*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050033, 6f8, fffff80002ce29e3}
Probably caused by : NETIO.SYS ( NETIO!CompareSecurityContexts+6a )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050033
Arg3: 00000000000006f8
Arg4: fffff80002ce29e3
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80002cd7b29 to fffff80002cd85c0
STACK_TEXT:
fffff880`02fd9ce8 fffff800`02cd7b29 : 00000000`0000007f 00000000`00000008 00000000`80050033 00000000`000006f8 : nt!KeBugCheckEx
fffff880`02fd9cf0 fffff800`02cd5ff2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`02fd9e30 fffff800`02ce29e3 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`009aafd0 fffff800`02cddc47 : fffff880`009ab190 fffff880`009ab1b0 00000000`00000001 00000000`00000000 : nt!SepMandatoryIntegrityCheck+0x63
fffff880`009ab050 fffff800`02ca0f4e : fffffa80`06e56080 00000000`00000001 00000000`00000000 fffffa80`0434c7c8 : nt!SeAccessCheckWithHint+0x317
fffff880`009ab130 fffff880`0151cc5a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SeAccessCheckFromState+0x102
fffff880`009ab820 fffff880`0151a94f : 00000000`c0000022 00000000`00000000 00000000`00000000 00000000`00000000 : NETIO!CompareSecurityContexts+0x6a
fffff880`009ab890 fffff880`0151c9b5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : NETIO!MatchValues+0xef
fffff880`009ab8e0 fffff880`0151c845 : fffffa80`063cb0d0 fffffa80`068146d0 fffff880`009abb08 fffff880`009ac240 : NETIO!FilterMatch+0x95
fffff880`009ab930 fffff880`0151dccb : 00000000`00000000 00000000`00000000 fffff880`009ac240 fffff880`009abaf0 : NETIO!IndexListClassify+0x69
fffff880`009ab9b0 fffff880`0163e487 : fffff880`009abe88 fffff880`009abe88 fffff880`009acbc0 fffffa80`06f4a8a0 : NETIO!KfdClassify+0xa4e
fffff880`009abd20 fffff880`016378ce : fffff880`01746690 00000000`00000000 fffffa80`063eddb0 00000000`00000000 : tcpip!WfpAleClassify+0x57
fffff880`009abd60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e
STACK_COMMAND: kb
FOLLOWUP_IP:
NETIO!CompareSecurityContexts+6a
fffff880`0151cc5a 448b442470 mov r8d,dword ptr [rsp+70h]
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: NETIO!CompareSecurityContexts+6a
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME: NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4bbe946f
FAILURE_BUCKET_ID: X64_0x7f_8_NETIO!CompareSecurityContexts+6a
BUCKET_ID: X64_0x7f_8_NETIO!CompareSecurityContexts+6a
Followup: MachineOwner
---------