Hi Everyone,
Whilst playing Witcher 3 I got a blue screen on Windows 10. Using the debugger I loaded the dump file and got the info below. Could anyone tell me what it means ?
Microsoft (R) Windows Debugger Version 10.0.10240.9 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred symsrv*symsrv.dll*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: symsrv*symsrv.dll*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
No .natvis files found at C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\Visualizers.
Windows 10 Kernel Version 10240 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 10240.16431.amd64fre.th1.150810-2333
Machine Name:
Kernel base = 0xfffff803`43280000 PsLoadedModuleList = 0xfffff803`435a5030
Debug session time: Sun Aug 30 08:41:15.725 2015 (UTC + 2:00)
System Uptime: 1 days 2:08:12.425
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00007ff7`3b0c3018). Type ".hh dbgerr001" for details
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, ffffd0016b981b30, 0, fffff801ca1c2b84}
Probably caused by : dxgkrnl.sys ( dxgkrnl!DXGCONTEXT:😛resent+ef4 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffd0016b981b30
Arg3: 0000000000000000
Arg4: fffff801ca1c2b84
Debugging Details:
------------------
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: To be filled by O.E.M.
BIOS_DATE: 08/22/2012
BASEBOARD_PRODUCT: Z77X-UD5H
BASEBOARD_VERSION: x.x
BUGCHECK_P1: 8
BUGCHECK_P2: ffffd0016b981b30
BUGCHECK_P3: 0
BUGCHECK_P4: fffff801ca1c2b84
BUGCHECK_STR: 0x7f_8
TRAP_FRAME: ffffd0016b981b30 -- (.trap 0xffffd0016b981b30)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffc001ccf39a10 rbx=0000000000000000 rcx=ffffc001b15070d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801ca1c2b84 rsp=0000000000000000 rbp=ffffd00021034fb0
r8=ffffc001b15070d0 r9=0000000000000003 r10=7fffc001b15070d0
r11=7ffffffffffffffc r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
dxgkrnl!DXGCONTEXT:😛resent+0xef4:
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)] ds:fffff801`ca1a7098={nt!ExReleasePushLockExclusiveEx (fffff803`432c7130)}
Resetting default scope
CPU_COUNT: 8
CPU_MHZ: daf
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3a
CPU_STEPPING: 9
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: dwm.exe
CURRENT_IRQL: 0
ANALYSIS_VERSION: 10.0.10240.9 amd64fre
LAST_CONTROL_TRANSFER: from fffff803433d86a9 to fffff803433cdd00
STACK_TEXT:
ffffd001`6b9819e8 fffff803`433d86a9 : 00000000`0000007f 00000000`00000008 ffffd001`6b981b30 00000000`00000000 : nt!KeBugCheckEx
ffffd001`6b9819f0 fffff803`433d6774 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd001`6b981b30 fffff801`ca1c2b84 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb4
00000000`00000000 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : dxgkrnl!DXGCONTEXT:😛resent+0xef4
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl!DXGCONTEXT:😛resent+ef4
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: dxgkrnl!DXGCONTEXT:😛resent+ef4
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dxgkrnl
IMAGE_NAME: dxgkrnl.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 55bebfed
BUCKET_ID_FUNC_OFFSET: ef4
FAILURE_BUCKET_ID: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent
BUCKET_ID: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent
PRIMARY_PROBLEM_CLASS: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x7f_8_dxgkrnl!dxgcontext:😛resent
FAILURE_ID_HASH: {d240b642-329c-acc2-db34-bd29e9de0f7b}
Followup: MachineOwner
---------
5: kd> .trap 0xffffd0016b981b30
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffc001ccf39a10 rbx=0000000000000000 rcx=ffffc001b15070d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801ca1c2b84 rsp=0000000000000000 rbp=ffffd00021034fb0
r8=ffffc001b15070d0 r9=0000000000000003 r10=7fffc001b15070d0
r11=7ffffffffffffffc r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
dxgkrnl!DXGCONTEXT:😛resent+0xef4:
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)] ds:fffff801`ca1a7098={nt!ExReleasePushLockExclusiveEx (fffff803`432c7130)}
Thanks
Whilst playing Witcher 3 I got a blue screen on Windows 10. Using the debugger I loaded the dump file and got the info below. Could anyone tell me what it means ?
