Bug Check 0xC9: DRIVER_VERIFIER_IOMANAGER_VIOLATION
The DRIVER_VERIFIER_IOMANAGER_VIOLATION bug check has a value of 0x000000C9. This is the bug check code for all Driver Verifier I/O Verification violations.
Important
This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.
DRIVER_VERIFIER_IOMANAGER_VIOLATION Parameters
When Driver Verifier is active and I/O Verification is selected, various I/O violations will cause this bug check to be issued. Parameter 1 identifies the type of violation.
| Parameter 1 | Parameter 2 | Parameter 3 | Parameter 4 | Cause of Error |
|---|---|---|---|---|
0x01 |
Address of IRP being freed |
0 |
0 |
The driver attempted to free an object whose type is not IO_TYPE_IRP. |
0x02 |
Address of IRP being freed |
0 |
0 |
The driver attempted to free an IRP that is still associated with a thread. |
0x03 |
Address of IRP being sent |
0 |
0 |
The driver passed IoCallDriver an IRP Type not equal to IRP_TYPE. |
0x04 |
Address of device object |
0 |
0 |
The driver passed IoCallDriver an invalid device object. |
0x05 |
Address of device object associated with offending driver |
IRQL before IoCallDriver |
IRQL after IoCallDriver |
The IRQL changed during a call to the driver dispatch routine. |
0x06 |
IRP status |
Address of IRP being completed |
0 |
The driver called IoCompleteRequest with a status marked as pending (or equal to -1). |
0x07 |
Address of cancel routine |
Address of IRP being completed |
0 |
The driver called IoCompleteRequest while its cancel routine was still set. |
0x08 |
Address of device object |
IRP major function code |
Exception status code |
The driver passed IoBuildAsynchronousFsdRequest an invalid buffer. |
0x09 |
Address of device object |
I/O control code |
Exception status code |
The driver passed IoBuildDeviceIoControlRequest an invalid buffer. |
0x10 |
Current IRQL |
Reserved |
Reserved |
IoCallDriver was called above DISPATCH_LEVEL. |
0x11 |
Driver fast I/O dispatch routine address |
IRQL before calling driver dispatch routine |
Current IRQL |
IoCallDriver was called above DISPATCH_LEVEL. |
0x12 |
Driver dispatch routine address |
IRQL before calling driver dispatch routine |
Current IRQL |
IoCallDriver was called above DISPATCH_LEVEL. |
0x0A |
Address of device object |
0 |
0 |
The driver passed IoInitializeTimer a device object with an already-initialized timer. |
0x0C |
Address of I/O status block |
0 |
0 |
The driver passed an I/O status block to an IRP, but this block is allocated on a stack which has already unwound past that point. |
0x0D |
Address of user event object |
0 |
0 |
The driver passed a user event to an IRP, but this event is allocated on a stack which has already unwound past that point. |
0x0E |
Current IRQL |
Address of IRP |
0 |
The driver called IoCompleteRequest with IRQL > DISPATCH_LEVEL. |
0x0F |
Address of the device object to which the IRP is being sent |
Pointer to the IRP |
Pointer to file object |
The driver sent a create request with a file object that has been closed, or that had its open canceled. |
In addition to the errors mentioned in the previous table, there are a number of I/O Verification errors that will cause Driver Verifier to halt the system, but which are not actually bug checks.
These errors cause messages to be displayed on the blue screen, in a crash dump file, and in a kernel debugger. These messages will appear differently in each of these locations. When these errors occur, the hexadecimal bug check code 0xC9 and the bug check string DRIVER_VERIFIER_IOMANAGER_VIOLATION do not appear on the blue screen or in the debugger, although they will appear in a crash dump file.
On the blue screen, the following data will be displayed:
The message IO SYSTEM VERIFICATION ERROR.
The message WDM DRIVER ERROR XXX, where XXX is a hexadecimal code representing the specific error. (See the table below for a list of the I/O error codes and their meanings.)
The name of the driver which caused the error.
