IRQL_NOT_LESS_OR_EQUAL [Error]

Hello!

I am currently using Windows XP Professional, with Service Pack 2, all the Windows updates and the latest drivers for my hardware.
The following bugcheck occurs rather randomly (sometimes after 2 hours of idle state, sometimes after 1 day of CPU stress tests):

IRQL_NOT_LESS_OR_EQUAL (0x0000000A)
(0x82EC145C, 0x00000002, 0x00000001, 0x804DBDEA)
(Parameters are always the same!)

First, how can I find out if I have faulty hardware, or just a driver is the problem? I must mention that I was using Windows 2000 Professional, with EXACTLT THE SAME hardware and i have NEVER experienced a BSOD with that OS. Trouble started when I moved on to XP.

I also attached some information obtained with WinDbg:
(it seems rather odd to me that the address which referenced memory is within the kernel range)


Loading Dump File [C:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: C:\Windows\Symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Sat Jan 08 12:14:49 2005
System Uptime: 0 days 17:35:49.476
Loading Kernel Symbols
...................................................................................................................................
Loading unloaded module list
................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {82ec145c, 2, 1, 804dbdea}

Probably caused by : hardware ( nt!KiSwapContext+38 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 82ec145c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804dbdea, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 82ec145c Nonpaged pool

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 804dc6a6 to 804dbdea

MISALIGNED_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

TRAP_FRAME: ee3e1c38 -- (.trap ffffffffee3e1c38)
ErrCode = 00000002
eax=00007f8c ebx=ffdff000 ecx=ee3e1d40 edx=80010031 esi=8171e788 edi=81939178
eip=804dbdea esp=ee3e1cac ebp=80042000 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
nt!KiSwapContext+0x38:
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl ds:0023:82ec145c=??
Resetting default scope

STACK_TEXT:
ee3e1cb8 804dc6a6 8171e7f8 8171e788 804dc6f2 nt!KiSwapContext+0x38
ee3e1cc4 804dc6f2 00000000 ee3e1d1c 00000000 nt!KiSwapThread+0x46
ee3e1cec 80565a9f 00000001 00000006 ee3e1d01 nt!KeWaitForSingleObject+0x1c2
ee3e1d50 804df06b 00000424 00000001 ee3e1d1c nt!NtWaitForSingleObject+0x9a
ee3e1d50 7c90eb94 00000424 00000001 ee3e1d1c nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
01c8faa4 00000000 00000000 00000000 00000000 0x7c90eb94


FOLLOWUP_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiSwapContext+38

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap ffffffffee3e1c38 ; kb

MODULE_NAME: hardware

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

kd> kv
ChildEBP RetAddr Args to Child
ee3e1c38 804dbdea badb0d00 80010031 8056a9ab nt!KiTrap0E+0x233 (FPO: [0,0] TrapFrame @ ee3e1c38)
ee3e1cb8 804dc6a6 8171e7f8 8171e788 804dc6f2 nt!KiSwapContext+0x38 (FPO: [EBP 0xee3e1cec] [0,0,4])
ee3e1cc4 804dc6f2 00000000 ee3e1d1c 00000000 nt!KiSwapThread+0x46 (FPO: [0,0,0])
ee3e1cec 80565a9f 00000001 00000006 ee3e1d01 nt!KeWaitForSingleObject+0x1c2 (FPO: [Non-Fpo])
ee3e1d50 804df06b 00000424 00000001 ee3e1d1c nt!NtWaitForSingleObject+0x9a (FPO: [Non-Fpo])
ee3e1d50 7c90eb94 00000424 00000001 ee3e1d1c nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ ee3e1d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
01c8faa4 00000000 00000000 00000000 00000000 0x7c90eb94
kd> kb
ChildEBP RetAddr Args to Child
ee3e1c38 804dbdea badb0d00 80010031 8056a9ab nt!KiTrap0E+0x233
ee3e1cb8 804dc6a6 8171e7f8 8171e788 804dc6f2 nt!KiSwapContext+0x38
ee3e1cc4 804dc6f2 00000000 ee3e1d1c 00000000 nt!KiSwapThread+0x46
ee3e1cec 80565a9f 00000001 00000006 ee3e1d01 nt!KeWaitForSingleObject+0x1c2
ee3e1d50 804df06b 00000424 00000001 ee3e1d1c nt!NtWaitForSingleObject+0x9a
ee3e1d50 7c90eb94 00000424 00000001 ee3e1d1c nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
01c8faa4 00000000 00000000 00000000 00000000 0x7c90eb94
kd> lm t n
start end module name
804d7000 806eb780 nt ntoskrnl.exe Wed Aug 04 09:19:48 2004 (41108004)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 08:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 09:00:51 2004 (41107B93)
bf012000 bf3a3180 nv4_disp nv4_disp.dll Thu Jul 15 22:13:32 2004 (40F6D75C)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 09:17:30 2004 (41107F7A)
eb4a0000 eb4c9f00 kmixer kmixer.sys Wed Aug 04 09:07:46 2004 (41107D32)
f0457000 f0467280 Udfs Udfs.SYS Wed Aug 04 09:00:27 2004 (41107B7B)
f196a000 f19aa380 HTTP HTTP.sys Wed Aug 04 09:00:09 2004 (41107B69)
f1ce6000 f1cfa400 wdmaud wdmaud.sys Wed Aug 04 09:15:03 2004 (41107EE7)
f1d4b000 f1d9d180 srv srv.sys Wed Aug 04 09:14:44 2004 (41107ED4)
f1e16000 f1e42400 mrxdav mrxdav.sys Wed Aug 04 09:00:49 2004 (41107B91)
f1e7f000 f1e82b80 Aspi32 Aspi32.SYS Tue Dec 23 04:02:44 1997 (349F1BC4)
f2733000 f275e300 SYMTDI SYMTDI.SYS Sat Aug 16 04:05:29 2003 (3F3D8359)
f275f000 f2761040 wg6n wg6n.sys Sat Jun 05 00:37:32 2004 (40C0EB9C)
f2763000 f2765040 wg5n wg5n.sys Sat Jun 05 00:37:31 2004 (40C0EB9B)
f2767000 f2769040 wg4n wg4n.sys Sat Jun 05 00:37:29 2004 (40C0EB99)
f276b000 f276d040 wg3n wg3n.sys Sat Jun 05 00:37:28 2004 (40C0EB98)
f3baf000 f3bc1180 dump_viamraid dump_viamraid.sys Tue May 18 11:07:20 2004 (40A9C438)
f3bc2000 f3c4e480 Ntfs Ntfs.SYS Wed Aug 04 09:15:06 2004 (41107EEA)
f3c77000 f3ce4680 mrxsmb mrxsmb.sys Thu Oct 28 04:14:16 2004 (418047E8)
f3ce5000 f3d0fa00 rdbss rdbss.sys Thu Oct 28 04:13:57 2004 (418047D5)
f3d10000 f3d30f00 ipnat ipnat.sys Thu Sep 30 01:28:36 2004 (415B3714)
f3d31000 f3d52d00 afd afd.sys Wed Aug 04 09:14:13 2004 (41107EB5)
f3d53000 f3d7ac00 netbt netbt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f3d7b000 f3dd2a80 tcpip tcpip.sys Wed Aug 04 09:14:39 2004 (41107ECF)
f3dd3000 f3de5400 ipsec ipsec.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f3df8000 f3e2a580 UdfReadr_xp UdfReadr_xp.SYS Wed Jan 23 23:59:22 2002 (3C4F323A)
f3e3d000 f3e76200 cdudf_xp cdudf_xp.SYS Thu Jan 24 00:01:01 2002 (3C4F329D)
f500f000 f5042200 update update.sys Wed Aug 04 08:58:32 2004 (41107B08)
f5043000 f5073100 rdpdr rdpdr.sys Wed Aug 04 09:01:10 2004 (41107BA6)
