DRIVER_POWER_STATE_FAILURE (9f) from pnpfiltr.sys during DTM cycle

NTDEV
1

Hi All,

I’m working on NDIS miniport driver, and I encounter the following BSOD when running DTM tests for WHQL on Win7. The test pass despite the BSOD. The problem doesn’t occur when I run pnpd tests manually, only during DTM tests cycle. Here is the output from minidump. Any suggestions how can I proceed to fix that?

Thanks,
S.

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state.
Arguments:
Arg1: 00000004, The power transition timed out waiting to synchronize with the Pnp
subsystem.
Arg2: 00000258, Timeout in seconds.
Arg3: 84178798, The thread currently holding on to the Pnp lock.
Arg4: 8296eb24

Debugging Details:

DRVPOWERSTATE_SUBCODE: 4

FAULTING_THREAD: 84178798

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x9F

PROCESS_NAME: System

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from 828b6b15 to 828af966

STACK_TEXT:
88d2f948 828b6b15 84178798 00000000 82971d20 nt!KiSwapContext+0x26
88d2f980 828b5403 84178858 84178798 88d2fa48 nt!KiSwapThread+0x266
88d2f9a8 828af2cf 84178798 84178858 00000000 nt!KiCommitThreadWait+0x1df
88d2fa20 86ecea96 88d2fa48 00000000 00000000 nt!KeWaitForSingleObject+0x393
88d2fa5c 86f0f42c 00000000 85a9cad8 8436ee20 ndis!ndisPnPRemoveDeviceEx+0xe3
88d2faa0 828844bc 8481b028 85a9cad8 85a9cad8 ndis!ndisPnPDispatch+0x814
88d2fab8 871e6539 85a9cad8 88d2fae0 871e927f nt!IofCallDriver+0x63
88d2fac4 871e927f 8436ed68 85a9cad8 85a9cad8 pnpfiltr!FilterPassIrp+0x2d
88d2fae0 871e889b 8436ed68 85a9cad8 85a9cbb4 pnpfiltr!FilterSurpriseRemove+0x69
88d2faf8 828844bc 8436ed68 85a9cad8 88d2fb94 pnpfiltr!FilterDispatchPnp+0xcd
88d2fb10 82a24edf 84361bf0 865b68b8 84361bf0 nt!IofCallDriver+0x63
88d2fb40 829fbb3d 84361bf0 00000000 865b68b8 nt!IopSynchronousCall+0xc2
88d2fb98 82b06aae 84361bf0 00000017 865b68b8 nt!IopRemoveDevice+0xd4
88d2fbc0 829fb945 b1d20860 00000000 88d2fc04 nt!PnpSurpriseRemoveLockedDeviceNode+0x101
88d2fbd0 829fb8b7 00000003 00000000 00000000 nt!PnpDeleteLockedDeviceNode+0x21
88d2fc04 829fae76 84361bf0 b1d20860 00000003 nt!PnpDeleteLockedDeviceNodes+0x4c
88d2fcc4 829fd210 88d2fcf4 00000000 aeb30bd8 nt!PnpProcessQueryRemoveAndEject+0x586
88d2fcdc 829fed58 00000000 84f05768 84178798 nt!PnpProcessTargetDeviceEvent+0x38
88d2fd00 828b5f2b 84f05768 00000000 84178798 nt!PnpDeviceEventWorker+0x216
88d2fd50 82a5666d 00000001 9268ec64 00000000 nt!ExpWorkerThread+0x10d
88d2fd90 829080d9 828b5e1e 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

STACK_COMMAND: .thread 0xffffffff84178798 ; kb

FOLLOWUP_IP:
pnpfiltr!FilterPassIrp+2d
871e6539 8bf0 mov esi,eax

SYMBOL_STACK_INDEX: 7

SYMBOL_NAME: pnpfiltr!FilterPassIrp+2d

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: pnpfiltr

IMAGE_NAME: pnpfiltr.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc045

FAILURE_BUCKET_ID: 0x9F_pnpfiltr!FilterPassIrp+2d

BUCKET_ID: 0x9F_pnpfiltr!FilterPassIrp+2d

Followup: MachineOwner

0: kd>

2

More info:

I could reproduce another issue, probably related to this one. I run PnPD test manually, run surprise removal with ‘Run Tests with I/O’ checked. From time to time I get the test stucked, and when I unplug the device, it remains in the device manager. In the other hand, from the debugger I can see my MiniportHalt callback is called and executed. From !wdfdriverinfo I don’t see remained handles or locks. Here is the output:

kd> !wdfdriverinfo my_driver fff

warning: symbols for my_driver not found
Default driver image name: my_driver
WDF library image name:
FxDriverGlobals 0x862ca8a8
WdfBindInfo 0x9371e01c
Version v1.9 build(7600)

Driver Handles:
dt FxDriver 0x8607B048 : !WDFDRIVER 0x79f84fb0

No handles.

WDF Verifier settings for my_driver.sys is ON
Pool tracking is ON
Handle verification is ON
IO verification is ON
Lock verification is ON
Device state verification is OFF
Handle reference tracking is OFF

kd>

Any suggestion?

Thanks,
S.

3

From your original post, NDIS is waiting on an object (PKEVENT?). I would dump all of the stacks with ndis in the callstack, !stacks 1 ndis, and see what is out there and perhaps holding onto that KEVENT

d

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Wednesday, October 21, 2009 10:24 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] DRIVER_POWER_STATE_FAILURE (9f) from pnpfiltr.sys during DTM cycle

More info:

I could reproduce another issue, probably related to this one. I run PnPD test manually, run surprise removal with ‘Run Tests with I/O’ checked. From time to time I get the test stucked, and when I unplug the device, it remains in the device manager. In the other hand, from the debugger I can see my MiniportHalt callback is called and executed. From !wdfdriverinfo I don’t see remained handles or locks. Here is the output:

kd> !wdfdriverinfo my_driver fff

warning: symbols for my_driver not found Default driver image name: my_driver WDF library image name:
FxDriverGlobals 0x862ca8a8
WdfBindInfo 0x9371e01c
Version v1.9 build(7600)

Driver Handles:
dt FxDriver 0x8607B048 : !WDFDRIVER 0x79f84fb0

No handles.

WDF Verifier settings for my_driver.sys is ON
Pool tracking is ON
Handle verification is ON
IO verification is ON
Lock verification is ON
Device state verification is OFF
Handle reference tracking is OFF

kd>

Any suggestion?

Thanks,
S.

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

4

Also, I don’t see my driver in the list of NDIS miniports:

kd> !ndiskd.miniports
NDIS Driver verifier level: 0
NDIS Failed allocations : 0
Miniport Driver Block: 843b6880, Version 0.0
kd>

So, I would expect the driver to be unloaded. But why the device remained in the device manager? Is here any explanation what happens here?

Thanks,
S.

5

It remains in device manager b/c the remove IRP is stuck (and I am guessing all new pnp operations will also not be dequeued until the remove is completed.

d

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Wednesday, October 21, 2009 10:37 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] DRIVER_POWER_STATE_FAILURE (9f) from pnpfiltr.sys during DTM cycle

Also, I don’t see my driver in the list of NDIS miniports:

kd> !ndiskd.miniports
NDIS Driver verifier level: 0
NDIS Failed allocations : 0
Miniport Driver Block: 843b6880, Version 0.0
kd>

So, I would expect the driver to be unloaded. But why the device remained in the device manager? Is here any explanation what happens here?

Thanks,
S.