Microsoft (R) Windows Debugger Version 10.0.10240.9 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred symsrv*symsrv.dll*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: symsrv*symsrv.dll*c:\Windows\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
No .natvis files found at C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\Visualizers.
Windows 10 Kernel Version 10240 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 10240.16431.amd64fre.th1.150810-2333
Machine Name:
Kernel base = 0xfffff803`43280000 PsLoadedModuleList = 0xfffff803`435a5030
Debug session time: Sun Aug 30 08:41:15.725 2015 (UTC + 2:00)
System Uptime: 1 days 2:08:12.425
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00007ff7`3b0c3018). Type ".hh dbgerr001" for details
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, ffffd0016b981b30, 0, fffff801ca1c2b84}
Probably caused by : dxgkrnl.sys ( dxgkrnl!DXGCONTEXT:😛resent+ef4 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffd0016b981b30
Arg3: 0000000000000000
Arg4: fffff801ca1c2b84
Debugging Details:
------------------
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: To be filled by O.E.M.
BIOS_DATE: 08/22/2012
BASEBOARD_PRODUCT: Z77X-UD5H
BASEBOARD_VERSION: x.x
BUGCHECK_P1: 8
BUGCHECK_P2: ffffd0016b981b30
BUGCHECK_P3: 0
BUGCHECK_P4: fffff801ca1c2b84
BUGCHECK_STR: 0x7f_8
TRAP_FRAME: ffffd0016b981b30 -- (.trap 0xffffd0016b981b30)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffc001ccf39a10 rbx=0000000000000000 rcx=ffffc001b15070d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801ca1c2b84 rsp=0000000000000000 rbp=ffffd00021034fb0
r8=ffffc001b15070d0 r9=0000000000000003 r10=7fffc001b15070d0
r11=7ffffffffffffffc r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
dxgkrnl!DXGCONTEXT:😛resent+0xef4:
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)] ds:fffff801`ca1a7098={nt!ExReleasePushLockExclusiveEx (fffff803`432c7130)}
Resetting default scope
CPU_COUNT: 8
CPU_MHZ: daf
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3a
CPU_STEPPING: 9
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: dwm.exe
CURRENT_IRQL: 0
ANALYSIS_VERSION: 10.0.10240.9 amd64fre
LAST_CONTROL_TRANSFER: from fffff803433d86a9 to fffff803433cdd00
STACK_TEXT:
ffffd001`6b9819e8 fffff803`433d86a9 : 00000000`0000007f 00000000`00000008 ffffd001`6b981b30 00000000`00000000 : nt!KeBugCheckEx
ffffd001`6b9819f0 fffff803`433d6774 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd001`6b981b30 fffff801`ca1c2b84 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb4
00000000`00000000 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : dxgkrnl!DXGCONTEXT:😛resent+0xef4
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl!DXGCONTEXT:😛resent+ef4
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: dxgkrnl!DXGCONTEXT:😛resent+ef4
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dxgkrnl
IMAGE_NAME: dxgkrnl.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 55bebfed
BUCKET_ID_FUNC_OFFSET: ef4
FAILURE_BUCKET_ID: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent
BUCKET_ID: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent
PRIMARY_PROBLEM_CLASS: 0x7f_8_dxgkrnl!DXGCONTEXT:😛resent
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x7f_8_dxgkrnl!dxgcontext:😛resent
FAILURE_ID_HASH: {d240b642-329c-acc2-db34-bd29e9de0f7b}
Followup: MachineOwner
---------
5: kd> .trap 0xffffd0016b981b30
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffc001ccf39a10 rbx=0000000000000000 rcx=ffffc001b15070d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff801ca1c2b84 rsp=0000000000000000 rbp=ffffd00021034fb0
r8=ffffc001b15070d0 r9=0000000000000003 r10=7fffc001b15070d0
r11=7ffffffffffffffc r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
dxgkrnl!DXGCONTEXT:😛resent+0xef4:
fffff801`ca1c2b84 ff150e45feff call qword ptr [dxgkrnl!_imp_ExReleasePushLockExclusiveEx (fffff801`ca1a7098)] ds:fffff801`ca1a7098={nt!ExReleasePushLockExclusiveEx (fffff803`432c7130)}
Thanks