Windows 10: Almost reproducible BSOD triggered by fault in cldflt.sys

Discus and support Almost reproducible BSOD triggered by fault in cldflt.sys in Windows 10 BSOD Crashes and Debugging to solve the problem; Since few days I'm frequently experiencing BSOD crashes while running/debugging a Python application. The crash usually occurs immediately at launch of... Discussion in 'Windows 10 BSOD Crashes and Debugging' started by Y_765, Nov 6, 2019.

  1. Y_765
    Y_765 Win User

    Almost reproducible BSOD triggered by fault in cldflt.sys


    Since few days I'm frequently experiencing BSOD crashes while running/debugging a Python application. The crash usually occurs immediately at launch of the Python program. This is almost reproducible as it happens around 1 in 5 times. The minidump analysis always looks the same. The transcript is below. Does anybody experience anything similar? I've read that uninstalling KB4517389 could solve the issue, but unfortunately I wouldn't know how to accomplish that (KB4517389 doesn't appear the be uninstallable on my computer). Does anybody have an idea how to get rid of this?


    Microsoft (R) Windows Debugger Version 10.0.18362.1 AMD64

    Copyright (c) Microsoft Corporation. All rights reserved.



    Loading Dump File [C:\Windows\Minidump\110619-17921-01.dmp]

    Mini Kernel Dump File: Only registers and stack trace are available



    Symbol search path is: srv*

    Executable search path is:

    Windows 10 Kernel Version 18362 MP (8 procs) Free x64

    Product: WinNt, suite: TerminalServer SingleUserTS

    Machine Name:

    Kernel base = 0xfffff800`60ab6000 PsLoadedModuleList = 0xfffff800`60efe0b0

    Debug session time: Wed Nov 6 12:32:13.510 2019 (UTC + 1:00)

    System Uptime: 0 days 18:17:19.359

    Loading Kernel Symbols

    ...............................................................

    ................................................................

    ................................................................

    ................................................

    Loading User Symbols

    Loading unloaded module list

    ...................................

    For analysis of this file, run !analyze -v

    5: kd> !analyze -v

    *******************************************************************************

    * *

    * Bugcheck Analysis *

    * *

    *******************************************************************************



    SYSTEM_SERVICE_EXCEPTION (3b)

    An exception happened while executing a system service routine.

    Arguments:

    Arg1: 00000000c0000005, Exception code that caused the bugcheck

    Arg2: fffff8043217fbfe, Address of the instruction which caused the bugcheck

    Arg3: ffffe50008b85500, Address of the context record for the exception that caused the bugcheck

    Arg4: 0000000000000000, zero.



    Debugging Details:

    ------------------



    KEY_VALUES_STRING: 1

    PROCESSES_ANALYSIS: 1

    SERVICE_ANALYSIS: 1

    STACKHASH_ANALYSIS: 1

    TIMELINE_ANALYSIS: 1



    DUMP_CLASS: 1

    DUMP_QUALIFIER: 400

    BUILD_VERSION_STRING: 10.0.18362.449 (WinBuild.160101.0800)

    SYSTEM_MANUFACTURER: Dell Inc.

    SYSTEM_PRODUCT_NAME: XPS 15 9560

    SYSTEM_SKU: 07BE

    BIOS_VENDOR: Dell Inc.

    BIOS_VERSION: 1.16.0

    BIOS_DATE: 07/26/2019

    BASEBOARD_MANUFACTURER: Dell Inc.

    BASEBOARD_PRODUCT: 05FFDN

    BASEBOARD_VERSION: A00



    DUMP_FILE_ATTRIBUTES: 0x8

    Kernel Generated Triage Dump



    DUMP_TYPE: 2

    BUGCHECK_P1: c0000005

    BUGCHECK_P2: fffff8043217fbfe

    BUGCHECK_P3: ffffe50008b85500

    BUGCHECK_P4: 0

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.