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

6

Hi Doron,

Thanks a lot for the input. Here is the output of !stacks 1 ndis:

kd> !stacks 1 ndis
Proc.Thread .Thread Ticks ThreadState Blocker

Max cache size is : 1048576 bytes (0x400 KB)
Total memory in cache : 0 bytes (0 KB)
Number of regions cached: 0
0 full reads broken into 0 partial reads
counts: 0 cached/0 uncached, 0.00% cached
bytes : 0 cached/0 uncached, 0.00% cached
** Prototype PTEs are implicitly decoded
[841b8020 System]
4.0000a8 84abf260 0006203 Blocked ndis!ndisThreadPoolTimerHandler+0x18
4.0000ac 84ac0020 00039d1 Blocked ndis!ndisWorkerThread+0x22
4.0000b0 84ac36f8 000007f Blocked ndis!ndisCmWaitThread+0x5b
4.000194 856733c8 00039e2 Blocked ndis!ndisPnPRemoveDeviceEx+0xe3
*** ERROR: Module load completed but symbols could not be loaded for spsys.sys

[85065598 smss.exe]

[8562fd40 csrss.exe]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys

[85653d40 wininit.exe]

[856256b8 csrss.exe]

[85515278 winlogon.exe]

[856cb800 services.exe]

[856db698 lsass.exe]

[85462670 lsm.exe]

[85ff8548 svchost.exe]

[86019030 svchost.exe]

[860242c0 svchost.exe]

[86087c88 svchost.exe]

[85fb0aa8 svchost.exe]

[860bc358 svchost.exe]

[85fabac0 svchost.exe]

[8611c030 svchost.exe]

[84a60b78 spoolsv.exe]

[86148030 svchost.exe]

[854b0828 taskhost.exe]

[86234558 dwm.exe]

[854acd40 explorer.exe]

[8626a6c0 igfxtray.exe]

[8626c850 hkcmd.exe]

[8626dd40 igfxpers.exe]

[86285c28 igfxsrvc.exe]

[8605b340 SearchIndexer.]

[85079030 mmc.exe]

[8507a188 wmpnetwk.exe]

[85594d40 mmc.exe]

[84312a40 WUDFHost.exe]

[84326b60 pnpdtest.exe]

[8432cd40 sppsvc.exe]

[8434dd40 svchost.exe]

[84451030 WmiPrvSE.exe]

[8432e3f8 SearchProtocol]

[84257938 SearchFilterHo]

Threads Processed: 463

Max cache size is : 1048576 bytes (0x400 KB)
Total memory in cache : 0 bytes (0 KB)
Number of regions cached: 0
0 full reads broken into 0 partial reads
counts: 0 cached/0 uncached, 0.00% cached
bytes : 0 cached/0 uncached, 0.00% cached
** Transition PTEs are implicitly decoded
** Prototype PTEs are implicitly decoded

Thanks,
S.

P.S. 2 more questions:

Thanks,
S.

7

Dump each of the threads (!thread
d

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Wednesday, October 21, 2009 11:08 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] DRIVER_POWER_STATE_FAILURE (9f) from pnpfiltr.sys during DTM cycle

Hi Doron,

Thanks a lot for the input. Here is the output of !stacks 1 ndis:

kd> !stacks 1 ndis
Proc.Thread .Thread Ticks ThreadState Blocker

Max cache size is : 1048576 bytes (0x400 KB)
Total memory in cache : 0 bytes (0 KB)
Number of regions cached: 0
0 full reads broken into 0 partial reads
counts: 0 cached/0 uncached, 0.00% cached
bytes : 0 cached/0 uncached, 0.00% cached
Prototype PTEs are implicitly decoded
[841b8020 System]
4.0000a8 84abf260 0006203 Blocked ndis!ndisThreadPoolTimerHandler+0x18
4.0000ac 84ac0020 00039d1 Blocked ndis!ndisWorkerThread+0x22
4.0000b0 84ac36f8 000007f Blocked ndis!ndisCmWaitThread+0x5b
4.000194 856733c8 00039e2 Blocked ndis!ndisPnPRemoveDeviceEx+0xe3
* ERROR: Module load completed but symbols could not be loaded for spsys.sys

[85065598 smss.exe]

[8562fd40 csrss.exe]
WARNING: Unable to verify timestamp for win32k.sys
 ERROR: Module load completed but symbols could not be loaded for win32k.sys

[85653d40 wininit.exe]

[856256b8 csrss.exe]

[85515278 winlogon.exe]

[856cb800 services.exe]

[856db698 lsass.exe]

[85462670 lsm.exe]

[85ff8548 svchost.exe]

[86019030 svchost.exe]

[860242c0 svchost.exe]

[86087c88 svchost.exe]

[85fb0aa8 svchost.exe]

[860bc358 svchost.exe]

[85fabac0 svchost.exe]

[8611c030 svchost.exe]

[84a60b78 spoolsv.exe]

[86148030 svchost.exe]

[854b0828 taskhost.exe]

[86234558 dwm.exe]

[854acd40 explorer.exe]

[8626a6c0 igfxtray.exe]

[8626c850 hkcmd.exe]

[8626dd40 igfxpers.exe]

[86285c28 igfxsrvc.exe]

[8605b340 SearchIndexer.]

[85079030 mmc.exe]

[8507a188 wmpnetwk.exe]

[85594d40 mmc.exe]

[84312a40 WUDFHost.exe]

[84326b60 pnpdtest.exe]

[8432cd40 sppsvc.exe]

[8434dd40 svchost.exe]

[84451030 WmiPrvSE.exe]

[8432e3f8 SearchProtocol]

[84257938 SearchFilterHo]

Threads Processed: 463

Max cache size is : 1048576 bytes (0x400 KB)
Total memory in cache : 0 bytes (0 KB)
Number of regions cached: 0
0 full reads broken into 0 partial reads
counts: 0 cached/0 uncached, 0.00% cached
bytes : 0 cached/0 uncached, 0.00% cached
Transition PTEs are implicitly decoded
 Prototype PTEs are implicitly decoded

Thanks,
S.

P.S. 2 more questions:
- can I get somewhere checked version of ndis.sys? I’m debugging win7.
- I use symbol path SRVc:\websymbolshttp://msdl.microsoft.com/download/symbols. Is it correct for win7 or it should be different?

Thanks,
S.

—
NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

8

Thanks for the reply. I’m currenty out of office (it’s very late here), I’ll do it in the morning.
In the meantime, I passed over my code again to understand may be I’,m doing something wrong. I noticed that after Surprise Removal I finish all remained packets to NDIS wit h NDIS_STATUS_UNSUCCESSFUL, while according to msdn it should be NDIS_STATUS_NOT_ACCEPTED. I wondered if it could cause such a behavior on Windows 7 (till now it worked fine on XP and Vista).

Thanks,
S.

9

I don’t think the specific status that you return a packet with will have any effect on the 9F. (But it’s still good to conform to the contract anyway…)

The most recent DTM release is much better at catching 9F bugs in the network stack – that probably explains why you are only seeing this failure now. (Win7 Beta and RC did have a bad 9F in the protocol stack, but we fixed it for RTM, and Win7 RTM is at least as sturdy as Vista. You are using Win7 RTM right?).

One common way that miniports cause a 9F is with a synchronization bug in their send path that causes a packet to be lost. If this happens, you will see a thread waiting in the protocol driver (e.g., tcpip or some ndistester protocol) or in ndis!ndisPnPNotifyBinding, as the protocol waits (forever) for that lost send packet to be completed. If you see this is the case, you should take a close look at the synchronization in your send queue, and make sure there’s no races in linked list manipulation.

!ndiskd.miniports isn’t showing your miniport because !ndiskd doesn’t work with the latest debugger version. To get it to work, you’d have to downgrade your debugger until we can issue a fixed version. Sorry; we are working on it.

You can get a checked version of ndis.sys with a MSDN subscription.

BTW, is this an NDIS 6 miniport or something else?

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Wednesday, October 21, 2009 1:29 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] DRIVER_POWER_STATE_FAILURE (9f) from pnpfiltr.sys during DTM cycle

Thanks for the reply. I’m currenty out of office (it’s very late here), I’ll do it in the morning.
In the meantime, I passed over my code again to understand may be I’,m doing something wrong. I noticed that after Surprise Removal I finish all remained packets to NDIS wit h NDIS_STATUS_UNSUCCESSFUL, while according to msdn it should be NDIS_STATUS_NOT_ACCEPTED. I wondered if it could cause such a behavior on Windows 7 (till now it worked fine on XP and Vista).

Thanks,
S.

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

10

Hello Jeffrey and Doron,

Thank you for your reply.

You are using Win7 RTM right?
Yes. That’s also explains why I didn’t see that problem occurs with RC version. Thanks for clarification.

To get it to work, you’d have to downgrade your debugger until we can issue a fixed version.
I’m currently using WinDbg:6.11.0001.404 X86 (my development PC is XP SP3). Which version should I use? Where can I get older versions of it?

BTW, is this an NDIS 6 miniport or something else?
Well, for XP and Vista I’m using NDIS 5.1, for Win7 I’m using NDIS 6.20. But now I guess that the problem exists in both versions of my driver. It’s not consistently reproducible, so probably I just didn’t see it on Vista yet (where the tests passed).
Additional question: is here a version of IRPTracker that is compatible with Win7? I tried to run it with changing the application compatibility options, but it didn’t work the same way somehow …

As for threads, here is the output of ‘!stacks 1 ndis’ and ‘!thread’ for each one of them:
kd> !stacks 1 ndis
Proc.Thread .Thread Ticks ThreadState Blocker

Max cache size is : 1048576 bytes (0x400 KB)
Total memory in cache : 0 bytes (0 KB)
Number of regions cached: 0
0 full reads broken into 0 partial reads
counts: 0 cached/0 uncached, 0.00% cached
bytes : 0 cached/0 uncached, 0.00% cached
** Prototype PTEs are implicitly decoded
[841a9020 System]
4.00002c 841b9020 0000201 Blocked ndis!ndisPnPRemoveDeviceEx+0xe3
4.0000a8 84abb360 0004eb6 Blocked ndis!ndisThreadPoolTimerHandler+0x18
4.0000ac 84abc020 000020b Blocked ndis!ndisWorkerThread+0x22
4.0000b0 84abf020 00003b4 Blocked ndis!ndisCmWaitThread+0x5b
*** ERROR: Symbol file could not be found. Defaulted to export symbols for msrpc.sys -
*** ERROR: Module load completed but symbols could not be loaded for spsys.sys

[8507d958 smss.exe]

[85623530 csrss.exe]
*** WARNING: Unable to verify timestamp for win32k.sys

[856d8278 wininit.exe]

[85546d40 csrss.exe]

[85706278 winlogon.exe]

[8572e2d0 services.exe]

[8574cc48 lsass.exe]

[85750c48 lsm.exe]

[85fba508 svchost.exe]

[85fccc88 svchost.exe]

[85ff5030 svchost.exe]

[8603a690 svchost.exe]
35c.0003e8 86067508 000103d Blocked csc!UpCallRemoveQueueRequest+0x32

[86041d40 svchost.exe]

[860708f0 svchost.exe]

[860b7288 svchost.exe]

[860df998 svchost.exe]

[86109030 spoolsv.exe]

[86112678 svchost.exe]

[841ad630 taskhost.exe]

[842a9710 dwm.exe]

[84273d40 explorer.exe]

[85fb8030 igfxtray.exe]

[8428b030 hkcmd.exe]

[842e05f0 igfxpers.exe]

[842eab70 igfxsrvc.exe]

[842c2980 SearchIndexer.]

[8429ed40 SearchProtocol]

[842665d8 SearchFilterHo]

[84322478 wmpnetwk.exe]

[843c6030 sppsvc.exe]

[8437d320 svchost.exe]

[842ec4a8 mmc.exe]

[843b2a58 WmiPrvSE.exe]

[85624540 taskhost.exe]

[844d0030 wuauclt.exe]

[844dfa60 WUDFHost.exe]

[844c0030 WmiPrvSE.exe]

[842a24e8 pnpdtest.exe]

Threads Processed: 541

Max cache size is : 1048576 bytes (0x400 KB)
Total memory in cache : 0 bytes (0 KB)
Number of regions cached: 0
0 full reads broken into 0 partial reads
counts: 0 cached/0 uncached, 0.00% cached
bytes : 0 cached/0 uncached, 0.00% cached
** Transition PTEs are implicitly decoded
** Prototype PTEs are implicitly decoded
kd> !thread 841b9020
THREAD 841b9020 Cid 0004.002c Teb: 00000000 Win32Thread: 00000000 WAIT: (Executive) KernelMode Non-Alertable
807dca48 NotificationEvent
IRP List:
84501e48: (0006,0100) Flags: 00000000 Mdl: 00000000
Not impersonating
DeviceMap 87c08a38
Owning Process 841a9020 Image: System
Attached Process N/A Image: N/A
Wait Start TickCount 19881 Ticks: 513 (0:00:00:08.015)
Context Switch Count 2446
UserTime 00:00:00.000
KernelTime 00:00:00.625
Win32 Start Address nt!ExpWorkerThread (0x82a9ba32)
Stack Init 807dcfd0 Current 807dc930 Base 807dd000 Limit 807da000 Call 0
Priority 12 BasePriority 12 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
807dc948 82a9c970 841b9020 00000000 82b66d20 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807dc980 82a9b02b 841b90e0 841b9020 807dca48 nt!KiSwapThread+0x266
807dc9a8 82a94a4f 841b9020 841b90e0 00000000 nt!KiCommitThreadWait+0x1df
807dca20 8704610a 807dca48 00000000 00000000 nt!KeWaitForSingleObject+0x393
807dca5c 8708642c 00000000 84501e48 843beee8 ndis!ndisPnPRemoveDeviceEx+0xe3 (FPO: [2,5,4])
807dcaa0 82a6ead1 843cc028 84501e48 84501e48 ndis!ndisPnPDispatch+0x814 (FPO: [2,10,4])
807dcab8 9294b539 84501e48 807dcae0 9294e27f nt!IofCallDriver+0x63
807dcac4 9294e27f 843bee30 84501e48 84501e48 pnpfiltr!FilterPassIrp+0x2d (FPO: [2,0,4])
807dcae0 9294d89b 843bee30 84501e48 84501f24 pnpfiltr!FilterSurpriseRemove+0x69 (FPO: [2,0,4])
807dcaf8 82a6ead1 843bee30 84501e48 807dcb94 pnpfiltr!FilterDispatchPnp+0xcd (FPO: [2,0,0])
807dcb10 82c1b64e 8434b528 843d4008 8434b528 nt!IofCallDriver+0x63
807dcb40 82cd0571 8434b528 00000000 843d4008 nt!IopSynchronousCall+0xc2
807dcb98 82ccc49b 8434b528 00000017 843d4008 nt!IopRemoveDevice+0xd4
807dcbc0 82cd042c 93d7f9a8 00000000 807dcc04 nt!PnpSurpriseRemoveLockedDeviceNode+0x101
807dcbd0 82cd029b 00000003 00000000 00000000 nt!PnpDeleteLockedDeviceNode+0x21
807dcc04 82ccf079 8434b528 93d7f9a8 00000003 nt!PnpDeleteLockedDeviceNodes+0x4c
807dccc4 82bfa67c 807dccf4 00000000 87ce2ba0 nt!PnpProcessQueryRemoveAndEject+0x586
807dccdc 82bf7b76 00000000 84363830 841b9020 nt!PnpProcessTargetDeviceEvent+0x38
807dcd00 82a9bb3f 84363830 00000000 841b9020 nt!PnpDeviceEventWorker+0x216
807dcd50 82c37bc3 00000001 9913b941 00000000 nt!ExpWorkerThread+0x10d
807dcd90 82afae29 82a9ba32 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84abb360
THREAD 84abb360 Cid 0004.00a8 Teb: 00000000 Win32Thread: 00000000 WAIT: (Executive) KernelMode Non-Alertable
870514e0 SynchronizationTimer
Not impersonating
DeviceMap 87c08a38
Owning Process 841a9020 Image: System
Attached Process N/A Image: N/A
Wait Start TickCount 244 Ticks: 20150 (0:00:05:14.843)
Context Switch Count 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address ndis!ndisThreadPoolTimerHandler (0x8702ac14)
Stack Init 88fccfd0 Current 88fccc38 Base 88fcd000 Limit 88fca000 Call 0
Priority 15 BasePriority 7 UnusualBoost 8 ForegroundBoost 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
88fccc50 82a9c970 84abb360 00000000 82b66d20 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
88fccc88 82a9b02b 84abb420 84abb360 870514e0 nt!KiSwapThread+0x266
88fcccb0 82a94a4f 84abb360 84abb420 00000000 nt!KiCommitThreadWait+0x1df
88fccd2c 8702ac2c 870514e0 00000000 00000000 nt!KeWaitForSingleObject+0x393
88fccd50 82c37bc3 00000000 9192b941 00000000 ndis!ndisThreadPoolTimerHandler+0x18 (FPO: [1,1,4])
88fccd90 82afae29 8702ac14 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84abc020
THREAD 84abc020 Cid 0004.00ac Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) KernelMode Non-Alertable
87051520 QueueObject
Not impersonating
DeviceMap 87c08a38
Owning Process 841a9020 Image: System
Attached Process N/A Image: N/A
Wait Start TickCount 19871 Ticks: 523 (0:00:00:08.171)
Context Switch Count 99
UserTime 00:00:00.000
KernelTime 00:00:00.062
Win32 Start Address ndis!ndisWorkerThread (0x8701a53a)
Stack Init 88fd0fd0 Current 88fd0c30 Base 88fd1000 Limit 88fce000 Call 0
Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
88fd0c48 82a9c970 84abc020 00000000 82b66d20 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
88fd0c80 82a9b02b 84abc0e0 84abc020 87051520 nt!KiSwapThread+0x266
88fd0ca8 82a9c281 84abc020 84abc0e0 00000000 nt!KiCommitThreadWait+0x1df
88fd0d0c 82aed186 87051520 00000000 00000000 nt!KeRemoveQueueEx+0x4f8
88fd0d2c 8701a55c 87051520 00000000 00000000 nt!KeRemoveQueue+0x1b
88fd0d50 82c37bc3 00000000 91937941 00000000 ndis!ndisWorkerThread+0x22 (FPO: [1,1,4])
88fd0d90 82afae29 8701a53a 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84abf020
THREAD 84abf020 Cid 0004.00b0 Teb: 00000000 Win32Thread: 00000000 WAIT: (Executive) KernelMode Non-Alertable
87050810 NotificationEvent
Not impersonating
DeviceMap 87c08a38
Owning Process 841a9020 Image: System
Attached Process N/A Image: N/A
Wait Start TickCount 19446 Ticks: 948 (0:00:00:14.812)
Context Switch Count 11
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address ndis!ndisCmWaitThread (0x87010213)
Stack Init 88fd4fd0 Current 88fd4c30 Base 88fd5000 Limit 88fd2000 Call 0
Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
88fd4c48 82a9c970 84abf020 00000000 82b66d20 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
88fd4c80 82a9b02b 84abf0e0 84abf020 87050810 nt!KiSwapThread+0x266
88fd4ca8 82a94a4f 84abf020 84abf0e0 00000076 nt!KiCommitThreadWait+0x1df
88fd4d20 8701026e 87050810 00000000 00000000 nt!KeWaitForSingleObject+0x393
88fd4d50 82c37bc3 00000000 91933941 00000000 ndis!ndisCmWaitThread+0x5b (FPO: [1,2,4])
88fd4d90 82afae29 87010213 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

