Microsoft (R) Windows Debugger Version 10.0.15063.468 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Kristers\Desktop\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
Symbol search path is: srv*
Executable search path is:
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
Windows 10 Kernel Version 16299 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 16299.15.amd64fre.rs3_release.170928-1534
Machine Name:
Kernel base = 0xfffff802`aa81b000 PsLoadedModuleList = 0xfffff802`aab7cfb0
Debug session time: Sun Nov 19 16:03:24.660 2017 (UTC + 2:00)
System Uptime: 0 days 15:16:41.406
Loading Kernel Symbols
...............................................................
................................................................
.................................................
Loading User Symbols
Executable search path is:
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
Windows 10 Kernel Version 16299 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 16299.15.amd64fre.rs3_release.170928-1534
Machine Name:
Kernel base = 0xfffff802`aa81b000 PsLoadedModuleList = 0xfffff802`aab7cfb0
Debug session time: Sun Nov 19 16:03:24.660 2017 (UTC + 2:00)
System Uptime: 0 days 15:16:41.406
Loading Kernel Symbols
...............................................................
................................................................
.................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 133, {1, 1e00, fffff802aac13370, 0}
*** ERROR: Module load completed but symbols could not be loaded for FACEIT.sys
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: TickPeriods ***
*** ***
*************************************************************************
Probably caused by : FACEIT.sys ( FACEIT+32e2 )
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: TickPeriods ***
*** ***
*************************************************************************
Probably caused by : FACEIT.sys ( FACEIT+32e2 )
Followup: MachineOwner
---------
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DPC_WATCHDOG_VIOLATION (133)
The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL
or above.
Arguments:
Arg1: 0000000000000001, The system cumulatively spent an extended period of time at
DISPATCH_LEVEL or above. The offending component can usually be
identified with a stack trace.
Arg2: 0000000000001e00, The watchdog period.
Arg3: fffff802aac13370, cast to nt!DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK, which contains
additional information regarding the cumulative timeout
Arg4: 0000000000000000
The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL
or above.
Arguments:
Arg1: 0000000000000001, The system cumulatively spent an extended period of time at
DISPATCH_LEVEL or above. The offending component can usually be
identified with a stack trace.
Arg2: 0000000000001e00, The watchdog period.
Arg3: fffff802aac13370, cast to nt!DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK, which contains
additional information regarding the cumulative timeout
Arg4: 0000000000000000
Debugging Details:
------------------
------------------
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: TickPeriods ***
*** ***
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: TickPeriods ***
*** ***
*************************************************************************
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING: 16299.15.amd64fre.rs3_release.170928-1534
SYSTEM_MANUFACTURER: MSI
SYSTEM_PRODUCT_NAME: MS-7817
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: V1.9
BIOS_DATE: 03/30/2015
BASEBOARD_MANUFACTURER: MSI
BASEBOARD_PRODUCT: H81M-P33 (MS-7817)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 1
BUGCHECK_P1: 1
BUGCHECK_P2: 1e00
BUGCHECK_P3: fffff802aac13370
BUGCHECK_P4: 0
DPC_TIMEOUT_TYPE: DPC_QUEUE_EXECUTION_TIMEOUT_EXCEEDED
CPU_COUNT: 2
CPU_MHZ: c80
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3c
CPU_STEPPING: 3
CPU_MICROCODE: 6,3c,3,0 (F,M,S,R) SIG: 1E'00000000 (cache) 1E'00000000 (init)
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x133
PROCESS_NAME: System
CURRENT_IRQL: d
ANALYSIS_SESSION_HOST: DESKTOP-VQHK0BV
ANALYSIS_SESSION_TIME: 11-19-2017 18:05:17.0334
