What can cause the following error: ntdll!KiFastSystemCallRet

[Norbert Köhler]

Hi all,

After a couple of hours my application(C#) freezes randomly.

I opened the crash dump file with windbg:
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Windows XP Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Thu Jan 27 03:19:26.000 2011 (UTC + 1:00)
System Uptime: not available
Process Uptime: 0 days 6:38:53.000
.................................................. ..............
...........
Loading unloaded module list
.....
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(ba8.bac): Application hang - code cfffffff (first/second chance not available)
eax=7ffde000 ebx=0012ebb0 ecx=00000000 edx=7c90e514 esi=00000000 edi=7ffdf000
eip=7c90e514 esp=0012eb88 ebp=0012ec24 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
ntdll!KiFastSystemCallRet:
7c90e514 c3 ret

0:000> !analyze -v
************************************************** *****************************
* *
* Exception Analysis *
* *
************************************************** *****************************

Unable to load image C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\msc orlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni .dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mscorlib.ni.dll
*** WARNING: Unable to verify timestamp for System.Windows.Forms.ni.dll
*** WARNING: Unable to verify timestamp for System.ni.dll
Unable to load image C:\WINDOWS\system32\ieframe.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ieframe.dll

FAULTING_IP:
ntdll!KiFastSystemCallRet+0
7c90e514 c3 ret

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 7c90e514 (ntdll!KiFastSystemCallRet)
ExceptionCode: cfffffff (Application hang)
ExceptionFlags: 00000000
NumberParameters: 0

BUGCHECK_STR: HANG

DEFAULT_BUCKET_ID: APPLICATION_HANG

PROCESS_NAME: SAT History v0.3.exe

ERROR_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>

EXCEPTION_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>

MOD_LIST: <ANALYSIS/>

APPLICATION_VERIFIER_FLAGS: 0

MANAGED_STACK: !dumpstack -EE
No export dumpstack found

DERIVED_WAIT_CHAIN:

Dl Eid Cid WaitType
-- --- ------- --------------------------
0 ba8.bac Handle

WAIT_CHAIN_COMMAND: ~0s;k;;

BLOCKING_THREAD: 00000bac

PRIMARY_PROBLEM_CLASS: APPLICATION_HANG

LAST_CONTROL_TRANSFER: from 7c90df4a to 7c90e514

FAULTING_THREAD: 00000000

STACK_TEXT:
0012eb84 7c90df4a 7c809590 00000002 0012ebb0 ntdll!KiFastSystemCallRet
0012eb88 7c809590 00000002 0012ebb0 00000001 ntdll!ZwWaitForMultipleObjects+0xc
0012ec24 7e4195f9 00000002 0012ec4c 00000000 kernel32!WaitForMultipleObjectsEx+0x12c
0012ec80 7752ebd6 00000001 0012ef80 0000032c user32!RealMsgWaitForMultipleObjectsEx+0x13e
0012eca8 77557237 0012ef80 0000032c 0012ecd4 ole32!CCliModalLoop::BlockFn+0x80
0012ed1c 79f817bd 00000002 000003e8 00000001 ole32!CoWaitForMultipleHandles+0xcf
0012ed3c 79f81724 00000000 000003e8 00000001 mscorwks!NT5WaitRoutine+0x51
0012eda8 79f81688 00000001 0012ef80 00000000 mscorwks!MsgWaitHelper+0xa5
0012edc8 79f64404 00000001 0012ef80 00000001 mscorwks!Thread::DoAppropriateAptStateWait+0x28
0012ee4c 79f64499 00000001 0012ef80 00000001 mscorwks!Thread::DoAppropriateWaitWorker+0x13c
0012ee9c 79f2d808 00000001 0012ef80 00000001 mscorwks!Thread::DoAppropriateWait+0x40
0012efa0 792b68af 00000000 00000000 0151e46c mscorwks!WaitHandleNative::CorWaitOneNative+0x156
0012efbc 792b6865 000003e8 00000000 7931782c mscorlib_ni+0x1f68af
0012efd4 7b6f1a4f 00000000 00000103 0000c144 mscorlib_ni+0x1f6865
0012efec 7ba2d68b c77b8727 79e7a6b8 0012f184 System_Windows_Forms_ni+0x721a4f
0012f080 7b6f33ac 00000001 0151e458 0151e438 System_Windows_Forms_ni+0xa5d68b
0012f0bc 7b920bd7 0151e458 0151e458 0151e438 System_Windows_Forms_ni+0x7233ac
0012f0d4 7a924362 0151ddf0 0141a268 00000001 System_Windows_Forms_ni+0x950bd7
0012f108 7a922a93 0151ddf0 00000001 00000000 System_ni+0x4e4362
0012f154 7a923f8f 0151ddf0 00000009 00000000 System_ni+0x4e2a93
0012f170 7aa8f594 0022c510 00000001 c77b8727 System_ni+0x4e3f8f
0012f200 7e418734 00010438 0000201a 00000001 System_ni+0x64f594
0012f22c 7e418816 003b247a 00010438 0000201a user32!InternalCallWinProc+0x28
0012f294 7e4189cd 00000000 003b247a 00010438 user32!UserCallWinProcCheckWow+0x150
0012f2f4 7e418a10 0012f390 00000000 0012f320 user32!DispatchMessageWorker+0x306
0012f304 01393c12 0012f390 c77b8727 00000000 user32!DispatchMessageW+0xf
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f320 7b1d8d2e 01412624 00000001 013d916c 0x1393c12
0012f3d4 7b1d8997 00000000 ffffffff 00000000 System_Windows_Forms_ni+0x208d2e
0012f42c 7b1d87e1 0140a644 1bac0007 00000000 System_Windows_Forms_ni+0x208997
0012f45c 7b195931 0145aac0 0012f4ac 013c37ec System_Windows_Forms_ni+0x2087e1
0012f480 79e71b4c 0012f4cc 00000000 0012f510 System_Windows_Forms_ni+0x1c5931
0012f490 79e821b9 0012f560 00000000 0012f530 mscorwks!CallDescrWorker+0x33
0012f510 79e96531 0012f560 00000000 0012f530 mscorwks!CallDescrWorkerWithHandler+0xa3
0012f648 79e96564 00a5c020 0012f714 0012f6e0 mscorwks!MethodDesc::CallDescr+0x19c
0012f664 79e96582 00a5c020 0012f714 0012f6e0 mscorwks!MethodDesc::CallTargetWorker+0x1f
0012f67c 79f0784d 0012f6e0 c76c1e47 00000000 mscorwks!MethodDescCallSite::CallWithValueTypes_Re tArgSlot+0x1a
0012f7e0 79f0776d 00a53048 00000001 0012f81c mscorwks!ClassLoader::RunMain+0x223
0012fa48 79f07cbd 00000000 c76c16bf 00000001 mscorwks!Assembly::ExecuteMainMethod+0xa6
0012ff18 79f07ea7 00400000 00000000 c76c16cf mscorwks!SystemDomain::ExecuteMainMethod+0x456
0012ff68 79f07dd7 00400000 c76c1617 02c1dd60 mscorwks!ExecuteEXE+0x59
0012ffb0 79007c24 7c90d96e 79e70000 0012fff0 mscorwks!_CorExeMain+0x15c
0012ffc0 7c817077 02c1dd60 7c90d96e 7ffdf000 mscoree!_CorExeMain+0x2c
0012fff0 00000000 79007bf0 00000000 00000000 kernel32!BaseProcessStart+0x23


FOLLOWUP_IP:
mscorwks!NT5WaitRoutine+51
79f817bd 3d15010180 cmp eax,80010115h

SYMBOL_STACK_INDEX: 6

SYMBOL_NAME: mscorwks!NT5WaitRoutine+51

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: mscorwks

IMAGE_NAME: mscorwks.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4a7cd88e

STACK_COMMAND: ~0s ; kb

BUCKET_ID: HANG_mscorwks!NT5WaitRoutine+51

FAILURE_BUCKET_ID: APPLICATION_HANG_cfffffff_mscorwks.dll!NT5WaitRout ine

Followup: MachineOwner
---------

All procedures are between try-cath in the source code.
Any idea, How do I continue the debugging or What can cause the error?

Thanks in advance,
With Regards,
Norbert