G
Guest
I have a few servers getting BSOD stop errors 0xc5. I have the minidump files
but I am not sure how to determine the issue.. Currently there is alot of arp
traffic on the network that cisco is trying to isolate. I reloaded service
pack 4 and am currently running the driver verifier utility with all options
but yielded no results.
Here is my minidump.. any help would be appreciated.
Opened log file 'c:\debuglog.txt'
Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\working\dumps\gemhw008\Mini020705-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4 procs) Free x86
compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x80484b40
Debug session time: Mon Feb 7 10:18:25.328 2005 (GMT-5)
System Uptime: not available
Loading Kernel Symbols
............................................................................................................
Loading unloaded module list
....
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C5, {0, 2, 1, 8046cce4}
Probably caused by : tcpip.sys ( tcpip!TdiOpenAddress+46 )
Followup: MachineOwner
---------
3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8046cce4, address which referenced memory
Debugging Details:
------------------
BUGCHECK_STR: 0xC5_2
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExAllocatePoolWithTag+4a4
8046cce4 890a mov [edx],ecx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO
LAST_CONTROL_TRANSFER: from 804163c1 to 8046cce4
TRAP_FRAME: bdbe14b8 -- (.trap ffffffffbdbe14b8)
..trap ffffffffbdbe14b8
ErrCode = 00000002
eax=8836e008 ebx=0000000e ecx=00000000 edx=00000000 esi=8836e000 edi=80477f60
eip=8046cce4 esp=bdbe152c ebp=bdbe1550 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExAllocatePoolWithTag+0x4a4:
8046cce4 890a mov [edx],ecx ds:0023:00000000=????????
..trap
Resetting default scope
STACK_TEXT:
bdbe1550 804163c1 00000000 00000000 41504354 nt!ExAllocatePoolWithTag+0x4a4
bdbe156c bf13e910 00000000 000001a0 41504354
nt!ExAllocatePoolWithTagPriority+0x67
bdbe15a8 bf1761d3 bdbe15cc 880af281 00000011 tcpip!TdiOpenAddress+0x46
bdbe15e4 bf139714 88ac0001 880fbea8 880fbf18 tcpip!TCPCreate+0x1bc
bdbe1630 8041de73 88ace670 880fbea8 880fbeb8 tcpip!TCPDispatch+0x12f
bdbe1644 804c207a 80485840 804c167e bdbe1934 nt!IopfCallDriver+0x35
bdbe17c4 80451b42 88ace670 00000000 bdbe1878 nt!IopParseDevice+0x9fc
bdbe1838 804d7f79 00000000 89051a00 00000240 nt!ObpLookupObjectName+0x4f2
bdbe1948 804a254a 00000000 00000000 80451000 nt!ObOpenObjectByName+0xc5
bdbe1a1c beeca36b 880ad8ac 02000000 bdbe1aa8 nt!IoCreateFile+0x3ec
bdbe1bec beec01c0 88070cc8 88070da4 88a14790 afd!AfdBind+0x370
bdbe1c00 8041de73 88a14790 88070cc8 88070cc8 afd!AfdDispatchDeviceControl+0xa1
bdbe1c14 804b1168 88070da4 00000000 88070cc8 nt!IopfCallDriver+0x35
bdbe1c28 804b1fbc 88a14790 88070cc8 8809ca48 nt!IopSynchronousServiceTail+0x60
bdbe1d00 804a9c6c 00003f50 000038fc 00000000 nt!IopXxxControlFile+0x5d6
bdbe1d34 804668a9 00003f50 000038fc 00000000 nt!NtDeviceIoControlFile+0x28
bdbe1d34 77f82ca0 00003f50 000038fc 00000000 nt!KiSystemService+0xc9
WARNING: Frame IP not in any known module. Following frames may be wrong.
