locked
error code 0x4e RRS feed

  • 一般討論

  • OS:  WSS2008R2 SP1.

    最近在 event log 看到錯誤, 將 memory.dmp 分析如下.

    請問一下是那部份出問題 ?

    Opened log file 'e:\debuglog.txt'
    3: kd> .reload
    Loading Kernel Symbols
    ...............................................................
    .......................................
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 000007ff`fffd7018).  Type ".hh dbgerr001" for details
    Loading unloaded module list
    ....
    3: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    PFN_LIST_CORRUPT (4e)
    Typically caused by drivers passing bad memory descriptor lists (ie: calling
    MmUnlockPages twice with the same list, etc).  If a kernel debugger is
    available get the stack trace.
    Arguments:
    Arg1: 0000000000000002, A list entry was corrupt
    Arg2: 0000000000137f82, entry in list being removed
    Arg3: 000000000013ffff, highest physical page number
    Arg4: 0000000000000001, reference count of entry being removed

    Debugging Details:
    ------------------


    BUGCHECK_STR:  0x4E_2

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    PROCESS_NAME:  smss.exe

    CURRENT_IRQL:  2

    LAST_CONTROL_TRANSFER:  from fffff80001662d38 to fffff800016ce640

    STACK_TEXT:  
    fffff880`02bb1538 fffff800`01662d38 : 00000000`0000004e 00000000`00000002 00000000`00137f82 00000000`0013ffff : nt!KeBugCheckEx
    fffff880`02bb1540 fffff800`017121eb : 00000000`00000000 00000000`00000000 00000000`00000000 fffff8a0`0015dd48 : nt! ?? ::FNODOBFM::`string'+0x11718
    fffff880`02bb15d0 fffff800`01710d38 : fffff8a0`0015d010 fffff8a0`0015dd48 fffffa80`041e2960 fffffa80`041e2960 : nt!MiFlushSectionInternal+0x6bb
    fffff880`02bb1800 fffff800`016b2274 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmFlushSection+0x1f4
    fffff880`02bb18c0 fffff800`019caeca : 00000000`00000000 00000000`00000006 00000000`00000080 00000000`01000000 : nt!MiFlushDataSection+0x190
    fffff880`02bb1930 fffff800`019a9b22 : fffff880`02bb1b80 fffff880`02bb1ca0 00000000`0022efc0 fffff880`02bb1b78 : nt!MmCreateSection+0x2aa
    fffff880`02bb1b30 fffff800`016cd8d3 : fffffa80`0417cb60 00000000`0022ee38 fffff880`02bb1bc8 00000000`77909260 : nt!NtCreateSection+0x171
    fffff880`02bb1bb0 00000000`778417ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`0022ee18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778417ba


    STACK_COMMAND:  kb

    FOLLOWUP_IP: 
    nt! ?? ::FNODOBFM::`string'+11718
    fffff800`01662d38 cc              int     3

    SYMBOL_STACK_INDEX:  1

    SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+11718

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME:  ntkrnlmp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

