(..\..\ntoskrnl\po\poshtdwn.c:143) HAL shutting down (..\..\ntoskrnl\po\poshtdwn.c:147) I/O manager shutting down in phase 0 (..\..\ntoskrnl\ps\thread.c:119) PS: Unhandled Kernel Mode Exception Pointers = 0xF8981750 (..\..\ntoskrnl\ps\thread.c:126) Code c0000005 Addr 00000000 Info0 00000000 Info1 00000000 Info2 00000000 Info3 00000001 *** Fatal System Error: 0x0000007e (0xC0000005,0x00000000,0xF8981BBC,0xF8981864) Break instruction exception - code 80000003 (first chance) A fatal system error has occurred. Debugger entered on first try; Bugcheck callbacks have not been invoked. A fatal system error has occurred. Connected to Windows Server 2003 3790 x86 compatible target at (Sat Jul 14 19:06:51.644 2012 (UTC + 2:00)), ptr64 FALSE Loading Kernel Symbols .................................................... Loading User Symbols ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 7E, {c0000005, 0, f8981bbc, f8981864} Probably caused by : ntoskrnl.dll ( nt!IofCallDriver+a9 ) Followup: MachineOwner --------- nt!RtlpBreakWithStatusInstruction: 8050e738 cc int 3 kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: 00000000, The address that the exception occurred at Arg3: f8981bbc, Exception Record Address Arg4: f8981864, Context Record Address Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo FAULTING_IP: +54162faf03e8d894 00000000 ?? ??? EXCEPTION_RECORD: f8985d40 -- (.exr 0xfffffffff8985d40) ExceptionAddress: 00000000 ExceptionCode: f8985d8c ExceptionFlags: 8043ba77 NumberParameters: 0 CONTEXT: f8981864 -- (.cxr 0xfffffffff8981864) eax=00000010 ebx=00009000 ecx=b0f63038 edx=00000000 esi=8000003b edi=00000000 eip=00000000 esp=f8981ce4 ebp=f8981d04 iopl=0 nv up ei ng nz ac pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010296 00000000 ?? ??? Resetting default scope DEFAULT_BUCKET_ID: DRIVER_FAULT PROCESS_NAME: System CURRENT_IRQL: 0 ERROR_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo EXCEPTION_PARAMETER1: 00000000 EXCEPTION_PARAMETER2: 00000000 READ_ADDRESS: 00000000 FOLLOWUP_IP: nt!IofCallDriver+a9 [p:\trunk_slave\x86_msvc\build\ntoskrnl\io\iomgr\irp.c @ 1171] 80467449 8be5 mov esp,ebp FAILED_INSTRUCTION_ADDRESS: +54162faf03e8d894 00000000 ?? ??? BUGCHECK_STR: 0x7E LAST_CONTROL_TRANSFER: from 00000000 to 458b1051 UNALIGNED_STACK_POINTER: 458bcc55 STACK_TEXT: WARNING: Frame IP not in any known module. Following frames may be wrong. f8981ce0 80467449 b0f60a20 b0fd7250 00000001 0x0 f8981d04 8045372a b0f60a20 805c61c9 b0f63478 nt!IofCallDriver+0xa9 [p:\trunk_slave\x86_msvc\build\ntoskrnl\io\iomgr\irp.c @ 1171] f8981d38 804d22d4 00000000 00000000 f8981d8c nt!IoShutdownSystem+0x7a [p:\trunk_slave\x86_msvc\build\ntoskrnl\io\iomgr\device.c @ 170] f8981d48 8043bae0 00000000 00000001 00000001 nt!PopGracefulShutdown+0x104 [p:\trunk_slave\x86_msvc\build\ntoskrnl\po\poshtdwn.c @ 151] f8981d8c 804e056f 00000000 00000000 8000003b nt!ExpWorkerThreadEntryPoint+0x1b0 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ex\work.c @ 165] f8981dc0 804f3d00 8043b930 00000000 f8981de0 nt!PspSystemThreadStartup+0x7f [p:\trunk_slave\x86_msvc\build\ntoskrnl\ps\thread.c @ 158] f8981ddc 804e04ef 8043b930 00000000 0ffc4500 nt!KiThreadStartup+0x40 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\i386\thrdini.c @ 81] f8985ca8 804f0233 f8985ce4 00000000 8000003b nt!PspUnhandledExceptionInSystemThread+0xcf f8985ce4 80483efa 00000001 558b03c9 00000001 nt!KiSwapContext+0x19 f8985d40 8043ba77 805d7260 00000000 00000000 nt!KeRemoveQueue+0x4ea [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\queue.c @ 401] f8985d8c 804e056f 00000000 00000000 8000003b nt!ExpWorkerThreadEntryPoint+0x147 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ex\work.c @ 147] f8985dc0 804f3d00 8043b930 00000000 f8985de0 nt!PspSystemThreadStartup+0x7f [p:\trunk_slave\x86_msvc\build\ntoskrnl\ps\thread.c @ 158] f8985ddc 804e04ef 8043b930 00000000 0f1a7e00 nt!KiThreadStartup+0x40 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\i386\thrdini.c @ 81] f8989ca8 804f0233 f8989ce4 00000000 8000003b nt!PspUnhandledExceptionInSystemThread+0xcf f8989ce4 80483efa 00000001 48b60fd0 00000001 nt!KiSwapContext+0x19 f8989d40 8043ba77 805d7260 00000000 00000000 nt!KeRemoveQueue+0x4ea [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\queue.c @ 401] f8989d8c 804e056f 00000000 00000000 8000003b nt!ExpWorkerThreadEntryPoint+0x147 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ex\work.c @ 147] f8989dc0 804f3d00 8043b930 00000000 f8989de0 nt!PspSystemThreadStartup+0x7f [p:\trunk_slave\x86_msvc\build\ntoskrnl\ps\thread.c @ 158] f8989ddc 804e04ef 8043b930 00000000 6a000200 nt!KiThreadStartup+0x40 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\i386\thrdini.c @ 81] f898dca8 804f0233 f898dce4 00000000 8000003b nt!PspUnhandledExceptionInSystemThread+0xcf f898dce4 80483efa 00000001 6a000001 00000001 nt!KiSwapContext+0x19 f898dd40 8043ba77 805d7260 00000000 00000000 nt!KeRemoveQueue+0x4ea [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\queue.c @ 401] f898dd8c 804e056f 00000000 00000000 8000003b nt!ExpWorkerThreadEntryPoint+0x147 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ex\work.c @ 147] f898ddc0 804f3d00 8043b930 00000000 f898dde0 nt!PspSystemThreadStartup+0x7f [p:\trunk_slave\x86_msvc\build\ntoskrnl\ps\thread.c @ 158] f898dddc 804e04ef 8043b930 00000000 0000ff00 nt!KiThreadStartup+0x40 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\i386\thrdini.c @ 81] f8991ca8 804f0233 f8991ce4 00000000 8000003b nt!PspUnhandledExceptionInSystemThread+0xcf f8991ce4 80483efa 00000001 830001a2 00000001 nt!KiSwapContext+0x19 f8991d40 8043ba77 805d7260 00000000 00000000 nt!KeRemoveQueue+0x4ea [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\queue.c @ 401] f8991d8c 804e056f 00000000 00000000 8000003b nt!ExpWorkerThreadEntryPoint+0x147 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ex\work.c @ 147] f8991dc0 804f3d00 8043b930 00000000 f8991de0 nt!PspSystemThreadStartup+0x7f [p:\trunk_slave\x86_msvc\build\ntoskrnl\ps\thread.c @ 158] f8991ddc 804e04ef 8043b930 00000000 fc458b00 nt!KiThreadStartup+0x40 [p:\trunk_slave\x86_msvc\build\ntoskrnl\ke\i386\thrdini.c @ 81] f8991de0 8043b92f 