PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffc50273349200, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80522fc9115, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 19041.1.amd64fre.vb_release.191206-1406
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd
SYSTEM_PRODUCT_NAME: MS-7C02
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 3.50
BIOS_DATE: 11/07/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd
BASEBOARD_PRODUCT: B450 TOMAHAWK MAX (MS-7C02)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffc50273349200
BUGCHECK_P2: 0
BUGCHECK_P3: fffff80522fc9115
BUGCHECK_P4: 2
READ_ADDRESS: fffff805236fb388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffc50273349200
FAULTING_IP:
nt!IopCreateFile+1d9
fffff805`22fc9115 48399424b0000000 cmp qword ptr [rsp+0B0h],rdx
MM_INTERNAL_CODE: 2
CPU_COUNT: c
CPU_MHZ: e10
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: Dauntless-Win64-Shipping.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-7KGVC4E
ANALYSIS_SESSION_TIME: 03-26-2020 20:17:52.0370
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
TRAP_FRAME: ffffc502733487c0 -- (.trap 0xffffc502733487c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=00007fffffff0000
rdx=00007fffffff0000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80522fc9115 rsp=ffffc50273348950 rbp=ffffc50273348b80
r8=0000000000000001 r9=0000000000000001 r10=0000000080100080
r11=ffffc50273348a88 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nt!IopCreateFile+0x1d9:
fffff805`22fc9115 48399424b0000000 cmp qword ptr [rsp+0B0h],rdx ss:0018:ffffc502`73348a00=0000000112e5f9c8
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80522dde677 to fffff80522d9d860
STACK_TEXT:
ffffc502`733485a8 fffff805`22dde677 : 00000000`00000050 ffffc502`73349200 00000000`00000000 ffffc502`733487c0 : nt!KeBugCheckEx
ffffc502`733485b0 fffff805`22c66508 : ffffc502`73349200 00000000`c0000016 ffffc502`733487c0 00000000`00000000 : nt!MiSystemFault+0x17f6fb
ffffc502`733486b0 fffff805`22dab91e : 00000000`00000000 00000000`00000000 ffff9104`09d1e7f0 00000000`00000000 : nt!MmAccessFault+0x218
ffffc502`733487c0 fffff805`22fc9115 : 00000000`00000000 ffffa100`bfc80180 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
ffffc502`73348950 fffff805`22fc67a8 : 00000001`12e5f9c8 fffff805`80100080 00000001`12e5fa08 00000001`12e5f9d0 : nt!IopCreateFile+0x1d9
ffffc502`73348a00 fffff805`22daf178 : 00000000`00000000 fffff805`22c82e5f 00000000`00000000 ffff9104`073e8760 : nt!NtCreateFile+0x78
ffffc502`73348a90 00007ff8`1f06b874 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000001`12e5f4f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`1f06b874
THREAD_SHA1_HASH_MOD_FUNC: 2fab1fcaddb8767786ebd8eaab6351b0639ad760
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 4c1334246181dc91dcb6a3afa04c5f2495820bac
THREAD_SHA1_HASH_MOD: 30a3e915496deaace47137d5b90c3ecc03746bf6
FOLLOWUP_IP:
nt!IopCreateFile+1d9
fffff805`22fc9115 48399424b0000000 cmp qword ptr [rsp+0B0h],rdx
FAULT_INSTR_CODE: 24943948
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!IopCreateFile+1d9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 31cf0885
IMAGE_VERSION: 10.0.19041.153
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 1d9
FAILURE_BUCKET_ID: AV_R_INVALID_nt!IopCreateFile
BUCKET_ID: AV_R_INVALID_nt!IopCreateFile
PRIMARY_PROBLEM_CLASS: AV_R_INVALID_nt!IopCreateFile
TARGET_TIME: 2020-03-26T16:49:24.000Z
OSBUILD: 19041
OSSERVICEPACK: 153
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1996-06-25 00:28:37
BUILDDATESTAMP_STR: 191206-1406
BUILDLAB_STR: vb_release
BUILDOSVER_STR: 10.0.19041.1.amd64fre.vb_release.191206-1406
ANALYSIS_SESSION_ELAPSED_TIME: 7f96
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_r_invalid_nt!iopcreatefile
FAILURE_ID_HASH: {82022d24-8f0f-0b7f-7ba1-219da8d01bbf}
Followup: MachineOwner
---------
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000004, The thread's stack pointer was outside the legal stack
extents for the thread.
