VirtualBox 4.3.10-93012 bluescreens Windows 8.1 host on boot

[poizan42]

Simply installing VirtualBox 4.3.10-93012 will make a Windows 8.1 system unbootable. You have to boot into safe mode, find some way to disable the VBox* drivers (as you can't uninstall programs from safe mode) and reboot. This is *really* severe as most users can't be expected to know how to do this. I have marked this as component network as VBoxNetFlt.sys seems to be the culprit.

I have uploaded the memory dump to ​http://poizan.dk/stuff/vbox-crash.dmp

The error code from the bluescreen is: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (ndis.sys)

From the event log: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007e (0xffffffffc0000005, 0xfffff80000ee9ac4, 0xffffd00020da87b8, 0xffffd00020da7fc0). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 032914-30593-01.

analyze -v output:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80000ee9ac4, The address that the exception occurred at
Arg3: ffffd00020da87b8, Exception Record Address
Arg4: ffffd00020da7fc0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
ndis!ndisReadMiniportMediaSpecificPortAuthStates+74
fffff800`00ee9ac4 0fb7880c020000  movzx   ecx,word ptr [rax+20Ch]

EXCEPTION_RECORD:  ffffd00020da87b8 -- (.exr 0xffffd00020da87b8)
ExceptionAddress: fffff80000ee9ac4 (ndis!ndisReadMiniportMediaSpecificPortAuthStates+0x0000000000000074)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000000000000020c
Attempt to read from address 000000000000020c

CONTEXT:  ffffd00020da7fc0 -- (.cxr 0xffffd00020da7fc0;r)
rax=0000000000000000 rbx=000000000000000a rcx=ffffe00004c561a0
rdx=0000000000000466 rsi=0000000000000000 rdi=ffffe00004c561a0
rip=fffff80000ee9ac4 rsp=ffffd00020da89f0 rbp=ffffd00020da8a79
 r8=ffffd00020da8a40  r9=00000000000007ff r10=ffffd00020900000
r11=0000000000000466 r12=ffffe00004c2d020 r13=ffffe00004c56200
r14=0000000000000000 r15=ffffe00004c56005
iopl=0         nv up ei ng nz ac po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010297
ndis!ndisReadMiniportMediaSpecificPortAuthStates+0x74:
fffff800`00ee9ac4 0fb7880c020000  movzx   ecx,word ptr [rax+20Ch] ds:002b:00000000`0000020c=????
Last set context:
rax=0000000000000000 rbx=000000000000000a rcx=ffffe00004c561a0
rdx=0000000000000466 rsi=0000000000000000 rdi=ffffe00004c561a0
rip=fffff80000ee9ac4 rsp=ffffd00020da89f0 rbp=ffffd00020da8a79
 r8=ffffd00020da8a40  r9=00000000000007ff r10=ffffd00020900000
r11=0000000000000466 r12=ffffe00004c2d020 r13=ffffe00004c56200
r14=0000000000000000 r15=ffffe00004c56005
iopl=0         nv up ei ng nz ac po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010297
ndis!ndisReadMiniportMediaSpecificPortAuthStates+0x74:
fffff800`00ee9ac4 0fb7880c020000  movzx   ecx,word ptr [rax+20Ch] ds:002b:00000000`0000020c=????
Resetting default scope

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  000000000000020c

READ_ADDRESS:  000000000000020c 

FOLLOWUP_IP: 
VBoxNetFlt+553a
fffff800`0160553a 89442430        mov     dword ptr [rsp+30h],eax