1602f884 00000000 00000000 00000000 00000000 0x77f82ca0
FOLLOWUP_IP:
tcpip!TdiOpenAddress+46
bf13e910 8bf0 mov esi,eax
SYMBOL_STACK_INDEX: 2
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: tcpip!TdiOpenAddress+46
MODULE_NAME: tcpip
IMAGE_NAME: tcpip.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 3eaf053b
STACK_COMMAND: .trap ffffffffbdbe14b8 ; kb
FAILURE_BUCKET_ID: 0xC5_2_tcpip!TdiOpenAddress+46
BUCKET_ID: 0xC5_2_tcpip!TdiOpenAddress+46
Followup: MachineOwner
---------
eax=8905313c ebx=0000000a ecx=00000001 edx=40000000 esi=8046cce4 edi=00000000
eip=80469e24 esp=bdbe14a4 ebp=bdbe14b8 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x284:
80469e24 f7457000000200 test dword ptr [ebp+0x70],0x20000
ss:0010:bdbe1528=00010206
ChildEBP RetAddr Args to Child
bdbe14b8 8046cce4 00000001 00000001 804fc152 nt!KiTrap0E+0x284 (FPO: [0,0]
TrapFrame @ bdbe14b8)
bdbe1550 804163c1 00000000 00000000 41504354 nt!ExAllocatePoolWithTag+0x4a4
(FPO: [Non-Fpo])
bdbe156c bf13e910 00000000 000001a0 41504354
nt!ExAllocatePoolWithTagPriority+0x67 (FPO: [Non-Fpo])
bdbe15a8 bf1761d3 bdbe15cc 880af281 00000011 tcpip!TdiOpenAddress+0x46 (FPO:
[Non-Fpo])
bdbe15e4 bf139714 88ac0001 880fbea8 880fbf18 tcpip!TCPCreate+0x1bc (FPO:
[Non-Fpo])
bdbe1630 8041de73 88ace670 880fbea8 880fbeb8 tcpip!TCPDispatch+0x12f (FPO:
[Non-Fpo])
bdbe1644 804c207a 80485840 804c167e bdbe1934 nt!IopfCallDriver+0x35 (FPO:
[0,0,2])
bdbe17c4 80451b42 88ace670 00000000 bdbe1878 nt!IopParseDevice+0x9fc (FPO:
[Non-Fpo])
bdbe1838 804d7f79 00000000 89051a00 00000240 nt!ObpLookupObjectName+0x4f2
(FPO: [Non-Fpo])
bdbe1948 804a254a 00000000 00000000 80451000 nt!ObOpenObjectByName+0xc5
(FPO: [Non-Fpo])
bdbe1a1c beeca36b 880ad8ac 02000000 bdbe1aa8 nt!IoCreateFile+0x3ec (FPO:
[Non-Fpo])
bdbe1bec beec01c0 88070cc8 88070da4 88a14790 afd!AfdBind+0x370 (FPO:
[Non-Fpo])
bdbe1c00 8041de73 88a14790 88070cc8 88070cc8
afd!AfdDispatchDeviceControl+0xa1 (FPO: [2,0,2])
bdbe1c14 804b1168 88070da4 00000000 88070cc8 nt!IopfCallDriver+0x35 (FPO:
[0,0,2])
bdbe1c28 804b1fbc 88a14790 88070cc8 8809ca48
nt!IopSynchronousServiceTail+0x60 (FPO: [Non-Fpo])
bdbe1d00 804a9c6c 00003f50 000038fc 00000000 nt!IopXxxControlFile+0x5d6
(FPO: [Non-Fpo])
bdbe1d34 804668a9 00003f50 000038fc 00000000 nt!NtDeviceIoControlFile+0x28
(FPO: [Non-Fpo])
bdbe1d34 77f82ca0 00003f50 000038fc 00000000 nt!KiSystemService+0xc9 (FPO:
[0,0] TrapFrame @ bdbe1d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
1602f884 00000000 00000000 00000000 00000000 0x77f82ca0
start end module name
80062000 80076460 hal hal.dll Thu Mar 20 21:04:42 2003 (3E7A733A)
80400000 8059f040 nt ntkrnlmp.exe Wed Feb 25 18:55:14 2004 (403D35E2)
a0000000 a01a3f20 win32k win32k.sys Thu Mar 04 20:50:14 2004 (4047DCD6)
a01a4000 a01a6b40 awvid5 awvid5.dll Thu Feb 07 15:41:40 2002 (3C62E684)
a01a7000 a01a7940 AWDDI5 AWDDI5.DLL Fri Feb 15 15:08:50 2002 (3C6D6AD2)
a01a8000 a01ff000 ati2drad ati2drad.DLL Tue Aug 19 21:20:59 2003 (3F42CCFB)
be4ca000 be4da960 NAVENG NAVENG.sys Thu Dec 30 16:46:10 2004 (41D47722)
be4db000 be573a60 NAVEX15 NAVEX15.sys Thu Dec 30 16:45:19 2004 (41D476EF)
be574000 be589f00 RDPWD RDPWD.SYS Wed Jan 21 14:50:25 2004 (400ED801)
be58a000 be5c7000 NAVAP NAVAP.sys Wed Jun 19 20:57:11 2002 (3D112867)
be5c7000 be5d7780 SYMEVENT SYMEVENT.SYS Tue Jul 16 00:04:17 2002 (3D339B41)
be730000 be73fa20 ipsec ipsec.sys Tue Apr 29 19:04:59 2003 (3EAF051B)
bea88000 beaaa3c0 Fastfat Fastfat.SYS Wed Jan 15 14:48:39 2003 (3E25BB17)
beb73000 beb84000 NAVAPEL NAVAPEL.SYS Wed Jun 19 20:57:14 2002 (3D11286A)
bebac000 bebe7bc0 srv srv.sys Tue Apr 29 19:05:07 2003 (3EAF0523)
