Loading User Symbols
Loading unloaded module list
...........
For analysis of this file, run!analyze -vnt!KeBugCheckEx:
fffff801`42d622e0 48894c2408 mov qword ptr [rsp+8],rcx ss:fffff801`44e02d90=0000000000000133
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DPC_WATCHDOG_VIOLATION (133)
The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL
or above.
Arguments:
Arg1: 0000000000000000, A single DPC or ISR exceeded its time allotment. The offending
component can usually be identified with a stack trace.
Arg2: 0000000000000501, The DPC time count (in ticks).
Arg3: 0000000000000500, The DPC time allotment (in ticks).
Arg4: fffff80142fab540, cast to nt!DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK, which contains
additional information regarding this single DPC timeout
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for SISIPSNetFilter.sys
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: TickPeriods ***
*** ***
*************************************************************************
Debugger extension ext.analyze execution is cancelled.
PC: 00007ffa`03bb4b59 VA: 000000fb`0787ac30 R/W: 9 Parameter: 00000000`00000000
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\atlmfc.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\concurrency.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\cpp_rest.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\stl.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\Windows.Data.Json.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Geolocation.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Sensors.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\Windows.Media.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\windows.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\winrt.natvis'
NatVis script unloaded from 'C:\Users\Administrator\Downloads\WinDbg Preview1.1910.3003.0\Microsoft.WinDbg_1.1910.3003.0_neutral__8wekyb3d8bbwe\amd64\Visualizers\Kernel.natvis'
Microsoft (R) Windows Debugger Version 10.0.19494.1001 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Administrator\Desktop\031521-146937-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 14393 MP (8 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 14393.4104.amd64fre.rs1_release.201202-1742
Machine Name:
Kernel base = 0xfffff803`33285000 PsLoadedModuleList = 0xfffff803`335890a0
Debug session time: Mon Mar 15 12:19:38.659 2021 (UTC + 8:00)
System Uptime: 5 days 2:02:42.862
Loading Kernel Symbols
...............................................................
................................................................
..................................................
Loading User Symbols
Loading unloaded module list
.............
For analysis of this file, run!analyze -vnt!KeBugCheckEx:
fffff803`333e22e0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffbf01`af806d90=0000000000000133
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DPC_WATCHDOG_VIOLATION (133)
The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL
or above.
Arguments:
Arg1: 0000000000000000, A single DPC or ISR exceeded its time allotment. The offending
component can usually be identified with a stack trace.
Arg2: 0000000000000501, The DPC time count (in ticks).
Arg3: 0000000000000500, The DPC time allotment (in ticks).
Arg4: fffff8033362b540, cast to nt!DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK, which contains
additional information regarding this single DPC timeout
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for SISIPSNetFilter.sys
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: TickPeriods ***
*** ***
*************************************************************************
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 1
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on KCNDGD-703
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 198
Key : Analysis.Memory.CommitPeak.Mb
Value: 67
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: 133
BUGCHECK_P1: 0
BUGCHECK_P2: 501
BUGCHECK_P3: 500
BUGCHECK_P4: fffff8033362b540
DPC_TIMEOUT_TYPE: SINGLE_DPC_TIMEOUT_EXCEEDED
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
ffffbf01`af806d88 fffff803`332b8507 : 00000000`00000133 00000000`00000000 00000000`00000501 00000000`00000500 : nt!KeBugCheckEx
ffffbf01`af806d90 fffff803`332b5778 : 00053fc1`2c84e4ff 00000000`00000000 00000000`00000006 fffff780`00000320 : nt!KeAccumulateTicks+0x407
ffffbf01`af806df0 fffff803`3320c4e5 : ffff8586`b12c3a00 ffff8586`b12c3a00 ffffbf01`af9a7d30 ffffbf01`af9a7c80 : nt!KeClockInterruptNotify+0xb8
ffffbf01`af806f40 fffff803`333303f6 : ffff1014`a8c4c411 00000000`00000001 00000000`00000006 00000000`00000004 : hal!HalpTimerClockIpiRoutine+0x15
ffffbf01`af806f70 fffff803`333e3ada : ffffbf01`af10d5a0 00000000`00000000 00000000`00000004 ffff8586`b290c980 : nt!KiCallInterruptServiceRoutine+0x106
ffffbf01`af806fb0 fffff803`333e3fc7 : 00000000`00000000 fffff807`6a361564 00000000`00000001 00000001`00000020 : nt!KiInterruptSubDispatchNoLockNoEtw+0xea
ffffbf01`af10d520 fffff807`6a3639aa : fffff807`6a363940 ffff8586`c8a2b830 ffff8586`b2c24948 ffffbf01`af10d900 : nt!KiInterruptDispatchNoLockNoEtw+0x37
ffffbf01`af10d6b8 fffff807`6a363940 : ffff8586`c8a2b830 ffff8586`b2c24948 ffffbf01`af10d900 00000000`00000000 : SISIPSNetFilter+0x39aa
ffffbf01`af10d6c0 ffff8586`c8a2b830 : ffff8586`b2c24948 ffffbf01`af10d900 00000000`00000000 00000000`00000006 : SISIPSNetFilter+0x3940
ffffbf01`af10d6c8 ffff8586`b2c24948 : ffffbf01`af10d900 00000000`00000000 00000000`00000006 ffffbf01`af10d820 : 0xffff8586`c8a2b830
ffffbf01`af10d6d0 ffffbf01`af10d900 : 00000000`00000000 00000000`00000006 ffffbf01`af10d820 ffffbf01`af67a610 : 0xffff8586`b2c24948
ffffbf01`af10d6d8 00000000`00000000 : 00000000`00000006 ffffbf01`af10d820 ffffbf01`af67a610 ffff8586`b1d55cb8 : 0xffffbf01`af10d900
SYMBOL_NAME: SISIPSNetFilter+39aa
MODULE_NAME:SISIPSNetFilterIMAGE_NAME: SISIPSNetFilter.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 39aa
FAILURE_BUCKET_ID: 0x133_DPC_SISIPSNetFilter!unknown_function
OS_VERSION: 10.0.14393.4104
BUILDLAB_STR: rs1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {6c1ab56e-4b2b-7255-c20f-b0b77806115b}
Followup: MachineOwner
---------