Arg2: ffff960187499500, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff960187499458, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 19041.1.amd64fre.vb_release.191206-1406
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd
SYSTEM_PRODUCT_NAME: MS-7C02
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 3.50
BIOS_DATE: 11/07/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd
BASEBOARD_PRODUCT: B450 TOMAHAWK MAX (MS-7C02)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: 4
BUGCHECK_P2: ffff960187499500
BUGCHECK_P3: ffff960187499458
BUGCHECK_P4: 0
TRAP_FRAME: ffff960187499500 -- (.trap 0xffff960187499500)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb98f51982000 rbx=0000000000000000 rcx=0000000000000004
rdx=ffffb98f51982000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80717dd6073 rsp=ffff960187499690 rbp=ffff960187499700
r8=ffffb98f51988000 r9=ffff960187499718 r10=0000000000000000
r11=ffff9601874998e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!RtlpGetStackLimitsEx+0x18dd53:
fffff807`17dd6073 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: 842c418b0000073d -- (.exr 0x842c418b0000073d)
Cannot read Exception record @ 842c418b0000073d
CPU_COUNT: c
CPU_MHZ: e10
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: Dauntless-Win64-Shipping.exe
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_INCORRECT_STACK
WATSON_BKT_EVENT: BEX
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000004
ANALYSIS_SESSION_HOST: DESKTOP-7KGVC4E
ANALYSIS_SESSION_TIME: 03-26-2020 20:17:57.0330
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
BAD_STACK_POINTER: ffff9601874991d8
LAST_CONTROL_TRANSFER: from fffff80717daf729 to fffff80717d9d860
THREAD_SHA1_HASH_MOD_FUNC: 0610f2ba8dc59d77d6c2d885e3d395eb09222d98
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 25c76c5ed799d9785afc617e47e78ffe07b24bf7
THREAD_SHA1_HASH_MOD: dc844b1b94baa204d070855e43bbbd27eee98b94
FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff807`17dafb50 c644242000 mov byte ptr [rsp+20h],0
FAULT_INSTR_CODE: 202444c6
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiFastFailDispatch+d0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 31cf0885
IMAGE_VERSION: 10.0.19041.153
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_MISSING_GSFRAME_STACKPTR_ERROR_nt!KiFastFailDispatch
BUCKET_ID: 0x139_MISSING_GSFRAME_STACKPTR_ERROR_nt!KiFastFailDispatch
PRIMARY_PROBLEM_CLASS: 0x139_MISSING_GSFRAME_STACKPTR_ERROR_nt!KiFastFailDispatch
TARGET_TIME: 2020-03-26T14:14:31.000Z
OSBUILD: 19041
OSSERVICEPACK: 153
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1996-06-25 00:28:37
BUILDDATESTAMP_STR: 191206-1406
BUILDLAB_STR: vb_release
BUILDOSVER_STR: 10.0.19041.1.amd64fre.vb_release.191206-1406
ANALYSIS_SESSION_ELAPSED_TIME: 6fcf
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_missing_gsframe_stackptr_error_nt!kifastfaildispatch
FAILURE_ID_HASH: {7b0febb5-6007-4f2b-3d38-57fef278d8d5}
Followup: MachineOwner
---------
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000228, memory referenced
