What does BSOD 326 (NDIS_NET_BUFFER_LIST_INFO_ILLEGALLY_TRANSFERRED) mean?

 
Could be also:
ConstantTypeOS
ERROR_FILE_LEVEL_TRIM_NOT_SUPPORTEDWin32 errorWindows
Previous Next
SECURE_BOOT_VIOLATION ABNORMAL_RESET_DETECTED

NDIS_NET_BUFFER_LIST_INFO_ILLEGALLY_TRANSFERRED

NDIS NET_BUFFER_LIST metadata violation

NDIS_NET_BUFFER_LIST_INFO_ILLEGALLY_TRANSFERRED is bug check code 0x00000146. The built-in table identifies it as NDIS_NET_BUFFER_LIST_INFO_ILLEGALLY_TRANSFERRED; the useful diagnostic question is what Windows component raised the stop and which invariant failed.

This bug check is specific to the Windows networking driver stack. It indicates that NET_BUFFER_LIST information was transferred illegally, usually by a miniport, filter, or protocol driver mishandling NBL metadata ownership.

How to read the parameters

  • The stack should identify whether the offender is an NDIS miniport, lightweight filter, protocol driver, or virtual switch extension.
  • NET_BUFFER_LIST information fields have ownership and lifetime rules; copying them blindly across cloned or indicated packets can violate those rules.
  • The bug check is not a TCP/IP protocol error.

What to check in the dump

  • Use NDIS verifier and Driver Verifier on the suspect network driver.
  • Check VPN, firewall, packet capture, antivirus, virtual switch, and NIC offload/filter drivers.
  • Capture whether the crash occurs on send, receive, packet cloning, offload, or virtualization paths.

References


Looking for a different code? Search another status or error code.