*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff88009f92a78, fffff88009f922e0, fffff880012b0c27}
Probably caused by : Ntfs.sys ( Ntfs!NtfsFindPrefixHashEntry+1fe )
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88009f92a78
Arg3: fffff88009f922e0
Arg4: fffff880012b0c27
Debugging Details:
------------------
EXCEPTION_RECORD: fffff88009f92a78 -- (.exr 0xfffff88009f92a78)
ExceptionAddress: fffff880012b0c27 (Ntfs!NtfsFindPrefixHashEntry+0x00000000000001fe)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff88009f922e0 -- (.cxr 0xfffff88009f922e0)
rax=fffff8a00a41a000 rbx=0008000000000000 rcx=0000000000000408
rdx=0000000000000002 rsi=fffff8a0001c8140 rdi=fffffa800544b350
rip=fffff880012b0c27 rsp=fffff88009f92cb0 rbp=0000000000006993
r8=000000001afea204 r9=0000000000000000 r10=0000000000000008
r11=fffff88009f92cf8 r12=fffff88009f92fc0 r13=fffff88009f93260
r14=0000000000000204 r15=0000000000002204
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202
Ntfs!NtfsFindPrefixHashEntry+0x1fe:
fffff880`012b0c27 44394310 cmp dword ptr [rbx+10h],r8d ds:002b:00080000`00000010=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME: firefox.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eaf0e0
ffffffffffffffff
FOLLOWUP_IP:
Ntfs!NtfsFindPrefixHashEntry+1fe
fffff880`012b0c27 44394310 cmp dword ptr [rbx+10h],r8d
FAULTING_IP:
Ntfs!NtfsFindPrefixHashEntry+1fe
fffff880`012b0c27 44394310 cmp dword ptr [rbx+10h],r8d
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from fffff880012b1ce2 to fffff880012b0c27
STACK_TEXT:
fffff880`09f92cb0 fffff880`012b1ce2 : fffffa80`049f02f0 fffffa80`0544b350 fffff8a0`001c8140 00000158`00000001 : Ntfs!NtfsFindPrefixHashEntry+0x1fe
fffff880`09f92de0 fffff880`012ac28d : fffffa80`049f02f0 fffffa80`0694dbd0 fffff880`09f92fc0 fffff880`09f93008 : Ntfs!NtfsFindStartingNode+0x452
fffff880`09f92eb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCreate+0x3dd
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: Ntfs!NtfsFindPrefixHashEntry+1fe
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc14f
STACK_COMMAND: .cxr 0xfffff88009f922e0 ; kb
FAILURE_BUCKET_ID: X64_0x24_VRF_Ntfs!NtfsFindPrefixHashEntry+1fe
BUCKET_ID: X64_0x24_VRF_Ntfs!NtfsFindPrefixHashEntry+1fe
Followup: MachineOwner
---------