Arg2: 0000000000000007, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff8011e3454de, address which referenced memory
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 19041.1.amd64fre.vb_release.191206-1406
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd
SYSTEM_PRODUCT_NAME: MS-7C02
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 3.50
BIOS_DATE: 11/07/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd
BASEBOARD_PRODUCT: B450 TOMAHAWK MAX (MS-7C02)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: 228
BUGCHECK_P2: 7
BUGCHECK_P3: 1
BUGCHECK_P4: fffff8011e3454de
WRITE_ADDRESS: fffff8010bcfb388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
0000000000000228
CURRENT_IRQL: 7
FAULTING_IP:
nvlddmkm+7654de
fffff801`1e3454de ff4240 inc dword ptr [rdx+40h]
CPU_COUNT: c
CPU_MHZ: e10
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: System
ANALYSIS_SESSION_HOST: DESKTOP-7KGVC4E
ANALYSIS_SESSION_TIME: 03-26-2020 20:18:04.0596
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
TRAP_FRAME: fffff80110a77ba0 -- (.trap 0xfffff80110a77ba0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000148 rbx=0000000000000000 rcx=0000000000000001
rdx=00000000000001e8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8011e3454de rsp=fffff80110a77d30 rbp=0000000000000000
r8=0000000000989680 r9=0000000000000000 r10=0000fffff80118ca
r11=fffff80110a77ac0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nvlddmkm+0x7654de:
fffff801`1e3454de ff4240 inc dword ptr [rdx+40h] ds:00000000`00000228=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8010b3af729 to fffff8010b39d860
STACK_TEXT:
fffff801`10a77a58 fffff801`0b3af729 : 00000000`0000000a 00000000`00000228 00000000`00000007 00000000`00000001 : nt!KeBugCheckEx
fffff801`10a77a60 fffff801`0b3aba29 : fffff801`1e35ab37 ffffe489`0ea66000 ffffe489`0f703000 ffffe489`147d0a40 : nt!KiBugCheckDispatch+0x69
fffff801`10a77ba0 fffff801`1e3454de : 00000000`00000000 ffffe489`0f703000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x469
fffff801`10a77d30 00000000`00000000 : ffffe489`0f703000 00000000`00000000 00000000`00000000 00000000`00000000 : nvlddmkm+0x7654de
THREAD_SHA1_HASH_MOD_FUNC: 57bd2645b6b0775b5c75d343f2a6e2cc4fdca6ac
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 5dda0ec8a8db2bc816f90a116a20dd9e3fc17139
THREAD_SHA1_HASH_MOD: 99270aa9efddf51499339f5ea82e28c2a8c9f7b4
FOLLOWUP_IP:
nvlddmkm+7654de
fffff801`1e3454de ff4240 inc dword ptr [rdx+40h]
FAULT_INSTR_CODE: 444042ff
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nvlddmkm+7654de
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nvlddmkm
IMAGE_NAME: nvlddmkm.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5e719639
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 7654de
FAILURE_BUCKET_ID: AV_nvlddmkm!unknown_function
BUCKET_ID: AV_nvlddmkm!unknown_function
PRIMARY_PROBLEM_CLASS: AV_nvlddmkm!unknown_function
TARGET_TIME: 2020-03-25T15:46:36.000Z
OSBUILD: 19041
OSSERVICEPACK: 153
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1996-06-25 00:28:37
BUILDDATESTAMP_STR: 191206-1406
BUILDLAB_STR: vb_release
BUILDOSVER_STR: 10.0.19041.1.amd64fre.vb_release.191206-1406
