Windows 2003 SP1 BSOD dumpfile analysis help

This is from a Dell PowerEdge 4400. It restarts with an IRQL_NOT_LESS_OR_EQUAL error every 3 weeks or so. Crashes were both before and after SP1. Also experienced lockup issues when running Server 2000 on this machine (but dont have the dumps from that). This would lead me to think its hardware but I've ran the Dell diagnostics, everything passes. Any help with this dumpfile would be greatly appreciated!


Loading Dump File [C:\WINDOWS\Minidump\Mini041905-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS Blade
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808af988
Debug session time: Tue Apr 19 11:10:20 2005
System Uptime: 3 days 18:44:13.233
Loading Kernel Symbols
..................................................................................................
Loading unloaded module list
..
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {17, 1b, 0, 80840cb4}

Probably caused by : hardware ( nt!KeWaitForMultipleObjects+299 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000017, memory referenced
Arg2: 0000001b, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 80840cb4, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00000017

CURRENT_IRQL: 1b

FAULTING_IP:
nt!KeWaitForMultipleObjects+299
80840cb4 856b16 test [ebx+0x16],ebp

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 80927060 to 80840cb4

MISALIGNED_IP:
nt!KeWaitForMultipleObjects+299
80840cb4 856b16 test [ebx+0x16],ebp

TRAP_FRAME: b90738d8 -- (.trap ffffffffb90738d8)
ErrCode = 00000000
eax=898e8428 ebx=00000001 ecx=ffdff501 edx=808b9382 esi=8990b508 edi=b9073d1c
eip=80840cb4 esp=b907394c ebp=b9073978 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!KeWaitForMultipleObjects+0x299:
80840cb4 856b16 test [ebx+0x16],ebp ds:0023:00000017=????????
Resetting default scope

STACK_TEXT:
b9073978 80927060 00000001 b9073aac 00000001 nt!KeWaitForMultipleObjects+0x299
b9073bf4 8092702f 00000001 b9073c1c 00000001 nt!ObpWaitForMultipleObjects+0x202
b9073d48 80834d3f 00000001 09d3fbf8 00000001 nt!NtWaitForMultipleObjects+0xe9
b9073d48 7c82ed54 00000001 09d3fbf8 00000001 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
09d3fba8 00000000 00000000 00000000 00000000 0x7c82ed54


FOLLOWUP_IP:
nt!KeWaitForMultipleObjects+299
80840cb4 856b16 test [ebx+0x16],ebp

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KeWaitForMultipleObjects+299

