BugCheck A, {18756c0, ff, 0, 8074867e }

Any suggestions what to look for?
====================================
Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\MEMORY-1-31.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows Server 2003 Kernel Version 3790 MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_gdr.040410-1234
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Mon Jan 31 13:46:56 2005
System Uptime: 18 days 19:16:26.257
Loading Kernel Symbols
.................................................................................................
Loading unloaded module list
.......
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {18756c0, ff, 0, 8074867e}

Probably caused by : processr.sys ( processr!AcpiC1Idle+12 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 018756c0, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8074867e, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 018756c0

CURRENT_IRQL: 2

FAULTING_IP:
hal!HalpIpiHandler+16
8074867e f744247000000200 test dword ptr [esp+0x70],0x20000

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from f8621676 to 8074867e

TRAP_FRAME: f88c2c4c -- (.trap fffffffff88c2c4c)
.trap fffffffff88c2c4c
ErrCode = 00000000
eax=9b07b57a ebx=f873fdf0 ecx=f873fdf0 edx=0002e46b esi=f873fdd0 edi=8244d628
eip=8074867e esp=f88c2cc0 ebp=f88c2cc0 iopl=0 nv up di ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010086
hal!HalpIpiHandler+0x16:
8074867e f744247000000200 test dword ptr [esp+0x70],0x20000 ss:0010:f88c2d30=00000202
.trap
Resetting default scope

STACK_TEXT:
f88c2cc0 f8621676 00000000 8252eaa8 823f83ec hal!HalpIpiHandler+0x16
f88c2d50 804e61ca 00000000 0000000e 00000000 processr!AcpiC1Idle+0x12


FOLLOWUP_IP:
processr!AcpiC1Idle+12
f8621676 6a00 push 0x0

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: processr!AcpiC1Idle+12

MODULE_NAME: processr

IMAGE_NAME: processr.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3e800038

