676 : fffff880`0305e180 fffffa80`06735800 fffff880`03069f40 fffffa80`0668e4c0 : nt!PspSystemThreadStartup+0x59
fffff880`0356ac60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16




STACK_COMMAND:  kb


FOLLOWUP_IP: 
NETIO!RtlCopyBufferToMdl+22
fffff880`01d83532 8b5228          mov     edx,dword ptr [rdx+28h]


SYMBOL_STACK_INDEX:  3


SYMBOL_NAME:  NETIO!RtlCopyBufferToMdl+22


FOLLOWUP_NAME:  MachineOwner


MODULE_NAME: NETIO


IMAGE_NAME:  NETIO.SYS


DEBUG_FLR_IMAGE_TIMESTAMP:  5010aa77


BUCKET_ID_FUNC_OFFSET:  22


FAILURE_BUCKET_ID:  AV_NETIO!RtlCopyBufferToMdl


BUCKET_ID:  AV_NETIO!RtlCopyBufferToMdl


Followup: MachineOwner
---------