******************************************************************************** *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: fffff880009c6d30
Arg3: fffff8808beee428
Arg4: fffff801f99351c5
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff801f98f7669 to fffff801f98f8340
STACK_TEXT:
fffff880`009c6be8 fffff801`f98f7669 : 00000000`0000007f 00000000`00000008 fffff880`009c6d30 fffff880`8beee428 : nt!KeBugCheckEx
fffff880`009c6bf0 fffff801`f98f5734 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009c6d30 fffff801`f99351c5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb4
fffff880`8beee428 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAcquireResourceSharedLite+0xe5
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiDoubleFaultAbort+b4
fffff801`f98f5734 90 nop
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiDoubleFaultAbort+b4
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 50ab0e64
BUCKET_ID_FUNC_OFFSET: b4
FAILURE_BUCKET_ID: 0x7f_8_nt!KiDoubleFaultAbort
BUCKET_ID: 0x7f_8_nt!KiDoubleFaultAbort
Followup: MachineOwner