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap ffffffffb90738d8 ; kb

MODULE_NAME: hardware

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000001b ecx=00000021 edx=40000000 esi=ffdff120 edi=00000017
eip=80837ed5 esp=b90738c0 ebp=b90738d8 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x2a7:
80837ed5 833d00ee8a8000 cmp dword ptr [nt!KiFreezeFlag (808aee00)],0x0 ds:0023:808aee00=????????
ChildEBP RetAddr Args to Child
b90738d8 80840cb4 badb0d00 808b9382 00000000 nt!KiTrap0E+0x2a7 (FPO: [0,0] TrapFrame @ b90738d8)
b9073978 80927060 00000001 b9073aac 00000001 nt!KeWaitForMultipleObjects+0x299 (FPO: [Non-Fpo])
b9073bf4 8092702f 00000001 b9073c1c 00000001 nt!ObpWaitForMultipleObjects+0x202 (FPO: [Non-Fpo])
b9073d48 80834d3f 00000001 09d3fbf8 00000001 nt!NtWaitForMultipleObjects+0xe9 (FPO: [Non-Fpo])
b9073d48 7c82ed54 00000001 09d3fbf8 00000001 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b9073d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
09d3fba8 00000000 00000000 00000000 00000000 0x7c82ed54
start end module name
80800000 80a75000 nt ntkrnlmp.exe Thu Mar 24 18:42:08 2005 (42435E60)
80a75000 80aa1000 hal halaacpi.dll Thu Mar 24 18:28:37 2005 (42435B35)
b9074000 b90d3000 srv srv.sys Thu Mar 24 18:40:19 2005 (42435DF3)
b914b000 b919b000 HTTP HTTP.sys Thu Mar 24 18:40:36 2005 (42435E04)
b9363000 b936c000 mssmbios mssmbios.sys Thu Mar 24 18:34:14 2005 (42435C86)
b96a3000 b96b8000 Cdfs Cdfs.SYS Thu Mar 24 18:40:55 2005 (42435E17)
b96b8000 b96c9000 Fips Fips.SYS Thu Mar 24 18:40:33 2005 (42435E01)
b96c9000 b973f000 mrxsmb mrxsmb.sys Thu Mar 24 18:41:13 2005 (42435E29)
b973f000 b976f000 rdbss rdbss.sys Thu Mar 24 18:40:49 2005 (42435E11)
b976f000 b9799000 afd afd.sys Thu Mar 24 18:40:43 2005 (42435E0B)
b9799000 b97ca000 netbt netbt.sys Thu Mar 24 18:40:31 2005 (42435DFF)
b97ca000 b982b000 tcpip tcpip.sys Thu Mar 24 18:40:31 2005 (42435DFF)
b982b000 b9844000 ipsec ipsec.sys Thu Mar 24 18:40:49 2005 (42435E11)
b9864000 b9878000 usbhub usbhub.sys Thu Mar 24 18:30:46 2005 (42435BB6)
b9a78000 b9ab8000 update update.sys Thu Mar 24 18:40:27 2005 (42435DFB)
b9ab8000 b9aef000 rdpdr rdpdr.sys Thu Mar 24 18:30:20 2005 (42435B9C)
b9c3f000 b9c4b000 vga vga.sys Thu Mar 24 18:29:54 2005 (42435B82)
b9c4f000 b9c59000 flpydisk flpydisk.sys Tue Mar 25 01:04:32 2003 (3E7FFF80)
b9c5f000 b9c69000 Dxapi Dxapi.sys Tue Mar 25 01:06:01 2003 (3E7FFFD9)
b9c6f000 b9c78000 raspti raspti.sys Thu Mar 24 18:34:16 2005 (42435C88)
b9c8f000 b9c9c000 wanarp wanarp.sys Thu Mar 24 18:34:07 2005 (42435C7F)
b9ca7000 b9cae000 parvdm parvdm.sys Tue Mar 25 01:03:49 2003 (3E7FFF55)
b9d4f000 b9d5c000 netbios netbios.sys Thu Mar 24 18:33:21 2005 (42435C51)
b9d5f000 b9d6d000 NDProxy NDProxy.SYS Thu Mar 24 18:34:13 2005 (42435C85)
b9e44000 b9e53000 termdd termdd.sys Thu Mar 24 18:27:15 2005 (42435AE3)
b9e94000 b9ea0000 dump_mraid35x dump_mraid35x.sys Fri Dec 12 00:13:16 2003 (3FD95C7C)
ba098000 ba0a5000 Npfs Npfs.SYS Thu Mar 24 18:30:04 2005 (42435B8C)
ba2e4000 ba2f7000 raspptp raspptp.sys Thu Mar 24 18:40:43 2005 (42435E0B)
ba2f7000 ba311000 ndiswan ndiswan.sys Thu Mar 24 18:40:46 2005 (42435E0E)
ba311000 ba326000 rasl2tp rasl2tp.sys Thu Mar 24 18:40:29 2005 (42435DFD)
ba326000 ba34e000 ks ks.sys Thu Mar 24 18:41:03 2005 (42435E1F)
ba34e000 ba362000 redbook redbook.sys Thu Mar 24 18:28:46 2005 (42435B3E)
ba362000 ba377000 cdrom cdrom.sys Thu Mar 24 18:28:57 2005 (42435B49)
ba377000 ba3a0b00 b57xp32 b57xp32.sys Thu Apr 17 20:38:35 2003 (3E9F571B)
ba3a1000 ba3cb000 USBPORT USBPORT.SYS Thu Mar 24 18:30:43 2005 (42435BB3)
ba3dd000 ba3e4000 Beep Beep.SYS Tue Mar 25 01:03:04 2003 (3E7FFF28)
ba415000 ba41d000 rasacd rasacd.sys Tue Mar 25 01:11:50 2003 (3E800136)
ba41d000 ba425000 audstub audstub.sys Tue Mar 25 01:09:12 2003 (3E800098)
ba443000 ba451000 msgpc msgpc.sys Thu Mar 24 18:33:31 2005 (42435C5B)
ba563000 ba56e000 Msfs Msfs.SYS Thu Mar 24 18:30:04 2005 (42435B8C)
ba573000 ba57c000 ndistapi ndistapi.sys Thu Mar 24 18:34:11 2005 (42435C83)
ba6ad000 ba6b8000 ptilink ptilink.sys Thu Mar 24 18:28:25 2005 (42435B29)
