Hello All,
I'm wondering if someone may help me interpret the report that Windbg has generated? This box doesn't crash very often, but it seems to if I really drive the CPU. If I'm making a dvd file from an avi which I often do with DVD flick it nearly always crashes. It seems to do so when I really push the processor and make it work at 100%. But then I guess it might also be utilizing the ram fully also at that point also. I'm very interested in IT and just wish I knew more. I've run the UBD4Win cpu test and that crashes it as soon as it starts.
I've just figured out how to make the WinDbg actually work and I'm struggling to make sense of the report. I think that the IRQ18 could be important and also there's the yellow exclamation mark at device manager at Video controller (VGA compatible). Could someone in the know please run their eye over this log and give me some clues as to what is doing? I'd appreciate that very much.
Thank You
Phillip
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini101510-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*[url]http://msdl.microsoft.com/download/symbols[/url]
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.100427-1636
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Fri Oct 15 01:31:52.671 2010 (UTC + 11:00)
System Uptime: 0 days 14:31:19.346
Loading Kernel Symbols
...............................................................
..............................................................
Loading User Symbols
Loading unloaded module list
..............................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 9C, {0, f7810050, b2000000, 1040080f}
Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonSetQuota+10b )
Followup: MachineOwner
---------
1: kd> !analyse -v
No export analyse found
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MACHINE_CHECK_EXCEPTION (9c)
A fatal Machine Check Exception has occurred.
KeBugCheckEx parameters;
x86 Processors
If the processor has ONLY MCE feature available (For example Intel
Pentium), the parameters are:
1 - Low 32 bits of P5_MC_TYPE MSR
2 - Address of MCA_EXCEPTION structure
3 - High 32 bits of P5_MC_ADDR MSR
4 - Low 32 bits of P5_MC_ADDR MSR
If the processor also has MCA feature available (For example Intel
Pentium Pro), the parameters are:
1 - Bank number
2 - Address of MCA_EXCEPTION structure
3 - High 32 bits of MCi_STATUS MSR for the MCA bank that had the error
4 - Low 32 bits of MCi_STATUS MSR for the MCA bank that had the error
IA64 Processors
1 - Bugcheck Type
1 - MCA_ASSERT
2 - MCA_GET_STATEINFO
SAL returned an error for SAL_GET_STATEINFO while processing MCA.
3 - MCA_CLEAR_STATEINFO
SAL returned an error for SAL_CLEAR_STATEINFO while processing MCA.
4 - MCA_FATAL
FW reported a fatal MCA.
5 - MCA_NONFATAL
SAL reported a recoverable MCA and we don't support currently
support recovery or SAL generated an MCA and then couldn't
produce an error record.
0xB - INIT_ASSERT
0xC - INIT_GET_STATEINFO
SAL returned an error for SAL_GET_STATEINFO while processing INIT event.
0xD - INIT_CLEAR_STATEINFO
SAL returned an error for SAL_CLEAR_STATEINFO while processing INIT event.
0xE - INIT_FATAL
Not used.
2 - Address of log
3 - Size of log
4 - Error code in the case of x_GET_STATEINFO or x_CLEAR_STATEINFO
AMD64 Processors
1 - Bank number
2 - Address of MCA_EXCEPTION structure
3 - High 32 bits of MCi_STATUS MSR for the MCA bank that had the error
4 - Low 32 bits of MCi_STATUS MSR for the MCA bank that had the error
Arguments:
Arg1: 00000000
Arg2: f7810050
Arg3: b2000000
Arg4: 1040080f
Debugging Details:
------------------
NOTE: This is a hardware error. This error was reported by the CPU
via Interrupt 18. This analysis will provide more information about
the specific error. Please contact the manufacturer for additional
information about this error and troubleshooting assistance.
This error is documented in the following publication:
- IA-32 Intel(r) Architecture Software Developer's Manual
Volume 3: System Programming Guide
Bit Mask:
MA Model Specific MCA
O ID Other Information Error Code Error Code
VV SDP ___________|____________ _______|_______ _______|______
AEUECRC| | | |
LRCNVVC| | | |
^^^^^^^| | | |
6 5 4 3 2 1
3210987654321098765432109876543210987654321098765432109876543210
----------------------------------------------------------------
1011001000000000000000000000000000010000010000000000100000001111
VAL - MCi_STATUS register is valid
Indicates that the information contained within the IA32_MCi_STATUS
register is valid. When this flag is set, the processor follows the
rules given for the OVER flag in the IA32_MCi_STATUS register when
overwriting previously valid entries. The processor sets the VAL
flag and software is responsible for clearing it.
