nt!KeBugCheckEx:
fffff807`8aafb240 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff8108`1530cc60=000000000000003b
7: kd> !analyze -v
Loading Kernel Symbols
...............................................................
................................................................
................................................................
....
Loading User Symbols
PEB is paged out (Peb.Ldr = 0000007e`34465018). Type ".hh dbgerr001" for details
Loading unloaded module list
.........
*******************************************************************************
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the BugCheck
Arg2: fffff8071dc9587f, Address of the instruction which caused the BugCheck
Arg3: ffff81081530d5a0, Address of the context record for the exception that caused the BugCheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2484
Key : Analysis.Elapsed.mSec
Value: 22317
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 1
Key : Analysis.IO.Write.Mb
Value: 31
Key : Analysis.Init.CPU.mSec
Value: 1546
Key : Analysis.Init.Elapsed.mSec
Value: 108849
Key : Analysis.Memory.CommitPeak.Mb
Value: 96
Key : Analysis.Version.DbgEng
Value: 10.0.29507.1001
Key : Analysis.Version.Description
Value: 10.2511.5.1 amd64fre
Key : Analysis.Version.Ext
Value: 1.2511.5.1
Key : Bugcheck.Code.LegacyAPI
Value: 0x3b
Key : Bugcheck.Code.TargetModel
Value: 0x3b
Key : Dump.Attributes.AsUlong
Value: 0x21808
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0x0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: AV_Ntfs!NtfsCreateScb
Key : Failure.Exception.IP.Address
Value: 0xfffff8071dc9587f
Key : Failure.Exception.IP.Module
Value: Ntfs
Key : Failure.Exception.IP.Offset
Value: 0x14587f
Key : Failure.Hash
Value: {5ac7c487-bdbd-ade1-600d-dad723040c3d}
Key : Faulting.IP.Type
Value: Paged
Key : Hypervisor.Enlightenments.ValueHex
Value: 0x7497cf94
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 1
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 0
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 0
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 38408431
Key : Hypervisor.Flags.ValueHex
Value: 0x24a10ef
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 0x3f7
Key : WER.System.BIOSRevision
Value: 5.35.0.0
BUGCHECK_CODE: 3b
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff8071dc9587f
BUGCHECK_P3: ffff81081530d5a0
BUGCHECK_P4: 0
FILE_IN_CAB: 012826-16546-01.dmp
TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b
DUMP_FILE_ATTRIBUTES: 0x21808
Kernel Generated Triage Dump
FAULTING_THREAD: ffff978494a9f080
CONTEXT: ffff81081530d5a0 -- (.cxr 0xffff81081530d5a0)
rax=bfff9784cbfc71b0 rbx=ffffc8004a0fc180 rcx=ffffa780660a8100
rdx=ffff978494a9f080 rsi=ffff81081530e130 rdi=ffffc8004a0fc050
rip=fffff8071dc9587f rsp=ffff81081530dfd0 rbp=ffff81081530e778
r8=0000000000000000 r9=0000000000000001 r10=fffff8078aa0f770
r11=ffff978494a9f900 r12=0000000000000080 r13=0000000000000000
r14=ffffc8004a0fc010 r15=ffff97849d79cab8
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050246
Ntfs!NtfsCreateScb+0x1af:
fffff807`1dc9587f 488b4030 mov rax,qword ptr [rax+30h] ds:002b:bfff9784`cbfc71e0=????????????????