f5449000 f5451880 Fips Fips.SYS Sat Aug 18 04:31:49 2001 (3B7DC585)
f5459000 f5461700 wanarp wanarp.sys Wed Aug 04 09:04:57 2004 (41107C89)
f5469000 f5479000 SAVRTPEL SAVRTPEL.SYS Sat Nov 01 13:26:40 2003 (3FA39870)
f5479000 f5481700 netbios netbios.sys Wed Aug 04 09:03:19 2004 (41107C27)
f5489000 f5492000 wpsdrvnt wpsdrvnt.sys Thu Jul 01 00:51:47 2004 (40E335F3)
f56b3000 f56c2900 Cdfs Cdfs.SYS Wed Aug 04 09:14:09 2004 (41107EB1)
f581e000 f5820900 vulfntr vulfntr.sys Wed Nov 13 11:34:04 2002 (3DD21C8C)
f5919000 f591b900 Dxapi Dxapi.sys Fri Aug 17 23:53:19 2001 (3B7D843F)
f596c000 f5970500 watchdog watchdog.sys Wed Aug 04 09:07:32 2004 (41107D24)
f599c000 f59aa100 usbhub usbhub.sys Wed Aug 04 09:08:40 2004 (41107D68)
f59dc000 f59e5f00 termdd termdd.sys Wed Aug 04 08:58:52 2004 (41107B1C)
f59fc000 f5a05480 NDProxy NDProxy.SYS Fri Aug 17 23:55:30 2001 (3B7D84C2)
f71d5000 f71d9580 ptilink ptilink.sys Fri Aug 17 23:49:53 2001 (3B7D8371)
f71dd000 f71e16c0 mmc_2K mmc_2K.SYS Wed Jan 23 22:19:44 2002 (3C4F1AE0)
f71e5000 f71e9080 raspti raspti.sys Fri Aug 17 23:55:32 2001 (3B7D84C4)
f71ed000 f71f2000 flpydisk flpydisk.sys Wed Aug 04 08:59:24 2004 (41107B3C)
f748a000 f748aa80 PQNTDrv PQNTDrv.SYS Tue Sep 17 02:14:30 2002 (3D8665D6)
f7afa000 f7b0ae00 psched psched.sys Wed Aug 04 09:04:16 2004 (41107C60)
f7b3d000 f7b53680 ndiswan ndiswan.sys Wed Aug 04 09:14:30 2004 (41107EC6)
f7b54000 f7b67900 parport parport.sys Wed Aug 04 08:59:04 2004 (41107B28)
f7b93000 f7bf4c00 ALCXSENS ALCXSENS.SYS Mon Feb 23 20:11:09 2004 (403A423D)
f7bf5000 f7c18980 portcls portcls.sys Wed Aug 04 09:15:47 2004 (41107F13)
f7c19000 f7cb1a00 ALCXWDM ALCXWDM.SYS Mon Aug 02 16:09:17 2004 (410E3CFD)
f7cb2000 f7cd4e80 USBPORT USBPORT.SYS Wed Aug 04 09:08:34 2004 (41107D62)
f7cdf000 f7cf5520 pwd_2K pwd_2K.SYS Wed Jan 23 22:19:33 2002 (3C4F1AD5)
f7cf6000 f7d18680 ks ks.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f7d3a000 f7e178c0 HCF_MSFT HCF_MSFT.sys Fri Jun 08 10:01:44 2001 (3B207858)
f7e18000 f7e2b780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 09:07:04 2004 (41107D08)
f7e2c000 f8084840 nv4_mini nv4_mini.sys Thu Jul 15 22:17:29 2004 (40F6D849)
f80d7000 f80d7c00 audstub audstub.sys Fri Aug 17 23:59:40 2001 (3B7D85BC)
f80d8000 f80d8b80 msmpu401 msmpu401.sys Fri Aug 17 23:59:59 2001 (3B7D85CF)
f80dc000 f80dcd00 dxgthk dxgthk.sys Fri Aug 17 23:53:12 2001 (3B7D8438)
f80de000 f80de7a0 symlcbrd symlcbrd.sys Wed Oct 16 09:50:27 2002 (3DAD0C33)
f80f3000 f80f5280 rasacd rasacd.sys Fri Aug 17 23:55:39 2001 (3B7D84CB)
f81cc000 f81d4900 msgpc msgpc.sys Wed Aug 04 09:04:11 2004 (41107C5B)
f81dc000 f81e7d00 raspptp raspptp.sys Wed Aug 04 09:14:26 2004 (41107EC2)
f81ec000 f81f6200 raspppoe raspppoe.sys Wed Aug 04 09:05:06 2004 (41107C92)
f85d3000 f85d6780 dump_diskdump dump_diskdump.sys Wed Aug 04 08:59:51 2004 (41107B57)
f860b000 f8625580 Mup Mup.sys Wed Aug 04 09:15:20 2004 (41107EF8)
f8626000 f8643000 Teefer Teefer.sys Thu Jul 01 00:49:55 2004 (40E33583)
f8643000 f866fa80 NDIS NDIS.sys Wed Aug 04 09:14:27 2004 (41107EC3)
f8670000 f8686780 KSecDD KSecDD.sys Wed Aug 04 08:59:45 2004 (41107B51)
f8687000 f86aa000 Fastfat Fastfat.sys Wed Aug 04 09:14:15 2004 (41107EB7)
f86aa000 f86c8780 fltMgr fltMgr.sys Wed Aug 04 09:01:17 2004 (41107BAD)
f86c9000 f86db180 viamraid viamraid.sys Tue May 18 11:07:20 2004 (40A9C438)
f86dc000 f86ee880 viasraid viasraid.sys Wed Jun 11 11:00:34 2003 (3EE6E1A2)
f86ef000 f8706480 atapi atapi.sys Wed Aug 04 08:59:41 2004 (41107B4D)
f8707000 f871e800 SCSIPORT SCSIPORT.SYS Wed Aug 04 08:59:39 2004 (41107B4B)
f871f000 f8734c60 imagedrv imagedrv.sys Sat Mar 29 16:45:17 2003 (3E85B17D)
f8735000 f875a700 dmio dmio.sys Wed Aug 04 09:07:13 2004 (41107D11)
f875b000 f8779880 ftdisk ftdisk.sys Fri Aug 17 23:52:41 2001 (3B7D8419)
