Bug Check 0x7C: BUGCODE_NDIS_DRIVER

0x02

NDIS_BUGCHECK_SHARED_MEM_CORRUPTION

During a call to NdisMAllocateSharedMemory, NDIS detected that a previously-allocated shared memory page had been corrupted.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

The shared memory page that was corrupted

The address of a NDIS_WRAPPER_CONTEXTE that keeps track of shared memory allocations by the driver

0x04

NDIS_BUGCHECK_UNLOAD_DRIVER_INVALID_PARAMETER

AddDevice was called with a driver that is not on the list of drivers that are registered with NDIS.

Enabled only on special instrumented NDIS.

The address of the NDIS_M_DRIVER_BLOCK

The address of the DRIVER_OBJECT

0

0x06

NDIS_BUGCHECK_RECVD_PACKET_IN_USE_BAD_REF_COUNT

An Ethernet driver indicated that it received a packet using a packet descriptor that was currently in use by the protocol stack.

Caught by checking packet reference count.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

The address of the packet descriptor used by the driver. Run !ndiskd.pkt with this address for more information.

The address of the packet array that contained this packet descriptor

0x08

NDIS_BUGCHECK_HALT_WITHOUT_INTERRUPT_DEREGISTER

A miniport driver did not deregister its interrupt during the halt process.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

The address of the NDIS_MINIPORT_INTERRUPT

0

0x0A

NDIS_BUGCHECK_DRIVER_UNLOAD_UNEXPECTED

A miniport driver is getting unloaded prematurely.

The address of the NDIS_M_DRIVER_BLOCK

The address of the DRIVER_OBJECT

The reference count for the miniport driver

0x0C

NDIS_BUGCHECK_INIT_FAILED_WITHOUT_CANCEL_TIMER

A miniport driver failed its initialization without successfully canceling all its timers.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

The address of the miniport driver's timer queue (NDIS_MINIPORT_TIMER)

0

0x0E

NDIS_BUGCHECK_HALT_INIT_WITHOUT_CANCEL_TIMER

A miniport driver stopped without successfully canceling all its timers.

The halt was called from the initialize routine after the miniport driver returned success from its initialize handler.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

The address of the miniport driver's timer queue (NDIS_MINIPORT_TIMER)

0

0x10

NDIS_BUGCHECK_PM_INIT_FAILED_NO_INT_DEREGISTER

After resuming from a low-power state, a miniport driver failed its initialization without deregistering its interrupt.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

The address of the NDIS_MINIPORT_INTERRUPT

0

0x12

NDIS_BUGCHECK_NFILTER_RECVD_PACKET_BAD_REF_COUNT

A miniport driver indicated that it received a packet using a packet descriptor that was currently in use by the protocol stack.

Caught by checking packet reference count.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

The address of the packet descriptor used by the driver. Run !ndiskd.pkt with this address for more information.

The address of the packet array that contained this packet descriptor

0x14

NDIS_BUGCHECK_WAIT_EVENT_HIGH_IRQL

An NDIS driver called NdisWaitEvent at an illegal IRQL

The actual IRQL

0

0

0x16

NDIS_BUGCHECK_INVALID_OPEN_IN_BIND_CONTEXT

A protocol driver improperly opened an adapter during binding.

The address of the specific protocol. Run !ndiskd.protocol with this address for more information.

The address of the context area that is allocated by the protocol driver.

Cast to ndis!NDIS_BIND_CONTEXT.

The address of the open handle. Run !ndiskd.mopen with this address for more information.

0x1B

NDIS_BUGCHECK_IF_STACK_TABLE_LOOP

A driver attempted to add an Interface to the ifStackTable, but doing so would cause a cycle. The ifStackTable must not have cycles. Run !ndiskd.ifstacktable to see the current table (prior to this call to NdisIfAddIfStackEntry).

The HigherLayerIfIndex being added to the table

The LowerLayerIfIndex being added to the table

0

0x1D

NDIS_BUGCHECK_OID_REQUEST_INVALID_BUFFER

A miniport driver or filter driver has completed an OID request illegally. Check that BytesWritten is not greater than the entire length of the buffer.

The address of the specific miniport adapter or filter module block. Run !ndiskd.netadapter or !ndiskd.filter with this address for more information.

The address to the NDIS_OID_REQUEST that was completed illegally. Inspect it with !ndiskd.oid.

