none
windows Sever2012R2 standard 蓝屏关机重启:0x0000003b RRS feed

  • 问题


  • 服务器偶发重启,minidump已收集,麻烦帮忙分析一下原因:

    链接:https://pan.baidu.com/s/1TFHK98ypzlSDkizgoPUVWQ 
    提取码:suq0

    2020年6月21日 5:33

全部回复

  • 您好,

    很抱歉,目前论坛的case不支持Dump分析,不过根据您的Bugcheck我们可以为您提供如下排错建议:

    ========================

    1. 检查Windows update的更新并打上最新的安全补丁https://support.microsoft.com/zh-cn/help/4009470/windows-8-1-windows-server-2012-r2-update-history
    2. Bug check 0x3B system_service_exception 通常您可以尝试通过如下链接进行排错:https://support.microsoft.com/zh-cn/help/14238/windows-10-troubleshoot-blue-screen-errors
    • 已编辑 Sugic 2020年6月22日 5:23
    2020年6月22日 3:33
  • ************* Path validation summary **************
    Response                         Time (ms)     Location
    OK                                             C:\temp
    Deferred                                       SRV*F:\Debug_Symbol\Symbols32* http://msdl.microsoft.com/download/symbols

    ************* Path validation summary **************

    ************* Path validation summary **************
    Response                         Time (ms)     Location
    Response                         Time (ms)     Location
    OK                                            OK                                              C:\tempC:\temp

    Deferred                                      Deferred                                        SRV*F:\Debug_Symbol\Symbols32* http://msdl.microsoft.com/download/symbolsSRV*F:\Debug_Symbol\Symbols32* http://msdl.microsoft.com/download/symbols


    Loading Dump File [C:\Users\G20004\Desktop\bluescreenview_schinese2\062120-49718-01.dmp]

    Loading Dump File [C:\Users\G20004\Desktop\bluescreenview_schinese2\062120-49718-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Mini Kernel Dump File: Only registers and stack trace are available


    ************* Path validation summary **************

    ************* Path validation summary **************
    Response                         Time (ms)     Location
    Response                         Time (ms)     Location
    OK                                            OK                                              C:\tempC:\temp

    Deferred                                      Deferred                                        SRV*F:\Debug_Symbol\Symbols32* http://msdl.microsoft.com/download/symbolsSRV*F:\Debug_Symbol\Symbols32* http://msdl.microsoft.com/download/symbols

    Symbol search path is: Symbol search path is: C:\temp;SRV*F:\Debug_Symbol\Symbols32* http://msdl.microsoft.com/download/symbols
    C:\temp;SRV*F:\Debug_Symbol\Symbols32* http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Executable search path is: 
    Unable to load image Unable to load image \SystemRoot\system32\ntoskrnl.exe\SystemRoot\system32\ntoskrnl.exe, , Win32 error 0n2Win32 error 0n2

    *** WARNING: Unable to verify timestamp for *** WARNING: Unable to verify timestamp for ntoskrnl.exentoskrnl.exe


    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff80148033b7f, Address of the instruction which caused the bugcheck
    Arg3: ffffd00022726750, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.

    Debugging Details:
    ------------------

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff80148033b7f, Address of the instruction which caused the bugcheck
    Arg3: ffffd00022726750, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.

    Debugging Details:
    ------------------

    *** WARNING: Unable to verify timestamp for dxgkrnl.sys
    *** WARNING: Unable to verify timestamp for dxgkrnl.sys
    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************

    *************************************************************************

    KEY_VALUES_STRING: 1

        Key  : Analysis.CPU.Sec
        Value: 0

        Key  : Analysis.DebugAnalysisProvider.CPP
        Value: Create: 8007007e on DCM190827B

        Key  : Analysis.DebugData
        Value: CreateObject

        Key  : Analysis.DebugModel
        Value: CreateObject

        Key  : Analysis.Elapsed.Sec
        Value: 28

        Key  : Analysis.Memory.CommitPeak.Mb
        Value: 62

        Key  : Analysis.System
        Value: CreateObject


    KEY_VALUES_STRING: 1

        Key  : Analysis.CPU.Sec
        Value: 0

        Key  : Analysis.DebugAnalysisProvider.CPP
        Value: Create: 8007007e on DCM190827B

        Key  : Analysis.DebugData
        Value: CreateObject

        Key  : Analysis.DebugModel
        Value: CreateObject

        Key  : Analysis.Elapsed.Sec
        Value: 28

        Key  : Analysis.Memory.CommitPeak.Mb
        Value: 62

        Key  : Analysis.System
        Value: CreateObject


    ADDITIONAL_DEBUG_TEXT:  
    You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

    ADDITIONAL_DEBUG_TEXT:  
    You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

    WRONG_SYMBOLS_TIMESTAMP: 5318053f

    WRONG_SYMBOLS_TIMESTAMP: 5318053f

    WRONG_SYMBOLS_SIZE: 789000

    WRONG_SYMBOLS_SIZE: 789000

    FAULTING_MODULE: 
    FAULTING_MODULE: fffff8004a813000 nt
    fffff8004a813000 nt

    BUGCHECK_CODE:  3b

    BUGCHECK_P1: c0000005

    BUGCHECK_P2: fffff80148033b7f

    BUGCHECK_P3: ffffd00022726750

    BUGCHECK_P4: 0

    BUGCHECK_CODE:  3b

    BUGCHECK_P1: c0000005

    BUGCHECK_P2: fffff80148033b7f

    BUGCHECK_P3: ffffd00022726750

    BUGCHECK_P4: 0

    CONTEXT: 
    CONTEXT:  ffffd00022726750 -- (.cxr 0xffffd00022726750)
     ffffd00022726750 -- (.cxr 0xffffd00022726750)
    rax=0000000000000000 rbx=ffffd000227271d0 rcx=ffffe000adebd440
    rdx=0000000003d749a4 rsi=ffffc0012cdaf2c0 rdi=0000000000000000
    rip=fffff80148033b7f rsp=ffffd00022727180 rbp=ffffd00022727400
     r8=ffffe000a418b800  r9=0000000000000000 r10=0000000000000801
    r11=ffffc00136d33140 r12=000000598a9bf320 r13=ffffe000936da010
    r14=0000000000000010 r15=ffffe000936da010
    iopl=0         nv up ei ng nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
    rax=0000000000000000 rbx=ffffd000227271d0 rcx=ffffe000adebd440
    rdx=0000000003d749a4 rsi=ffffc0012cdaf2c0 rdi=0000000000000000
    rip=fffff80148033b7f rsp=ffffd00022727180 rbp=ffffd00022727400
     r8=ffffe000a418b800  r9=0000000000000000 r10=0000000000000801
    r11=ffffc00136d33140 r12=000000598a9bf320 r13=ffffe000936da010
    r14=0000000000000010 r15=ffffe000936da010
    iopl=0         nv up ei ng nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
    dxgkrnl+0x4b7fdxgkrnl+0x4b7f:
    fffff801`48033b7f 483908          cmp     qword ptr [rax],rcx ds:002b:00000000`00000000=????????????????
    :
    fffff801`48033b7f 483908          cmp     qword ptr [rax],rcx ds:002b:00000000`00000000=????????????????
    Resetting default scope
    Resetting default scope

    CUSTOMER_CRASH_COUNT:  1

    STACK_TEXT:  
    ffffd000`22727180 00000000`000000b0 : ffffc001`36b75010 ffffd000`e6760000 00000000`00000801 ffffc001`3e3681c0 : dxgkrnl+0x4b7f
    ffffd000`22727188 ffffc001`36b75010 : ffffd000`e6760000 00000000`00000801 ffffc001`3e3681c0 fffff801`4808e55f : 0xb0
    ffffd000`22727190 ffffd000`e6760000 : 00000000`00000801 ffffc001`3e3681c0 fffff801`4808e55f 00000000`00000000 : 0xffffc001`36b75010
    ffffd000`22727198 00000000`00000801 : ffffc001`3e3681c0 fffff801`4808e55f 00000000`00000000 fffff800`4aabdd00 : 0xffffd000`e6760000
    ffffd000`227271a0 ffffc001`3e3681c0 : fffff801`4808e55f 00000000`00000000 fffff800`4aabdd00 ffffd000`22727288 : 0x801
    ffffd000`227271a8 fffff801`4808e55f : 00000000`00000000 fffff800`4aabdd00 ffffd000`22727288 ffffd000`22727400 : 0xffffc001`3e3681c0
    ffffd000`227271b0 00000000`00000000 : fffff800`4aabdd00 ffffd000`22727288 ffffd000`22727400 ffffd000`22727288 : dxgkrnl+0x5f55f


    STACK_COMMAND:  .cxr 0xffffd00022726750 ; kb

    EXCEPTION_CODE_STR:  5318053F

    CUSTOMER_CRASH_COUNT:  1

    STACK_TEXT:  
    ffffd000`22727180 00000000`000000b0 : ffffc001`36b75010 ffffd000`e6760000 00000000`00000801 ffffc001`3e3681c0 : dxgkrnl+0x4b7f
    ffffd000`22727188 ffffc001`36b75010 : ffffd000`e6760000 00000000`00000801 ffffc001`3e3681c0 fffff801`4808e55f : 0xb0
    ffffd000`22727190 ffffd000`e6760000 : 00000000`00000801 ffffc001`3e3681c0 fffff801`4808e55f 00000000`00000000 : 0xffffc001`36b75010
    ffffd000`22727198 00000000`00000801 : ffffc001`3e3681c0 fffff801`4808e55f 00000000`00000000 fffff800`4aabdd00 : 0xffffd000`e6760000
    ffffd000`227271a0 ffffc001`3e3681c0 : fffff801`4808e55f 00000000`00000000 fffff800`4aabdd00 ffffd000`22727288 : 0x801
    ffffd000`227271a8 fffff801`4808e55f : 00000000`00000000 fffff800`4aabdd00 ffffd000`22727288 ffffd000`22727400 : 0xffffc001`3e3681c0
    ffffd000`227271b0 00000000`00000000 : fffff800`4aabdd00 ffffd000`22727288 ffffd000`22727400 ffffd000`22727288 : dxgkrnl+0x5f55f


    STACK_COMMAND:  .cxr 0xffffd00022726750 ; kb

    EXCEPTION_CODE_STR:  5318053F

    EXCEPTION_STR:  WRONG_SYMBOLS

    PROCESS_NAME:  ntoskrnl.wrong.symbols.exe

    IMAGE_NAME:  ntoskrnl.wrong.symbols.exe

    MODULE_NAME: 
    EXCEPTION_STR:  WRONG_SYMBOLS

    PROCESS_NAME:  ntoskrnl.wrong.symbols.exe

    IMAGE_NAME:  ntoskrnl.wrong.symbols.exe

    MODULE_NAME: nt_wrong_symbols
    nt_wrong_symbols

    SYMBOL_NAME:  nt_wrong_symbols!5318053F789000

    FAILURE_BUCKET_ID:  WRONG_SYMBOLS_X64_9600.17041.amd64fre.winblue_gdr.140305-1710_TIMESTAMP_140306-051855_5318053F_nt_wrong_symbols!5318053F789000

    OS_VERSION:  8.1.9600.17041

    BUILDLAB_STR:  winblue_gdr

    OSPLATFORM_TYPE:  x64

    OSNAME:  Windows 8.1

    FAILURE_ID_HASH:  {68fe300a-3471-f07c-bc37-81d8ff7c9eb6}

    Followup:     MachineOwner
    ---------


    SYMBOL_NAME:  nt_wrong_symbols!5318053F789000

    FAILURE_BUCKET_ID:  WRONG_SYMBOLS_X64_9600.17041.amd64fre.winblue_gdr.140305-1710_TIMESTAMP_140306-051855_5318053F_nt_wrong_symbols!5318053F789000

    OS_VERSION:  8.1.9600.17041

    BUILDLAB_STR:  winblue_gdr

    OSPLATFORM_TYPE:  x64

    OSNAME:  Windows 8.1

    FAILURE_ID_HASH:  {68fe300a-3471-f07c-bc37-81d8ff7c9eb6}

    Followup:     MachineOwner
    ---------

    麻烦帮忙分析一下原因,感谢

    2020年6月22日 12:58
  • 您好,

    1. 从您的dump文件来看,是symbol配置有问题,因而无法通过您贴出的dump为您分析
    2. 关于Debug工具WinDbg的使用可以参考如下链接:https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/debugging-a-user-mode-process-using-windbg
    3. 对于蓝屏问题,complete dump比mini dump要有帮助,请按照如下方式配置complete dump:https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/enabling-a-kernel-mode-dump-file等待问题出现时收集complete dump
    4. 您也可尝试先通过如下链接排错:
      https://support.microsoft.com/zh-cn/help/14238/windows-10-troubleshoot-blue-screen-errors
    2020年6月23日 2:36
  • 您好,

    请问您的问题进展的怎么样了?

    我十分乐意帮助解决您的问题,希望您能及时给我一个反馈。


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2020年6月26日 2:29