System Failure Stop Error

From: "Neadom Tucker" <neadom@xxxxxxxxxxxxxxxxxxxxxx>
Date: 20 Mar 2007 23:58:42 -0700

Have been getting some System Failure Errors on my SBS Server. When I
log in it tells me that my computer has shutdown unexpectedly give a
reason.
This is the Event in Event Viewer:
Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1076
Date: 3/20/2007
Time: 11:49:26 PM
User: EVENTS\administrator
Computer: SEVENTS001
Description:
The reason supplied by user EVENTS\Administrator for the last
unexpected shutdown of this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x000000e3 (0x89661b68, 0x895e1db0, 0x00000000,
0x00000002)
Comment: 0x000000e3 (0x89661b68, 0x895e1db0, 0x00000000, 0x00000002)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 05 08 ....

So I ran a Debug an this is what I got.

My Debug Log is as follows:
Opened log file 'c:\debuglog.txt'
0: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/
symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/
download/symbols
0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
..................................................................................................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*
*
* Bugcheck
Analysis *
*
*
*******************************************************************************

RESOURCE_NOT_OWNED (e3)
A thread tried to release a resource it did not own.
Arguments:
Arg1: 89661b68, Address of resource
Arg2: 895e1db0, Address of thread
Arg3: 00000000, Address of owner table if there is one
Arg4: 00000002

Debugging Details:
------------------

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xE3

PROCESS_NAME: explorer.exe

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from 8087c036 to 80827451

STACK_TEXT:
b6402abc 8087c036 000000e3 89661b68 895e1db0 nt!KeBugCheckEx+0x1b
b6402af0 8087c041 bf86db80 00000000 e4a59350 nt!ExReleaseResourceLite
+0x12a
b6402af4 bf86db80 00000000 e4a59350 b6402c48 nt!
ExReleaseResourceAndLeaveCriticalRegion+0x5
b6402b08 bf888a81 e4a59350 0000000a 00000008 win32k!HmgInsertObject
+0x70
b6402b5c bf88dd11 00000001 00000002 00000000 win32k!
PALMEMOBJ::bCreatePalette+0x283
b6402ca4 bf88e3ca 00000001 00000000 00000000 win32k!
GreSetDIBitsToDeviceInternal+0x679
b6402d1c 80888c6c 0901030c 00000000 00000000 win32k!
NtGdiSetDIBitsToDeviceInternal+0xc0
b6402d1c 7c82ed54 0901030c 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be
wrong.
00bff268 00000000 00000000 00000000 00000000 0x7c82ed54

STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!HmgInsertObject+70
bf86db80 8bc7 mov eax,edi

SYMBOL_STACK_INDEX: 3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 434471b4

SYMBOL_NAME: win32k!HmgInsertObject+70

FAILURE_BUCKET_ID: 0xE3_win32k!HmgInsertObject+70

BUCKET_ID: 0xE3_win32k!HmgInsertObject+70

Followup: MachineOwner
---------

eax=ffdff13c ebx=895e1db0 ecx=00000000 edx=00000000 esi=ffdff120
edi=895e1db0
eip=80827451 esp=b6402aa4 ebp=b6402abc iopl=0 nv up ei ng nz
na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KeBugCheckEx+0x1b:
80827451 5d pop ebp
ChildEBP RetAddr Args to Child
b6402abc 8087c036 000000e3 89661b68 895e1db0 nt!KeBugCheckEx+0x1b
(FPO: [Non-Fpo])
b6402af0 8087c041 bf86db80 00000000 e4a59350 nt!ExReleaseResourceLite
+0x12a (FPO: [Non-Fpo])
b6402af4 bf86db80 00000000 e4a59350 b6402c48 nt!
ExReleaseResourceAndLeaveCriticalRegion+0x5 (FPO: [0,0,0])
b6402b08 bf888a81 e4a59350 0000000a 00000008 win32k!HmgInsertObject
+0x70 (FPO: [Non-Fpo])
b6402b5c bf88dd11 00000001 00000002 00000000 win32k!
PALMEMOBJ::bCreatePalette+0x283 (FPO: [Non-Fpo])
b6402ca4 bf88e3ca 00000001 00000000 00000000 win32k!
GreSetDIBitsToDeviceInternal+0x679 (FPO: [Non-Fpo])
b6402d1c 80888c6c 0901030c 00000000 00000000 win32k!
NtGdiSetDIBitsToDeviceInternal+0xc0 (FPO: [Non-Fpo])
b6402d1c 7c82ed54 0901030c 00000000 00000000 nt!KiFastCallEntry+0xfc
(FPO: [0,0] TrapFrame @ b6402d64)
WARNING: Frame IP not in any known module. Following frames may be
wrong.
00bff268 00000000 00000000 00000000 00000000 0x7c82ed54
start end module name
80800000 80a53000 nt ntkrpamp.exe Thu Mar 24 20:28:04 2005
(42435B14)
80a53000 80a7f000 hal halaacpi.dll Thu Mar 24 20:28:37 2005
(42435B35)
b44ae000 b4510000 SPBBCDrv SPBBCDrv.sys Tue Apr 11 19:55:08 2006
(443C41DC)
b4650000 b4661f20 naveng naveng.sys Mon Jan 22 20:05:17 2007
(45B55F4D)
b4662000 b4730740 navex15 navex15.sys Mon Jan 22 20:39:38 2007
(45B5675A)
b4731000 b4789000 savrt savrt.sys Wed Sep 06 17:26:23 2006
(44FF3CFF)
b4789000 b479d000 Savrtpel Savrtpel.sys Wed Sep 06 17:26:26 2006
(44FF3D02)
b479d000 b47bf000 SYMEVENT SYMEVENT.SYS Mon Sep 18 20:52:19 2006
(450F3F43)
b47bf000 b47dc000 EraserUtilDrvI1 EraserUtilDrvI1.sys Wed Jan 31
19:54:39 2007 (45C13A4F)
b50ec000 b5119000 RDPWD RDPWD.SYS Wed Jun 15 11:33:14 2005
(42B04A3A)
b52f9000 b5304000 TDTCP TDTCP.SYS Thu Mar 24 20:27:15 2005
(42435AE3)
b6019000 b6043000 Fastfat Fastfat.SYS Thu Mar 24 20:40:20 2005
(42435DF4)
b6913000 b6963000 HTTP HTTP.sys Thu Mar 24 20:40:36 2005
(42435E04)
b6a97000 b6a99780 FileVol FileVol.SYS Mon Jun 26 18:43:02 2006
(44A062F6)
b6b0b000 b6b19000 ipfltdrv ipfltdrv.sys Thu Mar 24 20:33:57 2005
(42435C75)
b6bbb000 b6c27000 srv srv.sys Fri Sep 01 10:32:26 2006
(44F8447A)
b6c4f000 b6c83000 mrxdav mrxdav.sys Thu Mar 24 20:30:11 2005
(42435B93)
b6e75000 b6ea4e60 exifs exifs.sys Thu Aug 25 20:29:05 2005
(430E6251)
b70e5000 b70fa000 Cdfs Cdfs.SYS Thu Mar 24 20:40:55 2005
(42435E17)
b70fa000 b715b000 eeCtrl eeCtrl.sys Wed Jan 31 19:54:39 2007
(45C13A4F)
b817a000 b818b000 Fips Fips.SYS Thu Mar 24 20:40:33 2005
(42435E01)
b818b000 b820b000 mrxsmb mrxsmb.sys Mon May 08 13:18:45 2006
(445F7D75)
b9234000 b926d000 rdbss rdbss.sys Mon May 08 13:18:53 2006
(445F7D7D)
b9429000 b9453000 afd afd.sys Thu Mar 24 20:40:43 2005
(42435E0B)
b9453000 b9484000 netbt netbt.sys Thu Mar 24 20:40:31 2005
(42435DFF)
b9484000 b94e5000 tcpip tcpip.sys Tue May 23 21:02:22 2006
(4473B09E)
b9525000 b953e000 ipsec ipsec.sys Thu Mar 24 20:40:49 2005
(42435E11)
b974c000 b9760000 usbhub usbhub.sys Thu Mar 24 20:30:46 2005
(42435BB6)
b97a7000 b97e7000 update update.sys Thu Mar 24 20:40:27 2005
(42435DFB)
b97e7000 b981e000 rdpdr rdpdr.sys Thu Mar 24 20:30:20 2005
(42435B9C)
b988e000 b9898000 Dxapi Dxapi.sys Tue Mar 25 03:06:01 2003
(3E7FFFD9)
b989e000 b98ad000 dump_arc dump_arc.sys Thu Feb 03 21:05:58 2005
(4202D886)
b98ae000 b98b8000 dump_storport dump_storport.sys Thu Mar 24
20:28:56 2005 (42435B48)
b98be000 b98d2000 psched psched.sys Thu Mar 24 20:33:35 2005
(42435C5F)
b98d2000 b98e5000 raspptp raspptp.sys Thu Mar 24 20:40:43 2005
(42435E0B)
b98e5000 b98ff000 ndiswan ndiswan.sys Thu Mar 24 20:40:46 2005
(42435E0E)
b98ff000 b9914000 rasl2tp rasl2tp.sys Thu Mar 24 20:40:29 2005
(42435DFD)
b9914000 b9955280 smwdm smwdm.sys Mon Jun 07 17:26:53 2004
(40C4DD9D)
b9956000 b996a000 redbook redbook.sys Thu Mar 24 20:28:46 2005
(42435B3E)
b996a000 b997f000 cdrom cdrom.sys Thu Mar 24 20:28:57 2005
(42435B49)
b997f000 b99a7000 ks ks.sys Thu Mar 24 20:41:03 2005
(42435E1F)
b99a7000 b99bc000 drmk drmk.sys Thu Mar 24 20:30:34 2005
(42435BAA)
b99bc000 b99e5000 portcls portcls.sys Thu Mar 24 20:40:46 2005
(42435E0E)
b99e5000 b99fd000 parport parport.sys Thu Mar 24 20:28:25 2005
(42435B29)
b99fd000 b9a10000 i8042prt i8042prt.sys Thu Mar 24 20:41:05 2005
(42435E21)
b9a10000 b9a25000 serial serial.sys Thu Mar 24 20:28:29 2005
(42435B2D)
b9a25000 b9a4f000 USBPORT USBPORT.SYS Thu Mar 24 20:30:43 2005
(42435BB3)
b9a4f000 b9a6a000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 20:29:53 2005
(42435B81)
b9a6a000 b9c393c0 nv4_mini nv4_mini.sys Wed Apr 07 22:30:48 2004
(4074B958)
ba74e000 ba756000 RDPCDD RDPCDD.sys Tue Mar 25 03:03:05 2003
(3E7FFF29)
ba756000 ba75e000 mnmdd mnmdd.SYS Tue Mar 25 03:07:53 2003
(3E800049)
ba75e000 ba765000 Beep Beep.SYS Tue Mar 25 03:03:04 2003
(3E7FFF28)
ba766000 ba76d000 Null Null.SYS Tue Mar 25 03:03:05 2003
(3E7FFF29)
ba76e000 ba776000 Fs_Rec Fs_Rec.SYS Tue Mar 25 03:08:36 2003
(3E800074)
ba786000 ba78e000 audstub audstub.sys Tue Mar 25 03:09:12 2003
(3E800098)
ba78e000 ba796000 msmpu401 msmpu401.sys Tue Mar 25 03:09:16 2003
(3E80009C)
ba796000 ba79b200 RTL8139 RTL8139.SYS Fri Jun 13 01:29:46 2003
(3EE9614A)
bad7f000 bad88000 watchdog watchdog.sys Thu Mar 24 20:30:19 2005
(42435B9B)
bad8f000 bad9e000 intelppm intelppm.sys Thu Mar 24 20:28:40 2005
(42435B38)
badcf000 badd8a40 V2IMount V2IMount.SYS Mon Jun 26 18:46:01 2006
(44A063A9)
baddf000 badec000 netbios netbios.sys Thu Mar 24 20:33:21 2005
(42435C51)
badef000 badfc000 wanarp wanarp.sys Thu Mar 24 20:34:07 2005
(42435C7F)
bae0f000 bae1c000 Npfs Npfs.SYS Thu Mar 24 20:30:04 2005
(42435B8C)
bafb0000 bafb2780 gameenum gameenum.sys Tue Mar 25 03:10:22 2003
(3E8000DE)
bf800000 bf9d0000 win32k win32k.sys Wed Oct 05 20:37:08 2005
(434471B4)
bf9d0000 bf9e6000 dxg dxg.sys Thu Mar 24 20:27:25 2005
(42435AED)
bf9e6000 bfdf9a80 nv4_disp nv4_disp.dll Thu Mar 24 22:31:21 2005
(424377F9)
bff60000 bff7e000 RDPDD RDPDD.dll Thu Mar 24 22:30:48 2005
(424377D8)
bffa0000 bffea000 ATMFD ATMFD.DLL Thu Mar 24 22:30:36 2005
(424377CC)
f7203000 f7218980 SymSnap SymSnap.sys Thu Apr 13 18:35:30 2006
(443ED232)
f7219000 f723e000 fltmgr fltmgr.sys Mon Aug 21 05:59:45 2006
(44E98411)
f723e000 f7251000 CLASSPNP CLASSPNP.SYS Thu Mar 24 20:40:23 2005
(42435DF7)
f7251000 f726b000 storport storport.sys Thu Mar 24 20:28:57 2005
(42435B49)
f726b000 f728a000 SCSIPORT SCSIPORT.SYS Thu Mar 24 20:40:26 2005
(42435DFA)
f728a000 f72a2e80 adpu160m adpu160m.sys Mon Sep 17 16:55:53 2001
(3BA66359)
f72a3000 f72bf000 atapi atapi.sys Thu Mar 24 20:28:49 2005
(42435B41)
f72bf000 f72e9000 volsnap volsnap.sys Thu Mar 24 20:29:10 2005
(42435B56)
f72e9000 f7315000 dmio dmio.sys Thu Mar 24 20:30:02 2005
(42435B8A)
f7315000 f733c000 ftdisk ftdisk.sys Thu Mar 24 20:29:00 2005
(42435B4C)
f733c000 f7352000 pci pci.sys Thu Mar 24 20:34:14 2005
(42435C86)
f7352000 f7386000 ACPI ACPI.sys Thu Mar 24 20:34:09 2005
(42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 03:13:00 2003
(3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 03:16:35 2003
(3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 20:28:48 2005
(42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 20:27:23 2005
(42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 20:40:34 2005
(42435E02)
f74d7000 f74df800 aac aac.sys Tue Apr 06 15:52:06 2004
(40730A66)
f74e7000 f74f6000 arc arc.sys Thu Feb 03 21:05:58 2005
(4202D886)
f74f7000 f7507000 disk disk.sys Thu Mar 24 20:28:58 2005
(42435B4A)
f7507000 f7513000 Dfs Dfs.sys Thu Mar 24 20:30:28 2005
(42435BA4)
f7517000 f7527000 uagp35 uagp35.sys Thu Mar 24 20:34:11 2005
(42435C83)
f7527000 f7531000 crcdisk crcdisk.sys Thu Mar 24 20:29:40 2005
(42435B74)
f7537000 f7547000 agp440 agp440.sys Thu Mar 24 20:34:11 2005
(42435C83)
f7557000 f7561000 kbdclass kbdclass.sys Tue Mar 25 03:03:10 2003
(3E7FFF2E)
f7567000 f7576000 raspppoe raspppoe.sys Thu Mar 24 20:34:16 2005
(42435C88)
f7577000 f7582000 ptilink ptilink.sys Thu Mar 24 20:28:25 2005
(42435B29)
f7587000 f7590000 mssmbios mssmbios.sys Thu Mar 24 20:34:14 2005
(42435C86)
f7597000 f75a2000 TDI TDI.SYS Thu Mar 24 20:35:34 2005
(42435CD6)
f75a7000 f75b5000 msgpc msgpc.sys Thu Mar 24 20:33:31 2005
(42435C5B)
f75b7000 f75c1000 flpydisk flpydisk.sys Tue Mar 25 03:04:32 2003
(3E7FFF80)
f75c7000 f75d5000 NDProxy NDProxy.SYS Thu Mar 24 20:34:13 2005
(42435C85)
f75d7000 f75e0000 raspti raspti.sys Thu Mar 24 20:34:16 2005
(42435C88)
f75e7000 f75f6000 termdd termdd.sys Thu Mar 24 20:27:15 2005
(42435AE3)
f75f7000 f7604000 Modem Modem.SYS Tue Mar 25 03:14:40 2003
(3E8001E0)
f7617000 f7620000 ndistapi ndistapi.sys Thu Mar 24 20:34:11 2005
(42435C83)
f7647000 f7653000 TAPE TAPE.SYS Thu Mar 24 20:29:01 2005
(42435B4D)
f7667000 f7673000 vga vga.sys Thu Mar 24 20:29:54 2005
(42435B82)
f7677000 f7681000 mouclass mouclass.sys Tue Mar 25 03:03:09 2003
(3E7FFF2D)
f7687000 f7692000 fdc fdc.sys Thu Mar 24 20:28:43 2005
(42435B3B)
f7697000 f76a2000 Msfs Msfs.SYS Thu Mar 24 20:30:04 2005
(42435B8C)
f76b7000 f76c1000 serenum serenum.sys Thu Mar 24 20:28:27 2005
(42435B2B)
f76e0000 f7707000 KSecDD KSecDD.sys Thu Mar 24 20:28:53 2005
(42435B45)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 03:08:00 2003
(3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 03:07:58 2003
(3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 03:04:46 2003
(3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Thu Mar 24 20:28:48 2005
(42435B40)
f7727000 f772e000 dmload dmload.sys Tue Mar 25 03:08:08 2003
(3E800058)
f7737000 f773da00 usbehci usbehci.sys Thu Mar 24 20:30:43 2005
(42435BB3)
f7747000 f774f000 stdatw2k stdatw2k.sys Fri Aug 27 10:21:10 2004
(412F4356)
f7767000 f776e000 GearAspiWDM GearAspiWDM.SYS Wed Feb 02 00:19:49
2005 (420062F5)
f776f000 f7777000 rasacd rasacd.sys Tue Mar 25 03:11:50 2003
(3E800136)
f7777000 f777e000 dxgthk dxgthk.sys Tue Mar 25 03:05:52 2003
(3E7FFFD0)
f778f000 f7796000 parvdm parvdm.sys Tue Mar 25 03:03:49 2003
(3E7FFF55)
f781f000 f7824180 usbuhci usbuhci.sys Thu Mar 24 20:30:45 2005
(42435BB5)
f7842000 f7861000 Mup Mup.sys Thu Mar 24 20:40:49 2005
(42435E11)
f7861000 f7897000 NDIS NDIS.sys Thu Mar 24 20:40:26 2005
(42435DFA)
f79a5000 f79a6420 ASACPI ASACPI.sys Thu Aug 12 22:52:52 2004
(411C2D04)
f79a7000 f79a8280 swenum swenum.sys Thu Mar 24 20:27:42 2005
(42435AFE)
f79ad000 f79ae580 USBD USBD.SYS Tue Mar 25 03:10:39 2003
(3E8000EF)
f7b4a000 f7bdf000 Ntfs Ntfs.sys Thu Mar 24 20:40:29 2005
(42435DFD)

Unloaded modules:
b4650000 b4662000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b4662000 b4731000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b70dd000 b70fa000 EraserUtilRe
Timestamp: unavailable (00000000)
Checksum: 00000000
badbf000 badcd000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba776000 ba77b000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba77e000 ba786000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

Can anyone point me in the right direction?

Thanks for your help.

Neadom Tucker

.

Follow-Ups:
- RE: System Failure Stop Error
  - From: Terence Liu [MSFT]

Prev by Date: RE: Logoff / Slow Bootups / Outlook attachements / Outlook Not respond
Next by Date: Re: ISA 2004 and a ftp on a unix box, how to get there.
Previous by thread: RE: WSUS from R2 CD installation stops @ 75% (progress bar)
Next by thread: RE: System Failure Stop Error
Index(es):
- Date
- Thread

Relevant Pages

STOP 0XD1 Error on XP SP2
... WARNING: Frame IP not in any known module. ... Timestamp: unavailable ... Checksum: 00000000 ...
(microsoft.public.windowsxp.help_and_support)
RE: System Failure Stop Error
... unexpected shutdown of this computer is: System Failure: Stop error ... Reason Code: 0x805000f ... | Timestamp: unavailable ...
(microsoft.public.windows.server.sbs)
Windows XP crashing after every boot and login
... My desktop Windows XP SP2 is crashing after every boot and login attempt. ... Frame IP not in any known module. ... Timestamp: unavailable ... Checksum: ...
(microsoft.public.windowsxp.help_and_support)
Re: Crash dump help!
... but the driver responsible for this is not easy to find. ... Frame IP not in any known module. ... Timestamp: unavailable ... Checksum: 00000000 ...
(microsoft.public.windowsxp.general)
Crash dump help!
... Frame IP not in any known module. ... FOLLOWUP_NAME: MachineOwner ... Timestamp: unavailable ... Checksum: 00000000 ...
(microsoft.public.windowsxp.general)