M
Mikecl
Hi,
Recently one of our servers started rebooting I have a copy of the debug
file which suggests srv.sys is the probable culprit. Although there are a few
references to the general error I have not found anything specific. Anyone
have any ideas what to look at now?
Opened log file 'Debuglogfile.txt'
Loading Dump File [Z:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is:
SRV*c:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS\systemC:\WINDOWS\system32http://www.alexander.com/SymServe
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free
x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Fri Aug 3 10:18:37.477 2007 (GMT+1)
System Uptime: 0 days 2:12:03.312
Loading Kernel Symbols
.........................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {bad0b114, 0, 80936b0e, 0}
Probably caused by : srv.sys ( srv!SrvIoCreateFile+36d )
Followup: MachineOwner
---------
3: kd> !analyze -vrkvlmtn.logcloseq
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or
it
is pointing at freed memory.
Arguments:
Arg1: bad0b114, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80936b0e, If non-zero, the instruction address which referenced the
bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
READ_ADDRESS: bad0b114
FAULTING_IP:
nt!ObOpenObjectByName+184
80936b0e 854164 test dword ptr [ecx+64h],eax
MM_INTERNAL_CODE: 0
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: System
CURRENT_IRQL: 1
TRAP_FRAME: b8942a48 -- (.trap ffffffffb8942a48)
..trap ffffffffb8942a48
ErrCode = 00000000
eax=00000040 ebx=00000000 ecx=bad0b0b0 edx=56190003 esi=8a562684 edi=88f2acf0
eip=80936b0e esp=b8942abc ebp=b8942adc iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
nt!ObOpenObjectByName+0x184:
80936b0e 854164 test dword ptr [ecx+64h],eax
ds:0023:bad0b114=????????
..trap
Resetting default scope
LAST_CONTROL_TRANSFER: from 808689ee to 8087b6be
STACK_TEXT:
b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b
b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813
b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc
b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184
b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447
b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3
b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d
b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc
b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c
b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7
b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138
b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
srv!SrvIoCreateFile+36d
b9780efd 837d4400 cmp dword ptr [ebp+44h],0
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: srv!SrvIoCreateFile+36d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: srv
IMAGE_NAME: srv.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 427836f1
FAILURE_BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d
BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d
Followup: MachineOwner
---------
eax=f774713c ebx=00000000 ecx=0000020d edx=00000001 esi=f7747120 edi=808b4120
eip=8087b6be esp=b89429c8 ebp=b89429e0 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8087b6be 5d pop ebp
ChildEBP RetAddr Args to Child
b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b (FPO:
[Non-Fpo])
b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813 (FPO:
[Non-Fpo])
b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc (FPO: [0,0]
TrapFrame @ b8942a48)
b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184
(FPO: [Non-Fpo])
b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447 (FPO:
[Non-Fpo])
b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3 (FPO:
[Non-Fpo])
b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d (FPO:
[Non-Fpo])
b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc (FPO:
[Non-Fpo])
b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c
(FPO: [Non-Fpo])
b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7 (FPO:
[0,0,0])
b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138 (FPO:
[Non-Fpo])
b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e
(FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a75000 nt ntkrnlmp.exe Fri Mar 25 00:42:08 2005 (42435E60)
80a75000 80aa1000 hal halmacpi.dll Fri Mar 25 00:28:37 2005 (42435B35)
b88ea000 b88ed600 prepdrv prepdrv.sys Mon Jun 28 07:09:18 2004 (40DFB60E)
b8912000 b893f000 RDPWD RDPWD.SYS Wed Jun 15 16:33:14 2005 (42B04A3A)
b8adf000 b8aea000 TDTCP TDTCP.SYS Fri Mar 25 00:27:15 2005 (42435AE3)
b8be7000 b8bfb440 naiavf5x naiavf5x.sys Tue Aug 05 02:08:00 2003 (3F2F0370)
b9764000 b97c2000 srv srv.sys Wed May 04 03:44:01 2005 (427836F1)
b97c2000 b97ec000 Fastfat Fastfat.SYS Fri Mar 25 00:40:20 2005 (42435DF4)
b97ec000 b988e800 hardlock hardlock.sys Thu May 22 14:31:39 2003 (3ECCD13B)
b9cc7000 b9cdc000 Cdfs Cdfs.SYS Fri Mar 25 00:40:55 2005 (42435E17)
b9d5e000 b9d6f000 Fips Fips.SYS Fri Mar 25 00:40:33 2005 (42435E01)
b9d6f000 b9de5000 mrxsmb mrxsmb.sys Fri Mar 25 00:41:13 2005 (42435E29)
b9e0d000 b9e3d000 rdbss rdbss.sys Fri Mar 25 00:40:49 2005 (42435E11)
b9e7d000 b9e88a00 Haspnt Haspnt.sys Fri Nov 02 14:31:06 2001 (3BE2AE2A)
b9edd000 b9f07000 afd afd.sys Fri Mar 25 00:40:43 2005 (42435E0B)
b9f07000 b9f38000 netbt netbt.sys Fri Mar 25 00:40:31 2005 (42435DFF)
b9f38000 b9f99000 tcpip tcpip.sys Fri Jan 13 02:12:43 2006 (43C70C9B)
b9f99000 b9fb2000 ipsec ipsec.sys Fri Mar 25 00:40:49 2005 (42435E11)
ba0a4000 ba0b8000 usbhub usbhub.sys Fri Mar 25 00:30:46 2005 (42435BB6)
ba0e2000 ba0ec000 Dxapi Dxapi.sys Tue Mar 25 07:06:01 2003 (3E7FFFD9)
ba0f2000 ba0fc000 dump_diskdump dump_diskdump.sys Fri Mar 25 00:28:56 2005
(42435B48)
ba16c000 ba1ac000 update update.sys Fri Mar 25 00:40:27 2005 (42435DFB)
ba1d4000 ba20b000 rdpdr rdpdr.sys Fri Mar 25 00:30:20 2005 (42435B9C)
ba20b000 ba21e000 raspptp raspptp.sys Fri Mar 25 00:40:43 2005 (42435E0B)
ba21e000 ba238000 ndiswan ndiswan.sys Fri Mar 25 00:40:46 2005 (42435E0E)
ba238000 ba24d000 rasl2tp rasl2tp.sys Fri Mar 25 00:40:29 2005 (42435DFD)
ba24d000 ba283000 cpqteam cpqteam.sys Wed Jul 19 10:00:57 2006 (44BDF4C9)
ba29a000 ba2c2000 ks ks.sys Fri Mar 25 00:41:03 2005 (42435E1F)
ba2c2000 ba2d6000 redbook redbook.sys Fri Mar 25 00:28:46 2005 (42435B3E)
ba2d6000 ba2eb000 cdrom cdrom.sys Fri Mar 25 00:28:57 2005 (42435B49)
ba2eb000 ba300000 serial serial.sys Fri Mar 25 00:28:29 2005 (42435B2D)
ba310000 ba319000 ndisuio ndisuio.sys Fri Mar 25 00:33:16 2005 (42435C4C)
ba360000 ba36d000 netbios netbios.sys Fri Mar 25 00:33:21 2005 (42435C51)
ba370000 ba37d000 wanarp wanarp.sys Fri Mar 25 00:34:07 2005 (42435C7F)
ba380000 ba38e000 msgpc msgpc.sys Fri Mar 25 00:33:31 2005 (42435C5B)
ba390000 ba39d000 Npfs Npfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C)
ba3a0000 ba3b3000 i8042prt i8042prt.sys Fri Mar 25 00:41:05 2005 (42435E21)
ba3b3000 ba3f8000 cpqasm2 cpqasm2.sys Fri Jul 14 19:57:28 2006 (44B7E918)
ba3f8000 ba413000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 00:29:53 2005 (42435B81)
ba413000 ba468600 ati2mpad ati2mpad.sys Mon Mar 22 16:22:19 2004 (405F12BB)
ba469000 ba493000 USBPORT USBPORT.SYS Fri Mar 25 00:30:43 2005 (42435BB3)
ba493000 ba4bd000 q57xp32 q57xp32.sys Wed May 10 23:00:31 2006 (4462627F)
ba92c000 ba933000 sysmgmt sysmgmt.sys Fri Jul 14 19:57:28 2006 (44B7E918)
bf800000 bf9d0000 win32k win32k.sys Thu Oct 06 01:37:08 2005 (434471B4)
bf9d0000 bf9e6000 dxg dxg.sys Fri Mar 25 00:27:25 2005 (42435AED)
bf9e6000 bfa3d100 ati2drad ati2drad.dll Mon Mar 22 16:23:41 2004 (405F130D)
f7002000 f700d000 TDI TDI.SYS Fri Mar 25 00:35:34 2005 (42435CD6)
f7022000 f702b000 libxprmc libxprmc.sys Tue Mar 25 07:05:43 2003 (3E7FFFC7)
f703e000 f7041f40 ckldrv ckldrv.sys Tue Jul 29 07:18:25 2003 (3F2611B1)
f70a2000 f70c1000 Mup Mup.sys Fri Mar 25 00:40:49 2005 (42435E11)
f70c1000 f70f7000 NDIS NDIS.sys Fri Mar 25 00:40:26 2005 (42435DFA)
f70f7000 f718c000 Ntfs Ntfs.sys Fri Mar 25 00:40:29 2005 (42435DFD)
f718c000 f71b3000 KSecDD KSecDD.sys Fri Mar 25 00:28:53 2005 (42435B45)
f71b3000 f71d8000 fltmgr fltmgr.sys Fri Mar 25 00:30:25 2005 (42435BA1)
f71d8000 f71eb000 CLASSPNP CLASSPNP.SYS Fri Mar 25 00:40:23 2005 (42435DF7)
f71eb000 f71fc000 symmpi symmpi.sys Mon Jun 14 16:28:44 2004 (40CDC42C)
f71fc000 f7217000 adpu160m adpu160m.sys Mon Sep 29 19:14:03 2003 (3F78766B)
f7217000 f733c000 ql2300 ql2300.sys Thu Oct 05 19:28:17 2006 (45254EC1)
f733c000 f735b000 SCSIPORT SCSIPORT.SYS Fri Mar 25 00:40:26 2005 (42435DFA)
f735b000 f7382140 LsiCsb6 LsiCsb6.sys Thu Jul 31 21:38:06 2003 (3F297E2E)
f7383000 f739f000 atapi atapi.sys Fri Mar 25 00:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Fri Mar 25 00:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Fri Mar 25 00:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Fri Mar 25 00:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Fri Mar 25 00:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Fri Mar 25 00:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 07:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 07:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 00:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 00:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 00:40:34 2005 (42435E02)
f74d7000 f74e3000 symc8xx symc8xx.sys Thu Oct 14 22:29:38 2004 (416EEFC2)
f74e7000 f74f2000 sym_hi sym_hi.sys Fri Oct 29 23:09:18 2004 (4182BF8E)
f74f7000 f7504400 CPQFCAC CPQFCAC.sys Fri Jun 03 18:23:05 2005 (42A091F9)
f7507000 f7517000 disk disk.sys Fri Mar 25 00:28:58 2005 (42435B4A)
f7517000 f7523000 Dfs Dfs.sys Fri Mar 25 00:30:28 2005 (42435BA4)
f7527000 f7531000 crcdisk crcdisk.sys Fri Mar 25 00:29:40 2005 (42435B74)
f7567000 f7570000 mssmbios mssmbios.sys Fri Mar 25 00:34:14 2005 (42435C86)
f7577000 f7581000 kbdclass kbdclass.sys Tue Mar 25 07:03:10 2003 (3E7FFF2E)
f7587000 f7592000 Msfs Msfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C)
f7597000 f75a5580 CPQCISSE CPQCISSE.sys Fri Jun 16 18:13:23 2006 (4492E6B3)
f75b7000 f75c2000 fdc fdc.sys Fri Mar 25 00:28:43 2005 (42435B3B)
f75d7000 f75e2000 ptilink ptilink.sys Fri Mar 25 00:28:25 2005 (42435B29)