beeb8000 beed54a0 afd afd.sys Wed Apr 30 04:45:29 2003 (3EAF8D29)
bef02000 bef05100 cqcpu cqcpu.sys Wed Sep 30 08:36:03 1998 (361225B3)
bf03e000 bf0a4240 mrxsmb mrxsmb.sys Thu May 22 18:46:57 2003 (3ECD5361)
bf0df000 bf1099c0 rdbss rdbss.sys Thu May 22 18:47:05 2003 (3ECD5369)
bf10a000 bf1331a0 netbt netbt.sys Wed May 21 21:51:10 2003 (3ECC2D0E)
bf134000 bf185060 tcpip tcpip.sys Tue Apr 29 19:05:31 2003 (3EAF053B)
bf1bc000 bf1bfe20 dump_cpqcissm dump_cpqcissm.sys Mon Feb 02 15:01:16 2004
(401EAC8C)
bf1c4000 bf1c76c0 dump_scsiport dump_scsiport.sys Tue Feb 25 14:18:04 2003
(3E5BC16C)
bf1f8000 bf206fe0 Cdfs Cdfs.SYS Tue Apr 15 23:58:53 2003 (3E9CD4FD)
bf238000 bf240a60 termdd termdd.sys Fri Mar 21 16:43:08 2003 (3E7B876C)
bf268000 bf270240 Fips Fips.SYS Tue May 09 11:28:29 2000 (39182E9D)
bf2a8000 bf2ac8c0 TDTCP TDTCP.SYS Fri Mar 21 16:43:08 2003 (3E7B876C)
bfb92000 bfbbc3a0 update update.sys Wed Apr 16 00:22:01 2003 (3E9CDA69)
bfbbd000 bfbd8b40 ks ks.sys Wed Apr 16 00:02:11 2003 (3E9CD5C3)
bfbeb000 bfc0e060 rdpdr rdpdr.sys Fri Mar 21 16:43:14 2003 (3E7B8772)
bfc2b000 bfc2ef40 ckldrv ckldrv.sys Tue Jul 29 02:18:25 2003 (3F2611B1)
bfc37000 bfc4dba0 ndiswan ndiswan.sys Tue Apr 29 19:05:01 2003 (3EAF051D)
bfc4e000 bfc692a0 q57w2k q57w2k.sys Mon Feb 02 21:17:35 2004 (401F04BF)
bfc6a000 bfc88000 n1000nt5 n1000nt5.sys Mon Oct 13 16:26:06 2003 (3F8B0A5E)
bfc88000 bfcce000 cpqasm2 cpqasm2.sys Tue May 18 13:41:30 2004 (40AA4ACA)
bfcce000 bfd23600 ati2mpad ati2mpad.sys Tue Aug 19 21:20:11 2003 (3F42CCCB)
bfdbc000 bfdbfe60 TDI TDI.SYS Wed Jan 15 14:56:26 2003 (3E25BCEA)
bfdc8000 bfdca2e0 ndistapi ndistapi.sys Wed Jan 15 14:54:15 2003 (3E25BC67)
bfdd4000 bfdd6740 awlegacy awlegacy.sys Mon Sep 11 18:19:37 2000 (39BD5A79)
bfdd8000 bfddb640 serenum serenum.sys Wed Jan 15 14:47:01 2003 (3E25BAB5)
bfde0000 bfde3580 vga vga.sys Sat Sep 25 14:37:40 1999 (37ED1674)
bfe4c000 bfe61640 Mup Mup.sys Wed Jan 15 14:54:01 2003 (3E25BC59)
bfe62000 bfe8baa0 NDIS NDIS.sys Tue Apr 29 19:05:01 2003 (3EAF051D)
bfe8c000 bff0e5a0 Ntfs Ntfs.sys Fri May 09 15:46:45 2003 (3EBC05A5)
bff0f000 bff207c0 KSecDD KSecDD.sys Sat Sep 20 20:32:19 2003 (3F6CF193)
bff21000 bff34a00 OfmLvDrv OfmLvDrv.sys Mon Jun 23 18:19:29 2003 (3EF77CF1)
bff35000 bff471c0 Dfs Dfs.sys Tue Feb 11 21:19:06 2003 (3E49AF1A)
bff48000 bff5a0c0 SCSIPORT SCSIPORT.SYS Fri May 16 21:11:02 2003 (3EC58C26)
bff5b000 bff82140 LsiCsb6 LsiCsb6.sys Thu Jul 31 16:38:06 2003 (3F297E2E)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 13:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 14:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Mon Mar 31 17:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 14:44:22 2003 (3E25BA16)
f6400000 f640e6a0 pci pci.sys Wed Jan 15 14:44:07 2003 (3E25BA07)
f6410000 f641b680 isapnp isapnp.sys Wed Jan 15 14:43:47 2003 (3E25B9F3)
f6420000 f642faa0 adpu160m adpu160m.sys Wed Jan 15 14:42:27 2003 (3E25B9A3)
f6430000 f643a4c0 symmpi symmpi.sys Wed May 26 12:26:28 2004 (40B4C534)
f6440000 f6448700 CLASSPNP CLASSPNP.SYS Wed Jan 15 14:42:51 2003 (3E25B9BB)
f6450000 f645c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 14:47:20 2003 (3E25BAC8)
f6460000 f646d580 CPQCISSE CPQCISSE.sys Thu Mar 11 16:50:26 2004 (4050DF22)
f6510000 f651b680 i8042prt i8042prt.sys Wed Apr 16 00:00:59 2003 (3E9CD57B)
f6520000 f652f400 serial serial.sys Wed Apr 16 00:19:39 2003 (3E9CD9DB)
f6530000 f653ca80 rasl2tp rasl2tp.sys Tue Apr 29 19:05:06 2003 (3EAF0522)
f6540000 f654bc40 raspptp raspptp.sys Wed May 14 19:47:00 2003 (3EC2D574)
f6560000 f6569be0 usbhub usbhub.sys Tue Mar 18 18:30:41 2003 (3E77AC21)
