IIS Worker Process Stops Working RandomlyRSS

2 replies

Last post May 21, 2019 03:04 PM by warlife2019

  • IIS Worker Process Stops Working Randomly

    Nov 12, 2018 07:17 AM|lucelle|LINK

    I get the following warning log randomly under Event Viewer -> System.  My web application app pool is restarted after this warning log and so causes web application session timeout randomly.

    ===============================================================

    A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '15168'. The data field contains the error number.

    ===============================================================

    Control Panel -> Action Center -> Problem details has this entry:

    ===============================================================

    Source
    IIS Worker Process

    Summary
    Stopped working

    Date
    ‎02-‎11-‎2018 12:42

    Status
    Report sent

    Description
    Faulting Application Path: c:\Windows\System32\inetsrv\w3wp.exe

    Problem signature
    Problem Event Name: APPCRASH
    Application Name: w3wp.exe
    Application Version: 8.5.9600.16384
    Application Timestamp: 5215df96
    Fault Module Name: KERNELBASE.dll
    Fault Module Version: 6.3.9600.18938
    Fault Module Timestamp: 5a7ddf0a
    Exception Code: e0434352
    Exception Offset: 0000000000008eac
    OS Version: 6.3.9600.2.0.0.272.7
    Locale ID: 1030
    Additional Information 1: 8f18
    Additional Information 2: 8f181775e1d9cd1da19251bf57b96e31
    Additional Information 3: 9c96
    Additional Information 4: 9c9692247e706e5e8f9f7e3190aed9bc

    Extra information about the problem
    Bucket ID: 04bb37888f7f275e9b00f265338898db (1945821555494263003)

    ===============================================================

    I also used debug diagnostic tool to collect dump file and with the following error:

    In w3wp__ZFP__PID__7524__Date__11_09_2018__Time_10_43_10AM__56__Second_Chance_Exception_E0434352.dmp the assembly instruction at KERNELBASE!RaiseException+68 in C:\Windows\System32\KERNELBASE.dll has caused a CLR Exception on thread 92 with the following error information:
        Type:   NOT_FOUND
        Message:   NOT_FOUND

    And tried running !analyze -v in Windbg for this dump file with the following results:

    ===============================================================

    0:095> !analyze -v
    *******************************************************************************
    * *
    * Exception Analysis *
    * *
    *******************************************************************************

    DEBUG_FLR_EXCEPTION_CODE(80131604) and the ".exr -1" ExceptionCode(e0434352) don't match
    GetUrlPageData2 (WinHttp) failed: 12007.

    KEY_VALUES_STRING: 1


    STACKHASH_ANALYSIS: 1

    TIMELINE_ANALYSIS: 1

    Timeline: !analyze.Start
    Name: <blank>
    Time: 2018-11-12T06:19:51.384Z
    Diff: 248309384 mSec

    Timeline: Dump.Current
    Name: <blank>
    Time: 2018-11-09T09:21:22.0Z
    Diff: 0 mSec

    Timeline: Process.Start
    Name: <blank>
    Time: 2018-11-09T08:58:58.0Z
    Diff: 1344000 mSec

    Timeline: OS.Boot
    Name: <blank>
    Time: 2018-11-06T10:42:49.296Z
    Diff: 254312704 mSec


    DUMP_CLASS: 2

    DUMP_QUALIFIER: 400

    CONTEXT: (.ecxr)
    rax=00007ffa999bb82c rbx=000000e73edb71f0 rcx=00005476de8cc0f2
    rdx=00007ffa999ba96e rsi=0000000000000002 rdi=000000e73edb6d00
    rip=00007ffa9f748eac rsp=000000e73edb7400 rbp=000000e73edb7ab0
    r8=fffffffffffffffe r9=000000e73edb7760 r10=000000e73edb6ff0
    r11=0000000000000000 r12=000000e73edb7558 r13=0000000000000000
    r14=000000e73edb8828 r15=0000000000000000
    iopl=0 nv up ei pl nz na pe nc
    cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000200
    KERNELBASE!RaiseException+0x68:
    00007ffa`9f748eac 488b8c24c0000000 mov rcx,qword ptr [rsp+0C0h] ss:000000e7`3edb74c0=0000b08d093571dd
    Resetting default scope

    FAULTING_IP:
    KERNELBASE!RaiseException+68
    00007ffa`9f748eac 488b8c24c0000000 mov rcx,qword ptr [rsp+0C0h]

    EXCEPTION_RECORD: (.exr -1)
    ExceptionAddress: 00007ffa9f748eac (KERNELBASE!RaiseException+0x0000000000000068)
    ExceptionCode: e0434352 (CLR exception)
    ExceptionFlags: 00000001
    NumberParameters: 5
    Parameter[0]: ffffffff80131604
    Parameter[1]: 0000000000000000
    Parameter[2]: 0000000000000000
    Parameter[3]: 0000000000000000
    Parameter[4]: 00007ffa99940000

    DEFAULT_BUCKET_ID: CLR_EXCEPTION_NOSOS

    EXCEPTION_CODE: (HRESULT) 0x80131604 (2148734468) - <Unable to get error code text>

    EXCEPTION_CODE_STR: 80131604

    WATSON_BKT_PROCSTAMP: 5215df96

    WATSON_BKT_PROCVER: 8.5.9600.16384

    PROCESS_VER_PRODUCT: Internet Information Services

    WATSON_BKT_MODULE: KERNELBASE.dll

    WATSON_BKT_MODSTAMP: 5a7ddf0a

    WATSON_BKT_MODOFFSET: 8eac

    WATSON_BKT_MODVER: 6.3.9600.18938

    MODULE_VER_PRODUCT: Microsoft? Windows? Operating System

    BUILD_VERSION_STRING: 6.3.9600.18217 (winblue_ltsb.160124-0053)

    MODLIST_WITH_TSCHKSUM_HASH: c262250a3f355ae0b6af9fd8827865a05812aa17

    MODLIST_SHA1_HASH: 861cd4f5c062df97f6986bae763bbd3f8bd68e2c

    COMMENT: Dump created by DbgHost. Second_Chance_Exception_E0434352

    NTGLOBALFLAG: 0

    PROCESS_BAM_CURRENT_THROTTLED: 0

    PROCESS_BAM_PREVIOUS_THROTTLED: 0

    APPLICATION_VERIFIER_FLAGS: 0

    PRODUCT_TYPE: 3

    SUITE_MASK: 272

    DUMP_FLAGS: 8000c07

    DUMP_TYPE: 3

    PROCESS_NAME: unknown

    MISSING_CLR_SYMBOL: 0

    ANALYSIS_SESSION_HOST: GGFKC7H2E

    ANALYSIS_SESSION_TIME: 11-12-2018 15:19:51.0384

    ANALYSIS_VERSION: 10.0.17763.1 x86fre

    MANAGED_CODE: 1

    MANAGED_ENGINE_MODULE: clr

    MANAGED_BITNESS_MISMATCH:
    Managed code needs matching platform for proper analysis. Use 'x64' debugger.

    LAST_CONTROL_TRANSFER: from 00007ffa9a7a1f09 to 00007ffa9f748eac

    THREAD_ATTRIBUTES:
    FAULTING_THREAD: ffffffff

    THREAD_SHA1_HASH_MOD_FUNC: 1435eb2ea43ce48394c8c8e2eb98dd568f2ee1c4

    THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 1721d90e2db47c397987f003f5bb32eef5ed0b63

    OS_LOCALE: DAN

    ADDITIONAL_DEBUG_TEXT: SOS.DLL is not loaded for managed code. Analysis might be incomplete

    BUGCHECK_STR: CLR_EXCEPTION_NOSOS

    PRIMARY_PROBLEM_CLASS: CLR_EXCEPTION

    PROBLEM_CLASSES:

    ID: [0n254]
    Type: [CLR_EXCEPTION]
    Class: Primary
    Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
    BUCKET_ID
    Name: Add
    Data: Omit
    PID: [Unspecified]
    TID: [0x3624]
    Frame: [0] : KERNELBASE!RaiseException

    ID: [0n251]
    Type: [NOSOS]
    Class: Addendum
    Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
    BUCKET_ID
    Name: Add
    Data: Omit
    PID: [Unspecified]
    TID: [Unspecified]
    Frame: [0]

    STACK_TEXT:
    00000000`00000000 00000000`00000000 w3wp!unknown_function+0x0


    STACK_COMMAND: ** Pseudo Context ** ManagedPseudo ** Value: 24a99800 ** ; kb

    THREAD_SHA1_HASH_MOD: 683fb228a9ea27c3c4b6829014c0ae8c35fd0fb4

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: w3wp!unknown_function

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: w3wp

    IMAGE_NAME: w3wp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 5215df96

    BUCKET_ID: CLR_EXCEPTION_NOSOS_w3wp!unknown_function

    FAILURE_EXCEPTION_CODE: 80131604

    FAILURE_IMAGE_NAME: w3wp.exe

    BUCKET_ID_IMAGE_STR: w3wp.exe

    FAILURE_MODULE_NAME: w3wp

    BUCKET_ID_MODULE_STR: w3wp

    FAILURE_FUNCTION_NAME: unknown_function

    BUCKET_ID_FUNCTION_STR: unknown_function

    BUCKET_ID_OFFSET: 0

    BUCKET_ID_MODTIMEDATESTAMP: 5215df96

    BUCKET_ID_MODCHECKSUM: 15185

    BUCKET_ID_MODVER_STR: 8.5.9600.16384

    BUCKET_ID_PREFIX_STR: CLR_EXCEPTION_NOSOS_

    FAILURE_PROBLEM_CLASS: CLR_EXCEPTION

    FAILURE_SYMBOL_NAME: w3wp.exe!unknown_function

    FAILURE_BUCKET_ID: CLR_EXCEPTION_NOSOS_80131604_w3wp.exe!unknown_function

    WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/unknown/8.5.9600.16384/5215df96/KERNELBASE.dll/6.3.9600.18938/5a7ddf0a/80131604/00008eac.htm?Retriage=1

    TARGET_TIME: 2018-11-09T09:21:22.000Z

    OSBUILD: 9200

    OSSERVICEPACK: 17415

    SERVICEPACK_NUMBER: 0

    OS_REVISION: 0

    OSPLATFORM_TYPE: x64

    OSNAME: Windows 8

    OSEDITION: Windows 8 Server TerminalServer SingleUserTS

    USER_LCID: 0

    OSBUILD_TIMESTAMP: 2014-10-29 11:45:30

    BUILDDATESTAMP_STR: 160124-0053

    BUILDLAB_STR: winblue_ltsb

    BUILDOSVER_STR: 6.3.9600.18217

    ANALYSIS_SESSION_ELAPSED_TIME: 358d

    ANALYSIS_SOURCE: UM

    FAILURE_ID_HASH_STRING: um:clr_exception_nosos_80131604_w3wp.exe!unknown_function

    FAILURE_ID_HASH: {b43c244a-dd13-f6d0-2a00-9478d49a1606}

    Followup: MachineOwner
    ---------

    ===============================================================

    I am running this web application in a Windows Server 2012 R2, 64bit operating system.

    I am struggling on analyzing these crash dump information. I tried searching for related posts regarding this crash issue and one suggestion I got is to set Enable32BitApplication to true for application pool which I have to try yet (Reference link -

    https://social.microsoft.com/Forums/en-US/3f0722ba-90a2-4167-90b4-01181aec9ee4/kernelbaseraiseexception68-when-calling-asmx-webmethod?forum=Offtopic)

    Can someone further explain significance of setting this Enable32BitApplication  to true as solution to this issue?

    Or any guidance in further troubleshoot this crash will  be much appreciated.

    Thank you.

  • Re: IIS Worker Process Stops Working Randomly

    Nov 12, 2018 02:52 PM|lextm|LINK

    Please open a support case via http://support.microsoft.com and share the dumps with Microsoft. It is not trivial to analyze them and post on a forum won't help much.

    Lex Li
    IIS Consulting Services at https://support.lextudio.com/services/consulting.html
    ---------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.
  • Re: IIS Worker Process Stops Working Randomly

    May 21, 2019 03:04 PM|warlife2019|LINK

    I am very grateful to the support service for the help, I had a problem and thanks to you I solved it, thanks again. If I’m not writing where necessary, please do not delete the text, but move it to the necessary section. Thank.

    I love to sit on the Internet, fish, go skiing, and generally enjoy life, I love to discuss and watch various kinds of films Cartoons and TV shows