Crash related to ntdll.dll - Garry's Mod

[Revenge282]

BASIC INFO
Server OS: Windows Server 2003 x64
Processor: Intel Xeon X3440 Lynnfield 2.53GHz 8MB L3 Cache LGA 1156 95W Quad-Core Server Processor
Ram: 8GB
Game: Garry's Mod
Start Up Command:

Code:

srcds.exe -console -game garrysmod -ip 208.115.216.42 -port 27015 -maxplayers 60 +sv_scriptenforcer 1 +sv_scriptenforcer_initialkick 0 +map rp_evocity_v2d +exec server.cfg +gamemode perp -nohltv -tickrate 33 +fps_max 0

Admin Mods: None
Other Server Settings: DEP is fully disabled via boot.ini, the pagefile is running at 8GB on a separate hard drive, and there are no MetaMod or VSP plugins running.

We are having an issue with random crashes and sometime error messages that crash the server. There doesn't seem to be a pattern in the crashes either, which makes figuring out all that much harder. The issue seems to lie with ntdll.dll, which after some research, seems to be part of a lot of SRCDS crashes. The dump files are mostly the same.

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\***\orangebox\dumps\crash_srcds.exe_20101219163958_1.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
Windows Server 2003 Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Machine Name:
Debug session time: Sun Dec 19 16:39:58.000 2010 (UTC - 5:00)
System Uptime: not available
Process Uptime: 0 days 4:18:11.000
................................................................
......................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(9f0.fbc): Access violation - code c0000005 (first/second chance not available)
eax=00000000 ebx=002cdb41 ecx=00000000 edx=00000000 esi=000001c0 edi=00000000
eip=7d61c846 esp=002cda54 ebp=002cdac0 iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000202
Unable to load image C:\WINDOWS\system32\ntdll.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntdll.dll
*** ERROR: Module load completed but symbols could not be loaded for ntdll.dll
ntdll+0x1c846:
7d61c846 c20c00          ret     0Ch

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\***\orangebox\dumps\crash_srcds.exe_20101222172054_1.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Crash
Uptime( 0.938386 )

Memory
memusage( 22 % )
totalPhysical Mb(8182.88)
freePhysical Mb(6364.84)
totalPaging Mb(15914.80)
freePaging Mb(14096.53)
totalVirtualMem Mb(2047.88)
freeVirtualMem Mb(1650.24)
extendedVirtualFree Mb(0.00)

Paged Pool
prev PP PAGES: used: 0, free 0
final PP PAGES: used: 0, free 0
memallocfail? = 0
Active: inactive SpawnCount 0 MapLoad Count 0
Error count 0, end demo 0, abort count 0

ConVars (non-default)

var    value    default
sv_scriptenforcer
    '1' '0'
deathmatch
    '1' '0'
hostname
    'Garry's Mod' ''
sv_allow_voice_from_file
    '0' '1'
ip
    '208.115.216.42' 'localhost'
sv_timeout
    '180' '65'
sv_client_predict
    '1' '-1'
r_flashlightdepthtexture
    '0' '1'
mat_motion_blur_enabled
    '0' '1'
joy_xcontroller_found
    '0' '1'

Console History (reversed)

28(0.933577):  Unknown command "sv_allow_wait_command"
27(0.932971):  maxplayers set to 60
26(0.446569):  [Dec 18 2010 11:27:37]
25(0.446139):  Garry's Mod server.dll Build #111 24(0.178757):  OK
23(0.178282):  Mounting zeno_clash.. 22(0.178087):  Failed
21(0.177480):  Mounting hl1mp.. 20(0.177245):  Failed
19(0.176527):  Mounting hl1.. 18(0.176368):  Failed
17(0.175803):  Mounting lostcoast.. 16(0.175594):  OK
15(0.175149):  Mounting portal.. 14(0.174971):  OK
13(0.174419):  Mounting hl2mp.. 12(0.174281):  Failed
11(0.173773):  Mounting episodic.. 10(0.173533):  OK
9(0.173111):  Mounting tf.. 8(0.172854):  Failed
7(0.172379):  Mounting ep2.. 6(0.172144):  OK
5(0.171519):  Mounting dod.. 4(0.171275):  OK
3(0.170753):  Mounting cstrike.. 2(0.170255):  OK
1(0.169687):  Mounting hl2.. '
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
Windows Server 2003 Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Machine Name:
Debug session time: Wed Dec 22 17:20:54.000 2010 (UTC - 5:00)
System Uptime: not available
Process Uptime: 0 days 0:36:16.000
................................................................
.........
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(134.136c): Access violation - code c0000005 (first/second chance not available)
eax=00000000 ebx=002cdb7d ecx=00000000 edx=00000000 esi=00006f60 edi=00000000
eip=7d61c846 esp=002cda90 ebp=002cdafc iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000202
Unable to load image C:\WINDOWS\system32\ntdll.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntdll.dll
*** ERROR: Module load completed but symbols could not be loaded for ntdll.dll
ntdll+0x1c846:
7d61c846 c20c00          ret     0Ch

The most recent dump:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\***\orangebox\dumps\crash_srcds.exe_20101226180859_1.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Crash
Uptime( 0.853037 )

Memory
memusage( 18 % )
totalPhysical Mb(8182.88)
freePhysical Mb(6653.59)
totalPaging Mb(15914.80)
freePaging Mb(14572.83)
totalVirtualMem Mb(2047.88)
freeVirtualMem Mb(1650.24)
extendedVirtualFree Mb(0.00)

Paged Pool
prev PP PAGES: used: 0, free 0
final PP PAGES: used: 0, free 0
memallocfail? = 0
Active: inactive SpawnCount 0 MapLoad Count 0
Error count 0, end demo 0, abort count 0

ConVars (non-default)

var    value    default
sv_scriptenforcer
    '1' '0'
deathmatch
    '1' '0'
hostname
    'Garry's Mod' ''
sv_allow_voice_from_file
    '0' '1'
ip
    '208.115.216.42' 'localhost'
sv_timeout
    '180' '65'
sv_client_predict
    '1' '-1'
r_flashlightdepthtexture
    '0' '1'
mat_motion_blur_enabled
    '0' '1'
joy_xcontroller_found
    '0' '1'

Console History (reversed)

28(0.848210):  Unknown command "sv_allow_wait_command"
27(0.847452):  maxplayers set to 60
26(0.409591):  [Dec 18 2010 11:27:37]
25(0.409197):  Garry's Mod server.dll Build #111 24(0.167531):  OK
23(0.167176):  Mounting zeno_clash.. 22(0.166996):  Failed
21(0.166545):  Mounting hl1mp.. 20(0.166407):  Failed
19(0.165940):  Mounting hl1.. 18(0.165822):  Failed
17(0.165332):  Mounting lostcoast.. 16(0.165173):  OK
15(0.164737):  Mounting portal.. 14(0.164635):  OK
13(0.164240):  Mounting hl2mp.. 12(0.164074):  Failed
11(0.163603):  Mounting episodic.. 10(0.163483):  OK
9(0.163169):  Mounting tf.. 8(0.162963):  Failed
7(0.162606):  Mounting ep2.. 6(0.162470):  OK
5(0.162126):  Mounting dod.. 4(0.161798):  OK
3(0.161448):  Mounting cstrike.. 2(0.160972):  OK
1(0.160494):  Mounting hl2.. '
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
Windows Server 2003 Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Machine Name:
Debug session time: Sun Dec 26 18:08:59.000 2010 (UTC - 5:00)
System Uptime: not available
Process Uptime: 0 days 0:22:12.000
................................................................
.........
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(fe4.c34): Access violation - code c0000005 (first/second chance not available)
eax=00000000 ebx=002caacd ecx=00000000 edx=00000000 esi=00004858 edi=00000000
eip=7d61c846 esp=002ca9e0 ebp=002caa4c iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000202
Unable to load image C:\WINDOWS\system32\ntdll.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntdll.dll
*** ERROR: Module load completed but symbols could not be loaded for ntdll.dll
ntdll+0x1c846:
7d61c846 c20c00          ret     0Ch

I have more dump files, but like I said, they contain pretty much the same thing. If anyone can lend a hand, I would appreciate it.

[realchamp]

Found this, could be or couldn't be.
http://www.computerhope.com/issues/ch000960.htm

[Revenge282]

Thanks for the help, but there really wasn't much there for me to go off of. I know it's a core Windows file, but I don't know why it would be showing up in the dump files. The only things I can find related to the crash are that DEP can cause it, or it is some sort of memory error which I still don't fully understand.

[linda68]

Crashes related to ntdll.dll are quite common on Windows systems. The ntdll.dll file is a system file that is responsible for providing various services to programs running on Windows, including low-level system functions, kernel support, bitlife, and various other services.

[bevis]

Check if there is any other software running on your server that may be causing sumplete unlimited conflicts with the SRCDS. Try disabling or uninstalling any other software and see if the issue persists.