STACK_COMMAND: .trap fffffffff88c2c4c ; kb

BUCKET_ID: 0xA_processr!AcpiC1Idle+12

Followup: MachineOwner
---------

eax=f873f13c ebx=0000000a ecx=f8741fa0 edx=0002e46b esi=f873f120 edi=018756c0
eip=80543ac9 esp=f88c2c18 ebp=f88c2c30 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
80543ac9 5d pop ebp
ChildEBP RetAddr Args to Child
f88c2c30 804e2f58 0000000a 018756c0 000000ff nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f88c2c30 8074867e 0000000a 018756c0 000000ff nt!KiTrap0E+0x224 (FPO: [0,0] TrapFrame @ f88c2c4c)
f88c2cc0 f8621676 00000000 8252eaa8 823f83ec hal!HalpIpiHandler+0x16 (FPO: [0,2] TrapFrame @ f88c2cc0)
f88c2d50 804e61ca 00000000 0000000e 00000000 processr!AcpiC1Idle+0x12 (FPO: [0,2,0])
start end module name
804de000 80745000 nt ntkrnlmp.exe Wed May 26 17:32:57 2004 (40B53739)
80745000 8076d000 hal halmacpi.dll Tue Mar 25 00:07:28 2003 (3E800030)
bf800000 bf9c7000 win32k win32k.sys Tue Dec 28 16:26:09 2004 (41D1EB91)
bff20000 bff41a00 atidrae atidrae.dll Tue Mar 25 02:46:25 2003 (3E802571)
bff80000 bff96000 dxg dxg.sys Tue Mar 25 02:46:23 2003 (3E80256F)
f2623000 f2650000 Fastfat Fastfat.SYS Tue Mar 25 01:00:16 2003 (3E800C90)
f3478000 f348c9e0 naiavf5x naiavf5x.sys Thu Feb 06 12:56:27 2003 (3E42BDEB)
f389d000 f38bf000 RDPWD RDPWD.SYS Tue Mar 25 00:03:00 2003 (3E7FFF24)
f39ff000 f3a5e000 srv srv.sys Tue Mar 25 01:49:51 2003 (3E80182F)
f3b4e000 f3ba6000 HTTP HTTP.sys Tue Mar 25 01:55:21 2003 (3E801979)
f3d0e000 f3d3d000 afd afd.sys unavailable (FFFFFFFE)
f3d8d000 f3da5000 Cdfs Cdfs.SYS Tue Mar 25 01:17:19 2003 (3E80108F)
f56c3000 f56d6000 Fips Fips.SYS Tue Mar 25 01:54:59 2003 (3E801963)
f57e3000 f584e000 mrxsmb mrxsmb.sys Mon Oct 11 17:38:12 2004 (416B2774)
f584e000 f5879000 rdbss rdbss.sys Mon Oct 11 17:38:09 2004 (416B2771)
f5879000 f58ae000 netbt netbt.sys Fri Jul 18 10:16:03 2003 (3F182B53)
f58ae000 f5910000 tcpip tcpip.sys Tue Mar 25 01:04:01 2003 (3E800D71)
f6067000 f6074000 netbios netbios.sys Tue Mar 25 00:09:53 2003 (3E8000C1)
f677f000 f6786000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f7812000 f781c000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
f7882000 f788c000 TDTCP TDTCP.SYS Tue Mar 25 00:02:52 2003 (3E7FFF1C)
f78bb000 f78d7000 ipsec ipsec.sys Tue Mar 25 00:55:45 2003 (3E800B81)
f7a0d000 f7a20000 usbhub usbhub.sys Tue Mar 25 00:10:46 2003 (3E8000F6)
f7a96000 f7aa3000 wanarp wanarp.sys Tue Mar 25 00:11:22 2003 (3E80011A)
f7af6000 f7aff000 dump_diskdump dump_diskdump.sys Tue Mar 25 00:05:15 2003 (3E7FFFAB)
f7e74000 f7ea7000 update update.sys Tue Mar 25 01:59:59 2003 (3E801A8F)
f7ea7000 f7edb000 rdpdr rdpdr.sys Tue Mar 25 00:09:30 2003 (3E8000AA)
f7f4b000 f7f5a000 msgpc msgpc.sys Tue Mar 25 00:10:12 2003 (3E8000D4)
f7f5b000 f7f67000 Npfs Npfs.SYS Tue Mar 25 00:08:59 2003 (3E80008B)
f7f6b000 f7f75000 Msfs Msfs.SYS unavailable (FFFFFFFE)
f7f7b000 f7f90000 raspptp raspptp.sys Tue Mar 25 01:19:09 2003 (3E8010FD)
f7f90000 f7fab000 ndiswan ndiswan.sys Tue Mar 25 01:48:19 2003 (3E8017D3)
f7fab000 f7fc2000 rasl2tp rasl2tp.sys Tue Mar 25 00:54:46 2003 (3E800B46)
f7fc2000 f7fe8000 e100b325 e100b325.sys Thu Oct 14 16:30:44 2004 (416F0C24)
f7fe8000 f8009e80 USBPORT USBPORT.SYS Tue Mar 25 00:10:43 2003 (3E8000F3)
f800a000 f8034000 ks ks.sys Tue Mar 25 01:47:36 2003 (3E8017A8)
f8034000 f8048000 redbook redbook.sys Tue Mar 25 00:04:38 2003 (3E7FFF86)
f8048000 f805c000 cdrom cdrom.sys Tue Mar 25 00:05:18 2003 (3E7FFFAE)
f805c000 f8072000 i8042prt i8042prt.sys Tue Mar 25 02:01:43 2003 (3E801AF7)
f8072000 f808a000 serial serial.sys Tue Mar 25 00:40:08 2003 (3E8007D8)
f808a000 f80a3000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 00:08:02 2003 (3E800052)
f80a3000 f80b5600 atimpae atimpae.sys Thu Oct 03 18:44:52 2002 (3D9CF294)
f818c000 f81ae000 Mup Mup.sys Tue Mar 25 01:55:58 2003 (3E80199E)
f81ae000 f81ef000 NDIS NDIS.sys Tue Mar 25 01:45:35 2003 (3E80172F)
f81ef000 f828c000 Ntfs Ntfs.sys Tue Mar 25 00:40:05 2003 (3E8007D5)
f828c000 f82ad000 KSecDD KSecDD.sys Tue Mar 25 00:05:39 2003 (3E7FFFC3)
f82ad000 f8370000 dmboot dmboot.sys unavailable (FFFFFFFE)