ANALYSIS_SESSION_ELAPSED_TIME: 14dff
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_nvlddmkm!unknown_function
FAILURE_ID_HASH: {7eea5677-f68d-2154-717e-887e07e55cd3}
Followup: MachineOwner
---------
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffa78a08815200, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80406bc9115, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 19041.1.amd64fre.vb_release.191206-1406
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd
SYSTEM_PRODUCT_NAME: MS-7C02
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 3.50
BIOS_DATE: 11/07/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd
BASEBOARD_PRODUCT: B450 TOMAHAWK MAX (MS-7C02)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffa78a08815200
BUGCHECK_P2: 0
BUGCHECK_P3: fffff80406bc9115
BUGCHECK_P4: 2
READ_ADDRESS: fffff804072fb388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffa78a08815200
FAULTING_IP:
nt!IopCreateFile+1d9
fffff804`06bc9115 48399424b0000000 cmp qword ptr [rsp+0B0h],rdx
MM_INTERNAL_CODE: 2
CPU_COUNT: c
CPU_MHZ: e10
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: EpicGamesLauncher.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-7KGVC4E
ANALYSIS_SESSION_TIME: 03-26-2020 20:18:01.0192
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
TRAP_FRAME: ffffa78a088147c0 -- (.trap 0xffffa78a088147c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=00007fffffff0000
rdx=00007fffffff0000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80406bc9115 rsp=ffffa78a08814950 rbp=ffffa78a08814b80
r8=0000000000000003 r9=0000000000000001 r10=00000000c0140000
r11=ffffa78a08814a88 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nt!IopCreateFile+0x1d9:
fffff804`06bc9115 48399424b0000000 cmp qword ptr [rsp+0B0h],rdx ss:0018:ffffa78a`08814a00=00000013bb46f2b0
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff804069de677 to fffff8040699d860
STACK_TEXT:
ffffa78a`088145a8 fffff804`069de677 : 00000000`00000050 ffffa78a`08815200 00000000`00000000 ffffa78a`088147c0 : nt!KeBugCheckEx
ffffa78a`088145b0 fffff804`06866508 : ffffa78a`08815200 00000000`c0000016 ffffa78a`088147c0 00000000`00000000 : nt!MiSystemFault+0x17f6fb
ffffa78a`088146b0 fffff804`069ab91e : 00000000`00000000 fffff804`06868b65 ffffd10f`99044010 ffffa78a`08814830 : nt!MmAccessFault+0x218
ffffa78a`088147c0 fffff804`06bc9115 : ffff8401`43048080 fffff804`06869884 ffff8401`4295ab40 00000000`00000420 : nt!KiPageFault+0x35e
ffffa78a`08814950 fffff804`06bc67a8 : 00000013`bb46f2b0 fffff804`c0140000 00000013`bb46f300 00000013`bb46f2f0 : nt!IopCreateFile+0x1d9
ffffa78a`08814a00 fffff804`069af178 : 00000000`00000000 000001b1`a1573ff0 00000000`00000102 ffffd10f`9afa6260 : nt!NtCreateFile+0x78
ffffa78a`08814a90 00007ff8`25e0b874 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000013`bb46f1f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`25e0b874
THREAD_SHA1_HASH_MOD_FUNC: 2fab1fcaddb8767786ebd8eaab6351b0639ad760
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 4c1334246181dc91dcb6a3afa04c5f2495820bac
THREAD_SHA1_HASH_MOD: 30a3e915496deaace47137d5b90c3ecc03746bf6
FOLLOWUP_IP:
nt!IopCreateFile+1d9
fffff804`06bc9115 48399424b0000000 cmp qword ptr [rsp+0B0h],rdx
FAULT_INSTR_CODE: 24943948
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!IopCreateFile+1d9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 31cf0885
IMAGE_VERSION: 10.0.19041.153
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 1d9
FAILURE_BUCKET_ID: AV_R_INVALID_nt!IopCreateFile
BUCKET_ID: AV_R_INVALID_nt!IopCreateFile
PRIMARY_PROBLEM_CLASS: AV_R_INVALID_nt!IopCreateFile
TARGET_TIME: 2020-03-25T15:16:53.000Z
OSBUILD: 19041
OSSERVICEPACK: 153
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1996-06-25 00:28:37
BUILDDATESTAMP_STR: 191206-1406
BUILDLAB_STR: vb_release
BUILDOSVER_STR: 10.0.19041.1.amd64fre.vb_release.191206-1406
ANALYSIS_SESSION_ELAPSED_TIME: 7bc2
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_r_invalid_nt!iopcreatefile
FAILURE_ID_HASH: {82022d24-8f0f-0b7f-7ba1-219da8d01bbf}
Followup: MachineOwner
---------
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80605ac4824, The address that the exception occurred at
Arg3: ffff820b46ffb948, Parameter 0 of the exception
Arg4: ffff820b46ffb180, Parameter 1 of the exception
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 19041.1.amd64fre.vb_release.191206-1406
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd
SYSTEM_PRODUCT_NAME: MS-7C02
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 3.50
BIOS_DATE: 11/07/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd
BASEBOARD_PRODUCT: B450 TOMAHAWK MAX (MS-7C02)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffffffc0000005
BUGCHECK_P2: fffff80605ac4824
BUGCHECK_P3: ffff820b46ffb948
BUGCHECK_P4: ffff820b46ffb180
WRITE_ADDRESS: fffff806064fb388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffff820b46ffb180
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!DeleteNodeFromTree+128
fffff806`05ac4824 488b4008 mov rax,qword ptr [rax+8]
EXCEPTION_PARAMETER1: ffff820b46ffb948
EXCEPTION_PARAMETER2: ffff820b46ffb180
BUGCHECK_STR: 0x1E_c0000005
CPU_COUNT: c
CPU_MHZ: e10
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-7KGVC4E
ANALYSIS_SESSION_TIME: 03-26-2020 20:18:07.0684
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
DEVICE_OBJECT: ffff930dbf29bb50
DRIVER_OBJECT: ffff930dbade98f0
IMAGE_NAME: ????????
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: ????????
FAULTING_MODULE: 0000000000000000
EXCEPTION_RECORD: ffff930db3aa0780 -- (.exr 0xffff930db3aa0780)
ExceptionAddress: 0000000000000000
ExceptionCode: 00000000
ExceptionFlags: 00000000
NumberParameters: 0
LAST_CONTROL_TRANSFER: from fffff80605ca96cf to fffff80605b9d860
STACK_TEXT:
ffff820b`46ffa8f8 fffff806`05ca96cf : 00000000`0000001e ffffffff`c0000005 fffff806`05ac4824 ffff820b`46ffb948 : nt!KeBugCheckEx
ffff820b`46ffa900 fffff806`05bb67ae : ffff820b`46ffc290 fffff806`05af1b75 ffff820b`46ffbb80 ffff820b`46ffaf60 : nt!KiFatalFilter+0x1f
ffff820b`46ffa940 fffff806`05b79152 : ffff820b`00000002 00000000`00000000 ffff820b`46ff7000 ffff820b`46ffd000 : nt!KeExpandKernelStackAndCalloutInternal$filt$0+0x16
ffff820b`46ffa980 fffff806`05ba6722 : 00000000`00000000 ffff820b`46ffaf60 ffff820b`46ffc290 00000000`00000000 : nt!_C_specific_handler+0xa2