ba711000 ba714e40 ASPI32 ASPI32.SYS Fri Sep 10 18:46:10 1999 (37D99842)
ba7b5000 ba7bf000 dump_diskdump dump_diskdump.sys Thu Mar 24 18:28:56 2005 (42435B48)
ba838000 ba850000 parport parport.sys Thu Mar 24 18:28:25 2005 (42435B29)
ba850000 ba865000 serial serial.sys Thu Mar 24 18:28:29 2005 (42435B2D)
ba865000 ba878000 i8042prt i8042prt.sys Thu Mar 24 18:41:05 2005 (42435E21)
ba878000 ba893000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 18:29:53 2005 (42435B81)
ba893000 ba8a4400 atiragem atiragem.sys Thu Oct 03 20:22:15 2002 (3D9CED47)
ba8a5000 ba8c8800 e100b325 e100b325.sys Tue Mar 04 13:56:25 2003 (3E6504E9)
ba97f000 ba989000 serenum serenum.sys Thu Mar 24 18:28:27 2005 (42435B2B)
ba98f000 ba999000 mouclass mouclass.sys Tue Mar 25 01:03:09 2003 (3E7FFF2D)
ba99f000 ba9a9000 kbdclass kbdclass.sys Tue Mar 25 01:03:10 2003 (3E7FFF2E)
ba9af000 ba9ba000 fdc fdc.sys Thu Mar 24 18:28:43 2005 (42435B3B)
ba9bf000 ba9c8000 watchdog watchdog.sys Thu Mar 24 18:30:19 2005 (42435B9B)
ba9cf000 ba9df000 p3 p3.sys Thu Mar 24 18:28:39 2005 (42435B37)
ba9f7000 ba9fc620 PcdrNt PcdrNt.sys Wed Mar 22 23:42:23 2000 (38D9AEBF)
ba9ff000 baa07000 RDPCDD RDPCDD.sys Tue Mar 25 01:03:05 2003 (3E7FFF29)
baa1f000 baa27000 dlttape dlttape.sys Tue Mar 25 01:05:28 2003 (3E7FFFB8)
bab3f000 bab47000 mnmdd mnmdd.SYS Tue Mar 25 01:07:53 2003 (3E800049)
babf7000 bac03d00 dcesmwdm dcesmwdm.sys Tue Jan 20 16:26:08 2004 (400DAB00)
bacaf000 bacb6000 dxgthk dxgthk.sys Tue Mar 25 01:05:52 2003 (3E7FFFD0)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 24 18:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Thu Mar 24 18:27:25 2005 (42435AED)
bff30000 bff49c00 atiraged atiraged.dll Tue Mar 25 03:46:28 2003 (3E802574)
f7210000 f722f000 Mup Mup.sys Thu Mar 24 18:40:49 2005 (42435E11)
f722f000 f7265000 NDIS NDIS.sys Thu Mar 24 18:40:26 2005 (42435DFA)
f7265000 f72fa000 Ntfs Ntfs.sys Thu Mar 24 18:40:29 2005 (42435DFD)
f72fa000 f7321000 KSecDD KSecDD.sys Thu Mar 24 18:28:53 2005 (42435B45)
f7321000 f7346000 fltmgr fltmgr.sys Thu Mar 24 18:30:25 2005 (42435BA1)
f7346000 f7359000 CLASSPNP CLASSPNP.SYS Thu Mar 24 18:40:23 2005 (42435DF7)
f7359000 f736a7c0 afamgt afamgt.sys Mon Nov 24 17:39:49 2003 (3FC296C5)
f736b000 f737fd00 adpu160m adpu160m.sys Thu Mar 06 20:25:37 2003 (3E680321)
f7380000 f739f000 SCSIPORT SCSIPORT.SYS Thu Mar 24 18:40:26 2005 (42435DFA)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 18:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 18:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 18:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 18:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 18:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 01:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 01:16:35 2003 (3E800253)
f74a7000 f74b7000 MountMgr MountMgr.sys Thu Mar 24 18:27:23 2005 (42435AEB)
f74b7000 f74c2000 PartMgr PartMgr.sys Thu Mar 24 18:40:34 2005 (42435E02)
f74c7000 f74d4f00 aic78xx aic78xx.sys Mon May 20 11:16:12 2002 (3CE9214C)
f74d7000 f74e3000 mraid35x mraid35x.sys Fri Dec 12 00:13:16 2003 (3FD95C7C)
f74e7000 f74f7000 disk disk.sys Thu Mar 24 18:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Thu Mar 24 18:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 18:29:40 2005 (42435B74)
f7557000 f7563000 TAPE TAPE.SYS Thu Mar 24 18:29:01 2005 (42435B4D)
f75d7000 f75e2000 TDI TDI.SYS Thu Mar 24 18:35:34 2005 (42435CD6)
f76f7000 f7706000 raspppoe raspppoe.sys Thu Mar 24 18:34:16 2005 (42435C88)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 01:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 01:07:58 2003 (3E80004E)
f7717000 f771e000 dmload dmload.sys Tue Mar 25 01:08:08 2003 (3E800058)
f7727000 f772f000 Fs_Rec Fs_Rec.SYS Tue Mar 25 01:08:36 2003 (3E800074)
f77af000 f77b6000 Null Null.SYS Tue Mar 25 01:03:05 2003 (3E7FFF29)
f77ef000 f77f3400 usbohci usbohci.sys Thu Mar 24 18:30:45 2005 (42435BB5)
f79b7000 f79b8280 swenum swenum.sys Thu Mar 24 18:27:42 2005 (42435AFE)
f79f1000 f79f2580 USBD USBD.SYS Tue Mar 25 01:10:39 2003 (3E8000EF)