f8370000 f8386000 CLASSPNP CLASSPNP.SYS Tue Mar 25 00:38:14 2003 (3E800766)
f8386000 f83ac000 SCSIPORT SCSIPORT.SYS Tue Mar 25 01:01:25 2003 (3E800CD5)
f83ac000 f83c8000 atapi atapi.sys Tue Mar 25 00:04:48 2003 (3E7FFF90)
f83c8000 f83e9000 volsnap volsnap.sys Tue Mar 25 00:05:47 2003 (3E7FFFCB)
f83e9000 f8413000 dmio dmio.sys Tue Mar 25 00:08:14 2003 (3E80005E)
f8413000 f8438000 ftdisk ftdisk.sys Tue Mar 25 00:05:26 2003 (3E7FFFB6)
f8438000 f844d000 pci pci.sys Tue Mar 25 00:16:40 2003 (3E800258)
f844d000 f847e000 ACPI ACPI.sys Tue Mar 25 00:16:21 2003 (3E800245)
f849f000 f84a8000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f84af000 f84be000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f84bf000 f84cc000 PCIIDEX PCIIDEX.SYS Tue Mar 25 00:04:44 2003 (3E7FFF8C)
f84cf000 f84de000 MountMgr MountMgr.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f84df000 f84ed000 PartMgr PartMgr.sys Tue Mar 25 01:04:02 2003 (3E800D72)
f84ef000 f84fcf00 aic78xx aic78xx.sys Mon May 20 09:16:12 2002 (3CE9214C)
f84ff000 f850c800 aic78u2 aic78u2.sys Mon May 20 09:16:12 2002 (3CE9214C)
f850f000 f851e000 disk disk.sys Tue Mar 25 00:05:20 2003 (3E7FFFB0)
f851f000 f852b000 Dfs Dfs.sys Tue Mar 25 00:09:52 2003 (3E8000C0)
f852f000 f853b000 agp440 agp440.sys Tue Mar 25 00:16:31 2003 (3E80024F)
f853f000 f8548000 crcdisk crcdisk.sys Tue Mar 25 00:07:23 2003 (3E80002B)
f854f000 f8559000 flpydisk flpydisk.sys unavailable (FFFFFFFE)
f855f000 f856c800 dump_aic78u2 dump_aic78u2.sys Mon May 20 09:16:12 2002 (3CE9214C)
f85ef000 f85f8000 MCD MCD.SYS Tue Mar 25 00:05:34 2003 (3E7FFFBE)
f860f000 f861b000 vga vga.sys Tue Mar 25 00:08:03 2003 (3E800053)
f861f000 f862b000 processr processr.sys Tue Mar 25 00:07:36 2003 (3E800038)
f862f000 f8638000 watchdog watchdog.sys Tue Mar 25 00:09:01 2003 (3E80008D)
f863f000 f864a000 fdc fdc.sys unavailable (FFFFFFFE)
f864f000 f8659000 serenum serenum.sys Tue Mar 25 00:04:01 2003 (3E7FFF61)
f865f000 f8669000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f866f000 f8679000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f867f000 f8688000 ndistapi ndistapi.sys Tue Mar 25 00:11:28 2003 (3E800120)
f868f000 f869d000 raspppoe raspppoe.sys Tue Mar 25 00:11:37 2003 (3E800129)
f869f000 f86aa000 TDI TDI.SYS Tue Mar 25 00:14:28 2003 (3E8001D4)
f86af000 f86ba000 ptilink ptilink.sys Tue Mar 25 00:03:51 2003 (3E7FFF57)
f86bf000 f86c8000 raspti raspti.sys Tue Mar 25 00:11:36 2003 (3E800128)
f86cf000 f86de000 termdd termdd.sys Tue Mar 25 00:02:52 2003 (3E7FFF1C)
f86ff000 f870d000 NDProxy NDProxy.SYS Tue Mar 25 00:11:30 2003 (3E800122)
f871f000 f8727000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f8727000 f872f000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f872f000 f8736000 intelide intelide.sys Tue Mar 25 00:04:45 2003 (3E7FFF8D)
f8737000 f873e000 dmload dmload.sys unavailable (FFFFFFFE)
f874f000 f8757000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f877f000 f8786000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f8787000 f878e000 Null Null.SYS unavailable (FFFFFFFE)
f87c7000 f87ccf00 HIDPARSE HIDPARSE.SYS Tue Mar 25 00:10:13 2003 (3E8000D5)
f87ef000 f87f7000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f87f7000 f87ff000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f8807000 f880f000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f881f000 f8823e80 usbuhci usbuhci.sys Tue Mar 25 00:10:43 2003 (3E8000F3)
f8827000 f882f000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f8a01000 f8a02200 swenum swenum.sys Tue Mar 25 00:03:22 2003 (3E7FFF3A)
f8a11000 f8a12580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
f7882000 f7890000 HIDCLASS.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f72ce000 f72d7000 hidusb.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3c57000 f3c6e000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f72de000 f72ec000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8757000 f875c000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f85cf000 f85d8000 ddsmc.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f879f000 f87a7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

