intermittent fatal crashes [DUMP DATA]

Thanks for suggestions Joe. Also sorry for my disappearances but we seem to be in totally opposite time zones.

My sound card is integrated into motherboard so I will look for new drivers from NVIDIA. Most probably I will also buy another soundcard. I was looking at M-audio Delta 44 or 66 for quite a while so now I have yet another reason to make a move. BTW, I now remember I have recently installed some suspicious codec...this one: http://ac3filter.sourceforge.net/. So perhaps I will try uninstalling it before trying anything else. Pity I will loose audio in some avi but perhaps I will manage to find some alternative.

Concerning vprot thing it did not work either: could not find something, probably because user.dmp is also minidump. Perhaps I have to reconfigure system to write full dumps.

George

 

Ok, codec was probably not guilty. Uninstalled it and today got a new crash. This time I was browsing the web using Firefox while playing mp3 with Windows media player (explosive combination). dump data below. This time I have FULL 512 Mb memory dump. So, Joe, if you have some suggestion for advanced analysis we may get something. This time it does not directly point to audio. Anyway I am going to NVIDIA to get the latest drivers.
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {74b8, 2, 1, 804dc903}

Probably caused by : ntoskrnl.exe ( nt!KiTimerExpiration+86 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 000074b8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804dc903, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 000074b8

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiTimerExpiration+86
804dc903 895f04 mov [edi+0x4],ebx

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 804dc179 to 804dc903

TRAP_FRAME: f8a97f38 -- (.trap fffffffff8a97f38)
.trap fffffffff8a97f38
ErrCode = 00000002
eax=8055a200 ebx=00010000 ecx=89d32ff0 edx=000000ff esi=000000c0 edi=000074b4
eip=804dc903 esp=f8a97fac ebp=f8a97fd0 iopl=0 nv up ei ng nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!KiTimerExpiration+0x86:
804dc903 895f04 mov [edi+0x4],ebx ds:0023:000074b8=????????
.trap
Resetting default scope

STACK_TEXT:
f8a97fd0 804dc179 80559980 00000000 0032ebc0 nt!KiTimerExpiration+0x86
f8a97ff4 804dbe2d ec129864 00000000 00000000 nt!KiRetireDpcList+0x46


FOLLOWUP_IP:
nt!KiTimerExpiration+86
804dc903 895f04 mov [edi+0x4],ebx

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiTimerExpiration+86

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 41108004

STACK_COMMAND: .trap fffffffff8a97f38 ; kb

FAILURE_BUCKET_ID: 0xA_W_nt!KiTimerExpiration+86

BUCKET_ID: 0xA_W_nt!KiTimerExpiration+86

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000002 ecx=00000000 edx=40000000 esi=804dc903 edi=000074b8
eip=804e2158 esp=f8a97f20 ebp=f8a97f38 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x233:
804e2158 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:f8a97fa8=00010297
ChildEBP RetAddr Args to Child
f8a97f38 804dc903 badb0d00 000000ff 80561b40 nt!KiTrap0E+0x233 (FPO: [0,0] TrapFrame @ f8a97f38)
f8a97fd0 804dc179 80559980 00000000 0032ebc0 nt!KiTimerExpiration+0x86 (FPO: [Non-Fpo])
f8a97ff4 804dbe2d ec129864 00000000 00000000 nt!KiRetireDpcList+0x46 (FPO: [0,0,0])
start end module name

 

that ones useless. Bad DPC or timer, wouldnt be caught by special pool. Another 'memory corruption' crash.

 

Uninstalled all Nvidia drivers. Upon reboot windows found some, requested CD for others. When installing Nvidia codec interface got blue screen pointing to sysaudio.sys (and full dump). Definitelly something wrong with onboard audio. Managed to install the lates Nvidia audio driver using "update driver" in device manager. Got some sound. Well, ordering Delta 66 today hope they will ship it fast. Not too much sense to fight for this crapy audio anyway. So, Joe do you think this is hardware problem? In principal mobo is still under warranty so I may try to get replacement.

