Event 4, Kernel-eventTracing

I periodically see this warning in the event log: The maximum file size for session "McAfee.{E4367DA7-2B80-47f3-86D2-7626A18FC6F4}" has been reached. As a result, events might be lost (not logged) to file "C:\ProgramData\McAfee\MCLOGS\ETW\mclogs.etl".
The maximum files size is currently set to 16777216 bytes.
It is immediately followed by this error: Session "McAfee.{E4367DA7-2B80-47f3-86D2-7626A18FC6F4}" stopped due to the following error: 0xC0000188
Can someone walk me through fixing this, it is getting annoying as it pops up almost every few days in the event viewer. 
Some things that i think might work but am not sure how to do are: Making the maximum file size bigger, or making the log circular. I have tried changing both of these using performance monitor, but since the logging process is in event trace sessions,
and not startup event trace sessions, it seems that the changes are only saved until i restart the computer. Then, the event trace session is recreated with the old, faulty settings. I have tried simply deleting the log, but this does not seem to help as it
is simply recreated the next time i start the computer. Please help. 

Hi,
I suspect this issue is related with some logging mechanism in McAfee, these log files do not rotate automatically at this time, so once the logs are full, then logging should stop and shows this error, (there might be an option to set the log file size
or clear the log, sorry but I'm not familiar with the logging mechanism of McAfee, hope this link could be helpful https://community.mcafee.com/message/309658
It is recommended to contact this support for they're more familiar with their product, may bring more different ideas for you.
McAfee Support
http://service.mcafee.com/default.aspx
NOTE
This
response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you.
Microsoft
does not control these sites and has not tested any software or information found on these sites.
Yolanda Zhu
TechNet Community Support

Similar Messages

  • Event ID: 4, Source: Microsoft-Windows-Kernel-EventTracing, maximum file size for session "ReadyBoot" has been reached.

    Hello,
    I upgraded my machine to Win7 x64 Pro about 3 weeks ago. My HW is an Asus mobo, Intel Q9450 w/8GB RAM. The boot drives are two Raptors configured as RAID01. All the drivers are the latest available from Intel, Asus and 3rd party vendors. My WEI is 5.9, limited by the disk transfer rates, otherwise 7.1 and 7.2 on the other indexes.
    I've been receiving these errors at boot;
    Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
    Source:        Microsoft-Windows-Kernel-EventTracing
    Date:          11/10/2009 7:51:03 AM
    Event ID:      4
    Task Category: Logging
    Level:         Warning
    Keywords:      Session
    User:          SYSTEM
    Computer:      herbt-PC
    Description:
    The maximum file size for session "ReadyBoot" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl". The maximum files size is currently set to 20971520 bytes.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>4</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>1</Task>
        <Opcode>10</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2009-11-10T12:51:03.393985600Z" />
        <EventRecordID>28</EventRecordID>
        <Correlation />
        <Execution ProcessID="4" ThreadID="164" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>herbt-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="SessionName">ReadyBoot</Data>
        <Data Name="FileName">C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl</Data>
        <Data Name="ErrorCode">3221225864</Data>
        <Data Name="LoggingMode">0</Data>
        <Data Name="MaxFileSize">20971520</Data>
      </EventData>
    </Event>
    The image for PID 4 is listed as System.
    My searches have turned up similar events listed but no solutions.
    Any help would be appreciated.
    Cheers!

    Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035
    As suggested above I assume this is a microsoft issue?  It has been discussed here and other forums for quite some time.  I never have seen a fix?  I wish when we received errors of this nature microsoft would tell us what they were.  How is this related to superfetch?  What is superfetch?  Why would superfetch have changed?
    BY THE WAY....  Superfetch is on(started) is on automatic and logs on as local system.  So this is not the cause of my issue.  Also what is readyboot?  Does the average computer really know what these programs/services or unique microsoft words/terms are?
    System
    Provider
    [ Name]
    Microsoft-Windows-Kernel-EventTracing
    [ Guid]
    {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}
    EventID
    2
    Version
    0
    Level
    2
    Task
    2
    Opcode
    12
    Keywords
    0x8000000000000010
    TimeCreated
    [ SystemTime]
    2010-04-11T14:35:49.829600000Z
    EventRecordID
    25
    Correlation
    Execution
    [ ProcessID]
    4
    [ ThreadID]
    48
    Channel
    Microsoft-Windows-Kernel-EventTracing/Admin
    Computer
    Daddy-PC
    Security
    [ UserID]
    S-1-5-18
    EventData
    SessionName
    Circular Kernel Context Logger
    FileName
    ErrorCode
    3221225525
    LoggingMode
    268436608
    Windows7, Windows, Win7

  • Microsoft-Windows-Kernel-EventTracing Error 2 happens twice at boot EX2013CU7

    Not sure what it is.  The server is running Server 2012 R2 and it is a VM.  It has exchange and associated necessary features, roles, and prerequisites and nothing else installed.  I have uninstalled and reinstalled Exchange 2013 CU7 3 times
    and each time this error has been present.  It happens twice at boot and seems to cause no problems.
    Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
    Source:        Microsoft-Windows-Kernel-EventTracing
    Date:          12/23/2014 10:06:53 AM
    Event ID:      2
    Task Category: Session
    Level:         Error
    Keywords:      Session
    User:          SYSTEM
    Computer:      myserver.mydomain.local
    Description:
    Session "FastDocTracingSession" failed to start with the following error: 0xC0000035
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>2</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>2</Task>
        <Opcode>12</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2014-12-23T17:06:53.273839900Z" />
        <EventRecordID>2</EventRecordID>
        <Correlation />
        <Execution ProcessID="3640" ThreadID="10016" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>Valis.PBJFS.local</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="SessionName">FastDocTracingSession</Data>
        <Data Name="FileName">
        </Data>
        <Data Name="ErrorCode">3221225525</Data>
        <Data Name="LoggingMode">9</Data>
      </EventData>
    </Event>

    Hi,
    This Event can be ignored. To prevent this Event prompt, please follow steps below:
    1. Set the MetricsSelfSelectionSelected value in the registry to
    2.
    2. Restart the
    Windows Azure Telemetry Service service.
    3. Stop the
    WindowsAzure-GuestAgent-Metrics event trace session.
    More details, please refer following blog:
    Event ID 2: Session "WindowsAzure-GuestAgent-Metrics" failed to start with the following error: 0xC0000035
    http://blogs.msdn.com/b/mast/archive/2014/07/09/event-id-2-session-quot-windowsazure-guestagent-metrics-quot-failed-to-start-with-the-following-error-0xc0000035.aspx
    Thanks
    If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Mavis Huang
    TechNet Community Support

  • Kernel-EventTracing Failure Errors every 30 minutes

    A couple months ago I started getting the following error on one of my Windows 2012 Standard servers.  The errors occur about every 30 minutes.  I've searched high and low and can't find a solution for this.  Can anyone tell me where to look?
    Thanks,
    Joe
    Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
    Source:        Microsoft-Windows-Kernel-EventTracing
    Date:          6/11/2014 2:58:09 AM
    Event ID:      2
    Task Category: Session
    Level:         Error
    Keywords:      Session
    User:          NETWORK SERVICE
    Computer:      Server24.internal.com
    Description:
    Session "" failed to start with the following error: 0xC0000022
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>2</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>2</Task>
        <Opcode>12</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2014-06-11T07:58:09.331919500Z" />
        <EventRecordID>3533</EventRecordID>
        <Correlation />
        <Execution ProcessID="2840" ThreadID="4540" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>Server24.internal.com</Computer>
        <Security UserID="S-1-5-20" />
      </System>
      <EventData>
        <Data Name="SessionName">
        </Data>
        <Data Name="FileName">
        </Data>
        <Data Name="ErrorCode">3221225506</Data>
        <Data Name="LoggingMode">276824069</Data>
      </EventData>
    </Event>