Typically, the address in the driver's code where the error was detected (Parameter 2).
If a kernel-mode crash dump has been enabled, the following information will appear in the crash dump file:
The message BugCheck 0xC9 (DRIVER_VERIFIER_IOMANAGER_VIOLATION).
The hexadecimal I/O error code. (See the table below for a list of the I/O error codes and their meanings.)
Typically, the address in the driver's code where the error was detected (Parameter 2).
If a kernel debugger is attached to the system which has caused this violation, the following information will be sent to the debugger:
The message WDM DRIVER ERROR, along with an assessment of the severity of the error.
The name of the driver which caused the error.
A descriptive string which explains the cause of this error. Often additional information is passed along, such as a pointer to the IRP or a pointer to the device object or IRQL information. (See the table below for a list of these descriptive strings and what additional information is specified.)
A query for further action. Possible responses are b (break), i (ignore), z (zap), r (remove), or d (disable). Instructing the operating system to continue allows you to see what would happen "down the line" if this error had not occurred. Of course, this often will lead to additional bug checks. The "zap" option will actually remove the breakpoint that caused this error to be discovered.
Note No other bug checks can be ignored in this manner. Only this kind of I/O Verification errors can be ignored, and even these errors can only be ignored if a kernel debugger is attached.
The following table lists those I/O Verification errors that can appear.
| I/O Error Code | Severity | Cause of Error |
|---|---|---|
0x200 |
Unknown |
This code covers all unknown I/O Verification errors. |
0x201 |
Fatal error |
A device is deleting itself while there is another device beneath it in the driver stack. This may be because the caller has forgotten to call IoDetachDevice first, or the lower driver may have incorrectly deleted itself. Param 2 - The address in the driver's code where the error was detected. |
0x202 |
Fatal error |
A driver has attempted to detach from a device object that is not attached to anything. This may occur if detach was called twice on the same device object. Param 2 - The address in the driver's code where the error was detected. Param 3 - Device object address. |
0x203 |
Fatal error |
A driver has called IoCallDriver without setting the cancel routine in the IRP to NULL. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x204 |
Fatal error |
The caller has passed in NULL as a device object. This is fatal. Param 2 - Reserved Param 3 - Reserved |
0x205 |
Fatal error |
The caller is forwarding an IRP that is currently queued beneath it. The code handling IRPs returning STATUS_PENDING in this driver appears to be broken. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x206 |
Fatal error |
The caller has incorrectly forwarded an IRP (control field not zeroed). The driver should use IoCopyCurrentIrpStackLocationToNext or IoSkipCurrentIrpStackLocation. Param 2 - Reserved Param 3 - Reserved |
0x207 |
Fatal error |
The caller has manually copied the stack and has inadvertently copied the upper layer's completion routine. The driver should use IoCopyCurrentIrpStackLocationToNext. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x208 |
Fatal error |
This IRP is about to run out of stack locations. Someone may have forwarded this IRP from another stack. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x209 |
Fatal error |
The caller is completing an IRP that is currently queued beneath it. The code handling IRPs returning STATUS_PENDING in this driver appears to be broken. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x20A |
Fatal error |
The caller of IoFreeIrp is freeing an IRP that is still in use. Param 2 - Reserved Param 3 - Reserved |
0x20B |
Fatal error |
The caller of IoFreeIrp is freeing an IRP that is still in use. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x20C |
Fatal error |
The caller of IoFreeIrp is freeing an IRP that is still queued against a thread. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x20D |
Fatal error |
The caller of IoInitializeIrp has passed an IRP that was allocated with IoAllocateIrp. This is illegal and unnecessary, and has caused a quota leak. Check the documentation for IoReuseIrp if this IRP is being recycled. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x20E |
Non-fatal error |
A PNP IRP has an invalid status. (Any PNP IRP must have its status initialized to STATUS_NOT_SUPPORTED.) Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x20F |
Non-fatal error |
A Power IRP has an invalid status. (Any Power IRP must have its status initialized to STATUS_NOT_SUPPORTED.) Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x210 |
Non-fatal error |
A WMI IRP has an invalid status. (Any WMI IRP must have its status initialized to STATUS_NOT_SUPPORTED.) Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x211 |
Non-fatal error |
The caller has forwarded an IRP while skipping a device object in the stack. The caller is probably sending IRPs to the PDO instead of to the device returned by IoAttachDeviceToDeviceStack. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x212 |
Non-fatal error |
The caller has trashed or has not properly copied the IRP's stack. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x213 |
Non-fatal error |
The caller has changed the status field of an IRP it does not understand. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x214 |
Non-fatal error |
The caller has changed the information field of an IRP it does not understand. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x215 |
Non-fatal error |
A non-successful non-STATUS_NOT_SUPPORTED IRP status for IRP_MJ_PNP is being passed down stack. Failed PNP IRPs must be completed. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x216 |
Non-fatal error |
The previously-set IRP_MJ_PNP status has been converted to STATUS_NOT_SUPPORTED. This failure status is reserved for use by the operating system. Drivers cannot fail a PnP IRP with this value. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x217 |
Non-fatal error |
The driver has not handled a required IRP. The driver must update the status of the IRP to indicate whether or not it has been handled. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x218 |
Non-fatal error |
The driver has responded to an IRP that is reserved for other device objects elsewhere in the stack. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x219 |
Non-fatal error |
A non-successful non-STATUS_NOT_SUPPORTED IRP status for IRP_MJ_POWER is being passed down stack. Failed POWER IRPs must be completed. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x21A |
Non-fatal error |
The previously-set IRP_MJ_POWER status has been converted to STATUS_NOT_SUPPORTED. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x21B |
Non-fatal error |
A driver has returned a suspicious status. This is probably due to an uninitialized variable bug in the driver. Param 3 - IRP address. |
0x21C |
Warning |
The caller has copied the IRP stack but not set a completion routine. This is inefficient -- use IoSkipCurrentIrpStackLocation instead. Param 2 - Reserved Param 3 - Reserved |
0x21D |
Fatal error |
An IRP dispatch handler has not properly detached from the stack below it upon receiving a remove IRP. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x21E |
Fatal error |
An IRP dispatch handler has not properly deleted its device object upon receiving a remove IRP. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x21F |
Non-fatal error |
A driver has not filled out a dispatch routine for a required IRP major function. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x220 |
Non-fatal error |
IRP_MJ_SYSTEM_CONTROL has been completed by someone other than the ProviderId. This IRP should either have been completed earlier or should have been passed down. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - ProviderId. |
0x221 |
Fatal error |
An IRP dispatch handler for a PDO has deleted its device object, but the hardware has not been reported as missing in a bus relations query. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x222 |
Fatal error |
A Bus Filter's IRP dispatch handler has detached upon receiving a remove IRP when the PDO is still alive. Bus Filters must clean up in FastIoDetach callbacks. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x223 |
Fatal error |
An IRP dispatch handler for a bus filter has deleted its device object, but the PDO is still present. Bus filters must clean up in FastIoDetach callbacks. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x224 |
Fatal error |
An IRP dispatch handler has returned a status that is inconsistent with the IRP's IoStatus.Status field. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Expected status code. |
0x225 |
Non-fatal error |
An IRP dispatch handler has returned a status that is illegal (0xFFFFFFFF). This is probably due to an uninitialized stack variable. To debug this error, use the ln (List Nearest Symbols) command with the specified address. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Status code. |
0x226 |
Fatal error |
An IRP dispatch handler has returned without passing down or completing this IRP, or someone forgot to return STATUS_PENDING. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x227 |
Fatal error |
An IRP completion routine is in pageable code. (This is never permitted.) Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x228 |
Non-fatal error |
A driver's completion routine has not marked the IRP pending if the PendingReturned field was set in the IRP passed to it. This may cause Windows to hang, especially if an error is returned by the stack. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x229 |
Fatal error |
A cancel routine has been set for an IRP that is currently being processed by drivers lower in the stack, possibly stomping their cancel routine. Param 2 - Reserved. Param 3 - Reserved. |
0x22A |
Non-fatal error |
The physical device object (PDO) has not responded to a required IRP. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x22B |
Non-fatal error |
The physical device object (PDO) has forgotten to fill out the device relation list with the PDO for the TargetDeviceRelation query. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x22C |
Fatal error |
The code implementing the TargetDeviceRelation query has not called ObReferenceObject on the PDO. Param 2 - Reserved. Param 3 - Reserved. |
0x22D |
Non-fatal error |
The caller has completed a IRP_MJ_PNP it didn't understand instead of passing it down. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x22E |
Non-fatal error |
The caller has completed a successful IRP_MJ_PNP instead of passing it down. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x22F |
Non-fatal error |
The caller has completed an untouched IRP_MJ_PNP (instead of passing the IRP down), or non-PDO has failed the IRP using illegal value of STATUS_NOT_SUPPORTED. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x230 |
Non-fatal error |
The caller has completed an IRP_MJ_POWER it didn't understand instead of passing it down. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x231 |
Fatal error |
The caller has completed a successful IRP_MJ_POWER instead of passing it down. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x232 |
Non-fatal error |
The caller has completed an untouched IRP_MJ_POWER (instead of passing the IRP down), or non-PDO has failed the IRP using illegal value of STATUS_NOT_SUPPORTED. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x233 |
Non-fatal error |
The version field of the query capabilities structure in a query capabilities IRP was not properly initialized. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x234 |
Non-fatal error |
The size field of the query capabilities structure in a query capabilities IRP was not properly initialized. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x235 |
Non-fatal error |
The address field of the query capabilities structure in a query capabilities IRP was not properly initialized to -1. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x236 |
Non-fatal error |
The UI Number field of the query capabilities structure in a query capabilities IRP was not properly initialized to -1. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x237 |
Fatal error |
A driver has sent an IRP that is restricted for system use only. Param 2 - Reserved. Param 3 - Reserved. |
0x238 |
Warning |
The caller of IoInitializeIrp has passed an IRP that was allocated with IoAllocateIrp. This is illegal, unnecessary, and negatively impacts performance in normal use. If this IRP is being recycled, see IoReuseIrp in the Windows Driver Kit. Param 2 - Reserved. Param 3 - Reserved. |
0x239 |
Warning |
The caller of IoCompleteRequest is completing an IRP that has never been forwarded via a call to IoCallDriver or PoCallDriver. This may be a bug. Param 2 - Reserved. Param 3 - Reserved. |
0x23A |
Fatal error |
A driver has forwarded an IRP at an IRQL that is illegal for this major code. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x23B |
Non-fatal error |
The caller has changed the status field of an IRP it does not understand. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
The following table lists additional I/O Verification errors that can appear. These errors appear when Enhanced I/O Verification is activated. For more information, see Enhanced I/O Verification.
| I/O Error Code | Severity | Cause of Error |
|---|---|---|
0x23C |
Fatal error |
A driver has completed an IRP without setting the cancel routine in the IRP to NULL. Param 2 - Reserved. Param 3 - Reserved. |
0x23D |
Non-fatal error |
A driver has returned STATUS_PENDING but did not mark the IRP pending via a call to IoMarkIrpPending. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Status code. |
0x23E |
Non-fatal error |
A driver has marked an IRP pending but didn't return STATUS_PENDING. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Status code. |
0x23F |
Fatal error |
A driver has not inherited the DO_POWER_PAGABLE bit from the stack it has attached to. Param 2 - Reserved. Param 3 - Reserved. |
0x240 |
Fatal error |
A driver is attempting to delete a device object that has already been deleted via a prior call to IoDeleteDevice. Param 2 - The address in the driver's code where the error was detected. Param 2 - Reserved. Param 3 - Reserved. |
0x241 |
Fatal error |
A driver has detached its device object during a surprise remove IRP. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x242 |
Fatal error |
A driver has deleted its device object during a surprise remove IRP. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x243 |
Fatal error |
A driver has failed to clear the DO_DEVICE_INITIALIZING flag at the end of AddDevice. Param 2 - Reserved. Param 3 - Reserved. Param 4 - |
0x244 |
Fatal error |
A driver has not copied either the DO_BUFFERED_IO or the DO_DIRECT_IO flag from the device object it is attaching to. Param 2 - Reserved. Param 3 - Reserved. |
0x245 |
Fatal error |
A driver has set both the DO_BUFFERED_IO and the DO_DIRECT_IO flags. These flags are mutually exclusive. Param 2 - Reserved. Param 3 - Reserved. |
0x246 |
Fatal error |
A driver has failed to copy the DeviceType field from the device object it is attaching to. Param 2 - Reserved. Param 3 - Reserved. |
0x247 |
Fatal error Param 2 - Reserved. Param 3 - Reserved. |
A driver has failed an IRP that cannot legally be failed. |
0x248 |
Fatal error |
A driver has added a device object that is not a PDO to a device relations query. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x249 |
Non-fatal error |
A driver has enumerated two child PDOs that returned identical Device IDs. Param 2 - The address in the driver's code where the error was detected. Param 3 - First device object address. Param 4 - Second device object address. |
0x24A |
Fatal error |
A driver has mistakenly called a file I/O function with IRQL not equal to PASSIVE_LEVEL. Param 2 - The address in the driver's code where the error was detected. Param 3 - Reserved. Param 4 - Reserved. |
0x24B |
Fatal error |
A driver has completed an IRP_MN_QUERY_DEVICE_RELATIONS request of type TargetDeviceRelation as successful, but did not properly fill out the request or forward the IRP to the underlying hardware stack. Param 2 - The address in the driver's code where the error was detected. Param 3 - Device object address. |
0x24C |
Non-fatal error |
A driver has returned STATUS_PENDING but did not mark the IRP pending by a call to IoMarkIrpPending. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Status code. |
0x24D |
Fatal error |
A driver has passed an invalid device object to a function that requires a PDO. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Device object address. |
0x300 |
Non-fatal error |
A driver has returned a suspicious status. This is probably due to an uninitialized variable bug in the driver. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Suspicious status code. |
0x301 |
Non-fatal error |
A driver has forwarded an IRP at IRQL > DISPATCH_LEVEL. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Incorrect IRQL value |
0x302 |
Non-fatal error |
A driver has forwarded an IRP at IRQL > = APC_LEVEL. The I/O Manager will need to queue an APC to complete this request. The APC will not be able to run because the caller is already at APC level, so the caller is likely to deadlock. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. Param 4 - Incorrect IRQL value. |
0x306 |
Non-fatal error |
The driver is completing an IRP_MJ_PNP (major) and IRP_MN_REMOVE_DEVICE (minor) request with a failure status code. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x307 |
Non-fatal error |
The driver issued an I/O request with an event that was already signaled and received a STATUS_PENDING response. This can result in unwinding before the I/O is complete. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x310 |
Non-fatal error |
The driver is reinitializing an IRP that is still in use. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x311 |
Non-fatal error |
The driver is reinitializing an IRP that was created with IoMakeAssociatedIrp, IoBuildAsynchronousFsdRequest, IoBuildSynchronousFsdRequest, IoBuildDeviceIoControlRequest. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
0x312 |
Non-fatal error |
The caller provided the IRP Status Information field with a value that is greater than the output section of the system buffer. Param 2 - The address in the driver's code where the error was detected. Param 3 - IRP address. |
Cause
See the description of each code in the Parameters section for a description of the cause.
Resolution
This bug check can only occur when Driver Verifier has been instructed to monitor one or more drivers. If you did not intend to use Driver Verifier, you should deactivate it. For more information, see "How to control Driver Verifier" in Driver Verifier. You might consider updating or removing the driver which caused this problem as well.
If you are the driver developer, use the information obtained through this bug check to fix the bugs in your code.
For full details on Driver Verifier, see Driver Verifier.