    FAILURE_BUCKET_ID:  X64_0x4E_2_nt!_??_::FNODOBFM::_string_+11718

    BUCKET_ID:  X64_0x4E_2_nt!_??_::FNODOBFM::_string_+11718

    Followup: MachineOwner
    ---------

    3: kd> r
    rax=0000000000000000 rbx=fffffa8003a7e860 rcx=000000000000004e
    rdx=0000000000000002 rsi=fffffa8003a7e860 rdi=0000000000000009
    rip=fffff800016ce640 rsp=fffff88002bb1538 rbp=0000000000137f82
     r8=0000000000137f82  r9=000000000013ffff r10=fffffa80041e2928
    r11=fffff88002bb15c8 r12=fffff88002bb16f0 r13=fffff88002bb1720
    r14=fffff8a00015d4d0 r15=fffff8a00015d4d0
    iopl=0         nv up ei pl nz na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000206
    nt!KeBugCheckEx:
    fffff800`016ce640 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`02bb1540=000000000000004e
    3: kd> kv
    Child-SP          RetAddr           : Args to Child                                                           : Call Site
    fffff880`02bb1538 fffff800`01662d38 : 00000000`0000004e 00000000`00000002 00000000`00137f82 00000000`0013ffff : nt!KeBugCheckEx
    fffff880`02bb1540 fffff800`017121eb : 00000000`00000000 00000000`00000000 00000000`00000000 fffff8a0`0015dd48 : nt! ?? ::FNODOBFM::`string'+0x11718
    fffff880`02bb15d0 fffff800`01710d38 : fffff8a0`0015d010 fffff8a0`0015dd48 fffffa80`041e2960 fffffa80`041e2960 : nt!MiFlushSectionInternal+0x6bb
    fffff880`02bb1800 fffff800`016b2274 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmFlushSection+0x1f4
    fffff880`02bb18c0 fffff800`019caeca : 00000000`00000000 00000000`00000006 00000000`00000080 00000000`01000000 : nt!MiFlushDataSection+0x190
    fffff880`02bb1930 fffff800`019a9b22 : fffff880`02bb1b80 fffff880`02bb1ca0 00000000`0022efc0 fffff880`02bb1b78 : nt!MmCreateSection+0x2aa
    fffff880`02bb1b30 fffff800`016cd8d3 : fffffa80`0417cb60 00000000`0022ee38 fffff880`02bb1bc8 00000000`77909260 : nt!NtCreateSection+0x171
    fffff880`02bb1bb0 00000000`778417ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`02bb1c20)
    00000000`0022ee18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778417ba
    3: kd> lmnt
    start             end                 module name
    fffff800`0156f000 fffff800`01579000   kdcom    kdcom.dll    Tue Jul 14 09:31:07 2009 (4A5BDFDB)
    fffff800`01605000 fffff800`0164e000   hal      hal.dll      Sat Nov 20 21:00:25 2010 (4CE7C669)
    fffff800`0164e000 fffff800`01c38000   nt       ntkrnlmp.exe Sat Nov 20 17:30:02 2010 (4CE7951A)
    fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Sat Nov 20 17:20:43 2010 (4CE792EB)
    fffff880`00c5d000 fffff880`00cac000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 21:03:51 2010 (4CE7C737)
    fffff880`00cac000 fffff880`00cc0000   PSHED    PSHED.dll    Tue Jul 14 09:32:23 2009 (4A5BE027)
    fffff880`00cc0000 fffff880`00d1e000   CLFS     CLFS.SYS     Tue Jul 14 07:19:57 2009 (4A5BC11D)
    fffff880`00d1e000 fffff880`00dde000   CI       CI.dll       Sat Nov 20 21:12:36 2010 (4CE7C944)
    fffff880`00e40000 fffff880`00f33000   NDIS     NDIS.SYS     Sat Nov 20 17:23:30 2010 (4CE79392)
    fffff880`00f33000 fffff880`00f91000   msrpc    msrpc.sys    Sat Nov 20 17:21:56 2010 (4CE79334)
    fffff880`00f91000 fffff880`00ff1000   NETIO    NETIO.SYS    Sat Nov 20 17:23:13 2010 (4CE79381)