Unloaded modules:
f7128000 f7136000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bab0f000 bab17000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000

 

I've been experiencing something similar but unfortunately have not found a solution as of yet. This might not even be related but it caught my eye because both of our dumps are showing up as being called from IRQ 27 and both are with PE4400's.

It looks like you're running at least one PERC card. If so, what kind, how many, what are their driver/firm/bios levels? What is the BIOS level of the machine?

Can you provide and IRQ list so I can compare my hardware to yours and see if a pattern emerges? Also, in the link below is a discussion about CPU ID's - can you provide your CPU model and steppings? Can you switch to a full dump and provide that?

Does this tend to happen when the box is under heavy loads?

I need down time to swap hardware and try some other issue.
Take a look at http://www.windowsbbs.com/showthread.php?t=43625

 

The server is under basically no load as I've transferred everything off it. So it just sits there on its own waiting to lock up. Things look very similiar between our two issues. I'm waiting for one more lockup here and then I'm going to resort to calling Dell. Just wish I could pinpoint the exact piece of hardware.

System has a PERC3/DC, driver 6.41.2.32, firmware 197O, BIOS 3.35
System Bios A11

Both CPUs are:
Name Intel Xeon III EB
Code name Cascades
Specification Intel Xeon III EB 1000 MHz
Family/Model/Stepping 686
Extended Family/Model 0/0
Brand ID 3
Package Slot 2 SECC
Core Stepping cC0
Technology 0.18µ
Instructions Sets MMX, SSE
Clock Speed 993.4 MHz
Clock multiplier x7.5
Front Side Bus Frequency 132.4 MHz
Bus Speed 132.4 MHz
Stock frequency 1000 MHz
L1 Data Cache 16 KBytes, 4-way set associative, 32 Bytes line size
L1 Instruction Cache 16 KBytes, 4-way set associative, 32 Bytes line size
L2 Cache 256 KBytes, 8-way set associative, 32 Bytes line size
L2 Latency 0
L2 Speed 993.4 MHz (Full)
L2 Location On Chip
L2 ECC Check enabled
L2 Data Prefetch Logic no
L2 Bus Width 256 bits

IRQ List:
IRQ 0 System timer OK
IRQ 1 Standard 101/102-Key or Microsoft Natural PS/2 Keyboard OK
IRQ 3 Communications Port (COM2) OK
IRQ 4 Communications Port (COM1) OK
IRQ 6 Standard floppy disk controller OK
IRQ 8 System CMOS/real time clock OK
IRQ 9 Microsoft ACPI-Compliant System OK
IRQ 10 RAID Controller Component Device OK
IRQ 12 PS/2 Compatible Mouse OK
IRQ 13 Numeric data processor OK
IRQ 14 ServerWorks (RCC) PCI to USB Open Host Controller OK
IRQ 15 System board OK
IRQ 16 Intel(R) PRO/100 Network Connection OK
IRQ 19 DELL PERC 3/DC & PERC 3/DCL RAID Controller OK
IRQ 23 3Com 3C996B Gigabit Server NIC #2 OK
IRQ 24 Adaptec AIC-7899 - Ultra160 SCSI OK
IRQ 25 Adaptec AIC-7880 PCI Ultra SCSI OK
IRQ 31 Adaptec AIC-7899 - Ultra160 SCSI OK