f877a000 f878aa80 pci pci.sys Wed Aug 04 09:07:45 2004 (41107D31)
f878b000 f87b8d80 ACPI ACPI.sys Wed Aug 04 09:07:35 2004 (41107D27)
f87da000 f87e2c00 isapnp isapnp.sys Fri Aug 17 23:58:01 2001 (3B7D8559)
f87ea000 f87f4500 MountMgr MountMgr.sys Wed Aug 04 08:58:29 2004 (41107B05)
f87fa000 f8806c80 VolSnap VolSnap.sys Wed Aug 04 09:00:14 2004 (41107B6E)
f880a000 f8812e00 disk disk.sys Wed Aug 04 08:59:53 2004 (41107B59)
f881a000 f8826200 CLASSPNP CLASSPNP.SYS Wed Aug 04 09:14:26 2004 (41107EC2)
f882a000 f8834e80 uagp35 uagp35.sys Wed Aug 04 09:07:43 2004 (41107D2F)
f885a000 f8867e20 Cdr4_xp Cdr4_xp.SYS Thu Jan 24 00:23:59 2002 (3C4F37FF)
f886a000 f8876180 cdrom cdrom.sys Wed Aug 04 08:59:52 2004 (41107B58)
f887a000 f8888080 redbook redbook.sys Wed Aug 04 08:59:34 2004 (41107B46)
f888a000 f8898b80 drmk drmk.sys Wed Aug 04 09:07:54 2004 (41107D3A)
f88ba000 f88c4600 fetnd5b fetnd5b.sys Thu Jul 22 12:17:06 2004 (40FF8612)
f88ca000 f88d9d80 serial serial.sys Wed Aug 04 09:15:51 2004 (41107F17)
f88da000 f88e6e00 i8042prt i8042prt.sys Wed Aug 04 09:14:36 2004 (41107ECC)
f88ea000 f88f6880 rasl2tp rasl2tp.sys Wed Aug 04 09:14:21 2004 (41107EBD)
f89ea000 f89f8d80 sysaudio sysaudio.sys Wed Aug 04 09:15:54 2004 (41107F1A)
f8a3a000 f8a43200 amdk7 amdk7.sys Wed Aug 04 08:59:19 2004 (41107B37)
f8a4a000 f8a54380 imapi imapi.sys Wed Aug 04 09:00:12 2004 (41107B6C)
f8a5a000 f8a60200 PCIIDEX PCIIDEX.SYS Wed Aug 04 08:59:40 2004 (41107B4C)
f8a62000 f8a66900 PartMgr PartMgr.sys Sat Aug 18 04:32:23 2001 (3B7DC5A7)
f8a6a000 f8a70d00 viaagp1 viaagp1.sys Wed Jul 02 13:08:01 2003 (3F02AF01)
f8ad2000 f8ad9580 Modem Modem.SYS Wed Aug 04 09:08:04 2004 (41107D44)
f8ada000 f8adf680 Cdralw2k Cdralw2k.SYS Thu Jan 24 00:22:38 2002 (3C4F37AE)
f8ae2000 f8ae7000 usbuhci usbuhci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f8aea000 f8af0800 usbehci usbehci.sys Wed Aug 04 09:08:34 2004 (41107D62)
f8af2000 f8af7200 vga vga.sys Wed Aug 04 09:07:06 2004 (41107D0A)
f8b02000 f8b09000 fdc fdc.sys unavailable (FFFFFFFE)
f8b0a000 f8b0fa00 mouclass mouclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f8b12000 f8b18000 kbdclass kbdclass.sys Wed Aug 04 08:58:32 2004 (41107B08)
f8b1a000 f8b1e880 TDI TDI.SYS Wed Aug 04 09:07:47 2004 (41107D33)
f8b3a000 f8b3ea80 Msfs Msfs.SYS Wed Aug 04 09:00:37 2004 (41107B85)
f8b5a000 f8b61880 Npfs Npfs.SYS Wed Aug 04 09:00:38 2004 (41107B86)
f8bea000 f8bed000 BOOTVID BOOTVID.dll Fri Aug 17 23:49:09 2001 (3B7D8345)
f8c9a000 f8c9dc80 mssmbios mssmbios.sys Wed Aug 04 09:07:47 2004 (41107D33)
f8cba000 f8cbdc80 serenum serenum.sys Wed Aug 04 08:59:06 2004 (41107B2A)
f8cbe000 f8cc0980 gameenum gameenum.sys Wed Aug 04 09:08:20 2004 (41107D54)
f8cc6000 f8cc8580 ndistapi ndistapi.sys Fri Aug 17 23:55:29 2001 (3B7D84C1)
f8cda000 f8cdbb80 kdcom kdcom.dll Fri Aug 17 23:49:10 2001 (3B7D8346)
f8cdc000 f8cdd100 WMILIB WMILIB.SYS Sat Aug 18 00:07:23 2001 (3B7D878B)
f8cde000 f8cdf500 viaide viaide.sys Wed Aug 04 08:59:42 2004 (41107B4E)
f8ce0000 f8ce1700 dmload dmload.sys Fri Aug 17 23:58:15 2001 (3B7D8567)
f8d30000 f8d31100 swenum swenum.sys Wed Aug 04 08:58:41 2004 (41107B11)
f8d64000 f8d65a80 ParVdm ParVdm.SYS Fri Aug 17 23:49:49 2001 (3B7D836D)
f8d66000 f8d67080 mnmdd mnmdd.SYS Fri Aug 17 23:57:28 2001 (3B7D8538)
f8d6e000 f8d6f280 USBD USBD.SYS Sat Aug 18 00:02:58 2001 (3B7D8682)
f8d70000 f8d71f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 23:49:37 2001 (3B7D8361)
f8d72000 f8d73080 RDPCDD RDPCDD.sys Fri Aug 17 23:46:56 2001 (3B7D82C0)
f8d74000 f8d75080 Beep Beep.SYS Fri Aug 17 23:47:33 2001 (3B7D82E5)
f8eec000 f8eec680 giveio giveio.sys Thu Apr 04 05:33:25 1996 (316334F5)
f8ef4000 f8ef4b80 Null Null.SYS Fri Aug 17 23:47:39 2001 (3B7D82EB)

