TechSpot

Repeated minidumps

By Lobo67
Aug 1, 2007
  1. Hello,
    We have a 2003 server and it created 5 mini-dumps on 7/21 and 2 more today. I'm not able to boounce this box at will so I'm hoping someone can look at this and point me in a direction. Normally, I see a QLogic driver issue or something that jumps out at me but only MS files this time.
    Thanks for the help...

    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 809413c4, The address that the exception occurred at
    Arg3: ba01b8f8, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

    FAULTING_IP:
    nt!HvpGetCellMapped+97
    809413c4 8b4604 mov eax,dword ptr [esi+4]

    TRAP_FRAME: ba01b8f8 -- (.trap 0xffffffffba01b8f8)
    ErrCode = 00000000
    eax=e1021000 ebx=e101a3d0 ecx=000003b3 edx=89e1e338 esi=00000970 edi=00000000
    eip=809413c4 esp=ba01b96c ebp=ba01b9e0 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
    nt!HvpGetCellMapped+0x97:
    809413c4 8b4604 mov eax,dword ptr [esi+4] ds:0023:00000974=????????
    Resetting default scope

    CUSTOMER_CRASH_COUNT: 2

    DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

    BUGCHECK_STR: 0x8E

    PROCESS_NAME: services.exe

    CURRENT_IRQL: 0

    LAST_CONTROL_TRANSFER: from 8091bfb7 to 809413c4

    STACK_TEXT:
    ba01b9e0 8091bfb7 e101a3d0 76697461 e101a3d0 nt!HvpGetCellMapped+0x97
    ba01b9f4 8091be9e e101a3d0 76697461 d5687eec nt!HvpGetHCell+0x10
    ba01ba14 808d5597 e101a6c4 76697461 00000000 nt!HvMarkCellDirty+0x5a
    ba01ba64 808d541e e101a3d0 00286ee8 d5721784 nt!CmpMarkKeyValuesDirty+0x100
    ba01ba80 808d5205 e101a3d0 00286ee8 d5687eec nt!CmpFreeKeyValues+0x17
    ba01bae8 808d4e52 e101a3d0 0001f2a8 d54602ac nt!CmpSyncKeyValues+0x37
    ba01bb2c 808d5ac2 e240e000 00000400 00000004 nt!CmpCopySyncTree2+0x1fa
    ba01bb5c 808d59aa e101a3d0 000001b8 e101a3d0 nt!CmpCopySyncTree+0x4f
    ba01bccc 808d5795 00010003 ba01bd64 ba01bce8 nt!CmpSaveBootControlSet+0x29e
    ba01bcdc 80834d3f 00000005 ba01bd64 8083c661 nt!NtInitializeRegistry+0x5e
    ba01bcdc 8083c661 00000005 ba01bd64 8083c661 nt!KiFastCallEntry+0xfc
    ba01bd58 80834d3f 00000005 00e6f8b8 7c82ed54 nt!ZwInitializeRegistry+0x11
    ba01bd58 7c82ed54 00000005 00e6f8b8 7c82ed54 nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    00e6f8b8 00000000 00000000 00000000 00000000 0x7c82ed54


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!HvpGetCellMapped+97
    809413c4 8b4604 mov eax,dword ptr [esi+4]

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!HvpGetCellMapped+97

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrnlmp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 45ebe552

