win32k.sys 0x3b BSOD
Hello. Have some problems with my OS or PC.
Symptoms: i want to run 34 copies of the same application, the application process can not be in the system more than once, so copies are run through a sandbox. Normally only 24 runs of the process when i run other processes begin to distort the desktop
(desktop items move down relative to each other), from the menus, icons and windows are black and white replacement, at the same time, desktop replacements of these shimmering colors. Running processes are closed, can't to open the console mmc (writes about
some error and not an opportunity to create a document (!?)), in task manager falls off resource monitor. Return all to the previous state can be turning all of the window (displaying the desktop), but it is up to the first deployment \ attempts to run the
application \ menu - then thus shit begins again. At particularly "successful" cases could catch BSOD win32k.sys 0x0000003B: SYSTEM_SERVICE_EXCEPTION.
My config:
OS: Win 7 HP x64
CPU: my - Intel(R) Core(TM) i3-2100 CPU @ 3.1GHz (temperature at idle: 42, under usage: 56 ), replacement - Intel(R) Core(TM) i5-2450P CPU @ 3.20GHz (temperature at idle: 38 , under usage: 49)
MB: my - TH67B, replacement - TH67+
RAM: 16 Gb DDR3 Patriot (9-9-9-24-1T, 4x4Gb)
PSU: my - noname 360 W, replacement - AeroCool VP-650 650 W
HDD: my- Seagate Sata-2 200 Gb, replacement - Western Digital 750 Gb
VGA: previously been integrated graphics HD 1000 core, replacement - AMD HD 5450
Standard turbobust as OC.
sfc / scannow did not find anything.
Memory was tested individually and en masse by programs Windows Memory Diagnostic Tools (Advanced Tests) and Memtest86 + for a pass.
Bug check:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff9600017ff92, 0xfffff88006c93230, 0x0000000000000000)
Dump: http://ifolder.ru/29182273
Mini dumps: http://ifolder.ru/29186497
msinfo32 config: http://ifolder.ru/29186499
March 9th, 2012 2:29pm
Take care of all drivers and make update
http://msdn.microsoft.com/en-us/library/ff558949%28VS.85%29.aspx
Regards
Milos
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 8:27am
Take care of all drivers and make update
http://msdn.microsoft.com/en-us/library/ff558949%28VS.85%29.aspx
Regards
Milos
Already did it, but this problem still exist.
March 10th, 2012 8:41am
Symptoms: i want to run 34 copies of the same application, the application process can not be in the system more than once, so copies are run through a sandbox. Normally only 24 runs of the process when i run other processes begin to
distort the desktop (desktop items move down relative to each other), from the menus, icons and windows are black and white replacement, at the same time, desktop replacements of these shimmering colors. Running processes are closed,
can't to open the console mmc (writes about some error and not an opportunity to create a document (!?)),
in task manager falls off resource monitor. Return all to the previous state can be turning all of the window (displaying the desktop), but it is up to the first deployment \ attempts
to run the application \ menu - then thus shit begins again. At particularly "successful" cases could catch BSOD win32k.sys 0x0000003B: SYSTEM_SERVICE_EXCEPTION.
Standard turbobust as OC.
Memory was tested individually and en masse by programs Windows Memory Diagnostic Tools (Advanced Tests) and
Memtest86 + for a pass.
Bug check:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff9600017ff92, 0xfffff88006c93230, 0x0000000000000000)
Ok, this is not so easy to understand.
You need to run 34x the same program, 33x in Sandboxes, yes?
When you run 24+, you begin to see graphical bugs, error messages, resource errors, yes?
If this is just graphical - not enough video RAM - reduce the Desktop to 16 or 24bpp. Or test with 1GB gfx card.
If this is any other Windows resource, 85%+ resources used = crash imminent. There are
many limits: http://blogs.technet.com/b/markrussinovich/archive/2008/07/21/3092070.aspx
Maybe running some in a VM will make a difference.
What is the software?
==========================================================================================
Debug session time: Thu Mar 8 12:55:43.627 2012 (UTC + 0:00)
System Uptime: 0 days 0:42:30.861
Loading Kernel Symbols
...............................................................