Unloaded modules:
eb4a0000 eb4ca000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb4a0000 eb4ca000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee91f000 ee949000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8d12000 f8d14000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f0468000 f0492000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f0e1b000 f0e45000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f0e1b000 f0e45000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f18c8000 f18f2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f1c71000 f1c9b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8f24000 f8f25000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f51e6000 f51f3000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f51f6000 f5204000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f1cc3000 f1ce6000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8d0a000 f8d0c000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8bb2000 f8bb7000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5806000 f5809000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000

 

do you have another dump? EIP is off, the processor is executing garbage. I'd like to see if they all look the same before making a recommendation. If you could snag the !analyze -v from a few more dumps, that would be great.

 

I only have one more dump in which trap frames are available, because the first ones are only small memory dumps. I'll attach that dump with trap frames and some of the others:


Loading Dump File [C:\WINDOWS\Minidump\Mini010705-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\Windows\Symbols
Executable search path is:
Unable to load image \WINDOWS\system32\ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Fri Jan 07 03:03:59 2005
System Uptime: 0 days 7:03:40.560
Unable to load image \WINDOWS\system32\ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
..................................................................................................................................
Loading unloaded module list
..............
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {82ec145c, 2, 1, 804dbdea}

Probably caused by : ntoskrnl.exe ( nt!KiSwapContext+38 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 82ec145c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804dbdea, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 82ec145c

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiSwapContext+38
804dbdea ?? ???