00000000 fc458b00 0000027f nt!PspUnhandledExceptionInSystemThread+0xcf f8991de4 00000000 fc458b00 0000027f 00000000 nt!ExpDesktopDelete+0x1f FAULTING_SOURCE_CODE: 1167: 1168: /* Call it */ 1169: return DriverObject->MajorFunction[StackPtr->MajorFunction](DeviceObject, 1170: Irp); > 1171: } 1172: 1173: FORCEINLINE 1174: VOID 1175: IopClearStackLocation(IN PIO_STACK_LOCATION IoStackLocation) 1176: { SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt!IofCallDriver+a9 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntoskrnl.dll DEBUG_FLR_IMAGE_TIMESTAMP: 50015aa0 STACK_COMMAND: .cxr 0xfffffffff8981864 ; kb FAILURE_BUCKET_ID: 0x7E_NULL_IP_nt!IofCallDriver+a9 BUCKET_ID: 0x7E_NULL_IP_nt!IofCallDriver+a9 Followup: MachineOwner kd> dt nt!_DRIVER_OBJECT 0xb0fd0060 -b +0x000 Type : 0n4 +0x002 Size : 0n168 +0x004 DeviceObject : 0xb0f5a848 +0x008 Flags : 0x10 +0x00c DriverStart : 0xf823c000 +0x010 DriverSize : 0x29000 +0x014 DriverSection : 0xb1219770 +0x018 DriverExtension : 0xb0fd0108 +0x01c DriverName : _UNICODE_STRING "\Driver\E1000" +0x000 Length : 0x1a +0x002 MaximumLength : 0x208 +0x004 Buffer : 0xe13e5b48 "\Driver\E1000" +0x024 HardwareDatabase : 0x80566534 +0x028 FastIoDispatch : (null) +0x02c DriverInit : 0xf8247fcc +0x030 DriverStartIo : (null) +0x034 DriverUnload : 0xf823c4ca +0x038 MajorFunction : [00] 0xf82557bc [01] (null) [02] 0xf8255832 [03] (null) [04] (null) [05] (null) [06] (null) [07] (null) [08] (null) [09] (null) [10] (null) [11] (null) [12] (null) [13] (null) [14] 0xf8255c56 [15] (null) [16] (null) [17] (null) [18] (null) [19] (null) [20] (null) [21] (null) [22] (null) [23] (null) [24] (null) [25] (null) [26] (null) [27] 0xf89d9d90 kd> !drvobj 0xb0fd0060 0x7 Driver object (b0fd0060) is for: *** ERROR: Module load completed but symbols could not be loaded for e1000325.sys \Driver\E1000 Driver Extension List: (id , addr) Device Object list: b0f5a848 b0fd2a08 DriverEntry: f8247fcc e1000325 DriverStartIo: 00000000 DriverUnload: f823c4ca e1000325 AddDevice: f89da050 ndis!NdisIAddDevice Dispatch routines: [00] IRP_MJ_CREATE f82557bc e1000325+0x197bc [01] IRP_MJ_CREATE_NAMED_PIPE 00000000 [02] IRP_MJ_CLOSE f8255832 e1000325+0x19832 [03] IRP_MJ_READ 00000000 [04] IRP_MJ_WRITE 00000000 [05] IRP_MJ_QUERY_INFORMATION 00000000 [06] IRP_MJ_SET_INFORMATION 00000000 [07] IRP_MJ_QUERY_EA 00000000 [08] IRP_MJ_SET_EA 00000000 [09] IRP_MJ_FLUSH_BUFFERS 00000000 [0a] IRP_MJ_QUERY_VOLUME_INFORMATION 00000000 [0b] IRP_MJ_SET_VOLUME_INFORMATION 00000000 [0c] IRP_MJ_DIRECTORY_CONTROL 00000000 [0d] IRP_MJ_FILE_SYSTEM_CONTROL 00000000 [0e] IRP_MJ_DEVICE_CONTROL f8255c56 e1000325+0x19c56 [0f] IRP_MJ_INTERNAL_DEVICE_CONTROL 00000000 [10] IRP_MJ_SHUTDOWN 00000000 [11] IRP_MJ_LOCK_CONTROL 00000000 [12] IRP_MJ_CLEANUP 00000000 [13] IRP_MJ_CREATE_MAILSLOT 00000000 [14] IRP_MJ_QUERY_SECURITY 00000000 [15] IRP_MJ_SET_SECURITY 00000000 [16] IRP_MJ_POWER 00000000 [17] IRP_MJ_SYSTEM_CONTROL 00000000 [18] IRP_MJ_DEVICE_CHANGE 00000000 [19] IRP_MJ_QUERY_QUOTA 00000000 [1a] IRP_MJ_SET_QUOTA 00000000 [1b] IRP_MJ_PNP f89d9d90 ndis!NdisIDispatchPnp