We help IT Professionals succeed at work.
Get Started

DMP File Analysis

jdubai
jdubai asked
on
412 Views
Last Modified: 2014-06-26
Hi,

Would appreciate some assitance to analyze a dump file causing BSOD on a Windows Server 2003 R2 SP2 system.  Physical server and not a VM.  The main role of this server is a SQL database.   It's not occurring frequently.  The same error has occured twice in the last 6 months.  Considering it's a production SQL box it's still problematic to have it BSOD at all.  Thank you in advance

Dump file content follows - I bolded some items to highlight:

*** WARNING: Unable to verify checksum for ntkrnlmp.exe
Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x64
Product: Server, suite: Enterprise TerminalServer SingleUserTS
Built by: 3790.srv03_sp2_qfe.130106-1434
Machine Name:
Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011d9280
Debug session time: Wed Nov 13 17:17:52.571 2013 (UTC - 7:00)
System Uptime: 154 days 23:01:37.797
*** WARNING: Unable to verify checksum for ntkrnlmp.exe
Loading Kernel Symbols
...............................................................
................................................................
............
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck E3, {fffffadf37144010, fffffadf3cc08040, 0, 2}

*** WARNING: Unable to verify checksum for Ntfs.sys
*** WARNING: Unable to verify checksum for fltMgr.sys

Probably caused by : ntkrnlmp.exe ( nt!ExReleaseResourceLite+160 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

RESOURCE_NOT_OWNED (e3)
A thread tried to release a resource it did not own.

Arguments:
Arg1: fffffadf37144010, Address of resource
Arg2: fffffadf3cc08040, Address of thread
Arg3: 0000000000000000, Address of owner table if there is one
Arg4: 0000000000000002

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xE3

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800010b07ab to fffff8000102eb50

STACK_TEXT:  
fffffadf`2e6be838 fffff800`010b07ab : 00000000`000000e3 fffffadf`37144010 fffffadf`3cc08040 00000000`00000000 : nt!KeBugCheckEx
fffffadf`2e6be840 fffffadf`2d83a120 : fffffa80`023e4058 00000000`00000000 fffffadf`38995810 fffffadf`389957d0 : nt!ExReleaseResourceLite+0x160
fffffadf`2e6be880 fffffadf`2d83a13c : fffffadf`389957d0 fffffadf`2e6beba0 00000000`00000000 00000000`00000000 : Ntfs!NtfsReleaseAllResources+0x129
fffffadf`2e6be8b0 fffffadf`2d83a395 : fffffadf`389957d0 fffff800`010362a0 00000000`00000000 00000000`00000000 : Ntfs!NtfsCleanupIrpContext+0x40
fffffadf`2e6be8f0 fffffadf`2d8afc5c : fffffadf`389957d0 fffffadf`389957d0 00000000`00000000 fffffa80`023e4010 : Ntfs!NtfsCompleteRequest+0x4b
fffffadf`2e6be920 fffffadf`2d8af915 : fffffadf`389957d0 fffffa80`023e4110 fffffa80`023e4010 fffffadf`3b8921c8 : Ntfs!NtfsCommonClose+0x634
fffffadf`2e6be9c0 fffffadf`2d9bf962 : 00000000`00000001 fffffadf`37d74470 fffffadf`37d74470 fffffadf`3b852190 : Ntfs!NtfsFsdClose+0x392
fffffadf`2e6beab0 fffffadf`2d9bf582 : fffffadf`37d74470 fffffadf`2e6beba0 fffffadf`37d74470 fffffadf`39313b10 : fltMgr!FltpDispatch+0x1c2
fffffadf`2e6beb10 fffffadf`2d9bf91f : fffffadf`00000000 fffffadf`37d74470 fffffadf`37d74400 fffffadf`37d74470 : fltMgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x3f2
fffffadf`2e6beb80 fffff800`012880a0 : fffffadf`36c63230 fffffadf`36c63230 fffffadf`36c63230 fffffadf`37d74470 : fltMgr!FltpDispatch+0x17f
fffffadf`2e6bebe0 fffff800`01291543 : 00000000`00000000 fffffadf`36c63230 00000000`00000000 fffffadf`36c63228 : nt!IopDeleteFile+0x301
fffffadf`2e6bec80 fffff800`010377ea : 00000000`00000000 fffff800`011d8220 fffff800`012914a0 fffffadf`3cc08040 : nt!ObpProcessRemoveObjectQueue+0x15e
fffffadf`2e6bed00 fffff800`0124f922 : fffffadf`3cc08040 00000000`00000080 fffffadf`3cc08040 fffffadf`2e2c36c0 : nt!ExpWorkerThread+0x13b
fffffadf`2e6bed70 fffff800`01020536 : fffffadf`2e2bb180 fffffadf`3cc08040 fffffadf`2e2c36c0 fffff800`011b9e00 : nt!PspSystemThreadStartup+0x3e
fffffadf`2e6bedd0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP:
nt!ExReleaseResourceLite+160
fffff800`010b07ab cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExReleaseResourceLite+160

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  50ea2ecb

FAILURE_BUCKET_ID:  X64_0xE3_nt!ExReleaseResourceLite+160

BUCKET_ID:  X64_0xE3_nt!ExReleaseResourceLite+160

Followup: MachineOwner
---------
Comment
Watch Question
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This problem has been solved!
Unlock 1 Answer and 12 Comments.
See Answer
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE