Ros boot failure with networking enabled in real hardware - ed 2 with tcpip traces

[Gge]

With current CVS + Realtek8139 nic driver enabled in Hivesy , Ros still 
fails to boot as per debug messages below
=> ed 2 based on Tcpip debug traces enabled.

Ros build with KDBG+DBG=1 - Real hardware
Note : Ntoskrnl+ICP+NDIS+HAL Sym files installed but only symbol from 
Ntoskrnl not displayed in the bugcheck

Any help suggested ? This boot failure is a regression as it worked 2 
weeks ago (Dpc problem)

Regards
Gerard

----------------------------------------------------------------------------
DriverBase for ndis.sys: dce70000
(ke/main.c:699) CommandLine: multi(0)disk(0)rdisk(0)partition(1)\reactos 
/DEBUGPORT=COM1/BAUDRATE=115200/KDSERIAL
DriverBase for \SystemRoot\system32\drivers\RTL8139.SYS: dcec0000
DriverBase for \SystemRoot\system32\drivers\floppy.sys: dcf4c000
DriverBase for \SystemRoot\system32\drivers\cdrom.sys: dcf71000
DriverBase for \SystemRoot\system32\drivers\fs_rec.sys: dcf81000
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
DriverBase for \SystemRoot\system32\drivers\beep.sys: dcf91000
(ldr/loader.c:319) Could not open module file: 
\SystemRoot\system32\drivers\sndblst.sys
(ldr/loader.c:319) Could not open module file: 
\SystemRoot\system32\drivers\es137140.sys
(ldr/loader.c:319) Could not open module file: 
\SystemRoot\system32\drivers\mpu401.sys
DriverBase for \SystemRoot\system32\drivers\null.sys: dcfd6000
DriverBase for \SystemRoot\system32\drivers\serial.sys: dcfe6000
Serial Driver 0.0.2
DriverBase for \SystemRoot\system32\drivers\psaux.sys: dcffe000
DriverBase for \SystemRoot\system32\drivers\keyboard.sys: dd01a000
DriverBase for \SystemRoot\system32\drivers\mouclass.sys: dd02c000
DriverBase for \SystemRoot\system32\drivers\debugout.sys: dd03b000
DriverBase for \SystemRoot\system32\drivers\blue.sys: dd04a000
DriverBase for \SystemRoot\system32\drivers\vbemp.sys: dd05a000
DriverBase for \SystemRoot\system32\drivers\videoprt.sys: dd07c000
DriverBase for \SystemRoot\system32\drivers\vgamp.sys: dd091000
DriverBase for \SystemRoot\system32\drivers\msfs.sys: dd0a2000
DriverBase for \SystemRoot\system32\drivers\npfs.sys: dd0bb000
DriverBase for \SystemRoot\system32\win32k.sys: ddb95000
DriverBase for \SystemRoot\system32\freetype.dll: ddcb3000
DriverBase for \SystemRoot\System32\kbdfr.dll: ddd3b000
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
WL-Status: ReactOS is starting up...
(io/create.c:90) Parent is a Directory which is neither a file type nor 
a device type
RtlQueryRegistryValues() failed (Status c0000034)
RtlQueryRegistryValues() failed (Status c0000034)
(service/sctrl.c:120) ScDispatcherLoop() called
DriverBase for \SystemRoot\system32\drivers\tcpip.sys: de345000
(tcpip/main.c:703)(DriverEntry) Called.
(network/ip.c:352)(IPStartup) Called.
(network/router.c:416)(RouterStartup) Called.
(network/neighbor.c:174)(NBStartup) Called.
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (4096) bytes at 
(0xC06D2000).
Here1
kmem_malloc(1)
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (4096) bytes at 
(0xC0788000).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06CFE68).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c0788000 fbsd 
(*:0) (Called from *:0)
kmem_malloc done
Freeing c0788000 onto the free list
Freeing c0788800 onto the free list
done with m_clalloc
Here2
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (4) bytes at (0xC06C2698).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06CFEA8).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06c2698 fbsd 
(*:0) (Called from *:0)
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (4096) bytes at 
(0xC078A000).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06CFEE8).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c078a000 fbsd 
(*:0) (Called from *:0)
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (508) bytes at (0xC06D1C60).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06CFF28).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06d1c60 fbsd 
(*:0) (Called from *:0)
domaininit starting
(1) Domain internet initializing
Registering protocols for internet
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (508) bytes at (0xC06C65F8).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06CFF68).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06c65f8 fbsd 
(*:0) (Called from *:0)
Domaininit done
(datalink/lan.c:1106)(LANRegisterProtocol) Called.
(datalink/lan.c:475)(ProtocolBindAdapter) Called with registry path 
\Registry\Machine\System\CurrentControlSet\Services\Rtl81391\Parameters\Tcpip 
for \Device\Rtl81391
(datalink/lan.c:904)(LANRegisterAdapter) Called.
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (92) bytes at (0xC06C6898).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06C6B38).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06c6898 ExAl 
(datalink/lan.c:906) (Called from datalink/lan.c:906)
(datalink/lan.c:925)(LANRegisterAdapter) opening adapter \Device\Rtl81391
(datalink/lan.c:740)(BindAdapter) Called.
(network/ip.c:171)(IPCreateInterface) Called. BindInfo (0xDE1019C0).
(network/ip.c:177)(IPCreateInterface) Interface address (00 10 A7 13 97 61).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (156) bytes at (0xC06C6C78).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06C6D40).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06c6c78 ExAl 
(network/ip.c:181) (Called from network/ip.c:181)
(tcpip/info.c:33)(InsertTDIInterfaceEntity) Inserting interface c06c6c78 
(2 entities already)
(datalink/lan.c:623)(ReadIPAddressFromRegistry) Information DataLength: 0x18
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (13) bytes at (0xC06D1FC8).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06C6F10).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06d1fc8 ExAl 
(datalink/lan.c:633) (Called from datalink/lan.c:633)
(datalink/lan.c:623)(ReadIPAddressFromRegistry) Information DataLength: 0x14
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (11) bytes at (0xC06C6F50).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC06C6F88).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06c6f50 ExAl 
(datalink/lan.c:633) (Called from datalink/lan.c:633)
(datalink/lan.c:623)(ReadIPAddressFromRegistry) Information DataLength: 0x1e
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (16) bytes at (0xC07870E8).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC0787120).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c07870e8 ExAl 
(datalink/lan.c:633) (Called from datalink/lan.c:633)
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (12) bytes at (0xC0787160).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC0787198).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c0787160 ExAl 
(datalink/lan.c:709) (Called from datalink/lan.c:709)
(datalink/lan.c:823)(BindAdapter) --> Our IP address on this interface: 
'10.0.0.3'
(datalink/lan.c:828)(BindAdapter) --> Our net mask on this interface: 
'255.255.255.0'
(datalink/lan.c:834)(BindAdapter) --> Our gateway is: '10.0.0.138'
(network/neighbor.c:401)(NBFindOrCreateNeighbor) Called. Interface 
(0xC06C6C78)  Address (0xDE1019A0).
(network/neighbor.c:360)(NBLocateNeighbor) Called. Address (0xDE1019A0).
(network/neighbor.c:379)(NBLocateNeighbor) Leaving.
(network/neighbor.c:272)(NBAddNeighbor) Called. Interface (0xC06C6C78) 
Address (0xDE1019A0)  LinkAddress (0x0)  LinkAddressLength (6)  State (0x1)
(network/neighbor.c:294)(NBAddNeighbor) NCE: c07871d8
(network/router.c:185)(RouterAddRoute) Called. NetworkAddress 
(0xDE101980)  Netmask (0xDE101980) Router (0xC07871D8)  Metric (1).
(network/router.c:190)(RouterAddRoute) NetworkAddress (10.0.0.138) 
Netmask (10.0.0.138)  Router (10.0.0.138).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (68) bytes at (0xC0787250).
(network/ip.c:246)(IPRegisterInterface) Called. IF (0xC06C6C78).
(network/neighbor.c:272)(NBAddNeighbor) Called. Interface (0xC06C6C78) 
Address (0xC06C6C9C)  LinkAddress (0xC06C68C8)  LinkAddressLength (6) 
State (0x80)
(network/neighbor.c:294)(NBAddNeighbor) NCE: c07872c0
(network/router.c:185)(RouterAddRoute) Called. NetworkAddress 
(0xDE101920)  Netmask (0xC06C6CCC) Router (0xC07872C0)  Metric (1).
(network/router.c:190)(RouterAddRoute) NetworkAddress (255.255.255.0) 
Netmask (255.255.255.0)  Router (255.255.255.0).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (68) bytes at (0xC0787338).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (56) bytes at (0xC07873A8).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC0787408).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c07873a8 ExAl 
(transport/tcp/if.c:36) (Called from transport/tcp/if.c:36)
(transport/tcp/if.c:41)(TCPPrepareInterface) Called
(transport/tcp/if.c:56)(TCPPrepareInterface) Prepare interface c06c6c78 
: addr 300000a
(transport/tcp/if.c:63)(TCPPrepareInterface) Leaving
(datalink/lan.c:1041)(LANRegisterAdapter) Leaving.
(network/loopback.c:71)(LoopRegisterAdapter) Called.
(network/ip.c:171)(IPCreateInterface) Called. BindInfo (0xDE101B60).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (156) bytes at (0xC0787448).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC0787510).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c0787448 ExAl 
(network/ip.c:181) (Called from network/ip.c:181)
(tcpip/info.c:33)(InsertTDIInterfaceEntity) Inserting interface c0787448 
(3 entities already)
(tcpip/info.c:42)(InsertTDIInterfaceEntity) Entity 2 is an IF.  Found 1
(network/ip.c:246)(IPRegisterInterface) Called. IF (0xC0787448).
(network/neighbor.c:272)(NBAddNeighbor) Called. Interface (0xC0787448) 
Address (0xC078746C)  LinkAddress (0x0)  LinkAddressLength (0)  State (0x80)
(network/neighbor.c:294)(NBAddNeighbor) NCE: c0787550
(network/router.c:185)(RouterAddRoute) Called. NetworkAddress 
(0xDE101B10)  Netmask (0xC078749C) Router (0xC0787550)  Metric (1).
(network/router.c:190)(RouterAddRoute) NetworkAddress (255.255.255.0) 
Netmask (255.255.255.0)  Router (255.255.255.0).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (68) bytes at (0xC07875C0).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (56) bytes at (0xC0787630).
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC0787690).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c0787630 ExAl 
(transport/tcp/if.c:36) (Called from transport/tcp/if.c:36)
(transport/tcp/if.c:41)(TCPPrepareInterface) Called
(transport/tcp/if.c:56)(TCPPrepareInterface) Prepare interface c0787448 
: addr 100007f
(transport/tcp/if.c:63)(TCPPrepareInterface) Leaving
(network/loopback.c:89)(LoopRegisterAdapter) Leaving.
DriverBase for \SystemRoot\system32\drivers\afd.sys: de405000
(NTDLL:ldr/utils.c:2060) Relocating (78000000 -> 891000) 
C:\reactos\system32\dnsapi.dll
DriverBase for \SystemRoot\System32\framebuf.DLL: de5b4000
(network/neighbor.c:92)(NCETimeout) Called. NCE (0xC07871D8).
(network/neighbor.c:93)(NCETimeout) NCE->State is (0x1).
(network/neighbor.c:226)(NBSendSolicit) Called. NCE (0xC07871D8).
(network/neighbor.c:233)(NBSendSolicit) NCE: c07871d8
(network/arp.c:124)(ARPTransmit) Called.
(network/arp.c:45)(PrepareARPPacket) Called.
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC0892778).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c0892710 ExAl 
(network/arp.c:54) (Called from network/arp.c:54)
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC08927B8).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06d0010 npkt 
(network/arp.c:54) (Called from network/arp.c:54)
(tcpip/pool.c:29)(PoolAllocateBuffer) Allocated (24) bytes at (0xC08927F8).
(network/memtrack.c:36)(ShowTrackedThing) [Alloc] Thing c06cf030 nbuf 
(network/arp.c:54) (Called from network/arp.c:54)
(network/arp.c:157)(ARPTransmit) Sending ARP Packet
(datalink/lan.c:505)(LANTransmit) Called( NdisPacket c06d0010, Offset 
14, Adapter c06c6898 )
(datalink/lan.c:514)(LANTransmit) Adapter Address [00 10 a7 13 97 61]
(datalink/lan.c:563)(LANTransmit) LinkAddress: 0
(datalink/lan.c:577)(LANTransmit) NdisSend
(datalink/lan.c:579)(LANTransmit) NdisSend Done
(datalink/lan.c:183)(ProtocolSendComplete) Calling completion routine
(network/arp.c:106)(ARPTransmitComplete) Called.
(tcpip/buffer.c:395)(FreeNdisPacketX) Packet (0xC06D0010)
(tcpip/buffer.c:405)(FreeNdisPacketX) Freeing ndis buffer (0xC06CF030)
(network/memtrack.c:36)(ShowTrackedThing) [Free ] Thing c06cf030 nbuf 
(network/arp.c:54) (Called from network/arp.c:107)
(tcpip/pool.c:45)(PoolFreeBuffer) Freeing buffer at (0xC08927F8).
(tcpip/buffer.c:408)(FreeNdisPacketX) Freeing exal buffer (0xC0892710)
(network/memtrack.c:36)(ShowTrackedThing) [Free ] Thing c0892710 ExAl 
(network/arp.c:54) (Called from network/arp.c:107)
(tcpip/pool.c:45)(PoolFreeBuffer) Freeing buffer at (0xC0892778).
(network/memtrack.c:36)(ShowTrackedThing) [Free ] Thing c06d0010 npkt 
(network/arp.c:54) (Called from network/arp.c:107)
(tcpip/pool.c:45)(PoolFreeBuffer) Freeing buffer at (0xC08927B8).
(datalink/lan.c:188)(ProtocolSendComplete) Finished
(datalink/lan.c:183)(ProtocolSendComplete) Calling completion routine
(network/arp.c:106)(ARPTransmitComplete) Called.
(tcpip/buffer.c:395)(FreeNdisPacketX) Packet (0xC06D0010)
(tcpip/buffer.c:405)(FreeNdisPacketX) Freeing ndis buffer (0xC06D0058)
(network/memtrack.c:132)(TrackDumpFL) Dump: network/arp.c:107
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c0788000 fbsd (*:0)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c06c2698 fbsd (*:0)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c078a000 fbsd (*:0)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c06d1c60 fbsd (*:0)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c06c65f8 fbsd (*:0)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c06c6898 ExAl 
(datalink/lan.c:906)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c06c6c78 ExAl 
(network/ip.c:181)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c06d1fc8 ExAl 
(datalink/lan.c:633)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c06c6f50 ExAl 
(datalink/lan.c:633)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c07870e8 ExAl 
(datalink/lan.c:633)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c0787160 ExAl 
(datalink/lan.c:709)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c07873a8 ExAl 
(transport/tcp/if.c:36)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c0787448 ExAl 
(network/ip.c:181)
(network/memtrack.c:47)(ShowTrackedThing) [Dump ] Thing c0787630 ExAl 
(transport/tcp/if.c:36)
UNTRACK: SPECIFIED ALREADY FREE ITEM c06d0058
(ke/process.c:72) Invalid attach (Thread is executing a DPC!)
KeBugCheck at ke/process.c:73
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugCheck at ke/spinlock.c:190
Spinning on spinlock c014ceb0 current value 1
KeBugChecDouble Fault Exception: 8(0)
CS:EIP 8:c033928a <hal.dll: 428a>
cr2 dcdb0ffc cr3 338000 Proc: c056a068 Pid: 1 <SYSTEM> Thrd: c0571718 Tid: c
DS 10 ES 10 FS 30 GS 10
EAX: 000000f8   EBX: 00000004   ECX: 00000000
EDX: 00000001   EBP: dcdb1020   ESI: c0592548
    ESP: dcdb1000EDI: 00001000   EFLAGS: 00010002 kESP dcdb1000 kernel 
stack base dcdb1000
Frames: <ntoskrnl.exe: 26d4 (ke/i386/irq.c:310 (KiInterruptDispatch))> 
<ntoskrnl.exe: 2e27 (C:\DOCUME~1\home\LOCALS~1\Temp/ccCKaaaa.s:223 
(RemoveEntryList))> <hal.dll: 4de6> <ntoskrnl.exe: b0ba5 
(kd/kdebug.c:333 (KdSerialDebugPrint))> <ntoskrnl.exe: b0c58 
(kd/kdebug.c:366 (KdpPrintString))> <ntoskrnl.exe: 322be (dbg/print.c:73 
(DbgPrint))> <ntoskrnl.exe: 144e2 (ke/spinlock.c:190 
(KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> <ntoskrnl.exe: 
160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> <ntoskrnl.exe: 
13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 24e9> 
<videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> <videoprt.sys: 
1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 144ef 
(ke/spinlock.c:190 (KiAcquireSpinLock))> <hal.dll: 6e7b> <hal.dll: 6d7e> 
<ntoskrnl.exe: 160f5 (ke/wait.c:61 (KeAcquireDispatcherDatabaseLock))> 
<ntoskrnl.exe: 13086 (ke/process.c:68 (KeAttachProcess))> <videoprt.sys: 
24e9> <videoprt.sys: 183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> 
<videoprt.sys: 1046> <hal.dll: 316d> <ntoskrnl.exe: e77c (ke/bug.c:110 
(KeBugCheckWithTf))> <ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> 
<ntoskrnl.exe: e8fa (ke/bug.c:220 (KeBugCheck))> <ntoskrnl.exe: 130da 
(ke/process.c:73 (KeAttachProcess))> <videoprt.sys: 24e9> <videoprt.sys: 
183d> <vbemp.sys: 1de4> <vbemp.sys: 1975> <videoprt.sys: 1046> <hal.dll: 
316d> <ntoskrnl.exe: e77c (ke/bug.c:110 (KeBugCheckWithTf))> 
<ntoskrnl.exe: e8da (ke/bug.c:203 (KeBugCheckEx))> <ntoskrnl.exe: e8fa 
(ke/bug.c:220 (KeBugCheck))> <tcpip.sys: 92a3> <tcpip.sys: 15697> 
<tcpip.sys: 1d8c> <tcpip.sys: 15af9> <tcpip.sys: b40e> <ndis.sys: 7c00> 
<RTL8139.SYS: 2de5> <RTL8139.SYS: 528> <ndis.sys: 48c7> <ntoskrnl.exe: 
10029 (ke/dpc.c:524 (KiDispatchInterrupt))> <hal.dll: 3ff1> <hal.dll: 
4104> <hal.dll: 6f4c> <hal.dll: 6dcd> <tcpip.sys: 904b> <tcpip.sys: 
199eb> <tcpip.sys: 100f5> <ntoskrnl.exe: 84f13 (ex/work.c:57 
(ExWorkerThreadEntryPoint))> <ntoskrnl.exe: 39e0 
(C:\DOCUME~1\home\LOCALS~1\Temp/ccYzaaaa.s:156 (KeUserModeCallback))>

[art yerkes]

On Sun, 05 Dec 2004 13:03:05 +0100
Gge [e-mail] wrote:
> With current CVS + Realtek8139 nic driver enabled in Hivesy , Ros still 
> fails to boot as per debug messages below
> => ed 2 based on Tcpip debug traces enabled.

Gge: hmm i'm not sure.  I wonder if any big guns in DPCs will help out here.
Please try this patch.  My feeling is that TransferDataComplete is being
allowed to run parallel with the work item.  The only way i can see this
happening is if somehow a buffer is reclaimed before its fully freed.  This
does seem to be the same bug as before but i'm not convinced its a
regression so much as the same bug having been recently hidden and then
reexposed.  I've also ordered an RTL8139 card for the real hardware box i
intend to start using for reactos.  No time like the present to try this
myself.
-- 
Here's a simple experiment. Stand on a train track between two locomotives
which are pushing on you with equal force in opposite directions. You will
exhibit no net motion. None the less, you may soon begin to notice that
something important is happening.
-- Robert Stirniman

[Gge]

art yerkes wrote:
> On Sun, 05 Dec 2004 13:03:05 +0100
> Gge [e-mail] wrote:
> > With current CVS + Realtek8139 nic driver enabled in Hivesy , Ros still 
> > fails to boot as per debug messages below
> > => ed 2 based on Tcpip debug traces enabled.
>
> Gge: hmm i'm not sure.  I wonder if any big guns in DPCs will help out here.
> Please try this patch.  My feeling is that TransferDataComplete is being
> allowed to run parallel with the work item.  The only way i can see this
> happening is if somehow a buffer is reclaimed before its fully freed.  This
> does seem to be the same bug as before but i'm not convinced its a
> regression so much as the same bug having been recently hidden and then
> reexposed.  I've also ordered an RTL8139 card for the real hardware box i
> intend to start using for reactos.  No time like the present to try this
> myself.
> Index: drivers/net/tcpip/datalink/lan.c
>
> RCS file: /CVS/ReactOS/reactos/drivers/net/tcpip/datalink/lan.c,v
> retrieving revision 1.31
> diff -u -r1.31 lan.c
> --- drivers/net/tcpip/datalink/lan.c	4 Dec 2004 23:29:55 -0000	1.31
> +++ drivers/net/tcpip/datalink/lan.c	5 Dec 2004 14:36:57 -0000
> @@ -273,14 +273,18 @@
>      BOOLEAN WorkStart;
>      PLAN_WQ_ITEM WQItem;
>      PLAN_ADAPTER Adapter = (PLAN_ADAPTER)BindingContext;
>
> KIRQL OldIrql;
>
> ASSERT(KeGetCurrentIrql() == DISPATCH_LEVEL);
>
> if( Status != NDIS_STATUS_SUCCESS ) return;
>
> TcpipAcquireSpinLock( &LanWorkLock, &OldIrql );
> WQItem = ExAllocatePool( NonPagedPool, sizeof(LAN_WQ_ITEM) );
> if( !WQItem ) return;
> if( !WQItem ) {
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
> return;
> }
> TcpipAcquireSpinLockAtDpcLevel( &LanWorkLock );
> WorkStart = IsListEmpty( &LanWorkList );
> WQItem->Packet = Packet;
> WQItem->Adapter = Adapter;
>
> @@ -288,7 +292,7 @@
>      InsertTailList( &LanWorkList, &WQItem->ListEntry );
>      if( WorkStart )
>    ExQueueWorkItem( &LanWorkItem, CriticalWorkQueue );
> TcpipReleaseSpinLockFromDpcLevel( &LanWorkLock );
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
>
> }
>
> NDIS_STATUS STDCALL ProtocolReceive(
> @@ -322,6 +326,7 @@
>      PNDIS_PACKET NdisPacket;
>      PLAN_ADAPTER Adapter = (PLAN_ADAPTER)BindingContext;
>      PETH_HEADER EHeader  = (PETH_HEADER)HeaderBuffer;
>
> KIRQL OldIrql;
>
> TI_DbgPrint(DEBUG_DATALINK, ("Called. (packetsize %d)\n",PacketSize));
>
> @@ -359,9 +364,12 @@
>      TI_DbgPrint(DEBUG_DATALINK, ("Adapter: %x (MTU %d)\n", 
>    			 Adapter, Adapter->MTU));
> TcpipAcquireSpinLock( &LanWorkLock, &OldIrql );
> NdisStatus = AllocatePacketWithBuffer( &NdisPacket, NULL,
>                                           PacketSize + HeaderBufferSize );
>    if( NdisStatus != NDIS_STATUS_SUCCESS ) {
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
> return NDIS_STATUS_NOT_ACCEPTED;
> }
>
> @@ -407,6 +415,7 @@
>    			     PacketSize);
>  TI_DbgPrint(DEBUG_DATALINK, ("leaving\n"));
>
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
>
> return NDIS_STATUS_SUCCESS;
>
> }

Thanks Arty,

Plesae can you send me the tcp.sys file or the new lan.c .
I do not use diff tools

Regards
Gerard

[Sylvain Petreolle]

Hi Arty,

I have the very same problem as Gge
(though the error shows up immediately after the "Domaininit done" event.)
I tried your tcpip patch, but I still get the error.
> Gge: hmm i'm not sure.  I wonder if any big guns in DPCs will help out here.
> Please try this patch.  My feeling is that TransferDataComplete is being
> allowed to run parallel with the work item.  The only way i can see this
> happening is if somehow a buffer is reclaimed before its fully freed.  This
> does seem to be the same bug as before but i'm not convinced its a
> regression so much as the same bug having been recently hidden and then
> reexposed.  I've also ordered an RTL8139 card for the real hardware box i
> intend to start using for reactos.  No time like the present to try this
> myself.

=====
Sylvain Petreolle (spetreolle_at_users_dot_sourceforge_dot_net)
humans are like computers,
yesterday the BIOS was all
- today its just a word

[Gge]

art yerkes wrote:
> On Sun, 05 Dec 2004 13:03:05 +0100
> Gge [e-mail] wrote:
> > With current CVS + Realtek8139 nic driver enabled in Hivesy , Ros still 
> > fails to boot as per debug messages below
> > => ed 2 based on Tcpip debug traces enabled.
>
> Gge: hmm i'm not sure.  I wonder if any big guns in DPCs will help out here.
> Please try this patch.  My feeling is that TransferDataComplete is being
> allowed to run parallel with the work item.  The only way i can see this
> happening is if somehow a buffer is reclaimed before its fully freed.  This
> does seem to be the same bug as before but i'm not convinced its a
> regression so much as the same bug having been recently hidden and then
> reexposed.  I've also ordered an RTL8139 card for the real hardware box i
> intend to start using for reactos.  No time like the present to try this
> myself.
> Index: drivers/net/tcpip/datalink/lan.c
>
> RCS file: /CVS/ReactOS/reactos/drivers/net/tcpip/datalink/lan.c,v
> retrieving revision 1.31
> diff -u -r1.31 lan.c
> --- drivers/net/tcpip/datalink/lan.c	4 Dec 2004 23:29:55 -0000	1.31
> +++ drivers/net/tcpip/datalink/lan.c	5 Dec 2004 14:36:57 -0000
> @@ -273,14 +273,18 @@
>      BOOLEAN WorkStart;
>      PLAN_WQ_ITEM WQItem;
>      PLAN_ADAPTER Adapter = (PLAN_ADAPTER)BindingContext;
>
> KIRQL OldIrql;
>
> ASSERT(KeGetCurrentIrql() == DISPATCH_LEVEL);
>
> if( Status != NDIS_STATUS_SUCCESS ) return;
>
> TcpipAcquireSpinLock( &LanWorkLock, &OldIrql );
> WQItem = ExAllocatePool( NonPagedPool, sizeof(LAN_WQ_ITEM) );
> if( !WQItem ) return;
> if( !WQItem ) {
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
> return;
> }
> TcpipAcquireSpinLockAtDpcLevel( &LanWorkLock );
> WorkStart = IsListEmpty( &LanWorkList );
> WQItem->Packet = Packet;
> WQItem->Adapter = Adapter;
>
> @@ -288,7 +292,7 @@
>      InsertTailList( &LanWorkList, &WQItem->ListEntry );
>      if( WorkStart )
>    ExQueueWorkItem( &LanWorkItem, CriticalWorkQueue );
> TcpipReleaseSpinLockFromDpcLevel( &LanWorkLock );
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
>
> }
>
> NDIS_STATUS STDCALL ProtocolReceive(
> @@ -322,6 +326,7 @@
>      PNDIS_PACKET NdisPacket;
>      PLAN_ADAPTER Adapter = (PLAN_ADAPTER)BindingContext;
>      PETH_HEADER EHeader  = (PETH_HEADER)HeaderBuffer;
>
> KIRQL OldIrql;
>
> TI_DbgPrint(DEBUG_DATALINK, ("Called. (packetsize %d)\n",PacketSize));
>
> @@ -359,9 +364,12 @@
>      TI_DbgPrint(DEBUG_DATALINK, ("Adapter: %x (MTU %d)\n", 
>    			 Adapter, Adapter->MTU));
> TcpipAcquireSpinLock( &LanWorkLock, &OldIrql );
> NdisStatus = AllocatePacketWithBuffer( &NdisPacket, NULL,
>                                           PacketSize + HeaderBufferSize );
>    if( NdisStatus != NDIS_STATUS_SUCCESS ) {
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
> return NDIS_STATUS_NOT_ACCEPTED;
> }
>
> @@ -407,6 +415,7 @@
>    			     PacketSize);
>  TI_DbgPrint(DEBUG_DATALINK, ("leaving\n"));
>
> TcpipReleaseSpinLock( &LanWorkLock, OldIrql );
>
> return NDIS_STATUS_SUCCESS;
>
> }

Arty,

I have tested your patch . The problem is not fixed

If you'll get a realtek8139 nic also  , you will be able to test it in 
the same conditions

Regards
Gge