ANALYSIS_VERSION: 10.0.15063.468 amd64fre
LAST_CONTROL_TRANSFER: from fffff802aa9ac68b to fffff802aa97f0e0
STACK_TEXT:
fffff802`aa3d9bc8 fffff802`aa9ac68b : 00000000`00000133 00000000`00000001 00000000`00001e00 fffff802`aac13370 : nt!KeBugCheckEx
fffff802`aa3d9bd0 fffff802`aa86ab98 : 00003a0f`4caba8c8 fffff802`aa35b180 00000000`0035b65a 00000000`00000000 : nt!KeAccumulateTicks+0x14028b
fffff802`aa3d9c30 fffff802`ab0f04c6 : 00003a0f`4cab9c88 00000000`00000000 ffffea0f`4b780b40 00000000`00000001 : nt!KeClockInterruptNotify+0x5f8
fffff802`aa3d9f40 fffff802`aa8b9da5 : fffff802`ab143550 00000000`0000000c ffff7e2f`eafb62b2 00000000`00000000 : hal!HalpTimerClockInterrupt+0x56
fffff802`aa3d9f70 fffff802`aa9807fa : ffffea0f`4b780bc0 fffff802`ab143550 00000000`00000246 ffffb70c`0944e040 : nt!KiCallInterruptServiceRoutine+0xa5
fffff802`aa3d9fb0 fffff802`aa980c47 : 00000000`756e6547 fffffc2f`034dd940 ffffb70c`0ad0b080 fffff802`aa8bd73c : nt!KiInterruptSubDispatchNoLockNoEtw+0xea
ffffea0f`4b780b40 fffff802`2ea832e2 : 00007ffe`0000000f ffffb70c`0a697040 00000000`0000000f fffff802`00000008 : nt!KiInterruptDispatchNoLockNoEtw+0x37
ffffea0f`4b780cd0 fffff802`aa843f87 : ffffb70c`0ad0b080 00000000`00000b28 00000000`00000000 ffffb70c`0d582ff0 : FACEIT+0x32e2
ffffea0f`4b780d10 fffff802`aa984676 : fffff802`aa35b180 ffffb70c`0a697040 fffff802`aa843f40 00000000`00000001 : nt!PspSystemThreadStartup+0x47
ffffea0f`4b780d60 00000000`00000000 : ffffea0f`4b781000 ffffea0f`4b77b000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
fffff802`aa3d9bc8 fffff802`aa9ac68b : 00000000`00000133 00000000`00000001 00000000`00001e00 fffff802`aac13370 : nt!KeBugCheckEx
fffff802`aa3d9bd0 fffff802`aa86ab98 : 00003a0f`4caba8c8 fffff802`aa35b180 00000000`0035b65a 00000000`00000000 : nt!KeAccumulateTicks+0x14028b
fffff802`aa3d9c30 fffff802`ab0f04c6 : 00003a0f`4cab9c88 00000000`00000000 ffffea0f`4b780b40 00000000`00000001 : nt!KeClockInterruptNotify+0x5f8
fffff802`aa3d9f40 fffff802`aa8b9da5 : fffff802`ab143550 00000000`0000000c ffff7e2f`eafb62b2 00000000`00000000 : hal!HalpTimerClockInterrupt+0x56
fffff802`aa3d9f70 fffff802`aa9807fa : ffffea0f`4b780bc0 fffff802`ab143550 00000000`00000246 ffffb70c`0944e040 : nt!KiCallInterruptServiceRoutine+0xa5
fffff802`aa3d9fb0 fffff802`aa980c47 : 00000000`756e6547 fffffc2f`034dd940 ffffb70c`0ad0b080 fffff802`aa8bd73c : nt!KiInterruptSubDispatchNoLockNoEtw+0xea
ffffea0f`4b780b40 fffff802`2ea832e2 : 00007ffe`0000000f ffffb70c`0a697040 00000000`0000000f fffff802`00000008 : nt!KiInterruptDispatchNoLockNoEtw+0x37
ffffea0f`4b780cd0 fffff802`aa843f87 : ffffb70c`0ad0b080 00000000`00000b28 00000000`00000000 ffffb70c`0d582ff0 : FACEIT+0x32e2
ffffea0f`4b780d10 fffff802`aa984676 : fffff802`aa35b180 ffffb70c`0a697040 fffff802`aa843f40 00000000`00000001 : nt!PspSystemThreadStartup+0x47
ffffea0f`4b780d60 00000000`00000000 : ffffea0f`4b781000 ffffea0f`4b77b000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
STACK_COMMAND: kb
THREAD_SHA1_HASH_MOD_FUNC: da194b26e8939b444b61aae979724b6cb2eb58df
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: b13271cff0d85e461cf349b80ed6eb18fe95e25c
THREAD_SHA1_HASH_MOD: d66b7c03c998cd0ecdcdc19cb8dc75dc2ab6fc95
FOLLOWUP_IP:
FACEIT+32e2
fffff802`2ea832e2 89442420 mov dword ptr [rsp+20h],eax
FACEIT+32e2
fffff802`2ea832e2 89442420 mov dword ptr [rsp+20h],eax
FAULT_INSTR_CODE: 20244489
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: FACEIT+32e2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: FACEIT
IMAGE_NAME: FACEIT.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 59f89d29
BUCKET_ID_FUNC_OFFSET: 32e2
FAILURE_BUCKET_ID: 0x133_ISR_FACEIT!unknown_function
BUCKET_ID: 0x133_ISR_FACEIT!unknown_function
PRIMARY_PROBLEM_CLASS: 0x133_ISR_FACEIT!unknown_function
TARGET_TIME: 2017-11-19T14:03:24.000Z
OSBUILD: 16299
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2017-10-25 06:06:03
BUILDDATESTAMP_STR: 170928-1534
BUILDLAB_STR: rs3_release
BUILDOSVER_STR: 10.0.16299.15.amd64fre.rs3_release.170928-1534
ANALYSIS_SESSION_ELAPSED_TIME: 7ff
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x133_isr_faceit!unknown_function
FAILURE_ID_HASH: {3e906b15-4fd8-d17d-95d4-47601c30eb6e}
Followup: MachineOwner
---------
---------