Resetting default scope
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1 (!blackboxwinlogon)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: WerFault.exe
IP_IN_PAGED_CODE:
Ntfs!NtfsCreateScb+1af
fffff807`1dc9587f 488b4030 mov rax,qword ptr [rax+30h]
STACK_TEXT:
ffff8108`1530dfd0 fffff807`1dc9519a : ffff8108`1530e9f8 ffffc800`4a0fc010 00000000`00000000 ffff8108`1530e778 : Ntfs!NtfsCreateScb+0x1af
ffff8108`1530e0a0 fffff807`1dc94d9a : 00000000`00000000 40800000`40000003 00000000`00000001 ffff8108`1530e990 : Ntfs!NtfsBreakBatchOplock+0xaa
ffff8108`1530e120 fffff807`1dd18f21 : 00000000`00000000 40800000`40000003 ffffc800`4a0fc010 40800000`00000024 : Ntfs!NtfsOpenExistingAttr+0x8a
ffff8108`1530e1e0 fffff807`1dd0bc1c : ffff8108`1530e990 ffffc800`4a0fc488 ffffc800`4a0fc010 ffff9784`9d79cab8 : Ntfs!NtfsOpenAttributeInExistingFile+0xd41
ffff8108`1530e400 fffff807`1dcc1a0e : ffff9784`9d79cab8 ffff9784`8bfc8518 00000000`00001730 fffff807`8a8f0d01 : Ntfs!NtfsOpenExistingPrefixFcb+0x5ac
ffff8108`1530e540 fffff807`1dcc554f : ffff9784`9d79cab8 ffff9784`98f53010 00000000`00004000 ffff8108`1530e778 : Ntfs!NtfsFindStartingNode+0x10ae
ffff8108`1530e610 fffff807`1dcc26e5 : ffff9784`98f53010 ffff8108`1530e990 ffff8108`1530e9d6 ffff9784`8bfc7030 : Ntfs!NtfsCommonCreate+0x166f
ffff8108`1530e860 fffff807`8a9913db : ffff9784`8bfc7030 ffff9784`98f53010 00000000`00000000 ffff8108`00000001 : Ntfs!NtfsFsdCreate+0x2b5
ffff8108`1530eb10 fffff807`8a991353 : 00000000`001c0000 fffff807`00000000 ffff9784`89e11cc0 00000000`00000400 : nt!IopfCallDriver+0x5b
ffff8108`1530eb50 fffff807`1c27c4ee : 00000000`000000fd ffff9784`9d12d990 00000000`00000000 ffff8108`1530ec39 : nt!IofCallDriver+0x13
ffff8108`1530eb80 fffff807`1c2e7c56 : ffff8108`1530ec30 ffff8108`00000000 00000000`00000000 ffff8108`1530ec39 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x3fe
ffff8108`1530ebf0 fffff807`8a9913db : 00000000`00000000 ffff9784`8bf86cd0 00000000`00000000 00000000`00000000 : FLTMGR!FltpCreate+0x706
ffff8108`1530eca0 fffff807`8a991353 : ffffc800`40274645 00000000`00000000 ffff8108`1530f200 ffff9784`8bf86cd0 : nt!IopfCallDriver+0x5b
ffff8108`1530ece0 fffff807`8ae9690b : ffffc800`40274645 ffff8108`1530efc0 ffff9784`8bf86cd0 ffff8108`1530f350 : nt!IofCallDriver+0x13
ffff8108`1530ed10 fffff807`8ae949aa : 00000000`00000000 ffffc800`40274600 00000000`00000000 ffff8108`1530f0f8 : nt!IopParseDevice+0x73b
ffff8108`1530eec0 fffff807`8ae926b3 : ffff9784`a1ba0001 ffff8108`1530f0f8 00000000`00000040 ffff9784`88608090 : nt!ObpLookupObjectName+0xe4a
ffff8108`1530f070 fffff807`8ae98e0f : ffffc800`00000000 0000007e`34357160 0000007e`34357130 00000000`00000001 : nt!ObOpenObjectByNameEx+0x223
ffff8108`1530f1b0 fffff807`8acb6044 : ffff9784`94a9f080 00000000`00000000 ffff9784`94a9f080 00000000`00000001 : nt!NtQueryAttributesFile+0x1bf
ffff8108`1530f460 00007ffc`38702364 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x499
0000007e`343570b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`38702364
SYMBOL_NAME: Ntfs!NtfsCreateScb+1af
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
IMAGE_VERSION: 10.0.26100.7623
STACK_COMMAND: .cxr 0xffff81081530d5a0 ; kb
BUCKET_ID_FUNC_OFFSET: 1af
FAILURE_BUCKET_ID: AV_Ntfs!NtfsCreateScb
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {5ac7c487-bdbd-ade1-600d-dad723040c3d}
Followup: MachineOwner
---------