none
win32k.sys 0x3b BSOD

    Question

  • Hello. Have some problems with my OS or PC.

    Symptoms: i want to run 34 copies of the same application, the application process can not be in the system more than once, so copies are run through a sandbox. Normally only 24 runs of the process when i run other processes begin to distort the desktop (desktop items move down relative to each other), from the menus, icons and windows are black and white replacement, at the same time, desktop replacements of these shimmering colors. Running processes are closed, can't to open the console mmc (writes about some error and not an opportunity to create a document (!?)), in task manager falls off resource monitor. Return all to the previous state can be turning all of the window (displaying the desktop), but it is up to the first deployment \ attempts to run the application \ menu - then thus shit begins again. At particularly "successful" cases could catch BSOD win32k.sys 0x0000003B: SYSTEM_SERVICE_EXCEPTION.

    My config:
    OS: Win 7 HP x64
    CPU: my - Intel(R) Core(TM) i3-2100 CPU @ 3.1GHz (temperature at idle: 42, under usage: 56 ), replacement - Intel(R) Core(TM) i5-2450P CPU @ 3.20GHz (temperature at idle: 38 , under usage: 49)
    MB: my - TH67B, replacement - TH67+
    RAM: 16 Gb DDR3 Patriot (9-9-9-24-1T, 4x4Gb)
    PSU: my - noname 360 W, replacement - AeroCool VP-650 650 W
    HDD: my- Seagate Sata-2 200 Gb, replacement - Western Digital 750 Gb
    VGA: previously been integrated graphics HD 1000 core, replacement - AMD HD 5450
    Standard turbobust as OC.

    sfc / scannow did not find anything.

    Memory was tested individually and en masse by programs Windows Memory Diagnostic Tools (Advanced Tests) and Memtest86 + for a pass.

    Bug check:

    The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff9600017ff92, 0xfffff88006c93230, 0x0000000000000000)

    Dump: http://ifolder.ru/29182273

    Mini dumps: http://ifolder.ru/29186497

    msinfo32 config: http://ifolder.ru/29186499



    • Edited by Hollou Friday, March 09, 2012 12:30 PM
    Friday, March 09, 2012 11:29 AM

All replies

  • Take care of all drivers and make update

    http://msdn.microsoft.com/en-us/library/ff558949%28VS.85%29.aspx 

    Regards

    Milos

    Friday, March 09, 2012 1:36 PM
  • Take care of all drivers and make update

    http://msdn.microsoft.com/en-us/library/ff558949%28VS.85%29.aspx 

    Regards

    Milos

    Already did it, but this problem still exist.
    Friday, March 09, 2012 1:51 PM
  • Symptoms: i want to run 34 copies of the same application, the application process can not be in the system more than once, so copies are run through a sandbox. Normally only 24 runs of the process when i run other processes begin to distort the desktop (desktop items move down relative to each other), from the menus, icons and windows are black and white replacement, at the same time, desktop replacements of these shimmering colors. Running processes are closed, can't to open the console mmc (writes about some error and not an opportunity to create a document (!?)), in task manager falls off resource monitor. Return all to the previous state can be turning all of the window (displaying the desktop), but it is up to the first deployment \ attempts to run the application \ menu - then thus shit begins again. At particularly "successful" cases could catch BSOD win32k.sys 0x0000003B: SYSTEM_SERVICE_EXCEPTION.


    Standard turbobust as OC.

    Memory was tested individually and en masse by programs Windows Memory Diagnostic Tools (Advanced Tests) and Memtest86 + for a pass.

    Bug check:

    The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff9600017ff92, 0xfffff88006c93230, 0x0000000000000000)


    Ok, this is not so easy to understand.

    You need to run 34x the same program, 33x in Sandboxes, yes?

    When you run 24+, you begin to see graphical bugs, error messages, resource errors, yes?

    If this is just graphical - not enough video RAM - reduce the Desktop to 16 or 24bpp. Or test with 1GB gfx card.

    If this is any other Windows resource, 85%+ resources used = crash imminent. There are many limits: http://blogs.technet.com/b/markrussinovich/archive/2008/07/21/3092070.aspx

    Maybe running some in a VM will make a difference.

    What is the software?