    Hi,
    When exactly do you receive this error message? You could try to stop event trace session, please see:
    Session "WbadminInBuiltTracing" failed to start with the following error: 0xC0000035
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/02ac2078-ac0e-48d1-b3db-3f2e76319afb/session-wbadmininbuilttracing-failed-to-start-with-the-following-error-0xc0000035?forum=windowsbackup
    Regards,
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Event 1001, BugCheck + Event 41, Kernel-Power

    hello,
    I'm getting these random restarts on my laptop i baught just few months ago.
    In the event viewer i found Event 41, Kernel-Power
    followed by an Event 1001, BugCheck.
    Please help.
    System
    Provider
    [ Name]
    Microsoft-Windows-Kernel-Power
    [ Guid]
    {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
    EventID
    41
    Version
    3
    Level
    1
    Task
    63
    Opcode
    0
    Keywords
    0x8000000000000002
    TimeCreated
    [ SystemTime]
    2014-03-25T23:24:31.654884500Z
    EventRecordID
    21937
    Correlation
    Execution
    [ ProcessID]
    4
    [ ThreadID]
    8
    Channel
    System
    Computer
    Arseni_Graifer
    Security
    [ UserID]
    S-1-5-18
    EventData
    BugcheckCode
    159
    BugcheckParameter1
    0x3
    BugcheckParameter2
    0xffffe000059b3620
    BugcheckParameter3
    0xffffd00020c6b840
    BugcheckParameter4
    0xffffe00000c83010
    SleepInProgress
    0
    PowerButtonTimestamp
    0
    BootAppStatus
    0
    System
    Provider
    [ Name]
    Microsoft-Windows-WER-SystemErrorReporting
    [ Guid]
    {ABCE23E7-DE45-4366-8631-84FA6C525952}
    [ EventSourceName]
    BugCheck
    EventID
    1001
    [ Qualifiers]
    16384
    Version
    0
    Level
    2
    Task
    0
    Opcode
    0
    Keywords
    0x80000000000000
    TimeCreated
    [ SystemTime]
    2014-03-25T23:24:56.000000000Z
    EventRecordID
    21926
    Correlation
    Execution
    [ ProcessID]
    0
    [ ThreadID]
    0
    Channel
    System
    Computer
    ARSENI_GRAIFER
    Security
    EventData
    param1
    0x0000009f (0x0000000000000003, 0xffffe000059b3620, 0xffffd00020c6b840, 0xffffe00000c83010)
    param2
    C:\WINDOWS\MEMORY.DMP
    param3
    032614-25828-01
    My tech specs:
    proccessor: Intel Core i7-3632QM CPU @ 2.20GHz 2.20GHz
    NVIDIA Geforce GT 635M
    LENOVO IDEAPAD Z500

    Hi,
    First, for this issue, please open device manager and check updates for power driver first.
    Then, we consider that this issue is related to BSOD, please help to upload the minidump file here for our research:
    Please upload them to a file sharing service like Onedrive or "Rapidshare" and put a link to them in your reply.
    Link for how to  upload below.
    http://www.wikihow.com/Use-SkyDrive 
    To ensure minidumps are enabled, refer to the step “Configure the dump type” in following article:
    How to read the small memory dump file that is created by Windows if a crash occurs
    http://support.microsoft.com/kb/315263#method2 
    Kate Li
    TechNet Community Support

  • BLACK SCREEN on start up with 3 beeps, FREEZES when power unplugged, IF IT BOOTS splash screen freezes, OVERHEATING REQUIRED TO BOOT - 0x7B, Event 41 kernel-power

    Issue: One day I unplug the power, the screen freezes and I get frozen music sound. I shut down, start up, I get 3 beeps (1 short 2 long), which indicates a Video failure according to the Thinkpad Laptop beep code list.
    How I solve the issue day-to-day: I turn the heat up - I disconnect the battery and hard drive and plug in the power then turn it on. I will wait until the underneath is searing hot with a blanket blocking the fan's flow of air, I mean way hot because any
    cooler and it won't start. Plug stuff back in, Hard drive first, Battery second, turn off with power button hold, unplug power, replug power. 
    I turn it on, no beeps, it goes past the first Lenovo screen, then gives me a prompt because it "didn't shut down properly" and continue regular startup. What happens next is the Windows logo appears,
    and just as the animated windows logo starts to move (you see 2 small colored dots on the screen), it freezes. I see this every time, I know naturally that it means that the laptop is still too hot to go past that point, so I shut it down and try again. After
    about 5 - 10 tries it will go past the splash screen and into the login area, then it's all fine. 
    Sometimes when I unplug the power from the back by accident it will freeze. By accident I mean that the connector wiggles it's self out easily. This unplug freezing thing started happening about 1 week before the 3 beep black screen problem started rolling,
    so I'm putting 2 together.
           Errors:
    I got a Blue Screen of Death the first time I started it up with the overheating ritual, but I never got it since. It was 0X7B.
    I got another Blue Screen of Death about a week ago, but came as it was on already and I had been using it, and said something about disabling Cache or Shadowing in BIOS. I never got it since.
           Event Viewer events found:
    1. Kernel-Power, Summary page.
    There are critical events for a few things like Kernel-Power, Event ID 41, Task Category (63). There are 19 of them, each day 1 or 2 of them but mostly 1, so this maybe corresponds to my daily ritual.
    "The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."
    2. Kernel-Processor-Power - Event ID 37, task category (7)
    "The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report."
    3. LMS - HCMI - Event ID 2, Task Category: none
    "LMS Service cannot connect to HECI driver".
    I came across a very sluggish performing control panel for Nvidia before and after this problem, and I tried installing a newer version, which I had to jump through a few hoops to do, like uninstalling first, not just updating. At first it said that the
    driver wasnt for the system, which was wrong. I made it work somehow, but it was still sluggish. I rolled it back to an earlier driver, and now it works fine. No sluggish performance / slight freeze window thing going on.
                 MSCONFIG.exe, Boot Advanced Options: I have tried twice to change this 1 setting, check box "Number of processors" and change to 2 processors, because I do have 2 processors. I have been able to change
    this in the past, but it does not save the setting now, and I believe this option was selected before I started having problems, and settings did not disappear then.
    What could this be. The small round BIOS battery? The video card like everyone presumes? (I.E. the entire motherboard replacement), Software? The wiggly power input area? (Not enough power getting in?), Firmware of some sort? The BIOS software being wrong?
    SYSTEM INFO:
    Thinkpad T61p 6457-A24, Intel core 2 duo (T7700) 2.4GHz, Intel 120GB SSD 6Gb/s, NVIDIA Quadro FX 570M (256 MB),
    Windows 7 64 bit Home Premium (6.1, Build 7601), BIOS Ver 1.00PARTTBLx
    Display: 1680 x 1050 (32 bit 60 Hz), Integrated RAMDAC, Main driver: nvd3dumx.dll,nvwgf2umx,nvwgf2,
    Version 8.17.12.9688, Date 5/31/2012, DDI version 10, Driver model WDDM 1.1
    Please excuse the small text at the beginning, there isn't an option to un-do that error.

    You are very wrong about that mystified. What do YOU think made my computer work without beeping at all hu? (I bet you're gonna tell me). I figured it out.
    RE-INSTALL WINDOWS 7 OS.
    SOLVED.
    DOESN'T BEEP ANY MORE.
    THAT IS A PART OF microsoft ISN'T IT.
    ::: EGO KILLER 9000 :::

  • Event 41, Kernel-Power

    I have been getting random crashes since I build this computer. Any solutions? This is what I see base on event viewer.
    I have tested my memory using memory diagnostic and ran memtest for 11 hours.
    System
    Provider
    [ Name]
    Microsoft-Windows-Kernel-Power
    [ Guid]
    {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
    EventID
    41
    Version
    2
    Level
    1
    Task
    63
    Opcode
    0
    Keywords
    0x8000000000000002
    TimeCreated
    [ SystemTime]
    2014-02-23T08:25:56.872802400Z
    EventRecordID
    27701
    Correlation
    Execution
    [ ProcessID]
    4
    [ ThreadID]
    8
    Channel
    System
    Computer
    Tobizor-PC
    Security
    [ UserID]
    S-1-5-18
    EventData
    BugcheckCode
    0
    BugcheckParameter1
    0x0
    BugcheckParameter2
    0x0
    BugcheckParameter3
    0x0
    BugcheckParameter4
    0x0
    SleepInProgress
    false
    PowerButtonTimestamp
    0
    My tech specs 
    Intel i7-4770K
    MSI 7870GHZ
    MSI Z87-G41
    G.SKILL 8GB 1600
    Intel 530 240gb
    Rosewill Hive 750W

    Please provide a copy of your System Information file. Type
    System Information in the Search Box above the start Button and press the ENTER key (alternative is Select Start, All Programs, Accessories, System Tools, System Information). Select File, Export and give the file a name noting where it is
    located. Do not place the cursor within the body of the report before exporting the file. The system creates a new System Information file each time system information is accessed. You need to allow a minute or two for the file to be fully
    populated before exporting a copy. Please upload to your OneDrive, share with everyone and post a link here. Reports in normal mode preferred. Please say if the report
    has been obtained in safe mode.
    Please upload and share with everyone copies of your
    System and Application logs from your Event Viewer to your OneDrive and post a link here.
    To access the System log select Start, Control Panel, Administrative Tools, Event Viewer, from the list in the left side of the window expand Windows
    Logs and select System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Do the same for the Applications log. Do not provide filtered files. Do not clear logs whilst you
    have a continuing problem.
    For help with
    OneDrive
    see paragraph 9.3:
    http://www.gerryscomputertips.co.uk/MicrosoftCommunity1.htm
    Hope this helps, Gerry

  • Recieve hardware change events from kernel

    is it possible to receive events from the kernel pertaining to hardware. For example would it be possible to get a notification whenever the power button is pressed etc etc
    ps Ignore the "etc etc" I just added that for good measure, I'm mainly concerned with the power button

    http://developer.apple.com/mac/library/documentation/DeviceDrivers/Conceptual/IO KitFundamentals/PowerMgmt/PowerMgmt.html#//apple_ref/doc/uid/TP0000020-SW4

  • Error event id 2 - Kernel Event Tracing - Session "" failed to start with the following error: 0xC000000D

    I keep getting this strange error logged as Error event id 2. Note session string is blank "". Any ideas?
    Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
    Source:        Microsoft-Windows-Kernel-EventTracing
    Date:          24/12/2009 09:08:20
    Event ID:      2
    Task Category: Session
    Level:         Error
    Keywords:      Session
    User:          SYSTEM
    Computer:      George-XXL
    Description:
    Session "" failed to start with the following error: 0xC000000D
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>2</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>2</Task>
        <Opcode>12</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2009-12-24T09:08:20.835299100Z" />
        <EventRecordID>36</EventRecordID>
        <Correlation />
        <Execution ProcessID="1944" ThreadID="1948" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>George-XXL</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="SessionName">
        </Data>
        <Data Name="FileName">
        </Data>
        <Data Name="ErrorCode">3221225485</Data>
        <Data Name="LoggingMode">5</Data>
      </EventData>
    </Event>

    Can you let us know if you get any Blue Screen crush error while using your comptuer?
    Generally we can safely ignore the errors in the Event log. Aas we don't if you have get other issues in your computer, you can test your computer in the Clean Boot mode. This method will help us determine if this issue is caused by a loading program or service.
    You can try the the following steps:
    1. Click the Start Button type "msconfig" (without quotation marks) in the Start Search box, and then press Enter.
    2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click "Disable All" (if it is not gray).
    3. Click the "Startup" tab, click "Disable All" and click "OK".
    Then, restart the computer. When the "System Configuration Utility" window appears, please check the "Don't show this message or launch the System Configuration Utility when Windows starts" box and click OK.
    Please test this issue in this Clean Boot environment, if the issue disappears in the Clean Boot environment, you can use the dichtomy to quickly narrow down which entry is causing the issue. You can refer to the
    KB929135.
    Good luck!
    John
    This is a very poor answer.  This guy doesn't know what he's talking about because if you tell someone its ok to  "safely ignore the errors in the event log"  as a blanket instruction ESPECIALLY because as he stated so himself
    he didn't know if there were other issues with the OP's pc then he's giving really bad advice. If you ignore errors in the event log then over time your system will degrade and you will have other issues.. Every error on your pc should NOT be ignored.
    It should be decided on a case by case situation.
    Furthermore this is an error involving the Windows Session which it states has failed. Definitely should NOT be ignored.
    I've got the same error which has suddenly just showed up. No BSOD, Do not have WHS installed and all my media center connectors have NEVER been connected. I don't believe this is a service issue. I think it has something
    to do with kernel event tracing.
    Of course, it's just my opinion....I could be wrong!

  • Kernel-Power Event ID 41: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

    Hello,  Currently we are seeing this issue with a couple of our Lenovo T420s laptops with a Solid State Drive.  ruffly about 10 or so.  The Reboots happen randomly and do not create a dump file.  We have contacted Lenovo and they are
    not sure why its happening.  Since this Crash I set it for Minidump this did not work my next steps will be to Disable Automatic restart on System Failure to see if it brings anything up.  I am also looking at using Procmon to dump to a file as well. 
    If anyone has any other ideas please let me know.
    The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
    + System
      - Provider
       [ Name]  Microsoft-Windows-Kernel-Power
       [ Guid]  {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
       EventID 41
       Version 2
       Level 1
       Task 63
       Opcode 0
       Keywords 0x8000000000000002
      - TimeCreated
       [ SystemTime]  2012-02-01T00:02:48.677610900Z
       EventRecordID 8270
       Correlation
      - Execution
       [ ProcessID]  4
       [ ThreadID]  8
       Channel System
       Computer LR8K6TLC.cntr.thrivent.corp
      - Security
       [ UserID]  S-1-5-18
    - EventData
      BugcheckCode 0
      BugcheckParameter1 0x0
      BugcheckParameter2 0x0
      BugcheckParameter3 0x0
      BugcheckParameter4 0x0
      SleepInProgress false
      PowerButtonTimestamp 129725280988099400
    Event 89, Kernel-Power
    ACPI thermal zone ACPI\ThermalZone\THM0 has been enumerated.            
    _PSV = 0K            
    _TC1 = 0            
    _TC2 = 0            
    _TSP = 0ms            
    _AC0 = 0K            
    _AC1 = 0K            
    _AC2 = 0K            
    _AC3 = 0K            
    _AC4 = 0K            
    _AC5 = 0K            
    _AC6 = 0K            
    _AC7 = 0K            
    _AC8 = 0K            
    _AC9 = 0K            
    _CRT = 371K            
    _HOT = 0K            
    _PSL - see event data.
    ---- Details
    +
    System
    Provider
    [ Name]
    Microsoft-Windows-Kernel-Power
    [ Guid]
    {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
    EventID
    89
    Version
    0
    Level
    4
    Task
    86
    Opcode
    0
    Keywords
    0x8000000000000020
    TimeCreated
    [ SystemTime]
    2012-02-01T00:02:49.270411900Z
    EventRecordID
    8271
    Correlation
    Execution
    [ ProcessID]
    4
    [ ThreadID]
    68
    Channel
    System
    Computer
    LR8K6TLC.cntr.thrivent.corp
    Security
    [ UserID]
    S-1-5-18
    EventData
    ThermalZoneDeviceInstanceLength
    21
    ThermalZoneDeviceInstance
    ACPI\ThermalZone\THM0
    AffinityCount
    1
    _PSV
    0
    _TC1
    0
    _TC2
    0
    _TSP
    0
    _AC0
    0
    _AC1
    0
    _AC2
    0
    _AC3
    0
    _AC4
    0
    _AC5
    0
    _AC6
    0
    _AC7
    0
    _AC8
    0
    _AC9
    0
    _CRT
    371
    _HOT
    0
    _PSL
    0000000000000000
    Thank you.

    We have tested and checked both the Bios and firmware of the SSD Drive's
    Bios was up to date and no issue
    Firmware was also up to date as well.  
    Users are still experiencing random Reboots.   I tried to capture the issue with Procmon but since the PC shutdown (Goes to a black screen no power at all even when turning the "Automatically
    restart" off under Startup and Recovery) No dmp files as of yet.  Unable to configure Procdump due to not knowing where the issue is and what is causing it to happen.
    Going to replace one of the PC's with a New one with different hardware to see if this resolve the issue.  If anyone has any idea's to be able to capture what maybe happening that would
    be great.
    Thank you.

  • Seemingly successful install of Exchange 2013 SP1 turns into many errors in event logs after upgrade to CU7

    I have a new Exchange 2013 server with plans to migrate from my current Exchange 2007 Server. 
    I installed Exchange 2013 SP1 and the only errors I saw in the event log seemed to be long standing known issues that did not indicate an actual problem (based on what I read online). 
    I updated to CU7 and now lots of errors have appeared (although the old ones seem to have been fixed so I have that going for me). 
    Currently the Exchange 2013 server is not in use and clients are still hitting the 2007 server.
    Issue 1)
    After each reboot I get a Kernel-EventTracing 2 error.  I cannot find anything on this on the internet so I have no idea what it is.
    Session "FastDocTracingSession" failed to start with the following error: 0xC0000035
    I did read other accounts of this error with a different name in the quotes but still can’t tell what this is or where it is coming from.
    Issue 2)
    I am still getting 5 MSExchange Common 106 errors even after reregistering all of the perf counters per this page:
    https://support.microsoft.com/kb/2870416?wa=wsignin1.0
    One of the perf counters fails to register using the script from the link above.
    66 C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\InfoWorkerMultiMailboxSearchPerformanceCounters.xml
    New-PerfCounters : The performance counter definition file is invalid.
    At C:\Users\administrator.<my domain>\Downloads\script\ReloadPerfCounters.ps1:19 char:4
    +    New-PerfCounters -DefinitionFileName $f
    +    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo         
    : InvalidData: (:) [New-PerfCounters], TaskException
        + FullyQualifiedErrorId : [Server=VALIS,RequestId=71b6bcde-d73e-4c14-9a32-03f06e3b2607,TimeStamp=12/18/2014 10:09:
       12 PM] [FailureCategory=Cmdlet-TaskException] 33EBD286,Microsoft.Exchange.Management.Tasks.NewPerfCounters
    But that one seems unrelated to the ones that still throw errors. 
    Three of the remaining five errors are (the forum is removing my spacing between the error text so it looks like a wall of text - sorry):
    Performance counter updating error. Counter name is Count Matched LowFidelity FingerPrint, but missed HighFidelity FingerPrint, category name is MSExchange Anti-Malware Datacenter Perfcounters. Optional code: 3. Exception: The
    exception thrown is : System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.set_RawValue(Int64 value)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.set_RawValue(Int64 value)
    Last worker process info : System.ArgumentException: Process with an Id of 7384 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Performance counter updating error. Counter name is Number of items, item is matched with finger printing cache, category name is MSExchange Anti-Malware Datacenter Perfcounters. Optional code: 3. Exception: The exception thrown
    is : System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.set_RawValue(Int64 value)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.set_RawValue(Int64 value)
    Last worker process info : System.ArgumentException: Process with an Id of 7384 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Performance counter updating error. Counter name is Number of items in Malware Fingerprint cache, category name is MSExchange Anti-Malware Datacenter Perfcounters. Optional code: 3. Exception: The exception thrown is : System.InvalidOperationException:
    The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.set_RawValue(Int64 value)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.set_RawValue(Int64 value)
    Last worker process info : System.ArgumentException: Process with an Id of 7384 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Issue 3)
    I appear to have some issues related to the healthmailboxes. 
    I get MSExchangeTransport 1025 errors for multiple healthmailboxes.
    SMTP rejected a (P1) mail from 'HealthMailbox23b10b91745648819139ee691dc97eb6@<my domain>.local' with 'Client Proxy <my server>' connector and the user authenticated as 'HealthMailbox23b10b91745648819139ee691dc97eb6'. The Active Directory
    lookup for the sender address returned validation errors. Microsoft.Exchange.Data.ProviderError
    I reran setup /prepareAD to try and remedy this but I am still getting some.
    Issue 4)
    I am getting an MSExchange RBAC 74 error. 
    (Process w3wp.exe, PID 984) Connection leak detected for key <my domain>.local/Admins/Administrator in Microsoft.Exchange.Configuration.Authorization.WSManBudgetManager class. Leaked Value 1.
    Issue 5)
    I am getting MSExchange Assistants 9042 warnings on both databases.
    Service MSExchangeMailboxAssistants. Probe Time Based Assistant for database Database02 (c83dbd91-7cc4-4412-912e-1b87ca6eb0ab) is exiting a work cycle. No mailboxes were successfully processed. 2 mailboxes were skipped due to errors. 0 mailboxes were
    skipped due to failure to open a store session. 0 mailboxes were retried. There are 0 mailboxes in this database remaining to be processed.
    Some research suggested this may be related to deleted mailboxes however I have never had any actual user mailboxes on this server. 
    If they are healthmailboxes or arbitration mailboxes that might make sense but I am unsure of what to do on this.
    Issue 6)
    At boot I am getting an MSExchange ActiveSync warning 1033
    The setting SupportedIPMTypes in the Web.Config file was missing. 
    Using default value of System.Collections.Generic.List`1[System.String].
    I don't know why but this forum is removing some of my spacing that would make parts of this easier to read.

    Hi Eric
    Yes I have uninstalled and reinstalled Exchange 2013 CU7 for the 3<sup>rd</sup> time. 
    I realize you said one issue per forum thread but since I already started this thread with many issues I will at least post what I have discovered on them in case someone finds their way here from a web search.
    I have an existing Exchange 2007 server in the environment so I am unable to create email address policies that are defined by “recipient container”. 
    If I try and do so I get “You can't specify the recipient container because legacy servers are detected.”
     So I cannot create a normal email address policy and restrict it to an OU without resorting to some fancy filtering. 
    Instead what I have done is use PS to modify extensionAttribute1 (otherwise known as Custom Attribute 1 to exchange) for all of my users. 
    I then applied an address policy to them and gave it the highest priority. 
    Then I set a default email address policy for the entire organization. 
    After reinstalling Exchange all of my system mailboxes were created with the internal domain name. 
    So issue number 3 above has not come up. 
    For issue number one above I have created a new thread:
    https://social.technet.microsoft.com/Forums/office/en-US/7eb12b89-ae9b-46b2-bd34-e50cd52a4c15/microsoftwindowskerneleventtracing-error-2-happens-twice-at-boot-ex2013cu7?forum=exchangesvrdeploy
    For issue number four I have posted to this existing thread where there is so far no resolution:
    https://social.technet.microsoft.com/Forums/exchange/en-US/2343730c-7303-4067-ae1a-b106cffc3583/exchange-error-id-74-connection-leak-detected-for-key?forum=exchangesvradmin
    Issue number Five I have managed to recreate and get rid of in more than one way. 
    If I create a new database in ECP and set the database and log paths where I want, then this error will appear. 
    If I create the database in the default location and then use EMS to move it and set the log path, then the error will not appear. 
    The error will also appear (along with other errors) if I delete the health mailboxes and let them get recreated by restarting the server or the Health Manager service. 
    If I then go and set the retention period for deleted mailboxes to 0 days and wait a little while, these will all go away. 
    So my off hand guess is that these are caused by orphaned system mailboxes.
    For issue number six I have posted to this existing thread where there is so far no resolution:
    https://social.technet.microsoft.com/Forums/exchange/en-US/dff62411-fad8-4d0c-9bdb-037374644845/event-1033-msexchangeactivesync-warning?forum=exchangesvrmobility
    So for the remainder of this thread we can try and tackle issue number two which is the perf counters. 
    The exact same 5 perf counter were coming up and this had been true each time I have uninstalled and reinstalled Exchange 2013CU7. 
    Actually to be more accurate a LOT of perf counter errors come up after the initial install, but reloading the perf counters using the script I posted above reduces it to the same five. 
    Using all of your suggestions so far has not removed these 5 remaining errors either.  Since there is no discernible impact other than these errors at boot I am not seriously bothered by them but as will all event log errors, I would prefer
    to make them go away if possible.

  • Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035

    fresh install  and configure  on  A Dell optiplex3010 running  window 7 pro  64 bit  running can  anyone  tell   what   this  is  ?
    Log Name: Microsoft-Windows-Kernel-EventTracing/Admin Source: Microsoft-Windows-Kernel-EventTracing Date: 4/16/2014 12:04:17 PM Event ID: 2 Task Category: Session Level: Error Keywords: Session User: SYSTEM Computer: HMCServer Description: Session "Circular
    Kernel Context Logger" failed to start with the following error: 0xC0000035 Event Xml: <event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><system><provider guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}"
    name="Microsoft-Windows-Kernel-EventTracing"><eventid>2</eventid> <version>0</version> <level>2</level> <task>2</task> <opcode>12</opcode> <keywords>0x8000000000000010</keywords>
    <timecreated systemtime="2014-04-16T16:04:17.657816300Z"><eventrecordid>44</eventrecordid> <correlation><execution processid="4" threadid="60"><channel>Microsoft-Windows-Kernel-EventTracing/Admin</channel>
    <computer>HMCServer</computer> <security userid="S-1-5-18"></security></execution></correlation></timecreated></provider></system> <eventdata><data name="SessionName">Circular
    Kernel Context Logger</data> <data name="FileName"></data> <data name="ErrorCode">3221225525</data> <data name="LoggingMode">268436608</data> </eventdata> </event>

    The error is implying there is a naming conflict. This could be 2 or more PCs with the same SID or Computer Name, or two different objects (shares/drives) attempting to use the same drive letter. There is one thing I found of renaming a file that has helped
    some people:
    http://social.technet.microsoft.com/Forums/windows/en-US/2eab69ac-7537-40c4-916e-6f6d41c05d4b/session-circular-kernel-context-logger-failed-to-start-with-the-following-error-0xc0000035?forum=w7itprogeneral

  • USB/eSata express card not working on stock kernel

    Hello everyone,
    I have a weird problem and I don't seem to find any solution by myself. Let me give you some background info on what I plan to do.
    I purchased an express card to eSata/USB 3.0 adapter and want to make it work on my laptops. Precisely, it is this card: http://www.amazon.de/Notebook-Express-C … B007F8TXZ8
    1: Lenovo X200s (1,6GHz) running Ubuntu 14.04 amd64
    2: Lenovo X200s (1,6GHz) running Debian 7 amd64
    3: Lenovo X200T (1,6GHz) running ArchLinux amd64
    The card does work fine only on the Ubuntu machine. I would like to make it run on the two other ones as well. I thought I might get help here getting it to work on machine 3 and then transfer the results to machine 2. What really matters to me is eSata, btw, I do not even have a USB 3.0 device to test with.
    First of all, here's what happens when I plug the card into machine 1:
    user@1-ubuntu:~$ uname -r
    3.13.0-39-generic
    user@1-ubuntu:~$ dmesg | tail -n 44 # that's where it begins
    [ 1953.576472] pciehp 0000:00:1c.3:pcie04: Card present on Slot(3)
    [ 1953.728077] pci 0000:05:00.0: [1b21:1042] type 00 class 0x0c0330
    [ 1953.728119] pci 0000:05:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit]
    [ 1953.728304] pci 0000:05:00.0: PME# supported from D3hot
    [ 1953.736062] pci 0000:05:00.0: BAR 0: assigned [mem 0xf0000000-0xf0007fff 64bit]
    [ 1953.736087] pcieport 0000:00:1c.3: PCI bridge to [bus 05-0c]
    [ 1953.736092] pcieport 0000:00:1c.3: bridge window [io 0x2000-0x2fff]
    [ 1953.736098] pcieport 0000:00:1c.3: bridge window [mem 0xf0000000-0xf1ffffff]
    [ 1953.736104] pcieport 0000:00:1c.3: bridge window [mem 0xf2900000-0xf29fffff 64bit pref]
    [ 1953.736133] pci 0000:05:00.0: no hotplug settings from platform
    [ 1953.736143] pci 0000:05:00.0: enabling device (0000 -> 0002)
    [ 1953.736398] xhci_hcd 0000:05:00.0: xHCI Host Controller
    [ 1953.736406] xhci_hcd 0000:05:00.0: new USB bus registered, assigned bus number 9
    [ 1953.743621] xhci_hcd 0000:05:00.0: irq 46 for MSI/MSI-X
    [ 1953.743629] xhci_hcd 0000:05:00.0: irq 49 for MSI/MSI-X
    [ 1953.743635] xhci_hcd 0000:05:00.0: irq 50 for MSI/MSI-X
    [ 1953.743784] usb usb9: New USB device found, idVendor=1d6b, idProduct=0002
    [ 1953.743788] usb usb9: New USB device strings: Mfr=3, Product=2, SerialNumber=1
    [ 1953.743791] usb usb9: Product: xHCI Host Controller
    [ 1953.743794] usb usb9: Manufacturer: Linux 3.13.0-39-generic xhci_hcd
    [ 1953.743796] usb usb9: SerialNumber: 0000:05:00.0
    [ 1953.743973] hub 9-0:1.0: USB hub found
    [ 1953.743990] hub 9-0:1.0: 2 ports detected
    [ 1953.744147] xhci_hcd 0000:05:00.0: xHCI Host Controller
    [ 1953.744153] xhci_hcd 0000:05:00.0: new USB bus registered, assigned bus number 10
    [ 1953.744218] usb usb10: New USB device found, idVendor=1d6b, idProduct=0003
    [ 1953.744221] usb usb10: New USB device strings: Mfr=3, Product=2, SerialNumber=1
    [ 1953.744224] usb usb10: Product: xHCI Host Controller
    [ 1953.744227] usb usb10: Manufacturer: Linux 3.13.0-39-generic xhci_hcd
    [ 1953.744229] usb usb10: SerialNumber: 0000:05:00.0
    [ 1953.744366] hub 10-0:1.0: USB hub found
    [ 1953.744383] hub 10-0:1.0: 2 ports detected
    [ 1954.447851] usb 10-1: new SuperSpeed USB device number 2 using xhci_hcd
    [ 1954.460505] usb 10-1: Parent hub missing LPM exit latency info. Power management will be impacted.
    [ 1954.461215] usb 10-1: New USB device found, idVendor=174c, idProduct=5106
    [ 1954.461219] usb 10-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1
    [ 1954.461222] usb 10-1: Product: AS2105
    [ 1954.461225] usb 10-1: Manufacturer: ASMedia
    [ 1954.461228] usb 10-1: SerialNumber: 00000000000000000000
    [ 1954.463146] usb-storage 10-1:1.0: USB Mass Storage device detected
    [ 1954.463279] scsi7 : usb-storage 10-1:1.0
    [ 1955.460385] scsi 7:0:0:0: Direct-Access ASMT 2105 0 PQ: 0 ANSI: 5
    [ 1955.465099] sd 7:0:0:0: Attached scsi generic sg1 type 0
    [ 1955.466483] sd 7:0:0:0: [sdb] Attached SCSI removable disk
    I wouldn't know of any attached disks, and neither does it show up. Note that it is only the card I plugged in, no hard drive attached to it.
    hburg1234@packrehsel:~$ lspci -k
    00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory Controller Hub (rev 07)
    Subsystem: Lenovo Device 20e0
    Kernel driver in use: agpgart-intel
    00:02.0 VGA compatible controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
    Subsystem: Lenovo Device 20e4
    Kernel driver in use: i915
    00:02.1 Display controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
    Subsystem: Lenovo Device 20e4
    00:03.0 Communication controller: Intel Corporation Mobile 4 Series Chipset MEI Controller (rev 07)
    Subsystem: Lenovo Device 20e6
    Kernel driver in use: mei_me
    00:03.3 Serial controller: Intel Corporation Mobile 4 Series Chipset AMT SOL Redirection (rev 07)
    Subsystem: Lenovo Device 20ec
    Kernel driver in use: serial
    00:19.0 Ethernet controller: Intel Corporation 82567LM Gigabit Network Connection (rev 03)
    Subsystem: Lenovo Device 20ee
    Kernel driver in use: e1000e
    00:1a.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #4 (rev 03)
    Subsystem: Lenovo Device 20f0
    Kernel driver in use: uhci_hcd
    00:1a.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #5 (rev 03)
    Subsystem: Lenovo Device 20f0
    Kernel driver in use: uhci_hcd
    00:1a.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #6 (rev 03)
    Subsystem: Lenovo Device 20f0
    Kernel driver in use: uhci_hcd
    00:1a.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #2 (rev 03)
    Subsystem: Lenovo Device 20f1
    Kernel driver in use: ehci-pci
    00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio Controller (rev 03)
    Subsystem: Lenovo Device 20f2
    Kernel driver in use: snd_hda_intel
    00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 1 (rev 03)
    Kernel driver in use: pcieport
    00:1c.1 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 2 (rev 03)
    Kernel driver in use: pcieport
    00:1c.3 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 4 (rev 03)
    Kernel driver in use: pcieport
    00:1d.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #1 (rev 03)
    Subsystem: Lenovo Device 20f0
    Kernel driver in use: uhci_hcd
    00:1d.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #2 (rev 03)
    Subsystem: Lenovo Device 20f0
    Kernel driver in use: uhci_hcd
    00:1d.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #3 (rev 03)
    Subsystem: Lenovo Device 20f0
    Kernel driver in use: uhci_hcd
    00:1d.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #1 (rev 03)
    Subsystem: Lenovo Device 20f1
    Kernel driver in use: ehci-pci
    00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93)
    00:1f.0 ISA bridge: Intel Corporation ICH9M-E LPC Interface Controller (rev 03)
    Subsystem: Lenovo Device 20f5
    Kernel driver in use: lpc_ich
    00:1f.2 SATA controller: Intel Corporation 82801IBM/IEM (ICH9M/ICH9M-E) 4 port SATA Controller [AHCI mode] (rev 03)
    Subsystem: Lenovo Device 20f8
    Kernel driver in use: ahci
    00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev 03)
    Subsystem: Lenovo Device 20f9
    03:00.0 Network controller: Intel Corporation PRO/Wireless 5100 AGN [Shiloh] Network Connection
    Subsystem: Intel Corporation WiFi Link 5100 AGN
    Kernel driver in use: iwlwifi
    05:00.0 USB controller: ASMedia Technology Inc. ASM1042 SuperSpeed USB Host Controller
    Subsystem: Device 174c:2104
    Kernel driver in use: xhci_hcd
    The last one seems to be important to me, so here's a verbose output on that one.
    user@1-ubuntu:~$ lspci -v | tail -n 8
    05:00.0 USB controller: ASMedia Technology Inc. ASM1042 SuperSpeed USB Host Controller (prog-if 30 [XHCI])
    Subsystem: Device 174c:2104
    Physical Slot: 3
    Flags: bus master, fast devsel, latency 0, IRQ 19
    Memory at f0000000 (64-bit, non-prefetchable) [size=32K]
    Capabilities: <access denied>
    Kernel driver in use: xhci_hcd
    user@1-ubuntu:~$ sudo udevadm monitor -k
    monitor will print the received events for:
    KERNEL - the kernel uevent
    KERNEL[2585.956558] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0 (pci)
    KERNEL[2585.972086] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb9 (usb)
    KERNEL[2585.972116] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb9/9-0:1.0 (usb)
    KERNEL[2585.975736] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10 (usb)
    KERNEL[2585.975763] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-0:1.0 (usb)
    KERNEL[2586.689218] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1 (usb)
    KERNEL[2586.690935] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0 (usb)
    KERNEL[2586.695723] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9 (scsi)
    KERNEL[2586.695757] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/scsi_host/host9 (scsi_host)
    KERNEL[2587.692633] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0 (scsi)
    KERNEL[2587.692667] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0 (scsi)
    KERNEL[2587.692691] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0/scsi_disk/9:0:0:0 (scsi_disk)
    KERNEL[2587.692708] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0/scsi_device/9:0:0:0 (scsi_device)
    KERNEL[2587.692824] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0/scsi_generic/sg1 (scsi_generic)
    KERNEL[2587.692898] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0/bsg/9:0:0:0 (bsg)
    KERNEL[2587.699636] add /devices/virtual/bdi/8:16 (bdi)
    KERNEL[2587.699771] add /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0/block/sdb (block)
    KERNEL[2587.703694] change /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0/block/sdb (block)
    KERNEL[2587.709178] change /devices/pci0000:00/0000:00:1c.3/0000:05:00.0/usb10/10-1/10-1:1.0/host9/target9:0:0/9:0:0:0/block/sdb (block)
    Apart from the supposedly found block device (can't judge) I am not sure if there is anything that is really eSata specific and not USB 3.0 related.
    So far what I think I can tell from the output is that the modules
    pciehp pci pcieport
    seem to be dealing with the express card as such whereas
    xhci_hcd
    takes care of USB 3.0. I cannot see any clear reference to the eSata connector, which might not be surprising if the bus is just passed through (again: not sure).
    For completeness' sake here comes the output of
    user@1-ubuntu:~$ lsmod | tee before
    Module Size Used by
    ctr 13049 1
    ccm 17773 1
    pci_stub 12622 1
    vboxpci 23194 0
    vboxnetadp 25670 0
    vboxnetflt 27613 0
    vboxdrv 339502 3 vboxnetadp,vboxnetflt,vboxpci
    cuse 13445 3
    dm_crypt 23177 1
    btusb 32412 0
    cdc_ether 14351 0
    usbnet 43913 1 cdc_ether
    cdc_acm 28803 0
    mii 13934 1 usbnet
    cdc_wdm 19053 0
    rfcomm 69160 8
    bnep 19624 2
    bluetooth 391136 22 bnep,btusb,rfcomm
    binfmt_misc 17468 1
    coretemp 13435 0
    kvm_intel 143148 0
    kvm 451729 1 kvm_intel
    thinkpad_acpi 81013 0
    nvram 14411 1 thinkpad_acpi
    serio_raw 13462 0
    arc4 12608 2
    snd_seq_midi 13324 0
    snd_seq_midi_event 14899 1 snd_seq_midi
    snd_hda_codec_conexant 57441 1
    iwldvm 232285 0
    snd_hda_intel 56451 3
    mac80211 630653 1 iwldvm
    snd_hda_codec 192906 2 snd_hda_codec_conexant,snd_hda_intel
    snd_hwdep 13602 1 snd_hda_codec
    snd_rawmidi 30144 1 snd_seq_midi
    lpc_ich 21080 0
    iwlwifi 169932 1 iwldvm
    snd_seq 61560 2 snd_seq_midi_event,snd_seq_midi
    snd_pcm 102099 2 snd_hda_codec,snd_hda_intel
    mei_me 18627 0
    cfg80211 484040 3 iwlwifi,mac80211,iwldvm
    snd_page_alloc 18710 2 snd_pcm,snd_hda_intel
    mei 82276 1 mei_me
    snd_seq_device 14497 3 snd_seq,snd_rawmidi,snd_seq_midi
    snd_timer 29482 2 snd_pcm,snd_seq
    snd 69322 17 snd_hwdep,snd_timer,snd_hda_codec_conexant,snd_pcm,snd_seq,snd_rawmidi,snd_hda_codec,snd_hda_intel,thinkpad_acpi,snd_seq_device,snd_seq_midi
    soundcore 12680 1 snd
    parport_pc 32701 0
    ppdev 17671 0
    mac_hid 13205 0
    tp_smapi 28367 0
    thinkpad_ec 14449 1 tp_smapi
    lp 17759 0
    parport 42348 3 lp,ppdev,parport_pc
    i915 783961 2
    psmouse 106714 0
    ahci 25819 3
    libahci 32716 1 ahci
    i2c_algo_bit 13413 1 i915
    e1000e 254433 0
    drm_kms_helper 55071 1 i915
    drm 303102 3 i915,drm_kms_helper
    ptp 18933 1 e1000e
    pps_core 19382 1 ptp
    video 19476 1 i915
    wmi 19177 0
    and a list of the newly loaded modules:
    user@1-ubuntu:~$ diff before <(lsmod)
    1a2
    > usb_storage 62209 0
    Now, on my Arch machine the situation is as follows when the card is plugged in:
    user@3-arch:~$ uname -r
    3.17.2-1-ARCH
    user@3-arch:~$ sudo udevadm monitor -k
    monitor will print the received events for:
    KERNEL - the kernel uevent
    user@3-arch:~$ lsmod
    Module Size Used by
    sr_mod 21903 0
    cdrom 47479 1 sr_mod
    hid_generic 12393 0
    usbhid 48603 0
    hid 102220 2 hid_generic,usbhid
    cdc_ether 12564 0
    usbnet 34978 1 cdc_ether
    cdc_acm 30362 0
    cdc_wdm 17427 0
    mii 12675 1 usbnet
    ctr 12927 0
    ccm 17534 0
    fuse 87410 3
    joydev 17063 0
    wacom_w8001 12706 0
    serport 12842 1
    mousedev 17272 0
    iTCO_wdt 12831 0
    iTCO_vendor_support 12649 1 iTCO_wdt
    coretemp 12820 0
    kvm 417429 0
    pcspkr 12595 0
    psmouse 107214 0
    evdev 21544 20
    mac_hid 12633 0
    serio_raw 12849 0
    i2c_i801 16965 0
    snd_hda_codec_conexant 21835 1
    snd_hda_codec_generic 63126 1 snd_hda_codec_conexant
    arc4 12536 2
    iwldvm 184847 0
    mac80211 604456 1 iwldvm
    i915 905750 2
    lpc_ich 20768 0
    iwlwifi 156837 1 iwldvm
    snd_hda_intel 26387 0
    snd_hda_controller 26938 1 snd_hda_intel
    cfg80211 445286 3 iwlwifi,mac80211,iwldvm
    thinkpad_acpi 69074 0
    e1000e 215686 0
    snd_hda_codec 108536 4 snd_hda_codec_conexant,snd_hda_codec_generic,snd_hda_intel,snd_hda_controller
    drm_kms_helper 80934 1 i915
    shpchp 35210 0
    snd_hwdep 17244 1 snd_hda_codec
    snd_pcm 88487 3 snd_hda_codec,snd_hda_intel,snd_hda_controller
    ptp 17692 1 e1000e
    pps_core 17225 1 ptp
    snd_timer 26614 1 snd_pcm
    wmi 17339 0
    drm 259106 4 i915,drm_kms_helper
    nvram 13034 1 thinkpad_acpi
    thermal 17559 0
    snd 73436 8 snd_hwdep,snd_timer,snd_hda_codec_conexant,snd_pcm,snd_hda_codec_generic,snd_hda_codec,snd_hda_intel,thinkpad_acpi
    soundcore 13031 2 snd,snd_hda_codec
    led_class 12859 2 iwldvm,thinkpad_acpi
    rfkill 18867 3 cfg80211,thinkpad_acpi
    ac 12715 0
    hwmon 12930 2 coretemp,thinkpad_acpi
    acpi_cpufreq 17218 1
    battery 17452 0
    i2c_algo_bit 12744 1 i915
    mei_me 17900 0
    tpm_tis 17182 0
    i2c_core 50152 5 drm,i915,i2c_i801,drm_kms_helper,i2c_algo_bit
    tpm 31467 1 tpm_tis
    mei 75079 1 mei_me
    intel_agp 17432 0
    intel_gtt 17848 3 i915,intel_agp
    video 18043 1 i915
    processor 27777 3 acpi_cpufreq
    button 12953 1 i915
    sch_fq_codel 17343 6
    tp_smapi 27621 0
    thinkpad_ec 12813 1 tp_smapi
    ext4 497696 3
    crc16 12343 1 ext4
    mbcache 17171 1 ext4
    jbd2 86417 1 ext4
    sha256_ssse3 25692 2
    sha256_generic 16804 1 sha256_ssse3
    ecb 12737 0
    cbc 12696 1
    algif_skcipher 17051 0
    af_alg 12988 1 algif_skcipher
    dm_crypt 22551 1
    dm_mod 93490 15 dm_crypt
    sd_mod 44398 3
    crct10dif_generic 12581 1
    crc_t10dif 12431 1 sd_mod
    crct10dif_common 12356 2 crct10dif_generic,crc_t10dif
    atkbd 22254 0
    libps2 12739 2 atkbd,psmouse
    ata_generic 12490 0
    ahci 33291 2
    libahci 27158 1 ahci
    pata_acpi 12771 0
    uhci_hcd 43507 0
    ehci_pci 12512 0
    ehci_hcd 69939 1 ehci_pci
    libata 181518 4 ahci,pata_acpi,libahci,ata_generic
    usbcore 199381 9 uhci_hcd,ehci_hcd,ehci_pci,usbhid,usbnet,cdc_acm,cdc_wdm,cdc_ether
    usb_common 12440 1 usbcore
    scsi_mod 147543 3 libata,sd_mod,sr_mod
    i8042 18002 1 libps2
    serio 18282 9 serio_raw,atkbd,i8042,serport,wacom_w8001,psmouse
    Sticking to my suspicion that this might just be a USB related issue and eSata might still work due to some sort of passthrough, I attached the very eSata drive that I could mount on Ubuntu. It did not work.
    I then researched and found this blog post: http://okomestudio.net/biboroku/?p=1360
    So I downloaded the pkgbuild for the arch linux core kernel and checked the config. It matched the recommendations.
    Another hint I found was to unload acpiphp and force-reload it. However, this tip does not seem to apply to the arch kernel:
    [user@3-arch:~$ sudo rmmod acpiphp
    rmmod: ERROR: Module acpiphp is builtin.
    Anyone any idea on how to make the card work?
    Thank you!
    Last edited by archery1234 (2014-11-15 10:46:35)

    For anyone else seeking help on that: Card slot was deactivated in 2/3 Bioses.

  • This warning appears in Event Viewer every day on T530 w/ Win7-64

    Event 37, Kernel-Processor-Power
    The speed of processor [0,1,2,3] in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 86398 seconds since the last report.
    Can anything be done to fix this?

    I assume you are running on AC power. Look in the power manager. My settings are set to "maximum performance", when running on AC. Also, the CPU can be slowed down if you are running too hot. If the power settings were already set to maximum performance, run a temperature monitor program. I use TPFANCONTROL (free)

  • ¿Why my Windows 7 Pro have Kernel-Power error 41?

    Hello, good morning, I installed Windows 7 Professional Edition and each time freezes and restarts, I open the event viewer and I see several critical events would like to see if someone can help me. They say "Event 41, Kernel-Power", I occasionally
    happen ... especially when browsing internet through a USB modem ZTE MF-193, but I have also occurred trying to play games like Half Life 1 or Warcraft 3. 
    My pc specs are as follows. According to the Direct X diagnostics are: 
    Time of this report: 4/5/2014, 07:24:38
           Machine name: FAMILY-PC
       Operating System: Windows 7 Professional 64-bit (6.1, Build 7600) (7600.win7_rtm.090713-1255)
               Language: Spanish (Regional Setting: Spanish)
    System Manufacturer: Intel
           System Model: DG41WV
                   BIOS: BIOS Date: 01/07/09 15:28:41 Ver: 08.00.10
              Processor: Pentium(R) Dual-Core  CPU      E5700  @ 3.00GHz (2 CPUs), ~3.0GHz
                 Memory: 2048MB RAM
    Available OS Memory: 1980MB RAM
              Page File: 1317MB used, 2643MB available
            Windows Dir: C:\Windows
        DirectX Version: DirectX 11
    DX Setup Parameters: Not found
       User DPI Setting: Using System DPI
     System DPI Setting: 96 DPI (100 percent)
        DWM DPI Scaling: Disabled
         DxDiag Version: 6.01.7600.16385 32bit Unicode
    System events in XML view say: 
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> 
      <EventID>41</EventID> 
      <Version>2</Version> 
      <Level>1</Level> 
      <Task>63</Task> 
      <Opcode>0</Opcode> 
      <Keywords>0x8000000000000002</Keywords> 
      <TimeCreated SystemTime="2014-04-05T11:11:43.116009800Z" /> 
      <EventRecordID>16184</EventRecordID> 
      <Correlation /> 
      <Execution ProcessID="4" ThreadID="8" /> 
      <Channel>System</Channel> 
      <Computer>Familia-PC</Computer> 
      <Security UserID="S-1-5-18" /> 
      </System>
    - <EventData>
      <Data Name="BugcheckCode">278</Data> 
      <Data Name="BugcheckParameter1">0xfffffa8001e65010</Data> 
      <Data Name="BugcheckParameter2">0xfffff88007225cb0</Data> 
      <Data Name="BugcheckParameter3">0x0</Data> 
      <Data Name="BugcheckParameter4">0xc</Data> 
      <Data Name="SleepInProgress">false</Data> 
      <Data Name="PowerButtonTimestamp">0</Data> 
      </EventData>
      </Event>
    another says:
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> 
      <EventID>41</EventID> 
      <Version>2</Version> 
      <Level>1</Level> 
      <Task>63</Task> 
      <Opcode>0</Opcode> 
      <Keywords>0x8000000000000002</Keywords> 
      <TimeCreated SystemTime="2014-03-27T10:45:49.941213100Z" /> 
      <EventRecordID>9491</EventRecordID> 
      <Correlation /> 
      <Execution ProcessID="4" ThreadID="8" /> 
      <Channel>System</Channel> 
      <Computer>Familia-PC</Computer> 
      <Security UserID="S-1-5-18" /> 
      </System>
    - <EventData>
      <Data Name="BugcheckCode">59</Data> 
      <Data Name="BugcheckParameter1">0xc0000005</Data> 
      <Data Name="BugcheckParameter2">0xfffff96000686d15</Data> 
      <Data Name="BugcheckParameter3">0xfffff88002a200d0</Data> 
      <Data Name="BugcheckParameter4">0x0</Data> 
      <Data Name="SleepInProgress">false</Data> 
      <Data Name="PowerButtonTimestamp">0</Data> 
      </EventData>
      </Event>
    And the latest says: 
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> 
      <EventID>41</EventID> 
      <Version>2</Version> 
      <Level>1</Level> 
      <Task>63</Task> 
      <Opcode>0</Opcode> 
      <Keywords>0x8000000000000002</Keywords> 
      <TimeCreated SystemTime="2014-04-03T15:16:12.334410200Z" /> 
      <EventRecordID>14621</EventRecordID> 
      <Correlation /> 
      <Execution ProcessID="4" ThreadID="8" /> 
      <Channel>System</Channel> 
      <Computer>Familia-PC</Computer> 
      <Security UserID="S-1-5-18" /> 
      </System>
    - <EventData>
      <Data Name="BugcheckCode">0</Data> 
      <Data Name="BugcheckParameter1">0x0</Data> 
      <Data Name="BugcheckParameter2">0x0</Data> 
      <Data Name="BugcheckParameter3">0x0</Data> 
      <Data Name="BugcheckParameter4">0x0</Data> 
      <Data Name="SleepInProgress">false</Data> 
      <Data Name="PowerButtonTimestamp">0</Data> 
      </EventData>
      </Event>
    I sincerely appreciate your support, I really like windows 7 but Windows XP I never thought such failures in the last hour I had 2 of them in the last 24 hours I've had 4 and in the last 7 days I've had 25. 
    It is a very distressing situation.

