******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_SERVICE_EXCEPTION (3b) An exception happened while executing a system service routine. Arguments: Arg1: 00000000c0000006, Exception code that caused the BugCheck Arg2: fffff80421ea3991, Address of the instruction which caused the BugCheck Arg3: fffffd8e1e3e5e80, Address of the context record for the exception that caused the BugCheck Arg4: 0000000000000000, zero. Debugging Details: ------------------ ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: ExceptionRecord *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: ContextRecord *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: ExceptionRecord *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: ContextRecord *** *** *** ************************************************************************* KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 1671 Key : Analysis.Elapsed.mSec Value: 12736 Key : Analysis.IO.Other.Mb Value: 4 Key : Analysis.IO.Read.Mb Value: 1 Key : Analysis.IO.Write.Mb Value: 21 Key : Analysis.Init.CPU.mSec Value: 468 Key : Analysis.Init.Elapsed.mSec Value: 43145 Key : Analysis.Memory.CommitPeak.Mb Value: 88 Key : Analysis.Version.DbgEng Value: 10.0.27725.1000 Key : Analysis.Version.Description Value: 10.2408.27.01 amd64fre Key : Analysis.Version.Ext Value: 1.2408.27.1 Key : Bugcheck.Code.LegacyAPI Value: 0x3b Key : Bugcheck.Code.TargetModel Value: 0x3b Key : Dump.Attributes.AsUlong Value: 8 Key : Dump.Attributes.KernelGeneratedTriageDump Value: 1 Key : Failure.Bucket Value: 0x3B_C0000006_nt!HvpGetCellPaged Key : Failure.Hash Value: {68f3db38-ae8e-4bae-c37a-85819946495f} BUGCHECK_CODE: 3b BUGCHECK_P1: c0000006 BUGCHECK_P2: fffff80421ea3991 BUGCHECK_P3: fffffd8e1e3e5e80 BUGCHECK_P4: 0 FILE_IN_CAB: 111324-10437-01.dmp DUMP_FILE_ATTRIBUTES: 0x8 Kernel Generated Triage Dump FAULTING_THREAD: ffff9b8ee9ff2080 CONTEXT: fffffd8e1e3e5e80 -- (.cxr 0xfffffd8e1e3e5e80)rax=0000000000000000 rbx=00000000b01a9c3a rcx=0000000000000007 rdx=000000000000001c rsi=0000000000000000 rdi=fffffd8e1e3e6930 rip=fffff80421ea3991 rsp=fffffd8e1e3e6880 rbp=fffffd8e1e3e6981 r8=ffff9b8ee9ff2080 r9=000001f4e14a3898 r10=0000000000000898 r11=00000000012e2898 r12=fffffd8e1e3e6bb0 r13=ffffe30d8024d990 r14=0000000000000000 r15=fffffd8e1e3e6b50 iopl=0 nv up ei pl nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050202 nt!HvpGetCellPaged+0xc1: fffff804`21ea3991 418b01 mov eax,dword ptr [r9] ds:002b:000001f4`e14a3898=???????? Resetting default scope BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) BLACKBOXWINLOGON: 1 CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: Registry STACK_TEXT: fffffd8e`1e3e6880 fffff804`21e23d2f : 00000000`b01a9c3a fffffd8e`00000003 ffffe30d`00000000 ffffe30d`6cb9a000 : nt!HvpGetCellPaged+0xc1 fffffd8e`1e3e68c0 fffff804`21e36ff0 : ffffe30d`7f03f5a0 fffffd8e`1e3e6b50 fffffd8e`1e3e6ad0 fffffd8e`1e3e6b30 : nt!CmpWalkOneLevel+0x40f fffffd8e`1e3e69d0 fffff804`21e36353 : 00000000`0000001c fffffd8e`1e3e6d20 fffffd8e`1e3e6cd8 ffff9b8e`ec10f010 : nt!CmpDoParseKey+0xa00 fffffd8e`1e3e6c70 fffff804`21e324b7 : fffff804`21e36001 ffffe30d`00000000 ffff9b8e`ec10f010 00000004`6c609001 : nt!CmpParseKey+0x2c3 fffffd8e`1e3e6e10 fffff804`21e3aa5a : ffff9b8e`ec10f001 fffffd8e`1e3e7078 00000000`00000040 ffff9b8e`c0d662a0 : nt!ObpLookupObjectName+0x1117 fffffd8e`1e3e6fe0 fffff804`21e3a83c : 00000000`00000000 00000000`00000000 00000000`00000000 ffff9b8e`c0d662a0 : nt!ObOpenObjectByNameEx+0x1fa fffffd8e`1e3e7110 fffff804`21e3a181 : 0000005e`fadfe7b8 fffffd8e`1e3e7480 00000000`00000001 fffff804`21a5ab8e : nt!ObOpenObjectByName+0x5c fffffd8e`1e3e7160 fffff804`21e39eaf : 00000000`00020019 00000000`00000000 00000000`00000000 00000000`00000000 : nt!CmOpenKey+0x2c1 fffffd8e`1e3e73c0 fffff804`21c12305 : ffff9b8e`e9ff0000 00000000`00000000 00000000`00000001 ffff9b8e`eb830080 : nt!NtOpenKeyEx+0xf fffffd8e`1e3e7400 00007ffd`9084f904 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 0000005e`fadfe758 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`9084f904 SYMBOL_NAME: nt!HvpGetCellPaged+c1 MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe IMAGE_VERSION: 10.0.19041.5007 STACK_COMMAND: .cxr 0xfffffd8e1e3e5e80 ; kb BUCKET_ID_FUNC_OFFSET: c1 FAILURE_BUCKET_ID: 0x3B_C0000006_nt!HvpGetCellPaged OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {68f3db38-ae8e-4bae-c37a-85819946495f} Followup: MachineOwner ---------