    FAILURE_BUCKET_ID: 0x8E_nt!HvpGetCellMapped+97

    BUCKET_ID: 0x8E_nt!HvpGetCellMapped+97

    Followup: MachineOwner
    ---------

    eax=e1021000 ebx=e101a3d0 ecx=000003b3 edx=89e1e338 esi=00000970 edi=00000000
    eip=809413c4 esp=ba01b96c ebp=ba01b9e0 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
    nt!HvpGetCellMapped+0x97:
    809413c4 8b4604 mov eax,dword ptr [esi+4] ds:0023:00000974=????????
    ChildEBP RetAddr Args to Child
    ba01b9e0 8091bfb7 e101a3d0 76697461 e101a3d0 nt!HvpGetCellMapped+0x97 (FPO: [Non-Fpo])
    ba01b9f4 8091be9e e101a3d0 76697461 d5687eec nt!HvpGetHCell+0x10 (FPO: [Non-Fpo])
    ba01ba14 808d5597 e101a6c4 76697461 00000000 nt!HvMarkCellDirty+0x5a (FPO: [Non-Fpo])
    ba01ba64 808d541e e101a3d0 00286ee8 d5721784 nt!CmpMarkKeyValuesDirty+0x100 (FPO: [Non-Fpo])
    ba01ba80 808d5205 e101a3d0 00286ee8 d5687eec nt!CmpFreeKeyValues+0x17 (FPO: [Non-Fpo])
    ba01bae8 808d4e52 e101a3d0 0001f2a8 d54602ac nt!CmpSyncKeyValues+0x37 (FPO: [Non-Fpo])
    ba01bb2c 808d5ac2 e240e000 00000400 00000004 nt!CmpCopySyncTree2+0x1fa (FPO: [Non-Fpo])
    ba01bb5c 808d59aa e101a3d0 000001b8 e101a3d0 nt!CmpCopySyncTree+0x4f (FPO: [Non-Fpo])
    ba01bccc 808d5795 00010003 ba01bd64 ba01bce8 nt!CmpSaveBootControlSet+0x29e (FPO: [Non-Fpo])
    ba01bcdc 80834d3f 00000005 ba01bd64 8083c661 nt!NtInitializeRegistry+0x5e (FPO: [Non-Fpo])
    ba01bcdc 8083c661 00000005 ba01bd64 8083c661 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ba01bce8)
    ba01bd58 80834d3f 00000005 00e6f8b8 7c82ed54 nt!ZwInitializeRegistry+0x11 (FPO: [1,0,0])
    ba01bd58 7c82ed54 00000005 00e6f8b8 7c82ed54 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ba01bd64)
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    00e6f8b8 00000000 00000000 00000000 00000000 0x7c82ed54
     
  2. Lobo67

    Lobo67 TS Rookie Topic Starter

    Part II...