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D5, {8d292f78, 0, efdb752d, 0}

Probably caused by : sysaudio.sys ( sysaudio!CGraphNodeInstance::CreatePinDescriptors+28 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)
Memory was referenced after it was freed.
This cannot be protected by try-except.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: 8d292f78, memory referenced
Arg2: 00000000, value 0 = read operation, 1 = write operation
Arg3: efdb752d, if non-zero, the address which referenced memory.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


READ_ADDRESS: 8d292f78 Special pool

FAULTING_IP:
sysaudio!CGraphNodeInstance::CreatePinDescriptors+28
efdb752d 83781000 cmp dword ptr [eax+0x10],0x0

MM_INTERNAL_CODE: 0

IMAGE_NAME: sysaudio.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107f1a

MODULE_NAME: sysaudio

FAULTING_MODULE: efdb3000 sysaudio

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD5

LAST_CONTROL_TRANSFER: from efdb77c7 to efdb752d

TRAP_FRAME: f8a8ba08 -- (.trap fffffffff8a8ba08)
.trap fffffffff8a8ba08
ErrCode = 00000000
eax=8d292f68 ebx=89362f98 ecx=e23f3730 edx=e23dda90 esi=8d6f2fd8 edi=95cd0f70
eip=efdb752d esp=f8a8ba7c ebp=f8a8baac iopl=0 nv up ei ng nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010283
sysaudio!CGraphNodeInstance::CreatePinDescriptors+0x28:
efdb752d 83781000 cmp dword ptr [eax+0x10],0x0 ds:0023:8d292f78=????????
.trap
Resetting default scope

STACK_TEXT:
f8a8baac efdb77c7 87ef4fe0 00000000 efdb5021 sysaudio!CGraphNodeInstance::CreatePinDescriptors+0x28
f8a8bab8 efdb5021 87ef4fe0 87ef4ff4 82f16460 sysaudio!CGraphNodeInstance::Create+0x18
f8a8bac8 efdb5427 00000004 87ef4fe0 f8a8bae8 sysaudio!CFilterInstance::CreateGraph+0x6f
f8a8bad8 efdb5976 8b926fc8 94a7cfe8 f8a8bb4c sysaudio!CFilterInstance::SetDeviceNode+0x41
f8a8bae8 bac5cf4c 8b926fc8 94a7cfe8 94a7cfe0 sysaudio!SetInstanceDevice+0x3c
f8a8bb4c bac5cec9 82f16460 00000004 efdb45e0 ks!KspPropertyHandler+0x616
f8a8bb70 efdb4fb2 82f16460 00000004 efdb45b8 ks!KsPropertyHandler+0x19
f8a8bbc0 bac5cf85 8208d890 82f16460 f8a8bc0c sysaudio!CFilterInstance::FilterDispatchIoControl+0x18e
f8a8bbd0 804e3d77 8208d890 82f16460 82f16460 ks!DispatchDeviceIoControl+0x28
f8a8bbe0 bac5dc47 efa887d0 f8a8bc4c 00000000 nt!IopfCallDriver+0x31
f8a8bc0c efa79758 9e2c4f90 00000000 002f0003 ks!KsSynchronousIoControlDevice+0xbd
f8a8bc54 efa7b6b9 9e2c4f90 00000003 00000004 wdmaud!SetSysAudioProperty+0x4e
f8a8bd18 efa7c447 82092000 00000000 96470f58 wdmaud!InitializeGetNumDevs+0x181
f8a8bd3c efa836ca 82092000 9646efd0 00000000 wdmaud!ProcessDevNodeListItem+0x38
f8a8bd5c bac5480b 00000000 82e5f430 80561b7c wdmaud!SysaudioAddRemove+0x2f
f8a8bd74 804e47fe 82e5f430 00000000 8324eda8 ks!WorkerThread+0x45
f8a8bdac 8057dfed 82e5f430 00000000 00000000 nt!ExpWorkerThread+0x100
f8a8bddc 804fa477 804e4729 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
sysaudio!CGraphNodeInstance::CreatePinDescriptors+28
efdb752d 83781000 cmp dword ptr [eax+0x10],0x0