Thanks for the input,
S.

11

In continue to my previous post:

My guess is that the problematic thread is ndis!ndisPnPRemoveDeviceEx+0xe3, because this is the message I get in WinDbg from the PnP filter:

“Thu Oct 22 12:23:34.359 2009 (GMT+2): PNPFILTR: WARNING: Query Result Timed out on Surprise Remove. Device did not get a Remove IRP”

Just line before I get my MiniportHalt, which is completed successfully. I verified that I didn’t receive any network buffers during the test, only OIDs.

Also, as Jeffrey told, changing status to NDIS_STATUS_NOT_ACCEPTED after surprise removal didn’t solve the problem.

How can I proceed from here?

Thanks,
S.

12

In addition to my last 2 posts: I checked that there are return all OIDs that I received.

People, any input?

Thanks,
S.

13

Yes, that is the important thread to look at. It indicates that NDIS still has an internal reference to the miniport, so NDIS is blocking removal until it sees that reference go away. The bugcheck is a timeout during removal, so you need to figure out what is causing that reference to be held.

Since it’s a ref-count issue, I would look at all the resources that your miniport has allocated (e.g., timers, DMA or shared memory ranges, devices, interrupts, etc) and make sure that you haven’t forgotten to free anything. I assume you are already using driver verifier. Does your miniport by any chance implement D3 on Disconnect?

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Thursday, October 22, 2009 4:11 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] DRIVER_POWER_STATE_FAILURE (9f) from pnpfiltr.sys during DTM cycle

In continue to my previous post:

My guess is that the problematic thread is ndis!ndisPnPRemoveDeviceEx+0xe3, because this is the message I get in WinDbg from the PnP filter:

“Thu Oct 22 12:23:34.359 2009 (GMT+2): PNPFILTR: WARNING: Query Result Timed out on Surprise Remove. Device did not get a Remove IRP”

Just line before I get my MiniportHalt, which is completed successfully. I verified that I didn’t receive any network buffers during the test, only OIDs.

Also, as Jeffrey told, changing status to NDIS_STATUS_NOT_ACCEPTED after surprise removal didn’t solve the problem.

How can I proceed from here?

Thanks,
S.

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

14

Hello Jeffrey,

Thank you for the input.

I assume you are already using driver verifier.
Yes, I do, with all options tuned on. And I didn’t see any input from the verifier.

Does your miniport by any chance implement D3 on Disconnect?
I only implement MiniportHalt function.

Also, currently I installed checked version of Window 7. If it any useful debug information that I can retrieve from ndis now?

Thanks,
S.

15

Hello Jeffrey and Doron,

Here is additional output that I get from checked version of Win7:

Sat Oct 24 10:07:19.265 2009 (GMT+2): 0x308.0x944-MSWSOCK> NtStatusToSocketError: unable to map 0xC0000225, returning
Sat Oct 24 10:07:19.265 2009 (GMT+2):
Sat Oct 24 10:07:19.281 2009 (GMT+2): –>DllGetClassObject.
Sat Oct 24 10:07:19.281 2009 (GMT+2):
Sat Oct 24 10:07:19.296 2009 (GMT+2): –>CNdisCapNotify::CNdisCapNotify(Constructor).
Sat Oct 24 10:07:19.296 2009 (GMT+2):
Sat Oct 24 10:07:19.312 2009 (GMT+2): <–CNdisCapNotify::CNdisCapNotify(Constructor).
Sat Oct 24 10:07:19.312 2009 (GMT+2):
Sat Oct 24 10:07:19.312 2009 (GMT+2): –>CNdisCapNotify INetCfgNotifyGlobal::GetSupportedNotifications.
Sat Oct 24 10:07:19.312 2009 (GMT+2):
Sat Oct 24 10:07:19.328 2009 (GMT+2): <–CNdisCapNotify INetCfgNotifyGlobal::GetSupportedNotifications(HRESULT = 0).
Sat Oct 24 10:07:19.328 2009 (GMT+2):
Sat Oct 24 10:07:19.343 2009 (GMT+2): –>CNdisCapNotify INetCfgControl::Initialize (fInstalling=0).
Sat Oct 24 10:07:19.343 2009 (GMT+2):
Sat Oct 24 10:07:19.359 2009 (GMT+2): <–CNdisCapNotify INetCfgControl::Initialize(HRESULT = 0).
Sat Oct 24 10:07:19.359 2009 (GMT+2):
Sat Oct 24 10:07:19.562 2009 (GMT+2): NETCFG Warning: CConnectionList::HrUpdateNameByGuid hr=0x00000001 File:d:\w7rtm\net\config\shell\folder\connlist.cpp,1850:
Sat Oct 24 10:07:19.562 2009 (GMT+2):
Sat Oct 24 10:07:19.671 2009 (GMT+2): NETCFG Warning: CFilteredAdapters::HrLoadFilteredAdaptersFromCore hr=0x00000001 File:d:\w7rtm\net\config\netcfg\engine\lwfilter.cpp,1273:
Sat Oct 24 10:07:19.671 2009 (GMT+2):
Sat Oct 24 10:07:19.687 2009 (GMT+2): –>CNdisCapNotify::~CNdisCapNotify(Destructor).
Sat Oct 24 10:07:19.687 2009 (GMT+2):
Sat Oct 24 10:07:19.703 2009 (GMT+2): <–CNdisCapNotify::~CNdisCapNotify(Destructor).
Sat Oct 24 10:07:19.703 2009 (GMT+2):
Sat Oct 24 10:07:19.906 2009 (GMT+2): NETCFG *ERROR*: HrQueryDeviceOIDByName could not read the device properties for device \DEVICE{E0A9F8A1-1C60-4613-843E-071ADB17BC37} [The system cannot find the file specified.] Win32=2,0x00000002 hr=0x80070002 File:d:\w7rtm\net\config\common\ncnetcon\naming.cpp,727:
Sat Oct 24 10:07:19.906 2009 (GMT+2):
Sat Oct 24 10:07:19.937 2009 (GMT+2): NETCFG *ERROR*: HrGetPseudoMediaTypes [The system cannot find the file specified.] Win32=2,0x00000002 hr=0x80070002 File:d:\w7rtm\net\config\common\ncnetcon\naming.cpp,442
Sat Oct 24 10:07:19.937 2009 (GMT+2):
Sat Oct 24 10:07:20.109 2009 (GMT+2): NETCFG Warning: CConnectionList::HrUpdateNameByGuid hr=0x00000001 File:d:\w7rtm\net\config\shell\folder\connlist.cpp,1850:
Sat Oct 24 10:07:20.109 2009 (GMT+2):
Sat Oct 24 10:07:59.250 2009 (GMT+2): –>DllCanUnloadNow.
Sat Oct 24 10:07:59.250 2009 (GMT+2):
Sat Oct 24 10:07:59.265 2009 (GMT+2): –>DllCanUnloadNow(HRESULT = 0).
Sat Oct 24 10:07:59.265 2009 (GMT+2):
Sat Oct 24 10:08:32.984 2009 (GMT+2): Out-of-range value: Height greater than constraint for desired size.
Sat Oct 24 10:08:32.984 2009 (GMT+2):
Sat Oct 24 10:08:35.078 2009 (GMT+2): DUIXMLParserFailure (parse state 9): DUIXmlParser: Could not find element with resid ‘ViewLayout’ (DUI_E_MISSINGPROPERTY) @ line -1 col -1
Sat Oct 24 10:08:35.078 2009 (GMT+2):
Sat Oct 24 10:08:38.218 2009 (GMT+2): DUIXMLParserFailure (parse state 9): DUIXmlParser: Could not find element with resid ‘ViewLayout’ (DUI_E_MISSINGPROPERTY) @ line -1 col -1
Sat Oct 24 10:08:38.218 2009 (GMT+2):
Sat Oct 24 10:08:39.234 2009 (GMT+2): err comctlv6 warning: orphan subclass: fn 006EF3F6, id 00000000, dw 061d0980
Sat Oct 24 10:08:39.234 2009 (GMT+2):
Sat Oct 24 10:08:39.250 2009 (GMT+2):
Sat Oct 24 10:08:39.250 2009 (GMT+2):
Sat Oct 24 10:08:39.265 2009 (GMT+2): err comctlv6 warning: orphan subclass: fn 006EF3F6, id 00000000, dw 06200d90
Sat Oct 24 10:08:39.265 2009 (GMT+2):
Sat Oct 24 10:08:39.265 2009 (GMT+2):
Sat Oct 24 10:08:39.265 2009 (GMT+2):
Sat Oct 24 10:08:39.406 2009 (GMT+2): err comctlv6 warning: orphan subclass: fn 006EF3F6, id 00000000, dw 02ba1738
Sat Oct 24 10:08:39.406 2009 (GMT+2):
Sat Oct 24 10:08:39.406 2009 (GMT+2):
Sat Oct 24 10:08:39.406 2009 (GMT+2):
Sat Oct 24 10:08:39.515 2009 (GMT+2): 548.1544> SPM-Error: LsapUpdateFormatsForLogon: SecpTranslateNameEx(sxd-labtest00, sxd-labtest00\pool) failed: 1355
Sat Oct 24 10:08:39.515 2009 (GMT+2):
Sat Oct 24 10:08:39.531 2009 (GMT+2): 548.1544> SPM-Error: LsapRefreshNamesForLogonSession: LsapUpdateFormatsForLogon(sxd-labtest00, sxd-labtest00\pool) failed: 1355
Sat Oct 24 10:08:39.531 2009 (GMT+2):
Sat Oct 24 10:08:39.859 2009 (GMT+2): 548.1544> SPM-Error: LsapUpdateFormatsForLogon: SecpTranslateNameEx(sxd-labtest00, sxd-labtest00\pool) failed: 1355
Sat Oct 24 10:08:39.859 2009 (GMT+2):
Sat Oct 24 10:08:39.875 2009 (GMT+2): 548.1544> SPM-Error: LsapRefreshNamesForLogonSession: LsapUpdateFormatsForLogon(sxd-labtest00, sxd-labtest00\pool) failed: 1355
Sat Oct 24 10:08:39.875 2009 (GMT+2):
Sat Oct 24 10:08:42.171 2009 (GMT+2): Explorer [3872] Uxtheme: No TMBITMAPHEADER: class=Toolbar, hr=0x80004005
Sat Oct 24 10:08:42.171 2009 (GMT+2):
Sat Oct 24 10:08:46.875 2009 (GMT+2): Explorer [3872] Uxtheme: No TMBITMAPHEADER: class=Toolbar, hr=0x80004005
Sat Oct 24 10:08:46.875 2009 (GMT+2):
Sat Oct 24 10:08:53.171 2009 (GMT+2): Remove Child Node. Node Ref Count = 3
Sat Oct 24 10:08:53.171 2009 (GMT+2):
Sat Oct 24 10:08:54.187 2009 (GMT+2): FileLogger::Initialize failed
Sat Oct 24 10:08:54.187 2009 (GMT+2):
Sat Oct 24 10:08:57.296 2009 (GMT+2): FileLogger::Initialize failed
Sat Oct 24 10:08:57.296 2009 (GMT+2):
Sat Oct 24 10:10:25.234 2009 (GMT+2): Explorer [3872] Uxtheme: No TMBITMAPHEADER: class=Toolbar, hr=0x80004005
Sat Oct 24 10:10:25.234 2009 (GMT+2):
Sat Oct 24 10:10:29.250 2009 (GMT+2): Explorer [3872] Uxtheme: No TMBITMAPHEADER: class=Toolbar, hr=0x80004005
Sat Oct 24 10:10:29.250 2009 (GMT+2):
Sat Oct 24 10:10:36.312 2009 (GMT+2): 548.2068> SPM-Error: LsapUpdateFormatsForLogon: SecpTranslateNameEx(sxd-labtest00, sxd-labtest00\pool) failed: 1355
Sat Oct 24 10:10:36.312 2009 (GMT+2):
Sat Oct 24 10:10:36.343 2009 (GMT+2): 548.2068> SPM-Error: LsapRefreshNamesForLogonSession: LsapUpdateFormatsForLogon(sxd-labtest00, sxd-labtest00\pool) failed: 1355
Sat Oct 24 10:10:36.343 2009 (GMT+2):
Sat Oct 24 10:10:38.765 2009 (GMT+2): PNPFILTR: WARNING: Query Result Timed out on Surprise Remove. Device did not get a Remove IRP
Sat Oct 24 10:10:38.765 2009 (GMT+2):
Sat Oct 24 10:10:38.781 2009 (GMT+2): PNPFILTR: Number of IRPs Stored… 3
Sat Oct 24 10:10:38.781 2009 (GMT+2):
Sat Oct 24 10:10:38.781 2009 (GMT+2): PNPFILTR: Query Result - Releasing the remove
Sat Oct 24 10:10:38.781 2009 (GMT+2):
Sat Oct 24 10:10:38.796 2009 (GMT+2): PNPFILTR: Query Result -Result Stored Event set
Sat Oct 24 10:10:38.796 2009 (GMT+2):
Sat Oct 24 10:10:38.812 2009 (GMT+2): Relevant Sequence of Irps:
Sat Oct 24 10:10:38.812 2009 (GMT+2):
Sat Oct 24 10:10:38.828 2009 (GMT+2): IRP_MN_QUERY_PNP_DEVICE_STATE
Sat Oct 24 10:10:38.828 2009 (GMT+2):
Sat Oct 24 10:10:38.828 2009 (GMT+2): IRP_MN_QUERY_DEVICE_RELATIONS
Sat Oct 24 10:10:38.828 2009 (GMT+2):
Sat Oct 24 10:10:38.843 2009 (GMT+2): IRP_MN_SURPRISE_REMOVAL
Sat Oct 24 10:10:38.843 2009 (GMT+2):
Sat Oct 24 10:11:01.000 2009 (GMT+2): MSXML6
Sat Oct 24 10:11:01.000 2009 (GMT+2):
Sat Oct 24 10:11:01.000 2009 (GMT+2): !
Sat Oct 24 10:11:01.000 2009 (GMT+2):
Sat Oct 24 10:11:01.015 2009 (GMT+2): Memory
Sat Oct 24 10:11:01.015 2009 (GMT+2):
Sat Oct 24 10:11:01.015 2009 (GMT+2): :
Sat Oct 24 10:11:01.015 2009 (GMT+2):
Sat Oct 24 10:11:01.031 2009 (GMT+2): No leaks - peak allocation size 255372
Sat Oct 24 10:11:01.031 2009 (GMT+2):
Sat Oct 24 10:11:01.031 2009 (GMT+2):
Sat Oct 24 10:11:01.031 2009 (GMT+2):
Sat Oct 24 10:12:59.250 2009 (GMT+2): –>DllCanUnloadNow.
Sat Oct 24 10:12:59.250 2009 (GMT+2):
Sat Oct 24 10:12:59.265 2009 (GMT+2): –>DllCanUnloadNow(HRESULT = 0).
Sat Oct 24 10:12:59.265 2009 (GMT+2):
Sat Oct 24 10:15:54.718 2009 (GMT+2): convertinfo failed invalid Compression in header
Sat Oct 24 10:15:54.718 2009 (GMT+2):
Sat Oct 24 10:15:54.750 2009 (GMT+2): convertinfo failed invalid Compression in header
Sat Oct 24 10:15:54.750 2009 (GMT+2):
Sat Oct 24 10:17:59.250 2009 (GMT+2): –>DllCanUnloadNow.
Sat Oct 24 10:17:59.250 2009 (GMT+2):
Sat Oct 24 10:17:59.265 2009 (GMT+2): –>DllCanUnloadNow(HRESULT = 0).
Sat Oct 24 10:17:59.265 2009 (GMT+2):
Sat Oct 24 10:17:59.390 2009 (GMT+2): VssAPI: DllMain - DLL_PROCESS_DETACH called, by FreeLibrary
Sat Oct 24 10:17:59.390 2009 (GMT+2):
Sat Oct 24 10:17:59.390 2009 (GMT+2):