f6590000 f6599ce0 NDProxy NDProxy.SYS Thu Sep 30 19:25:35 1999 (37F3F16F)
f65a0000 f65a8fa0 Npfs Npfs.SYS Sat Oct 09 19:58:07 1999 (37FFD68F)
f65b0000 f65b8680 msgpc msgpc.sys Wed Jan 15 14:54:25 2003 (3E25BC71)
f65c0000 f65c81a0 netbios netbios.sys Tue Oct 12 15:34:19 1999 (38038D3B)
f6680000 f6685520 PCIIDEX PCIIDEX.SYS Tue Feb 25 13:31:08 2003 (3E5BB66C)
f6688000 f668f4c0 MountMgr MountMgr.sys Tue Feb 10 14:47:53 2004 (40293569)
f6690000 f6696320 symc8xx symc8xx.sys Fri Mar 30 12:01:54 2001 (3AC4BC02)
f6698000 f669d180 sym_hi sym_hi.sys Sat Sep 25 15:11:49 1999 (37ED1E75)
f66a0000 f66a7720 disk disk.sys Wed Jan 15 14:43:05 2003 (3E25B9C9)
f66a8000 f66aca60 flpydisk flpydisk.sys Wed Jan 15 14:42:52 2003 (3E25B9BC)
f66b0000 f66b7b60 aw_host5 aw_host5.sys Mon Feb 11 14:06:39 2002 (3C68163F)
f66c0000 f66c6a20 EFS EFS.SYS Wed Jan 15 14:46:55 2003 (3E25BAAF)
f66e0000 f66e4a20 CpqCiDrv CpqCiDrv.sys Fri Jul 11 11:32:03 2003 (3F0ED873)
f66e8000 f66ed240 Msfs Msfs.SYS Tue Oct 26 19:21:32 1999 (3816377C)
f66f0000 f66f5ec0 kbdclass kbdclass.sys Thu Feb 20 11:37:30 2003 (3E55044A)
f6700000 f6705400 mouclass mouclass.sys Thu Feb 20 11:37:45 2003 (3E550459)
f6710000 f6717d00 wanarp wanarp.sys Fri Aug 16 08:25:01 2002 (3D5CEF1D)
f6718000 f671e580 fdc fdc.sys Wed Jan 15 14:42:51 2003 (3E25B9BB)
f6728000 f672ec40 cdrom cdrom.sys Wed Jan 15 14:43:04 2003 (3E25B9C8)
f6738000 f673dfc0 openhci openhci.sys Fri Feb 28 19:28:59 2003 (3E5FFECB)
f6750000 f6754fc0 USBD USBD.SYS Wed Jan 22 12:05:33 2003 (3E2ECF5D)
f6758000 f675c920 cpqdfw cpqdfw.sys Mon Aug 19 15:35:43 2002 (3D61488F)
f6778000 f677c400 ptilink ptilink.sys Wed Jan 15 14:47:15 2003 (3E25BAC3)
f6788000 f678c0e0 raspti raspti.sys Fri Oct 08 16:45:10 1999 (37FE57D6)
f6810000 f6812a20 BOOTVID BOOTVID.dll Wed Nov 03 20:24:33 1999 (3820E051)
f6814000 f6816d00 PartMgr PartMgr.sys Wed Jan 15 14:43:07 2003 (3E25B9CB)
f6818000 f681bfe0 symc810 symc810.sys Sat Sep 25 15:11:49 1999 (37ED1E75)
f681c000 f681fe20 cpqcissm cpqcissm.sys Mon Feb 02 15:01:16 2004 (401EAC8C)
f6820000 f6823360 cpqarry2 cpqarry2.sys Fri Oct 01 19:47:57 1999 (37F5482D)
f6824000 f6827780 Gernuwa Gernuwa.sys Tue Oct 09 16:14:34 2001 (3BC35AAA)
f6900000 f6901d20 Diskperf Diskperf.sys Wed Feb 12 16:34:38 2003 (3E4ABDEE)
f6902000 f6903b80 dmload dmload.sys Wed Jan 15 14:47:06 2003 (3E25BABA)
f6910000 f6911ca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 14:53:30 2003 (3E25BC3A)
f6918000 f6919e40 rasacd rasacd.sys Sat Sep 25 14:41:23 1999 (37ED1753)
f6920000 f6921fa0 cq_mem cq_mem.sys Wed May 19 09:00:49 1999 (3742B601)
f69c8000 f69c8f80 WMILIB WMILIB.SYS Sat Sep 25 14:36:47 1999 (37ED163F)
f69c9000 f69c9b00 pciide pciide.sys Wed Jan 15 14:43:03 2003 (3E25B9C7)
f69de000 f69deb80 sysmgmt sysmgmt.sys Tue May 18 13:41:32 2004 (40AA4ACC)
f69fe000 f69fea40 audstub audstub.sys Sat Sep 25 14:35:33 1999 (37ED15F5)
f6a08000 f6a08d80 swenum swenum.sys Sat Sep 25 14:36:31 1999 (37ED162F)
f6a24000 f6a249e0 Null Null.SYS Sat Sep 25 14:34:58 1999 (37ED15D2)
f6a26000 f6a26ee0 Beep Beep.SYS Wed Oct 20 18:18:59 1999 (380E3FD3)
f6a2a000 f6a2af80 mnmdd mnmdd.SYS Sat Sep 25 14:37:40 1999 (37ED1674)
Unloaded modules:
f65d0000 f65d9000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66d0000 f66d5000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfd24000 bfd27000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt
but I am not sure how to determine the issue.. Currently there is alot of arp
traffic on the network that cisco is trying to isolate. I reloaded service
pack 4 and am currently running the driver verifier utility with all options
but yielded no results.
