******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_HEAP_CORRUPTION (13a) The kernel mode heap manager has detected corruption in a heap. Arguments: Arg1: 0000000000000012, The heap detected invalid internal state during the current operation. This can be the result of a use-after-free error or a buffer overflow of an adjacent block. Arg2: ffffd7059c100140, Address of the heap that reported the corruption Arg3: ffffd705a2f37000, Address at which the corruption was detected Arg4: 0000000000000000 Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 4187 Key : Analysis.Elapsed.mSec Value: 4336 Key : Analysis.IO.Other.Mb Value: 0 Key : Analysis.IO.Read.Mb Value: 1 Key : Analysis.IO.Write.Mb Value: 0 Key : Analysis.Init.CPU.mSec Value: 1734 Key : Analysis.Init.Elapsed.mSec Value: 9047 Key : Analysis.Memory.CommitPeak.Mb Value: 86 Key : Analysis.Version.DbgEng Value: 10.0.29507.1001 Key : Analysis.Version.Description Value: 10.2511.5.1 amd64fre Key : Analysis.Version.Ext Value: 1.2511.5.1 Key : Bugcheck.Code.LegacyAPI Value: 0x13a Key : Bugcheck.Code.TargetModel Value: 0x13a Key : Dump.Attributes.AsUlong Value: 0x21808 Key : Dump.Attributes.DiagDataWrittenToHeader Value: 1 Key : Dump.Attributes.ErrorCode Value: 0x0 Key : Dump.Attributes.KernelGeneratedTriageDump Value: 1 Key : Dump.Attributes.LastLine Value: Dump completed successfully. Key : Dump.Attributes.ProgressPercentage Value: 0 Key : Failure.Bucket Value: 0x13a_12_fileinfo!FIStreamQueryInfo Key : Failure.Exception.IP.Address Value: 0xfffff804c4d7018d Key : Failure.Exception.IP.Module Value: nt Key : Failure.Exception.IP.Offset Value: 0xb7018d Key : Failure.Hash Value: {45accf61-52ee-472f-574c-13fa5caa104c} Key : Faulting.IP.Type Value: Paged Key : Hypervisor.Enlightenments.ValueHex Value: 0x7497cf94 Key : Hypervisor.Flags.AnyHypervisorPresent Value: 1 Key : Hypervisor.Flags.ApicEnlightened Value: 1 Key : Hypervisor.Flags.ApicVirtualizationAvailable Value: 0 Key : Hypervisor.Flags.AsyncMemoryHint Value: 0 Key : Hypervisor.Flags.CoreSchedulerRequested Value: 0 Key : Hypervisor.Flags.CpuManager Value: 1 Key : Hypervisor.Flags.DeprecateAutoEoi Value: 0 Key : Hypervisor.Flags.DynamicCpuDisabled Value: 1 Key : Hypervisor.Flags.Epf Value: 0 Key : Hypervisor.Flags.ExtendedProcessorMasks Value: 1 Key : Hypervisor.Flags.HardwareMbecAvailable Value: 1 Key : Hypervisor.Flags.MaxBankNumber Value: 0 Key : Hypervisor.Flags.MemoryZeroingControl Value: 0 Key : Hypervisor.Flags.NoExtendedRangeFlush Value: 0 Key : Hypervisor.Flags.NoNonArchCoreSharing Value: 1 Key : Hypervisor.Flags.Phase0InitDone Value: 1 Key : Hypervisor.Flags.PowerSchedulerQos Value: 0 Key : Hypervisor.Flags.RootScheduler Value: 0 Key : Hypervisor.Flags.SynicAvailable Value: 1 Key : Hypervisor.Flags.UseQpcBias Value: 0 Key : Hypervisor.Flags.Value Value: 38408431 Key : Hypervisor.Flags.ValueHex Value: 0x24a10ef Key : Hypervisor.Flags.VpAssistPage Value: 1 Key : Hypervisor.Flags.VsmAvailable Value: 1 Key : Hypervisor.RootFlags.AccessStats Value: 1 Key : Hypervisor.RootFlags.CrashdumpEnlightened Value: 1 Key : Hypervisor.RootFlags.CreateVirtualProcessor Value: 1 Key : Hypervisor.RootFlags.DisableHyperthreading Value: 0 Key : Hypervisor.RootFlags.HostTimelineSync Value: 1 Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled Value: 0 Key : Hypervisor.RootFlags.IsHyperV Value: 1 Key : Hypervisor.RootFlags.LivedumpEnlightened Value: 1 Key : Hypervisor.RootFlags.MapDeviceInterrupt Value: 1 Key : Hypervisor.RootFlags.MceEnlightened Value: 1 Key : Hypervisor.RootFlags.Nested Value: 0 Key : Hypervisor.RootFlags.StartLogicalProcessor Value: 1 Key : Hypervisor.RootFlags.Value Value: 1015 Key : Hypervisor.RootFlags.ValueHex Value: 0x3f7 BUGCHECK_CODE: 13a BUGCHECK_P1: 12 BUGCHECK_P2: ffffd7059c100140 BUGCHECK_P3: ffffd705a2f37000 BUGCHECK_P4: 0 FILE_IN_CAB: 030926-9390-01.dmp DUMP_FILE_ATTRIBUTES: 0x21808 Kernel Generated Triage Dump FAULTING_THREAD: ffffd7059c8d9080 CORRUPTING_POOL_ADDRESS: fffff804c51c44c8: Unable to get MiVisibleState Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd unable to get nt!MmSpecialPagesInUse ffffd705a2f37000 BLACKBOXNTFS: 1 (!blackboxntfs) CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: System IP_IN_PAGED_CODE: nt!ExAllocatePool2+9d fffff804`c4d7018d 488bf0 mov rsi,rax STACK_TEXT: ffffa98d`6bbe1fa8 fffff804`c47f283c : 00000000`0000013a 00000000`00000012 ffffd705`9c100140 ffffd705`a2f37000 : nt!KeBugCheckEx ffffa98d`6bbe1fb0 fffff804`c47f289c : 00000000`00000012 ffffd705`9c1002c0 ffffd705`9c100140 00000000`00000000 : nt!RtlpHeapHandleError+0x40 ffffa98d`6bbe1ff0 fffff804`c445e6c9 : 00000000`00000000 ffffd705`a2f9a580 00000056`6bbe2288 00000000`00000240 : nt!RtlpHpHeapHandleError+0x58 ffffa98d`6bbe2020 fffff804`c446b91f : ffffa98d`6bbe26d0 ffffa98d`6bbe2288 ffffaf08`fdcbd920 ffffd705`a29a41b0 : nt!RtlpLogHeapFailure+0x45 ffffa98d`6bbe2050 fffff804`c4462ea3 : ffffd705`9c1002c3 fffff804`c50eeb80 fffff804`00000056 00000000`00560000 : nt!RtlpHpVsSlotAllocate+0x2b3 ffffa98d`6bbe20b0 fffff804`c445a772 : 00000000`00000508 ffffd705`00000056 ffffa98d`00000006 00000000`00000000 : nt!RtlpHpVsContextAllocate+0xd3 ffffa98d`6bbe2140 fffff804`c44585c2 : 00000000`00000024 fffff804`c506d540 00000000`20707249 00000000`00000000 : nt!ExAllocateHeapPool+0x2142 ffffa98d`6bbe23d0 fffff804`c4d7018d : 00000000`00000042 00000000`00000508 00000000`00000000 ffffd705`9c100140 : nt!ExpAllocatePoolWithTagFromNode+0x52 ffffa98d`6bbe2410 fffff804`c4477471 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePool2+0x9d ffffa98d`6bbe24c0 fffff804`c4476fe8 : ffffd705`9c100000 fffff804`c44ce800 00000000`00000000 00000000`000000fc : nt!IopAllocateIrpPrivate+0x251 ffffa98d`6bbe2530 fffff804`55e8761e : ffffd705`a2825490 ffffa98d`6bbe2670 ffffa98d`6bbe26d0 00000000`0000000c : nt!IoAllocateIrpEx+0x28 ffffa98d`6bbe2560 fffff804`55e77c3a : ffffd705`a2fc5450 fffff804`c44828e2 ffffd705`a2825490 fffff804`c447b262 : FLTMGR!FltpQueryInformationFile+0x6e ffffa98d`6bbe25e0 fffff804`55e7d9b5 : ffffa98d`00000000 fffff804`00000000 00000000`00000000 ffffd705`a2825490 : FLTMGR!FltpGetFileName+0xca ffffa98d`6bbe2670 fffff804`55e7e268 : 00000000`00000000 ffffa98d`6bbd0000 ffffd705`a2825490 fffff804`c44814e4 : FLTMGR!FltpGetNormalizedFileName+0x1d5 ffffa98d`6bbe26f0 fffff804`55e3e00c : ffffd705`a2fbc7b0 ffffd705`a2825490 ffffd705`a298a978 ffffd705`a2825490 : FLTMGR!FltpCreateFileNameInformation+0x248 ffffa98d`6bbe2760 fffff804`55e84d6f : 00000000`00000000 00000000`00008000 ffffd705`a2fc5450 ffffd705`a2fc55d8 : FLTMGR!FltpGetFileNameInformation+0x71c ffffa98d`6bbe2810 fffff804`57834630 : 00000000`00000098 ffffaf08`fdb0c8a0 ffffa98d`6bbe2901 00000000`00000000 : FLTMGR!FltGetFileNameInformationUnsafe+0x9f ffffa98d`6bbe2890 fffff804`5783512d : 00000000`00000000 ffffd705`a2b65060 ffffd705`a2fbc7b0 00000000`00000000 : fileinfo!FIStreamQueryInfo+0x360 ffffa98d`6bbe2960 fffff804`55e8bffe : ffffaf08`fdb0c8a0 ffffd705`a2946f90 00000000`00000000 fffff804`c4515ea6 : fileinfo!FIStreamQueryWorker+0x11d ffffa98d`6bbe29a0 fffff804`c4515a9b : ffffd705`9c8d9080 ffffd705`9c8d9080 ffffa98d`6bbe2b40 ffffd705`9c7235b0 : FLTMGR!FltpProcessGenericWorkItem+0x9e ffffa98d`6bbe2a40 fffff804`c468966a : ffffd705`9c8d9080 ffffd705`9c8d9080 fffff804`c45155e0 ffffd705`9c7235b0 : nt!ExpWorkerThread+0x4bb ffffa98d`6bbe2bf0 fffff804`c48ab774 : ffffc580`e0b12180 ffffd705`9c8d9080 fffff804`c4689610 00000000`00000000 : nt!PspSystemThreadStartup+0x5a ffffa98d`6bbe2c40 00000000`00000000 : ffffa98d`6bbe3000 ffffa98d`6bbdd000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34 SYMBOL_NAME: fileinfo!FIStreamQueryInfo+360 MODULE_NAME: fileinfo IMAGE_NAME: fileinfo.sys IMAGE_VERSION: 10.0.26100.1150 STACK_COMMAND: .process /r /p 0xffffd7059c6d4040; .thread 0xffffd7059c8d9080 ; kb BUCKET_ID_FUNC_OFFSET: 360 FAILURE_BUCKET_ID: 0x13a_12_fileinfo!FIStreamQueryInfo OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {45accf61-52ee-472f-574c-13fa5caa104c} Followup: MachineOwner ---------