The \DEVICE{E0A9F8A1-1C60-4613-843E-071ADB17BC37} should represent my device (the GUID E0A9F8A1-1C60-4613-843E-071ADB17BC37 belongs to my NIC.

Any input?

Thanks,
S.

16

Hi,

Here is some additional info. Please see the output of !exqueue. There are a few Critical Worker and one Hyper Critical worker, all in WAIT state (no Pending states there), all wait for context switching.
I also noticed that my thread is not in a Critical Worker queue, but in Delatyed one, and it holds a lock (see output of the !locks and !stacks 1 ndis at the end of the output below, the interesting ndis thread is 90f1c610).

Any input, people?

Thanks,
S.

kd> !dpcs
CPU Type KDPC Function

dpcs: no pending DPCs found
kd> !ready
Processor 0: No threads in READY state
kd> !miniports
NDIS Driver verifier level: fa
NDIS Failed allocations : 0
Miniport Driver Block: 8c35e010, Version 0.0
Miniport: 8c35f0e0, NetLuidIndex: 2, IfIndex: 17, CDC ECM Ethernet Adapter #3
Miniport Driver Block: 90e91570, Version 0.0
Miniport: 90e9b0e0, NetLuidIndex: 0, IfIndex: 2, WAN Miniport (SSTP)
Miniport Driver Block: 90e6fdd0, Version 0.0
Miniport: 90e900e0, NetLuidIndex: 3, IfIndex: 5, WAN Miniport (PPTP)
Miniport Driver Block: 90e87418, Version 0.0
Miniport: 90e930e0, NetLuidIndex: 0, IfIndex: 6, WAN Miniport (PPPOE)
Miniport Driver Block: 90e6c530, Version 0.0
Miniport: 90e6e0e0, NetLuidIndex: 0, IfIndex: 7, WAN Miniport (IPv6)
Miniport: 90e860e0, NetLuidIndex: 4, IfIndex: 10, WAN Miniport (IP)
Miniport: 90e820e0, NetLuidIndex: 1, IfIndex: 8, WAN Miniport (Network Monitor)
Miniport Driver Block: 90e816f0, Version 0.0
Miniport: 90e840e0, NetLuidIndex: 2, IfIndex: 4, WAN Miniport (L2TP)
Miniport Driver Block: 90e73010, Version 1.0
Miniport: 90e800e0, NetLuidIndex: 1, IfIndex: 3, WAN Miniport (IKEv2)
Miniport Driver Block: 8ddd1250, Version 1.0
Miniport: 8ddf30e0, NetLuidIndex: 2, IfIndex: 9, Broadcom NetXtreme 57xx Gigabit Controller
Miniport Driver Block: 8ddd4010, Version 1.0
Miniport: 8dded0e0, NetLuidIndex: 5, IfIndex: 12, Teredo Tunneling Pseudo-Interface
Miniport: 8ddc10e0, NetLuidIndex: 7, IfIndex: 19, Microsoft ISATAP Adapter #3
Miniport: 8dddf0e0, NetLuidIndex: 6, IfIndex: 15, Microsoft ISATAP Adapter #2
Miniport: 8dddd0e0, NetLuidIndex: 4, IfIndex: 11, Microsoft ISATAP Adapter
kd> !miniport 8c35f0e0

Miniport 8c35f0e0 : CDC ECM Ethernet Adapter #3, v6.14

AdapterContext : 00000000
Flags : 0c452000
IGNORE_TOKEN_RING_ERRORS, DESERIALIZED, RESOURCES_AVAILABLE
SUPPORTS_MEDIA_SENSE, DOES_NOT_DO_LOOPBACK,
NOT_BUS_MASTER, NOT_MEDIA_CONNECTED,
PnPFlags : 20720010
REMOVE_IN_PROGRESS, REJECT_REQUESTS, VERIFYING
HARDWARE_DEVICE, NDIS_WDM_DRIVER,
MiniportState : STATE_HALTED
IfIndex : 17
Ndis5MiniportInNdis6Mode : 0
InternalResetCount : 0000
MiniportResetCount : 0000
References : 48
UserModeOpenReferences: 48
PnPDeviceState : PNP_DEVICE_REMOVED
CurrentDevicePowerState : PowerDeviceD0
Bus PM capabilities
DeviceD1: 1
DeviceD2: 0
WakeFromD0: 0
WakeFromD1: 1
WakeFromD2: 0
WakeFromD3: 0

