ShPonGle
Legacy Member
Mijn virtuele w2K3 R2 SP2 server krijgt nu en dan een BSOD wanneer de fysieke hostserver (W2K8 SP2) opgestart wordt en de VM zelf uit saved state ontwaakt. Ik heb geen enkele driver geïnstalleerd (alles werkt op de native drivers van hyper-V) en toch geeft hij een driverfout aan.
Hier is de dump van het memory:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available
Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: Server, suite: Enterprise TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.090805-1438
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Mon Nov 9 18:27:13.695 2009 (GMT+1)
System Uptime: 0 days 5:46:38.640
Loading Kernel Symbols
...............................................................
.....................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {81, d0000002, 0, 899be690}
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+2a7 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000081, memory referenced
Arg2: d0000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 899be690, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 00000081
CURRENT_IRQL: 2
FAULTING_IP:
+1ad952f00e5dfe0
899be690 0000 add byte ptr [eax],al
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: Idle
TRAP_FRAME: 8089a534 -- (.trap 0xffffffff8089a534)
ErrCode = 00000000
eax=00000081 ebx=899be684 ecx=899bf000 edx=ffdffa40 esi=899d21a0 edi=ffdffa40
eip=899be690 esp=8089a5a8 ebp=8089a5a8 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
899be690 0000 add byte ptr [eax],al ds:0023:00000081=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 899be690 to 8088c99b
STACK_TEXT:
8089a534 899be690 badb0d00 ffdffa40 8089a57c nt!KiTrap0E+0x2a7
WARNING: Frame IP not in any known module. Following frames may be wrong.
8089a5a4 8089a600 80832110 899d21a0 899bf000 0x899be690
8089a5a8 80832110 899d21a0 899bf000 00000000 nt!KiDoubleFaultStack+0x2d50
8089a600 8088de4f 00000000 0000000e 00000000 nt!KiRetireDpcList+0xca
8089a604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x37
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTrap0E+2a7
8088c99b 833da0628a8000 cmp dword ptr [nt!KiFreezeFlag (808a62a0)],0
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KiTrap0E+2a7
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4a799091
FAILURE_BUCKET_ID: 0xD1_nt!KiTrap0E+2a7
BUCKET_ID: 0xD1_nt!KiTrap0E+2a7
Followup: MachineOwner
---------
De 8GB ram van de hostserver is al grondig getest, werkt al maanden stabiel. de guest zelf heeft 512mb virtuele ram. heb er al op zitten googlen, maar blijkbaar zitten er veel vast op een BSOD die te wijten is aan iets met de ntkrpamp.exe...
ntkrpamp.exe - Google zoeken
Iemand die dit wel wist op te lossen?
edit: ben nu, om maar iets te proberen, eens de hotfix KB944984 aan het installen...
Hier is de dump van het memory:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available
Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: Server, suite: Enterprise TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_gdr.090805-1438
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Mon Nov 9 18:27:13.695 2009 (GMT+1)
System Uptime: 0 days 5:46:38.640
Loading Kernel Symbols
...............................................................
.....................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {81, d0000002, 0, 899be690}
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+2a7 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000081, memory referenced
Arg2: d0000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 899be690, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 00000081
CURRENT_IRQL: 2
FAULTING_IP:
+1ad952f00e5dfe0
899be690 0000 add byte ptr [eax],al
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: Idle
TRAP_FRAME: 8089a534 -- (.trap 0xffffffff8089a534)
ErrCode = 00000000
eax=00000081 ebx=899be684 ecx=899bf000 edx=ffdffa40 esi=899d21a0 edi=ffdffa40
eip=899be690 esp=8089a5a8 ebp=8089a5a8 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
899be690 0000 add byte ptr [eax],al ds:0023:00000081=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 899be690 to 8088c99b
STACK_TEXT:
8089a534 899be690 badb0d00 ffdffa40 8089a57c nt!KiTrap0E+0x2a7
WARNING: Frame IP not in any known module. Following frames may be wrong.
8089a5a4 8089a600 80832110 899d21a0 899bf000 0x899be690
8089a5a8 80832110 899d21a0 899bf000 00000000 nt!KiDoubleFaultStack+0x2d50
8089a600 8088de4f 00000000 0000000e 00000000 nt!KiRetireDpcList+0xca
8089a604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x37
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTrap0E+2a7
8088c99b 833da0628a8000 cmp dword ptr [nt!KiFreezeFlag (808a62a0)],0
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KiTrap0E+2a7
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4a799091
FAILURE_BUCKET_ID: 0xD1_nt!KiTrap0E+2a7
BUCKET_ID: 0xD1_nt!KiTrap0E+2a7
Followup: MachineOwner
---------
De 8GB ram van de hostserver is al grondig getest, werkt al maanden stabiel. de guest zelf heeft 512mb virtuele ram. heb er al op zitten googlen, maar blijkbaar zitten er veel vast op een BSOD die te wijten is aan iets met de ntkrpamp.exe...
ntkrpamp.exe - Google zoeken
Iemand die dit wel wist op te lossen?
edit: ben nu, om maar iets te proberen, eens de hotfix KB944984 aan het installen...