Here is my minidump.. any help would be appreciated.
Opened log file 'c:\debuglog.txt'
Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\working\dumps\gemhw008\Mini020705-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4 procs) Free x86
compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x80484b40
Debug session time: Mon Feb 7 10:18:25.328 2005 (GMT-5)
System Uptime: not available
Loading Kernel Symbols
............................................................................................................
Loading unloaded module list
....
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C5, {0, 2, 1, 8046cce4}
Probably caused by : tcpip.sys ( tcpip!TdiOpenAddress+46 )
Followup: MachineOwner
---------
3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8046cce4, address which referenced memory
Debugging Details:
------------------
BUGCHECK_STR: 0xC5_2
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExAllocatePoolWithTag+4a4
8046cce4 890a mov [edx],ecx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO
LAST_CONTROL_TRANSFER: from 804163c1 to 8046cce4
TRAP_FRAME: bdbe14b8 -- (.trap ffffffffbdbe14b8)
..trap ffffffffbdbe14b8
ErrCode = 00000002
eax=8836e008 ebx=0000000e ecx=00000000 edx=00000000 esi=8836e000 edi=80477f60
eip=8046cce4 esp=bdbe152c ebp=bdbe1550 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExAllocatePoolWithTag+0x4a4:
8046cce4 890a mov [edx],ecx ds:0023:00000000=????????
..trap
Resetting default scope
STACK_TEXT:
bdbe1550 804163c1 00000000 00000000 41504354 nt!ExAllocatePoolWithTag+0x4a4
bdbe156c bf13e910 00000000 000001a0 41504354
nt!ExAllocatePoolWithTagPriority+0x67
bdbe15a8 bf1761d3 bdbe15cc 880af281 00000011 tcpip!TdiOpenAddress+0x46
bdbe15e4 bf139714 88ac0001 880fbea8 880fbf18 tcpip!TCPCreate+0x1bc
bdbe1630 8041de73 88ace670 880fbea8 880fbeb8 tcpip!TCPDispatch+0x12f
bdbe1644 804c207a 80485840 804c167e bdbe1934 nt!IopfCallDriver+0x35
bdbe17c4 80451b42 88ace670 00000000 bdbe1878 nt!IopParseDevice+0x9fc
bdbe1838 804d7f79 00000000 89051a00 00000240 nt!ObpLookupObjectName+0x4f2
bdbe1948 804a254a 00000000 00000000 80451000 nt!ObOpenObjectByName+0xc5
bdbe1a1c beeca36b 880ad8ac 02000000 bdbe1aa8 nt!IoCreateFile+0x3ec
bdbe1bec beec01c0 88070cc8 88070da4 88a14790 afd!AfdBind+0x370
bdbe1c00 8041de73 88a14790 88070cc8 88070cc8 afd!AfdDispatchDeviceControl+0xa1
bdbe1c14 804b1168 88070da4 00000000 88070cc8 nt!IopfCallDriver+0x35
bdbe1c28 804b1fbc 88a14790 88070cc8 8809ca48 nt!IopSynchronousServiceTail+0x60
bdbe1d00 804a9c6c 00003f50 000038fc 00000000 nt!IopXxxControlFile+0x5d6
bdbe1d34 804668a9 00003f50 000038fc 00000000 nt!NtDeviceIoControlFile+0x28
bdbe1d34 77f82ca0 00003f50 000038fc 00000000 nt!KiSystemService+0xc9
WARNING: Frame IP not in any known module. Following frames may be wrong.