SystemState DeviceState
PowerSystemUnspecified PowerDeviceUnspecified
S0 D0
S1 D1
S2 D3
S3 D3
S4 D3
S5 D3
SystemWake: PowerSystemUnspecified
DeviceWake: D1
Current PnP and PM Settings: : 10000010
DISABLE_WAKE_UP,
No Resources Allocated
MediaType : Wireless WAN
DeviceObject : 8c35f028, PhysDO : 8c322168 Next DO: 8c35eea0
MapRegisters : 00000000
FirstPendingPkt: 00000000
DriverVerifyFlags : 00000000
Miniport Interrupt : 00000000
Miniport version 6.14
Miniport Filter List:
Miniport Open Block Queue:
kd> !exqueue
Dumping ExWorkerQueue: 82BEA740

**** Critical WorkQueue( current = 0 maximum = 1 )
THREAD 84de1d48 Cid 0004.0018 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de1a70 Cid 0004.001c Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de1798 Cid 0004.0020 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de14c0 Cid 0004.0024 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de11e8 Cid 0004.0028 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 8dce4d48 Cid 0004.0114 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 8dd1c020 Cid 0004.0118 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 8dd3c108 Cid 0004.0120 Teb: 00000000 Win32Thread: 00000000 WAIT

**** Delayed WorkQueue( current = 0 maximum = 1 )
THREAD 84de3020 Cid 0004.002c Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de3d48 Cid 0004.0030 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de3a70 Cid 0004.0034 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de3798 Cid 0004.0038 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de34c0 Cid 0004.003c Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de4020 Cid 0004.0040 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 84de4d48 Cid 0004.0044 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 8dd1cd48 Cid 0004.011c Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 8dd52020 Cid 0004.0124 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 90ef8020 Cid 0004.0154 Teb: 00000000 Win32Thread: 00000000 WAIT
THREAD 90f1c610 Cid 0004.0158 Teb: 00000000 Win32Thread: 00000000 WAIT

**** HyperCritical WorkQueue( current = 0 maximum = 1 )
THREAD 84de4a70 Cid 0004.0048 Teb: 00000000 Win32Thread: 00000000 WAIT

kd> !thread 84de4a70
THREAD 84de4a70 Cid 0004.0048 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) KernelMode
Non-Alertable
82bea7b8 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274662883 Ticks: 111 (0:00:00:01.734)
Context Switch Count 426
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 807f8fd0 Current 807f8c28 Base 807f9000 Limit 807f6000 Call 0
Priority 15 BasePriority 15 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
807f8c40 82877fae 84de4a70 000031d8 00000000 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807f8c78 82879583 84de4b30 84de4a70 000031d8 nt!KiSwapThread+0x394
807f8ca0 8286f2f1 84de4a70 84de4b30 00000000 nt!KiCommitThreadWait+0x461
807f8cf0 8299555f 82bea7b8 807f8d00 00000000 nt!KeRemoveQueueEx+0x723
807f8d54 82f0810c 00000002 9eb61c54 00000000 nt!ExpWorkerThread+0xf7
807f8d90 829b2cc5 82995468 00000002 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84de1d48
THREAD 84de1d48 Cid 0004.0018 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274647755 Ticks: 15239 (0:00:03:58.109)
Context Switch Count 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 807c8fd0 Current 807c8c28 Base 807c9000 Limit 807c6000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
ChildEBP RetAddr Args to Child
807c8c40 82877fae 84de1d48 000031d8 00000000 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807c8c78 82879583 84de1e08 84de1d48 000031d8 nt!KiSwapThread+0x394
807c8ca0 8286f2f1 84de1d48 84de1e08 00000000 nt!KiCommitThreadWait+0x461
807c8cf0 8299555f 82bea740 807c8d01 00000000 nt!KeRemoveQueueEx+0x723
807c8d54 82f0810c 00000000 9eb51c54 00000000 nt!ExpWorkerThread+0xf7
807c8d90 829b2cc5 82995468 00000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84de1a70
THREAD 84de1a70 Cid 0004.001c Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274647755 Ticks: 15239 (0:00:03:58.109)
Context Switch Count 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 807ccfd0 Current 807ccc28 Base 807cd000 Limit 807ca000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
ChildEBP RetAddr Args to Child
807ccc40 82877fae 84de1a70 000031d8 00000000 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807ccc78 82879583 84de1b30 84de1a70 000031d8 nt!KiSwapThread+0x394
807ccca0 8286f2f1 84de1a70 84de1b30 00000000 nt!KiCommitThreadWait+0x461
807cccf0 8299555f 82bea740 807ccd01 00000000 nt!KeRemoveQueueEx+0x723
807ccd54 82f0810c 00000000 9eb55c54 00000000 nt!ExpWorkerThread+0xf7
807ccd90 829b2cc5 82995468 00000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84de1798
THREAD 84de1798 Cid 0004.0020 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274647755 Ticks: 15239 (0:00:03:58.109)
Context Switch Count 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 807d0fd0 Current 807d0c28 Base 807d1000 Limit 807ce000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
ChildEBP RetAddr Args to Child
807d0c40 82877fae 84de1798 000031d8 00000000 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807d0c78 82879583 84de1858 84de1798 000031d8 nt!KiSwapThread+0x394
807d0ca0 8286f2f1 84de1798 84de1858 00000000 nt!KiCommitThreadWait+0x461
807d0cf0 8299555f 82bea740 807d0d01 00000000 nt!KeRemoveQueueEx+0x723
807d0d54 82f0810c 00000000 9eb49c54 00000000 nt!ExpWorkerThread+0xf7
807d0d90 829b2cc5 82995468 00000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84de14c0
THREAD 84de14c0 Cid 0004.0024 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274648320 Ticks: 14674 (0:00:03:49.281)
Context Switch Count 6
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 807d4fd0 Current 807d4c28 Base 807d5000 Limit 807d2000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
ChildEBP RetAddr Args to Child
807d4c40 82877fae 84de14c0 000031d8 00000000 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807d4c78 82879583 84de1580 84de14c0 000031d8 nt!KiSwapThread+0x394
807d4ca0 8286f2f1 84de14c0 84de1580 00000000 nt!KiCommitThreadWait+0x461
807d4cf0 8299555f 82bea740 807d4d01 00000000 nt!KeRemoveQueueEx+0x723
807d4d54 82f0810c 00000000 9eb4dc54 00000000 nt!ExpWorkerThread+0xf7
807d4d90 829b2cc5 82995468 00000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 84de11e8
THREAD 84de11e8 Cid 0004.0028 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274662784 Ticks: 210 (0:00:00:03.281)
Context Switch Count 17474
UserTime 00:00:00.000
KernelTime 00:00:01.421
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 807d8fd0 Current 807d8c28 Base 807d9000 Limit 807d6000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
807d8c40 82877fae 84de11e8 000031d8 00000000 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807d8c78 82879583 84de12a8 84de11e8 000031d8 nt!KiSwapThread+0x394
807d8ca0 8286f2f1 84de11e8 84de12a8 00000000 nt!KiCommitThreadWait+0x461
807d8cf0 8299555f 82bea740 807d8d01 00000000 nt!KeRemoveQueueEx+0x723
807d8d54 82f0810c 00000000 9eb41c54 00000000 nt!ExpWorkerThread+0xf7
807d8d90 829b2cc5 82995468 00000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 8dce4d48
THREAD 8dce4d48 Cid 0004.0114 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274661760 Ticks: 1234 (0:00:00:19.281)
Context Switch Count 968
UserTime 00:00:00.000
KernelTime 00:00:00.078
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 8bda1fd0 Current 8bda1c28 Base 8bda2000 Limit 8bd9f000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
8bda1c40 82877fae 8dce4d48 000031d8 8dce4dd8 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
8bda1c78 82879583 8dce4e08 8dce4d48 000031d8 nt!KiSwapThread+0x394
8bda1ca0 8286f2f1 8dce4d48 8dce4e08 00000080 nt!KiCommitThreadWait+0x461
8bda1cf0 8299555f 82bea740 8bda1d01 00000000 nt!KeRemoveQueueEx+0x723
8bda1d54 82f0810c 80000000 95138c54 00000000 nt!ExpWorkerThread+0xf7
8bda1d90 829b2cc5 82995468 80000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 8dd1c020
THREAD 8dd1c020 Cid 0004.0118 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274662667 Ticks: 327 (0:00:00:05.109)
Context Switch Count 233
UserTime 00:00:00.000
KernelTime 00:00:00.031
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 8bda5fd0 Current 8bda5c28 Base 8bda6000 Limit 8bda3000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
8bda5c40 82877fae 8dd1c020 000031d8 8dd1c0b0 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
8bda5c78 82879583 8dd1c0e0 8dd1c020 000031d8 nt!KiSwapThread+0x394
8bda5ca0 8286f2f1 8dd1c020 8dd1c0e0 0000000b nt!KiCommitThreadWait+0x461
8bda5cf0 8299555f 82bea740 8bda5d01 00000000 nt!KeRemoveQueueEx+0x723
8bda5d54 82f0810c 80000000 9513cc54 00000000 nt!ExpWorkerThread+0xf7
8bda5d90 829b2cc5 82995468 80000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !thread 8dd3c108
THREAD 8dd3c108 Cid 0004.0120 Teb: 00000000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode
Non-Alertable
82bea740 QueueObject
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274662976 Ticks: 18 (0:00:00:00.281)
Context Switch Count 1329
UserTime 00:00:00.000
KernelTime 00:00:00.156
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 8bdadfd0 Current 8bdadc28 Base 8bdae000 Limit 8bdab000 Call 0
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
8bdadc40 82877fae 8dd3c108 000031d8 8dd3c198 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
8bdadc78 82879583 8dd3c1c8 8dd3c108 000031d8 nt!KiSwapThread+0x394
8bdadca0 8286f2f1 8dd3c108 8dd3c1c8 00000040 nt!KiCommitThreadWait+0x461
8bdadcf0 8299555f 82bea740 8bdadd01 00000000 nt!KeRemoveQueueEx+0x723
8bdadd54 82f0810c 80000000 95134c54 00000000 nt!ExpWorkerThread+0xf7
8bdadd90 829b2cc5 82995468 80000000 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !locks
**** DUMP OF ALL RESOURCE OBJECTS ****
KD: Scanning for held
locks…
…