f75e7000 f75f6000 raspppoe raspppoe.sys Fri Mar 25 00:34:16 2005 (42435C88)
f7617000 f7623000 TAPE TAPE.SYS Fri Mar 25 00:29:01 2005 (42435B4D)
f7637000 f7644600 NHOSTNT1 NHOSTNT1.SYS Mon May 26 17:10:25 2003 (3ED23C71)
f7667000 f7671000 serenum serenum.sys Fri Mar 25 00:28:27 2005 (42435B2B)
f7677000 f7686000 termdd termdd.sys Fri Mar 25 00:27:15 2005 (42435AE3)
f7697000 f76a1000 mouclass mouclass.sys Tue Mar 25 07:03:09 2003 (3E7FFF2D)
f76a7000 f76b0000 watchdog watchdog.sys Fri Mar 25 00:30:19 2005 (42435B9B)
f76b7000 f76c6000 intelppm intelppm.sys Fri Mar 25 00:28:40 2005 (42435B38)
f76c7000 f76d0000 ndistapi ndistapi.sys Fri Mar 25 00:34:11 2005 (42435C83)
f76d7000 f76e3000 vga vga.sys Fri Mar 25 00:29:54 2005 (42435B82)
f76e7000 f76f1000 MCD MCD.SYS Fri Mar 25 00:29:04 2005 (42435B50)
f76f7000 f7705000 NDProxy NDProxy.SYS Fri Mar 25 00:34:13 2005 (42435C85)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 07:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 07:07:58 2003 (3E80004E)
f7717000 f771e000 PCIIde PCIIde.sys Tue Mar 25 07:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Fri Mar 25 00:28:48 2005 (42435B40)
f7727000 f772e000 dmload dmload.sys Tue Mar 25 07:08:08 2003 (3E800058)
f772f000 f7733080 cpqcissm cpqcissm.sys Fri May 19 18:12:50 2006 (446DFC92)
f774f000 f7756000 Beep Beep.SYS Tue Mar 25 07:03:04 2003 (3E7FFF28)
f775f000 f7767000 mnmdd mnmdd.SYS Tue Mar 25 07:07:53 2003 (3E800049)
f776f000 f7777000 RDPCDD RDPCDD.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)
f7787000 f778f000 rasacd rasacd.sys Tue Mar 25 07:11:50 2003 (3E800136)
f77cf000 f77d3080 dump_cpqcissm dump_cpqcissm.sys Fri May 19 18:12:50 2006
(446DFC92)
f77d7000 f77de000 null null.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)
f77df000 f77e4180 usbuhci usbuhci.sys Fri Mar 25 00:30:45 2005 (42435BB5)
f77e7000 f77eda00 usbehci usbehci.sys Fri Mar 25 00:30:43 2005 (42435BB3)
f77ef000 f77f7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 07:16:25 2003 (3E800249)
f77f7000 f77fe000 dxgthk dxgthk.sys Tue Mar 25 07:05:52 2003 (3E7FFFD0)
f77ff000 f7805900 CpqCiDrv CpqCiDrv.sys Fri Mar 10 19:40:39 2006 (4411D637)
f7807000 f780f000 audstub audstub.sys Tue Mar 25 07:09:12 2003 (3E800098)
f781f000 f7827000 Fs_Rec Fs_Rec.SYS Tue Mar 25 07:08:36 2003 (3E800074)
f7887000 f7890000 raspti raspti.sys Fri Mar 25 00:34:16 2005 (42435C88)
f7897000 f789af80 symc810 symc810.sys Fri Dec 08 17:40:59 2000 (3A311D2B)
f789b000 f789e460 cpqarry2 cpqarry2.sys Mon Nov 05 21:47:33 2001 (3BE708F5)
f799b000 f799c400 hplto hplto.sys Wed Jan 08 21:35:11 2003 (3E1C998F)
f799f000 f79a0280 swenum swenum.sys Fri Mar 25 00:27:42 2005 (42435AFE)
f79a1000 f79a2580 USBD USBD.SYS Tue Mar 25 07:10:39 2003 (3E8000EF)
f7aad000 f7aadb80 NHOSTNT3 NHOSTNT3.SYS Mon May 26 17:08:40 2003 (3ED23C08)
Unloaded modules:
b9ae1000 b9b37000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba350000 ba35e000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7817000 f781f000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f75f7000 f7601000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file Debuglogfile.txt
Thanks Mike
Recently one of our servers started rebooting I have a copy of the debug
file which suggests srv.sys is the probable culprit. Although there are a few
references to the general error I have not found anything specific. Anyone
have any ideas what to look at now?