BUGCHECK_STR:  AV

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

LAST_CONTROL_TRANSFER:  from fffff80000ee99ca to fffff80000ee9ac4

STACK_TEXT:  
ffffd000`20da89f0 fffff800`00ee99ca : ffffe000`04c561a0 ffffe000`04c561a0 00000000`00000000 00000000`c0000001 : ndis!ndisReadMiniportMediaSpecificPortAuthStates+0x74
ffffd000`20da8ae0 fffff800`00f2151e : ffffe000`04d63b30 00000000`00000000 00000000`00000000 ffffe000`04c561a0 : ndis!ndisReadMiniportDefaultPortAuthStates+0x6e
ffffd000`20da8b30 fffff800`00ee6784 : 00000000`00000000 ffffe000`04c2d020 ffffe000`005c2640 01cf4b50`ab65a489 : ndis!ndisMInitializeAdapter+0x57b2
ffffd000`20da91a0 fffff800`00ee6d3d : 00000000`00000000 00000000`00000000 ffffe000`005c2640 ffffe000`04c561a0 : ndis!ndisInitializeAdapter+0x60
ffffd000`20da91f0 fffff800`00f0a484 : ffffe000`04c561a0 ffffe000`005c2640 ffffe000`005c2640 ffffe000`04c575e8 : ndis!ndisPnPStartDevice+0x89
ffffd000`20da9240 fffff800`00f09e6b : ffffe000`005c2640 ffffe000`04c2d020 ffffe000`04c2d020 ffffd000`20da9400 : ndis!ndisIMInitializeDeviceInstance+0xe4
ffffd000`20da9320 fffff800`0160553a : ffffe000`005c2640 ffffd000`20da95a0 ffffe000`03354d38 00000000`00000000 : ndis!NdisIMInitializeDeviceInstanceEx+0xf7
ffffd000`20da9370 fffff800`016040f5 : ffffe000`005c2640 ffffe000`03354d38 ffffe000`00408e30 00000000`00000001 : VBoxNetFlt+0x553a
ffffd000`20da93a0 fffff800`01607bf7 : ffffe000`00000000 ffffd000`20da9480 ffffe000`005c2640 00000000`00000000 : VBoxNetFlt+0x40f5
ffffd000`20da9430 fffff800`01607d65 : 00000000`00000000 ffffd000`20da95a0 ffffe000`005c2640 fffff800`01608a8f : VBoxNetFlt+0x7bf7
ffffd000`20da9460 fffff800`01601f46 : ffffe000`005c2640 ffffc000`015a0830 fffff800`0161ff30 ffffd000`20da95a0 : VBoxNetFlt+0x7d65
ffffd000`20da94b0 fffff800`0160207a : ffffd000`20da95e8 00000000`00000000 ffffd000`20da95a0 fffff800`0161ff30 : VBoxNetFlt+0x1f46
ffffd000`20da94f0 fffff800`0160817e : 00000000`00000000 ffffe000`03354d38 00000000`00000001 ffff6a20`0000002e : VBoxNetFlt+0x207a
ffffd000`20da9570 fffff800`01602ae5 : ffffe000`03354d38 00000000`00000000 ffffd000`20da97a8 ffffe000`03354d38 : VBoxNetFlt+0x817e
ffffd000`20da95e0 fffff800`00f1864d : ffffe000`00000000 ffffe000`04c292e0 00000000`00000000 ffffe000`033531a0 : VBoxNetFlt+0x2ae5
ffffd000`20da9650 fffff800`00efae42 : 00000000`00000004 ffffe000`00000000 ffffe000`04c292e0 ffffc000`0158de00 : ndis!ndisBindLegacyProtocol+0x29d
ffffd000`20da97a0 fffff800`00ede9cf : 00000000`00000001 ffffd000`0000003c 00060000`21000000 00000000`00000000 : ndis!ndisRestartProtocol+0x15652
ffffd000`20da98e0 fffff800`00edd024 : ffffe000`033531a0 ffffe000`033531a0 ffffe000`03354600 ffffe000`033545e8 : ndis!Ndis::BindEngine::Iterate+0x41f
ffffd000`20da9af0 fffff800`00edf88a : ffffe000`033545e8 ffffd000`20da9bd0 ffffe000`03354620 ffffd000`20da9bd0 : ndis!Ndis::BindEngine::UpdateBindings+0x64
ffffd000`20da9b20 fffff800`840b91b9 : fffff800`842b71c0 00000000`00000002 ffffe000`01151910 ffffe000`59706e50 : ndis!Ndis::BindEngine::UpdateBindingsWorkItem+0x1b
ffffd000`20da9b50 fffff800`840a52e4 : 24748b48`38246c8b ffffe000`0061c880 ffffe000`0061c880 ffffe000`003a0900 : nt!ExpWorkerThread+0x2b5
ffffd000`20da9c00 fffff800`8416c2c6 : ffffd000`20a63180 ffffe000`0061c880 ffffd000`20a6f340 ad3ee8c0`000002bb : nt!PspSystemThreadStartup+0x58
ffffd000`20da9c60 00000000`00000000 : ffffd000`20daa000 ffffd000`20da4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


SYMBOL_STACK_INDEX:  7

SYMBOL_NAME:  VBoxNetFlt+553a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: VBoxNetFlt

IMAGE_NAME:  VBoxNetFlt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5333152a

STACK_COMMAND:  .cxr 0xffffd00020da7fc0 ; kb

FAILURE_BUCKET_ID:  AV_VBoxNetFlt+553a

BUCKET_ID:  AV_VBoxNetFlt+553a

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:av_vboxnetflt+553a

FAILURE_ID_HASH:  {0077ad6c-4b15-7e9c-bbaf-3eea4932c179}

Followup: MachineOwner

[Francesco Papini]

I'd like to have a look at the dump but the site is down, please let me know when it'll be up again.

[poizan42]

It's up again

[aeichner]

Please reopen if still relevant with a recent VirtualBox release.