locked
BSOD D1 in NETIO.SYS Windows 7 SP1 x64 RRS feed

  • Question

  • I've already read all related topics, but there's no solution to my problem. I have NO 3rd party firewalls (only MS internal), NO 3d party antivirus (only MS Security Essentials), up-to-date Windows updates, all drivers are current (network card is Intel, tried many drivers for past year, from 17.0 to 17.4), change RAM (no errors with several MEMTESTs), change M/B (!!!). There's only unchanged hardware component - it's CPU (i5-2405S). BSODs are fully random, either with or without workload. What I could do more?

    2: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000000000028, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff88001f756fd, address which referenced memory

    Debugging Details:
    ------------------


    READ_ADDRESS:  0000000000000028

    CURRENT_IRQL:  2

    FAULTING_IP:
    NETIO!RtlCopyBufferToMdl+1d
    fffff880`01f756fd 448b5228        mov     r10d,dword ptr [rdx+28h]

    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

    BUGCHECK_STR:  0xD1

    PROCESS_NAME:  System

    TRAP_FRAME:  fffff88003ba06f0 -- (.trap 0xfffff88003ba06f0)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffff88003ba0910 rbx=0000000000000000 rcx=0000000000000000
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff88001f756fd rsp=fffff88003ba0880 rbp=fffff88003ba09b0
     r8=00000000ffffffbc  r9=0000000000000044 r10=0000000000000000
    r11=fffffa800716a0d0 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    NETIO!RtlCopyBufferToMdl+0x1d:
    fffff880`01f756fd 448b5228        mov     r10d,dword ptr [rdx+28h] ds:00000000`00000028=????????
    Resetting default scope

    LAST_CONTROL_TRANSFER:  from fffff800034e1569 to fffff800034e1fc0

    STACK_TEXT: 
    fffff880`03ba05a8 fffff800`034e1569 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`03ba05b0 fffff800`034e01e0 : fffff880`03ba0a20 fffff880`0207dbc2 fffffa80`0cb8f440 00000000`00000044 : nt!KiBugCheckDispatch+0x69
    fffff880`03ba06f0 fffff880`01f756fd : 00000000`00000a6a fffff880`0203033c 00000000`00000016 fffffa80`0c0c3718 : nt!KiPageFault+0x260
    fffff880`03ba0880 fffff880`020be0fc : 00000000`00000000 fffff880`0208c7b6 00000000`00000000 00000000`00000000 : NETIO!RtlCopyBufferToMdl+0x1d
    fffff880`03ba08e0 fffff880`0208a2e8 : fffffa80`0716a0d0 00000000`00000000 fffffa80`0c1cc7d0 00000000`bd65c687 : tcpip! ?? ::FNODOBFM::`string'+0x1d0ff
    fffff880`03ba0950 fffff880`0207bb34 : fffff880`03ba0e08 00000000`00000029 fffffa80`0c1cc7d0 00000000`00000001 : tcpip!TcpTcbCarefulDatagram+0x1a98
    fffff880`03ba0b00 fffff880`0207aaea : fffffa80`09295b10 fffff880`020739d4 fffffa80`092534c0 00000000`00000000 : tcpip!TcpTcbReceive+0x694
    fffff880`03ba0cb0 fffff880`0207c08b : fffffa80`0a2b565c fffffa80`093b2000 00000000`00000000 fffff880`03ba1000 : tcpip!TcpMatchReceive+0x1fa
    fffff880`03ba0e00 fffff880`02074067 : fffffa80`09295b10 fffffa80`0668c9de fffffa80`000057dc 00000000`000057dc : tcpip!TcpPreValidatedReceive+0x36b
    fffff880`03ba0ed0 fffff880`02073bda : 00000000`00000000 fffff880`02182800 fffff880`03ba1090 fffffa80`0b5c95d0 : tcpip!IppDeliverListToProtocol+0x97
    fffff880`03ba0f90 fffff880`020731d9 : fffffa80`097873d0 00000000`00000002 fffffa80`0bdb7e30 fffff880`03ba1080 : tcpip!IppProcessDeliverList+0x5a
    fffff880`03ba1030 fffff880`02070f3f : 00000000`00000000 00000000`09b2f500 fffff880`02182800 fffff880`02182800 : tcpip!IppReceiveHeaderBatch+0x23a
    fffff880`03ba1110 fffff880`02070532 : fffffa80`09af6bc0 00000000`00000000 fffffa80`09b2f500 00000000`00000001 : tcpip!IpFlcReceivePackets+0x64f
    fffff880`03ba1310 fffff880`020e3eaa : fffffa80`00000000 fffffa80`0d011800 fffffa80`09b2f580 fffff880`03ba1400 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
    fffff880`03ba13f0 fffff800`034edc48 : fffffa80`0d011800 fffffa80`0928390c fffffa80`06789b50 00000000`00000001 : tcpip! ?? ::FNODOBFM::`string'+0x4ff22
    fffff880`03ba1440 fffff880`02070092 : fffff880`0206f8f0 00000000`00000014 00000000`00000000 fffffa80`0ac2ec01 : nt!KeExpandKernelStackAndCalloutEx+0xd8
    fffff880`03ba1520 fffff880`01f310eb : fffffa80`09b31560 00000000`00000000 fffffa80`066b01a0 fffffa80`09283858 : tcpip!FlReceiveNetBufferListChain+0xb2
    fffff880`03ba1590 fffff880`01efaad6 : fffffa80`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
    fffff880`03ba1600 fffff880`01e74ac1 : fffffa80`066b01a0 fffff800`0367f2d8 00000000`00000001 00000000`00000000 : ndis!ndisMDispatchReceiveNetBufferLists+0x1d6
    fffff880`03ba1a80 fffff880`036fa66c : 00000000`00000001 fffff800`0367f2d8 fffffa80`06789b50 fffffa80`0c87c0c0 : ndis!NdisMIndicateReceiveNetBufferLists+0xc1
    fffff880`03ba1ad0 fffff880`036f4c17 : fffff880`0370a750 fffffa80`06789b50 fffffa80`06789b50 00000000`00000000 : tunnel!TeredoWfpIndicationWorker+0xb4
    fffff880`03ba1b10 fffff800`037d4583 : fffffa80`09af6cb0 00000000`00000001 fffffa80`0c87c0c0 fffffa80`06789b50 : tunnel!LwWorker+0x1b
    fffff880`03ba1b40 fffff800`034eb641 : fffff800`0367f200 fffff800`037d4501 fffffa80`06789b00 fffff800`0367f2d8 : nt!IopProcessWorkItem+0x23
    fffff880`03ba1b70 fffff800`03778e5a : 00000000`00000000 fffffa80`06789b50 00000000`00000080 fffffa80`067086f0 : nt!ExpWorkerThread+0x111
    fffff880`03ba1c00 fffff800`034d2d26 : fffff880`03972180 fffffa80`06789b50 fffff880`0397cfc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
    fffff880`03ba1c40 00000000`00000000 : fffff880`03ba2000 fffff880`03b9c000 fffff880`03ba18a0 00000000`00000000 : nt!KiStartSystemThread+0x16


    STACK_COMMAND:  kb

    FOLLOWUP_IP:
    NETIO!RtlCopyBufferToMdl+1d
    fffff880`01f756fd 448b5228        mov     r10d,dword ptr [rdx+28h]

    SYMBOL_STACK_INDEX:  3

    SYMBOL_NAME:  NETIO!RtlCopyBufferToMdl+1d

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: NETIO

    IMAGE_NAME:  NETIO.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP:  5034f6a0

    FAILURE_BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

    BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

    Followup: MachineOwner
    ---------


    Wednesday, January 9, 2013 7:21 AM

Answers

  • Hi Andrew,

     NETIO.SYS --- It's Related to Network Card driver, Update the latest Network Card drive resolve this Bluescreen issue or install previous version of Network Driver you have.

    Regards,


    MCT / MCITP / MCTS / MCSA / MCSE / C|EH / CCNA

    Wednesday, January 9, 2013 8:52 AM
  • Hi,

     

    I suggest you can try the following steps:


    1. Try uninstalling the antivirus software to see if the problems stops.

    2. Update the driver for the network adapter.

    3. Try to disable the network adapters and see whether the problem occurs.

    4. Test the issue in Safe Mode

     

    Additionally, you can also refer to the following link:

    Bug Check 0xD1: DRIVER_IRQL_NOT_LESS_OR_EQUAL (Windows Debuggers)

    http://msdn.microsoft.com/en-us/library/windows/hardware/ff560244(v=vs.85).aspx

     

    Hope this helps


    Vincent Wang
    TechNet Community Support

    Thursday, January 10, 2013 7:41 AM
  • Also, the error can be caused by a third party driver involved in "networking" but not necessarily a third party antivirus or firewall driver.

    Do you have any VPN software installed?

    Are you able to share the minidump files via Windows Live SkyDrive or similar file hosting site? 

    Friday, January 11, 2013 12:27 AM

All replies

  • Hi Andrew,

     NETIO.SYS --- It's Related to Network Card driver, Update the latest Network Card drive resolve this Bluescreen issue or install previous version of Network Driver you have.

    Regards,


    MCT / MCITP / MCTS / MCSA / MCSE / C|EH / CCNA

    Wednesday, January 9, 2013 8:52 AM
  • Hi,

     

    I suggest you can try the following steps:


    1. Try uninstalling the antivirus software to see if the problems stops.

    2. Update the driver for the network adapter.

    3. Try to disable the network adapters and see whether the problem occurs.

    4. Test the issue in Safe Mode

     

    Additionally, you can also refer to the following link:

    Bug Check 0xD1: DRIVER_IRQL_NOT_LESS_OR_EQUAL (Windows Debuggers)

    http://msdn.microsoft.com/en-us/library/windows/hardware/ff560244(v=vs.85).aspx

     

    Hope this helps


    Vincent Wang
    TechNet Community Support

    Thursday, January 10, 2013 7:41 AM
  • Also, the error can be caused by a third party driver involved in "networking" but not necessarily a third party antivirus or firewall driver.

    Do you have any VPN software installed?

    Are you able to share the minidump files via Windows Live SkyDrive or similar file hosting site? 

    Friday, January 11, 2013 12:27 AM