................................................................
..........
Loading User Symbols
PEB is paged out (Peb.Ldr = 000007ff`fffdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff9600020ff92, fffff88007dc0230, 0}
Page 3d2587 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : win32k.sys ( win32k!xxxTrackPopupMenuEx+9ba )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff9600020ff92, Address of the instruction which caused the bugcheck
Arg3: fffff88007dc0230, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!xxxTrackPopupMenuEx+9ba
fffff960`0020ff92 410fba670808 bt dword ptr [r15+8],8
CONTEXT: fffff88007dc0230 -- (.cxr 0xfffff88007dc0230)
rax=0000000000000000 rbx=0000000000000001 rcx=fffff900c01fd9f1
rdx=fffff900c682b9f1 rsi=0000000000000182 rdi=fffff900c845dc20
rip=fffff9600020ff92 rsp=fffff88007dc0c10 rbp=fffff900c07b3da0
r8=fffff900c682b9f0 r9=0000000000000080 r10=fffff90000000540
r11=fffff900c01fd9f0 r12=fffff900c2dd3c20 r13=fffff900c07b1c30
r14=fffff900c060e8c0 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
win32k!xxxTrackPopupMenuEx+0x9ba:
fffff960`0020ff92 410fba670808 bt dword ptr [r15+8],8 ds:002b:00000000`00000008=????????
Resetting default scope
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff960001bdbce to fffff9600020ff92
STACK_TEXT:
fffff880`07dc0c10 fffff960`001bdbce : 00000000`00000000 fffff900`c07b3da0 80010000`00000070 00000000`0000022c : win32k!xxxTrackPopupMenuEx+0x9ba
fffff880`07dc0d40 fffff800`0288fed3 : fffffa80`0ce8db60 00000000`0027d278 fffff880`07dc0e08 fffff960`00187c04 : win32k!NtUserTrackPopupMenuEx+0x126
fffff880`07dc0df0 00000000`7757716a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0027d258 fffff800`02888210 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7757716a
fffff880`07dc13b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCallUserMode
FOLLOWUP_IP:
win32k!xxxTrackPopupMenuEx+9ba
fffff960`0020ff92 410fba670808 bt dword ptr [r15+8],8
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxTrackPopupMenuEx+9ba
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4f10ff24
STACK_COMMAND: .cxr 0xfffff88007dc0230 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba
BUCKET_ID: X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba
Followup: MachineOwner
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 9:20am
Process Explorer and Process Monitor would help to catch the processes in trouble. Perhaps the application is not correctly designed and is prone to behaviour like this one.
Regards
Milos
March 10th, 2012 9:24am
You need to run 34x the same program, 33x in Sandboxes, yes? - Nope. All of 34x in Sandboxes.
When you run 24+, you begin to see graphical bugs, error messages, resource errors - it's look like this shit "Note the Start button on the bottom left where it belongs, but the rest of the task bar at the top of the screen. The desktop has turned black
and the sidebar has lost most of its color. Your mileage may vary, but you can see that bizarre things start to happen, potentially making it impossible to interact with the desktop in a reliable way. " http://blogs.technet.com/b/markrussinovich/archive/2010/03/31/3322423.aspx
and mmc crashed with resource monitor of task manager.
http://xmages.net/i/3410265
But applications didn't load GPU adapter.
What is the software? - it's game, running in text client mode and connecting to the server.
So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb.
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 10:11am
I guessed it was a game ^^ SRO or what?
Performance tab of TaskMan - keep it on top, watch the Handles, Threads, Processes and Commit (low on the right), make notes of how they increase, 5 running, 10 running, 15 running, etc. Report back with the progression numbers please.
Have you tried running 1 in a sandbox in VM VirtualBox?
GPU-Z will give you the memory usage for the gfx card.
The Russinovich articles will be useful, he wrote the tools Process Explorer and Process Monitor (in msg from Milos above), it must be a resource nearing the limit somewhere - which resource ... ?