    fffff880`01000000 fffff880`01033000   pci      pci.sys      Sat Nov 20 17:19:11 2010 (4CE7928F)
    fffff880`01033000 fffff880`01040000   vdrvroot vdrvroot.sys Tue Jul 14 08:01:31 2009 (4A5BCADB)
    fffff880`01040000 fffff880`01055000   partmgr  partmgr.sys  Sat Nov 20 17:20:00 2010 (4CE792C0)
    fffff880`01055000 fffff880`0106a000   volmgr   volmgr.sys   Sat Nov 20 17:19:28 2010 (4CE792A0)
    fffff880`0106a000 fffff880`01084000   mountmgr mountmgr.sys Sat Nov 20 17:19:21 2010 (4CE79299)
    fffff880`01084000 fffff880`0108f000   amdxata  amdxata.sys  Sat Mar 20 00:18:18 2010 (4BA3A3CA)
    fffff880`010c2000 fffff880`01166000   Wdf01000 Wdf01000.sys Tue Jul 14 07:22:07 2009 (4A5BC19F)
    fffff880`01166000 fffff880`01175000   WDFLDR   WDFLDR.SYS   Tue Jul 14 07:19:54 2009 (4A5BC11A)
    fffff880`01175000 fffff880`011cc000   ACPI     ACPI.sys     Sat Nov 20 17:19:16 2010 (4CE79294)
    fffff880`011cc000 fffff880`011d5000   WMILIB   WMILIB.SYS   Tue Jul 14 07:19:51 2009 (4A5BC117)
    fffff880`011d5000 fffff880`011df000   msisadrv msisadrv.sys Tue Jul 14 07:19:26 2009 (4A5BC0FE)
    fffff880`01200000 fffff880`0122a000   ataport  ataport.SYS  Sat Nov 20 17:19:15 2010 (4CE79293)
    fffff880`0122a000 fffff880`01235000   msahci   msahci.sys   Sat Nov 20 18:33:58 2010 (4CE7A416)
    fffff880`01239000 fffff880`015dd000   iaStor   iaStor.sys   Wed Nov 30 11:39:19 2011 (4ED5A567)
    fffff880`015dd000 fffff880`015e6000   atapi    atapi.sys    Tue Jul 14 07:19:47 2009 (4A5BC113)
    fffff880`015e6000 fffff880`015f6000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 07:19:48 2009 (4A5BC114)
    fffff880`01600000 fffff880`01689000   afd      afd.sys      Sat Nov 20 17:23:27 2010 (4CE7938F)
    fffff880`01689000 fffff880`016a6000   serial   serial.sys   Tue Jul 14 08:00:40 2009 (4A5BCAA8)
    fffff880`016a6000 fffff880`016c1000   wanarp   wanarp.sys   Sat Nov 20 18:52:36 2010 (4CE7A874)
    fffff880`016ef000 fffff880`0173b000   fltmgr   fltmgr.sys   Sat Nov 20 17:19:24 2010 (4CE7929C)
    fffff880`0173b000 fffff880`017ad000   cng      cng.sys      Sat Nov 20 18:08:45 2010 (4CE79E2D)
    fffff880`017ad000 fffff880`017d8000   ksecpkg  ksecpkg.sys  Sat Nov 20 18:10:34 2010 (4CE79E9A)
    fffff880`01800000 fffff880`0181b000   ksecdd   ksecdd.sys   Sat Nov 20 17:21:15 2010 (4CE7930B)
    fffff880`0181b000 fffff880`0182c000   pcw      pcw.sys      Tue Jul 14 07:19:27 2009 (4A5BC0FF)
    fffff880`0182c000 fffff880`01836000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 07:19:45 2009 (4A5BC111)
    fffff880`01836000 fffff880`01845000   netbios  netbios.sys  Tue Jul 14 08:09:26 2009 (4A5BCCB6)
    fffff880`01845000 fffff880`01859000   termdd   termdd.sys   Sat Nov 20 19:03:40 2010 (4CE7AB0C)
    fffff880`0185c000 fffff880`019ff000   Ntfs     Ntfs.sys     Sat Nov 20 17:20:57 2010 (4CE792F9)
    fffff880`01a00000 fffff880`01a11000   Npfs     Npfs.SYS     Tue Jul 14 07:19:48 2009 (4A5BC114)
    fffff880`01a11000 fffff880`01a33000   tdx      tdx.sys      Sat Nov 20 17:21:54 2010 (4CE79332)
    fffff880`01a33000 fffff880`01a40000   TDI      TDI.SYS      Sat Nov 20 17:22:06 2010 (4CE7933E)
    fffff880`01a40000 fffff880`01a85000   netbt    netbt.sys    Sat Nov 20 17:23:18 2010 (4CE79386)
    fffff880`01a85000 fffff880`01a8e000   wfplwf   wfplwf.sys   Tue Jul 14 08:09:26 2009 (4A5BCCB6)
