What does BSOD 379 (PROFILER_CONFIGURATION_ILLEGAL) mean?

 
Could be also:
ConstantTypeOS
ERROR_CLOUD_FILE_NOT_SUPPORTEDWin32 errorWindows
Previous Next
CLUSTER_CLUSPORT_STATUS_IO_TIMEOUT_LIVEDUMP PDC_LOCK_WATCHDOG_LIVEDUMP

PROFILER_CONFIGURATION_ILLEGAL

Illegal kernel profiler configuration for PROFILER_CONFIGURATION_ILLEGAL

PROFILER_CONFIGURATION_ILLEGAL is bug check code 0x0000017B. This bug check points at kernel profiling or tracing configuration that the system rejected as unsafe or inconsistent. It should be read as a configuration and instrumentation problem, not as a normal application performance issue.

How to read it in a dump for PROFILER_CONFIGURATION_ILLEGAL

  • Identify active kernel profilers, ETW sessions, sampling sources, and performance counter configuration.
  • The failure can be caused by unsupported sampling mode, bad buffer setup, or incompatible profiling flags.
  • Third-party profilers and security tools can be involved if they program low-level counters.

What to check for PROFILER_CONFIGURATION_ILLEGAL

  • Disable or update the profiler or monitoring driver that is active in the dump.
  • Check ETW/perf counter configuration and recent tracing changes.
  • Reproduce with symbols and verifier if a driver programs processor performance facilities directly.

References for PROFILER_CONFIGURATION_ILLEGAL

Dump evidence for PROFILER_CONFIGURATION_ILLEGAL

For PROFILER_CONFIGURATION_ILLEGAL, preserve the complete dump, the four bug-check parameters, the exact Windows build, loaded-module list, and the event timeline immediately before the stop. AllStat summarizes the condition as “PROFILER_CONFIGURATION_ILLEGAL”; that sentence identifies the failure class, while the parameters and stack determine which object, driver, processor, or subsystem instance was involved.

Analysis order for PROFILER_CONFIGURATION_ILLEGAL

  • Run WinDbg !analyze -v, then inspect the documented meaning of each PROFILER_CONFIGURATION_ILLEGAL parameter instead of relying only on the probably-caused-by line.
  • For PROFILER_CONFIGURATION_ILLEGAL, find the earliest abnormal event: driver update, firmware change, device reset, storage error, verifier report, resource exhaustion, or application hang connected with profiler / configuration / illegal.
  • For PROFILER_CONFIGURATION_ILLEGAL, keep third-party filter, security, storage, graphics, and virtualization drivers in the module inventory; removing evidence before dump analysis can obscure the responsible path.

Do not repeatedly reboot a machine affected by PROFILER_CONFIGURATION_ILLEGAL before collecting the dump and event logs. For PROFILER_CONFIGURATION_ILLEGAL, recovery actions should follow the component identified by the stack and parameters, not merely the symbolic stop-code name.

Dump evidence for PROFILER_CONFIGURATION_ILLEGAL

For PROFILER_CONFIGURATION_ILLEGAL, preserve the complete dump, the four bug-check parameters, the exact Windows build, loaded-module list, and the event timeline immediately before the stop. AllStat summarizes the condition as “PROFILER_CONFIGURATION_ILLEGAL”; that sentence identifies the failure class, while the parameters and stack determine which object, driver, processor, or subsystem instance was involved.

Analysis order for PROFILER_CONFIGURATION_ILLEGAL

  • Run WinDbg !analyze -v, then inspect the documented meaning of each PROFILER_CONFIGURATION_ILLEGAL parameter instead of relying only on the probably-caused-by line.
  • For PROFILER_CONFIGURATION_ILLEGAL, find the earliest abnormal event: driver update, firmware change, device reset, storage error, verifier report, resource exhaustion, or application hang connected with profiler / configuration / illegal.
  • For PROFILER_CONFIGURATION_ILLEGAL, keep third-party filter, security, storage, graphics, and virtualization drivers in the module inventory; removing evidence before dump analysis can obscure the responsible path.

Do not repeatedly reboot a machine affected by PROFILER_CONFIGURATION_ILLEGAL before collecting the dump and event logs. For PROFILER_CONFIGURATION_ILLEGAL, recovery actions should follow the component identified by the stack and parameters, not merely the symbolic stop-code name.


Looking for a different code? Search another status or error code.