Server Reboots BugCheck 50

[Guest Mikecl]

Hi,

 

Recently one of our servers started rebooting I have a copy of the debug

file which suggests srv.sys is the probable culprit. Although there are a few

references to the general error I have not found anything specific. Anyone

have any ideas what to look at now?

 

Opened log file 'Debuglogfile.txt'

 

Loading Dump File [Z:\MEMORY.DMP]

Kernel Summary Dump File: Only kernel address space is available

 

Symbol search path is:

SRV*c:\Symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:

C:\WINDOWS\system;;C:\WINDOWS\system32;http://www.alexander.com/SymServe

Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free

x86 compatible

Product: Server, suite: TerminalServer SingleUserTS

Built by: 3790.srv03_sp1_rtm.050324-1447

Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988

Debug session time: Fri Aug 3 10:18:37.477 2007 (GMT+1)

System Uptime: 0 days 2:12:03.312

Loading Kernel Symbols

.........................................................................................................................

Loading User Symbols

 

Loading unloaded module list

.....

*******************************************************************************

*

*

* Bugcheck Analysis

*

*

*

*******************************************************************************

 

Use !analyze -v to get detailed debugging information.

 

BugCheck 50, {bad0b114, 0, 80936b0e, 0}

 

Probably caused by : srv.sys ( srv!SrvIoCreateFile+36d )

 

Followup: MachineOwner

---------

 

3: kd> !analyze -v;r;kv;lmtn;.logclose;q

*******************************************************************************

*

*

* Bugcheck Analysis

*

*

*

*******************************************************************************

 

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced. This cannot be protected by try-except,

it must be protected by a Probe. Typically the address is just plain bad or

it

is pointing at freed memory.

Arguments:

Arg1: bad0b114, memory referenced.

Arg2: 00000000, value 0 = read operation, 1 = write operation.

Arg3: 80936b0e, If non-zero, the instruction address which referenced the

bad memory

address.

Arg4: 00000000, (reserved)

 

Debugging Details:

------------------

 

 

READ_ADDRESS: bad0b114

 

FAULTING_IP:

nt!ObOpenObjectByName+184

80936b0e 854164 test dword ptr [ecx+64h],eax

 

MM_INTERNAL_CODE: 0

 

DEFAULT_BUCKET_ID: DRIVER_FAULT

 

BUGCHECK_STR: 0x50

 

PROCESS_NAME: System

 

CURRENT_IRQL: 1

 

TRAP_FRAME: b8942a48 -- (.trap ffffffffb8942a48)

..trap ffffffffb8942a48

ErrCode = 00000000

eax=00000040 ebx=00000000 ecx=bad0b0b0 edx=56190003 esi=8a562684 edi=88f2acf0

eip=80936b0e esp=b8942abc ebp=b8942adc iopl=0 nv up ei ng nz na po nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282

nt!ObOpenObjectByName+0x184:

80936b0e 854164 test dword ptr [ecx+64h],eax

ds:0023:bad0b114=????????

..trap

Resetting default scope

 

LAST_CONTROL_TRANSFER: from 808689ee to 8087b6be

 

STACK_TEXT:

b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b

b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813

b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc

b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184

b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447

b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3

b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d

b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc

b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c

b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7

b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138

b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e

00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

 

 

STACK_COMMAND: kb

 

FOLLOWUP_IP:

srv!SrvIoCreateFile+36d

b9780efd 837d4400 cmp dword ptr [ebp+44h],0

 

SYMBOL_STACK_INDEX: 6

 

SYMBOL_NAME: srv!SrvIoCreateFile+36d

 

FOLLOWUP_NAME: MachineOwner

 

MODULE_NAME: srv

 

IMAGE_NAME: srv.sys

 

DEBUG_FLR_IMAGE_TIMESTAMP: 427836f1

 

FAILURE_BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d

 

BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d

 

Followup: MachineOwner

---------

 

eax=f774713c ebx=00000000 ecx=0000020d edx=00000001 esi=f7747120 edi=808b4120

eip=8087b6be esp=b89429c8 ebp=b89429e0 iopl=0 nv up ei ng nz na pe nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286

nt!KeBugCheckEx+0x1b:

8087b6be 5d pop ebp

ChildEBP RetAddr Args to Child

b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b (FPO:

[Non-Fpo])

b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813 (FPO:

[Non-Fpo])

b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc (FPO: [0,0]

TrapFrame @ b8942a48)

b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184

(FPO: [Non-Fpo])

b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447 (FPO:

[Non-Fpo])

b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3 (FPO:

[Non-Fpo])

b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d (FPO:

[Non-Fpo])

b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc (FPO:

[Non-Fpo])

b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c

(FPO: [Non-Fpo])

b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7 (FPO:

[0,0,0])

b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138 (FPO:

[Non-Fpo])

b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e

(FPO: [Non-Fpo])

00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

start end module name

80800000 80a75000 nt ntkrnlmp.exe Fri Mar 25 00:42:08 2005 (42435E60)

80a75000 80aa1000 hal halmacpi.dll Fri Mar 25 00:28:37 2005 (42435B35)

b88ea000 b88ed600 prepdrv prepdrv.sys Mon Jun 28 07:09:18 2004 (40DFB60E)

b8912000 b893f000 RDPWD RDPWD.SYS Wed Jun 15 16:33:14 2005 (42B04A3A)

b8adf000 b8aea000 TDTCP TDTCP.SYS Fri Mar 25 00:27:15 2005 (42435AE3)

b8be7000 b8bfb440 naiavf5x naiavf5x.sys Tue Aug 05 02:08:00 2003 (3F2F0370)

b9764000 b97c2000 srv srv.sys Wed May 04 03:44:01 2005 (427836F1)

b97c2000 b97ec000 Fastfat Fastfat.SYS Fri Mar 25 00:40:20 2005 (42435DF4)

b97ec000 b988e800 hardlock hardlock.sys Thu May 22 14:31:39 2003 (3ECCD13B)

b9cc7000 b9cdc000 Cdfs Cdfs.SYS Fri Mar 25 00:40:55 2005 (42435E17)

b9d5e000 b9d6f000 Fips Fips.SYS Fri Mar 25 00:40:33 2005 (42435E01)

b9d6f000 b9de5000 mrxsmb mrxsmb.sys Fri Mar 25 00:41:13 2005 (42435E29)

b9e0d000 b9e3d000 rdbss rdbss.sys Fri Mar 25 00:40:49 2005 (42435E11)

b9e7d000 b9e88a00 Haspnt Haspnt.sys Fri Nov 02 14:31:06 2001 (3BE2AE2A)

b9edd000 b9f07000 afd afd.sys Fri Mar 25 00:40:43 2005 (42435E0B)

b9f07000 b9f38000 netbt netbt.sys Fri Mar 25 00:40:31 2005 (42435DFF)

b9f38000 b9f99000 tcpip tcpip.sys Fri Jan 13 02:12:43 2006 (43C70C9B)

b9f99000 b9fb2000 ipsec ipsec.sys Fri Mar 25 00:40:49 2005 (42435E11)

ba0a4000 ba0b8000 usbhub usbhub.sys Fri Mar 25 00:30:46 2005 (42435BB6)

ba0e2000 ba0ec000 Dxapi Dxapi.sys Tue Mar 25 07:06:01 2003 (3E7FFFD9)

ba0f2000 ba0fc000 dump_diskdump dump_diskdump.sys Fri Mar 25 00:28:56 2005

(42435B48)

ba16c000 ba1ac000 update update.sys Fri Mar 25 00:40:27 2005 (42435DFB)

ba1d4000 ba20b000 rdpdr rdpdr.sys Fri Mar 25 00:30:20 2005 (42435B9C)