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: sysaudio!CGraphNodeInstance::CreatePinDescriptors+28

STACK_COMMAND: .trap fffffffff8a8ba08 ; kb

FAILURE_BUCKET_ID: 0xD5_sysaudio!CGraphNodeInstance::CreatePinDescriptors+28

BUCKET_ID: 0xD5_sysaudio!CGraphNodeInstance::CreatePinDescriptors+28

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000000 ecx=00000000 edx=804e2a00 esi=c0234a48 edi=806ee298
eip=805339ae esp=f8a8b98c ebp=f8a8b9a4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
805339ae 5d pop ebp
ChildEBP RetAddr Args to Child
f8a8b9a4 805246fb 00000050 8d292f78 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f8a8b9f0 804e1ff1 00000000 8d292f78 00000000 nt!MmAccessFault+0x6f5 (FPO: [Non-Fpo])
f8a8b9f0 efdb752d 00000000 8d292f78 00000000 nt!KiTrap0E+0xcc (FPO: [0,0] TrapFrame @ f8a8ba08)
f8a8baac efdb77c7 87ef4fe0 00000000 efdb5021 sysaudio!CGraphNodeInstance::CreatePinDescriptors+0x28 (FPO: [Non-Fpo])
f8a8bab8 efdb5021 87ef4fe0 87ef4ff4 82f16460 sysaudio!CGraphNodeInstance::Create+0x18 (FPO: [0,0,0])
f8a8bac8 efdb5427 00000004 87ef4fe0 f8a8bae8 sysaudio!CFilterInstance::CreateGraph+0x6f (FPO: [0,0,0])
f8a8bad8 efdb5976 8b926fc8 94a7cfe8 f8a8bb4c sysaudio!CFilterInstance::SetDeviceNode+0x41 (FPO: [Non-Fpo])
f8a8bae8 bac5cf4c 8b926fc8 94a7cfe8 94a7cfe0 sysaudio!SetInstanceDevice+0x3c (FPO: [Non-Fpo])
f8a8bb4c bac5cec9 82f16460 00000004 efdb45e0 ks!KspPropertyHandler+0x616 (FPO: [Non-Fpo])
f8a8bb70 efdb4fb2 82f16460 00000004 efdb45b8 ks!KsPropertyHandler+0x19 (FPO: [Non-Fpo])
f8a8bbc0 bac5cf85 8208d890 82f16460 f8a8bc0c sysaudio!CFilterInstance::FilterDispatchIoControl+0x18e (FPO: [Non-Fpo])
f8a8bbd0 804e3d77 8208d890 82f16460 82f16460 ks!DispatchDeviceIoControl+0x28 (FPO: [Non-Fpo])
f8a8bbe0 bac5dc47 efa887d0 f8a8bc4c 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
f8a8bc0c efa79758 9e2c4f90 00000000 002f0003 ks!KsSynchronousIoControlDevice+0xbd (FPO: [Non-Fpo])
f8a8bc54 efa7b6b9 9e2c4f90 00000003 00000004 wdmaud!SetSysAudioProperty+0x4e (FPO: [Non-Fpo])
f8a8bd18 efa7c447 82092000 00000000 96470f58 wdmaud!InitializeGetNumDevs+0x181 (FPO: [Non-Fpo])
f8a8bd3c efa836ca 82092000 9646efd0 00000000 wdmaud!ProcessDevNodeListItem+0x38 (FPO: [Non-Fpo])
f8a8bd5c bac5480b 00000000 82e5f430 80561b7c wdmaud!SysaudioAddRemove+0x2f (FPO: [Non-Fpo])
f8a8bd74 804e47fe 82e5f430 00000000 8324eda8 ks!WorkerThread+0x45 (FPO: [Non-Fpo])
f8a8bdac 8057dfed 82e5f430 00000000 00000000 nt!ExpWorkerThread+0x100 (FPO: [Non-Fpo])
start end module name

 

i dont know if its bum hardware, or a bug in one of those drivers, or just bad data in the same place every time. If i have time today or tomorrow, im going to take a closer look at that function to see what the vectors are for that crash.