    FAULTING_IP:

    cldflt!HsmiFltPostECPCREATE+1da

    fffff804`3217fbfe f60201 test byte ptr [rdx],1



    CONTEXT: ffffe50008b85500 -- (.cxr 0xffffe50008b85500)

    rax=ffffaf09a7840808 rbx=0000000000000000 rcx=0000000000000000

    rdx=0000000000000014 rsi=ffffe50008b86a60 rdi=ffffaf09a523d9a0

    rip=fffff8043217fbfe rsp=ffffe50008b85ef0 rbp=ffffe50008b85f40

    r8=0000000000000000 r9=7fffaf09a523da20 r10=fffff80060b1c3e0

    r11=0000000000000000 r12=0000000000000014 r13=0000000000000000

    r14=0000000000000000 r15=fffff8043213d000

    iopl=0 nv up ei pl zr na po nc

    cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050246

    cldflt!HsmiFltPostECPCREATE+0x1da:

    fffff804`3217fbfe f60201 test byte ptr [rdx],1 ds:002b:00000000`00000014=??

    Resetting default scope



    BUGCHECK_STR: 0x3B_c0000005

    CPU_COUNT: 8

    CPU_MHZ: af8

    CPU_VENDOR: GenuineIntel

    CPU_FAMILY: 6

    CPU_MODEL: 9e

    CPU_STEPPING: 9

    CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: B4'00000000 (cache) B4'00000000 (init)

    BLACKBOXBSD: 1 (!blackboxbsd)

    BLACKBOXNTFS: 1 (!blackboxntfs)

    BLACKBOXPNP: 1 (!blackboxpnp)

    BLACKBOXWINLOGON: 1

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

    PROCESS_NAME: python.exe

    CURRENT_IRQL: 0

    ANALYSIS_SESSION_HOST: Y

    ANALYSIS_SESSION_TIME: 11-06-2019 12:43:57.0391

    ANALYSIS_VERSION: 10.0.18362.1 amd64fre

    LAST_CONTROL_TRANSFER: from fffff80432180129 to fffff8043217fbfe



    STACK_TEXT:

    ffffe500`08b85ef0 fffff804`32180129 : ffffaf09`a7840808 ffffe500`08b86060 00000000`00000000 00000000`00000000 : cldflt!HsmiFltPostECPCREATE+0x1da

    ffffe500`08b85f80 fffff800`61b13c03 : ffffaf09`a7840808 ffffe500`08b86060 ffffaf09`a7840720 00000000`00002000 : cldflt!HsmFltPostQUERY_OPEN+0x29

    ffffe500`08b86010 fffff800`61b1243c : ffffaf09`00000000 ffffaf09`9a29fd00 ffffaf09`d318d868 00000000`00000000 : FLTMGR!FltpPerformPostCallbacks+0x3e3

    ffffe500`08b860e0 fffff800`60b3fafc : ffffe500`08b86180 ffffe500`08b86a0c ffffaf09`8ffdf8f0 ffffaf09`d4dc59a0 : FLTMGR!FltpPostFsFilterOperation+0x2c

    ffffe500`08b86110 fffff800`61305e9d : 00000000`00000000 ffffaf09`9a29fda0 ffffe500`08b86240 fffff800`6332dce0 : nt!FsFilterPerformCompletionCallbacks+0x4c

    ffffe500`08b86140 fffff800`612a0da6 : 00000000`6d4e6f49 fffff800`60e2506d ffffe500`00000003 00000000`00000000 : nt!FsRtlQueryOpen+0xd1

    ffffe500`08b86410 fffff800`6109c4aa : fffff800`00000007 fffff800`6109bb44 ffffe500`08b86650 00000000`00000000 : nt!IopQueryInformation+0x138e16

    ffffe500`08b86470 fffff800`610a31bf : ffffaf09`8ffdf8f0 ffffaf09`8ffdf844 ffffaf09`cbe8cac0 00000000`00000000 : nt!IopParseDevice+0x8ea

    ffffe500`08b865e0 fffff800`610a1621 : ffffaf09`cbe8ca00 ffffe500`08b86828 00000000`00000240 ffffaf09`8d0fc900 : nt!ObpLookupObjectName+0x78f

    ffffe500`08b867a0 fffff800`6130dc53 : ffffaf09`00000001 00000000`00000000 ffffe500`08b86d90 ffffe500`08b86bf8 : nt!ObOpenObjectByNameEx+0x201

