Guest Mikecl Posted August 3, 2007 Posted August 3, 2007 Hi, Recently one of our servers started rebooting I have a copy of the debug file which suggests srv.sys is the probable culprit. Although there are a few references to the general error I have not found anything specific. Anyone have any ideas what to look at now? Opened log file 'Debuglogfile.txt' Loading Dump File [Z:\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: SRV*c:\Symbols*http://msdl.microsoft.com/download/symbols Executable search path is: C:\WINDOWS\system;;C:\WINDOWS\system32;http://www.alexander.com/SymServe Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free x86 compatible Product: Server, suite: TerminalServer SingleUserTS Built by: 3790.srv03_sp1_rtm.050324-1447 Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988 Debug session time: Fri Aug 3 10:18:37.477 2007 (GMT+1) System Uptime: 0 days 2:12:03.312 Loading Kernel Symbols ......................................................................................................................... Loading User Symbols Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 50, {bad0b114, 0, 80936b0e, 0} Probably caused by : srv.sys ( srv!SrvIoCreateFile+36d ) Followup: MachineOwner --------- 3: kd> !analyze -v;r;kv;lmtn;.logclose;q ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* PAGE_FAULT_IN_NONPAGED_AREA (50) Invalid system memory was referenced. This cannot be protected by try-except, it must be protected by a Probe. Typically the address is just plain bad or it is pointing at freed memory. Arguments: Arg1: bad0b114, memory referenced. Arg2: 00000000, value 0 = read operation, 1 = write operation. Arg3: 80936b0e, If non-zero, the instruction address which referenced the bad memory address. Arg4: 00000000, (reserved) Debugging Details: ------------------ READ_ADDRESS: bad0b114 FAULTING_IP: nt!ObOpenObjectByName+184 80936b0e 854164 test dword ptr [ecx+64h],eax MM_INTERNAL_CODE: 0 DEFAULT_BUCKET_ID: DRIVER_FAULT BUGCHECK_STR: 0x50 PROCESS_NAME: System CURRENT_IRQL: 1 TRAP_FRAME: b8942a48 -- (.trap ffffffffb8942a48) ..trap ffffffffb8942a48 ErrCode = 00000000 eax=00000040 ebx=00000000 ecx=bad0b0b0 edx=56190003 esi=8a562684 edi=88f2acf0 eip=80936b0e esp=b8942abc ebp=b8942adc iopl=0 nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282 nt!ObOpenObjectByName+0x184: 80936b0e 854164 test dword ptr [ecx+64h],eax ds:0023:bad0b114=???????? ..trap Resetting default scope LAST_CONTROL_TRANSFER: from 808689ee to 8087b6be STACK_TEXT: b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813 b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184 b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447 b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3 b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7 b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138 b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 STACK_COMMAND: kb FOLLOWUP_IP: srv!SrvIoCreateFile+36d b9780efd 837d4400 cmp dword ptr [ebp+44h],0 SYMBOL_STACK_INDEX: 6 SYMBOL_NAME: srv!SrvIoCreateFile+36d FOLLOWUP_NAME: MachineOwner MODULE_NAME: srv IMAGE_NAME: srv.sys DEBUG_FLR_IMAGE_TIMESTAMP: 427836f1 FAILURE_BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d BUCKET_ID: 0x50_BADMEMREF_srv!SrvIoCreateFile+36d Followup: MachineOwner --------- eax=f774713c ebx=00000000 ecx=0000020d edx=00000001 esi=f7747120 edi=808b4120 eip=8087b6be esp=b89429c8 ebp=b89429e0 iopl=0 nv up ei ng nz na pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286 nt!KeBugCheckEx+0x1b: 8087b6be 5d pop ebp ChildEBP RetAddr Args to Child b89429e0 808689ee 00000050 bad0b114 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo]) b8942a30 80837d0a 00000000 bad0b114 00000000 nt!MmAccessFault+0x813 (FPO: [Non-Fpo]) b8942a30 80936b0e 00000000 bad0b114 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ b8942a48) b8942adc 80936f27 00000000 00000000 83f93300 nt!ObOpenObjectByName+0x184 (FPO: [Non-Fpo]) b8942b58 80936ff8 b8942cc8 00020089 b8942c90 nt!IopCreateFile+0x447 (FPO: [Non-Fpo]) b8942bb4 b9780efd b8942cc8 00020089 b8942c90 nt!IoCreateFile+0xa3 (FPO: [Non-Fpo]) b8942c24 b9781f29 89b1f048 b8942cc8 00020089 srv!SrvIoCreateFile+0x36d (FPO: [Non-Fpo]) b8942cf0 b97825e4 88d36b50 e7a1b9d0 00020089 srv!SrvNtCreateFile+0x5cc (FPO: [Non-Fpo]) b8942d78 b9765bc6 89b1f050 89c62920 b977b451 srv!SrvSmbNtCreateAndX+0x15c (FPO: [Non-Fpo]) b8942d84 b977b451 00000000 8922f020 00000000 srv!SrvProcessSmb+0xb7 (FPO: [0,0,0]) b8942dac 8092ccff 00c62920 00000000 00000000 srv!WorkerThread+0x138 (FPO: [Non-Fpo]) b8942ddc 80841a96 b977b394 89c62920 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo]) 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16 start end module name 80800000 80a75000 nt ntkrnlmp.exe Fri Mar 25 00:42:08 2005 (42435E60) 80a75000 80aa1000 hal halmacpi.dll Fri Mar 25 00:28:37 2005 (42435B35) b88ea000 b88ed600 prepdrv prepdrv.sys Mon Jun 28 07:09:18 2004 (40DFB60E) b8912000 b893f000 RDPWD RDPWD.SYS Wed Jun 15 16:33:14 2005 (42B04A3A) b8adf000 b8aea000 TDTCP TDTCP.SYS Fri Mar 25 00:27:15 2005 (42435AE3) b8be7000 b8bfb440 naiavf5x naiavf5x.sys Tue Aug 05 02:08:00 2003 (3F2F0370) b9764000 b97c2000 srv srv.sys Wed May 04 03:44:01 2005 (427836F1) b97c2000 b97ec000 Fastfat Fastfat.SYS Fri Mar 25 00:40:20 2005 (42435DF4) b97ec000 b988e800 hardlock hardlock.sys Thu May 22 14:31:39 2003 (3ECCD13B) b9cc7000 b9cdc000 Cdfs Cdfs.SYS Fri Mar 25 00:40:55 2005 (42435E17) b9d5e000 b9d6f000 Fips Fips.SYS Fri Mar 25 00:40:33 2005 (42435E01) b9d6f000 b9de5000 mrxsmb mrxsmb.sys Fri Mar 25 00:41:13 2005 (42435E29) b9e0d000 