March 10th, 2012 10:24am
Process Explorer and Process Monitor would help to catch the processes in trouble. Perhaps the application is not correctly designed and is prone to behaviour like this one.
Regards
Milos
How? What i must try ti find?
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 10:25am
So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb.
I just saw the edit: No, not memory (RAM) - memory is only one of many finite resources that could be responsible (back to Russinovich ^^), what about Commit (GB) in TaskMan (when 10GB RAM used, how big is Commit)?
March 10th, 2012 11:26am
So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb.
I just saw the edit: No, not memory (RAM) - memory is only one of many finite resources that could be responsible (back to Russinovich ^^), what about Commit (GB) in TaskMan (when 10GB RAM used, how big is Commit)?
Need some time for doing tests. I'm at work today.
Have you tried running 1 in a sandbox in VM VirtualBox? - Nope, i'm not tried. But i want to run 1x unsandboxed or run 20x in sandbox and others in VM.
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 6:18pm
Looks like the lack ofvideo memory.
http://xmages.net/i/3414774
March 12th, 2012 10:36pm
Looks like the lack ofvideo memory.
http://xmages.net/i/3414774
Yes, looks like it :(
A new1GB DDR3 card should enable you to run all of them cheaply, for playing, GDDR5 is a little faster (better for playing) but a little more expensive.
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2012 5:19am
I still can not figure out what caused the problem that I described. I replaced most of the hardware, and IT is still present.
With the graphics card AMD HD 6450 512 MB i can't to run 24 processes.
With built-in graphics core i3 2100 and 1 Gb video RAM i run all of the 34 process, but the mmc and resorse monitor ( and Real Temp) call the old problem.
March 13th, 2012 6:33am
Please be more descriptive - no gfx errors with 34 bots running now but errors in Windows logs, yes?
What problems are showing in Resource Monitor? And Real Temp?
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2012 6:37am
Sorry.
Gfx errors with running 34 bots still exist,
but now they don't cause BSOD.
To avoid gfx bugs should not run
other applications. But I'm not
sure of the stability.
Here is Windows Log errors:
Event ID 10010
The server {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C} did not register with DCOM within the required timeout.
Event ID 36
The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
Event ID 10010
Application 'C:\Windows\System32\mmc.exe' (pid 276) cannot be restarted - Application SID does not match Conductor SID..
Event 4107
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against
the current system clock or the timestamp in the signed file.
.
Event ID 10
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot
be delivered through this filter until the problem is corrected.
Event ID 512
InitializePrintProvider failed for provider inetpp.dll. This can occur because of system instability or a lack of system resources.
Event ID 1
The backing-file for the real-time session "NT Kernel Logger" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without
having any real-time consumers.
When i try to run these programs (real temp, resource monitor, process explorer, mmc) graphic distortion are begin.
I saw only MMC error: "MMC can not open the file: C:\Windows\system32\compmgmt.msc *bla-bla-bla*"
March 14th, 2012 7:44am
Running 34x bots is obviously creating more than enough stress on the system resources as it is; each time you run another program, it only adds to the drain, bringing it closer to crashing. You must either dedicate the machine to running bots and nothing
else or reduce the number of bots running.
Event 4107
Event 10
Event 36 = normal behaviour, 15% of disk space is allowed by default http://en.wikipedia.org/wiki/Shadow_Copy. http://www.blackviper.com/windows-services/microsoft-software-shadow-copy-provider/
Event ID 512
InitializePrintProvider failed for provider inetpp.dll. This can occur because of system instability or a lack of system resources.
Event ID 10010
The server {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C} = I think this is the Intel trigger for keyboard shortcuts? Try disabling it in MSConfig to test.
Event ID 1 yes, there will be a lot of logging, the machine is running close to its' limits.
You still haven't said which game and bot ...
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2012 8:32am
You still haven't said which game and bot ...
Team Fortress 2 : 1 server and 31 clients. :D Thanks a lot for your help. In the end of the week i get my 8 x 3 gb ram, psu, video card and i can doing some tests again.
March 14th, 2012 8:42am