How to Fix DPC Watchdog Violation on Windows 11 (0x133)
✓ Published July 26, 2026DPC Watchdog Violation, shown as DPC_WATCHDOG_VIOLATION, is Windows stop code 0x00000133. Microsoft says it appears when one deferred procedure call or interrupt routine runs too long, or when Windows spends too long at a high interrupt level. In everyday terms, a low-level driver or device held the system's attention for longer than Windows allowed.
The code does not automatically prove that the SSD, SATA controller, or Windows installation is bad. Modern cases can involve graphics, NVMe/storage, Wi-Fi, Bluetooth, audio, USB devices, docks, chipset software, firmware, or a recently changed driver. The fastest safe route is to match the crash trigger and inspect the evidence before changing anything.
Do not replace a SATA/AHCI driver or change RAID/AHCI mode as a universal fix. That old recipe applies only to a specific storage-controller case. On a different PC it can remove the correct OEM driver, trigger BitLocker recovery, or make Windows unbootable.
Choose your path
- One isolated crash: restart, install supported Windows updates, record the code, and monitor. Stop if it does not return.
- A repeatable crash: preserve recent dumps, use the trigger table below, and update or roll back only the matching driver.
- A boot loop or unstable drive: use Windows Recovery or Safe Mode. Back up first if the drive disappears or files become unreadable, then escalate with the evidence.
Match the crash trigger before trying fixes
| When it happens | Best first branch | Likely area to inspect |
|---|---|---|
| Immediately after Windows or a driver update | Check driver history and the supported rollback option | The device changed by that update; do not update every driver |
| While gaming, rendering, or connecting a monitor | Compare with one display and no dock, then check graphics and chipset drivers | GPU, display-audio, dock, USB-C, or chipset path |
| After sleep, wake, shutdown, or unplugging a device | Test without nonessential USB, Bluetooth, dock, and network hardware | A power-state transition in network, audio, USB, storage, or graphics |
| During file copies, installs, or when a drive disappears | Back up first and check the exact drive/controller evidence | Storage driver, firmware, device, connection, or power path |
| Only with one peripheral or dock attached | Disconnect that device and use its maker's exact support page | The device, cable, dock firmware, or matching driver |
| Windows is stuck in a crash loop | Use Windows Recovery and Safe Mode; remove only the recent change | A boot-start driver, recent update, or new hardware |
| Several different stop codes appear | Return overclocks to supported defaults and preserve several dumps | A wider driver, memory, motherboard, heat, power, or storage problem |
What stop code 0x133 actually tells you
Microsoft's 0x133 bug-check documentation describes two versions of the failure:
- Argument 1 equals 0: one DPC or interrupt service routine exceeded its time allowance. The active stack can often identify the component.
- Argument 1 equals 1: Windows cumulatively spent too long at
DISPATCH_LEVELor above. Several driver events may contribute, so the result can require more careful stack and trace analysis.
You do not need to understand kernel programming to use that distinction. It explains why a generic checklist cannot identify the cause and why the same stop code can appear with graphics, storage, network, audio, or USB activity. Microsoft says faulty driver code is the usual cause and recommends checking the System log, any named driver, new hardware, and dump evidence.
Diagnose and fix DPC Watchdog Violation in this order
Preserve the evidence before cleanup
Write down the crash time, what the PC was doing, and whether the same trigger repeats. Microsoft's current stop-code guidance shows that Windows 11 24H2 and later may use a black error screen instead of blue; it is still the same type of Windows stop error.
- Photograph any What failed filename shown under the stop code.
- If
%SystemRoot%\Minidumpcontains recent.dmpfiles, copy them to a private folder before cleanup, restore, or reset. On a standard installation this is normallyC:\Windows\Minidump. - Do not delete or rename a
.sysfile merely because a dump names it. - Crash dumps may contain system or memory data. Do not post them publicly; share them only with a trusted support channel.
Remove the newest variable, not half the PC
Shut down and disconnect only nonessential hardware added before the first crash: a dock, capture card, external drive, USB audio device, controller, Bluetooth adapter, or second display. Keep the keyboard, mouse, primary display, and system drive connected.
- If the crash stops, reconnect one item at a time and use the device maker's supported driver or firmware path.
- If you recently enabled CPU, GPU, XMP, or EXPO tuning, return it to the PC or motherboard maker's supported defaults for the comparison test.
- Do not reset the BIOS, flash firmware, or change storage mode just to see what happens.
Install Windows updates and check free space
Open Settings → Windows Update, install supported updates, and restart. In its consumer stop-error checklist, Microsoft also recommends keeping roughly 10% to 15% free on the Windows drive.