Resource @ nt!IopDeviceTreeLock (0x82c91ce0) Shared 1 owning threads
Threads: 90f1c610-01
KD: Scanning for held locks.

Resource @ nt!PiEngineLock (0x82c91c60) Exclusively owned
Contention Count = 3
Threads: 90f1c610-01
KD: Scanning for held
locks…
…
…
…
13161 total locks, 2 locks currently held
kd> !thread 90f1c610
THREAD 90f1c610 Cid 0004.0158 Teb: 00000000 Win32Thread: 00000000 WAIT: (Executive)
KernelMode Non-Alertable
807b2878 NotificationEvent
IRP List:
8c6426c8: (0006,0124) Flags: 40000000 Mdl: 00000000
Not impersonating
DeviceMap 88e08838
Owning Process 84dd96a8 Image: System
Wait Start TickCount 274662705 Ticks: 289 (0:00:00:04.515)
Context Switch Count 1592
UserTime 00:00:00.000
KernelTime 00:00:00.812
Win32 Start Address nt!ExpWorkerThread (0x82995468)
Stack Init 807b2fd0 Current 807b2768 Base 807b3000 Limit 807b0000 Call 0
Priority 12 BasePriority 12 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr Args to Child
807b2780 82877fae 90f1c610 000031d8 00000000 nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
807b27b8 82879583 90f1c6d0 90f1c610 807b2878 nt!KiSwapThread+0x394
807b27e0 8286aa1d 90f1c610 90f1c6d0 00000000 nt!KiCommitThreadWait+0x461
807b2850 87ae350a 807b2878 00000000 00000000 nt!KeWaitForSingleObject+0x505
807b288c 87b65c3e 00000000 8c6426c8 8c35f028 ndis!ndisPnPRemoveDeviceEx+0x100 (FPO: [Non-Fpo])
807b28d0 8301664c 8c35f028 8c6426c8 8c35f028 ndis!ndisPnPDispatch+0xb2a (FPO: [Non-Fpo])
807b28f4 8284bfa7 00000000 8c6427c0 8c6427e4 nt!IovCallDriver+0x2ac
807b2910 83029b4d 8c35ccd8 8c6426c8 96179ed0 nt!IofCallDriver+0x1d
807b2928 8301664c 8c35ccd8 8c35f028 8c35ccd8 nt!ViFilterDispatchPnp+0x2cd
807b294c 8284bfa7 00000000 8c35cba0 8c6426c8 nt!IovCallDriver+0x2ac
807b2968 87ee5539 8c6426c8 807b2990 87ee827f nt!IofCallDriver+0x1d
807b2974 87ee827f 8c35cae8 8c6426c8 8c6426c8 pnpfiltr!FilterPassIrp+0x2d (FPO: [Non-Fpo])
807b2990 87ee789b 8c35cae8 8c6426c8 8c35cae8 pnpfiltr!FilterSurpriseRemove+0x69 (FPO: [Non-
Fpo])
807b29a8 8301664c 8c35cae8 8c6426c8 8c35cae8 pnpfiltr!FilterDispatchPnp+0xcd (FPO: [Non-Fpo])
807b29cc 8284bfa7 00000000 8c6427ec 807b2a74 nt!IovCallDriver+0x2ac
807b29e8 82d59b0f 8c322168 8c34ecc8 8c322168 nt!IofCallDriver+0x1d
807b2a18 82d59e7e 8c322168 807b2a50 c00000bb nt!IopSynchronousCall+0x111
807b2a78 82d44221 8c322168 00000017 8c34ecc8 nt!IopRemoveDevice+0x130
807b2aa8 82d4406c 00000000 99352880 00000000 nt!PnpSurpriseRemoveLockedDeviceNode+0x14f
807b2abc 82d44485 00000003 99352880 00000000 nt!PnpDeleteLockedDeviceNode+0x62
807b2af4 82d4f5ff 8c322168 99352880 00000003 nt!PnpDeleteLockedDeviceNodes+0x85
807b2bb4 82d4fe56 807b2be8 993138d0 00000000 nt!PnpProcessQueryRemoveAndEject+0x673
807b2bcc 82d4e446 00000000 8dc9c920 90f1c610 nt!PnpProcessTargetDeviceEvent+0x66
807b2d04 82995591 8dc9c920 84dd96a8 90f1c610 nt!PnpDeviceEventWorker+0x3e0
807b2d54 82f0810c 80000001 9eb2bc54 00000000 nt!ExpWorkerThread+0x129
807b2d90 829b2cc5 82995468 80000001 00000000 nt!PspSystemThreadStartup+0x178
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

kd> !stacks 1 ndis
Proc.Thread .Thread Ticks ThreadState Blocker

Max cache size is : 1048576 bytes (0x400 KB)
Total memory in cache : 0 bytes (0 KB)
Number of regions cached: 0
0 full reads broken into 0 partial reads
counts: 0 cached/0 uncached, 0.00% cached
bytes : 0 cached/0 uncached, 0.00% cached
** Prototype PTEs are implicitly decoded
[84dd96a8 System]
*** ERROR: Module load completed but symbols could not be loaded for nvraid.sys
4.0000d8 8d0f1a08 0003ae6 Blocked nt!KiCommitThreadWait+0x461
4.0000dc 8d0f1730 0000107 Blocked nt!KiCommitThreadWait+0x461
4.0000e0 8d0f2570 0000651 Blocked nt!KiCommitThreadWait+0x461
4.000158 90f1c610 0000121 Blocked nt!KiCommitThreadWait+0x461
*** ERROR: Module load completed but symbols could not be loaded for spsys.sys