    fffff880`01a8e000 fffff880`01ab4000   pacer    pacer.sys    Sat Nov 20 18:52:18 2010 (4CE7A862)
    fffff880`01abb000 fffff880`01cbf000   tcpip    tcpip.sys    Sat Nov 20 17:25:52 2010 (4CE79420)
    fffff880`01cbf000 fffff880`01d09000   fwpkclnt fwpkclnt.sys Sat Nov 20 17:21:37 2010 (4CE79321)
    fffff880`01d09000 fffff880`01d19000   vmstorfl vmstorfl.sys Sat Nov 20 17:57:30 2010 (4CE79B8A)
    fffff880`01d19000 fffff880`01d65000   volsnap  volsnap.sys  Sat Nov 20 17:20:08 2010 (4CE792C8)
    fffff880`01d65000 fffff880`01d6d000   spldr    spldr.sys    Tue May 12 00:56:27 2009 (4A0858BB)
    fffff880`01d6d000 fffff880`01d7f000   mup      mup.sys      Tue Jul 14 07:23:45 2009 (4A5BC201)
    fffff880`01d7f000 fffff880`01d88000   hwpolicy hwpolicy.sys Sat Nov 20 17:18:54 2010 (4CE7927E)
    fffff880`01d88000 fffff880`01d9e000   disk     disk.sys     Tue Jul 14 07:19:57 2009 (4A5BC11D)
    fffff880`01d9e000 fffff880`01dce000   CLASSPNP CLASSPNP.SYS Sat Nov 20 17:19:23 2010 (4CE7929B)
    fffff880`01ddc000 fffff880`01de5000   rdpencdd rdpencdd.sys Tue Jul 14 08:16:34 2009 (4A5BCE62)
    fffff880`01de5000 fffff880`01dee000   rdprefmp rdprefmp.sys Tue Jul 14 08:16:35 2009 (4A5BCE63)
    fffff880`01dee000 fffff880`01df9000   Msfs     Msfs.SYS     Tue Jul 14 07:19:47 2009 (4A5BC113)
    fffff880`02c00000 fffff880`02c09000   Null     Null.SYS     Tue Jul 14 07:19:37 2009 (4A5BC109)
    fffff880`02c09000 fffff880`02c17000   vga      vga.sys      Tue Jul 14 07:38:47 2009 (4A5BC587)
    fffff880`02c17000 fffff880`02c27000   watchdog watchdog.sys Tue Jul 14 07:37:35 2009 (4A5BC53F)
    fffff880`02c27000 fffff880`02fcb000   dump_iaStor dump_iaStor.sys Wed Nov 30 11:39:19 2011 (4ED5A567)
    fffff880`02fd1000 fffff880`02ff6000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 07:38:51 2009 (4A5BC58B)
    fffff880`02ff6000 fffff880`02fff000   RDPCDD   RDPCDD.sys   Tue Jul 14 08:16:34 2009 (4A5BCE62)
    fffff880`03010000 fffff880`03061000   rdbss    rdbss.sys    Sat Nov 20 17:27:51 2010 (4CE79497)
    fffff880`03061000 fffff880`0306d000   nsiproxy nsiproxy.sys Tue Jul 14 07:21:02 2009 (4A5BC15E)
    fffff880`0306d000 fffff880`03078000   mssmbios mssmbios.sys Tue Jul 14 07:31:10 2009 (4A5BC3BE)
    fffff880`03078000 fffff880`03087000   discache discache.sys Tue Jul 14 07:37:18 2009 (4A5BC52E)
    fffff880`03087000 fffff880`030a5000   dfsc     dfsc.sys     Sat Nov 20 17:26:31 2010 (4CE79447)
    fffff880`030a5000 fffff880`030b6000   blbdrive blbdrive.sys Tue Jul 14 07:35:59 2009 (4A5BC4DF)
    fffff880`030b6000 fffff880`030dc000   tunnel   tunnel.sys   Sat Nov 20 18:51:50 2010 (4CE7A846)
    fffff880`030dc000 fffff880`030ea000   vgapnp   vgapnp.sys   Tue Jul 14 07:38:47 2009 (4A5BC587)
    fffff880`030ea000 fffff880`030f7000   usbuhci  usbuhci.sys  Tue Jul 14 08:06:27 2009 (4A5BCC03)
    fffff880`030f7000 fffff880`0314d000   USBPORT  USBPORT.SYS  Sat Nov 20 18:44:00 2010 (4CE7A670)
    fffff880`0314d000 fffff880`0315e000   usbehci  usbehci.sys  Sat Nov 20 18:43:54 2010 (4CE7A66A)
    fffff880`0315e000 fffff880`03182000   HDAudBus HDAudBus.sys Sat Nov 20 18:43:42 2010 (4CE7A65E)
    fffff880`03182000 fffff880`031bd000   rusb3xhc rusb3xhc.sys Mon Nov 21 15:09:34 2011 (4EC9F92E)
    fffff880`031bd000 fffff880`031bef00   USBD     USBD.SYS     Tue Jul 14 08:06:23 2009 (4A5BCBFF)