    ffffe500`08b868e0 fffff800`61b2805e : ffffe500`08b86d00 ffffaf09`d1f6faa0 ffffaf09`a52767e0 00000000`00000000 : nt!IoQueryInformationByName+0x263

    ffffe500`08b86b90 fffff804`32135d54 : ffffe500`08b86d88 00000000`00000000 ffffe500`08b86d88 fffff800`60b21465 : FLTMGR!FltQueryInformationByName+0x14e

    ffffe500`08b86c40 fffff804`32127924 : ffffe500`08b86d88 00000000`00000000 00000000`00000000 00000000`00000000 : cldflt!FltQueryInformationByNameCallout+0x44

    ffffe500`08b86c90 fffff804`3217f77d : 00000000`00000000 ffffe500`08b88000 ffffe500`08b81000 ffffaf09`d1f6faa0 : cldflt!HsmExpandKernelStackAndCallout+0x44

    ffffe500`08b86cd0 fffff804`32180019 : ffffaf09`aef0c010 ffffaf09`d7052b28 ffffaf09`d1f6fd30 ffffe500`08b86f19 : cldflt!HsmiFltPreECPCREATE+0x34d

    ffffe500`08b86e40 fffff800`61b14a5d : ffffaf09`d70529a0 ffffaf09`00000000 ffffaf09`00000001 00000000`00000000 : cldflt!HsmFltPreCREATE+0x9

    ffffe500`08b86e70 fffff800`61b145a0 : ffffe500`08b86ff0 ffffe500`08b87000 ffffaf09`b82c0000 00000000`00000000 : FLTMGR!FltpPerformPreCallbacks+0x2fd

    ffffe500`08b86f80 fffff800`61b4cd13 : fffff800`61b39060 00000000`00000110 ffffaf09`00000000 fffff800`61123311 : FLTMGR!FltpPassThroughInternal+0x90

    ffffe500`08b86fb0 fffff800`60ae7f79 : 00000000`00000000 fffff800`6109bb05 00000000`00000000 00000000`00000000 : FLTMGR!FltpCreate+0x2f3

    ffffe500`08b87060 fffff800`60ae7024 : 00000000`00000003 00000000`00000000 00000000`00000000 fffff800`60ae77e3 : nt!IofCallDriver+0x59

    ffffe500`08b870a0 fffff800`6109c1eb : ffffe500`08b87360 fffff800`6109bb05 ffffe500`08b872d0 ffffaf09`d7617150 : nt!IoCallDriverWithTracing+0x34

    ffffe500`08b870f0 fffff800`610a31bf : ffffaf09`8ffdf8f0 ffffaf09`8ffdf805 ffffaf09`af03d010 00000000`00000001 : nt!IopParseDevice+0x62b

    ffffe500`08b87260 fffff800`610a1621 : ffffaf09`af03d000 ffffe500`08b874a8 00000000`00000640 ffffaf09`8d0fc900 : nt!ObpLookupObjectName+0x78f

    ffffe500`08b87420 fffff800`610e6df0 : 00000000`00000001 ffffe500`08b87788 00000000`00000000 ffffe781`e1100180 : nt!ObOpenObjectByNameEx+0x201

    ffffe500`08b87560 fffff800`610e649d : ffffe500`08b87740 ffffe500`00100002 ffffe500`08b87788 ffffe500`08b87778 : nt!IopCreateFile+0x820

    ffffe500`08b87600 fffff800`6118dd49 : ffffaf09`d1aaaa10 ffffe500`08b877a0 00000000`00000000 00000000`00000002 : nt!IoCreateFileEx+0x11d

    ffffe500`08b876a0 fffff800`60adf98f : ffffaf09`d4a02050 00000000`00000000 00000000`00000000 ffffaf09`00000000 : nt!IopOpenLinkOrRenameTarget+0x1a5

    ffffe500`08b87840 fffff800`60c88d15 : 00000000`0000061c 000000a4`dc1399c0 00000264`2dac0070 ffffe500`00000112 : nt!NtSetInformationFile+0xacf

    ffffe500`08b87990 00007ff9`bca3c5a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25

