Ignore user-mode faults when kernel debugging

Is there an option in windbg/kd to ignore (or automatically continue over) any user-mode breaks, and stop only on kernel bugchecks?

Some backstory:
I'm trying to track down a somewhat rare issue in my USB emulation driver. I have a stress-test application which plugs & unplugs a simulated USB disk drive. This usually triggers the bug after a few hours.
The problem is, my stress test also triggers user-mode crashes in other software that I have no control over (notably WdpFs UMDF driver and some builtin indexing service).
My guess is that these crashes are unrelated bugs, although I can't really be sure, a kernel-mode bug could have surprising side-effects. Still, I'm not interested in observing these at the moment, I want to catch a kernel-mode fault.
Right now, I need to monitor the debugger and skip these "uninteresting" events. I'd like to run this unattended.

kdbgctrl -du should do the trick:

Using KDbgCtrl - Windows drivers | Microsoft Learn

Though it's been a VERY long time since I've tried changing that setting so I'll be curious to hear if it still works.

Perhaps you can disable the UM software? Disable the service / rename the .exe so it can't run etc.

Thanks @Scott_Noone_OSR - that setting did the trick.

1 Like