Opened log file 'Debuglogfile.txt'
Loading Dump File [Z:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is:
SRV*c:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS\systemC:\WINDOWS\system32http://www.alexander.com/SymServe
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free
x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Fri Aug 3 10:18:37.477 2007 (GMT+1)
System Uptime: 0 days 2:12:03.312
Loading Kernel Symbols
.........................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {bad0b114, 0, 80936b0e, 0}
Probably caused by : srv.sys ( srv!SrvIoCreateFile+36d )
Followup: MachineOwner
---------
3: kd> !analyze -vrkvlmtn.logcloseq
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or
it
is pointing at freed memory.
Arguments:
Arg1: bad0b114, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80936b0e, If non-zero, the instruction address which referenced the
bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
READ_ADDRESS: bad0b114
FAULTING_IP:
nt!ObOpenObjectByName+184
80936b0e 854164 test dword ptr [ecx+64h],eax
MM_INTERNAL_CODE: 0
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: System
CURRENT_IRQL: 1
TRAP_FRAME: b8942a48 -- (.trap ffffffffb8942a48)
..trap ffffffffb8942a48
ErrCode = 00000000
eax=00000040 ebx=00000000 ecx=bad0b0b0 edx=56190003 esi=8a562684 edi=88f2acf0
eip=80936b0e esp=b8942abc ebp=b8942adc iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
nt!ObOpenObjectByName+0x184:
80936b0e 854164 test dword ptr [ecx+64h],eax
ds:0023:bad0b114=????????
..trap
Resetting default scope
LAST_CONTROL_TRANSFER: from 808689ee to 8087b6be
STACK_TEXT:
b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b
b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813
b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc
b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184
b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447
b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3
b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d
b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc
b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c
b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7
b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138
b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
srv!SrvIoCreateFile+36d
b9780efd 837d4400 cmp dword ptr [ebp+44h],0
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: srv!SrvIoCreateFile+36d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: srv
IMAGE_NAME: srv.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 427836f1
FAILURE_BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d
BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d
Followup: MachineOwner
---------
eax=f774713c ebx=00000000 ecx=0000020d edx=00000001 esi=f7747120 edi=808b4120
eip=8087b6be esp=b89429c8 ebp=b89429e0 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8087b6be 5d pop ebp
ChildEBP RetAddr Args to Child
b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b (FPO:
[Non-Fpo])
b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813 (FPO:
[Non-Fpo])
b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc (FPO: [0,0]
TrapFrame @ b8942a48)
b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184
