DPC_WATCHDOG_VIOLATION (133)
The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL
or above.
Arguments:
Arg1: 0000000000000000, A single DPC or ISR exceeded its time allotment. The offending
component can usually be identified with a stack trace.
Arg2: 0000000000000501, The DPC time count (in ticks).
Arg3: 0000000000000500, The DPC time allotment (in ticks).
Arg4: fffff803678fa318, cast to nt!DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK, which contains
additional information regarding this single DPC timeout
Debugging Details:
------------------
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: TickPeriods ***
*** ***
*************************************************************************
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 3046
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-VQI4JUI
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.mSec
Value: 5785
Key : Analysis.Memory.CommitPeak.Mb
Value: 76
Key : Analysis.System
Value: CreateObject
ADDITIONAL_XML: 1
OS_BUILD_LAYERS: 1
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_CODE: 133
BUGCHECK_P1: 0
BUGCHECK_P2: 501
BUGCHECK_P3: 500
BUGCHECK_P4: fffff803678fa318
DPC_TIMEOUT_TYPE: SINGLE_DPC_TIMEOUT_EXCEEDED
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
ffffb800`5f6dde18 fffff803`670593ee : 00000000`00000133 00000000`00000000 00000000`00000501 00000000`00000500 : nt!KeBugCheckEx
ffffb800`5f6dde20 fffff803`66eca2ed : 0000069c`931d8d1e 00000000`00000000 ffffa48a`05429600 ffffb800`5f6c4180 : nt!KeAccumulateTicks+0x18bf6e
ffffb800`5f6dde80 fffff803`66eca16a : ffffa58f`27cc4480 ffffa48a`054296b0 00000000`0001cf34 00000000`00000000 : nt!KeClockInterruptNotify+0xbd
ffffb800`5f6ddf30 fffff803`66e08705 : ffffa58f`27cc4480 00000000`00000000 00000000`00000000 ffff26e8`c3c3d11c : nt!HalpTimerClockIpiRoutine+0x1a
ffffb800`5f6ddf60 fffff803`66fdf4ca : ffffa48a`054296b0 ffffa58f`27cc4480 0000068a`66add953 00000000`00000000 : nt!KiCallInterruptServiceRoutine+0xa5
ffffb800`5f6ddfb0 fffff803`66fdfa37 : 00000004`446eb820 fffff803`687796af ffffa48a`05429820 fffff803`66fdfa44 : nt!KiInterruptSubDispatchNoLockNoEtw+0xfa
ffffa48a`05429630 fffff803`66e33397 : 00000000`00000010 00000000`00000282 ffffa48a`054297e0 00000000`00000018 : nt!KiInterruptDispatchNoLockNoEtw+0x37
ffffa48a`054297c0 fffff803`675b9819 : 00000000`00000002 00000000`00000000 ffffb800`5f6c4180 00000000`00000001 : nt!KeYieldProcessorEx+0x17
ffffa48a`054297f0 fffff803`675b80f5 : 00000000`7cc6bd6a ffffb800`5f6c4180 ffffa58f`3202a980 00000000`00000000 : nt!IopLiveDumpProcessCorralStateChange+0x2d
ffffa48a`05429820 fffff803`66e3a69e : ffffb800`5f6c7240 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopLiveDumpCorralDpc+0x55
ffffa48a`05429860 fffff803`66e39984 : 00000000`00000000 00000000`00000000 00000000`00140001 00000000`00000000 : nt!KiExecuteAllDpcs+0x30e
ffffa48a`054299d0 fffff803`66fe158e : ffffffff`00000000 ffffb800`5f6c4180 ffffb800`5f6cf340 ffffa58f`33633040 : nt!KiRetireDpcList+0x1f4
ffffa48a`05429c60 00000000`00000000 : ffffa48a`0542a000 ffffa48a`05424000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x9e
SYMBOL_NAME: nt!KeAccumulateTicks+18bf6e
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.264
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 18bf6e
FAILURE_BUCKET_ID: 0x133_DPC_nt!KeAccumulateTicks
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {88dc98ce-f842-4daa-98d0-858621db6b0f}
Followup: MachineOwner
---------
1: kd> lmvm nt
Browse full module list
start end module name
fffff803`66c00000 fffff803`67c46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\81BC5C377C525081645F9958F209C5271\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\ProgramData\Dbg\sym\ntoskrnl.exe\BB5CDE6C1046000\ntoskrnl.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BB5CDE6C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00A74ED2
ImageSize: 01046000
File version: 10.0.19041.264
Product version: 10.0.19041.264
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.19041.264
FileVersion: 10.0.19041.264 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
www.malwarebytes.com