    000000a4`dc139908 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`bca3c5a4



    THREAD_SHA1_HASH_MOD_FUNC: 9de4feadadf06925234a462dd856c0659de0c138

    THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 6a1b457b596739a0411ccb1d48d1166e28550cb7

    THREAD_SHA1_HASH_MOD: 6a6745f7be2d0972f579d510f9b72c83e6100cdc



    FOLLOWUP_IP:

    cldflt!HsmiFltPostECPCREATE+1da

    fffff804`3217fbfe f60201 test byte ptr [rdx],1



    FAULT_INSTR_CODE: 750102f6

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: cldflt!HsmiFltPostECPCREATE+1da

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: cldflt

    IMAGE_NAME: cldflt.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 3bbe4f07

    IMAGE_VERSION: 10.0.18362.449

    STACK_COMMAND: .cxr 0xffffe50008b85500 ; kb

    BUCKET_ID_FUNC_OFFSET: 1da

    FAILURE_BUCKET_ID: 0x3B_c0000005_cldflt!HsmiFltPostECPCREATE

    BUCKET_ID: 0x3B_c0000005_cldflt!HsmiFltPostECPCREATE

    PRIMARY_PROBLEM_CLASS: 0x3B_c0000005_cldflt!HsmiFltPostECPCREATE

    TARGET_TIME: 2019-11-06T11:32:13.000Z

    OSBUILD: 18362

    OSSERVICEPACK: 449

    SERVICEPACK_NUMBER: 0

    OS_REVISION: 0

    SUITE_MASK: 272

    PRODUCT_TYPE: 1

    OSPLATFORM_TYPE: x64

    OSNAME: Windows 10

    OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

    OS_LOCALE:

    USER_LCID: 0

    OSBUILD_TIMESTAMP: 2011-01-12 14:55:39

    BUILDDATESTAMP_STR: 160101.0800

    BUILDLAB_STR: WinBuild

    BUILDOSVER_STR: 10.0.18362.449

    ANALYSIS_SESSION_ELAPSED_TIME: 2019

    ANALYSIS_SOURCE: KM

    FAILURE_ID_HASH_STRING: km:0x3b_c0000005_cldflt!hsmifltpostecpcreate

    FAILURE_ID_HASH: {a70c9fc4-24a8-3907-3d56-b0e3f463c98e}



    Followup: MachineOwner

    ---------

    :)
     
    Y_765, Nov 6, 2019
    #1
  2. EAGLE51
    Eagle51 Win User

    Why no CldFlt service?


    There is no Cloud Service Filter (CldFlt) Service listed in Windows Services. You can query for it thou.
    Open Command Prompt as Admin
    sc qc CldFlt


    Note: Not sure why you wouldn't have a registry entry for it, could be you've never setup OneDrive. I do have OneDrive setup and have the following registry entries...
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CldFlt
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CldFlt
     
    Eagle51, Nov 6, 2019
    #2
  3. TERRYPIN
    Terrypin Win User
    Why no CldFlt service?


    I'm still trying to isolate the cause of frequent hard crashes. Studying Event Viewer (a daunting experience that never fails to depress me) shows a bunch of vague possibilities to pursue.

    One is Event ID 7000, "The CldFlt service failed to start due to the following error:
    The request is not supported." This occurred either just before, during or just after the latest such crash (which always need a forced restart).

    But I don't see such a service listed on my Win 10 Pro PC!

    So naturally I cannot try the suggested fix here, as I don't have the registry key described.

    How to fix cldflt service error 7000 - Rob Steele

    Insights anyone please?

    Terry, East Grinstead, UK
     
    Terrypin, Nov 6, 2019
    #3
  4. DARIAN TAB
    Darian Tab Win User

    Almost reproducible BSOD triggered by fault in cldflt.sys

    CldFlt service error event log

    HI Robert,

    The CldFlt service error may appear due to corrupted system files. In order for us effectively assist you with your concern, we just have a few questions:

    • Were there any changes made to your computer prior to the issue?
    • Have you tried clearing your browser cache and cookies?
    • Have you tried running the System File Checker tool?
    • What troubleshooting steps have you already performed?

    Regards.
     