(FPO: [Non-Fpo])
b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447 (FPO:
[Non-Fpo])
b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3 (FPO:
[Non-Fpo])
b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d (FPO:
[Non-Fpo])
b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc (FPO:
[Non-Fpo])
b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c
(FPO: [Non-Fpo])
b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7 (FPO:
[0,0,0])
b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138 (FPO:
[Non-Fpo])
b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e
(FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a75000 nt ntkrnlmp.exe Fri Mar 25 00:42:08 2005 (42435E60)
80a75000 80aa1000 hal halmacpi.dll Fri Mar 25 00:28:37 2005 (42435B35)
b88ea000 b88ed600 prepdrv prepdrv.sys Mon Jun 28 07:09:18 2004 (40DFB60E)
b8912000 b893f000 RDPWD RDPWD.SYS Wed Jun 15 16:33:14 2005 (42B04A3A)
b8adf000 b8aea000 TDTCP TDTCP.SYS Fri Mar 25 00:27:15 2005 (42435AE3)
b8be7000 b8bfb440 naiavf5x naiavf5x.sys Tue Aug 05 02:08:00 2003 (3F2F0370)
b9764000 b97c2000 srv srv.sys Wed May 04 03:44:01 2005 (427836F1)
b97c2000 b97ec000 Fastfat Fastfat.SYS Fri Mar 25 00:40:20 2005 (42435DF4)
b97ec000 b988e800 hardlock hardlock.sys Thu May 22 14:31:39 2003 (3ECCD13B)
b9cc7000 b9cdc000 Cdfs Cdfs.SYS Fri Mar 25 00:40:55 2005 (42435E17)
b9d5e000 b9d6f000 Fips Fips.SYS Fri Mar 25 00:40:33 2005 (42435E01)
b9d6f000 b9de5000 mrxsmb mrxsmb.sys Fri Mar 25 00:41:13 2005 (42435E29)
b9e0d000 b9e3d000 rdbss rdbss.sys Fri Mar 25 00:40:49 2005 (42435E11)
b9e7d000 b9e88a00 Haspnt Haspnt.sys Fri Nov 02 14:31:06 2001 (3BE2AE2A)
b9edd000 b9f07000 afd afd.sys Fri Mar 25 00:40:43 2005 (42435E0B)
b9f07000 b9f38000 netbt netbt.sys Fri Mar 25 00:40:31 2005 (42435DFF)
b9f38000 b9f99000 tcpip tcpip.sys Fri Jan 13 02:12:43 2006 (43C70C9B)
b9f99000 b9fb2000 ipsec ipsec.sys Fri Mar 25 00:40:49 2005 (42435E11)
ba0a4000 ba0b8000 usbhub usbhub.sys Fri Mar 25 00:30:46 2005 (42435BB6)
ba0e2000 ba0ec000 Dxapi Dxapi.sys Tue Mar 25 07:06:01 2003 (3E7FFFD9)
ba0f2000 ba0fc000 dump_diskdump dump_diskdump.sys Fri Mar 25 00:28:56 2005
(42435B48)
ba16c000 ba1ac000 update update.sys Fri Mar 25 00:40:27 2005 (42435DFB)
ba1d4000 ba20b000 rdpdr rdpdr.sys Fri Mar 25 00:30:20 2005 (42435B9C)
ba20b000 ba21e000 raspptp raspptp.sys Fri Mar 25 00:40:43 2005 (42435E0B)
ba21e000 ba238000 ndiswan ndiswan.sys Fri Mar 25 00:40:46 2005 (42435E0E)
ba238000 ba24d000 rasl2tp rasl2tp.sys Fri Mar 25 00:40:29 2005 (42435DFD)
ba24d000 ba283000 cpqteam cpqteam.sys Wed Jul 19 10:00:57 2006 (44BDF4C9)
ba29a000 ba2c2000 ks ks.sys Fri Mar 25 00:41:03 2005 (42435E1F)
ba2c2000 ba2d6000 redbook redbook.sys Fri Mar 25 00:28:46 2005 (42435B3E)
ba2d6000 ba2eb000 cdrom cdrom.sys Fri Mar 25 00:28:57 2005 (42435B49)
ba2eb000 ba300000 serial serial.sys Fri Mar 25 00:28:29 2005 (42435B2D)
ba310000 ba319000 ndisuio ndisuio.sys Fri Mar 25 00:33:16 2005 (42435C4C)
ba360000 ba36d000 netbios netbios.sys Fri Mar 25 00:33:21 2005 (42435C51)
ba370000 ba37d000 wanarp wanarp.sys Fri Mar 25 00:34:07 2005 (42435C7F)
ba380000 ba38e000 msgpc msgpc.sys Fri Mar 25 00:33:31 2005 (42435C5B)
ba390000 ba39d000 Npfs Npfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C)
