Need help on decifering a log after blue screen (logg updated)

Status
Not open for further replies.

daviddouglasr

Reputable
Aug 25, 2015
7
0
4,510
Hi Everyone,

Whilst playing Witcher 3 I got a blue screen on Windows 10. Using the debugger I loaded the dump file and got the info below. Could anyone tell me what it means ?


Microsoft (R) Windows Debugger Version 10.0.10240.9 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.


************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred symsrv*symsrv.dll*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: symsrv*symsrv.dll*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
No .natvis files found at C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\Visualizers.
Windows 10 Kernel Version 10240 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 10240.16431.amd64fre.th1.150810-2333
Machine Name:
Kernel base = 0xfffff803`43280000 PsLoadedModuleList = 0xfffff803`435a5030
Debug session time: Sun Aug 30 08:41:15.725 2015 (UTC + 2:00)
System Uptime: 1 days 2:08:12.425
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00007ff7`3b0c3018). Type ".hh dbgerr001" for details
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, ffffd0016b981b30, 0, fffff801ca1c2b84}

Probably caused by : dxgkrnl.sys ( dxgkrnl!DXGCONTEXT:😛resent+ef4 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffd0016b981b30
Arg3: 0000000000000000
Arg4: fffff801ca1c2b84

Debugging Details:
------------------


SYSTEM_SKU: To be filled by O.E.M.

SYSTEM_VERSION: To be filled by O.E.M.

BIOS_DATE: 08/22/2012

BASEBOARD_PRODUCT: Z77X-UD5H

BASEBOARD_VERSION: x.x

BUGCHECK_P1: 8

BUGCHECK_P2: ffffd0016b981b30

BUGCHECK_P3: 0

BUGCHECK_P4: fffff801ca1c2b84

BUGCHECK_STR: 0x7f_8

TRAP_FRAME: ffffd0016b981b30 -- (.trap 0xffffd0016b981b30)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffc001ccf39a10 rbx=0000000000000000 rcx=ffffc001b15070d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801ca1c2b84 rsp=0000000000000000 rbp=ffffd00021034fb0
r8=ffffc001b15070d0 r9=0000000000000003 r10=7fffc001b15070d0
r11=7ffffffffffffffc r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
dxgkrnl!DXGCONTEXT:😛resent+0xef4:
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)] ds:fffff801`ca1a7098={nt!ExReleasePushLockExclusiveEx (fffff803`432c7130)}
Resetting default scope

CPU_COUNT: 8

CPU_MHZ: daf

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 3a

CPU_STEPPING: 9

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

PROCESS_NAME: dwm.exe

CURRENT_IRQL: 0

ANALYSIS_VERSION: 10.0.10240.9 amd64fre

LAST_CONTROL_TRANSFER: from fffff803433d86a9 to fffff803433cdd00

STACK_TEXT:
ffffd001`6b9819e8 fffff803`433d86a9 : 00000000`0000007f 00000000`00000008 ffffd001`6b981b30 00000000`00000000 : nt!KeBugCheckEx
ffffd001`6b9819f0 fffff803`433d6774 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd001`6b981b30 fffff801`ca1c2b84 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb4
00000000`00000000 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : dxgkrnl!DXGCONTEXT:😛resent+0xef4


STACK_COMMAND: kb

FOLLOWUP_IP:
dxgkrnl!DXGCONTEXT:😛resent+ef4
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: dxgkrnl!DXGCONTEXT:😛resent+ef4

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: dxgkrnl

IMAGE_NAME: dxgkrnl.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 55bebfed

BUCKET_ID_FUNC_OFFSET: ef4

FAILURE_BUCKET_ID: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent

BUCKET_ID: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent

PRIMARY_PROBLEM_CLASS: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0x7f_8_dxgkrnl!dxgcontext:😛resent

FAILURE_ID_HASH: {d240b642-329c-acc2-db34-bd29e9de0f7b}

Followup: MachineOwner
---------

5: kd> .trap 0xffffd0016b981b30
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffc001ccf39a10 rbx=0000000000000000 rcx=ffffc001b15070d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801ca1c2b84 rsp=0000000000000000 rbp=ffffd00021034fb0
r8=ffffc001b15070d0 r9=0000000000000003 r10=7fffc001b15070d0
r11=7ffffffffffffffc r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
dxgkrnl!DXGCONTEXT:😛resent+0xef4:
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)] ds:fffff801`ca1a7098={nt!ExReleasePushLockExclusiveEx (fffff803`432c7130)}

Thanks
 
Solution
You may have a problem with your graphics driver, especially if it was carried over from Windows 7 or 8. Download and install the latest Windows 10-compatible graphics drivers for your device.
Status
Not open for further replies.