UC - Error Uncorrected
Indicates that the processor did not or was not able to correct the
error condition. When clear, this flag indicates that the processor
was able to correct the error condition.
EN - Error Enabled
Indicates that the error was enabled by the associated EEj bit of the
IA32_MCi_CTL register.
PCC - Processor Context Corrupt
Indicates that the state of the processor might have been corrupted
by the error condition detected and that reliable restarting of the
processor may not be possible.
BUSCONNERR - Bus and Interconnect Error BUS{LL}_{PP}_{RRRR}_{II}_{T}_err
These errors match the format 0000 1PPT RRRR IILL
Concatenated Error Code:
--------------------------
_VAL_UC_EN_PCC_BUSCONNERR_F
This error code can be reported back to the manufacturer.
They may be able to provide additional information based upon
this error. All questions regarding STOP 0x9C should be
directed to the hardware manufacturer.
BUGCHECK_STR: 0x9C_GenuineIntel
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: pctsSvc.exe
LAST_CONTROL_TRANSFER: from 80704bfb to 805376ba
SYMBOL_ON_RAW_STACK: 1
STACK_ADDR_RAW_STACK_SYMBOL: fffffffff7810268
STACK_COMMAND: dds F7810268-0x20 ; kb
STACK_TEXT:
f7810248 0000ffff
f781024c 00009200
f7810250 97908887
f7810254 8003984d
f7810258 0000ffff
f781025c 00009200
f7810260 c000ffff
f7810264 f740935f Ntfs!NtfsCommonSetQuota+0x10b
f7810268 c000ffff
f781026c f740935f Ntfs!NtfsCommonSetQuota+0x10b
f7810270 c000ffff
f7810274 f740935f Ntfs!NtfsCommonSetQuota+0x10b
f7810278 8003f120
f781027c 00000000
f7810280 8003f128
f7810284 00000000
f7810288 8003f130
f781028c 00000000
f7810290 8003f138
f7810294 00000000
f7810298 8003f140
f781029c 00000000
f78102a0 8003f148
f78102a4 00000000
f78102a8 8003f150
f78102ac 00000000
f78102b0 8003f158
f78102b4 00000000
f78102b8 8003f160
f78102bc 00000000
f78102c0 8003f168
f78102c4 00000000
FOLLOWUP_IP:
Ntfs!NtfsCommonSetQuota+10b
f740935f 8b7d08 mov edi,dword ptr [ebp+8]
SYMBOL_NAME: Ntfs!NtfsCommonSetQuota+10b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 48025be5
FAILURE_BUCKET_ID: 0x9C_GenuineIntel_Ntfs!NtfsCommonSetQuota+10b
BUCKET_ID: 0x9C_GenuineIntel_Ntfs!NtfsCommonSetQuota+10b
Followup: MachineOwner
---------
1: kd> lmvm Ntfs
start end module name
f738e000 f741a600 Ntfs (pdb symbols) c:\symbols\ntfs.pdb\AA4F4A5C7B1D4663A7E0891479090D8A2\ntfs.pdb
Loaded symbol image file: Ntfs.sys
Mapped memory image file: c:\symbols\Ntfs.sys\48025BE58c600\Ntfs.sys
Image path: Ntfs.sys
Image name: Ntfs.sys
Timestamp: Mon Apr 14 05:15:49 2008 (48025BE5)
CheckSum: 0009586B
ImageSize: 0008C600
File version: 5.1.2600.5512
Product version: 5.1.2600.5512
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 5.1.2600.5512
FileVersion: 5.1.2600.5512 (xpsp.080413-2111)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
1: kd> lmvm Ntfs
start end module name
f738e000 f741a600 Ntfs (pdb symbols) c:\symbols\ntfs.pdb\AA4F4A5C7B1D4663A7E0891479090D8A2\ntfs.pdb
Loaded symbol image file: Ntfs.sys
Mapped memory image file: c:\symbols\Ntfs.sys\48025BE58c600\Ntfs.sys
Image path: Ntfs.sys
Image name: Ntfs.sys
Timestamp: Mon Apr 14 05:15:49 2008 (48025BE5)
CheckSum: 0009586B
ImageSize: 0008C600
File version: 5.1.2600.5512
Product version: 5.1.2600.5512
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 5.1.2600.5512
FileVersion: 5.1.2600.5512 (xpsp.080413-2111)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