1602f884 00000000 00000000 00000000 00000000 0x77f82ca0
FOLLOWUP_IP:
tcpip!TdiOpenAddress+46
bf13e910 8bf0 mov esi,eax
SYMBOL_STACK_INDEX: 2
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: tcpip!TdiOpenAddress+46
MODULE_NAME: tcpip
IMAGE_NAME: tcpip.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 3eaf053b
STACK_COMMAND: .trap ffffffffbdbe14b8 ; kb
FAILURE_BUCKET_ID: 0xC5_2_tcpip!TdiOpenAddress+46
BUCKET_ID: 0xC5_2_tcpip!TdiOpenAddress+46
Followup: MachineOwner
---------
eax=8905313c ebx=0000000a ecx=00000001 edx=40000000 esi=8046cce4 edi=00000000
eip=80469e24 esp=bdbe14a4 ebp=bdbe14b8 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x284:
80469e24 f7457000000200 test dword ptr [ebp+0x70],0x20000
ss:0010:bdbe1528=00010206
ChildEBP RetAddr Args to Child
bdbe14b8 8046cce4 00000001 00000001 804fc152 nt!KiTrap0E+0x284 (FPO: [0,0]
TrapFrame @ bdbe14b8)
bdbe1550 804163c1 00000000 00000000 41504354 nt!ExAllocatePoolWithTag+0x4a4
(FPO: [Non-Fpo])
bdbe156c bf13e910 00000000 000001a0 41504354
nt!ExAllocatePoolWithTagPriority+0x67 (FPO: [Non-Fpo])
bdbe15a8 bf1761d3 bdbe15cc 880af281 00000011 tcpip!TdiOpenAddress+0x46 (FPO:
[Non-Fpo])
bdbe15e4 bf139714 88ac0001 880fbea8 880fbf18 tcpip!TCPCreate+0x1bc (FPO:
[Non-Fpo])
bdbe1630 8041de73 88ace670 880fbea8 880fbeb8 tcpip!TCPDispatch+0x12f (FPO:
[Non-Fpo])
bdbe1644 804c207a 80485840 804c167e bdbe1934 nt!IopfCallDriver+0x35 (FPO:
[0,0,2])
bdbe17c4 80451b42 88ace670 00000000 bdbe1878 nt!IopParseDevice+0x9fc (FPO:
[Non-Fpo])
bdbe1838 804d7f79 00000000 89051a00 00000240 nt!ObpLookupObjectName+0x4f2
(FPO: [Non-Fpo])
bdbe1948 804a254a 00000000 00000000 80451000 nt!ObOpenObjectByName+0xc5
(FPO: [Non-Fpo])
bdbe1a1c beeca36b 880ad8ac 02000000 bdbe1aa8 nt!IoCreateFile+0x3ec (FPO:
[Non-Fpo])
bdbe1bec beec01c0 88070cc8 88070da4 88a14790 afd!AfdBind+0x370 (FPO:
[Non-Fpo])
bdbe1c00 8041de73 88a14790 88070cc8 88070cc8
afd!AfdDispatchDeviceControl+0xa1 (FPO: [2,0,2])
bdbe1c14 804b1168 88070da4 00000000 88070cc8 nt!IopfCallDriver+0x35 (FPO:
[0,0,2])
bdbe1c28 804b1fbc 88a14790 88070cc8 8809ca48
nt!IopSynchronousServiceTail+0x60 (FPO: [Non-Fpo])
bdbe1d00 804a9c6c 00003f50 000038fc 00000000 nt!IopXxxControlFile+0x5d6
(FPO: [Non-Fpo])
bdbe1d34 804668a9 00003f50 000038fc 00000000 nt!NtDeviceIoControlFile+0x28
(FPO: [Non-Fpo])
bdbe1d34 77f82ca0 00003f50 000038fc 00000000 nt!KiSystemService+0xc9 (FPO:
[0,0] TrapFrame @ bdbe1d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
1602f884 00000000 00000000 00000000 00000000 0x77f82ca0
start end module name
80062000 80076460 hal hal.dll Thu Mar 20 21:04:42 2003 (3E7A733A)
80400000 8059f040 nt ntkrnlmp.exe Wed Feb 25 18:55:14 2004 (403D35E2)
a0000000 a01a3f20 win32k win32k.sys Thu Mar 04 20:50:14 2004 (4047DCD6)
a01a4000 a01a6b40 awvid5 awvid5.dll Thu Feb 07 15:41:40 2002 (3C62E684)
a01a7000 a01a7940 AWDDI5 AWDDI5.DLL Fri Feb 15 15:08:50 2002 (3C6D6AD2)
a01a8000 a01ff000 ati2drad ati2drad.DLL Tue Aug 19 21:20:59 2003 (3F42CCFB)
be4ca000 be4da960 NAVENG NAVENG.sys Thu Dec 30 16:46:10 2004 (41D47722)
be4db000 be573a60 NAVEX15 NAVEX15.sys Thu Dec 30 16:45:19 2004 (41D476EF)
be574000 be589f00 RDPWD RDPWD.SYS Wed Jan 21 14:50:25 2004 (400ED801)
be58a000 be5c7000 NAVAP NAVAP.sys Wed Jun 19 20:57:11 2002 (3D112867)
be5c7000 be5d7780 SYMEVENT SYMEVENT.SYS Tue Jul 16 00:04:17 2002 (3D339B41)
be730000 be73fa20 ipsec ipsec.sys Tue Apr 29 19:04:59 2003 (3EAF051B)
bea88000 beaaa3c0 Fastfat Fastfat.SYS Wed Jan 15 14:48:39 2003 (3E25BB17)
beb73000 beb84000 NAVAPEL NAVAPEL.SYS Wed Jun 19 20:57:14 2002 (3D11286A)
