system hang

I am having system hang problem once in a while testing with IoMeter. I cam
move windows and mouse, but I cant launch any new process or kill.
When I dumped the process, I got the following. This one never satisfied.
Can anyone shred some light why this never satisfied?

-Thanks
Ramaraj

THREAD 81344c00 Cid 148.190 Teb: 7ffde000 Win32Thread: 00000000
WAIT: (WrPageIn) KernelMode Non-Alertable
8178ea28 NotificationEvent
IRP List:
8143ce28: (0006,01d8) Flags: 00000900 Mdl: 00000000
817a1268: (0006,01d8) Flags: 00000884 Mdl: 00000000
Not impersonating
Owning Process 817b0800
WaitTime (seconds) 25986
Context Switch Count 9
UserTime 0:00:00.0000
KernelTime 0:00:00.0000
Start Address 0x7c4e9824
Win32 Start Address NTDLL!RtlpWorkerThread (0x77f98a70)
Stack Init f1a14000 Current f1a12ef8 Base f1a14000 Limit f1a11000
Call 0
Priority 9 BasePriority 9 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f1a12f10 8042c321 00000000 00000000 8178ea28 nt!KiSwapThread+0x1b1
f1a12f38 80442439 8178ea28 00000009 00000000
nt!KeWaitForSingleObject+0x1a3
f1a12f64 804413d9 8205c4b0 e273c4a8 d5140000
nt!MiWaitForInPageComplete+0x17
f1a12fa4 8044a8c2 00000000 d5140000 c0354500
nt!MiDispatchFault+0x27f
f1a12ff4 804476db 00000000 00000000 00000000 nt!MmAccessFault+0x702
f1a13024 8040b28a d5140000 00000000 e27b46f8
nt!MmCheckCachedPageState+0x299
f1a130f4 f8735787 81326ee8 f1a132b0 00000100 nt!CcCopyRead+0x61e
f1a13308 f8736083 81324308 8143ce28 00000001
Ntfs!NtfsCommonRead+0x125f
f1a133a4 8041de41 81f873e0 8143ce28 8143cfb0 Ntfs!NtfsFsdRead+0x201
f1a133b8 f87c0a83 81f80020 8143ce28 00000000 nt!IopfCallDriver+0x35
f1a13404 f87c0731 81f80020 8143ce28 81f800d8
myfilter!FileIoDispatch+0x2d6
f1a13420 f87c0373 81f80020 8143ce28 00000000
myfilter!VolumeDispatch+0x61
f1a13458 8041de41 81f80020 8143ce28 f1a134b8 myfilter!Dispatch+0x14a
f1a1346c f7a830ce f1a134b4 00000000 81471830 nt!IopfCallDriver+0x35
f1a134b5 dc8143ce 308143cf e8814718 0081326e SYMEVENT+0x10ce
28ffff03 00000000 00000000 00000000 00000000 +0xdc8143ce

NAV recursion?

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ramaraj Pandian
Sent: Tuesday, September 16, 2003 7:22 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] system hang

I am having system hang problem once in a while testing with IoMeter. I
cam
move windows and mouse, but I cant launch any new process or kill.
When I dumped the process, I got the following. This one never
satisfied.
Can anyone shred some light why this never satisfied?

-Thanks
Ramaraj

THREAD 81344c00 Cid 148.190 Teb: 7ffde000 Win32Thread:
00000000
WAIT: (WrPageIn) KernelMode Non-Alertable
8178ea28 NotificationEvent
IRP List:
8143ce28: (0006,01d8) Flags: 00000900 Mdl: 00000000
817a1268: (0006,01d8) Flags: 00000884 Mdl: 00000000
Not impersonating
Owning Process 817b0800
WaitTime (seconds) 25986
Context Switch Count 9
UserTime 0:00:00.0000
KernelTime 0:00:00.0000
Start Address 0x7c4e9824
Win32 Start Address NTDLL!RtlpWorkerThread (0x77f98a70)
Stack Init f1a14000 Current f1a12ef8 Base f1a14000 Limit
f1a11000
Call 0
Priority 9 BasePriority 9 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f1a12f10 8042c321 00000000 00000000 8178ea28
nt!KiSwapThread+0x1b1
f1a12f38 80442439 8178ea28 00000009 00000000
nt!KeWaitForSingleObject+0x1a3
f1a12f64 804413d9 8205c4b0 e273c4a8 d5140000
nt!MiWaitForInPageComplete+0x17
f1a12fa4 8044a8c2 00000000 d5140000 c0354500
nt!MiDispatchFault+0x27f
f1a12ff4 804476db 00000000 00000000 00000000
nt!MmAccessFault+0x702
f1a13024 8040b28a d5140000 00000000 e27b46f8
nt!MmCheckCachedPageState+0x299
f1a130f4 f8735787 81326ee8 f1a132b0 00000100 nt!CcCopyRead+0x61e
f1a13308 f8736083 81324308 8143ce28 00000001
Ntfs!NtfsCommonRead+0x125f
f1a133a4 8041de41 81f873e0 8143ce28 8143cfb0
Ntfs!NtfsFsdRead+0x201
f1a133b8 f87c0a83 81f80020 8143ce28 00000000
nt!IopfCallDriver+0x35
f1a13404 f87c0731 81f80020 8143ce28 81f800d8
myfilter!FileIoDispatch+0x2d6
f1a13420 f87c0373 81f80020 8143ce28 00000000
myfilter!VolumeDispatch+0x61
f1a13458 8041de41 81f80020 8143ce28 f1a134b8
myfilter!Dispatch+0x14a
f1a1346c f7a830ce f1a134b4 00000000 81471830
nt!IopfCallDriver+0x35
f1a134b5 dc8143ce 308143cf e8814718 0081326e SYMEVENT+0x10ce
28ffff03 00000000 00000000 00000000 00000000 +0xdc8143ce


You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Ramaraj,

Are you modifying the paging I/O IRP in any way. For example, do you change
Irp->MdlAddress? If so, make sure you also reset Irp->UserBuffer. To see
why, look at deviosup.c in FastFat where it breaks I/O operations up into
multiple pieces - it uses Irp->UserBuffer (not as a valid address, just as
an index).

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Ramaraj Pandian [mailto:xxxxx@vormetric.com]
Sent: Tuesday, September 16, 2003 10:22 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] system hang

I am having system hang problem once in a while testing with IoMeter. I cam
move windows and mouse, but I cant launch any new process or kill. When I
dumped the process, I got the following. This one never satisfied. Can
anyone shred some light why this never satisfied?

-Thanks
Ramaraj

THREAD 81344c00 Cid 148.190 Teb: 7ffde000 Win32Thread: 00000000
WAIT: (WrPageIn) KernelMode Non-Alertable
8178ea28 NotificationEvent
IRP List:
8143ce28: (0006,01d8) Flags: 00000900 Mdl: 00000000
817a1268: (0006,01d8) Flags: 00000884 Mdl: 00000000
Not impersonating
Owning Process 817b0800
WaitTime (seconds) 25986
Context Switch Count 9
UserTime 0:00:00.0000
KernelTime 0:00:00.0000
Start Address 0x7c4e9824
Win32 Start Address NTDLL!RtlpWorkerThread (0x77f98a70)
Stack Init f1a14000 Current f1a12ef8 Base f1a14000 Limit f1a11000
Call 0
Priority 9 BasePriority 9 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f1a12f10 8042c321 00000000 00000000 8178ea28 nt!KiSwapThread+0x1b1
f1a12f38 80442439 8178ea28 00000009 00000000
nt!KeWaitForSingleObject+0x1a3
f1a12f64 804413d9 8205c4b0 e273c4a8 d5140000
nt!MiWaitForInPageComplete+0x17
f1a12fa4 8044a8c2 00000000 d5140000 c0354500
nt!MiDispatchFault+0x27f
f1a12ff4 804476db 00000000 00000000 00000000 nt!MmAccessFault+0x702
f1a13024 8040b28a d5140000 00000000 e27b46f8
nt!MmCheckCachedPageState+0x299
f1a130f4 f8735787 81326ee8 f1a132b0 00000100 nt!CcCopyRead+0x61e
f1a13308 f8736083 81324308 8143ce28 00000001
Ntfs!NtfsCommonRead+0x125f
f1a133a4 8041de41 81f873e0 8143ce28 8143cfb0 Ntfs!NtfsFsdRead+0x201
f1a133b8 f87c0a83 81f80020 8143ce28 00000000 nt!IopfCallDriver+0x35
f1a13404 f87c0731 81f80020 8143ce28 81f800d8
myfilter!FileIoDispatch+0x2d6
f1a13420 f87c0373 81f80020 8143ce28 00000000
myfilter!VolumeDispatch+0x61
f1a13458 8041de41 81f80020 8143ce28 f1a134b8 myfilter!Dispatch+0x14a
f1a1346c f7a830ce f1a134b4 00000000 81471830 nt!IopfCallDriver+0x35
f1a134b5 dc8143ce 308143cf e8814718 0081326e SYMEVENT+0x10ce
28ffff03 00000000 00000000 00000000 00000000 +0xdc8143ce


You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Hi Tony, Thanks for your reply.

Yes, I do. But not for that file which was hanging.

I save mdl and user buffer for paging i/o write and set it back on
completion routine for interested files and one of that paging i/o write
also blocked which I forgot to put in last mail.

Thanks
-Ramaraj

THREAD 81fba8a0 Cid 8.b0 Teb: 00000000 Win32Thread: 00000000 WAIT:
(Executive) KernelMode Non-Alertable
814f24e8 SynchronizationEvent
81fba988 NotificationTimer
Not impersonating
Owning Process 820196e0
WaitTime (seconds) 32759
Context Switch Count 1901
UserTime 0:00:00.0000
KernelTime 0:00:00.0015
Start Address vmfiltr!WorkerThreadStart (0xf87c93ac)
Stack Init f24e8000 Current f24e7794 Base f24e8000 Limit f24e5000
Call 0
Priority 9 BasePriority 8 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f24e77ac 8042c321 00000000 8144a6c8 81fba8a0 nt!KiSwapThread+0x1b1
f24e77d4 80415820 814f24e8 00000000 00000000
nt!KeWaitForSingleObject+0x1a3
f24e7814 80414c0d 8144a6c8 8144a6c8 f24e7838
nt!ExpWaitForResource+0x1b4
f24e7824 80414c61 00085000 e27200d8 814a10c8
nt!ExpAcquireResourceExclusiveLite+0x7b
f24e7838 f873a773 8144a6fc 00000001 00000000
nt!ExAcquireResourceExclusiveLite+0x45
f24e7bb0 f87333e8 814a10c8 813817a8 817f9020
Ntfs!NtfsCommonWrite+0x7cf
f24e7c18 8041de41 817f9020 813817a8 e279d008 Ntfs!NtfsFsdWrite+0xee
f24e7c2c f87ba76e 00000000 00000000 f24e7c64 nt!IopfCallDriver+0x35
f24e7d74 f87c9678 817f3340 81340a68 817f33f8
myfilter!VmDDirectIoWrite+0xff4
f24e7d94 f87c9451 8139a9f0 f87cab50 8139a9f0
myfilter!CallCompletionWorkRoutine+0x38
f24e7da8 80455a82 f87cab50 00000000 00000000
myfilter!WorkerThread+0xa5
f24e7ddc 8046b012 f87c93ac f87cab50 00000000
nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Tony Mason
Sent: Tuesday, September 16, 2003 8:01 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] RE: system hang

Ramaraj,

Are you modifying the paging I/O IRP in any way. For example, do you change
Irp->MdlAddress? If so, make sure you also reset Irp->UserBuffer. To see
why, look at deviosup.c in FastFat where it breaks I/O operations up into
multiple pieces - it uses Irp->UserBuffer (not as a valid address, just as
an index).

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Ramaraj Pandian [mailto:xxxxx@vormetric.com]
Sent: Tuesday, September 16, 2003 10:22 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] system hang

I am having system hang problem once in a while testing with IoMeter. I cam
move windows and mouse, but I cant launch any new process or kill. When I
dumped the process, I got the following. This one never satisfied. Can
anyone shred some light why this never satisfied?

-Thanks
Ramaraj

THREAD 81344c00 Cid 148.190 Teb: 7ffde000 Win32Thread: 00000000
WAIT: (WrPageIn) KernelMode Non-Alertable
8178ea28 NotificationEvent
IRP List:
8143ce28: (0006,01d8) Flags: 00000900 Mdl: 00000000
817a1268: (0006,01d8) Flags: 00000884 Mdl: 00000000
Not impersonating
Owning Process 817b0800
WaitTime (seconds) 25986
Context Switch Count 9
UserTime 0:00:00.0000
KernelTime 0:00:00.0000
Start Address 0x7c4e9824
Win32 Start Address NTDLL!RtlpWorkerThread (0x77f98a70)
Stack Init f1a14000 Current f1a12ef8 Base f1a14000 Limit f1a11000
Call 0
Priority 9 BasePriority 9 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f1a12f10 8042c321 00000000 00000000 8178ea28 nt!KiSwapThread+0x1b1
f1a12f38 80442439 8178ea28 00000009 00000000
nt!KeWaitForSingleObject+0x1a3
f1a12f64 804413d9 8205c4b0 e273c4a8 d5140000
nt!MiWaitForInPageComplete+0x17
f1a12fa4 8044a8c2 00000000 d5140000 c0354500
nt!MiDispatchFault+0x27f
f1a12ff4 804476db 00000000 00000000 00000000 nt!MmAccessFault+0x702
f1a13024 8040b28a d5140000 00000000 e27b46f8
nt!MmCheckCachedPageState+0x299
f1a130f4 f8735787 81326ee8 f1a132b0 00000100 nt!CcCopyRead+0x61e
f1a13308 f8736083 81324308 8143ce28 00000001
Ntfs!NtfsCommonRead+0x125f
f1a133a4 8041de41 81f873e0 8143ce28 8143cfb0 Ntfs!NtfsFsdRead+0x201
f1a133b8 f87c0a83 81f80020 8143ce28 00000000 nt!IopfCallDriver+0x35
f1a13404 f87c0731 81f80020 8143ce28 81f800d8
myfilter!FileIoDispatch+0x2d6
f1a13420 f87c0373 81f80020 8143ce28 00000000
myfilter!VolumeDispatch+0x61
f1a13458 8041de41 81f80020 8143ce28 f1a134b8 myfilter!Dispatch+0x14a
f1a1346c f7a830ce f1a134b4 00000000 81471830 nt!IopfCallDriver+0x35
f1a134b5 dc8143ce 308143cf e8814718 0081326e SYMEVENT+0x10ce
28ffff03 00000000 00000000 00000000 00000000 +0xdc8143ce


You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


You are currently subscribed to ntfsd as: xxxxx@vormetric.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Then you need to find where the IRP is processing. When the system hangs it
indicates that something that should finish has not - so you have to find
the other involved threads and ascertain why this is never finishing. There
are only a few reasons that I’ve ever seen:

  • The I/O completion is not being delivered (wait at APC_LEVEL for a non
    paging I/O)
  • The device hangs (that’s the user buffer trick)
  • There is a lock-related deadlock.

Someone is waiting somewhere on your system - you need to find it and figure
out what it is waiting for and the finally why.

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Ramaraj Pandian [mailto:xxxxx@vormetric.com]
Sent: Wednesday, September 17, 2003 12:04 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] RE: system hang

Hi Tony, Thanks for your reply.

Yes, I do. But not for that file which was hanging.

I save mdl and user buffer for paging i/o write and set it back on
completion routine for interested files and one of that paging i/o write
also blocked which I forgot to put in last mail.

Thanks
-Ramaraj

THREAD 81fba8a0 Cid 8.b0 Teb: 00000000 Win32Thread: 00000000 WAIT:
(Executive) KernelMode Non-Alertable
814f24e8 SynchronizationEvent
81fba988 NotificationTimer
Not impersonating
Owning Process 820196e0
WaitTime (seconds) 32759
Context Switch Count 1901
UserTime 0:00:00.0000
KernelTime 0:00:00.0015
Start Address vmfiltr!WorkerThreadStart (0xf87c93ac)
Stack Init f24e8000 Current f24e7794 Base f24e8000 Limit f24e5000
Call 0
Priority 9 BasePriority 8 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f24e77ac 8042c321 00000000 8144a6c8 81fba8a0 nt!KiSwapThread+0x1b1
f24e77d4 80415820 814f24e8 00000000 00000000
nt!KeWaitForSingleObject+0x1a3
f24e7814 80414c0d 8144a6c8 8144a6c8 f24e7838
nt!ExpWaitForResource+0x1b4
f24e7824 80414c61 00085000 e27200d8 814a10c8
nt!ExpAcquireResourceExclusiveLite+0x7b
f24e7838 f873a773 8144a6fc 00000001 00000000
nt!ExAcquireResourceExclusiveLite+0x45
f24e7bb0 f87333e8 814a10c8 813817a8 817f9020
Ntfs!NtfsCommonWrite+0x7cf
f24e7c18 8041de41 817f9020 813817a8 e279d008 Ntfs!NtfsFsdWrite+0xee
f24e7c2c f87ba76e 00000000 00000000 f24e7c64 nt!IopfCallDriver+0x35
f24e7d74 f87c9678 817f3340 81340a68 817f33f8
myfilter!VmDDirectIoWrite+0xff4
f24e7d94 f87c9451 8139a9f0 f87cab50 8139a9f0
myfilter!CallCompletionWorkRoutine+0x38
f24e7da8 80455a82 f87cab50 00000000 00000000
myfilter!WorkerThread+0xa5
f24e7ddc 8046b012 f87c93ac f87cab50 00000000
nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Tony Mason
Sent: Tuesday, September 16, 2003 8:01 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] RE: system hang

Ramaraj,

Are you modifying the paging I/O IRP in any way. For example, do you change
Irp->MdlAddress? If so, make sure you also reset Irp->UserBuffer. To
Irp->see
why, look at deviosup.c in FastFat where it breaks I/O operations up into
multiple pieces - it uses Irp->UserBuffer (not as a valid address, just as
an index).

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Ramaraj Pandian [mailto:xxxxx@vormetric.com]
Sent: Tuesday, September 16, 2003 10:22 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] system hang

I am having system hang problem once in a while testing with IoMeter. I cam
move windows and mouse, but I cant launch any new process or kill. When I
dumped the process, I got the following. This one never satisfied. Can
anyone shred some light why this never satisfied?

-Thanks
Ramaraj

THREAD 81344c00 Cid 148.190 Teb: 7ffde000 Win32Thread: 00000000
WAIT: (WrPageIn) KernelMode Non-Alertable
8178ea28 NotificationEvent
IRP List:
8143ce28: (0006,01d8) Flags: 00000900 Mdl: 00000000
817a1268: (0006,01d8) Flags: 00000884 Mdl: 00000000
Not impersonating
Owning Process 817b0800
WaitTime (seconds) 25986
Context Switch Count 9
UserTime 0:00:00.0000
KernelTime 0:00:00.0000
Start Address 0x7c4e9824
Win32 Start Address NTDLL!RtlpWorkerThread (0x77f98a70)
Stack Init f1a14000 Current f1a12ef8 Base f1a14000 Limit f1a11000
Call 0
Priority 9 BasePriority 9 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f1a12f10 8042c321 00000000 00000000 8178ea28 nt!KiSwapThread+0x1b1
f1a12f38 80442439 8178ea28 00000009 00000000
nt!KeWaitForSingleObject+0x1a3
f1a12f64 804413d9 8205c4b0 e273c4a8 d5140000
nt!MiWaitForInPageComplete+0x17
f1a12fa4 8044a8c2 00000000 d5140000 c0354500
nt!MiDispatchFault+0x27f
f1a12ff4 804476db 00000000 00000000 00000000 nt!MmAccessFault+0x702
f1a13024 8040b28a d5140000 00000000 e27b46f8
nt!MmCheckCachedPageState+0x299
f1a130f4 f8735787 81326ee8 f1a132b0 00000100 nt!CcCopyRead+0x61e
f1a13308 f8736083 81324308 8143ce28 00000001
Ntfs!NtfsCommonRead+0x125f
f1a133a4 8041de41 81f873e0 8143ce28 8143cfb0 Ntfs!NtfsFsdRead+0x201
f1a133b8 f87c0a83 81f80020 8143ce28 00000000 nt!IopfCallDriver+0x35
f1a13404 f87c0731 81f80020 8143ce28 81f800d8
myfilter!FileIoDispatch+0x2d6
f1a13420 f87c0373 81f80020 8143ce28 00000000
myfilter!VolumeDispatch+0x61
f1a13458 8041de41 81f80020 8143ce28 f1a134b8 myfilter!Dispatch+0x14a
f1a1346c f7a830ce f1a134b4 00000000 81471830 nt!IopfCallDriver+0x35
f1a134b5 dc8143ce 308143cf e8814718 0081326e SYMEVENT+0x10ce
28ffff03 00000000 00000000 00000000 00000000 +0xdc8143ce


You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


You are currently subscribed to ntfsd as: xxxxx@vormetric.com To
unsubscribe send a blank email to xxxxx@lists.osr.com


You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

This stack trace indicates the thread is blocked waiting for a resource.
Who owns the resource and why are THEY not proceeding? Use “!locks -v” and
it will give you yet more information…

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Ramaraj Pandian [mailto:xxxxx@vormetric.com]
Sent: Wednesday, September 17, 2003 12:04 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] RE: system hang

Hi Tony, Thanks for your reply.

Yes, I do. But not for that file which was hanging.

I save mdl and user buffer for paging i/o write and set it back on
completion routine for interested files and one of that paging i/o write
also blocked which I forgot to put in last mail.

Thanks
-Ramaraj

THREAD 81fba8a0 Cid 8.b0 Teb: 00000000 Win32Thread: 00000000 WAIT:
(Executive) KernelMode Non-Alertable
814f24e8 SynchronizationEvent
81fba988 NotificationTimer
Not impersonating
Owning Process 820196e0
WaitTime (seconds) 32759
Context Switch Count 1901
UserTime 0:00:00.0000
KernelTime 0:00:00.0015
Start Address vmfiltr!WorkerThreadStart (0xf87c93ac)
Stack Init f24e8000 Current f24e7794 Base f24e8000 Limit f24e5000
Call 0
Priority 9 BasePriority 8 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f24e77ac 8042c321 00000000 8144a6c8 81fba8a0 nt!KiSwapThread+0x1b1
f24e77d4 80415820 814f24e8 00000000 00000000
nt!KeWaitForSingleObject+0x1a3
f24e7814 80414c0d 8144a6c8 8144a6c8 f24e7838
nt!ExpWaitForResource+0x1b4
f24e7824 80414c61 00085000 e27200d8 814a10c8
nt!ExpAcquireResourceExclusiveLite+0x7b
f24e7838 f873a773 8144a6fc 00000001 00000000
nt!ExAcquireResourceExclusiveLite+0x45
f24e7bb0 f87333e8 814a10c8 813817a8 817f9020
Ntfs!NtfsCommonWrite+0x7cf
f24e7c18 8041de41 817f9020 813817a8 e279d008 Ntfs!NtfsFsdWrite+0xee
f24e7c2c f87ba76e 00000000 00000000 f24e7c64 nt!IopfCallDriver+0x35
f24e7d74 f87c9678 817f3340 81340a68 817f33f8
myfilter!VmDDirectIoWrite+0xff4
f24e7d94 f87c9451 8139a9f0 f87cab50 8139a9f0
myfilter!CallCompletionWorkRoutine+0x38
f24e7da8 80455a82 f87cab50 00000000 00000000
myfilter!WorkerThread+0xa5
f24e7ddc 8046b012 f87c93ac f87cab50 00000000
nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Tony Mason
Sent: Tuesday, September 16, 2003 8:01 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] RE: system hang

Ramaraj,

Are you modifying the paging I/O IRP in any way. For example, do you change
Irp->MdlAddress? If so, make sure you also reset Irp->UserBuffer. To
Irp->see
why, look at deviosup.c in FastFat where it breaks I/O operations up into
multiple pieces - it uses Irp->UserBuffer (not as a valid address, just as
an index).

Regards,

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: Ramaraj Pandian [mailto:xxxxx@vormetric.com]
Sent: Tuesday, September 16, 2003 10:22 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] system hang

I am having system hang problem once in a while testing with IoMeter. I cam
move windows and mouse, but I cant launch any new process or kill. When I
dumped the process, I got the following. This one never satisfied. Can
anyone shred some light why this never satisfied?

-Thanks
Ramaraj

THREAD 81344c00 Cid 148.190 Teb: 7ffde000 Win32Thread: 00000000
WAIT: (WrPageIn) KernelMode Non-Alertable
8178ea28 NotificationEvent
IRP List:
8143ce28: (0006,01d8) Flags: 00000900 Mdl: 00000000
817a1268: (0006,01d8) Flags: 00000884 Mdl: 00000000
Not impersonating
Owning Process 817b0800
WaitTime (seconds) 25986
Context Switch Count 9
UserTime 0:00:00.0000
KernelTime 0:00:00.0000
Start Address 0x7c4e9824
Win32 Start Address NTDLL!RtlpWorkerThread (0x77f98a70)
Stack Init f1a14000 Current f1a12ef8 Base f1a14000 Limit f1a11000
Call 0
Priority 9 BasePriority 9 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr Args to Child
f1a12f10 8042c321 00000000 00000000 8178ea28 nt!KiSwapThread+0x1b1
f1a12f38 80442439 8178ea28 00000009 00000000
nt!KeWaitForSingleObject+0x1a3
f1a12f64 804413d9 8205c4b0 e273c4a8 d5140000
nt!MiWaitForInPageComplete+0x17
f1a12fa4 8044a8c2 00000000 d5140000 c0354500
nt!MiDispatchFault+0x27f
f1a12ff4 804476db 00000000 00000000 00000000 nt!MmAccessFault+0x702
f1a13024 8040b28a d5140000 00000000 e27b46f8
nt!MmCheckCachedPageState+0x299
f1a130f4 f8735787 81326ee8 f1a132b0 00000100 nt!CcCopyRead+0x61e
f1a13308 f8736083 81324308 8143ce28 00000001
Ntfs!NtfsCommonRead+0x125f
f1a133a4 8041de41 81f873e0 8143ce28 8143cfb0 Ntfs!NtfsFsdRead+0x201
f1a133b8 f87c0a83 81f80020 8143ce28 00000000 nt!IopfCallDriver+0x35
f1a13404 f87c0731 81f80020 8143ce28 81f800d8
myfilter!FileIoDispatch+0x2d6
f1a13420 f87c0373 81f80020 8143ce28 00000000
myfilter!VolumeDispatch+0x61
f1a13458 8041de41 81f80020 8143ce28 f1a134b8 myfilter!Dispatch+0x14a
f1a1346c f7a830ce f1a134b4 00000000 81471830 nt!IopfCallDriver+0x35
f1a134b5 dc8143ce 308143cf e8814718 0081326e SYMEVENT+0x10ce
28ffff03 00000000 00000000 00000000 00000000 +0xdc8143ce


You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


You are currently subscribed to ntfsd as: xxxxx@vormetric.com To
unsubscribe send a blank email to xxxxx@lists.osr.com


You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com