b9e3d000 rdbss rdbss.sys Fri Mar 25 00:40:49 2005 (42435E11) b9e7d000 b9e88a00 Haspnt Haspnt.sys Fri Nov 02 14:31:06 2001 (3BE2AE2A) b9edd000 b9f07000 afd afd.sys Fri Mar 25 00:40:43 2005 (42435E0B) b9f07000 b9f38000 netbt netbt.sys Fri Mar 25 00:40:31 2005 (42435DFF) b9f38000 b9f99000 tcpip tcpip.sys Fri Jan 13 02:12:43 2006 (43C70C9B) b9f99000 b9fb2000 ipsec ipsec.sys Fri Mar 25 00:40:49 2005 (42435E11) ba0a4000 ba0b8000 usbhub usbhub.sys Fri Mar 25 00:30:46 2005 (42435BB6) ba0e2000 ba0ec000 Dxapi Dxapi.sys Tue Mar 25 07:06:01 2003 (3E7FFFD9) ba0f2000 ba0fc000 dump_diskdump dump_diskdump.sys Fri Mar 25 00:28:56 2005 (42435B48) ba16c000 ba1ac000 update update.sys Fri Mar 25 00:40:27 2005 (42435DFB) ba1d4000 ba20b000 rdpdr rdpdr.sys Fri Mar 25 00:30:20 2005 (42435B9C) ba20b000 ba21e000 raspptp raspptp.sys Fri Mar 25 00:40:43 2005 (42435E0B) ba21e000 ba238000 ndiswan ndiswan.sys Fri Mar 25 00:40:46 2005 (42435E0E) ba238000 ba24d000 rasl2tp rasl2tp.sys Fri Mar 25 00:40:29 2005 (42435DFD) ba24d000 ba283000 cpqteam cpqteam.sys Wed Jul 19 10:00:57 2006 (44BDF4C9) ba29a000 ba2c2000 ks ks.sys Fri Mar 25 00:41:03 2005 (42435E1F) ba2c2000 ba2d6000 redbook redbook.sys Fri Mar 25 00:28:46 2005 (42435B3E) ba2d6000 ba2eb000 cdrom cdrom.sys Fri Mar 25 00:28:57 2005 (42435B49) ba2eb000 ba300000 serial serial.sys Fri Mar 25 00:28:29 2005 (42435B2D) ba310000 ba319000 ndisuio ndisuio.sys Fri Mar 25 00:33:16 2005 (42435C4C) ba360000 ba36d000 netbios netbios.sys Fri Mar 25 00:33:21 2005 (42435C51) ba370000 ba37d000 wanarp wanarp.sys Fri Mar 25 00:34:07 2005 (42435C7F) ba380000 ba38e000 msgpc msgpc.sys Fri Mar 25 00:33:31 2005 (42435C5B) ba390000 ba39d000 Npfs Npfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C) ba3a0000 ba3b3000 i8042prt i8042prt.sys Fri Mar 25 00:41:05 2005 (42435E21) ba3b3000 ba3f8000 cpqasm2 cpqasm2.sys Fri Jul 14 19:57:28 2006 (44B7E918) ba3f8000 ba413000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 00:29:53 2005 (42435B81) ba413000 ba468600 ati2mpad ati2mpad.sys Mon Mar 22 16:22:19 2004 (405F12BB) ba469000 ba493000 USBPORT USBPORT.SYS Fri Mar 25 00:30:43 2005 (42435BB3) ba493000 ba4bd000 q57xp32 q57xp32.sys Wed May 10 23:00:31 2006 (4462627F) ba92c000 ba933000 sysmgmt sysmgmt.sys Fri Jul 14 19:57:28 2006 (44B7E918) bf800000 bf9d0000 win32k win32k.sys Thu Oct 06 01:37:08 2005 (434471B4) bf9d0000 bf9e6000 dxg dxg.sys Fri Mar 25 00:27:25 2005 (42435AED) bf9e6000 bfa3d100 ati2drad ati2drad.dll Mon Mar 22 16:23:41 2004 (405F130D) f7002000 f700d000 TDI TDI.SYS Fri Mar 25 00:35:34 2005 (42435CD6) f7022000 f702b000 libxprmc libxprmc.sys Tue Mar 25 07:05:43 2003 (3E7FFFC7) f703e000 f7041f40 ckldrv ckldrv.sys Tue Jul 29 07:18:25 2003 (3F2611B1) f70a2000 f70c1000 Mup Mup.sys Fri Mar 25 00:40:49 2005 (42435E11) f70c1000 f70f7000 NDIS NDIS.sys Fri