bebac000 bebe7bc0 srv srv.sys Tue Apr 29 19:05:07 2003 (3EAF0523)
beeb8000 beed54a0 afd afd.sys Wed Apr 30 04:45:29 2003 (3EAF8D29)
bef02000 bef05100 cqcpu cqcpu.sys Wed Sep 30 08:36:03 1998 (361225B3)
bf03e000 bf0a4240 mrxsmb mrxsmb.sys Thu May 22 18:46:57 2003 (3ECD5361)
bf0df000 bf1099c0 rdbss rdbss.sys Thu May 22 18:47:05 2003 (3ECD5369)
bf10a000 bf1331a0 netbt netbt.sys Wed May 21 21:51:10 2003 (3ECC2D0E)
bf134000 bf185060 tcpip tcpip.sys Tue Apr 29 19:05:31 2003 (3EAF053B)
bf1bc000 bf1bfe20 dump_cpqcissm dump_cpqcissm.sys Mon Feb 02 15:01:16 2004
(401EAC8C)
bf1c4000 bf1c76c0 dump_scsiport dump_scsiport.sys Tue Feb 25 14:18:04 2003
(3E5BC16C)
bf1f8000 bf206fe0 Cdfs Cdfs.SYS Tue Apr 15 23:58:53 2003 (3E9CD4FD)
bf238000 bf240a60 termdd termdd.sys Fri Mar 21 16:43:08 2003 (3E7B876C)
bf268000 bf270240 Fips Fips.SYS Tue May 09 11:28:29 2000 (39182E9D)
bf2a8000 bf2ac8c0 TDTCP TDTCP.SYS Fri Mar 21 16:43:08 2003 (3E7B876C)
bfb92000 bfbbc3a0 update update.sys Wed Apr 16 00:22:01 2003 (3E9CDA69)
bfbbd000 bfbd8b40 ks ks.sys Wed Apr 16 00:02:11 2003 (3E9CD5C3)
bfbeb000 bfc0e060 rdpdr rdpdr.sys Fri Mar 21 16:43:14 2003 (3E7B8772)
bfc2b000 bfc2ef40 ckldrv ckldrv.sys Tue Jul 29 02:18:25 2003 (3F2611B1)
bfc37000 bfc4dba0 ndiswan ndiswan.sys Tue Apr 29 19:05:01 2003 (3EAF051D)
bfc4e000 bfc692a0 q57w2k q57w2k.sys Mon Feb 02 21:17:35 2004 (401F04BF)
bfc6a000 bfc88000 n1000nt5 n1000nt5.sys Mon Oct 13 16:26:06 2003 (3F8B0A5E)
bfc88000 bfcce000 cpqasm2 cpqasm2.sys Tue May 18 13:41:30 2004 (40AA4ACA)
bfcce000 bfd23600 ati2mpad ati2mpad.sys Tue Aug 19 21:20:11 2003 (3F42CCCB)
bfdbc000 bfdbfe60 TDI TDI.SYS Wed Jan 15 14:56:26 2003 (3E25BCEA)
bfdc8000 bfdca2e0 ndistapi ndistapi.sys Wed Jan 15 14:54:15 2003 (3E25BC67)
bfdd4000 bfdd6740 awlegacy awlegacy.sys Mon Sep 11 18:19:37 2000 (39BD5A79)
bfdd8000 bfddb640 serenum serenum.sys Wed Jan 15 14:47:01 2003 (3E25BAB5)
bfde0000 bfde3580 vga vga.sys Sat Sep 25 14:37:40 1999 (37ED1674)
bfe4c000 bfe61640 Mup Mup.sys Wed Jan 15 14:54:01 2003 (3E25BC59)
bfe62000 bfe8baa0 NDIS NDIS.sys Tue Apr 29 19:05:01 2003 (3EAF051D)
bfe8c000 bff0e5a0 Ntfs Ntfs.sys Fri May 09 15:46:45 2003 (3EBC05A5)
bff0f000 bff207c0 KSecDD KSecDD.sys Sat Sep 20 20:32:19 2003 (3F6CF193)
bff21000 bff34a00 OfmLvDrv OfmLvDrv.sys Mon Jun 23 18:19:29 2003 (3EF77CF1)
bff35000 bff471c0 Dfs Dfs.sys Tue Feb 11 21:19:06 2003 (3E49AF1A)
bff48000 bff5a0c0 SCSIPORT SCSIPORT.SYS Fri May 16 21:11:02 2003 (3EC58C26)
bff5b000 bff82140 LsiCsb6 LsiCsb6.sys Thu Jul 31 16:38:06 2003 (3F297E2E)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 13:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 14:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Mon Mar 31 17:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 14:44:22 2003 (3E25BA16)
f6400000 f640e6a0 pci pci.sys Wed Jan 15 14:44:07 2003 (3E25BA07)
f6410000 f641b680 isapnp isapnp.sys Wed Jan 15 14:43:47 2003 (3E25B9F3)
f6420000 f642faa0 adpu160m adpu160m.sys Wed Jan 15 14:42:27 2003 (3E25B9A3)
f6430000 f643a4c0 symmpi symmpi.sys Wed May 26 12:26:28 2004 (40B4C534)
f6440000 f6448700 CLASSPNP CLASSPNP.SYS Wed Jan 15 14:42:51 2003 (3E25B9BB)
f6450000 f645c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 14:47:20 2003 (3E25BAC8)
f6460000 f646d580 CPQCISSE CPQCISSE.sys Thu Mar 11 16:50:26 2004 (4050DF22)
f6510000 f651b680 i8042prt i8042prt.sys Wed Apr 16 00:00:59 2003 (3E9CD57B)
f6520000 f652f400 serial serial.sys Wed Apr 16 00:19:39 2003 (3E9CD9DB)
f6530000 f653ca80 rasl2tp rasl2tp.sys Tue Apr 29 19:05:06 2003 (3EAF0522)
f6540000 f654bc40 raspptp raspptp.sys Wed May 14 19:47:00 2003 (3EC2D574)
f6560000 f6569be0 usbhub usbhub.sys Tue Mar 18 18:30:41 2003 (3E77AC21)
f6590000 f6599ce0 NDProxy NDProxy.SYS Thu Sep 30 19:25:35 1999 (37F3F16F)
f65a0000 f65a8fa0 Npfs Npfs.SYS Sat Oct 09 19:58:07 1999 (37FFD68F)
f65b0000 f65b8680 msgpc msgpc.sys Wed Jan 15 14:54:25 2003 (3E25BC71)
f65c0000 f65c81a0 netbios netbios.sys Tue Oct 12 15:34:19 1999 (38038D3B)
f6680000 f6685520 PCIIDEX PCIIDEX.SYS Tue Feb 25 13:31:08 2003 (3E5BB66C)
f6688000 f668f4c0 MountMgr MountMgr.sys Tue Feb 10 14:47:53 2004 (40293569)
f6690000 f6696320 symc8xx symc8xx.sys Fri Mar 30 12:01:54 2001 (3AC4BC02)
f6698000 f669d180 sym_hi sym_hi.sys Sat Sep 25 15:11:49 1999 (37ED1E75)
f66a0000 f66a7720 disk disk.sys Wed Jan 15 14:43:05 2003 (3E25B9C9)
f66a8000 f66aca60 flpydisk flpydisk.sys Wed Jan 15 14:42:52 2003 (3E25B9BC)
f66b0000 f66b7b60 aw_host5 aw_host5.sys Mon Feb 11 14:06:39 2002 (3C68163F)
f66c0000 f66c6a20 EFS EFS.SYS Wed Jan 15 14:46:55 2003 (3E25BAAF)
f66e0000 f66e4a20 CpqCiDrv CpqCiDrv.sys Fri Jul 11 11:32:03 2003 (3F0ED873)
f66e8000 f66ed240 Msfs Msfs.SYS Tue Oct 26 19:21:32 1999 (3816377C)
f66f0000 f66f5ec0 kbdclass kbdclass.sys Thu Feb 20 11:37:30 2003 (3E55044A)
f6700000 f6705400 mouclass mouclass.sys Thu Feb 20 11:37:45 2003 (3E550459)
f6710000 f6717d00 wanarp wanarp.sys Fri Aug 16 08:25:01 2002 (3D5CEF1D)
f6718000 f671e580 fdc fdc.sys Wed Jan 15 14:42:51 2003 (3E25B9BB)
f6728000 f672ec40 cdrom cdrom.sys Wed Jan 15 14:43:04 2003 (3E25B9C8)
f6738000 f673dfc0 openhci openhci.sys Fri Feb 28 19:28:59 2003 (3E5FFECB)
f6750000 f6754fc0 USBD USBD.SYS Wed Jan 22 12:05:33 2003 (3E2ECF5D)
f6758000 f675c920 cpqdfw cpqdfw.sys Mon Aug 19 15:35:43 2002 (3D61488F)
f6778000 f677c400 ptilink ptilink.sys Wed Jan 15 14:47:15 2003 (3E25BAC3)
f6788000 f678c0e0 raspti raspti.sys Fri Oct 08 16:45:10 1999 (37FE57D6)
f6810000 f6812a20 BOOTVID BOOTVID.dll Wed Nov 03 20:24:33 1999 (3820E051)
f6814000 f6816d00 PartMgr PartMgr.sys Wed Jan 15 14:43:07 2003 (3E25B9CB)
f6818000 f681bfe0 symc810 symc810.sys Sat Sep 25 15:11:49 1999 (37ED1E75)
f681c000 f681fe20 cpqcissm cpqcissm.sys Mon Feb 02 15:01:16 2004 (401EAC8C)
f6820000 f6823360 cpqarry2 cpqarry2.sys Fri Oct 01 19:47:57 1999 (37F5482D)
f6824000 f6827780 Gernuwa Gernuwa.sys Tue Oct 09 16:14:34 2001 (3BC35AAA)
f6900000 f6901d20 Diskperf Diskperf.sys Wed Feb 12 16:34:38 2003 (3E4ABDEE)
f6902000 f6903b80 dmload dmload.sys Wed Jan 15 14:47:06 2003 (3E25BABA)
f6910000 f6911ca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 14:53:30 2003 (3E25BC3A)
f6918000 f6919e40 rasacd rasacd.sys Sat Sep 25 14:41:23 1999 (37ED1753)
f6920000 f6921fa0 cq_mem cq_mem.sys Wed May 19 09:00:49 1999 (3742B601)
f69c8000 f69c8f80 WMILIB WMILIB.SYS Sat Sep 25 14:36:47 1999 (37ED163F)
f69c9000 f69c9b00 pciide pciide.sys Wed Jan 15 14:43:03 2003 (3E25B9C7)
f69de000 f69deb80 sysmgmt sysmgmt.sys Tue May 18 13:41:32 2004 (40AA4ACC)
f69fe000 f69fea40 audstub audstub.sys Sat Sep 25 14:35:33 1999 (37ED15F5)
f6a08000 f6a08d80 swenum swenum.sys Sat Sep 25 14:36:31 1999 (37ED162F)
f6a24000 f6a249e0 Null Null.SYS Sat Sep 25 14:34:58 1999 (37ED15D2)
f6a26000 f6a26ee0 Beep Beep.SYS Wed Oct 20 18:18:59 1999 (380E3FD3)
f6a2a000 f6a2af80 mnmdd mnmdd.SYS Sat Sep 25 14:37:40 1999 (37ED1674)
Unloaded modules:
f65d0000 f65d9000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66d0000 f66d5000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfd24000 bfd27000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt