Loading Dump File [Mini080203-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\windows\symbols\winxp*[url]http://msdl.microsoft.com/do[/url]
wnload/symbols
Executable search path is: C:\TEMP\xp_cd\I386
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp1.020828-1920
Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054be30
Debug session time: Sat Aug 02 16:36:37 2003
System Uptime: 0 days 5:20:31.367
Loading Kernel Symbols
................................................................................
..........................................
Loading unloaded module list
.........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, c3e, b86f, ffb72be0}
!analyze -v
Bad allocation size @ffb72bd8, zero is invalid
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFFFB72BD8)
***
*** Use !poolval ffb72000 for more details.
***
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SY
S
Probably caused by : SYMEVENT.SYS ( SYMEVENT+6264 )
Followup: MachineOwner
---------
kd> ****************************************************************************
***
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQ
L level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000c3e, (reserved)
Arg3: 0000b86f, Memory contents of the pool block
Arg4: ffb72be0, Address of the block of pool being deallocated
Debugging Details:
------------------
Bad allocation size @ffb72bd8, zero is invalid
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFFFFFFB72BD8)
***
*** Use !poolval ffb72000 for more details.
***
BUGCHECK_STR: 0xc2_7
DEFAULT_BUCKET_ID: DRIVER_FAULT
LAST_CONTROL_TRANSFER: from 8053d4a1 to 805266db
STACK_TEXT:
f9987a00 8053d4a1 000000c2 00000007 00000c3e nt!KeBugCheckEx+0x19
f9987a48 baeed80d ffb72be0 00000000 8134c898 nt!ExFreePoolWithTag+0x237
f9987a70 baec1b70 ff915838 f9987aa0 f9987aa5 Ntfs!NtfsDeleteFcb+0x76
f9987ac0 baeedac7 ff915838 8134c738 e11065d8 Ntfs!NtfsTeardownFromLcb+0x1ff
f9987b18 baebcf02 ff915838 e11066a0 00000000 Ntfs!NtfsTeardownStructures+0x127
f9987b44 baedd8a7 ff915838 011066a0 00000000 Ntfs!NtfsDecrementCloseCounts+0x9c
f9987bcc baedd715 ff915838 e11066a0 e11065d8 Ntfs!NtfsCommonClose+0x37a
f9987c6c 804eca36 8134c658 ff744678 f9987cc4 Ntfs!NtfsFsdClose+0x1f3
f9987c7c f640d264 00000000 f9987cc4 811c6108 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
f9987d28 8057e49d 00b3f5f0 ffb3f5d8 00000000 SYMEVENT+0x6264
f9987d44 804ecc07 ffb3f5f0 00000000 806c9158 nt!ObpRemoveObjectRoutine+0xdd
f9987d68 804e6e38 8054c478 ffb3f878 806c9190 nt!ObfDereferenceObject+0x5d
f9987d8c 804dfecb e1117370 00000000 8133cda8 nt!MiSegmentDelete+0xdb
f9987dac 8057c73a 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0x9c
f9987ddc 805124c1 804dfe37 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FOLLOWUP_IP:
SYMEVENT+6264
f640d264 ?? ???
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: SYMEVENT+6264
MODULE_NAME: SYMEVENT
IMAGE_NAME: SYMEVENT.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 3ec1d807
STACK_COMMAND: kb
BUCKET_ID: 0xc2_7_SYMEVENT+6264
Followup: MachineOwner