SockFilter 8.0.1: 0xCE after unload, pending AFD completion calls adgnetworksockdrv+0x71a0

### Please answer the following questions for yourself before submitting an issue

- [ ] Filters were updated before reproducing an issue (not independently verified; this is kernel crash forensics, not a filtering-rule reproduction).
- [x] I checked the knowledge base and found no answer.
- [x] I checked to make sure that this issue has not already been filed.

### AdGuard version

8.0.1.5570 (current stable release), CoreLibs 1.22.29, SockFilter file version 8.0.91.0.

### Browser version

Not browser-specific; crash process context was AppleMobileDeviceProcess.exe.

### OS version

Windows 11 x64, kernel build 26100.

### Traffic filtering

- [x] yes, I do

### Ad Blocking

Not isolated; no filter-list attribution is claimed.

### Which DNS server do you use?

Not established in this report. No DNS change was made during investigation.

### Issue Details

After a reboot/shutdown hang, Windows recorded bugcheck 0xCE. CDB analysis of the resulting minidump identifies an instruction in an unloaded adgnetworksockdrv module. Exact minimal reproduction has not been established.

Crash timestamp inside the dump: 2026-09-12 01:24:47 KST. The subsequent boot at approximately 07:59 reported the saved failure. This distinction avoids mistaking the report time for a second crash.

```text
DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS (ce)
Arg1: fffff80140fc71a0
Arg2: 0000000000000010
Arg3: fffff80140fc71a0
Arg4: 0000000000000000
Failure.Bucket: 0xCE_IMAGE_adgnetworksockdrv.sys
Faulting.IP.Type: Unloaded
IMAGE_NAME: adgnetworksockdrv.sys
PROCESS_NAME: AppleMobileDeviceProcess.exe
+0x71a0
nt!IopfCompleteRequest
nt!IofCompleteRequest
afd!AfdCompletePollIrp
afd!AfdCancelPoll
nt!IoCancelIrp
nt!IoCancelThreadIo
nt!PspExitThread
```

### Expected Behavior

Driver unload/shutdown drains or cancels outstanding completion callbacks before code is unloaded.

### Actual Behavior

A pending I/O completion reaches an unloaded SockFilter address and the kernel bugchecks. The Apple process is execution context, not evidence that Apple is the faulty driver.

### Screenshots

Not applicable. Minidump remains local; no memory dump, private traffic log, account identifier, or browsing history is publicly attached.

### Additional Information

The installed driver describes itself as AdGuard for Windows sock filter driver x64 for Windows 8+ (1.0.4.4; nfsdk 1.7.6.7), signed product metadata AdGuard Software Limited. Current stable 8.0.1 is already installed, so a newer stable update is not available as mitigation.

Post-boot service logs repeatedly show `AGNFHandler enableKeepalive: Failed to nf_tcpSetSockOpt(): NF_STATUS_FAIL`. This is supporting context only; a causal link to the unload crash is not established.

This machine previously had a separate WFP/NETIO crash, so switching back to WFP is not assumed safe. Please advise whether an unload/completion fix exists, whether a diagnostic build is available, and the supported private channel for a minidump if needed. The crash was not deliberately replayed and no driver was forcibly unloaded.

Related but different report reviewed: #5894 (SockFilter BSOD). This report specifically concerns 0xCE with an unloaded-module completion callback on 8.0.1.