IopParseDevice hang

Hi all,

I need some help with a hang. Would anybody know what IopParseDevice do? I
have a case where it is waiting at a KeWaitForSingleObject. This is in
response to a create for a shadow device from my filter driver during a
directory control. The hang does not occur for XP but occur quite
frequently for NT. The scenerio is that I’m doing file creation & access
while Windows Explorer is updating it at the same time.

Below is my trace:
f901b8f0 8011750b f901bc04 8047d988 806497cc nt!KiSwapThread+0xc5
f901b914 80172fa0 804615a4 00000000 00000000
nt!KeWaitForSingleObject+0x1b3
f901ba34 80191ca7 805fb770 00000000 f901bafc nt!IopParseDevice+0x7ea
f901babc 8018d9c9 00000000 f901bbb8 00000040 nt!ObpLookupObjectName+0x283
f901bbd0 80164b42 f901bdb8 00000000 01bbf400 nt!ObOpenObjectByName+0xbb
f901bc84 801698d0 f901be38 00100000 f901bdb8 nt!IoCreateFile+0x436
f901bcc4 8013e394 f901be38 00100000 f901bdb8 nt!NtCreateFile+0x2e
f901bcc4 8011a6cf f901be38 00100000 f901bdb8 nt!KiSystemService+0xc4
f901bd68 803b8eea f901be38 00100000 f901bdb8 nt!ZwCreateFile+0xb
f901bde0 803a4d44 805eb0d8 f901be64 00100000
MyDriver!CreateFromFileName+0x1ce
f901be9c 803a46c9 805eb0d8 83a94498 f901befc MyDriver!UpdateSize+0x249
f901bf34 8010b0a7 81fff1a8 f901bf7c 00000000
MyDriver!DirectoryControlWork+0x81e
f901bf4c 801375f8 00000000 00000000 00000000 nt!ExpWorkerThread+0x73
f901bf7c 801428f6 8010b034 00000000 00000000
nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

Thanks,
Tian

Tian,

Have you tried the latest service pack? We were
noticing a similar problem on W2K that was fixed when
the SP was applied.

Randy

— Tian wrote:
> Hi all,
>
> I need some help with a hang. Would anybody know
> what IopParseDevice do? I
> have a case where it is waiting at a
> KeWaitForSingleObject. This is in
> response to a create for a shadow device from my
> filter driver during a
> directory control. The hang does not occur for XP
> but occur quite
> frequently for NT. The scenerio is that I’m doing
> file creation & access
> while Windows Explorer is updating it at the same
> time.
>
> Below is my trace:
> f901b8f0 8011750b f901bc04 8047d988 806497cc
> nt!KiSwapThread+0xc5
> f901b914 80172fa0 804615a4 00000000 00000000
> nt!KeWaitForSingleObject+0x1b3
> f901ba34 80191ca7 805fb770 00000000 f901bafc
> nt!IopParseDevice+0x7ea
> f901babc 8018d9c9 00000000 f901bbb8 00000040
> nt!ObpLookupObjectName+0x283
> f901bbd0 80164b42 f901bdb8 00000000 01bbf400
> nt!ObOpenObjectByName+0xbb
> f901bc84 801698d0 f901be38 00100000 f901bdb8
> nt!IoCreateFile+0x436
> f901bcc4 8013e394 f901be38 00100000 f901bdb8
> nt!NtCreateFile+0x2e
> f901bcc4 8011a6cf f901be38 00100000 f901bdb8
> nt!KiSystemService+0xc4
> f901bd68 803b8eea f901be38 00100000 f901bdb8
> nt!ZwCreateFile+0xb
> f901bde0 803a4d44 805eb0d8 f901be64 00100000
> MyDriver!CreateFromFileName+0x1ce
> f901be9c 803a46c9 805eb0d8 83a94498 f901befc
> MyDriver!UpdateSize+0x249
> f901bf34 8010b0a7 81fff1a8 f901bf7c 00000000
> MyDriver!DirectoryControlWork+0x81e
> f901bf4c 801375f8 00000000 00000000 00000000
> nt!ExpWorkerThread+0x73
> f901bf7c 801428f6 8010b034 00000000 00000000
> nt!PspSystemThreadStartup+0x54
> 00000000 00000000 00000000 00000000 00000000
> nt!KiThreadStartup+0x16
>
> Thanks,
> Tian
>
> —
> You are currently subscribed to ntfsd as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
xxxxx@lists.osr.com

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

Hi Randy, Thanks for reply.

Yes, I’m currently using the latest service pack 6. After numerous tries,
I’ve managed to yield slightly more info in some of the traces. Seems
there were 2 threads trying to do a read, thereby causing other thread to
wait for the resource. Again, I’m at a lost what the threads are waiting
for. Sorry if the previous trace appears to give misleading info. I
actually had another hang also waiting at a IopParseDevice (see below
third trace).

The two thread below happen when I create a 6M Winword document with the
Explorer open of the same folder.

Here is first thread (occur same time as second thread below):
fd831890 8011750b d4382000 00000000 80c32d88 nt!KiSwapThread+0xc5
fd8318b4 80126764 80c32d88 00000009 00000000
nt!KeWaitForSingleObject+0x1b3
fd8318e8 80125986 83fe90a0 e1b63074 d4382000
nt!MiWaitForInPageComplete+0x18
fd831930 8012c399 00000000 d4382000 c0350e08 nt!MiDispatchFault+0x194
fd831988 80141427 00000000 d4382000 00000000 nt!MmAccessFault+0x2f1
fd831988 801005b1 00000000 d4382000 00000000 nt!KiTrap0E+0xc3
fd831aa0 803d75ca 83d964e8 fd831ba8 00000800 nt!CcCopyRead+0x185
fd831c2c 803d6ae1 8048da88 82d51748 00000001 Ntfs!NtfsCommonRead+0xaa5
fd831cd8 80111b3f 8062c740 82d51748 82d5181c Ntfs!NtfsFsdRead+0xe5
fd831cec 803bc037 82d51748 805f02a0 00000000 nt!IofCallDriver+0x37
fd831d84 80111b3f 805f02a0 82d51748 fd831de4 MyDriver!Read+0x9e3
fd831d98 fda130b8 fd831de0 00000000 815939f0 nt!IofCallDriver+0x37
fd831de1 4882d517 f082d518 e8815939 0083d964 SYMEVENT+0x10b8
48000003 00000000 00000000 00000000 00000000 +0x4882d517

Here is second thread (occur same time as first thread above):
f9017d00 8011750b d4390000 00000000 83b7ba28 nt!KiSwapThread+0xc5
f9017d24 80126764 83b7ba28 00000009 00000000
nt!KeWaitForSingleObject+0x1b3
f9017d58 80125986 83fe72e8 e1b630ac d4390000
nt!MiWaitForInPageComplete+0x18
f9017da0 8012c399 00000000 d4390000 c0350e40 nt!MiDispatchFault+0x194
f9017df8 80129c1b 00000000 d4390000 00000000 nt!MmAccessFault+0x2f1
f9017e38 801028dd d4390000 00000000 806471e8
nt!MmCheckCachedPageState+0x2cf
f9017ef8 801084fe 806471e8 00000000 00000001 nt!CcPerformReadAhead+0x247
f9017f34 8010b0a7 806471e8 f9017f7c 00000000 nt!CcWorkerThread+0xa4
f9017f4c 801375f8 00000000 00000000 00000000 nt!ExpWorkerThread+0x73
f9017f7c 801428f6 8010b034 00000000 00000000
nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

Below is trace that happened during login. System.exe is trying to access
the registry after the user has key in userid and password. This is also
waiting on a IopParseDevice.

Here is third trace (this happened during login; unrelated to above
traces):
f8e5f818 8011750b f8e5fb2c 82d2ea08 804a9aac nt!KiSwapThread+0xc5
f8e5f83c 80172fa0 81264c84 00000000 00000000
nt!KeWaitForSingleObject+0x1b3
f8e5f95c 80191ca7 80637830 00000000 f8e5fa24 nt!IopParseDevice+0x7ea
f8e5f9e4 8018d9c9 00000000 f8e5fae0 00000040 nt!ObpLookupObjectName+0x283
f8e5faf8 80164b42 f8e5fd00 00000000 e5fb1c00 nt!ObOpenObjectByName+0xbb
f8e5fbac 801698d0 f8e5fd6c 00100003 f8e5fd00 nt!IoCreateFile+0x436
f8e5fbec 8013e394 f8e5fd6c 00100003 f8e5fd00 nt!NtCreateFile+0x2e
f8e5fbec 8011a6cf f8e5fd6c 00100003 f8e5fd00 nt!KiSystemService+0xc4
f8e5fc90 801acd68 f8e5fd6c 00100003 f8e5fd00 nt!ZwCreateFile+0xb
f8e5fd28 801a9e9d f8e5fea0 801a9e5e f8e5fd6c nt!CmpOpenHiveFiles+0xc2
f8e5fd74 801abc28 f8e5fea0 00000000 f8e5fe24 nt!CmpInitHiveFromFile+0x35
f8e5fda4 801abb3b f8e5fe08 0012005c 801a8c01 nt!CmpWorker+0xc2
f8e5fdb8 801ab810 f8e5fe08 0000005c 0012005c nt!CmpWorkerCommand+0x4d
f8e5fe50 8013c740 f8e5fe88 f8e5fe70 00000000 nt!CmLoadKey+0x6a
f8e5fee4 801a8c25 0012e948 0012e930 00000000 nt!NtLoadKey2+0x284
f8e5fef4 8013e394 0012e948 0012e930 00000000 nt!NtLoadKey+0xf
f8e5fef4 77f67ae7 0012e948 0012e930 00000000 nt!KiSystemService+0xc4
0012e974 00000000 00000000 00000000 00000000 NTDLL!ZwLoadKey+0xb

Thanks for trouble in helping. These are rather mysterious as I’ve got
these working for WinXP and when I try to test it out for WinNT, it hang.
Sorry for long mail.

Thanks,
Tian

Tian,

Have you tried the latest service pack? We were
noticing a similar problem on W2K that was fixed when
the SP was applied.

Randy

— Tian wrote:
> > Hi all,
> >
> > I need some help with a hang. Would anybody know
> > what IopParseDevice do? I
> > have a case where it is waiting at a
> > KeWaitForSingleObject. This is in
> > response to a create for a shadow device from my
> > filter driver during a
> > directory control. The hang does not occur for XP
> > but occur quite
> > frequently for NT. The scenerio is that I’m doing
> > file creation & access
> > while Windows Explorer is updating it at the same
> > time.
> >
> > Below is my trace:
> > f901b8f0 8011750b f901bc04 8047d988 806497cc
> > nt!KiSwapThread+0xc5
> > f901b914 80172fa0 804615a4 00000000 00000000
> > nt!KeWaitForSingleObject+0x1b3
> > f901ba34 80191ca7 805fb770 00000000 f901bafc
> > nt!IopParseDevice+0x7ea
> > f901babc 8018d9c9 00000000 f901bbb8 00000040
> > nt!ObpLookupObjectName+0x283
> > f901bbd0 80164b42 f901bdb8 00000000 01bbf400
> > nt!ObOpenObjectByName+0xbb
> > f901bc84 801698d0 f901be38 00100000 f901bdb8
> > nt!IoCreateFile+0x436
> > f901bcc4 8013e394 f901be38 00100000 f901bdb8
> > nt!NtCreateFile+0x2e
> > f901bcc4 8011a6cf f901be38 00100000 f901bdb8
> > nt!KiSystemService+0xc4
> > f901bd68 803b8eea f901be38 00100000 f901bdb8
> > nt!ZwCreateFile+0xb
> > f901bde0 803a4d44 805eb0d8 f901be64 00100000
> > MyDriver!CreateFromFileName+0x1ce
> > f901be9c 803a46c9 805eb0d8 83a94498 f901befc
> > MyDriver!UpdateSize+0x249
> > f901bf34 8010b0a7 81fff1a8 f901bf7c 00000000
> > MyDriver!DirectoryControlWork+0x81e
> > f901bf4c 801375f8 00000000 00000000 00000000
> > nt!ExpWorkerThread+0x73
> > f901bf7c 801428f6 8010b034 00000000 00000000
> > nt!PspSystemThreadStartup+0x54
> > 00000000 00000000 00000000 00000000 00000000
> > nt!KiThreadStartup+0x16
> >
> > Thanks,
> > Tian
> >
> > —
> > You are currently subscribed to ntfsd as:
> > xxxxx@yahoo.com
> > To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com