ba20b000 ba21e000 raspptp raspptp.sys Fri Mar 25 00:40:43 2005 (42435E0B)

ba21e000 ba238000 ndiswan ndiswan.sys Fri Mar 25 00:40:46 2005 (42435E0E)

ba238000 ba24d000 rasl2tp rasl2tp.sys Fri Mar 25 00:40:29 2005 (42435DFD)

ba24d000 ba283000 cpqteam cpqteam.sys Wed Jul 19 10:00:57 2006 (44BDF4C9)

ba29a000 ba2c2000 ks ks.sys Fri Mar 25 00:41:03 2005 (42435E1F)

ba2c2000 ba2d6000 redbook redbook.sys Fri Mar 25 00:28:46 2005 (42435B3E)

ba2d6000 ba2eb000 cdrom cdrom.sys Fri Mar 25 00:28:57 2005 (42435B49)

ba2eb000 ba300000 serial serial.sys Fri Mar 25 00:28:29 2005 (42435B2D)

ba310000 ba319000 ndisuio ndisuio.sys Fri Mar 25 00:33:16 2005 (42435C4C)

ba360000 ba36d000 netbios netbios.sys Fri Mar 25 00:33:21 2005 (42435C51)

ba370000 ba37d000 wanarp wanarp.sys Fri Mar 25 00:34:07 2005 (42435C7F)

ba380000 ba38e000 msgpc msgpc.sys Fri Mar 25 00:33:31 2005 (42435C5B)

ba390000 ba39d000 Npfs Npfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C)

ba3a0000 ba3b3000 i8042prt i8042prt.sys Fri Mar 25 00:41:05 2005 (42435E21)

ba3b3000 ba3f8000 cpqasm2 cpqasm2.sys Fri Jul 14 19:57:28 2006 (44B7E918)

ba3f8000 ba413000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 00:29:53 2005 (42435B81)

ba413000 ba468600 ati2mpad ati2mpad.sys Mon Mar 22 16:22:19 2004 (405F12BB)

ba469000 ba493000 USBPORT USBPORT.SYS Fri Mar 25 00:30:43 2005 (42435BB3)

ba493000 ba4bd000 q57xp32 q57xp32.sys Wed May 10 23:00:31 2006 (4462627F)

ba92c000 ba933000 sysmgmt sysmgmt.sys Fri Jul 14 19:57:28 2006 (44B7E918)

bf800000 bf9d0000 win32k win32k.sys Thu Oct 06 01:37:08 2005 (434471B4)

bf9d0000 bf9e6000 dxg dxg.sys Fri Mar 25 00:27:25 2005 (42435AED)

bf9e6000 bfa3d100 ati2drad ati2drad.dll Mon Mar 22 16:23:41 2004 (405F130D)

f7002000 f700d000 TDI TDI.SYS Fri Mar 25 00:35:34 2005 (42435CD6)

f7022000 f702b000 libxprmc libxprmc.sys Tue Mar 25 07:05:43 2003 (3E7FFFC7)

f703e000 f7041f40 ckldrv ckldrv.sys Tue Jul 29 07:18:25 2003 (3F2611B1)

f70a2000 f70c1000 Mup Mup.sys Fri Mar 25 00:40:49 2005 (42435E11)

f70c1000 f70f7000 NDIS NDIS.sys Fri Mar 25 00:40:26 2005 (42435DFA)

f70f7000 f718c000 Ntfs Ntfs.sys Fri Mar 25 00:40:29 2005 (42435DFD)

f718c000 f71b3000 KSecDD KSecDD.sys Fri Mar 25 00:28:53 2005 (42435B45)

f71b3000 f71d8000 fltmgr fltmgr.sys Fri Mar 25 00:30:25 2005 (42435BA1)

f71d8000 f71eb000 CLASSPNP CLASSPNP.SYS Fri Mar 25 00:40:23 2005 (42435DF7)

f71eb000 f71fc000 symmpi symmpi.sys Mon Jun 14 16:28:44 2004 (40CDC42C)

f71fc000 f7217000 adpu160m adpu160m.sys Mon Sep 29 19:14:03 2003 (3F78766B)

f7217000 f733c000 ql2300 ql2300.sys Thu Oct 05 19:28:17 2006 (45254EC1)

f733c000 f735b000 SCSIPORT SCSIPORT.SYS Fri Mar 25 00:40:26 2005 (42435DFA)

f735b000 f7382140 LsiCsb6 LsiCsb6.sys Thu Jul 31 21:38:06 2003 (3F297E2E)

f7383000 f739f000 atapi atapi.sys Fri Mar 25 00:28:49 2005 (42435B41)

f739f000 f73c9000 volsnap volsnap.sys Fri Mar 25 00:29:10 2005 (42435B56)

f73c9000 f73f5000 dmio dmio.sys Fri Mar 25 00:30:02 2005 (42435B8A)

f73f5000 f741c000 ftdisk ftdisk.sys Fri Mar 25 00:29:00 2005 (42435B4C)

f741c000 f7432000 pci pci.sys Fri Mar 25 00:34:14 2005 (42435C86)

f7432000 f7466000 ACPI ACPI.sys Fri Mar 25 00:34:09 2005 (42435C81)

f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 07:13:00 2003 (3E80017C)

f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 07:16:35 2003 (3E800253)

f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 00:28:48 2005 (42435B40)

f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 00:27:23 2005 (42435AEB)

f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 00:40:34 2005 (42435E02)

f74d7000 f74e3000 symc8xx symc8xx.sys Thu Oct 14 22:29:38 2004 (416EEFC2)

f74e7000 f74f2000 sym_hi sym_hi.sys Fri Oct 29 23:09:18 2004 (4182BF8E)

f74f7000 f7504400 CPQFCAC CPQFCAC.sys Fri Jun 03 18:23:05 2005 (42A091F9)

f7507000 f7517000 disk disk.sys Fri Mar 25 00:28:58 2005 (42435B4A)

f7517000 f7523000 Dfs Dfs.sys Fri Mar 25 00:30:28 2005 (42435BA4)

f7527000 f7531000 crcdisk crcdisk.sys Fri Mar 25 00:29:40 2005 (42435B74)

f7567000 f7570000 mssmbios mssmbios.sys Fri Mar 25 00:34:14 2005 (42435C86)

f7577000 f7581000 kbdclass kbdclass.sys Tue Mar 25 07:03:10 2003 (3E7FFF2E)

f7587000 f7592000 Msfs Msfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C)

f7597000 f75a5580 CPQCISSE CPQCISSE.sys Fri Jun 16 18:13:23 2006 (4492E6B3)

f75b7000 f75c2000 fdc fdc.sys Fri Mar 25 00:28:43 2005 (42435B3B)

f75d7000 f75e2000 ptilink ptilink.sys Fri Mar 25 00:28:25 2005 (42435B29)

f75e7000 f75f6000 raspppoe raspppoe.sys Fri Mar 25 00:34:16 2005 (42435C88)

f7617000 f7623000 TAPE TAPE.SYS Fri Mar 25 00:29:01 2005 (42435B4D)

f7637000 f7644600 NHOSTNT1 NHOSTNT1.SYS Mon May 26 17:10:25 2003 (3ED23C71)

f7667000 f7671000 serenum serenum.sys Fri Mar 25 00:28:27 2005 (42435B2B)

f7677000 f7686000 termdd termdd.sys Fri Mar 25 00:27:15 2005 (42435AE3)

f7697000 f76a1000 mouclass mouclass.sys Tue Mar 25 07:03:09 2003 (3E7FFF2D)

f76a7000 f76b0000 watchdog watchdog.sys Fri Mar 25 00:30:19 2005 (42435B9B)

f76b7000 f76c6000 intelppm intelppm.sys Fri Mar 25 00:28:40 2005 (42435B38)

f76c7000 f76d0000 ndistapi ndistapi.sys Fri Mar 25 00:34:11 2005 (42435C83)

f76d7000 f76e3000 vga vga.sys Fri Mar 25 00:29:54 2005 (42435B82)

f76e7000 f76f1000 MCD MCD.SYS Fri Mar 25 00:29:04 2005 (42435B50)

f76f7000 f7705000 NDProxy NDProxy.SYS Fri Mar 25 00:34:13 2005 (42435C85)

f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 07:08:00 2003 (3E800050)

f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 07:07:58 2003 (3E80004E)

f7717000 f771e000 PCIIde PCIIde.sys Tue Mar 25 07:04:46 2003 (3E7FFF8E)

f771f000 f7726000 intelide intelide.sys Fri Mar 25 00:28:48 2005 (42435B40)

f7727000 f772e000 dmload dmload.sys Tue Mar 25 07:08:08 2003 (3E800058)

f772f000 f7733080 cpqcissm cpqcissm.sys Fri May 19 18:12:50 2006 (446DFC92)

f774f000 f7756000 Beep Beep.SYS Tue Mar 25 07:03:04 2003 (3E7FFF28)

f775f000 f7767000 mnmdd mnmdd.SYS Tue Mar 25 07:07:53 2003 (3E800049)

f776f000 f7777000 RDPCDD RDPCDD.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)

f7787000 f778f000 rasacd rasacd.sys Tue Mar 25 07:11:50 2003 (3E800136)

f77cf000 f77d3080 dump_cpqcissm dump_cpqcissm.sys Fri May 19 18:12:50 2006

(446DFC92)

f77d7000 f77de000 null null.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)

f77df000 f77e4180 usbuhci usbuhci.sys Fri Mar 25 00:30:45 2005 (42435BB5)

f77e7000 f77eda00 usbehci usbehci.sys Fri Mar 25 00:30:43 2005 (42435BB3)

f77ef000 f77f7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 07:16:25 2003 (3E800249)

f77f7000 f77fe000 dxgthk dxgthk.sys Tue Mar 25 07:05:52 2003 (3E7FFFD0)

f77ff000 f7805900 CpqCiDrv CpqCiDrv.sys Fri Mar 10 19:40:39 2006 (4411D637)

f7807000 f780f000 audstub audstub.sys Tue Mar 25 07:09:12 2003 (3E800098)

f781f000 f7827000 Fs_Rec Fs_Rec.SYS Tue Mar 25 07:08:36 2003 (3E800074)

f7887000 f7890000 raspti raspti.sys Fri Mar 25 00:34:16 2005 (42435C88)

f7897000 f789af80 symc810 symc810.sys Fri Dec 08 17:40:59 2000 (3A311D2B)

f789b000 f789e460 cpqarry2 cpqarry2.sys Mon Nov 05 21:47:33 2001 (3BE708F5)

f799b000 f799c400 hplto hplto.sys Wed Jan 08 21:35:11 2003 (3E1C998F)

f799f000 f79a0280 swenum swenum.sys Fri Mar 25 00:27:42 2005 (42435AFE)

f79a1000 f79a2580 USBD USBD.SYS Tue Mar 25 07:10:39 2003 (3E8000EF)

f7aad000 f7aadb80 NHOSTNT3 NHOSTNT3.SYS Mon May 26 17:08:40 2003 (3ED23C08)

 

Unloaded modules:

b9ae1000 b9b37000 wlbs.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

ba350000 ba35e000 imapi.sys

Timestamp: unavailable (00000000)

Checksum: 00000000

f7817000 f781f000 Sfloppy.SYS

Timestamp: unavailable (00000000)

Checksum: 00000000

f75f7000 f7601000 Flpydisk.SYS

Timestamp: unavailable (00000000)

Checksum: 00000000

Closing open log file Debuglogfile.txt

 

Thanks Mike