使用v2rayN时，Windows系统偶尔会蓝屏崩溃：DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)

[jacob1136]

蓝屏是随机发生的，我不知道如何复现它。系统自动转储了内存文件，我试着用WinDbg找找原因，下面是部分分析结果。

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80332bf2109, address which referenced memory
// 省略部分内容
PROCESS_NAME:  xray.exe

TRAP_FRAME:  fffff50092f1f7e0 -- (.trap 0xfffff50092f1f7e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff50092f1fa20
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80332bf2109 rsp=fffff50092f1f970 rbp=ffff808d5777fbb0
 r8=fffff50092f1fa20  r9=fffff50092f1fa50 r10=ffff808d569438a0
r11=fffff80332c4e000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!CalloutStreamDataInit+0x2d:
fffff803`32bf2109 488b5808        mov     rbx,qword ptr [rax+8] ds:00000000`00000008=????????????????
Resetting default scope

STACK_TEXT:  
fffff500`92f1f698 fffff803`9fc86fe9     : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff500`92f1f6a0 fffff803`9fc822a8     : ffff808d`6ece1e10 fffff803`33f192b1 ffff808d`6ece1e10 ffff808d`596c4c10 : nt!KiBugCheckDispatch+0x69
fffff500`92f1f7e0 fffff803`32bf2109     : 00000000`00000002 ffff808d`5bbab060 00000000`00000000 fffff500`92f1fc60 : nt!KiPageFault+0x468
fffff500`92f1f970 fffff803`32c23b90     : ffff808d`5bbab010 ffff808d`5bbab010 fffff500`92f1fc60 ffff808d`5efb27b0 : NETIO!CalloutStreamDataInit+0x2d
fffff500`92f1f9a0 fffff803`32c20dbb     : 00000000`00000000 ffff808d`5bbab000 ffff808d`5bbab010 fffff500`92f1fe78 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x74
fffff500`92f1fa90 fffff803`32c21209     : ffff808d`569438a0 fffff500`92f1fc60 ffff808d`5bbab010 fffff500`90cd4e20 : NETIO!StreamCalloutProcessData+0x5f
fffff500`92f1fb20 fffff803`32c00785     : fffff500`90cd4e20 fffff500`92f1fc60 ffff808d`5bbab010 ffff808d`5bbab001 : NETIO!StreamCalloutProcessingLoop+0x175
fffff500`92f1fbc0 fffff803`32bcf60a     : 00000000`00000014 fffff803`7140137c fffff500`00000001 fffff500`90cd50e0 : NETIO!StreamProcessCallout+0x609
fffff500`92f1fcf0 fffff803`32bce3c0     : 00000000`00000014 fffff500`90cd50e0 ffff808d`5bebe5b0 fffff500`90cd4e20 : NETIO!ProcessCallout+0x2ea
fffff500`92f1fdc0 fffff803`32c18636     : fffff500`90cd5140 fffff803`32c18da8 fffff500`90cd5510 fffff500`90cd5211 : NETIO!ArbitrateAndEnforce+0x1e0
fffff500`92f1ff00 fffff803`9fc73dbe     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : NETIO!ArbitrateAndEnforceCallout+0x46
fffff500`92f1ff60 fffff803`9fc73d7b     : ffff808d`43dd1080 fffff803`32c185f0 00000000`00000004 fffff803`9f969ff5 : nt!KxSwitchKernelStackCallout+0x2e
fffff500`90cd47d0 fffff803`9f969ff5     : fffff500`90cd48a1 fffff500`92f20000 ffff808d`43dd1080 00000000`00000001 : nt!KiSwitchKernelStackContinue
fffff500`90cd47f0 fffff803`9f969adc     : fffff803`32c185f0 fffff500`90cd4b50 00000000`00000002 ffff808d`00000004 : nt!KiExpandKernelStackAndCalloutOnStackSegment+0x1d5
fffff500`90cd4900 fffff803`9f969829     : fffff500`90cd4b50 fffff803`32c185f0 00000000`00000002 fffff500`90cd4e00 : nt!KiExpandKernelStackAndCalloutSwitchStack+0x17c
fffff500`90cd4970 fffff803`9f9697dd     : fffff803`32c185f0 fffff500`90cd4b50 ffff808d`379d4cc0 fffff500`90cd50e0 : nt!KeExpandKernelStackAndCalloutInternal+0x39
fffff500`90cd49e0 fffff803`32bf4cfe     : 00000000`00000000 fffff500`90cd4e70 00000000`00000001 fffff500`90cd5100 : nt!KeExpandKernelStackAndCalloutEx+0x1d
fffff500`90cd4a20 fffff803`32be8932     : 00000000`0000000f fffff803`32c4e000 00000000`00000014 ffff808d`00000004 : NETIO!NetioExpandKernelStackAndCallout+0x7e
fffff500`90cd4a70 fffff803`32c23924     : 00000001`00020007 ffff808d`631e0330 ffff808d`54803940 ffff808d`54803b70 : NETIO!KfdClassify+0x622
fffff500`90cd4d80 fffff803`32c1dc6d     : ffff808d`57778d70 fffff500`90cd4ff0 fffff500`90cd5510 ffff808d`569438a0 : NETIO!StreamInternalClassify+0x168
fffff500`90cd4ef0 fffff803`32bc623e     : ffff808d`590f6c01 0000392a`7d220002 00000000`00000006 00000000`00000000 : NETIO!StreamClassify+0x43d
fffff500`90cd5080 fffff803`32bc5e61     : 00000000`00000000 ffff808d`590f6c30 00000000`00000000 00000000`00000000 : NETIO!StreamCommonInspect+0x29a
fffff500`90cd5490 fffff803`32da68cc     : 00000000`00000000 ffff808d`56943ac8 fffff500`90cd5610 ffff808d`3dce6ca0 : NETIO!WfpStreamInspectReceive+0x1d1
fffff500`90cd5510 fffff803`32d57d03     : 00000000`00000000 00000000`00000000 00000000`00000000 ffff808d`566d2d00 : tcpip!TcpProcessFastDatagramBatch+0xcac
fffff500`90cd5670 fffff803`32d56606     : 00000000`00000000 00000000`00000000 00000000`00000000 ffff808d`569438a0 : tcpip!TcpTcbReceive+0x313
fffff500`90cd5800 fffff803`32d7de7e     : 00000000`ae63b291 00000000`00000000 ffff808d`566d2d00 ffff808d`3dce6ca0 : tcpip!TcpMatchReceive+0x226
fffff500`90cd5950 fffff803`32d7d9e6     : ffff808d`39efe718 00000000`0000392a ffff808d`604ea701 fffff803`32d8392a : tcpip!TcpReceive+0x44e
fffff500`90cd5a40 fffff803`32d8680f     : 00000000`00000000 ffff808d`566d2d00 fffff500`90cd5e01 00000000`00000000 : tcpip!TcpNlClientReceiveDatagrams+0x16
fffff500`90cd5a70 fffff803`32d85371     : fffff803`32f1b7a0 ffff808d`00000006 00000000`00000010 fffff500`90cd5bd0 : tcpip!IppProcessDeliverList+0xbf
fffff500`90cd5b70 fffff803`32d8749b     : 00000001`00020003 ffff808d`631df6f0 00000000`00000000 fffff500`90cd5cd0 : tcpip!IppReceiveHeaderBatch+0x301
fffff500`90cd5c40 fffff803`32d87250     : 00000000`00000000 00000000`00000000 fffff500`90cd1000 ffff808d`39bfaa18 : tcpip!IppLbIndicatePackets+0x15b
fffff500`90cd5cd0 fffff803`9f9698c8     : ffff808d`43dd10fd fffff500`90cd5ed0 00000000`00000002 00000000`00000001 : tcpip!IppLbTransmitStackCallout+0x110
fffff500`90cd5d20 fffff803`9f9697dd     : fffff803`32d87140 fffff500`90cd5e78 ffff808d`39bfaa10 00000000`00000002 : nt!KeExpandKernelStackAndCalloutInternal+0xd8
fffff500`90cd5d90 fffff803`32d501a7     : 00000000`0000392a 00000000`00000001 ffff808d`566d2d00 00000000`0000ffff : nt!KeExpandKernelStackAndCalloutEx+0x1d
fffff500`90cd5dd0 fffff803`32d8356e     : 00000000`00000000 ffff808d`3dd3b8e8 ffff808d`3dd3b8e8 ffff808d`5e8dcc30 : tcpip!IppLoopbackEnqueue+0x257
fffff500`90cd5f20 fffff803`32d82303     : fffff803`32f1b7a0 ffff808d`3dd3b8e8 00000000`00000000 ffff808d`00000000 : tcpip!IppDispatchSendPacketHelper+0x18e
fffff500`90cd6060 fffff803`32d12163     : ffff808d`3dd3b8e8 fffff500`90cd6720 ffff808d`3dd3b8e8 00000000`00000000 : tcpip!IppPacketizeDatagrams+0x333
fffff500`90cd6250 fffff803`32d800bc     : 00000000`00000000 00000000`00000000 fffff803`32f1b7a0 ffff808d`5e8dcc30 : tcpip!IppSendDatagramsCommon+0x623
fffff500`90cd6430 fffff803`32d7fdb7     : 00000000`00000000 00000000`00000000 00000000`00000000 00000090`90cd6780 : tcpip!IpNlpSendDatagrams+0x4c
fffff500`90cd6470 fffff803`32d1067a     : ffff808d`549decd0 00000000`00000014 00000000`00000000 ffff808d`5e8dcea8 : tcpip!IpNlpFastSendDatagram+0x2e7
fffff500`90cd6530 fffff803`32e00afb     : ffff808d`6286d2c0 00000000`00000000 00000000`00000001 fffff500`90cd6990 : tcpip!TcpTcbSend+0x8aa
fffff500`90cd68f0 fffff803`32dffda5     : 00000000`00000000 00000000`00000000 fffff500`90cd6b50 fffff500`90cd6f30 : tcpip!TcpEnqueueTcbSend+0xd3b
fffff500`90cd6a30 fffff803`9f9698c8     : fffff500`90cd6b50 fffff803`32dffd80 00000000`00000000 00000000`0000000f : tcpip!TcpTlConnectionSendCalloutRoutine+0x25
fffff500`90cd6a70 fffff803`9f9697dd     : fffff803`32dffd80 fffff500`90cd6b50 ffff808d`726b1810 ffff808d`603e7c01 : nt!KeExpandKernelStackAndCalloutInternal+0xd8
fffff500`90cd6ae0 fffff803`32df36fd     : fffff500`90cd6c00 fffff803`32d20f10 ffff808d`00000000 ffff808d`6070aa01 : nt!KeExpandKernelStackAndCalloutEx+0x1d
fffff500`90cd6b20 fffff803`33fd7ada     : ffff808d`726b1810 fffff500`90cd74e0 ffff808d`603e7c30 ffff9b80`00004300 : tcpip!TcpTlConnectionSend+0x8d
fffff500`90cd6b90 fffff803`33fe286f     : 00000000`00000000 fffff803`9fc7aea6 fffff500`90cd6e70 fffff500`90cd6e78 : afd!AfdFastConnectionSend+0x57a
fffff500`90cd6e50 fffff803`9fe8a2ff     : 00000000`00000000 00000000`00000000 00000004`00000000 00000000`01000000 : afd!AfdFastIoDeviceControl+0x195f
fffff500`90cd7110 fffff803`9fe88aae     : fffff500`90cd74e0 00000000`00000001 00000000`00000000 000000c0`019e6368 : nt!IopXxxControlFile+0x183f
fffff500`90cd7380 fffff803`9fc86658     : ffff808d`5fc36360 00000000`00000000 fffff500`90cd74e0 00000000`00000000 : nt!NtDeviceIoControlFile+0x5e
fffff500`90cd73f0 00007ffe`032deee4     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000f5`28bff828 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`032deee4

SYMBOL_NAME:  NETIO!CalloutStreamDataInit+2d

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

STACK_COMMAND:  .process /r /p 0xffff808d49d450c0; .thread 0xffff808d43dd1080 ; kb

BUCKET_ID_FUNC_OFFSET:  2d

FAILURE_BUCKET_ID:  AV_NETIO!CalloutStreamDataInit

OS_VERSION:  10.0.26100.1

BUILDLAB_STR:  ge_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {feacaefb-f5a0-338a-7345-95e6dcab80ac}

Followup:     MachineOwner

我的能力只能支撑我分析到这一步了，希望有大佬能给出解答。
蓝屏时运行的v2rayN版本号是v6.55,Xray v1.8.24,sing_box v1.9.4
下面是v2rayN的配置文件

{
  "log": {
    "access": "",
    "error": "",
    "loglevel": "info"
  },
  "inbounds": [
    {
      "tag": "socks",
      "port": 10808,
      "listen": "127.0.0.1",
      "protocol": "socks",
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": true
      },
      "settings": {
        "auth": "noauth",
        "udp": false,
        "allowTransparent": false
      }
    },
    {
      "tag": "http",
      "port": 10809,
      "listen": "127.0.0.1",
      "protocol": "http",
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": true
      },
      "settings": {
        "auth": "noauth",
        "udp": false,
        "allowTransparent": false
      }
    },
    {
      "tag": "socks2",
      "port": 10810,
      "listen": "0.0.0.0",
      "protocol": "socks",
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": true
      },
      "settings": {
        "auth": "noauth",
        "udp": false,
        "allowTransparent": false
      }
    },
    {
      "tag": "http2",
      "port": 10811,
      "listen": "0.0.0.0",
      "protocol": "http",
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": true
      },
      "settings": {
        "auth": "noauth",
        "udp": false,
        "allowTransparent": false
      }
    },
    {
      "tag": "api",
      "port": 10813,
      "listen": "127.0.0.1",
      "protocol": "dokodemo-door",
      "settings": {
        "udp": false,
        "address": "127.0.0.1",
        "allowTransparent": false
      }
    }
  ],
  "outbounds": [
    {
      "tag": "proxy",
      "protocol": "vmess",
      "settings": {
        "vnext": [
          {
            "address": "[略]",
            "port": 24444,
            "users": [
              {
                "id": "95dabc65-70e1-4e87-96b3-47ab59a7d7c6",
                "alterId": 0,
                "email": "[email protected]",
                "security": "auto"
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "wsSettings": {
          "path": "/5e60be5f/",
          "headers": {}
        }
      },
      "mux": {
        "enabled": false,
        "concurrency": -1
      }
    },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "AsIs",
        "userLevel": 0
      }
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "http"
        }
      }
    }
  ],
  "stats": {},
  "api": {
    "tag": "api",
    "services": [
      "StatsService"
    ]
  },
  "policy": {
    "system": {
      "statsOutboundUplink": true,
      "statsOutboundDownlink": true
    }
  },
  "dns": {
    "hosts": {
      "dns.google": "8.8.8.8",
      "proxy.example.com": "127.0.0.1"
    },
    "servers": [
      {
        "address": "223.5.5.5",
        "domains": [
          "geosite:cn",
          "geosite:geolocation-cn"
        ],
        "expectIPs": [
          "geoip:cn"
        ]
      },
      "1.1.1.1",
      "8.8.8.8",
      "https://dns.google/dns-query"
    ]
  },
  "routing": {
    "domainStrategy": "AsIs",
    "domainMatcher": "mph",
    "rules": [
      {
        "type": "field",
        "inboundTag": [
          "api"
        ],
        "outboundTag": "api"
      },
      {
        "type": "field",
        "outboundTag": "direct",
        "domain": [
          "domain:example-example.com",
          "domain:example-example2.com"
        ]
      },
      {
        "type": "field",
        "port": "443",
        "network": "udp",
        "outboundTag": "block"
      },
      {
        "type": "field",
        "outboundTag": "block",
        "domain": [
          "geosite:category-ads-all"
        ]
      },
      {
        "type": "field",
        "outboundTag": "direct",
        "domain": [
          "geosite:cn",
          "geosite:geolocation-cn"
        ]
      },
      {
        "type": "field",
        "outboundTag": "direct",
        "ip": [
          "223.5.5.5/32",
          "119.29.29.29/32",
          "180.76.76.76/32",
          "114.114.114.114/32",
          "geoip:private",
          "geoip:cn"
        ]
      },
      {
        "type": "field",
        "port": "0-65535",
        "outboundTag": "proxy"
      }
    ]
  }
}

[mmmray]

I encountered the same error message with other applications. It turns out to be a kind of hardware failure that can only be triggered by launching certain memory-intensive applications. Memtest was useless. In the end, I re-seated some RAM sticks, removed a few others randomly and it got fixed.

I don't recommend sharing your memory dump publicly, it contains a lot of sensitive information. I deleted the link.

[jacob1136]

I have experienced the same glitch on both my desktop and laptop computers running xray.exe. I express my great sadness as there is no way to alleviate this problem.
-Translated by DeepL

[Loyolichoo]

I got 4 times. All of them are dead on the same reason, same function, same function offset(NETIO!CalloutStreamDataInit+2d), but different memory address. I don't think that's RAM's hardware problem. If memory problem, it should be random reason and random fault function.

[xiaoqiu0929]

你好，我也出现了这个问题，请问你解决了吗

[jacob1136]

错误代码提供的信息过于笼统，经过查阅Microsoft Learn官方文档后，我仍未获得明确的技术指引。
尽管有效信息量较少，但这个问题的解决仍然具备理论可行性。
需要注意的是，由于不同用户的系统环境并非完全一致，本文描述的解决思路仅可作为参考方案。

在故障复现过程中，观察到以下技术现象：

蓝屏发生时，Xray日志与Windows事件查看器均未记录有效异常信息
通过WinDbg对crash dump文件进行基础解析，STACK_TEXT显示出异常调用栈结构。
鉴于调试分析工作已超出我的技术能力范围，故针对该堆栈信息进行拓扑推理。

排障过程如下：
第一阶段（验证硬件驱动兼容性）：

执行干净卸载当前网卡驱动
安装AIC制造商提供的认证版本
保持其他软件运行环境不变
结果：系统仍触发BSOD异常

第二阶段（排查软件冲突）：
根据调用栈特征，将排查重点放在网络流量处理软件AdGuard for Windows：

咨询AdGuard技术支持未获直接解决方案，建议关注其GitHub存储库的Issue追踪
经检索发现：#5412报告中存在线索——多位用户反映启用WFP网络驱动后出现系统性崩溃
根据社区建议将过滤驱动切换至TDI驱动程序
问题解决，不再发生BSOD

最终实现暂时性解决方案，但需注意：
微软已宣布逐步弃用TDI驱动，此临时方案可能在后续系统更新中失效