    Darian Tab, Nov 6, 2019
    #4
Thema:

Almost reproducible BSOD triggered by fault in cldflt.sys

Loading...

  1. Almost reproducible BSOD triggered by fault in cldflt.sys - Similar Threads - Almost reproducible BSOD

  2. BSOD by cldflt

    in Windows 10 Network and Sharing
    BSOD by cldflt: Hello forum, since 5 days i'm getting an BSOD if i'm working with OneDrive. In special, if i'm deleting folders from there. I have seen, that a MEMORY.DMP was created in C:\Windows, but it has 1,6GB. So i can see a chance to upload it there. What can i do? Greetings...

  3. I have a reliably reproducible BSOD in dxgmms2.sys when watching Netflix in Edge

    in Windows 10 Ask Insider
    I have a reliably reproducible BSOD in dxgmms2.sys when watching Netflix in Edge: Hello . I am currently using the new Edge browser (the latest stable though I was facing same issue in beta) to watch Netflix as it allow hardware accelerated 1080p playback. Every time I finish an episode of a show and click next episode while the browser is in full screen...

  4. BSOD netwtw06.sys - page fault in nonpaged area

    in Windows 10 BSOD Crashes and Debugging
    BSOD netwtw06.sys - page fault in nonpaged area: Help! I am randomly getting the blue screen of death with the following error message: Stop code: PAGE_FAULT_IN_NONPAGED_AREA What failed: Netwtw06.sys It doesn't seem to be one particular event that causes this to happen, it feels random on my end. I have researched...

  5. BSOD Netwtw06.sys failed page fault in nonpaged area

    in Windows 10 BSOD Crashes and Debugging
    BSOD Netwtw06.sys failed page fault in nonpaged area: Hello! I needed some help as I don't know what to do anymore with this constant crash, sometimes it occurs every 15min and others it won't crash for days. I've been skimming threads and other fixes for weeks and have yet to find a permanent solution. Methods I attempted to...

  6. BSOD Page fault in nonpaged area Netwtw06.sys

    in Windows 10 BSOD Crashes and Debugging
    BSOD Page fault in nonpaged area Netwtw06.sys: Hey, I have been repeatedly getting Blue Screens saying Page fault in nonpaged area Netwtw06.sys. Any fixes?? Thanks https://answers.microsoft.com/en-us/windows/forum/all/bsod-page-fault-in-nonpaged-area-netwtw06sys/083826c1-3911-4eae-b734-277893bef9e6

  7. RTKVHD64.sys Page Faults

    in Windows 10 Installation and Upgrade
    RTKVHD64.sys Page Faults: Running Windows 10 64 bit version 1809. Following an Intel driver update failure (Intel (R) Corporation-System -2/22/2019 10.23.0.2437) I had no sound device on my PC and the speaker icon in the task bar had a red cross displayed. When I checked the audio in Device Manager...

  8. BSOD fault=Driver IRLQ not Less or Equal - L1C63x64.sys

    in Windows 10 BSOD Crashes and Debugging
    BSOD fault=Driver IRLQ not Less or Equal - L1C63x64.sys: Have gotten a bunch of BSOD due to this problem last few days, cleared out minidump folder so there wouldn't be anything unrelated to this problem and used your program to capture the information to see what you guys could find that would help me. I seen a few others...

  9. BSOD Problem ntsokrnl.exe, not reproducable

    in Windows 10 BSOD Crashes and Debugging
    BSOD Problem ntsokrnl.exe, not reproducable: Good evening! I hope someone on this board can help me with solving a BSOD problem I am carrying around since months now. My computer suffers from random BSODs (mainly PAGE_FAULT, IRQL_NOT_LESS and MEMORY_MANAGEMENT) since months and I can not figure out what is...

  10. Why no CldFlt service?

    in Windows 10 Support
    Why no CldFlt service?: I'm still trying to isolate the cause of frequent hard crashes. Studying Event Viewer (a daunting experience that never fails to depress me) shows a bunch of vague possibilities to pursue. One is Event ID 7000, "The CldFlt service failed to start due to the following...

Users found this page by searching for:

  1. cldflt!HsmiFltPostECPCREATE