    start end module name
    80800000 80a75000 nt ntkrnlmp.exe Mon Mar 05 04:39:30 2007 (45EBE552)
    80a75000 80aa1000 hal halaacpi.dll Thu Mar 24 20:28:37 2005 (42435B35)
    b8cf1000 b8d1e000 RDPWD RDPWD.SYS Wed Jun 15 11:33:14 2005 (42B04A3A)
    b93ae000 b93b9000 TDTCP TDTCP.SYS Thu Mar 24 20:27:15 2005 (42435AE3)
    b9476000 b9491fc0 naiavf5x naiavf5x.sys Tue Mar 29 15:32:47 2005 (4249AD5F)
    b98f2000 b991c000 Fastfat Fastfat.SYS Thu Mar 24 20:40:20 2005 (42435DF4)
    b9d2c000 b9d98000 srv srv.sys Fri Sep 01 10:32:26 2006 (44F8447A)
    b9e60000 b9eb0000 HTTP HTTP.sys Thu Mar 24 20:40:36 2005 (42435E04)
    ba248000 ba250000 EntDrv52 EntDrv52.sys Mon Aug 08 14:27:11 2005 (42F7A3FF)
    ba400000 ba415000 Cdfs Cdfs.SYS Thu Mar 24 20:40:55 2005 (42435E17)
    ba5bc000 ba5cd000 Fips Fips.SYS Thu Mar 24 20:40:33 2005 (42435E01)
    ba5cd000 ba64d000 mrxsmb mrxsmb.sys Mon May 08 13:18:45 2006 (445F7D75)
    ba675000 ba6ae000 rdbss rdbss.sys Mon May 08 13:18:53 2006 (445F7D7D)
    ba74e000 ba778000 afd afd.sys Thu Mar 24 20:40:43 2005 (42435E0B)
    ba778000 ba7a9000 netbt netbt.sys Thu Mar 24 20:40:31 2005 (42435DFF)
    ba7a9000 ba80a000 tcpip tcpip.sys Tue May 23 21:02:22 2006 (4473B09E)
    ba80a000 ba823000 ipsec ipsec.sys Thu Mar 24 20:40:49 2005 (42435E11)
    ba90b000 ba91f000 usbhub usbhub.sys Thu Mar 24 20:30:46 2005 (42435BB6)
    ba9d0000 ba9da000 Dxapi Dxapi.sys Tue Mar 25 03:06:01 2003 (3E7FFFD9)
    ba9e0000 ba9ea000 dump_scsiport dump_scsiport.sys Thu Mar 24 20:28:56 2005 (42435B48)
    baa00000 baa40000 update update.sys Thu Mar 24 20:40:27 2005 (42435DFB)
    baa40000 baa77000 rdpdr rdpdr.sys Thu Mar 24 20:30:20 2005 (42435B9C)
    baa77000 baa8a000 raspptp raspptp.sys Thu Mar 24 20:40:43 2005 (42435E0B)
    baa8a000 baaa4000 ndiswan ndiswan.sys Thu Mar 24 20:40:46 2005 (42435E0E)
    baaa4000 baab9000 rasl2tp rasl2tp.sys Thu Mar 24 20:40:29 2005 (42435DFD)
    baab9000 baae1000 ks ks.sys Thu Mar 24 20:41:03 2005 (42435E1F)
    baae1000 baaf5000 redbook redbook.sys Thu Mar 24 20:28:46 2005 (42435B3E)
    baaf5000 bab0a000 cdrom cdrom.sys Thu Mar 24 20:28:57 2005 (42435B49)
    bab0a000 bab1f000 serial serial.sys Thu Mar 24 20:28:29 2005 (42435B2D)
    bab1f000 bab32000 i8042prt i8042prt.sys Thu Mar 24 20:41:05 2005 (42435E21)
    bab32000 bab77000 cpqasm2 cpqasm2.sys Fri Dec 16 13:11:57 2005 (43A3036D)
    bab77000 bab92000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 20:29:53 2005 (42435B81)
    bab92000 babe5d80 ati2mpad ati2mpad.sys Thu Jul 18 21:13:20 2002 (3D3767B0)
    babe6000 bac10000 USBPORT USBPORT.SYS Thu Mar 24 20:30:43 2005 (42435BB3)
    bac10000 bac39000 q57xp32 q57xp32.sys Thu Mar 09 20:20:41 2006 (4410D469)
    bae3c000 bae47000 TDI TDI.SYS Thu Mar 24 20:35:34 2005 (42435CD6)
    bae4c000 bae5b000 raspppoe raspppoe.sys Thu Mar 24 20:34:16 2005 (42435C88)
    bae5c000 bae65000 ndistapi ndistapi.sys Thu Mar 24 20:34:11 2005 (42435C83)
    bae6c000 bae77000 fdc fdc.sys Thu Mar 24 20:28:43 2005 (42435B3B)
    bae7c000 bae86000 serenum serenum.sys Thu Mar 24 20:28:27 2005 (42435B2B)
    bae8c000 bae96000 mouclass mouclass.sys Tue Mar 25 03:03:09 2003 (3E7FFF2D)
    bae9c000 baea6000 kbdclass kbdclass.sys Tue Mar 25 03:03:10 2003 (3E7FFF2E)
    baecc000 baed5000 watchdog watchdog.sys Thu Mar 24 20:30:19 2005 (42435B9B)
    baee4000 baeeb000 sysmgmt sysmgmt.sys Fri Dec 16 13:11:56 2005 (43A3036C)
    baefc000 baf03000 dxgthk dxgthk.sys Tue Mar 25 03:05:52 2003 (3E7FFFD0)
    baf24000 baf28080 dump_cpqcissm dump_cpqcissm.sys Fri Aug 19 14:10:55 2005 (430620AF)
    bf800000 bf9d1000 win32k win32k.sys Thu Mar 01 07:33:30 2007 (45E6C81A)
    bf9d1000 bf9e7000 dxg dxg.sys Thu Mar 24 20:27:25 2005 (42435AED)
    bf9e7000 bfa3d680 ati2drad ati2drad.dll Thu Mar 24 22:30:34 2005 (424377CA)
    bff60000 bff7e000 RDPDD RDPDD.dll Thu Mar 24 22:30:48 2005 (424377D8)
    f721b000 f723a000 Mup Mup.sys Wed Jul 06 21:02:10 2005 (42CC7F12)
    f723a000 f7270000 NDIS NDIS.sys Thu Mar 24 20:40:26 2005 (42435DFA)
    f7270000 f7305000 Ntfs Ntfs.sys Thu Mar 24 20:40:29 2005 (42435DFD)
    f7305000 f732c000 KSecDD KSecDD.sys Thu Mar 24 20:28:53 2005 (42435B45)
