************* Preparing the environment for Debugger Extensions Gallery repositories ************** ExtensionRepository : Implicit UseExperimentalFeatureForNugetShare : true AllowNugetExeUpdate : true NonInteractiveNuget : true AllowNugetMSCredentialProviderInstall : true AllowParallelInitializationOfLocalRepositories : true EnableRedirectToChakraJsProvider : false -- Configuring repositories ----> Repository : LocalInstalled, Enabled: true ----> Repository : UserExtensions, Enabled: true >>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds ************* Waiting for Debugger Extensions Gallery to Initialize ************** >>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.047 seconds ----> Repository : UserExtensions, Enabled: true, Packages count: 0 ----> Repository : LocalInstalled, Enabled: true, Packages count: 42 Microsoft (R) Windows Debugger Version 10.0.27725.1000 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [T:\MEMORY.DMP] Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available. Primary dump contents written successfully ************* Path validation summary ************** Response Time (ms) Location Deferred srv*https://msdl.microsoft.com/download/symbols Symbol search path is: srv*https://msdl.microsoft.com/download/symbols Executable search path is: Windows 10 Kernel Version 22621 MP (20 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Edition build lab: 22621.1.amd64fre.ni_release.220506-1250 Kernel base = 0xfffff806`5bc00000 PsLoadedModuleList = 0xfffff806`5c8134f0 Debug session time: Thu Nov 28 08:40:15.783 2024 (UTC + 8:00) System Uptime: 0 days 16:01:06.851 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ ........................................................ Loading User Symbols PEB is paged out (Peb.Ldr = 00000023`7d162018). Type ".hh dbgerr001" for details Loading unloaded module list .................................................. For analysis of this file, run !analyze -v nt!KeBugCheckEx: fffff806`5c014fa0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffa481`28afb0f0=000000000000003d 6: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* INTERRUPT_EXCEPTION_NOT_HANDLED (3d) The exception handler for the kernel interrupt object interrupt management was not able to handle the generated exception. Arguments: Arg1: ffff8e81c6d8ea38, Exception Record (When Available) Arg2: ffffa48128afb900, Context Record (When Available) Arg3: 0000000000000000, Not used Arg4: 0000000000000000, Not used Debugging Details: ------------------ Page 10a4e8 not present in the dump file. Type ".hh dbgerr004" for details Page 10a42d not present in the dump file. Type ".hh dbgerr004" for details Page 10a4e8 not present in the dump file. Type ".hh dbgerr004" for details KEY_VALUES_STRING: 1 Key : AV.Fault Value: Read Key : Analysis.CPU.mSec Value: 1171 Key : Analysis.Elapsed.mSec Value: 1208 Key : Analysis.IO.Other.Mb Value: 10 Key : Analysis.IO.Read.Mb Value: 1 Key : Analysis.IO.Write.Mb Value: 30 Key : Analysis.Init.CPU.mSec Value: 437 Key : Analysis.Init.Elapsed.mSec Value: 30524 Key : Analysis.Memory.CommitPeak.Mb Value: 106 Key : Analysis.Version.DbgEng Value: 10.0.27725.1000 Key : Analysis.Version.Description Value: 10.2408.27.01 amd64fre Key : Analysis.Version.Ext Value: 1.2408.27.1 Key : Bugcheck.Code.KiBugCheckData Value: 0x3d Key : Bugcheck.Code.LegacyAPI Value: 0x3d Key : Bugcheck.Code.TargetModel Value: 0x3d Key : Dump.Attributes.AsUlong Value: 1800 Key : Dump.Attributes.DiagDataWrittenToHeader Value: 1 Key : Dump.Attributes.ErrorCode Value: 0 Key : Dump.Attributes.LastLine Value: Dump completed successfully. Key : Dump.Attributes.ProgressPercentage Value: 100 Key : Failure.Bucket Value: 0x3D_C0000005_nt!KiTransitionSchedulingGroupGeneration Key : Failure.Hash Value: {d401744a-f64a-a5be-5761-e6fa767b8d15} Key : Hypervisor.Enlightenments.ValueHex Value: 1417df84 Key : Hypervisor.Flags.AnyHypervisorPresent Value: 1 Key : Hypervisor.Flags.ApicEnlightened Value: 0 Key : Hypervisor.Flags.ApicVirtualizationAvailable Value: 1 Key : Hypervisor.Flags.AsyncMemoryHint Value: 0 Key : Hypervisor.Flags.CoreSchedulerRequested Value: 0 Key : Hypervisor.Flags.CpuManager Value: 1 Key : Hypervisor.Flags.DeprecateAutoEoi Value: 1 Key : Hypervisor.Flags.DynamicCpuDisabled Value: 1 Key : Hypervisor.Flags.Epf Value: 0 Key : Hypervisor.Flags.ExtendedProcessorMasks Value: 1 Key : Hypervisor.Flags.HardwareMbecAvailable Value: 1 Key : Hypervisor.Flags.MaxBankNumber Value: 0 Key : Hypervisor.Flags.MemoryZeroingControl Value: 0 Key : Hypervisor.Flags.NoExtendedRangeFlush Value: 0 Key : Hypervisor.Flags.NoNonArchCoreSharing Value: 1 Key : Hypervisor.Flags.Phase0InitDone Value: 1 Key : Hypervisor.Flags.PowerSchedulerQos Value: 0 Key : Hypervisor.Flags.RootScheduler Value: 0 Key : Hypervisor.Flags.SynicAvailable Value: 1 Key : Hypervisor.Flags.UseQpcBias Value: 0 Key : Hypervisor.Flags.Value Value: 21631230 Key : Hypervisor.Flags.ValueHex Value: 14a10fe Key : Hypervisor.Flags.VpAssistPage Value: 1 Key : Hypervisor.Flags.VsmAvailable Value: 1 Key : Hypervisor.RootFlags.AccessStats Value: 1 Key : Hypervisor.RootFlags.CrashdumpEnlightened Value: 1 Key : Hypervisor.RootFlags.CreateVirtualProcessor Value: 1 Key : Hypervisor.RootFlags.DisableHyperthreading Value: 0 Key : Hypervisor.RootFlags.HostTimelineSync Value: 1 Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled Value: 0 Key : Hypervisor.RootFlags.IsHyperV Value: 1 Key : Hypervisor.RootFlags.LivedumpEnlightened Value: 1 Key : Hypervisor.RootFlags.MapDeviceInterrupt Value: 1 Key : Hypervisor.RootFlags.MceEnlightened Value: 1 Key : Hypervisor.RootFlags.Nested Value: 0 Key : Hypervisor.RootFlags.StartLogicalProcessor Value: 1 Key : Hypervisor.RootFlags.Value Value: 1015 Key : Hypervisor.RootFlags.ValueHex Value: 3f7 Key : SecureKernel.HalpHvciEnabled Value: 1 Key : Stack.Pointer Value: PRCBException Key : WER.OS.Branch Value: ni_release Key : WER.OS.Version Value: 10.0.22621.1 BUGCHECK_CODE: 3d BUGCHECK_P1: ffff8e81c6d8ea38 BUGCHECK_P2: ffffa48128afb900 BUGCHECK_P3: 0 BUGCHECK_P4: 0 FILE_IN_CAB: MEMORY.DMP TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b DUMP_FILE_ATTRIBUTES: 0x1800 FAULTING_THREAD: ffffba8a2ed6b080 EXCEPTION_RECORD: ffff8e81c6d8ea38 -- (.exr 0xffff8e81c6d8ea38) ExceptionAddress: fffff8065be0b0ac (nt!KiTransitionSchedulingGroupGeneration+0x0000000000000148) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff EXCEPTION_PARAMETER1: 0000000000000000 EXCEPTION_PARAMETER2: ffffffffffffffff CONTEXT: ffffa48128afb900 -- (.cxr 0xffffa48128afb900) rax=00000000000027f7 rbx=df33df3363a0268d rcx=0000000000000001 rdx=0000000000000000 rsi=ffffa48128b91180 rdi=df33df3363a0268d rip=fffff8065be0b0ac rsp=ffff8e81c6d8ec70 rbp=ffffba8a2ed6b080 r8=ffffa48128b91180 