0

0x1F

NDIS_BUGCHECK_ILLEGAL_MINIPORT_STATE_TRANSITION

A miniport driver completed a state transition illegally.

What failed. Possible values:

1. NDIS_BUGCHECK_ILLEGAL_MINIPORT_STATE_TRANSITION_PAUSE_COMPLETE

   The miniport called NdisMPauseComplete but there was no pending Pause operation.

2. NDIS_BUGCHECK_ILLEGAL_MINIPORT_STATE_TRANSITION_RESTART_COMPLETE

   The miniport called NdisMRestartComplete but there was no pending Restart operation.

The address of the specific miniport adapter block. Run !ndiskd.netadapter with this address for more information.

0

0x21

NDIS_BUGCHECK_INVALID_OBJECT_HEADER

A driver created an invalid NDIS_OBJECT_HEADER.

The handle of the driver that indicated the illegal status indication. Run !ndiskd.minidriver or !ndiskd.filterdriver with this handle for more information.

The object with the malformed header. Its interpretation depends on the API being called. For example, if the driver called NdisAllocateCloneOidRequest, then cast the object to ndis!NDIS_OID_REQUEST.

0

0x23

NDIS_BUGCHECK_PD_ERROR

An error was detected in the Packet Direct datapath.

The subtype of the bugcheck. Possible values:

1. NDIS_BUGCHECK_PD_ERROR_EC_THREAD_MISMATCH

   An API was called on the wrong thread.

2. NDIS_BUGCHECK_PD_ERROR_ILLEGAL_ARM_BY_CLIENT

   A PD client attempted to arm the provider while in an illegal state.

3. NDIS_BUGCHECK_PD_ERROR_ILLEGAL_ARM_NOTIFICATION

   A PD provider illegally triggered a drain notification while it was not armed.

4. NDIS_BUGCHECK_PD_ERROR_ILLEGAL_ARM_NOTIFICATION_VIA_ISR

   A PD provider illegally triggered an ISR drain notification while it was not armed.

5. NDIS_BUGCHECK_PD_ERROR_ILLEGAL_THUNK_BY_LWF

   A filter driver attempted to interfere with the Packet Direct datapath.

6. NDIS_BUGCHECK_PD_ERROR_ILLEGAL_BM_GROUP_REQUEST

   A PD provider illegally attempted to remove itself from a buffer manager group.

7. NDIS_BUGCHECK_PD_ERROR_ILLEGAL_PD_BUFFER_SETUP

   A PD buffer setup request was malformed.

The value of Parameter 3 depends on the value of Parameter 2. Each number in this list corresponds to the same number in Parameter 2.

1. Cast to NDIS_PD_EC
2. Cast to NDIS_PD_QUEUE_TRACKER
3. Cast to NDIS_PD_QUEUE_TRACKER
4. Cast to NDIS_PD_QUEUE_TRACKER
5. The handle of the specific filter module. Run !ndiskd.filter with this handle for more information.
6. The buffer manager group, if known
7. The source PD_MEMORY_HANDLE or PD_BUFFER

The value of Parameter 4 depends on the value of Parameter 2. Each number in this list corresponds to the same number in Parameter 2.

1. The ETHREAD that was expected
2. The handle to the PD client
3. The handle to the PD provider. Run !ndiskd.netadapter with this handle for more information.
4. The handle to the PD provider. Run !ndiskd.netadapter with this handle for more information.
5. The handle to the PD provider. Run !ndiskd.netadapter with this handle for more information.

6. If Parameter 3 is 0, this is the provider handle.

   If Parameter 3 is non-zero, the PD client has not freed all allocations yet, and this is the PD client handle.

7. The target PD_BUFFER

0x25

NDIS_BUGCHECK_WATCHDOG

An attempt to manage the network stack has taken too long. When NDIS calls out into other drivers, NDIS starts a watchdog timer to ensure the call completes promptly. If the call takes too long, NDIS injects a bugcheck.

This can be caused by a simple deadlock. Look with "!stacks 2 ndis" or similar to see if any threads look suspicious. Pay special attention to the PrimaryThread from the NDIS_WATCHDOG_TRIAGE_BLOCK.

This can be caused by lost NBLs, in which case !ndiskd.pendingnbls may help. Check for OIDs that are stuck using !ndiskd.oid.