    f732c000 f7351000 fltmgr fltmgr.sys Mon Aug 21 05:59:45 2006 (44E98411)
    f7351000 f7364000 CLASSPNP CLASSPNP.SYS Thu Mar 24 20:40:23 2005 (42435DF7)
    f7364000 f7383000 SCSIPORT SCSIPORT.SYS Thu Mar 24 20:40:26 2005 (42435DFA)
    f7383000 f739f000 atapi atapi.sys Thu Mar 24 20:28:49 2005 (42435B41)
    f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 20:29:10 2005 (42435B56)
    f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 20:30:02 2005 (42435B8A)
    f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 20:29:00 2005 (42435B4C)
    f741c000 f7432000 pci pci.sys Thu Mar 24 20:34:14 2005 (42435C86)
    f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 20:34:09 2005 (42435C81)
    f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 03:13:00 2003 (3E80017C)
    f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 03:16:35 2003 (3E800253)
    f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 20:28:48 2005 (42435B40)
    f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 20:27:23 2005 (42435AEB)
    f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 20:40:34 2005 (42435E02)
    f74d7000 f74e7000 disk disk.sys Thu Mar 24 20:28:58 2005 (42435B4A)
    f74e7000 f74f2480 vsp vsp.sys Thu May 04 17:16:00 2006 (445A6F10)
    f74f7000 f7503000 Dfs Dfs.sys Thu Mar 24 20:30:28 2005 (42435BA4)
    f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 20:29:40 2005 (42435B74)
    f7557000 f7563000 vga vga.sys Thu Mar 24 20:29:54 2005 (42435B82)
    f7577000 f7585000 msgpc msgpc.sys Thu Mar 24 20:33:31 2005 (42435C5B)
    f7597000 f75a5000 NDProxy NDProxy.SYS Thu Mar 24 20:34:13 2005 (42435C85)
    f75a7000 f75b5460 mvstdi5x mvstdi5x.sys Wed Feb 02 14:16:00 2005 (420126F0)
    f75b7000 f75c2000 ptilink ptilink.sys Thu Mar 24 20:28:25 2005 (42435B29)
    f75d7000 f75e2000 Msfs Msfs.SYS Thu Mar 24 20:30:04 2005 (42435B8C)
    f75f7000 f7606000 termdd termdd.sys Thu Mar 24 20:27:15 2005 (42435AE3)
    f7617000 f7620000 ndisuio ndisuio.sys Thu Mar 24 20:33:16 2005 (42435C4C)
    f7627000 f7634000 Npfs Npfs.SYS Thu Mar 24 20:30:04 2005 (42435B8C)
    f7657000 f7664000 netbios netbios.sys Thu Mar 24 20:33:21 2005 (42435C51)
    f7667000 f7670000 mssmbios mssmbios.sys Thu Mar 24 20:34:14 2005 (42435C86)
    f7677000 f7686000 intelppm intelppm.sys Thu Mar 24 20:28:40 2005 (42435B38)
    f7687000 f7694000 wanarp wanarp.sys Thu Mar 24 20:34:07 2005 (42435C7F)
    f7697000 f76a1000 flpydisk flpydisk.sys Tue Mar 25 03:04:32 2003 (3E7FFF80)
    f76a7000 f76b4d00 CPQCISSE CPQCISSE.sys Fri Jan 13 13:05:49 2006 (43C7EBFD)
    f76b7000 f76c0000 raspti raspti.sys Thu Mar 24 20:34:16 2005 (42435C88)
    f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 03:08:00 2003 (3E800050)
    f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 03:07:58 2003 (3E80004E)
    f7717000 f771e000 pciide pciide.sys Tue Mar 25 03:04:46 2003 (3E7FFF8E)
    f771f000 f7726000 dmload dmload.sys Tue Mar 25 03:08:08 2003 (3E800058)
    f7727000 f772b080 cpqcissm cpqcissm.sys Fri Aug 19 14:10:55 2005 (430620AF)
    f7747000 f774e000 Beep Beep.SYS Tue Mar 25 03:03:04 2003 (3E7FFF28)
    f774f000 f7757000 mnmdd mnmdd.SYS Tue Mar 25 03:07:53 2003 (3E800049)
    f776f000 f7777000 RDPCDD RDPCDD.sys Tue Mar 25 03:03:05 2003 (3E7FFF29)
    f7777000 f777f000 rasacd rasacd.sys Tue Mar 25 03:11:50 2003 (3E800136)
    f77d7000 f77dc180 usbuhci usbuhci.sys Thu Mar 24 20:30:45 2005 (42435BB5)
    f77df000 f77e5a00 usbehci usbehci.sys Thu Mar 24 20:30:43 2005 (42435BB3)
    f77e7000 f77ef000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 03:16:25 2003 (3E800249)
    f77f7000 f77fd600 cpqcidrv cpqcidrv.sys Fri Dec 09 13:13:23 2005 (4399C943)
    f77ff000 f7807000 audstub audstub.sys Tue Mar 25 03:09:12 2003 (3E800098)
    f7817000 f781f000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003 (3E800074)
    f781f000 f7826000 Null Null.SYS Tue Mar 25 03:03:05 2003 (3E7FFF29)
    f79b1000 f79b2280 swenum swenum.sys Thu Mar 24 20:27:42 2005 (42435AFE)
    f79b7000 f79b8580 USBD USBD.SYS Tue Mar 25 03:10:39 2003 (3E8000EF)