Mar 25 00:40:26 2005 (42435DFA) f70f7000 f718c000 Ntfs Ntfs.sys Fri Mar 25 00:40:29 2005 (42435DFD) f718c000 f71b3000 KSecDD KSecDD.sys Fri Mar 25 00:28:53 2005 (42435B45) f71b3000 f71d8000 fltmgr fltmgr.sys Fri Mar 25 00:30:25 2005 (42435BA1) f71d8000 f71eb000 CLASSPNP CLASSPNP.SYS Fri Mar 25 00:40:23 2005 (42435DF7) f71eb000 f71fc000 symmpi symmpi.sys Mon Jun 14 16:28:44 2004 (40CDC42C) f71fc000 f7217000 adpu160m adpu160m.sys Mon Sep 29 19:14:03 2003 (3F78766B) f7217000 f733c000 ql2300 ql2300.sys Thu Oct 05 19:28:17 2006 (45254EC1) f733c000 f735b000 SCSIPORT SCSIPORT.SYS Fri Mar 25 00:40:26 2005 (42435DFA) f735b000 f7382140 LsiCsb6 LsiCsb6.sys Thu Jul 31 21:38:06 2003 (3F297E2E) f7383000 f739f000 atapi atapi.sys Fri Mar 25 00:28:49 2005 (42435B41) f739f000 f73c9000 volsnap volsnap.sys Fri Mar 25 00:29:10 2005 (42435B56) f73c9000 f73f5000 dmio dmio.sys Fri Mar 25 00:30:02 2005 (42435B8A) f73f5000 f741c000 ftdisk ftdisk.sys Fri Mar 25 00:29:00 2005 (42435B4C) f741c000 f7432000 pci pci.sys Fri Mar 25 00:34:14 2005 (42435C86) f7432000 f7466000 ACPI ACPI.sys Fri Mar 25 00:34:09 2005 (42435C81) f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 07:13:00 2003 (3E80017C) f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 07:16:35 2003 (3E800253) f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 00:28:48 2005 (42435B40) f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 00:27:23 2005 (42435AEB) f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 00:40:34 2005 (42435E02) f74d7000 f74e3000 symc8xx symc8xx.sys Thu Oct 14 22:29:38 2004 (416EEFC2) f74e7000 f74f2000 sym_hi sym_hi.sys Fri Oct 29 23:09:18 2004 (4182BF8E) f74f7000 f7504400 CPQFCAC CPQFCAC.sys Fri Jun 03 18:23:05 2005 (42A091F9) f7507000 f7517000 disk disk.sys Fri Mar 25 00:28:58 2005 (42435B4A) f7517000 f7523000 Dfs Dfs.sys Fri Mar 25 00:30:28 2005 (42435BA4) f7527000 f7531000 crcdisk crcdisk.sys Fri Mar 25 00:29:40 2005 (42435B74) f7567000 f7570000 mssmbios mssmbios.sys Fri Mar 25 00:34:14 2005 (42435C86) f7577000 f7581000 kbdclass kbdclass.sys Tue Mar 25 07:03:10 2003 (3E7FFF2E) f7587000 f7592000 Msfs Msfs.SYS Fri Mar 25 00:30:04 2005 (42435B8C) f7597000 f75a5580 CPQCISSE CPQCISSE.sys Fri Jun 16 18:13:23 2006 (4492E6B3) f75b7000 f75c2000 fdc fdc.sys Fri Mar 25 00:28:43 2005 (42435B3B) f75d7000 f75e2000 ptilink ptilink.sys Fri Mar 25 00:28:25 2005 (42435B29) f75e7000 f75f6000 raspppoe raspppoe.sys Fri Mar 25 00:34:16 2005 (42435C88) f7617000 f7623000 TAPE TAPE.SYS Fri Mar 25 00:29:01 2005 (42435B4D) f7637000 f7644600 NHOSTNT1 NHOSTNT1.SYS Mon May 26 17:10:25 2003 (3ED23C71) f7667000 f7671000 serenum serenum.sys Fri Mar 25 00:28:27 2005 (42435B2B) f7677000 f7686000 termdd termdd.sys Fri Mar 25 00:27:15 2005 (42435AE3) f7697000 f76a1000 mouclass mouclass.sys Tue Mar 25 07:03:09 2003 (3E7FFF2D) f76a7000 f76b0000 watchdog watchdog.sys Fri Mar 25 00:30:19 2005 (42435B9B) f76b7000 f76c6000 intelppm intelppm.sys Fri Mar 25 00:28:40 2005 (42435B38) f76c7000 f76d0000 ndistapi ndistapi.sys Fri Mar 25 00:34:11 2005 (42435C83) f76d7000 f76e3000 vga vga.sys Fri Mar 25 00:29:54 2005 (42435B82) f76e7000 f76f1000 MCD MCD.SYS Fri Mar 25 00:29:04 2005 (42435B50) f76f7000 f7705000 NDProxy NDProxy.SYS Fri Mar 25 00:34:13 2005 (42435C85) f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 07:08:00 2003 (3E800050) f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 07:07:58 2003 (3E80004E) f7717000 f771e000 PCIIde PCIIde.sys Tue Mar 25 07:04:46 2003 (3E7FFF8E) f771f000 f7726000 intelide intelide.sys Fri Mar 25 00:28:48 2005 (42435B40) f7727000 f772e000 dmload dmload.sys Tue Mar 25 07:08:08 2003 (3E800058) f772f000 f7733080 cpqcissm cpqcissm.sys Fri May 19 18:12:50 2006 (446DFC92) f774f000 f7756000 Beep Beep.SYS Tue Mar 25 07:03:04 2003 (3E7FFF28) f775f000 f7767000 mnmdd mnmdd.SYS Tue Mar 25 07:07:53 2003 (3E800049) f776f000 f7777000 RDPCDD RDPCDD.sys Tue Mar 25 07:03:05 2003 (3E7FFF29) f7787000 f778f000 rasacd rasacd.sys Tue Mar 25 07:11:50 2003 (3E800136) f77cf000 f77d3080 dump_cpqcissm dump_cpqcissm.sys Fri May 19 18:12:50 2006 (446DFC92) f77d7000 f77de000 null null.sys Tue Mar 25 07:03:05 2003 (3E7FFF29) f77df000 f77e4180 usbuhci usbuhci.sys Fri Mar 25 00:30:45 2005 (42435BB5) f77e7000 f77eda00 usbehci usbehci.sys Fri Mar 25 00:30:43 2005 (42435BB3) f77ef000 f77f7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 07:16:25 2003 (3E800249) f77f7000 f77fe000 dxgthk dxgthk.sys Tue Mar 25 07:05:52 2003 (3E7FFFD0) f77ff000 f7805900 CpqCiDrv CpqCiDrv.sys Fri Mar 10 19:40:39 2006 (4411D637) f7807000 f780f000 audstub audstub.sys Tue Mar 25 07:09:12 2003 (3E800098) f781f000 f7827000 Fs_Rec Fs_Rec.SYS Tue Mar 25 07:08:36 2003 (3E800074) f7887000 f7890000 raspti raspti.sys Fri Mar 25 00:34:16 2005 (42435C88) f7897000 f789af80 symc810 symc810.sys Fri Dec 08 17:40:59 2000 (3A311D2B) f789b000 f789e460 cpqarry2 cpqarry2.sys Mon Nov 05 21:47:33 2001 (3BE708F5) f799b000 f799c400 hplto hplto.sys Wed Jan 08 21:35:11 2003 (3E1C998F) f799f000 f79a0280 swenum swenum.sys Fri Mar 25 00:27:42 2005 (42435AFE) f79a1000 f79a2580 USBD USBD.SYS Tue Mar 25 07:10:39 2003 (3E8000EF) f7aad000 f7aadb80 NHOSTNT3 NHOSTNT3.SYS Mon May 26 17:08:40 2003 (3ED23C08) Unloaded modules: b9ae1000 b9b37000 wlbs.sys Timestamp: unavailable (00000000) Checksum: 00000000 ba350000 ba35e000 imapi.sys Timestamp: unavailable (00000000) Checksum: 00000000 f7817000 f781f000 Sfloppy.SYS Timestamp: unavailable (00000000) Checksum: 00000000 f75f7000 f7601000 Flpydisk.SYS Timestamp: unavailable (00000000) Checksum: 00000000 Closing open log file Debuglogfile.txt Thanks Mike
Recommended Posts