The operation that took too long. Possible values:

• 0x01 : NDIS_BUGCHECK_WATCHDOG_PROTOCOL_PAUSE

  There was a timeout while pausing a protocol driver.

• 0x02 : NDIS_BUGCHECK_WATCHDOG_PROTOCOL_NETPNPEVENT

  There was a timeout while delivering a NET_PNP_EVENT_NOTIFICATION to a protocol driver.

• 0x03 : NDIS_BUGCHECK_WATCHDOG_PROTOCOL_STATUS_INDICATION

  There was a timeout while delivering a status indication to a protocol driver.

• 0x04 : NDIS_BUGCHECK_WATCHDOG_PROTOCOL_UNBIND

  There was a timeout while unbinding a protocol driver.

• 0x11 : NDIS_BUGCHECK_WATCHDOG_FILTER_PAUSE

  There was a timeout while pausing a filter driver.

• 0x12 : NDIS_BUGCHECK_WATCHDOG_FILTER_NETPNPEVENT

  There was a timeout while delivering a NET_PNP_EVENT_NOTIFICATION to a filter driver.

• 0x13 : NDIS_BUGCHECK_WATCHDOG_FILTER_STATUS_INDICATION

  There was a timeout while delivering a status indication to a filter driver.

• 0x14 : NDIS_BUGCHECK_WATCHDOG_FILTER_DETACH

  There was a timeout while detaching a filter driver.

• 0x21 : NDIS_BUGCHECK_WATCHDOG_MINIPORT_PAUSE

  There was a timeout while pausing a miniport adapter.

• 0x22 : NDIS_BUGCHECK_WATCHDOG_MINIPORT_HALT

  There was a timeout while halting a miniport adapter.

• 0x23 : NDIS_BUGCHECK_WATCHDOG_MINIPORT_OID

  There was a timeout while delivering an OID request to a miniport adapter.

• 0x24 : NDIS_BUGCHECK_WATCHDOG_FILTER_OID

  There was a timeout while delivering an OID request to a filter driver.

• 0x25 : NDIS_BUGCHECK_WATCHDOG_MINIPORT_IDLE

  There was a timeout while idling a miniport adapter.

• 0x26 : NDIS_BUGCHECK_WATCHDOG_CANCEL_IDLE

  There was a timeout while canceling an idle request on a miniport adapter.

Cast to ndis!NDIS_WATCHDOG_TRIAGE_BLOCK. Useful fields:

• StartTime shows what time the operation started, in 100ns units, as returned by KeQueryInterruptTime.
• TimeoutMilliseconds shows how long NDIS waited, at a minimum, before triggering this bugcheck.
• TargetObject is a handle to the protocol, filter module, or miniport adapter that NDIS is waiting on. Run !ndiskd.protocol, !ndiskd.filter, or !ndiskd.netadapter with this handle for more information.
• PrimaryThread is the thread on which NDIS initiated the operation. Usually, this is the first place to look, although the thread may have gone elsewhere if the operation is being handled asynchronously.

The value of Parameter 4 depends on the value of Parameter 2. Each number in this list corresponds to the same hexadecimal value in Parameter 2.

• 0x01 : 0
• 0x02 : The NET_PNP_EVENT_CODE of the stuck event. For more information about these codes, see NET_PNP_EVENT..
• 0x03 : The NDIS_STATUS code of the stuck indication. Use !ndiskd.help to decode it.
• 0x04 : 0
• 0x11 : 0
• 0x12 : The NET_PNP_EVENT_CODE of the stuck event. For possible values, see the previous list of values for item 2 in this list.
• 0x13 : The NDIS_STATUS code of the stuck indication. Use !ndiskd.help to decode it.
• 0x14 : 0
• 0x21 : 0
• 0x22 : 0
• 0x23 : The OID code of the stuck request. Use !ndiskd.help to decode it.
• 0x24 : The OID code of the stuck request. Use !ndiskd.help to decode it.
• 0x25 : 0
• 0x26 : 0

0x27

NDIS_BUGCHECK_LEAKED_NBL

A driver has leaked a NET_BUFFER_LIST structure. Check with !ndiskd.pendingnbls to see any NBLs that are still pending on this driver.

Where the leak was detected. Possible values:

• 0x01 : The leak was detected by the NBL tracker. The driver that is currently deregistering or unbinding is the most likely cause. Look at the callstack of the bugchecking thread. Drivers must not unbind or deregister while they still hold active NBLs.

0

0