r9=0000000000000000 r10=0000000000000000 r11=0000000000000000 r12=ffffba8a26521af0 r13=ffffa48128b99708 r14=df33df3363a026d5 r15=00000000000027f7 iopl=0 nv up ei pl nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202 nt!KiTransitionSchedulingGroupGeneration+0x148: fffff806`5be0b0ac f6477004 test byte ptr [rdi+70h],4 ds:002b:df33df33`63a026fd=?? Resetting default scope BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) BLACKBOXWINLOGON: 1 PROCESS_NAME: WeChat.exe READ_ADDRESS: unable to get nt!PspSessionIdBitmap ffffffffffffffff ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%p 0x%p %s EXCEPTION_CODE_STR: c0000005 EXCEPTION_STR: 0xc0000005 TRAP_FRAME: ffff8e81c6d8f810 -- (.trap 0xffff8e81c6d8f810) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000 rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000 rip=fffff8065bf6754f rsp=ffff9e16aeda7fcc rbp=ffffba8a2651f000 r8=0000000000000000 r9=0000000000000000 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up di pl nz na pe cy 0001:754f ?? ??? Resetting default scope STACK_TEXT: ffff8e81`c6d8ec70 fffff806`5be0bb23 : 00000000`000027f7 00000000`00000000 00000000`000027f7 00000000`00000000 : nt!KiTransitionSchedulingGroupGeneration+0x148 ffff8e81`c6d8ecf0 fffff806`5be0b814 : ffffa481`28b91180 00000000`00000000 ffffa481`28b91180 ffffa481`28b91180 : nt!KiGroupSchedulingGenerationEnd+0x97 ffff8e81`c6d8eef0 fffff806`5be15723 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiGroupSchedulingQuantumEnd+0xdc ffff8e81`c6d8f0d0 fffff806`5be160c1 : 00000000`00000000 fffff806`5bfbc0a0 ffff8e81`c6d8f678 00000000`00000000 : nt!KiQuantumEnd+0x5f3 ffff8e81`c6d8f340 fffff806`5c01df4b : 00000000`00000002 ffff8e81`c6d8f4c0 ffff8e81`00000000 00000000`534f5248 : nt!KiDispatchInterrupt+0x121 ffff8e81`c6d8f430 fffff806`5c017af1 : 00000000`00001388 00000000`00000000 00000086`44c8c6ec 00000000`00000000 : nt!KiDpcInterruptBypass+0x1b ffff8e81`c6d8f460 fffff806`5bfbc14a : ffffa481`28b91180 00000000`00000000 ffff8e81`c6d8f810 ffffba8a`2ed6b080 : nt!KiInterruptDispatchNoLockNoEtw+0xb1 ffff8e81`c6d8f5f0 fffff806`5be09e03 : ffffa481`28b91180 ffff8e81`c6d8f720 ffffba8a`2ed6b080 ffff8e81`c6d8f810 : nt!ExpUpdateTimerConfigurationWorker+0xaa ffff8e81`c6d8f620 fffff806`5bfbc5b2 : 00000023`7cfee4e0 00000000`00000000 ffff8e81`c6d8faa0 ffff8e81`c6d8f9b8 : nt!KeGenericProcessorCallback+0x12b ffff8e81`c6d8f7f0 fffff806`5bf6754f : 00000000`00000001 00000000`00000003 ffff9e16`aeda7fcc 00000000`00000000 : nt!ExpUpdateTimerConfiguration+0x9a ffff8e81`c6d8f980 fffff806`5c3f2474 : ffffba8a`2651f080 00000000`00001388 00000000`944d0c01 00000000`00000000 : nt!ExpUpdateTimerResolution+0x123 ffff8e81`c6d8f9b0 fffff806`5c02a605 : 00000000`00009c40 000001f5`a3a32f80 00000023`7cfee3f0 ffffba8a`00000000 : nt!NtSetTimerResolution+0xd4 ffff8e81`c6d8fa20 00007ff9`911939a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 00000023`7cfee3b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`911939a4 SYMBOL_NAME: nt!KiTransitionSchedulingGroupGeneration+148 MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe STACK_COMMAND: .cxr 0xffffa48128afb900 ; kb BUCKET_ID_FUNC_OFFSET: 148 FAILURE_BUCKET_ID: 0x3D_C0000005_nt!KiTransitionSchedulingGroupGeneration OS_VERSION: 10.0.22621.1 BUILDLAB_STR: ni_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {d401744a-f64a-a5be-5761-e6fa767b8d15} Followup: MachineOwner ---------