    ==========================================================================================

    Debug session time: Thu Mar  8 12:55:43.627 2012 (UTC + 0:00)
    System Uptime: 0 days 0:42:30.861
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ..........
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 000007ff`fffdf018).  Type ".hh dbgerr001" for details
    Loading unloaded module list
    .....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 3B, {c0000005, fffff9600020ff92, fffff88007dc0230, 0}
    
    Page 3d2587 not present in the dump file. Type ".hh dbgerr004" for details
    Probably caused by : win32k.sys ( win32k!xxxTrackPopupMenuEx+9ba )
    
    Followup: MachineOwner
    ---------
    
    2: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff9600020ff92, Address of the instruction which caused the bugcheck
    Arg3: fffff88007dc0230, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    
    FAULTING_IP: 
    win32k!xxxTrackPopupMenuEx+9ba
    fffff960`0020ff92 410fba670808    bt      dword ptr [r15+8],8
    
    CONTEXT:  fffff88007dc0230 -- (.cxr 0xfffff88007dc0230)
    rax=0000000000000000 rbx=0000000000000001 rcx=fffff900c01fd9f1
    rdx=fffff900c682b9f1 rsi=0000000000000182 rdi=fffff900c845dc20
    rip=fffff9600020ff92 rsp=fffff88007dc0c10 rbp=fffff900c07b3da0
     r8=fffff900c682b9f0  r9=0000000000000080 r10=fffff90000000540
    r11=fffff900c01fd9f0 r12=fffff900c2dd3c20 r13=fffff900c07b1c30
    r14=fffff900c060e8c0 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    win32k!xxxTrackPopupMenuEx+0x9ba:
    fffff960`0020ff92 410fba670808    bt      dword ptr [r15+8],8 ds:002b:00000000`00000008=????????
    Resetting default scope
    
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    PROCESS_NAME:  explorer.exe
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from fffff960001bdbce to fffff9600020ff92
    
    STACK_TEXT:  
    fffff880`07dc0c10 fffff960`001bdbce : 00000000`00000000 fffff900`c07b3da0 80010000`00000070 00000000`0000022c : win32k!xxxTrackPopupMenuEx+0x9ba
    fffff880`07dc0d40 fffff800`0288fed3 : fffffa80`0ce8db60 00000000`0027d278 fffff880`07dc0e08 fffff960`00187c04 : win32k!NtUserTrackPopupMenuEx+0x126
    fffff880`07dc0df0 00000000`7757716a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`0027d258 fffff800`02888210 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7757716a
    fffff880`07dc13b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCallUserMode
    
    
    FOLLOWUP_IP: 
    win32k!xxxTrackPopupMenuEx+9ba
    fffff960`0020ff92 410fba670808    bt      dword ptr [r15+8],8
    
    SYMBOL_STACK_INDEX:  0
    
    SYMBOL_NAME:  win32k!xxxTrackPopupMenuEx+9ba
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: win32k
    
    IMAGE_NAME:  win32k.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4f10ff24
    
    STACK_COMMAND:  .cxr 0xfffff88007dc0230 ; kb
    
    FAILURE_BUCKET_ID:  X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba
    
    BUCKET_ID:  X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba
    
    Followup: MachineOwner
    

    Friday, March 09, 2012 2:29 PM
  • Process Explorer and Process Monitor would help to catch the processes in trouble. Perhaps the application is not correctly designed and is prone to behaviour like this one.

    Regards

    Milos

    Friday, March 09, 2012 2:34 PM
  • You need to run 34x the same program, 33x in Sandboxes, yes? - Nope. All of 34x in Sandboxes.

    When you run 24+, you begin to see graphical bugs, error messages, resource errors - it's look like this shit "Note the Start button on the bottom left where it belongs, but the rest of the task bar at the top of the screen. The desktop has turned black and the sidebar has lost most of its color. Your mileage may vary, but you can see that bizarre things start to happen, potentially making it impossible to interact with the desktop in a reliable way. " http://blogs.technet.com/b/markrussinovich/archive/2010/03/31/3322423.aspx and mmc crashed with resource monitor of task manager.

    http://xmages.net/i/3410265

    But applications didn't load GPU adapter.

    What is the software? - it's game, running in text client mode and connecting to the server.

    So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb.



    • Edited by Hollou Friday, March 09, 2012 3:25 PM
    Friday, March 09, 2012 3:21 PM
  • I guessed it was a game ^^ SRO or what?

    Performance tab of TaskMan - keep it on top, watch the Handles, Threads, Processes and Commit (low on the right), make notes of how they increase, 5 running, 10 running, 15 running, etc. Report back with the progression numbers please.

    Have you tried running 1 in a sandbox in VM VirtualBox?

    GPU-Z will give you the memory usage for the gfx card.

    The Russinovich articles will be useful, he wrote the tools Process Explorer and Process Monitor (in msg from Milos above), it must be a resource nearing the limit somewhere - which resource ... ?

