PAGE_FAULT_IN_NONPAGED_AREA Mavi Ekran

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8041c239bf7, Address of the instruction which caused the bugcheck
Arg3: fffff405e446ede0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.Sec
    Value: 7

    Key  : Analysis.DebugAnalysisProvider.CPP
    Value: Create: 8007007e on DESKTOP-K01TCKK

    Key  : Analysis.DebugData
    Value: CreateObject

    Key  : Analysis.DebugModel
    Value: CreateObject

    Key  : Analysis.Elapsed.Sec
    Value: 13

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 67

    Key  : Analysis.System
    Value: CreateObject


BUGCHECK_CODE:  3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff8041c239bf7

BUGCHECK_P3: fffff405e446ede0

BUGCHECK_P4: 0

CONTEXT:  fffff405e446ede0 -- (.cxr 0xfffff405e446ede0)
rax=0000000000000000 rbx=ffff9585dcca2118 rcx=ffff9585dcca2080
rdx=0000004000000180 rsi=0000004000000180 rdi=ffff9585dcca23a0
rip=fffff8041c239bf7 rsp=fffff405e446f7d0 rbp=fffff405e446fa39
r8=fffff405e446f818  r9=0000000000000000 r10=0000fffff8041c81
r11=ffff737f8aa00000 r12=ffff9585de93d300 r13=ffff9585dca20a90
r14=0000000000000004 r15=0000000000000001
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050246
nt!ExAcquirePushLockExclusiveEx+0x107:
fffff804`1c239bf7 f0480fba2e00    lock bts qword ptr [rsi],0 ds:002b:00000040`00000180=????????????????
Resetting default scope

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  LeagueClient.exe

STACK_TEXT:
fffff405`e446f7d0 fffff804`1c819531 : ffffffff`ffffffff ffff9585`00000000 ffffffff`00000000 00000040`00000000 : nt!ExAcquirePushLockExclusiveEx+0x107
fffff405`e446f810 fffff804`1c7f94c0 : ffff9585`de93d320 fffff405`e446fa39 00000000`00000000 ffff9585`d30fc980 : nt!EtwpDeleteRegistrationObject+0x181
fffff405`e446f8b0 fffff804`1c23a969 : 00000000`00000000 00000000`00000000 fffff405`e446fa39 ffff9585`de93d350 : nt!ObpRemoveObjectRoutine+0x80
fffff405`e446f910 fffff804`1c7ec267 : 00000000`00000000 ffff9585`de93d320 ffff9585`00000000 ffff9585`de93d320 : nt!ObfDereferenceObjectWithTag+0xc9
fffff405`e446f950 fffff804`1c7f155e : 00000000`00000b70 00000000`00000000 00000000`00000000 fffff405`e446fa00 : nt!ObCloseHandleTableEntry+0x2c7
fffff405`e446fa90 fffff804`1c3d2b18 : ffff9585`dcca2080 00000000`77d3dc00 fffff405`e446fb80 ffff9585`dd391de0 : nt!NtClose+0xde
fffff405`e446fb00 00000000`77c11cbc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000000`0069e8f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c11cbc


SYMBOL_NAME:  nt!ExAcquirePushLockExclusiveEx+107

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.18362.418

STACK_COMMAND:  .cxr 0xfffff405e446ede0 ; kb

BUCKET_ID_FUNC_OFFSET:  107

FAILURE_BUCKET_ID:  0x3B_c0000005_nt!ExAcquirePushLockExclusiveEx

OS_VERSION:  10.0.18362.1

BUILDLAB_STR:  19h1_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {4fe31d77-fb81-4dc1-5992-c924ac6e709a}

Followup:     MachineOwner
---------
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffae038d413a28, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8072fdf46b3, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name
*** WARNING: Unable to verify timestamp for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 5

Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-K01TCKK

Key : Analysis.DebugData
Value: CreateObject

Key : Analysis.DebugModel
Value: CreateObject

Key : Analysis.Elapsed.Sec
Value: 15

Key : Analysis.Memory.CommitPeak.Mb
Value: 71

Key : Analysis.System
Value: CreateObject


BUGCHECK_CODE: 50

BUGCHECK_P1: ffffae038d413a28

BUGCHECK_P2: 0

BUGCHECK_P3: fffff8072fdf46b3

BUGCHECK_P4: 2

READ_ADDRESS: fffff8072e3733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8072e22a3c8: Unable to get Flags value from nt!KdVersionBlock
fffff8072e22a3c8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
ffffae038d413a28

MM_INTERNAL_CODE: 2

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

TRAP_FRAME:  ffff938fee5104e0 -- (.trap 0xffff938fee5104e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffae038d413930 rbx=0000000000000000 rcx=ffffc0864acd9040
rdx=ffffc086513af6a8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8072fdf46b3 rsp=ffff938fee510670 rbp=fffff8072fe44200
r8=ffff938fee510678 r9=0000000000000009 r10=fffff8072de391e0
r11=ffff938fee510640 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
Ntfs!NtfsCommonClose+0x143:
fffff807`2fdf46b3 83b8f800000000 cmp dword ptr [rax+0F8h],0 ds:ffffae03`8d413a28=????????
Resetting default scope

STACK_TEXT:
ffff938f`ee510238 fffff807`2dfe33d6 : 00000000`00000050 ffffae03`8d413a28 00000000`00000000 ffff938f`ee5104e0 : nt!KeBugCheckEx
ffff938f`ee510240 fffff807`2de72edf : ffffae83`77600100 00000000`00000000 00000000`00000000 ffffae03`8d413a28 : nt!MiSystemFault+0x1d66a6
ffff938f`ee510340 fffff807`2dfcf320 : 00000000`00000000 ffffae83`90894960 00000000`00000000 fffff807`2fe44200 : nt!MmAccessFault+0x34f
ffff938f`ee5104e0 fffff807`2fdf46b3 : fffff807`2fe44200 ffffae83`00000000 ffff938f`00000000 ffff938f`ee5108f0 : nt!KiPageFault+0x360
ffff938f`ee510670 fffff807`2fdf3911 : ffff938f`ee5108f0 ffffae83`8f560ac0 ffffae83`8f560960 ffffc086`43edb180 : Ntfs!NtfsCommonClose+0x143
ffff938f`ee510750 fffff807`2fe44288 : 00000000`0000001c fffff807`2e38f240 00000000`00000000 00000000`00000000 : Ntfs!NtfsFspCloseInternal+0x241
ffff938f`ee5108b0 fffff807`2debd465 : ffffc086`41477c50 ffffc086`4acd9000 fffff807`2def7700 ffffc086`41477c50 : Ntfs!NtfsFspClose+0x88
ffff938f`ee510b70 fffff807`2df2a725 : ffffc086`4acd9040 00000000`00000080 ffffc086`41476300 00000067`b4bbbdff : nt!ExpWorkerThread+0x105
ffff938f`ee510c10 fffff807`2dfc886a : ffffd501`67913180 ffffc086`4acd9040 fffff807`2df2a6d0 0000026d`97eb3b38 : nt!PspSystemThreadStartup+0x55
ffff938f`ee510c60 00000000`00000000 : ffff938f`ee511000 ffff938f`ee50b000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a


SYMBOL_NAME: Ntfs!NtfsCommonClose+143

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

IMAGE_VERSION: 10.0.18362.145

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 143

FAILURE_BUCKET_ID: AV_R_INVALID_Ntfs!NtfsCommonClose

OS_VERSION: 10.0.18362.1

BUILDLAB_STR: 19h1_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {0aab76f2-fca2-c970-2a49-be4d3a31afcb}

Followup: MachineOwner
---------