    Unloaded modules:
    f7647000 f7655000 imapi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f780f000 f7817000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    0: kd> lmvm nt
    start end module name
    80800000 80a75000 nt # (pdb symbols) c:\symbols\ntkrnlmp.pdb\616447EA59A34518878A53CE9AC9CF6A2\ntkrnlmp.pdb
    Loaded symbol image file: ntkrnlmp.exe
    Mapped memory image file: c:\symbols\ntkrnlmp.exe\45EBE552275000\ntkrnlmp.exe
    Image path: ntkrnlmp.exe
    Image name: ntkrnlmp.exe
    Timestamp: Mon Mar 05 04:39:30 2007 (45EBE552)
    CheckSum: 0025729D
    ImageSize: 00275000
    File version: 5.2.3790.2894
    Product version: 5.2.3790.2894
    File flags: 0 (Mask 3F)
    File OS: 40004 NT Win32
    File type: 1.0 App
    File date: 00000000.00000000
    Translations: 0804.04b0
    CompanyName: Microsoft Corporation
    ProductName: Microsoft(R) Windows(R) Operating System
    InternalName: ntkrnlmp.exe
    OriginalFilename: ntkrnlmp.exe
    ProductVersion: 5.2.3790.2894
    FileVersion: 5.2.3790.2894 (srv03_sp1_gdr.070304-2232)
    FileDescription: NT Kernel & System
    LegalCopyright: (C) Microsoft Corporation. All rights reserved.
     
  3. peterdiva

    peterdiva TechSpot Ambassador Posts: 1,088

    That crash was caused by registry corruption. It can be caused by software or hardware (RAM or HDD). Check the event viewer for event id 1517 for software corruption.
     
  4. cpc2004

    cpc2004 TS Evangelist Posts: 1,994

    Yes, this is software hive corruption. Refer problem 1 and problem 2. This will guide you how to resolve the problem.
     
  5. Lobo67

    Lobo67 TS Rookie Topic Starter

    Thank you very much for taking the time to look at this, I'll follow up and let you all know how it turns out.
     
  6. Lobo67

    Lobo67 TS Rookie Topic Starter

    BTW, what's it mean if there are no 1517 errors?
     
  7. cpc2004

    cpc2004 TS Evangelist Posts: 1,994

Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...