    Friday, March 09, 2012 3:34 PM
  • Process Explorer and Process Monitor would help to catch the processes in trouble. Perhaps the application is not correctly designed and is prone to behaviour like this one.

    Regards

    Milos

    How? What i must try ti find?
    Friday, March 09, 2012 3:34 PM
  • So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb.

    I just saw the edit: No, not memory (RAM) - memory is only one of many finite resources that could be responsible (back to Russinovich ^^), what about Commit (GB) in TaskMan (when 10GB RAM used, how big is Commit)?
    Friday, March 09, 2012 4:35 PM
  • So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb.

    I just saw the edit: No, not memory (RAM) - memory is only one of many finite resources that could be responsible (back to Russinovich ^^), what about Commit (GB) in TaskMan (when 10GB RAM used, how big is Commit)?

    Need some time for doing tests. I'm at work today.

    Have you tried running 1 in a sandbox in VM VirtualBox? - Nope, i'm not tried. But i want to run 1x unsandboxed or run 20x in sandbox and others in VM.

    • Edited by Hollou Saturday, March 10, 2012 12:04 AM
    Friday, March 09, 2012 11:27 PM
  • Looks like the lack ofvideo memory.

    http://xmages.net/i/3414774



    • Edited by Hollou Monday, March 12, 2012 2:59 AM
    Monday, March 12, 2012 2:51 AM
  • Looks like the lack ofvideo memory.

    http://xmages.net/i/3414774



    Yes, looks like it :(

    A new1GB DDR3 card should enable you to run all of them cheaply, for playing, GDDR5 is a little faster (better for playing) but a little more expensive.

    Monday, March 12, 2012 9:33 AM
  • I still can not figure out what caused the problem that I described. I replaced most of the hardware, and IT is still present.
    With the graphics card AMD HD 6450 512 MB i can't to run 24 processes.
    With built-in graphics core i3 2100 and 1 Gb video RAM i run all of the 34 process, but the mmc and resorse monitor ( and Real Temp) call the old problem.
    Monday, March 12, 2012 10:47 AM
  • Please be more descriptive - no gfx errors with 34 bots running now but errors in Windows logs, yes?

    What problems are showing in Resource Monitor? And Real Temp?

    Monday, March 12, 2012 10:52 AM
  • Sorry.

    Gfx errors with running 34 bots still exist, but now they don't cause BSOD. To avoid gfx bugs should not run other applications. But I'm not sure of the stability.

    Here is Windows Log errors:

    Event ID 10010
    The server {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C} did not register with DCOM within the required timeout.

    Event ID 36
    The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

    Event ID 10010
    Application 'C:\Windows\System32\mmc.exe' (pid 276) cannot be restarted - Application SID does not match Conductor SID..

    Event 4107
    Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
    .

    Event ID 10
    Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

    Event ID 512
    InitializePrintProvider failed for provider inetpp.dll. This can occur because of system instability or a lack of system resources.

    Event ID 1
    The backing-file for the real-time session "NT Kernel Logger" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers.

    When i try to run these programs (real temp, resource monitor, process explorer, mmc) graphic distortion are begin.

    I saw only MMC error: "MMC can not open the file: C:\Windows\system32\compmgmt.msc *bla-bla-bla*"

    Monday, March 12, 2012 12:00 PM
  • Running 34x bots is obviously creating more than enough stress on the system resources as it is; each time you run another program, it only adds to the drain, bringing it closer to crashing. You must either dedicate the machine to running bots and nothing else or reduce the number of bots running.

    Event 4107

    Event 10

    Event 36 = normal behaviour, 15% of disk space is allowed by default http://en.wikipedia.org/wiki/Shadow_Copy. http://www.blackviper.com/windows-services/microsoft-software-shadow-copy-provider/

    Event ID 512
    InitializePrintProvider failed for provider inetpp.dll. This can occur because of system instability or a lack of system resources.

    Event ID 10010
    The server {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C} = I think this is the Intel trigger for keyboard shortcuts? Try disabling it in MSConfig to test.

    Event ID 1 yes, there will be a lot of logging, the machine is running close to its' limits.

    You still haven't said which game and bot ...

    Monday, March 12, 2012 12:48 PM
  • You still haven't said which game and bot ...

    Team Fortress 2 : 1 server and 31 clients. :D Thanks a lot for your help. In the end of the week i get my 8 x 3 gb ram, psu, video card and i can doing some tests again.
    Monday, March 12, 2012 12:58 PM