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 804dc6a6 to 804dbdea

TRAP_FRAME: f5c5bc38 -- (.trap fffffffff5c5bc38)
ErrCode = 00000002
eax=0000008b ebx=ffdff000 ecx=f5c5bd40 edx=80010031 esi=81d417a8 edi=8187d020
eip=804dbdea esp=f5c5bcac ebp=80042000 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!KiSwapContext+0x38:
804dbdea ?? ???
Resetting default scope

STACK_TEXT:
f5c5bcb8 804dc6a6 81d41818 81d417a8 804dc6f2 nt!KiSwapContext+0x38
f5c5bcc4 804dc6f2 00000000 f5c5bd1c 00000000 nt!KiSwapThread+0x46
f5c5bcec 80565a9f 00000001 00000006 bf803e01 nt!KeWaitForSingleObject+0x1c2
f5c5bd50 804df06b 0000006c 00000000 f5c5bd1c nt!NtWaitForSingleObject+0x9a
f5c5bd50 7c90eb94 0000006c 00000000 f5c5bd1c nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0115ff20 00000000 00000000 00000000 00000000 0x7c90eb94


FOLLOWUP_IP:
nt!KiSwapContext+38
804dbdea ?? ???

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiSwapContext+38

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 41108004

STACK_COMMAND: .trap fffffffff5c5bc38 ; kb

BUCKET_ID: 0xA_W_nt!KiSwapContext+38

Followup: MachineOwner
---------

==========================================================


Loading Dump File [C:\WINDOWS\Minidump\Mini010605-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\Windows\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Thu Jan 06 14:00:12 2005
System Uptime: 0 days 5:09:54.807
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
..................................................................................................................................
Loading unloaded module list
..........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {82ec145c, 2, 1, 804dbdea}

Probably caused by : hardware ( nt!KiSwapContext+38 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 82ec145c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804dbdea, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 82ec145c

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

MISALIGNED_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

LAST_CONTROL_TRANSFER: from 804dc6a6 to 804dbdea

STACK_TEXT:
f8a19cb8 804dc6a6 817e0600 817e0590 804dc6f2 nt!KiSwapContext+0x38
f8a19cc4 804dc6f2 00000000 f8a19d1c 00000000 nt!KiSwapThread+0x46
f8a19cec 80565a9f 00000001 00000006 f8a19d01 nt!KeWaitForSingleObject+0x1c2
f8a19d50 804df06b 000001fc 00000001 f8a19d1c nt!NtWaitForSingleObject+0x9a
f8a19d50 7c90eb94 000001fc 00000001 f8a19d1c nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0156faa4 00000000 00000000 00000000 00000000 0x7c90eb94


FOLLOWUP_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiSwapContext+38

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: kb

MODULE_NAME: hardware

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

kd> kv
ChildEBP RetAddr Args to Child
f8a19cb8 804dc6a6 817e0600 817e0590 804dc6f2 nt!KiSwapContext+0x38 (FPO: [EBP 0xf8a19cec] [0,0,4])
f8a19cc4 804dc6f2 00000000 f8a19d1c 00000000 nt!KiSwapThread+0x46 (FPO: [0,0,0])
f8a19cec 80565a9f 00000001 00000006 f8a19d01 nt!KeWaitForSingleObject+0x1c2 (FPO: [Non-Fpo])
f8a19d50 804df06b 000001fc 00000001 f8a19d1c nt!NtWaitForSingleObject+0x9a (FPO: [Non-Fpo])
f8a19d50 7c90eb94 000001fc 00000001 f8a19d1c nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f8a19d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0156faa4 00000000 00000000 00000000 00000000 0x7c90eb94

==========================================================


Loading Dump File [C:\WINDOWS\Minidump\Mini010505-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\Windows\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Wed Jan 05 10:25:08 2005
System Uptime: 0 days 8:08:02.725
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
.................................................................................................................................
Loading unloaded module list
.........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {82ec145c, 2, 1, 804dbdea}

Probably caused by : hardware ( nt!KiSwapContext+38 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 82ec145c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804dbdea, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 82ec145c