    fffff880`0340d000 fffff880`03467000   e1q62x64 e1q62x64.sys Fri Oct 14 09:21:37 2011 (4E978EA1)
    fffff880`03467000 fffff880`03473000   serenum  serenum.sys  Tue Jul 14 08:00:33 2009 (4A5BCAA1)
    fffff880`03473000 fffff880`03489000   intelppm intelppm.sys Tue Jul 14 07:19:25 2009 (4A5BC0FD)
    fffff880`03489000 fffff880`03499000   CompositeBus CompositeBus.sys Sat Nov 20 18:33:17 2010 (4CE7A3ED)
    fffff880`03499000 fffff880`034af000   AgileVpn AgileVpn.sys Tue Jul 14 08:10:24 2009 (4A5BCCF0)
    fffff880`034af000 fffff880`034d3000   rasl2tp  rasl2tp.sys  Sat Nov 20 18:52:34 2010 (4CE7A872)
    fffff880`034d3000 fffff880`034df000   ndistapi ndistapi.sys Tue Jul 14 08:10:00 2009 (4A5BCCD8)
    fffff880`034df000 fffff880`0350e000   ndiswan  ndiswan.sys  Sat Nov 20 18:52:32 2010 (4CE7A870)
    fffff880`0350e000 fffff880`03529000   raspppoe raspppoe.sys Tue Jul 14 08:10:17 2009 (4A5BCCE9)
    fffff880`03529000 fffff880`0354a000   raspptp  raspptp.sys  Sat Nov 20 18:52:31 2010 (4CE7A86F)
    fffff880`0354a000 fffff880`03564000   rassstp  rassstp.sys  Tue Jul 14 08:10:25 2009 (4A5BCCF1)
    fffff880`03564000 fffff880`0356f000   rdpbus   rdpbus.sys   Tue Jul 14 08:17:46 2009 (4A5BCEAA)
    fffff880`0356f000 fffff880`0357e000   kbdclass kbdclass.sys Tue Jul 14 07:19:50 2009 (4A5BC116)
    fffff880`0357e000 fffff880`0358d000   mouclass mouclass.sys Tue Jul 14 07:19:50 2009 (4A5BC116)
    fffff880`0358d000 fffff880`0358e480   swenum   swenum.sys   Tue Jul 14 08:00:18 2009 (4A5BCA92)
    fffff880`0358f000 fffff880`035d2000   ks       ks.sys       Sat Nov 20 18:33:23 2010 (4CE7A3F3)
    fffff880`035d2000 fffff880`035dc000   hwmdrv   hwmdrv.sys   Thu Jul 12 14:15:26 2012 (4FFE6B7E)
    fffff880`035dc000 fffff880`035ee000   umbus    umbus.sys    Sat Nov 20 18:44:37 2010 (4CE7A695)
    fffff880`03a00000 fffff880`03a1d000   rusb3hub rusb3hub.sys Mon Nov 21 15:09:32 2011 (4EC9F92C)
    fffff880`03a1d000 fffff880`03a2b000   crashdmp crashdmp.sys Tue Jul 14 08:01:01 2009 (4A5BCABD)
    fffff880`03abd000 fffff880`03b17000   usbhub   usbhub.sys   Sat Nov 20 18:44:30 2010 (4CE7A68E)
    fffff880`03b17000 fffff880`03b2c000   NDProxy  NDProxy.SYS  Sat Nov 20 18:52:20 2010 (4CE7A864)
    fffff880`03b2c000 fffff880`03b88000   HdAudio  HdAudio.sys  Sat Nov 20 18:44:23 2010 (4CE7A687)
    fffff880`03b88000 fffff880`03bc5000   portcls  portcls.sys  Tue Jul 14 08:06:27 2009 (4A5BCC03)
    fffff880`03bc5000 fffff880`03be7000   drmk     drmk.sys     Tue Jul 14 09:01:25 2009 (4A5BD8E5)
    fffff880`03be7000 fffff880`03bec200   ksthunk  ksthunk.sys  Tue Jul 14 08:00:19 2009 (4A5BCA93)

    Unloaded modules:
    fffff880`01dce000 fffff880`01ddc000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`02c2d000 fffff880`02fd1000   dump_iaStor.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A4000
    fffff880`02fd1000 fffff880`02ffb000   cdrom.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0002A000
    fffff880`00dde000 fffff880`00df9000   sacdrv.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0001B000
    3: kd> logclose
           ^ Syntax error in 'logclose'
    3: kd> .logclose
    Closing open log file e:\debuglog.txt


    • 已移動 小歐ouMVP 2012年7月19日 上午 06:51 (從:Windows 7 專區)
    • 已變更類型 AChange 2012年7月24日 上午 02:34 Customer Discontinued
    2012年7月19日 上午 05:32

所有回覆