ffff820b`46ffa9f0 fffff806`05a485d0 : 00000000`00000000 ffff820b`46ffaf60 ffff820b`46ffc290 00000000`00000000 : nt!RtlpExecuteHandlerForException+0x12
ffff820b`46ffaa20 fffff806`05accdd6 : ffff820b`46ffb948 ffff820b`46ffb680 ffff820b`46ffb948 ffffa381`3fedbfd0 : nt!RtlDispatchException+0x280
ffff820b`46ffb150 fffff806`05baf86c : ffff930d`b3aa0780 00000000`00000000 ffff820b`46ffb958 ffff930d`b3aa06c0 : nt!KiDispatchException+0x186
ffff820b`46ffb810 fffff806`05baba03 : ffffa381`3d4cc450 ffff820b`46ffba50 00000000`00080000 fffff806`05a69554 : nt!KiExceptionDispatch+0x12c
ffff820b`46ffb9f0 fffff806`05ac4824 : 00000000`00000001 fffff806`05a690db 00000000`00000001 fffff806`05a690db : nt!KiPageFault+0x443
ffff820b`46ffbb80 fffff806`05ac46c1 : ffff930d`baf226c0 00000000`00000000 ffff930d`c12d49e8 ffffa381`3fedbfd0 : nt!DeleteNodeFromTree+0x128
ffff820b`46ffbbb0 fffff806`05ac457b : ffff930d`baf226c0 00000000`00000000 ffff930d`c12d49e8 ffff930d`c12d49e8 : nt!RtlDeleteElementGenericTableAvlEx+0x21
ffff820b`46ffbbe0 fffff806`0993013c : ffff930d`baf22410 fffff806`05a68ee8 ffffa381`3fedbfd0 ffff930d`baf22180 : nt!RtlDeleteElementGenericTableAvl+0x2b
ffff820b`46ffbc10 fffff806`0981a962 : ffff930d`c12d49e8 ffffa381`3ea4e200 ffffa381`3ea4e170 fffff806`00008000 : Ntfs!NtfsDeleteFcb+0x9c
ffff820b`46ffbc90 fffff806`099308ea : ffff930d`c12d49e8 ffff930d`baf22180 ffffa381`3ed91010 ffffa381`3ed91468 : Ntfs!NtfsTeardownFromLcb+0x272
ffff820b`46ffbd30 fffff806`0980d560 : ffff930d`c12d49e8 ffff820b`46ffbe32 ffffa381`3ed91468 ffffa381`3ed91010 : Ntfs!NtfsTeardownStructures+0xea
ffff820b`46ffbdb0 fffff806`098fb6a7 : ffff820b`46ffbf00 ffffa381`3ed91010 ffffa381`3ed91010 ffff820b`00000000 : Ntfs!NtfsDecrementCloseCounts+0xb0
ffff820b`46ffbdf0 fffff806`098f81c1 : ffff930d`c12d49e8 ffffa381`3ed91170 ffffa381`3ed91010 ffff930d`baf22180 : Ntfs!NtfsCommonClose+0x467
ffff820b`46ffbed0 fffff806`0995f014 : ffff930d`baf229f8 ffff820b`46ffc0a0 ffff930d`bfb58040 fffff806`05b2fea0 : Ntfs!NtfsFspCloseInternal+0x241
ffff820b`46ffc030 fffff806`0991b91c : 00000000`00000000 00000000`00000000 ffff930d`baf22180 ffffa381`3791a370 : Ntfs!NtfsFlushVolume+0x10c
ffff820b`46ffc140 fffff806`0991aaf9 : ffff930d`c14bcd78 ffff930d`c1326010 fffff806`0991aa01 ffff930d`c14bcd78 : Ntfs!NtfsCommonFlushBuffers+0x8d0
ffff820b`46ffc260 fffff806`05a9bba7 : ffff820b`46ffc370 00000000`00000000 00000000`00000000 fffff806`05a67156 : Ntfs!NtfsCommonFlushBuffersCallout+0x19
ffff820b`46ffc290 fffff806`05a9bb1d : fffff806`0991aae0 ffff820b`46ffc370 00000000`00000000 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x77
ffff820b`46ffc300 fffff806`098da5fb : 00060000`00000001 ffff820b`00000000 ffff820b`46ffd000 ffff820b`46ff7000 : nt!KeExpandKernelStackAndCalloutEx+0x1d
ffff820b`46ffc340 fffff806`098da525 : 00000000`00000000 ffff930d`b90e95c0 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonFlushBuffersOnNewStack+0x67
ffff820b`46ffc3b0 fffff806`05a87d3a : ffff930d`bdd0d010 ffff930d`c1326010 ffff930d`c14bcd78 ffff820b`46ffc3d8 : Ntfs!NtfsFsdFlushBuffers+0xe5
ffff820b`46ffc420 fffff806`05a87ce7 : ffff820b`46ffd000 ffff820b`46ff7000 00000000`00000000 ffff820b`46ffc530 : nt!IopfCallDriver+0x46
ffff820b`46ffc460 fffff806`035d6ccf : ffff930d`c0b9b6a0 fffff806`05a86aa6 00000000`00000000 00000000`00000000 : nt!IofCallDriver+0x17
ffff820b`46ffc490 fffff806`035d48d3 : ffff820b`46ffc520 ffff930d`bfb58000 ffffa381`3c62f550 ffff930d`b89ee480 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28f
ffff820b`46ffc500 fffff806`05a87d3a : 00000000`00060000 fffff806`05dd918c ffffa381`3be2cac0 fffff806`05a69b2d : FLTMGR!FltpDispatch+0xa3
ffff820b`46ffc560 fffff806`05a87ce7 : ffff930d`bfb58040 fffff806`05dd8ef4 ffffa381`3747c080 ffff820b`46ffc6d8 : nt!IopfCallDriver+0x46
ffff820b`46ffc5a0 fffff806`05a87ca0 : ffff930d`c1f20370 fffff806`05dc9411 00000000`00000000 fffff806`05a6aebc : nt!IofCallDriver+0x17
ffff820b`46ffc5d0 fffff806`05a87bc0 : ffff820b`46ffc700 fffff806`05dd8d2b 48cb8b48`00000000 ffff930d`bfb58040 : nt!IoCallDriverWithTracing+0x2c
ffff820b`46ffc620 fffff806`05de15d2 : ffff930d`c1326010 ffff820b`46ffc690 ffff930d`bf29bb50 00000000`00000002 : nt!IopCallDriverReference+0x84
ffff820b`46ffc650 fffff806`05e614b9 : ffff930d`bf29bb50 00000000`00000000 ffff930d`bf29bb50 ffff930d`c1326010 : nt!IopSynchronousServiceTail+0xee
ffff820b`46ffc6c0 fffff806`05e612a6 : ffff930d`bfb58040 00000000`00000000 ffff930d`badadd90 00000000`00000000 : nt!NtFlushBuffersFileEx+0x1f9
ffff820b`46ffc750 fffff806`05baf178 : ffff930d`bfb58040 ffffa381`3743e630 00000000`00000000 fffff806`05a8486e : nt!NtFlushBuffersFile+0x16
ffff820b`46ffc790 fffff806`05ba16c0 : fffff806`0611510a ffff820b`42b1f570 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
ffff820b`46ffc928 fffff806`0611510a : ffff820b`42b1f570 00000000`00000000 00000000`00000000 48282444`89000000 : nt!KiServiceLinkage
ffff820b`46ffc930 fffff806`05a0b1b5 : ffff930d`bfb58040 ffff930d`bfb58040 fffff806`06114f80 246c8948`00001000 : nt!PopFlushVolumeWorker+0x18a
ffff820b`46ffcc10 fffff806`05ba4eb8 : ffffb481`14b9f180 ffff930d`bfb58040 fffff806`05a0b160 30247c89`ff3320ec : nt!PspSystemThreadStartup+0x55
ffff820b`46ffcc60 00000000`00000000 : ffff820b`46ffd000 ffff820b`46ff7000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
THREAD_SHA1_HASH_MOD_FUNC: 81a40c99af2c38d60026abeb26a50088b959c712
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 723e1e505ebacfdcaa370958075f03471c3af60e
THREAD_SHA1_HASH_MOD: b4f8141aae869b8793dec5f6354a3bee19f502d7
FOLLOWUP_NAME: MachineOwner
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: 0x1E_c0000005_IMAGE_????????_
BUCKET_ID: 0x1E_c0000005_IMAGE_????????_
PRIMARY_PROBLEM_CLASS: 0x1E_c0000005_IMAGE_????????_
TARGET_TIME: 2020-03-25T14:09:31.000Z
OSBUILD: 19041
OSSERVICEPACK: 153
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1996-06-25 00:28:37
BUILDDATESTAMP_STR: 191206-1406
BUILDLAB_STR: vb_release
BUILDOSVER_STR: 10.0.19041.1.amd64fre.vb_release.191206-1406
ANALYSIS_SESSION_ELAPSED_TIME: 274a
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1e_c0000005_image_????????_
FAILURE_ID_HASH: {37daf89b-25a9-dd18-3747-4ff063ffc752}
Followup: MachineOwner
---------