CURRENT_IRQL: 2

FAULTING_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

MISALIGNED_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

LAST_CONTROL_TRANSFER: from 804dc6a6 to 804dbdea

STACK_TEXT:
f7cddcb8 804dc6a6 8236e818 8236e7a8 804dc6f2 nt!KiSwapContext+0x38
f7cddcc4 804dc6f2 00000000 f7cddd1c 00000000 nt!KiSwapThread+0x46
f7cddcec 80565a9f 00000001 00000006 f7cddd01 nt!KeWaitForSingleObject+0x1c2
f7cddd50 804df06b 000002f0 00000001 f7cddd1c nt!NtWaitForSingleObject+0x9a
f7cddd50 7c90eb94 000002f0 00000001 f7cddd1c nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0257faa4 00000000 00000000 00000000 00000000 0x7c90eb94


FOLLOWUP_IP:
nt!KiSwapContext+38
804dbdea 088b5c240c83 or [ebx+0x830c245c],cl

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!KiSwapContext+38

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: kb

MODULE_NAME: hardware

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

kd> kv
ChildEBP RetAddr Args to Child
f7cddcb8 804dc6a6 8236e818 8236e7a8 804dc6f2 nt!KiSwapContext+0x38 (FPO: [EBP 0xf7cddcec] [0,0,4])
f7cddcc4 804dc6f2 00000000 f7cddd1c 00000000 nt!KiSwapThread+0x46 (FPO: [0,0,0])
f7cddcec 80565a9f 00000001 00000006 f7cddd01 nt!KeWaitForSingleObject+0x1c2 (FPO: [Non-Fpo])
f7cddd50 804df06b 000002f0 00000001 f7cddd1c nt!NtWaitForSingleObject+0x9a (FPO: [Non-Fpo])
f7cddd50 7c90eb94 000002f0 00000001 f7cddd1c nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f7cddd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0257faa4 00000000 00000000 00000000 00000000 0x7c90eb94

 

So, what can you say?

Thank you in advance!

 

since you look like you are comfortable in the debugger, and i dont have a uniproc xpsp2 machine here at home...

In the debugger, against the memory dump from today
get the output of these commands

Code:

u nt!KiSwapContext nt!KiSwapContext+39
!CPUID

That will spew some assembly. The fact that its failing in basically the same place in all these dumps is just odd. This stack is looking familiar to me, but i can't place what it was.

Are you 100% sure your BIOS is current? If there is an errata in your processor, any microcode updates would be delivered in a BIOS update.

 

Yes, I have the latest BIOS update (from 2004/09/04). But, doesn't it seem odd that all these problems are occuring only in xp (i have never experienced a BSOD in 2k).

Here is the information from the debugger:

kd> u nt!KiSwapContext nt!KiSwapContext+39
nt!KiSwapContext:
804dbdb2 83ec10 sub esp,0x10
804dbdb5 895c240c mov [esp+0xc],ebx
804dbdb9 89742408 mov [esp+0x8],esi
804dbdbd 897c2404 mov [esp+0x4],edi
804dbdc1 892c24 mov [esp],ebp
804dbdc4 8b1d1cf0dfff mov ebx,[ffdff01c]
804dbdca 8bf1 mov esi,ecx
804dbdcc 8bbb24010000 mov edi,[ebx+0x124]
804dbdd2 89b324010000 mov [ebx+0x124],esi
804dbdd8 8a4f58 mov cl,[edi+0x58]
804dbddb e8d9000000 call nt!SwapContext (804dbeb9)
804dbde0 8b2c24 mov ebp,[esp]
804dbde3 8b7c2404 mov edi,[esp+0x4]
804dbde7 8b742408 mov esi,[esp+0x8]

kd> !CPUID
CP F/M/S Manufacturer MHz
0 6,8,1 AuthenticAMD 2080

 

So, can you tell me if it's just a faulty driver, or I am having defective hardware...

 

Ben may not be back on the forum this weekend but usually every week day in the evenings.

 

The reason Ben was asking about your bios is that this crash should not be consistant.

Your processor is running garbage. Its possible that a driver has corrupted something to make it be off by this much, but its not likely that your crashes would be so consistant if so.

My money is on hardware, cpu, motherboard, ram, in that order.

 

Well, something still puzzles me: wht only on xp and never ever on 2k?

 

who can say? You'd have to debug it down to root cause to answer that question.

 

So can anybody state something about the cause of the crashes? Doesn't the above debug info offer any useful hints?