    YM
    These were called BCC116 and are related to a video timeout/failure
    "It's not a true crash, in the sense that the Blue Screen was initiated only because the combination of video driver and video hardware was being unresponsive, and not because of any synchronous processing exception".
    Since Vista, the "Timeout Detection and Recovery" (TDR) components of the OS video subsystem have been capable of doing some truly impressive things to try to recover from issues which would have caused earlier OS's like XP to crash.
    As a last resort, the TDR subsystem sends the video driver a "please restart yourself now!" command and waits a few seconds.
    If there's no response, the OS concludes that the video driver/hardware combo has truly collapsed in a heap, and it fires off that stop 0x116 BSOD.
    The first step is to install the newest video driver.
    If playing with video driver versions hasn't helped, make sure the box is not overheating.
     Try removing a side panel and aiming a big mains fan straight at the motherboard and GPU.
     Run it like that for a few hours or days - long enough to ascertain whether cooler temperatures make a difference.
    If so, it might be as simple as dust buildup and subsequently inadequate cooling.
    I would download cpu-z and gpu-z (both free) and keep an eye on the video temps
    For more information please read this blog  http://captaindbg.com/bug-check-0x116-video_tdr_error-troubleshooting-tips/
    http://msdn.microsoft.com/en-us/library/windows/hardware/ff557263%28v=vs.85%29.aspx
    Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    Loading Dump File [C:\Users\Ken\Desktop\040514-15771-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    ************* Symbol Path validation summary **************
    Response Time (ms) Location
    Deferred SRV*H:\symbols*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*H:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Machine Name:
    Kernel base = 0xfffff800`02a53000 PsLoadedModuleList = 0xfffff800`02c90e50
    Debug session time: Sat Apr 5 07:08:35.611 2014 (UTC - 4:00)
    System Uptime: 0 days 0:25:10.484
    Loading Kernel Symbols
    Loading User Symbols
    Loading unloaded module list
    * Bugcheck Analysis *
    Use !analyze -v to get detailed debugging information.
    BugCheck 116, {fffffa8001e65010, fffff88007225cb0, 0, c}
    Unable to load image \SystemRoot\system32\DRIVERS\igdkmd64.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for igdkmd64.sys
    *** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
    Probably caused by : igdkmd64.sys ( igdkmd64+23cb0 )
    Followup: MachineOwner
    1: kd> !analyze -v
    * Bugcheck Analysis *
    VIDEO_TDR_FAILURE (116)
    Attempt to reset the display driver and recover from timeout failed.
    Arguments:
    Arg1: fffffa8001e65010, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
    Arg2: fffff88007225cb0, The pointer into responsible device driver module (e.g. owner tag).
    Arg3: 0000000000000000, Optional error code (NTSTATUS) of the last failed operation.
    Arg4: 000000000000000c, Optional internal context dependent data.
    Debugging Details:
    FAULTING_IP:
    igdkmd64+23cb0
    fffff880`07225cb0 4889542410 mov qword ptr [rsp+10h],rdx
    DEFAULT_BUCKET_ID: GRAPHICS_DRIVER_TDR_FAULT
    CUSTOMER_CRASH_COUNT: 1
    BUGCHECK_STR: 0x116
    PROCESS_NAME: firefox.exe
    CURRENT_IRQL: 0
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    STACK_TEXT:
    fffff880`061000f8 fffff880`06d3ccbc : 00000000`00000116 fffffa80`01e65010 fffff880`07225cb0 00000000`00000000 : nt!KeBugCheckEx
    fffff880`06100100 fffff880`06d3c938 : fffff880`07225cb0 fffffa80`01e65010 fffffa80`034ebd50 fffffa80`03253010 : dxgkrnl!TdrBugcheckOnTimeout+0xec
    fffff880`06100140 fffff880`06c0ff07 : fffffa80`01e65010 00000000`00017a38 fffffa80`034ebd50 fffffa80`03253010 : dxgkrnl!TdrIsRecoveryRequired+0x114
    fffff880`06100170 fffff880`06c3dd7e : fffffa80`ffffffff 00000000`000179b8 fffff880`061002c0 00000000`00000000 : dxgmms1!VidSchiReportHwHang+0x40b
    fffff880`06100250 fffff880`06c23bb1 : fffffa80`034ee000 ffffffff`feced300 00000000`00000000 00000000`00000001 : dxgmms1!VidSchWaitForCompletionEvent+0x196
    fffff880`06100290 fffff880`06c3091c : 00000000`0000fea9 00000000`00000000 fffff880`06100798 fffffa80`01ef5010 : dxgmms1!VIDMM_GLOBAL::xWaitForAllEngines+0x1e9
    fffff880`06100390 fffff800`02f2fd38 : ffffffff`ffffffff ffffffff`ffffffff 00000000`00000000 00000000`00000000 : dxgmms1!VIDMM_MEMORY_SEGMENT::RotateCopyCallback+0xe0
    fffff880`06100400 fffff880`06c3594c : 00000000`0f5c0000 fffff880`061006d8 00000000`00000000 fffff8a0`00000002 : nt!MmRotatePhysicalView+0x6e8
    fffff880`06100640 fffff880`06c2feb8 : fffffa80`034eec60 00000000`00100000 00000000`00000000 00000000`00000000 : dxgmms1!VIDMM_PROCESS_HEAP::Rotate+0x148
    fffff880`061006d0 fffff880`06c21904 : fffffa80`034fdec0 fffff8a0`03643b00 00000000`00000001 fffff880`06100800 : dxgmms1!VIDMM_MEMORY_SEGMENT::EvictResource+0x6f8
    fffff880`06100840 fffff880`06c217e3 : fffffa80`034ee000 fffff880`06c2170a 00000000`00000000 fffffa80`02b253c0 : dxgmms1!VIDMM_GLOBAL::EvictAllAllocationInList+0x40
    fffff880`06100880 fffff880`06c1e70d : 00000000`0000005a 00000000`00000000 00000000`00000000 fffffa80`00000000 : dxgmms1!VIDMM_GLOBAL::EvictAllReclaimedAllocation+0x43
    fffff880`061008d0 fffff880`06c3865d : 00000000`00000000 fffff8a0`02dd8510 fffffa80`00000000 fffffa80`02b253c0 : dxgmms1!VIDMM_GLOBAL::PrepareDmaBuffer+0xc79
    fffff880`06100aa0 fffff880`06c38398 : fffff800`0401c080 fffff880`06c37d00 fffffa80`00000000 fffffa80`00000000 : dxgmms1!VidSchiSubmitRenderCommand+0x241
    fffff880`06100c90 fffff880`06c37e96 : 00000000`00000000 fffffa80`019de500 00000000`00000080 fffffa80`03253010 : dxgmms1!VidSchiSubmitQueueCommand+0x50
    fffff880`06100cc0 fffff800`02d68166 : 00000000`01b39914 fffffa80`03252620 fffffa80`017e8840 fffffa80`03252620 : dxgmms1!VidSchiWorkerThread+0xd6
    fffff880`06100d00 fffff800`02aa3486 : fffff800`02c3de80 fffffa80`03252620 fffff800`02c4bc40 fffff880`01246a90 : nt!PspSystemThreadStartup+0x5a
    fffff880`06100d40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
    STACK_COMMAND: .bugcheck ; kb
    FOLLOWUP_IP:
    igdkmd64+23cb0
    fffff880`07225cb0 4889542410 mov qword ptr [rsp+10h],rdx
    SYMBOL_NAME: igdkmd64+23cb0
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: igdkmd64
    IMAGE_NAME: igdkmd64.sys
    DEBUG_FLR_IMAGE_TIMESTAMP: 4a01d55b
    FAILURE_BUCKET_ID: X64_0x116_IMAGE_igdkmd64.sys
    BUCKET_ID: X64_0x116_IMAGE_igdkmd64.sys
    ANALYSIS_SOURCE: KM
    FAILURE_ID_HASH_STRING: km:x64_0x116_image_igdkmd64.sys
    FAILURE_ID_HASH: {88759713-193a-fb8a-dab9-6846ea1a48f2}
    Followup: MachineOwner
    Wanikiya and Dyami--Team Zigzag

Maybe you are looking for