- Install the standard Windows updates first. Review optional driver updates only if they match the device branch you are testing.
- If the first crash appeared immediately after an update, do not assume a newer driver is always better; the rollback branch in the next step may be the safer test.
- Standard Windows 10 support ended October 14, 2025. If the PC is still on Windows 10 without an eligible supported servicing path, plan migration rather than expecting every compatibility issue to receive a new fix.
Target the driver that matches the trigger
Right-click Start → Device Manager. Open the category connected to the crash: Display adapters, Storage controllers, Network adapters, Sound, video and game controllers, or Universal Serial Bus controllers. In the device's Properties → Driver tab, record its provider, date, and version.
- Use Windows Update for recommended drivers. If it has no suitable update, use the exact PC, motherboard, GPU, dock, or device manufacturer's official support page.
- If crashes began after a specific driver update, select Roll Back Driver when Windows offers it, then restart and retest the same trigger.
- On laptops, prefer the PC maker's tested graphics, chipset, and storage package when it differs from a generic component-driver package.
- Avoid third-party driver-updater tools. Do not update every device at once; you will lose the useful before-and-after comparison.
Use the correct symptom-specific branch
After a Windows or driver update
Use the matching device's Driver tab to compare the provider, version, and date. If the first crash followed that exact update, use the supported rollback option before installing unrelated drivers or repair tools.
While gaming or using an external monitor
Test one display with no dock, then update or roll back the exact graphics, chipset, or dock package. Intel documents one DPC Watchdog case triggered by connecting an external monitor to a laptop and points first to Windows Update and the matching graphics driver. That is why the trigger matters more than an old assumption that every 0x133 crash is SATA.
After sleep or wake
Temporarily remove nonessential Bluetooth, USB, audio, network, and dock devices. Compare them one at a time. Permanently disabling sleep can hide the trigger without identifying the device whose power-state change is delayed.
During file copies or when an SSD/NVMe disappears
Back up first, then check the exact drive model, same-time storage events, and its maker's diagnostic or support page. Do not start with chkdsk /r, a firmware flash, a generic SATA controller, or a RAID/AHCI mode change.
When one peripheral or dock triggers the crash
Disconnect it, replace its cable if applicable, and install only its supported driver or firmware. Removing unrelated devices makes the comparison less useful.
Use Safe Mode when normal Windows is unstable
Open Settings → System → Recovery → Advanced startup → Restart now. In Windows Recovery, choose Troubleshoot → Advanced options → Startup Settings → Restart, then choose Safe Mode. If Windows cannot reach the desktop, use the same Startup Settings path from its recovery screen.
- If Safe Mode is stable, a third-party driver, service, startup component, or optional device becomes more likely.
- Use Safe Mode to roll back the specific recent driver or uninstall the exact recent software change.
- Safe Mode stability narrows the branch; it does not identify the guilty component by itself.
Build a timeline in Reliability History and Event Viewer
Press Win + R, enter perfmon /rel, and review the day of the crash. Then open eventvwr.msc and check Windows Logs → System around the recorded time.
- Record the event source, ID, time, and full message for repeating device, controller, display, network, or storage errors.
- Kernel-Power Event ID 41 confirms Windows did not shut down cleanly; it does not by itself identify the original cause.
- Compare at least two crashes. The same nearby device event is more useful than a single unrelated warning.
Compare minidumps with Microsoft's WinDbg
For repeating crashes, install Microsoft's current WinDbg, open a copied dump from %SystemRoot%\Minidump, and enter !analyze -v in the command window. Microsoft's tool reports the bug-check arguments and the stack that was active when Windows stopped.
- Record
MODULE_NAME,IMAGE_NAME,FAILURE_BUCKET_ID, Argument 1, and the first clearly named third-party modules in the stack when those fields are present. - Compare two or more dumps. One repeated third-party module is more persuasive than a different name in every crash.
- If
ntoskrnl.exeis named, do not replace or delete it. It is the Windows kernel and is often where the delayed condition becomes visible, not the original faulty device. - Argument 1 of 0 points to one overlong DPC/ISR; Argument 1 of 1 describes excessive cumulative high-IRQL time. Both still require the stack and trigger to find the responsible component.
Dump A: Arg1 0 · MODULE_NAME examplevendor · IMAGE_NAME exampledriver.sysDump B: Arg1 0 · MODULE_NAME examplevendor · IMAGE_NAME exampledriver.sysThe same third-party module in two dumps, beside a matching device trigger, gives you a focused driver branch to verify. A single result that names only
ntoskrnl.exe does not provide the same evidence.Repair Windows files only when that branch fits
If Windows Update also fails, protected Windows files are damaged, or logs point to component corruption, open Terminal (Admin) and use Microsoft's documented order:
- Run
DISM.exe /Online /Cleanup-Image /RestoreHealth. - After DISM finishes successfully, run
sfc /scannow. - Restart and repeat the original safe trigger.