This dump is odd.

You got any others?

 

The system has crashed a couple of times before, with the same IRQL... message, however I didn't save the .dmp files

I did rename the dump this time. I am waiting for it to happen again.

A little history, this is a webserver that was upgraded from 2000 Server to 2003 Server. It is an older "BX" board with dual processors. I believe it has the latest available drivers and it is current on windows updates.

 

As far as has been determined to date by Microsoft and Intel engineers, this
appears to be a processor erratum (bug) in certain CPUs, which is exposed by a sequence of instructions implemented in the MS04-032 version of NTKRNLMP.EXE for Windows Server 2003.


WORKAROUND: Uninstall the Security Update for Windows Server 2003 (KB840987)

 

hmm. i can beleive it, the place that machine crashed at is pretty wierd. You got a model/stepping or an erratum reference for that, timeout?

 

Most of the Pentium III Xeon seem to be affected.

I'm still investigating this issue and looking for the exact errata number. I believe it is the erratum G3AP but I'm not 100% sure yet.

 

Interesting.. too bad this guy hasnt been back, would be interesting to see the !APIC, !PCR and !cpuid output to see if thats possible. Looks like almost every flavor is affected, certainly probable this could be it. Do you have a specimen dump?

Looks like the workaround is known, you heard anything about a chip driver patch to do the manual masking?

And welcome to the board

 

in case someone finds this, we are discussing on another thread:

We have several reports of installing a kernel hotfix that is newer than that security release resolving it, such as Q890352. You could contact PSS to request that hotfix at no charge to see if it has impact to your scenario.

 

I sent DMJ and email asking him to check back with this thread if he still had problems. Hopefully he will.

 

Sorry, I haven't been back here for a while.

The system hasn't crashed since my last posting.

I still have the dump, so let me know what additional info you need.

BTW this is an "older" MP system (intel bx chipset) running dual P3-500 (non-xeon) processors.
The stepping on each processor is the same. Family 6, model 7, stepping 2

I also have the "fix in question" (KB840987) installed.

I found an additional dump from a month earlier that I had stashed on another drive. Same basic footprint:
BugCheck A, {1990a20, ff, 0, 8074867e}
Probably caused by : processr.sys ( processr!AcpiC1Idle+12 )


==================
Additional info from the original dump...

1: kd> !APIC
Unable to read lapic
1: kd> !PCR
KPCR for Processor 1 at f873f000:
Major 1 Minor 1
NtTib.ExceptionList: ffffffff
NtTib.StackBase: 00000000
NtTib.StackLimit: 00000000
NtTib.SubSystemTib: f873fef0
NtTib.Version: 6d401023
NtTib.UserPointer: 00000002
NtTib.SelfTib: 00000000

SelfPcr: f873f000
Prcb: f873f120
Irql: 00000000
IRR: 00000000
IDR: ffffffff
InterruptMode: 00000000
IDT: f87456e0
GDT: f87452e0
TSS: f873fef0

CurrentThread: f8741fa0
NextThread: 822644c8
IdleThread: f8741fa0

DpcQueue:
1: kd> !PCR
KPCR for Processor 1 at f873f000:
Major 1 Minor 1
NtTib.ExceptionList: ffffffff
NtTib.StackBase: 00000000
NtTib.StackLimit: 00000000
NtTib.SubSystemTib: f873fef0
NtTib.Version: 6d401023
NtTib.UserPointer: 00000002
NtTib.SelfTib: 00000000

SelfPcr: f873f000
Prcb: f873f120
Irql: 00000000
IRR: 00000000
IDR: ffffffff
InterruptMode: 00000000
IDT: f87456e0
GDT: f87452e0
TSS: f873fef0

CurrentThread: f8741fa0
NextThread: 822644c8
IdleThread: f8741fa0

DpcQueue:

 

thanks for following up. According to ben, Family 6, model 7 means this probably applies to you. If the machine starts acting up again, give that hotfix he suggested a try.

 

Thanks... I really appreciate all the assistance.