"Please note that I could not collect my details when the incident happened (at that time system was booted using USB drive instead of local disk)."
:-O
Is it just me that thinks that might have been the problem...
The point is to look at every bit of information you can find while reproducing the incident and see if anything jumps out. It's not very scientific - but that's the place to start.