Guys,
i never used hyper-v before. I installed it and when rying to create a v-switch, i get an error:
http://nl.tinypic.com/view.php?pic=o9kcnd&s=8#.Va6F3PmqhBc
anyone who van help me? Its a little bit frustrating, one tries to use a (for me) new feature and it doesn't work from scrath.
I googled and found the same error with a wireless adapter, but i dont have that installed.
I have several virtual (hyper-v) Windows 2012 R2 servers that crashes at the same time at night with the same error.
Bagcheck code is 0x00000019 (0x0000000000000020, 0xffffe0001bf77000, 0xffffe0001bf772c0, 0x000000000c2c0000)
At this time Sophos AV begins scheduled scan job. Analysis of dump file shows that
Probably caused by : spaceport.sys ( spaceport!SpSpaceDeviceControl+193 )
Excluding spaceport.sys file from scan does not resolve issue.
Here are MEMORY.DMP AND minidump files code:
Minidump
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
Microsoft (R) Windows Debugger Version 6.3.9600.17336 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\V158447\Documents\tmp\071715-12453-01_fs02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is: srv*
Windows 8 Kernel Version 9600 MP (2 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 9600.17736.amd64fre.winblue_r9.150322-1500
Machine Name:
Kernel base = 0xfffff800`bba18000 PsLoadedModuleList = 0xfffff800`bbcf1850
Debug session time: Fri Jul 17 01:37:47.145 2015 (UTC - 5:00)
System Uptime: 0 days 23:59:11.892
Loading Kernel Symbols
...............................................................
................................................................
......
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, ffffe0001bf77000, ffffe0001bf772c0, c2c0000}
Probably caused by : spaceport.sys ( spaceport!SpSpaceDeviceControl+193 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: ffffe0001bf77000, The pool entry we were looking for within the page.
Arg3: ffffe0001bf772c0, The next pool entry.
Arg4: 000000000c2c0000, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff800bbd7b138
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
ffffe0001bf77000
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER
PROCESS_NAME: SavService.exe
CURRENT_IRQL: 1
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
IRP_ADDRESS: ffffe0001bc8f9b8
LAST_CONTROL_TRANSFER: from fffff800bbcbd0f4 to fffff800bbb68ca0
STACK_TEXT:
ffffd000`22cd71e8 fffff800`bbcbd0f4 : 00000000`00000019 00000000`00000020 ffffe000`1bf77000 ffffe000`1bf772c0 : nt!KeBugCheckEx
ffffd000`22cd71f0 fffff800`bbacb7f4 : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`0000002c : nt!ExAllocatePoolWithTag+0x1204
ffffd000`22cd72e0 fffff800`bbacffe1 : ffffe000`1bc8fa30 ffffd000`22cd7540 00000000`00000001 ffffe000`1bc8fcb3 : nt!IopCompleteRequest+0xc4
ffffd000`22cd7440 fffff800`338069f3 : 00000000`00000000 ffffe000`195ad601 00000000`00800004 ffffc000`bee2f924 : nt!IopfCompleteRequest+0x291
ffffd000`22cd7580 fffff800`3423f808 : 00000000`00000000 ffffd000`22cd76c0 ffffe000`1bc8fcb0 00000000`0004d004 : spaceport!SpSpaceDeviceControl+0x193
ffffd000`22cd75c0 fffff800`3420d84c : ffffe000`1bbde650 ffffd000`22cd7870 00000000`0004d004 fffff800`bbe50806 : CLASSPNP!ClassDeviceControl+0x13b68
ffffd000`22cd7730 fffff800`3422c64c : ffffe000`1bc7f1b0 00000000`00000001 ffffe000`1bc8fa30 ffffe000`195a9190 : disk!DiskDeviceControl+0x8c
ffffd000`22cd77c0 fffff800`33a2805d : ffffe000`1bc8fa30 ffffe000`1bc8fa30 ffffbd68`5f306b00 ffffc000`00000000 : CLASSPNP!ClassDeviceControlDispatch+0x2c
ffffd000`22cd77f0 fffff800`33a1d813 : ffffe000`1bc8fa00 00000000`00000000 00000000`00000000 ffffe000`1bc8fa30 : partmgr!PmIoctlRedirect+0x4d
ffffd000`22cd7860 fffff800`bbe8d9fc : 00000000`00000000 ffffd000`22cd7cc0 ffffe000`1bc7f1b0 fffff800`bbdb7ba3 : partmgr!PmFilterDeviceControl+0xd3
ffffd000`22cd78b0 fffff800`bbe8d6c6 : 00000000`00000000 ffffd000`22cd7cc0 ffffe000`1bc8fcf8 ffffe000`1bc8fa30 : nt!RawReadWriteDeviceControl+0xe4
ffffd000`22cd78f0 fffff800`33c07101 : ffffe000`1be19060 ffffe000`1be19060 ffffe000`1bc8fa30 00000000`00000000 : nt!RawDispatch+0xb6
ffffd000`22cd7960 fffff800`bbe3d77f : 00000000`00000001 ffffd000`22cd7cc0 ffffe000`1bc8fa30 00000000`00000001 : fltmgr!FltpDispatch+0xf1
ffffd000`22cd79c0 fffff800`bbe3cd22 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xa4f
ffffd000`22cd7b60 fffff800`bbb744b3 : ffffd000`22cd7cc0 fffff800`bbe9f99f ffffd000`00000001 00000000`02a6e238 : nt!NtDeviceIoControlFile+0x56
ffffd000`22cd7bd0 00000000`770a2352 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02a6ead8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770a2352
STACK_COMMAND: kb
FOLLOWUP_IP:
spaceport!SpSpaceDeviceControl+193
fffff800`338069f3 85db test ebx,ebx
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: spaceport!SpSpaceDeviceControl+193
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: spaceport
IMAGE_NAME: spaceport.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 54505527
IMAGE_VERSION: 6.3.9600.17415
BUCKET_ID_FUNC_OFFSET: 193
FAILURE_BUCKET_ID: 0x19_20_spaceport!SpSpaceDeviceControl
BUCKET_ID: 0x19_20_spaceport!SpSpaceDeviceControl
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x19_20_spaceport!spspacedevicecontrol
FAILURE_ID_HASH: {856d5b8f-6bfc-cd5c-1543-fe1594ace9a5}
Followup: MachineOwner
---------
1: kd> lmvm spaceport
start end module name
fffff800`33800000 fffff800`33869000 spaceport (pdb symbols) C:\ProgramData\dbg\sym\spaceport.pdb\514293C6261C4E3D8C3584C9494E72F11\spaceport.pdb
Loaded symbol image file: spaceport.sys
Mapped memory image file: C:\ProgramData\dbg\sym\spaceport.sys\5450552769000\spaceport.sys
Image path: \SystemRoot\System32\drivers\spaceport.sys
Image name: spaceport.sys
Timestamp: Tue Oct 28 21:47:03 2014 (54505527)
CheckSum: 00072C4C
ImageSize: 00069000
File version: 6.3.9600.17415
Product version: 6.3.9600.17415
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: spaceport.sys
OriginalFilename: spaceport.sys
ProductVersion: 6.3.9600.17415
FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
FileDescription: Storage Spaces Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.MEMORY.DMP
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
Microsoft (R) Windows Debugger Version 6.3.9600.17336 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\V158447\Documents\tmp\MEMORY_fs02.DMP]
Kernel Bitmap Dump File: Only kernel address space is available
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is: srv*
Windows 8 Kernel Version 9600 MP (2 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 9600.17736.amd64fre.winblue_r9.150322-1500
Machine Name:
Kernel base = 0xfffff800`bba18000 PsLoadedModuleList = 0xfffff800`bbcf1850
Debug session time: Fri Jul 17 01:37:47.145 2015 (UTC - 5:00)
System Uptime: 0 days 23:59:11.892
Loading Kernel Symbols
...............................................................
................................................................
......
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7f5e6018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, ffffe0001bf77000, ffffe0001bf772c0, c2c0000}
Probably caused by : spaceport.sys ( spaceport!SpSpaceDeviceControl+193 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: ffffe0001bf77000, The pool entry we were looking for within the page.
Arg3: ffffe0001bf772c0, The next pool entry.
Arg4: 000000000c2c0000, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
ffffe0001bf77000
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: SavService.exe
CURRENT_IRQL: 1
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
IRP_ADDRESS: ffffe0001bc8f9b8
LAST_CONTROL_TRANSFER: from fffff800bbcbd0f4 to fffff800bbb68ca0
STACK_TEXT:
ffffd000`22cd71e8 fffff800`bbcbd0f4 : 00000000`00000019 00000000`00000020 ffffe000`1bf77000 ffffe000`1bf772c0 : nt!KeBugCheckEx
ffffd000`22cd71f0 fffff800`bbacb7f4 : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`0000002c : nt!ExAllocatePoolWithTag+0x1204
ffffd000`22cd72e0 fffff800`bbacffe1 : ffffe000`1bc8fa30 ffffd000`22cd7540 00000000`00000001 ffffe000`1bc8fcb3 : nt!IopCompleteRequest+0xc4
ffffd000`22cd7440 fffff800`338069f3 : 00000000`00000000 ffffe000`195ad601 00000000`00800004 ffffc000`bee2f924 : nt!IopfCompleteRequest+0x291
ffffd000`22cd7580 fffff800`3423f808 : 00000000`00000000 ffffd000`22cd76c0 ffffe000`1bc8fcb0 00000000`0004d004 : spaceport!SpSpaceDeviceControl+0x193
ffffd000`22cd75c0 fffff800`3420d84c : ffffe000`1bbde650 ffffd000`22cd7870 00000000`0004d004 fffff800`bbe50806 : CLASSPNP!ClassDeviceControl+0x13b68
ffffd000`22cd7730 fffff800`3422c64c : ffffe000`1bc7f1b0 00000000`00000001 ffffe000`1bc8fa30 ffffe000`195a9190 : disk!DiskDeviceControl+0x8c
ffffd000`22cd77c0 fffff800`33a2805d : ffffe000`1bc8fa30 ffffe000`1bc8fa30 ffffbd68`5f306b00 ffffc000`00000000 : CLASSPNP!ClassDeviceControlDispatch+0x2c
ffffd000`22cd77f0 fffff800`33a1d813 : ffffe000`1bc8fa00 00000000`00000000 00000000`00000000 ffffe000`1bc8fa30 : partmgr!PmIoctlRedirect+0x4d
ffffd000`22cd7860 fffff800`bbe8d9fc : 00000000`00000000 ffffd000`22cd7cc0 ffffe000`1bc7f1b0 fffff800`bbdb7ba3 : partmgr!PmFilterDeviceControl+0xd3
ffffd000`22cd78b0 fffff800`bbe8d6c6 : 00000000`00000000 ffffd000`22cd7cc0 ffffe000`1bc8fcf8 ffffe000`1bc8fa30 : nt!RawReadWriteDeviceControl+0xe4
ffffd000`22cd78f0 fffff800`33c07101 : ffffe000`1be19060 ffffe000`1be19060 ffffe000`1bc8fa30 00000000`00000000 : nt!RawDispatch+0xb6
ffffd000`22cd7960 fffff800`bbe3d77f : 00000000`00000001 ffffd000`22cd7cc0 ffffe000`1bc8fa30 00000000`00000001 : fltmgr!FltpDispatch+0xf1
ffffd000`22cd79c0 fffff800`bbe3cd22 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xa4f
ffffd000`22cd7b60 fffff800`bbb744b3 : ffffd000`22cd7cc0 fffff800`bbe9f99f ffffd000`00000001 00000000`02a6e238 : nt!NtDeviceIoControlFile+0x56
ffffd000`22cd7bd0 00000000`770a2352 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02a6ead8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770a2352
STACK_COMMAND: kb
FOLLOWUP_IP:
spaceport!SpSpaceDeviceControl+193
fffff800`338069f3 85db test ebx,ebx
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: spaceport!SpSpaceDeviceControl+193
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: spaceport
IMAGE_NAME: spaceport.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 54505527
BUCKET_ID_FUNC_OFFSET: 193
FAILURE_BUCKET_ID: 0x19_20_spaceport!SpSpaceDeviceControl
BUCKET_ID: 0x19_20_spaceport!SpSpaceDeviceControl
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x19_20_spaceport!spspacedevicecontrol
FAILURE_ID_HASH: {856d5b8f-6bfc-cd5c-1543-fe1594ace9a5}
Followup: MachineOwner
---------
1: kd> lmvm spaceport
start end module name
fffff800`33800000 fffff800`33869000 spaceport (pdb symbols) C:\ProgramData\dbg\sym\spaceport.pdb\514293C6261C4E3D8C3584C9494E72F11\spaceport.pdb
Loaded symbol image file: spaceport.sys
Image path: \SystemRoot\System32\drivers\spaceport.sys
Image name: spaceport.sys
Timestamp: Tue Oct 28 21:47:03 2014 (54505527)
CheckSum: 00072C4C
ImageSize: 00069000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4I also noticed that BSOD appears when Sophos AV tries to scan MBR.
We use Sophos AV inside the VMs.We have 4 of 9 problem systems that were deployed form one template.
When I disable MBR scan in AV - scan completes successfully. But I think that it's not a secure way to resolve the issue.
Could anyone help me to resolve this issue?
Hi!
How can I hide status bar on Hyper-V VMC? It takes a lot of space with resolution 1366x768!
The toolbar I can successfully hide, but status bar no.
Hello,
My home server is a Dell Dimension E521 running Windows Server 2008 x64 using the following hardware:
I am trying to run a VM using Hyper V but get the following error when starting the machine:
The Dell BIOS in this particular machine enables hardware virtualization by default despite not offering an option in the setup utility. SecurAble shows that the machine is capable of running virtualization:
The SecurAble test was run with Hyper-V installed and enabled which does seem strange as I was told that Hardware Virtualization showed as NO when in this state. I don't know of this has something to do with the machines being configured via RDP but I can't see why it would.
All help is greatly appreciated.
Thanks
Jake.
Hi,
I have got the sample script @(https://github.com/rrader/hue-build/blob/master/sandbox/hypervv2.py ) in python using WMI to create vm, set Memory, set cpu, add vhd and add network, but not able to find how to add vlan.
I am new to WMI api and not able to figure out how to use api to set vlan id.
It will great help if you provide example or sample how to set vlan id.
Thanks in Advance
I'm trying to see if there is any way to cost-effectively build a 2 Server Hyper-V cluster that can run 100 high-performing Windows 7 virtual machines that will be all have somewhat different apps that users will install and uninstall regularly and have this configuration not cost much more than adding the VMs to existing workstations as client Hyper-V virtual machines.
We would need VMM 2012 R2 so we could delegate limited management ability of each VM to the end user.
The workstations will be doing relatively heavy software development work with many simultaneous applications running. Users currently have i5 workstations with 16GB RAM and SSD drives. They will need similar performance from the VMs.
We are not a candidate for thin clients because the users will need access to 2 systems.
1. Normal office system running as limited user for normal office apps that don't require admin rights, and these will have access to the Internet for email, web and IM.
2. Developer and/or testing workstation requiring admins rights with frequent software installs and uninstalls and ability to run debugging tools.
If we had thin clients, that would double the amount of VDI clients since they would still need both an office workstation and a developer or testing workstation. With a full Windows workstation, their office system can run on the host and the development and testing systems can run in Client Hyper-V.
What kind of hardware would we be looking at for an adequately performing setup with 2 Hyper-V 2012 R2 servers with enough RAM, networking, CPU and disk space and I/O for this load and with virtual SAN for live migration and redundancy?
I suspect that it will be shockingly expensive compared to deploying client Hyper-V or even VMWare Workstation to 100 workstations, but I'd like to see what people say first.
Even if it costs somewhat more, we will consider it if it add great benefits, but not if it drastically more expensive to implement and maintain.
I have a Hyper-V 2012 R2 server running on an old Gigabyte M57SLI-S4 motherboard with a AMD Phenom 9850 Black Edition Quad-Core processor, 8GB of RAM.
I have 6 SATA hard drives, 5 of them in RAID 0, and the 6th in Spanning Mode. The BIOS is fully up-to-date as well. I get an occasional STOP error always 139 whenever I do alot of work on the host PC, at first the stop error I thought was related to a TCP connections issue, but I was able to pull the MEMORY.DMP file and run a debug on it and found it to be caused by the nvraid.sys file? I could use some input on what can be done to help elevate this issue. Below is the debug log I pulled, sorry if it is a long text.
Opened log file 'C:\debuglog.txt'
0: kd> .sympath srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*C:\symbols*http://msdl.microsoft.com/download/symbols
0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
...............................................................
...................................................Page 1ceeac not present in the dump file. Type ".hh dbgerr004" for details
.............
................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00007ff7`4023b018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd000266e2850, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000266e27a8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
Page 116334 not present in the dump file. Type ".hh dbgerr004" for details
TRAP_FRAME: ffffd000266e2850 -- (.trap 0xffffd000266e2850)
.trap 0xffffd000266e2850
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000000003
rdx=fffff801e90ab358 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801e90a1f0c rsp=ffffd000266e29e0 rbp=ffffd000266e2b11
r8=ffffe00106eb8c28 r9=fffff801e90ab358 r10=fffff80136979ca0
r11=fffff78000000008 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nvraid!nvrEnumerateRaidVolume+0x1f0:
fffff801`e90a1f0c cd29 int 29h
.trap
Resetting default scope
EXCEPTION_RECORD: ffffd000266e27a8 -- (.exr 0xffffd000266e27a8)
.exr 0xffffd000266e27a8
ExceptionAddress: fffff801e90a1f0c (nvraid!nvrEnumerateRaidVolume+0x00000000000001f0)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
BUGCHECK_STR: 0x139
PROCESS_NAME: TrustedInstall
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
LAST_CONTROL_TRANSFER: from fffff801367d27e9 to fffff801367c6ca0
STACK_TEXT:
ffffd000`266e2528 fffff801`367d27e9 : 00000000`00000139 00000000`00000003 ffffd000`266e2850 ffffd000`266e27a8 : nt!KeBugCheckEx
ffffd000`266e2530 fffff801`367d2b10 : ffffe001`06eb8b80 ffffc001`f2de7c00 00000000`00000001 ffffe001`06eb8fb0 : nt!KiBugCheckDispatch+0x69
ffffd000`266e2670 fffff801`367d1d34 : 00000000`00000000 fffff801`366e8703 ffffd000`266e2980 00000037`f3aeffff : nt!KiFastFailDispatch+0xd0
ffffd000`266e2850 fffff801`e90a1f0c : ffffe001`06eb8b80 ffffe001`04578001 00000000`00000001 fffff801`366caffb : nt!KiRaiseSecurityCheckFailure+0xf4
ffffd000`266e29e0 fffff801`36749ce2 : ffffe001`06eb8b80 ffffe001`06eb8b80 ffffe001`04578070 fffff801`e965f101 : nvraid!nvrEnumerateRaidVolume+0x1f0
ffffd000`266e2a10 fffff801`36c113b6 : ffffe001`04578101 ffffe001`04578108 ffffe001`04578070 ffffe001`06eb8b80 : nt!IoCancelIrp+0x6a
ffffd000`266e2a50 fffff801`36a188b2 : ffffe001`04578108 00000000`00000000 ffffe001`04578000 0000001e`00000000 : nt! ?? ::NNGAKEGL::`string'+0x70506
ffffd000`266e2a90 fffff801`36ac45c1 : 00000000`00000004 ffffe001`06fd3880 e00105f3`0910fd03 ffffe001`06eb8b80 : nt!IopSynchronousServiceTail+0x4aa
ffffd000`266e2b60 fffff801`36ac43da : ffffe001`06fd3880 00000037`f3a85aa8 00000000`00000000 00000000`00000000 : nt!NtFlushBuffersFileEx+0x1e1
ffffd000`266e2c00 fffff801`367d24b3 : ffffe001`06fd3880 00000000`ffffffff 00000000`00000000 ffffe001`05f30940 : nt!NtFlushBuffersFile+0x16
ffffd000`266e2c40 00007ffc`1fd0167a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000037`f3c3f528 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`1fd0167a
STACK_COMMAND: kb
FOLLOWUP_IP:
nvraid!nvrEnumerateRaidVolume+1f0
fffff801`e90a1f0c cd29 int 29h
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nvraid!nvrEnumerateRaidVolume+1f0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nvraid
IMAGE_NAME: nvraid.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4e6e9d72
BUCKET_ID_FUNC_OFFSET: 1f0
FAILURE_BUCKET_ID: 0x139_3_nvraid!nvrEnumerateRaidVolume
BUCKET_ID: 0x139_3_nvraid!nvrEnumerateRaidVolume
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_nvraid!nvrenumerateraidvolume
FAILURE_ID_HASH: {e49c9131-5b1f-862e-cda0-7f25512dd383}
Followup: MachineOwner
---------
rax=ffffd000266e2630 rbx=ffffe00106eb8b80 rcx=0000000000000139
rdx=0000000000000003 rsi=ffffe00104578001 rdi=ffffe00103fe2060
rip=fffff801367c6ca0 rsp=ffffd000266e2528 rbp=ffffd000266e28d0
r8=ffffd000266e2850 r9=ffffd000266e27a8 r10=0000000000000000
r11=fffff78000000008 r12=0000000000000000 r13=0000000000000000
r14=ffffe00104578108 r15=0000000000000001
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000286
nt!KeBugCheckEx:
fffff801`367c6ca0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffd000`266e2530=0000000000000139
Child-SP RetAddr : Args to Child : Call Site
ffffd000`266e2528 fffff801`367d27e9 : 00000000`00000139 00000000`00000003 ffffd000`266e2850 ffffd000`266e27a8 : nt!KeBugCheckEx
ffffd000`266e2530 fffff801`367d2b10 : ffffe001`06eb8b80 ffffc001`f2de7c00 00000000`00000001 ffffe001`06eb8fb0 : nt!KiBugCheckDispatch+0x69
ffffd000`266e2670 fffff801`367d1d34 : 00000000`00000000 fffff801`366e8703 ffffd000`266e2980 00000037`f3aeffff : nt!KiFastFailDispatch+0xd0
ffffd000`266e2850 fffff801`e90a1f0c : ffffe001`06eb8b80 ffffe001`04578001 00000000`00000001 fffff801`366caffb : nt!KiRaiseSecurityCheckFailure+0xf4 (TrapFrame @ ffffd000`266e2850)
ffffd000`266e29e0 fffff801`36749ce2 : ffffe001`06eb8b80 ffffe001`06eb8b80 ffffe001`04578070 fffff801`e965f101 : nvraid!nvrEnumerateRaidVolume+0x1f0
ffffd000`266e2a10 fffff801`36c113b6 : ffffe001`04578101 ffffe001`04578108 ffffe001`04578070 ffffe001`06eb8b80 : nt!IoCancelIrp+0x6a
ffffd000`266e2a50 fffff801`36a188b2 : ffffe001`04578108 00000000`00000000 ffffe001`04578000 0000001e`00000000 : nt! ?? ::NNGAKEGL::`string'+0x70506
ffffd000`266e2a90 fffff801`36ac45c1 : 00000000`00000004 ffffe001`06fd3880 e00105f3`0910fd03 ffffe001`06eb8b80 : nt!IopSynchronousServiceTail+0x4aa
ffffd000`266e2b60 fffff801`36ac43da : ffffe001`06fd3880 00000037`f3a85aa8 00000000`00000000 00000000`00000000 : nt!NtFlushBuffersFileEx+0x1e1
ffffd000`266e2c00 fffff801`367d24b3 : ffffe001`06fd3880 00000000`ffffffff 00000000`00000000 ffffe001`05f30940 : nt!NtFlushBuffersFile+0x16
ffffd000`266e2c40 00007ffc`1fd0167a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ ffffd000`266e2c40)
00000037`f3c3f528 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`1fd0167a
start end module name
fffff801`35a9b000 fffff801`35aa4000 kd kd.dll Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff801`36606000 fffff801`36676000 hal hal.dll Sun Jun 01 18:49:12 2014 (538BADE8)
fffff801`36676000 fffff801`36e0a000 nt ntkrnlmp.exe Sun Mar 22 18:26:46 2015 (550F41A6)
fffff801`e8e00000 fffff801`e8e5d000 msrpc msrpc.sys Thu Aug 22 07:39:22 2013 (5215F86A)
fffff801`e8e5d000 fffff801`e8e91000 rdpdr rdpdr.sys Thu Aug 22 07:36:46 2013 (5215F7CE)
fffff801`e8ea5000 fffff801`e8eb3000 werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`e8eb3000 fffff801`e8f15000 CLFS CLFS.SYS Tue Mar 03 19:51:05 2015 (54F656F9)
fffff801`e8f15000 fffff801`e8f37000 tm tm.sys Thu Aug 22 07:39:33 2013 (5215F875)
fffff801`e8f37000 fffff801`e8f4c000 PSHED PSHED.dll Sat Sep 14 09:57:19 2013 (52346B3F)
fffff801`e8f4c000 fffff801`e8f56000 BOOTVID BOOTVID.dll Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff801`e8f56000 fffff801`e8fde000 CI CI.dll Fri Dec 05 22:23:28 2014 (548276B0)
fffff801`e9000000 fffff801`e9088000 ACPI ACPI.sys Mon Oct 06 23:29:50 2014 (54335E2E)
fffff801`e9088000 fffff801`e9092000 WMILIB WMILIB.SYS Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`e9092000 fffff801`e90ba000 nvraid nvraid.sys Mon Sep 12 20:01:54 2011 (4E6E9D72)
fffff801`e90e9000 fffff801`e91b8000 Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff801`e91b8000 fffff801`e91c9000 WDFLDR WDFLDR.SYS Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`e91c9000 fffff801`e91e1000 acpiex acpiex.sys Thu Aug 22 07:37:47 2013 (5215F80B)
fffff801`e91e1000 fffff801`e91ec000 WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff801`e9200000 fffff801`e925f000 volmgrx volmgrx.sys Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`e925f000 fffff801`e926e000 PCIIDEX PCIIDEX.SYS Thu Aug 22 07:39:41 2013 (5215F87D)
fffff801`e9285000 fffff801`e9310000 cng cng.sys Sun Mar 29 18:22:05 2015 (55187B0D)
fffff801`e932b000 fffff801`e9373000 pci pci.sys Thu Jul 24 07:45:24 2014 (53D0F1D4)
fffff801`e9373000 fffff801`e93dc000 spaceport spaceport.sys Tue Oct 28 22:47:03 2014 (54505527)
fffff801`e9400000 fffff801`e9418000 partmgr partmgr.sys Wed Oct 08 03:34:42 2014 (5434E912)
fffff801`e9418000 fffff801`e942d000 volmgr volmgr.sys Thu Aug 22 07:39:53 2013 (5215F889)
fffff801`e942d000 fffff801`e9435000 pciide pciide.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff801`e9436000 fffff801`e954d000 NDIS NDIS.SYS Fri Oct 10 20:35:46 2014 (54387B62)
fffff801`e954d000 fffff801`e95c5000 NETIO NETIO.SYS Tue Sep 09 04:35:50 2014 (540EBBE6)
fffff801`e95c5000 fffff801`e95cf000 msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`e95cf000 fffff801`e95dc000 vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff801`e95dc000 fffff801`e95f8000 pdc pdc.sys Wed Oct 08 01:21:59 2014 (5434C9F7)
fffff801`e9600000 fffff801`e965e000 storport storport.sys Wed Sep 24 22:47:07 2014 (5423822B)
fffff801`e965e000 fffff801`e96ba000 fltmgr fltmgr.sys Mon Aug 25 22:25:16 2014 (53FBF00C)
fffff801`e96ba000 fffff801`e96d8000 amdppm amdppm.sys Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff801`e96f8000 fffff801`e974e000 CLASSPNP CLASSPNP.SYS Wed Oct 08 01:22:07 2014 (5434C9FF)
fffff801`e974e000 fffff801`e9769000 mountmgr mountmgr.sys Mon Oct 06 21:18:16 2014 (54333F58)
fffff801`e9769000 fffff801`e9773000 atapi atapi.sys Thu Aug 22 07:40:39 2013 (5215F8B7)
fffff801`e9773000 fffff801`e97a8000 ataport ataport.SYS Thu Aug 22 07:39:38 2013 (5215F87A)
fffff801`e97a8000 fffff801`e97d3000 nvstor nvstor.sys Mon Sep 12 19:53:04 2011 (4E6E9B60)
fffff801`e9800000 fffff801`e984c000 netbt netbt.sys Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff801`e984c000 fffff801`e9876000 vmbusr vmbusr.sys Thu Aug 22 07:36:45 2013 (5215F7CD)
fffff801`e9876000 fffff801`e98b3000 ndiswan ndiswan.sys Thu Aug 22 07:35:55 2013 (5215F79B)
fffff801`e98bc000 fffff801`e9ab6000 Ntfs Ntfs.sys Fri Oct 10 20:35:55 2014 (54387B6B)
fffff801`e9ab6000 fffff801`e9ad2000 ksecdd ksecdd.sys Tue Oct 28 22:47:36 2014 (54505548)
fffff801`e9ad2000 fffff801`e9ae2000 pcw pcw.sys Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff801`e9ae2000 fffff801`e9aed000 Fs_Rec Fs_Rec.sys Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff801`e9aed000 fffff801`e9b1e000 ksecpkg ksecpkg.sys Fri Jun 26 23:13:03 2015 (558E14BF)
fffff801`e9b1e000 fffff801`e9b74000 dump_CLASSPNP dump_CLASSPNP.SYS Wed Oct 08 01:22:07 2014 (5434C9FF)
fffff801`e9b74000 fffff801`e9bd7000 dxgmms1 dxgmms1.sys Tue Oct 28 22:46:30 2014 (54505506)
fffff801`e9bd7000 fffff801`e9be8000 umbus umbus.sys Thu Aug 22 07:38:59 2013 (5215F853)
fffff801`e9be8000 fffff801`e9bf5000 usbohci usbohci.sys Thu Aug 22 07:39:27 2013 (5215F86F)
fffff801`e9c00000 fffff801`e9c09000 Null Null.SYS Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`e9c0c000 fffff801`e9c28000 disk disk.sys Thu Aug 22 07:39:47 2013 (5215F883)
fffff801`e9c28000 fffff801`e9c3d000 crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff801`e9c3d000 fffff801`e9c54000 mpsdrv mpsdrv.sys Tue Oct 28 22:45:31 2014 (545054CB)
fffff801`e9c65000 fffff801`e9c73000 BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff801`e9c73000 fffff801`e9c8a000 vmbkmclr vmbkmclr.sys Thu Aug 22 07:39:04 2013 (5215F858)
fffff801`e9c93000 fffff801`e9eff000 tcpip tcpip.sys Tue Oct 28 22:47:30 2014 (54505542)
fffff801`e9eff000 fffff801`e9f6b000 fwpkclnt fwpkclnt.sys Tue Oct 28 22:46:11 2014 (545054F3)
fffff801`e9f6b000 fffff801`e9f90000 wfplwfs wfplwfs.sys Tue Oct 28 22:45:53 2014 (545054E1)
fffff801`e9f90000 fffff801`e9fdf000 volsnap volsnap.sys Wed Jun 18 18:41:28 2014 (53A21598)
fffff801`e9fdf000 fffff801`e9fff000 mup mup.sys Sat Jan 10 03:22:29 2015 (54B0E145)
fffff801`ea200000 fffff801`ea20c000 Msfs Msfs.SYS Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`ea20c000 fffff801`ea22c000 tdx tdx.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`ea22c000 fffff801`ea23a000 TDI TDI.SYS Thu Aug 22 07:39:01 2013 (5215F855)
fffff801`ea240000 fffff801`ea3c0000 dxgkrnl dxgkrnl.sys Tue Oct 28 22:46:45 2014 (54505515)
fffff801`ea3c0000 fffff801`ea3d2000 watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff801`ea3d2000 fffff801`ea3e4000 BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff801`ea3e4000 fffff801`ea3f8000 Npfs Npfs.SYS Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff801`ea400000 fffff801`ea40c000 mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff801`ea40c000 fffff801`ea433000 dfsc dfsc.sys Sat Jan 10 03:20:53 2015 (54B0E0E5)
fffff801`ea433000 fffff801`ea44a000 ahcache ahcache.sys Thu Dec 11 19:51:20 2014 (548A3C08)
fffff801`ea44a000 fffff801`ea456000 ndistapi ndistapi.sys Tue Oct 28 22:47:33 2014 (54505545)
fffff801`ea45f000 fffff801`ea4f1000 afd afd.sys Thu May 29 23:03:01 2014 (5387F4E5)
fffff801`ea4f1000 fffff801`ea51b000 pacer pacer.sys Tue Oct 28 22:45:30 2014 (545054CA)
fffff801`ea51b000 fffff801`ea52c000 netbios netbios.sys Tue Oct 28 22:47:23 2014 (5450553B)
fffff801`ea52c000 fffff801`ea541000 hvservice hvservice.sys Thu Aug 22 07:38:25 2013 (5215F831)
fffff801`ea541000 fffff801`ea559000 winhvr winhvr.sys Thu Aug 22 07:39:52 2013 (5215F888)
fffff801`ea559000 fffff801`ea5c7000 rdbss rdbss.sys Sat Jan 10 03:20:59 2015 (54B0E0EB)
fffff801`ea5c7000 fffff801`ea5e0000 wanarp wanarp.sys Tue Oct 28 22:45:22 2014 (545054C2)
fffff801`ea5e0000 fffff801`ea5ee000 nsiproxy nsiproxy.sys Tue Oct 28 22:46:03 2014 (545054EB)
fffff801`ea5ee000 fffff801`ea5fa000 npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff801`ea600000 fffff801`ea60b000 kdnic kdnic.sys Thu Aug 22 07:38:26 2013 (5215F832)
fffff801`ea610000 fffff801`ea6be000 vmswitch vmswitch.sys Wed Oct 08 03:32:15 2014 (5434E87F)
fffff801`ea6be000 fffff801`ea770000 Wnv Wnv.sys Wed Oct 08 03:32:15 2014 (5434E87F)
fffff801`ea770000 fffff801`ea78d000 rassstp rassstp.sys Tue Oct 28 22:45:50 2014 (545054DE)
fffff801`ea78d000 fffff801`ea7ac000 AgileVpn AgileVpn.sys Tue Oct 28 22:45:25 2014 (545054C5)
fffff801`ea7ac000 fffff801`ea7e8000 Vid Vid.sys Thu Aug 22 07:37:02 2013 (5215F7DE)
fffff801`ea7e8000 fffff801`ea7f7000 CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff801`ea800000 fffff801`ea824000 rasl2tp rasl2tp.sys Thu Aug 22 07:35:51 2013 (5215F797)
fffff801`ea82f000 fffff801`ea89e000 USBPORT USBPORT.SYS Sat May 31 02:30:25 2014 (53897701)
fffff801`ea89e000 fffff801`ea8b6000 usbehci usbehci.sys Sat May 31 02:29:54 2014 (538976E2)
fffff801`ea8b6000 fffff801`ea8da080 E1G6032E E1G6032E.sys Tue Mar 23 17:08:16 2010 (4BA92DC0)
fffff801`ea8db000 fffff801`ea91a000 1394ohci 1394ohci.sys Thu Aug 22 07:38:14 2013 (5215F826)
fffff801`ea91a000 fffff801`ea96e080 nvmf6264 nvmf6264.sys Wed Apr 20 18:49:36 2011 (4DAF6300)
fffff801`ea96f000 fffff801`ea9ce000 atikmpag atikmpag.sys Fri Nov 16 14:39:13 2012 (50A69661)
fffff801`ea9ce000 fffff801`ea9e5000 storvsp storvsp.sys Sun Mar 08 22:02:45 2015 (54FCFF45)
fffff801`ea9e5000 fffff801`eaa00000 raspppoe raspppoe.sys Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff801`eaa00000 fffff801`eaa0b000 NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff801`eaa0b000 fffff801`eaa0c600 swenum swenum.sys Tue Oct 28 22:47:41 2014 (5450554D)
fffff801`eaa12000 fffff801`eb5c5000 atikmdag atikmdag.sys Fri Nov 16 15:18:02 2012 (50A69F7A)
fffff801`eb5c5000 fffff801`eb5db000 vpcivsp vpcivsp.sys Thu Aug 22 07:36:50 2013 (5215F7D2)
fffff801`eb5db000 fffff801`eb5fc000 raspptp raspptp.sys Thu Aug 22 07:35:51 2013 (5215F797)
fffff801`eb600000 fffff801`eb620000 bowser bowser.sys Thu Aug 22 07:38:38 2013 (5215F83E)
fffff801`eb634000 fffff801`eb682000 ks ks.sys Fri Jul 04 08:58:59 2014 (53B6A513)
fffff801`eb682000 fffff801`eb68d000 rdpbus rdpbus.sys Thu Aug 22 07:38:52 2013 (5215F84C)
fffff801`eb68d000 fffff801`eb6a4000 NDProxy NDProxy.SYS Tue Oct 28 22:46:54 2014 (5450551E)
fffff801`eb6a4000 fffff801`eb70e000 usbhub usbhub.sys Thu Jul 24 07:45:29 2014 (53D0F1D9)
fffff801`eb70e000 fffff801`eb71a000 USBD USBD.SYS Sat May 31 02:31:17 2014 (53897735)
fffff801`eb71a000 fffff801`eb741000 usbccgp usbccgp.sys Thu Jul 24 07:44:51 2014 (53D0F1B3)
fffff801`eb741000 fffff801`eb74f000 hidusb hidusb.sys Thu Mar 06 04:24:14 2014 (53183EBE)
fffff801`eb74f000 fffff801`eb76e000 HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff801`eb76e000 fffff801`eb775f00 HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff801`eb776000 fffff801`eb784000 kbdhid kbdhid.sys Mon Oct 06 23:29:43 2014 (54335E27)
fffff801`eb784000 fffff801`eb796000 kbdclass kbdclass.sys Mon Oct 06 23:29:50 2014 (54335E2E)
fffff801`eb796000 fffff801`eb7be000 dump_nvraid dump_nvraid.sys Mon Sep 12 20:01:54 2011 (4E6E9D72)
fffff801`eb7be000 fffff801`eb7cc000 monitor monitor.sys Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff801`eb7cc000 fffff801`eb7e0000 lltdio lltdio.sys Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff801`eb7e0000 fffff801`eb7f8000 rspndr rspndr.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`eb800000 fffff801`eb82d000 tunnel tunnel.sys Thu Aug 22 07:35:45 2013 (5215F791)
fffff801`eb82d000 fffff801`eb841000 FsDepends FsDepends.sys Wed Oct 08 03:34:16 2014 (5434E8F8)
fffff801`eb849000 fffff801`eb8b5000 mrxsmb mrxsmb.sys Fri Jun 26 23:12:23 2015 (558E1497)
fffff801`eb8b5000 fffff801`eb8ed000 mrxsmb20 mrxsmb20.sys Fri Jun 26 23:13:13 2015 (558E14C9)
fffff801`eb8ed000 fffff801`eb9e7000 HTTP HTTP.sys Mon Feb 23 19:40:28 2015 (54EBC87C)
fffff801`ebc00000 fffff801`ebcad000 srv2 srv2.sys Wed Oct 08 03:33:30 2014 (5434E8CA)
fffff801`ebcad000 fffff801`ebcb8000 vhdparser vhdparser.sys Mon Jan 27 14:51:04 2014 (52E6B8A8)
fffff801`ebcbf000 fffff801`ebd0b000 mrxsmb10 mrxsmb10.sys Fri Jun 26 23:12:06 2015 (558E1486)
fffff801`ebd0b000 fffff801`ebd4e000 srvnet srvnet.sys Fri Jun 27 02:22:21 2014 (53AD0D9D)
fffff801`ebd4e000 fffff801`ebd60000 tcpipreg tcpipreg.sys Thu Mar 06 04:19:59 2014 (53183DBF)
fffff801`ebd60000 fffff801`ebdee000 srv srv.sys Thu Jul 24 07:43:27 2014 (53D0F15F)
fffff801`ebdee000 fffff801`ebdf9000 rdpvideominiport rdpvideominiport.sys Tue Oct 28 22:47:25 2014 (5450553D)
fffff801`ebe00000 fffff801`ebe55000 ResumeKeyFilter ResumeKeyFilter.sys Wed Apr 02 22:22:33 2014 (533CC5E9)
fffff801`ebe55000 fffff801`ebe60000 CCFFilter CCFFilter.sys Thu Aug 22 07:39:06 2013 (5215F85A)
fffff801`ebea7000 fffff801`ebf36000 vhdmp vhdmp.sys Wed Oct 08 03:32:46 2014 (5434E89E)
fffff801`ebf36000 fffff801`ebf46000 condrv condrv.sys Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff801`ebf46000 fffff801`ebf53000 terminpt terminpt.sys Thu Aug 22 07:39:16 2013 (5215F864)
fffff801`ebf53000 fffff801`ebf63000 mouclass mouclass.sys Mon Oct 06 23:29:43 2014 (54335E27)
fffff801`ebf63000 fffff801`ebf83000 netft netft.sys Wed Oct 08 03:31:44 2014 (5434E860)
fffff801`ebf83000 fffff801`ebfb0000 csvvbus csvvbus.sys Wed Oct 08 03:32:41 2014 (5434E899)
fffff801`ebfb0000 fffff801`ebfc5000 ClusDisk ClusDisk.sys Fri Apr 18 08:15:43 2014 (5351176F)
fffff801`ebfc5000 fffff801`ebff0000 svhdxflt svhdxflt.sys Thu Jul 24 07:46:20 2014 (53D0F20C)
fffff960`000a0000 fffff960`004b6000 win32k win32k.sys Wed Jun 24 22:31:06 2015 (558B67EA)
Page 1ceeac not present in the dump file. Type ".hh dbgerr004" for details
fffff960`00757000 fffff960`00760000 TSDDD TSDDD.dll Thu Aug 22 07:40:32 2013 (5215F8B0)
fffff960`00936000 fffff960`00970000 cdd cdd.dll Tue Oct 28 23:51:32 2014 (54506444)
Unloaded modules:
fffff801`e9b1e000 fffff801`e9b74000 dump_CLASSPNP.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00056000
fffff801`e9c3d000 fffff801`e9c65000 dump_nvraid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00028000
fffff801`e9c65000 fffff801`e9c93000 cdrom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0002E000
fffff801`e9c00000 fffff801`e9c0c000 hwpolicy.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff801`e9310000 fffff801`e932b000 sacdrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001B000
Closing open log file C:\debuglog.txt
So, we have a total of six Hyper-V servers in our environment. All six were installed from the same Server 2012 R2 Datacenter ISO. I have been managing these from my Windows 8.1 machine with no issues. I got ahold of Windows 10 build 10240, and I am running into an issue connecting to the servers now.
The strange thing is that I CAN connect to one of them. I cannot figure out what is different on this one server from the other five. Windows updates maybe? I migrated all the VMs off one of the servers I cannot manage remotely, performed all Windows Updates, and I still cannot connect to it.
I am reading that Windows 10 should be backward-compatible with managing Hyper-V on 2012, but on connection, it appears a WMI namespace is missing that the Windows 10 tools are trying to connect to.
I am not trying to use alternate credentials (I read this will NOT work from 10 to 2012 R2). Any ideas why this is not working? Several Google searches have not told me anything so far. I realize Windows 10 has not officially been released yet, but a few of us are testing the waters for compatibility issues.
I would appreciate any help anybody can offer.
Eric
There is a tool that can recover logical problems in the VHD structure?
A friend called me and told me that his VS R2 Enterprise with 4 VMs suffered a power falure and after that, one of the VMs does not startup anymore. The erros is the same as using VHDMOUNT, something similar: "VHD file could not be mounted"
There is a CHKDSK for VHD files?
How to "rebuild" a corrupetd VHD file? How to analyze logical structure of a offline VHD file?
Hi,
Just found a blog about fixing corrupt VHDs.
How to Fix a Corrupted Hyper-V VHD File
http://blogs.technet.com/b/tonyso/archive/2011/12/06/how-to-fix-a-corrupted-hyper-v-vhd-file.aspx
Enjoy!
Vincent Hu
Hello!
We've got Hyper-V 2012r2 and CentOS 6.6 running in VM.
We have web-server running on it. And in fact it uses space:
df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_bitrix2-lv_root
50G 3,7G 43G 8% /
tmpfs 1,9G 0 1,9G 0% /dev/shm
/dev/sda1 477M 46M 406M 11% /boot
/dev/mapper/vg_bitrix2-lv_home
439G 101G 316G 25% /homeBut vmdk file in Hyper-V weights 300Gb.
I tried
cd / ; cat /dev/zero > zero.fill ; sync ; sleep 1 ; sync ; rm -f zero.fill
And after that:
Mount-VHD 'D:\Hyper-V\bitrix2\Virtual Hard Disks\bitrix2.vhdx' -ReadOnly Optimize-Vhd -path 'D:\Hyper-V\bitrix2\Virtual Hard Disks\bitrix2.vhdx' -Mode Full Dismount-VHD 'D:\Hyper-V\bitrix2\Virtual Hard Disks\bitrix2.vhdx'
But it doesn't help..Can anyone help us with the problem?
We have a windows 2012r2 hyper v host running 6 vm's.
the hyper v host has veeam backup and replication and had an ip assigned to be on the network , so it could be replicating to another hyper v server via veeam.
After installing windows update last Friday night, I discovered that although the 6vm's are on the network, the byper v host itself is not.
I am not sure on which nic on he hyper v host the ipconfiguration was tied to.
the vm's are using ....#4
I briefly added the ip configuration to the nic called internal1-1 , but did not connect to the network (I did not reboot)
how can I re-enable network access for the hyper v host again.!!
regards
Leopold
Hi,
Is it passible to change default new VM wizard options and automatic stop action options ?
Hi all,
We have 3 nodes HyperV failover cluster on Windows Server 2012 R2. DELL's EQL storage connected to all nodes by iSCSI and mapped as single CSV volume.
Resently we have faced serious performance problems with VM's in cluster. VM's are very slow or hang (Ping are ok, other connections are very-very slow or unavailable). Moving VM from node to node fix the problems for a small period of time but it hangs again.
Not clustered VM's that stored on local drives are OK. We don't see any errors or warnings on NICs or on Storage. Storage load is normal.
Sometimes there are disk queue peaks on guest OS (0 and then peak to 50 or somtimes to 100 and 0 again).
There are no abnormal events on host servers.
Also I have faced that VHD's are readed by System process (see screnshot). There are a lot of reads and 0 writes. VM's can be even turned off but reads are high. Is it norman?
Any suggestions will be appreciated.
Windows 8.1
In Hyper-V manager I have couple of HV hosts and Local Hyper-V that shows VMs and are perfectly accessible.
However, when trying to add another Remote Host (I tried few from remote sites).
It adds the host. But Red cross appears on icon of host. The VMs are not shown, instead on Right Hand side (Virtual Machines)
There is a message Hyper-V has not been installed on computer COMPUTER_NAME.
Checked google. There are talks about not seeing VMs of Local W8.1 .
What it could be.
The HV hosts I am trying to add are accessible by RDP from my W8.1.
--- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis
Hi,
We are using SCVMM 2012 R2. I have a windows 2012 R2 virtual machine which has two NIC (Live and Management), and is running an application which advertises to a multicast group ip address of 224.10.10.10 with a port of 31337, and the windows 7 clients are supposed to join this multicast group using the client application to listen for the server advertising packets.
However, the clients never receive any information from the server. I checked on the router and the server doesn't join the group. I've run a test program on the windows 7 clients with the ip address and port number above which sends an hello message to other clients running the client software which worked since it crashed the program on all those machines (they didn't know what to do with the hello message I sent them), so I know they are all listening and received the test data.
If I run another test program which has a server part which sends out a message (ip address above and port number), and a client test program (ip address above and port number), on the server to receive the message, this also works, since the client displays an hello message.
The part that doesn't work is the server sending out information and the clients receiving it (also tested with the server and client test app)
netstat on the server:
UDP 0.0.0.0:31337 *:* 3960
and on the client:
UDP 0.0.0.0:31337 *:* 5680
Previously we were using physical machines running windows 2003 with the same application and this worked fine. If I reboot this server, then check the router I see multicast information appearing.
If I run the following on the server: netsh interface ip show joins, it give the following information:
Interface 12: Live
Scope References Last Address
---------- ---------- ---- ---------------------------------
0 0 No 224.0.0.1
0 1 Yes 224.0.0.252
Interface 13: Management
Scope References Last Address
---------- ---------- ---- ---------------------------------
0 0 Yes 224.0.0.1
0 1 Yes 224.0.0.252
0 1 Yes 224.10.10.10
The 224.10.10.10 appears on the management NIC which seems incorrect since it should appear on the Live NIC which has a default gateway configured (Management does not)
Are there any special settings I need to set on the Hyperv client? How do I get the multicast group to bind to the Live NIC.
I have set the live nic to be first in the list to be accessed by network services and IPv4 binds before IPv6.
Thanks.
Jaz
Hi Peeps,
I am trying to get around the fact that Hyper- V does not have the cloning feature that Vmware has by performing the Import and export feature in Hyper-V but I am getting an error for something that seems so basic.
The Error " A server error occurred while attempting to import the virtual machine"
Import Failed. Unable to find the virtual machine import files under location "F:\Path". You can import a virtual machine only if you used Hyper-V to create and export it"
The steps I took are the following
1. Turned off the target VM ( I couldn't export it anyway without turning it off)
2. Right click on export and then Selected the target location to keep the file.
3. After "export" I checked and confirmed that a new VHD file had created.
4. I click on Import VM and point to the folder where the newly exported VHD file is and I get the error message.
<g class="gr_ gr_87 gr-alert gr_spell ContextualSpelling ins-del multiReplace" data-gr-id="87" id="87">Infact</g> It seems that none of the other VM's I created using the Same Hyper-V 2012R2 can be imported.
Any Ideas
Richard <g class="gr_ gr_15 gr-alert gr_spell ContextualSpelling ins-del multiReplace" data-gr-id="15" id="15">Ojel</g>...
Hello everybody,
I came here because I have strange network performance.
I have two windows server 2012 R2, one with hyper-v, the other one for storage which hold a storage space with tiering.
The hyper-v server has two NIC in team connected to a switch and the storage server is connected to the same switch with two NIC (no team).
As you can see above, performance of tiering storage space from the storage server himself.
Here the performance from the hyper-v to the same tiering storage space connected with a network drive. Performances are really close inside a VM which has is VHDX on the storage server, connected with SMB3 too.
Betters performance are 64MB/s, but when I copie a file to the same network drive, the average speed is 90MB/s as you can see below.
Do you have an idea about the source of the problem and how to solve it ?
Thanks by advance !
When trying to install Microsoft Hyper-V Heartbeat driver it comes up with access denied. This is the latest version of 2012 Integration Services. this is only happening on XP or 2003 VMs
Hi
We have a standard Hyper-V cluster with 5 hosts and a SAN.
We have decided to create a LUN/Volume for each costumer we host servers for.
When the setup were designed, someone told us that an NTFS volume runs best with 30% free disk Space.
We then calculate the costumers space need and multiply with 1.3.
I have now wondered a bit, and that actually doesn't give me 30% free space. And is there for wondering:
Is it relevant to have 30% free space on the LUN's/Volumes?
Is there any performens degration, and if there is, is it significant enough to bother calculate and keep track of it?
Or would you say that it is enough just to have 30GB free space?
Regards Lars Mortensen