ba3a0000 ba3b3000 i8042prt i8042prt.sys Fri Mar 25 00:41:05 2005 (42435E21)
ba3b3000 ba3f8000 cpqasm2 cpqasm2.sys Fri Jul 14 19:57:28 2006 (44B7E918)
ba3f8000 ba413000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 00:29:53 2005 (42435B81)
ba413000 ba468600 ati2mpad ati2mpad.sys Mon Mar 22 16:22:19 2004 (405F12BB)
ba469000 ba493000 USBPORT USBPORT.SYS Fri Mar 25 00:30:43 2005 (42435BB3)
ba493000 ba4bd000 q57xp32 q57xp32.sys Wed May 10 23:00:31 2006 (4462627F)
ba92c000 ba933000 sysmgmt sysmgmt.sys Fri Jul 14 19:57:28 2006 (44B7E918)
bf800000 bf9d0000 win32k win32k.sys Thu Oct 06 01:37:08 2005 (434471B4)
bf9d0000 bf9e6000 dxg dxg.sys Fri Mar 25 00:27:25 2005 (42435AED)
bf9e6000 bfa3d100 ati2drad ati2drad.dll Mon Mar 22 16:23:41 2004 (405F130D)
f7002000 f700d000 TDI TDI.SYS Fri Mar 25 00:35:34 2005 (42435CD6)
f7022000 f702b000 libxprmc libxprmc.sys Tue Mar 25 07:05:43 2003 (3E7FFFC7)
f703e000 f7041f40 ckldrv ckldrv.sys Tue Jul 29 07:18:25 2003 (3F2611B1)
f70a2000 f70c1000 Mup Mup.sys Fri Mar 25 00:40:49 2005 (42435E11)
f70c1000 f70f7000 NDIS NDIS.sys Fri Mar 25 00:40:26 2005 (42435DFA)
f70f7000 f718c000 Ntfs Ntfs.sys Fri Mar 25 00:40:29 2005 (42435DFD)
f718c000 f71b3000 KSecDD KSecDD.sys Fri Mar 25 00:28:53 2005 (42435B45)
f71b3000 f71d8000 fltmgr fltmgr.sys Fri Mar 25 00:30:25 2005 (42435BA1)
f71d8000 f71eb000 CLASSPNP CLASSPNP.SYS Fri Mar 25 00:40:23 2005 (42435DF7)
f71eb000 f71fc000 symmpi symmpi.sys Mon Jun 14 16:28:44 2004 (40CDC42C)
f71fc000 f7217000 adpu160m adpu160m.sys Mon Sep 29 19:14:03 2003 (3F78766B)
f7217000 f733c000 ql2300 ql2300.sys Thu Oct 05 19:28:17 2006 (45254EC1)
f733c000 f735b000 SCSIPORT SCSIPORT.SYS Fri Mar 25 00:40:26 2005 (42435DFA)
f735b000 f7382140 LsiCsb6 LsiCsb6.sys Thu Jul 31 21:38:06 2003 (3F297E2E)
f7383000 f739f000 atapi atapi.sys Fri Mar 25 00:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Fri Mar 25 00:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Fri Mar 25 00:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Fri Mar 25 00:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Fri Mar 25 00:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Fri Mar 25 00:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 07:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 07:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 00:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 00:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 00:40:34 2005 (42435E02)
f74d7000 f74e3000 symc8xx symc8xx.sys Thu Oct 14 22:29:38 2004 (416EEFC2)
f74e7000 f74f2000 sym_hi sym_hi.sys Fri Oct 29 23:09:18 2004 (4182BF8E)
f74f7000 f7504400 CPQFCAC CPQFCAC.sys Fri Jun 03 18:23:05 2005 (42A091F9)
f7507000 f7517000 disk disk.sys Fri Mar 25 00:28:58 2005 (42435B4A)
f7517000 f7523000 Dfs Dfs.sys Fri Mar 25 00:30:28 2005 (42435BA4)
f7527000 f7531000 crcdisk crcdisk.sys Fri Mar 25 00:29:40 2005 (42435B74)
f7567000 f7570000 mssmbios mssmbios.sys Fri Mar 25 00:34:14 2005 (42435C86)
f7577000 f7581000 kbdclass kbdclass.sys Tue Mar 25 07:03:10 2003 (3E7FFF2E)
f7587000 f7592000 Msfs Msfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C)
f7597000 f75a5580 CPQCISSE CPQCISSE.sys Fri Jun 16 18:13:23 2006 (4492E6B3)
f75b7000 f75c2000 fdc fdc.sys Fri Mar 25 00:28:43 2005 (42435B3B)
f75d7000 f75e2000 ptilink ptilink.sys Fri Mar 25 00:28:25 2005 (42435B29)
f75e7000 f75f6000 raspppoe raspppoe.sys Fri Mar 25 00:34:16 2005 (42435C88)
f7617000 f7623000 TAPE TAPE.SYS Fri Mar 25 00:29:01 2005 (42435B4D)
f7637000 f7644600 NHOSTNT1 NHOSTNT1.SYS Mon May 26 17:10:25 2003 (3ED23C71)
f7667000 f7671000 serenum serenum.sys Fri Mar 25 00:28:27 2005 (42435B2B)
f7677000 f7686000 termdd termdd.sys Fri Mar 25 00:27:15 2005 (42435AE3)
f7697000 f76a1000 mouclass mouclass.sys Tue Mar 25 07:03:09 2003 (3E7FFF2D)
f76a7000 f76b0000 watchdog watchdog.sys Fri Mar 25 00:30:19 2005 (42435B9B)
f76b7000 f76c6000 intelppm intelppm.sys Fri Mar 25 00:28:40 2005 (42435B38)
f76c7000 f76d0000 ndistapi ndistapi.sys Fri Mar 25 00:34:11 2005 (42435C83)
f76d7000 f76e3000 vga vga.sys Fri Mar 25 00:29:54 2005 (42435B82)
f76e7000 f76f1000 MCD MCD.SYS Fri Mar 25 00:29:04 2005 (42435B50)
f76f7000 f7705000 NDProxy NDProxy.SYS Fri Mar 25 00:34:13 2005 (42435C85)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 07:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 07:07:58 2003 (3E80004E)
f7717000 f771e000 PCIIde PCIIde.sys Tue Mar 25 07:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Fri Mar 25 00:28:48 2005 (42435B40)
f7727000 f772e000 dmload dmload.sys Tue Mar 25 07:08:08 2003 (3E800058)
f772f000 f7733080 cpqcissm cpqcissm.sys Fri May 19 18:12:50 2006 (446DFC92)
f774f000 f7756000 Beep Beep.SYS Tue Mar 25 07:03:04 2003 (3E7FFF28)
f775f000 f7767000 mnmdd mnmdd.SYS Tue Mar 25 07:07:53 2003 (3E800049)
f776f000 f7777000 RDPCDD RDPCDD.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)
f7787000 f778f000 rasacd rasacd.sys Tue Mar 25 07:11:50 2003 (3E800136)
f77cf000 f77d3080 dump_cpqcissm dump_cpqcissm.sys Fri May 19 18:12:50 2006
(446DFC92)
f77d7000 f77de000 null null.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)
f77df000 f77e4180 usbuhci usbuhci.sys Fri Mar 25 00:30:45 2005 (42435BB5)
f77e7000 f77eda00 usbehci usbehci.sys Fri Mar 25 00:30:43 2005 (42435BB3)
f77ef000 f77f7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 07:16:25 2003 (3E800249)
f77f7000 f77fe000 dxgthk dxgthk.sys Tue Mar 25 07:05:52 2003 (3E7FFFD0)
f77ff000 f7805900 CpqCiDrv CpqCiDrv.sys Fri Mar 10 19:40:39 2006 (4411D637)
f7807000 f780f000 audstub audstub.sys Tue Mar 25 07:09:12 2003 (3E800098)
f781f000 f7827000 Fs_Rec Fs_Rec.SYS Tue Mar 25 07:08:36 2003 (3E800074)
f7887000 f7890000 raspti raspti.sys Fri Mar 25 00:34:16 2005 (42435C88)
f7897000 f789af80 symc810 symc810.sys Fri Dec 08 17:40:59 2000 (3A311D2B)
f789b000 f789e460 cpqarry2 cpqarry2.sys Mon Nov 05 21:47:33 2001 (3BE708F5)
f799b000 f799c400 hplto hplto.sys Wed Jan 08 21:35:11 2003 (3E1C998F)
f799f000 f79a0280 swenum swenum.sys Fri Mar 25 00:27:42 2005 (42435AFE)
f79a1000 f79a2580 USBD USBD.SYS Tue Mar 25 07:10:39 2003 (3E8000EF)
f7aad000 f7aadb80 NHOSTNT3 NHOSTNT3.SYS Mon May 26 17:08:40 2003 (3ED23C08)
Unloaded modules:
b9ae1000 b9b37000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba350000 ba35e000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7817000 f781f000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f75f7000 f7601000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file Debuglogfile.txt
Thanks Mike