DISM normally uses Windows Update as its repair source. If it reports that source files could not be found, or Windows Update is unavailable, use Microsoft's documented known-good repair-source method; do not paste a random /Source path from another PC.
If storage evidence specifically suggests file-system damage and important files are already safe, start with chkdsk C: /scan. Do not use /f /r /x as a routine first step; those options can force repairs, dismount a volume, and perform a much longer surface scan without proving which driver caused 0x133.
Use recovery as the last software branch
If the crash began after a known update or installation and targeted rollback is unavailable, review Microsoft's Windows recovery options and choose the least destructive match. Confirm that important files and the BitLocker recovery key are safe first.
- System Restore can undo a recent system-level change when a suitable restore point exists.
- A data-preserving in-place reinstall from installation media must be started from inside a running Windows session, with Keep personal files and apps selected. Booting from the media is the clean-install path and can remove files, apps, and settings. Neither path repairs faulty hardware or incompatible firmware.
- Reset or clean installation is a last resort. A crash that continues during Windows setup strongly raises the need for hardware, firmware, or boot-driver diagnosis.
Popular DPC Watchdog advice to avoid
.sys file, disabling security software, or using a third-party driver updater as a universal fix.Also avoid running Driver Verifier on a normal home PC without a recovery and debugging plan. Microsoft warns that Driver Verifier deliberately stresses kernel drivers, can cause additional crashes, and is intended for testing and debugging systems. Dump inspection is the safer first advanced step.
Primary references: Microsoft's DPC_WATCHDOG_VIOLATION 0x133 documentation, current consumer stop-code guidance, driver update and rollback instructions, WinDbg dump-opening guide, the !analyze reference, Microsoft's Driver Verifier warning, and Intel's external-monitor 0x133 example. Guidance was reviewed for Windows 11; menu labels can vary by build and device maker.
Frequently asked questions
Is DPC Watchdog Violation always caused by an SSD?
No. Storage drivers and devices can cause it, but Microsoft describes 0x133 as a delayed DPC/ISR or prolonged high interrupt level. Graphics, network, audio, USB, dock, chipset, storage, firmware, and other low-level components can all fit that mechanism. Use the trigger and dump evidence.
Why does DPC Watchdog Violation happen while gaming?
Gaming can stress graphics, audio, storage, network, USB controllers, heat, and power at the same time. Start with the exact trigger, recent GPU/chipset changes, external displays or docks, and repeated dump modules; the game itself is not automatically the cause.
What if WinDbg says ntoskrnl.exe caused the crash?
ntoskrnl.exe is the Windows kernel. Its presence often shows where Windows detected the timeout, not which third-party driver created it. Compare the stack and several dumps for a repeated device-driver module instead of deleting or replacing the kernel file.
Should I change iaStorA.sys to storahci.sys?
Not as a universal fix. That advice targets a specific legacy SATA-controller situation. Many modern PCs use NVMe or OEM RAID/storage packages. Replacing the controller driver without exact evidence and manufacturer guidance can prevent Windows from booting.
Can SFC fix DPC Watchdog Violation?
SFC can help if protected Windows-file corruption is part of the problem. It cannot identify or repair a delayed GPU, network, storage, audio, USB, or dock driver, so interpret its result within the correct branch.
Is DPC Watchdog Violation a virus?
The stop code does not by itself indicate malware. It identifies a timing failure at a low system level. Keep Windows Security enabled, but investigate the driver, device, update, and dump timeline rather than installing a random cleaner.
Why is the Windows 11 error screen black instead of blue?
Microsoft says the color and message vary by Windows version. Windows 11 24H2 and later can show stop-code errors on a black screen; older builds may show the familiar blue screen. Record the code and any module name either way.
What should I do if Windows keeps crashing before sign-in?
Use Windows Recovery → Startup Settings → Safe Mode, remove the exact recent driver, update, software, or hardware change, and preserve any accessible dumps. Do not repeatedly force normal startup or change BIOS storage mode. Seek support if recovery is unstable or BitLocker access is unavailable.
If the screen instead says UNEXPECTED_STORE_EXCEPTION, use that storage-aware diagnostic path. If Windows Update reports Access Denied while you are trying to update a driver, see the focused 0x80070005 guide.
Send the exact stop-code details →