环境

Windows 10 LTSC 1809 OS Build 17763.1457

问题及描述

  • Windows audio device graph lsolation 长时间占用 CPU，且间歇性短时间占用 CPU 高达 20%，理论上一个音频处理程序不可能占用这么多的 CPU
  • 在设置 setting -> 系统 system -> 声音 Sound 中，输出设备为空
  • 在声音控制面板 Sound Control Panel -> 播放设备 Playback 中，播放设备均正常
  • 在设备管理器 Device Mananger 中，无驱动异常显示，此处有异常，若通过右键计算机 computer 中的管理 manage 进入，无法在计算机管理 Computer Management (local)-> 系统工具 System Tools 中查看到设备管理器（原因可能是通过第三方软件一键关闭了 445 端口，待验证。）
  • 在事件查看器 Event Viewer 中无关键性错误，也无警告

原因

声明

由于非 Microsoft 工程师，对于 Windows 的日志确实看不太明白，所以以下均为查看 Windows 日志后猜想，如有兴趣可查看"相关日志"。

猜想

由于驱动损坏或错误，而 Windows 系统已识别或识别不完善，又由于 MSDTC 协调，不知为何却触发了录音诊断 AudioRecordingDiagnostic，但是却无法使用 Nat available。则 windows audio device graph lsolation 进入了错误循环，导致持续占用 CPU，甚至会占用 CPU 过高。

疑问

  • 录音诊断会导致播放设备消失？

解决

重启 Windows，重启 Windows 后，应该就可查系统->声音，已经可查看到播放设备，之后重新安装相关错误驱动，已正常。

MSDTC 介绍

Microsoft 分布式事务处理协调器（MSDTC）是 Windows 的重要组件，它负责协调多个资源管理器（如文件系统，消息队列和数据库）之间的事务。它通常使用 COM 和 .NET 体系结构来执行组件的事务协调角色，在MSDTC术语中将控制器称为事务管理器。

相关日志

Windows Error Reporting

事发当日，此日志最先出现，且出现一次。未找到附带文件。

Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Corporation.AudioRecordingDiagnostic.4.5
P2: Default
P3: 1.0.0.0
P4: Default
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_63b2d9c84f88c6edc25a19a4bbb5b9fb6b91059_00000000_2eaf12f7

Analysis symbol: 
Rechecking for solution: 0
Report Id: 197b4d78-1ff6-43cf-8736-968e6b3f3879
Report Status: 4
Hashed bucket: 
Cab Guid: 0

事发当日，此日志第二出现，且出现一次。

Fault bucket 127908310459, type 5
Event Name: ScriptedDiagFailure
Response: 不可用
Cab Id: 0

Problem signature:
P1: Microsoft Corporation.AudioRecordingDiagnostic.4.5
P2: Default
P3: 1.0.0.0
P4: Default
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1326.tmp.WERInternalMetadata.xml

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_63b2d9c84f88c6edc25a19a4bbb5b9fb6b91059_00000000_5da734f7

Analysis symbol: 
Rechecking for solution: 0
Report Id: 197b4d78-1ff6-43cf-8736-968e6b3f3879
Report Status: 268435456
Hashed bucket: d6988537bd12de047e1207faa5894a33
Cab Guid: 0

上述错误的附带文件：\?C:ProgramDataMicrosoftWindowsWERReportArchiveNonCritical_Microsoft Corpor_63b2d9c84f88c6edc25a19a4bbb5b9fb6b91059_00000000_5da734f7

Version=1
EventType=ScriptedDiagFailure
EventTime=132442869204236493
Consent=1
UploadTime=132442869205794948
ReportStatus=268435456
ReportIdentifier=197b4d78-1ff6-43cf-8736-968e6b3f3879
Wow64Host=34404
OriginalFilename=msdt.exe
AppSessionGuid=000038cc-0002-0053-1084-4b761688d601
TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!000012609af89c97a98668b2c93542eda78b6e67850d!msdt.exe
TargetAppVer=2046//03//11:08:36:29!17f0b8!msdt.exe
BootId=4294967295
TargetAsId=11945
UserImpactVector=269484304
IsFatal=4294967295
EtwNonCollectReason=1
Response.BucketId=d6988537bd12de047e1207faa5894a33
Response.BucketTable=5
Response.LegacyBucketId=127908310459
Response.type=4
Sig[0].Name=PackageId
Sig[0].Value=Microsoft Corporation.AudioRecordingDiagnostic.4.5
Sig[1].Name=RootCause
Sig[1].Value=Default
Sig[2].Name=Version
Sig[2].Value=1.0.0.0
Sig[3].Name=DynamicParameter
Sig[3].Value=Default
DynamicSig[1].Name=OS 版本
DynamicSig[1].Value=10.0.17763.2.0.0.256.125
DynamicSig[2].Name=区域设置 ID
DynamicSig[2].Value=2052
State[0].Key=Transport.DoneStage1
State[0].Value=1
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=17763
OsInfo[3].Key=ubr
OsInfo[3].Value=1397
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=2052
OsInfo[7].Key=geoid
OsInfo[7].Value=45
OsInfo[8].Key=sku
OsInfo[8].Value=125
OsInfo[9].Key=domain
OsInfo[9].Value=0
OsInfo[10].Key=prodsuite
OsInfo[10].Value=256
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=649196
OsInfo[15].Key=osinsty
OsInfo[15].Value=2
OsInfo[16].Key=iever
OsInfo[16].Value=11.1397.17763.0-11.0.205
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=8038
OsInfo[19].Key=svolsz
OsInfo[19].Value=60
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=180914
OsInfo[22].Key=bldtm
OsInfo[22].Value=1434
OsInfo[23].Key=bldbrch
OsInfo[23].Value=rs5_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.17763.1397.amd64fre.rs5_release.180914-1434
OsInfo[30].Key=buildflightid
OsInfo[31].Key=edition
OsInfo[31].Value=EnterpriseS
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[34].Key=containerid
OsInfo[35].Key=containertype
OsInfo[36].Key=edu
OsInfo[36].Value=0
FriendlyEventName=Problem not fixed
ConsentKey=ScriptedDiagFailure
AppName=Diagnostics Troubleshooting Wizard
AppPath=C:\Windows\system32\msdt.exe
ApplicationIdentity=00000000000000000000000000000000
MetadataHash=1348163335

RtkAudioUniversalService

日志在近期出现。

The description for Event ID 0 from source RtkAudioUniversalService cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event: 

RtkAudioUniversalService
CppWindowsService in OnStart
The description for Event ID 0 from source RtkAudioUniversalService cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event: 

RtkAudioUniversalService
CppWindowsService in OnStop

Dolby DAX3

日志出现于 3 月以前，最早出现，且出现次数最多。

The description for Event ID 0 from source Dolby DAX3 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event: 

[CaptureStream]: [audioutilities.cpp:127] AudioUtilities::GetProcessInfo: GetProcessImageFileName failed: [0x00000006]句柄无效。
最后修改：2020 年 09 月 12 日 02 : 15 PM
© 禁止转载
如果觉得文章帮助了您，您可以随意赞赏。