Re: Windows 2008 unexpected restart
Debugging Details:
------------------
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xBE
PROCESS_NAME: Microsoft.Excha
CURRENT_IRQL: 2
TRAP_FRAME: fffffa60051d4730 -- (.trap 0xfffffa60051d4730)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000ff96f20c rbx=fffffa8000000aa8 rcx=00000000ff96f20d
rdx=fffffa80079fe010 rsi=0000000000000001 rdi=fffffa80075a5a40
rip=fffffa6003510a0c rsp=fffffa60051d48c0 rbp=0000000000000000
r8=fffffa8006d93ae2 r9=0000000000000002 r10=fffffa80079fe068
r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
rdbss!RxCancelRoutine+0x44:
fffffa60`03510a0c f00fb18bc8000000 lock cmpxchg dword ptr [rbx+0C8h],ecx ds:c1f0:0b70=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800016af28a to fffff800016a1390
STACK_TEXT:
fffffa60`051d4638 fffff800`016af28a : 00000000`000000be 00000642`7fb3f478 64d00000`e1c9e025 fffffa60`051d4730 : nt!KeBugCheckEx
fffffa60`051d4640 fffff800`0169ff19 : 00000000`00000001 fffff800`016787f9 00000000`00000000 00000642`7fb3f3b0 : nt!MmAccessFault+0x28a
fffffa60`051d4730 fffffa60`03510a0c : fffffa60`013e0101 fffffa80`07626550 fffffa60`013df360 fffffa80`076c0011 : nt!KiPageFault+0x119
fffffa60`051d48c0 fffff800`01653783 : fffffa80`079fe010 fffffa80`07624670 00000000`00000000 fffffa60`013e0011 : rdbss!RxCancelRoutine+0x44
fffffa60`051d4900 fffff800`01708042 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IoCancelIrp+0x63
fffffa60`051d4940 fffff800`01903e45 : fffffa80`00000001 fffffa80`06d93ae0 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x27ce8
fffffa60`051d49d0 fffff800`019222f1 : fffffa80`076245b0 fffff800`01781781 fffffa80`07c29f30 fffff800`017df160 : nt!IopCleanupProcessResources+0x25
fffffa60`051d4a10 fffff800`0191f890 : 00000000`00000000 fffffa80`076245b0 fffff880`0510e8f0 00000000`00000000 : nt!IopCloseFile+0x251
fffffa60`051d4aa0 fffff800`0191fc47 : fffff880`0510e8f0 fffffa80`00000001 fffffa80`06d93ae0 00000000`00000000 : nt!ObpDecrementHandleCount+0xc0
fffffa60`051d4b30 fffff800`0191fe04 : fffff880`04e62510 fffff880`04e62500 00000000`00000001 00000000`00000a3c : nt!ObpCloseHandleTableEntry+0xb7
fffffa60`051d4bd0 fffff800`016a0e33 : fffffa80`075a5a40 fffffa60`051d4ca0 00000000`1e77e570 00000000`00000000 : nt!ObpCloseHandle+0x94
fffffa60`051d4c20 00000000`776f5b6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`1e77e248 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776f5b6a
STACK_COMMAND: kb
FOLLOWUP_IP:
rdbss!RxCancelRoutine+44
fffffa60`03510a0c f00fb18bc8000000 lock cmpxchg dword ptr [rbx+0C8h],ecx
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: rdbss!RxCancelRoutine+44
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: rdbss
IMAGE_NAME: rdbss.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 479190bd
FAILURE_BUCKET_ID: X64_0xBE_rdbss!RxCancelRoutine+44
BUCKET_ID: X64_0xBE_rdbss!RxCancelRoutine+44
Followup: MachineOwner
---------
Concluding from the above, an error occurs in rdbss.sys (Redirected Drive Buffering SubSystem Driver) when it tries to cancel an IRP (very nice cool feature in vista/2008...let's see how many problems we'll have with it)
If i understand correctly, you run the server inside a VM...so hardware is most likely out of the question
...i think it might have something to do with VM then...
Digging a bit in:
We're trying to close a file (as seen from the line below), which for some reasons we cancel out (not sure why though)
fffffa60`051d4a10 fffff800`0191f890 : 00000000`00000000 fffffa80`076245b0 fffff880`0510e8f0 00000000`00000000 : nt!IopCloseFile+0x251
So the file we're trying to close is....
1: kd> !object fffffa80`076245b0
Object: fffffa80076245b0 Type: (fffffa80054e0080) File
ObjectHeader: fffffa8007624580 (old version)
HandleCount: 0 PointerCount: 1
Directory Object: 00000000 Name: \exbjnod1\18c72dd1-2e60-4330-984e-2d0dff196502$ {Mup}
not too sure what good does that give us though...
Call for MS debugging gurus here
Regards,
Andrew
"efeb" <efeb@discussions.microsoft.com> wrote in message news:4F80583D-9183-43A5-AED2-5383C3E573A0@microsoft.com...
> Uploaded.
>
> memory.zip
>
> Thank you Andrew.
>
> "Andrew Lomakin" wrote:
>
>> As i expected - minidump appears to be corrupt.
>>
>> Can you find `memory.dmp` file in your windows folder. Can you publish that
>> please?
>>
>> Regards,
>>
>> Andrew
>>
>> "efeb" <efeb@discussions.microsoft.com> wrote in message
>> news:5655307D-EEE4-491D-B69C-F8CC4B1FEEB1@microsoft.com...
>> > Try again, I put it in .zip file so you can download it.
>> >
>> > Tnx for quick reply.
>> >
>> > "Andrew Lomakin" wrote:
>> >
>> >> Hello,
>> >>
>> >> 1) cannot download file supplied (404) (try renaming it to .txt)
>> >> 2) Most probably will also need memory.dmp located in c:\windows.
>> >>
>> >> Regards,
>> >>
>> >> Andrew
>> >>
>> >> "efeb" <efeb@discussions.microsoft.com> wrote in message
>> >> news:04F41F69-BF3B-4118-AA25-5E4A8B41ECE7@microsoft.com...
>> >> > Windows 2008 restrarts unexpectedly and I'm getting this message:
>> >> >
>> >> > Problem signature:
>> >> > Problem Event Name: BlueScreen
>> >> > OS Version: 6.0.6001.2.1.0.274.10
>> >> > Locale ID: 1050
>> >> >
>> >> > Additional information about the problem:
>> >> > BCCode: be
>> >> > BCP1: 000006427FB3F478
>> >> > BCP2: 64D00000E1C9E025
>> >> > BCP3: FFFFFA60051D4730
>> >> > BCP4: 000000000000000A
>> >> > OS Version: 6_0_6001
>> >> > Service Pack: 1_0
>> >> > Product: 274_3
>> >> >
>> >> > Files that help describe the problem:
>> >> > C:\Windows\Minidump\Mini031508-02.dmp
>> >> > C:\Users\exadmin.ERSTE\AppData\Local\Temp\2\WER-191046-0.sysdata.xml
>> >> >
>> >> >
>> >> > here is dump file:
>> >> >
>> >> > http://193.198.102.182:8080/dump/
>> >> >
>> >> > Can anyone help?
>> >> >
>> >> > Thank you.
>> >>
>> >>
>>
>>