question

MarcoPlebiscito-9352 avatar image
0 Votes"
MarcoPlebiscito-9352 asked TKujala published

Blue screen error: info and dump attached

Good morning everybody,
I got a blue screen errore this morning. It's not the first time it happens. Here's some info about the error.

  • System

    • Provider

      [ Name] Microsoft-Windows-Kernel-Power
      [ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}


      EventID 41


      Version 6


      Level 1


      Task 63


      Opcode 0


      Keywords 0x8000400000000002


    • TimeCreated

      [ SystemTime] 2020-06-14T09:24:08.010400100Z


      EventRecordID 69225


      Correlation


    • Execution

      [ ProcessID] 4
      [ ThreadID] 8


      Channel System


      Computer Y50-Marco


    • Security

      [ UserID] S-1-5-18



  • EventData

    BugcheckCode 25
    BugcheckParameter1 0x21
    BugcheckParameter2 0xfffffe4c0416e000
    BugcheckParameter3 0x1900
    BugcheckParameter4 0x2f5000007ff
    SleepInProgress 0
    PowerButtonTimestamp 0
    BootAppStatus 0
    Checkpoint 0
    ConnectedStandbyInProgress false
    SystemSleepTransitionsToOn 6
    CsEntryScenarioInstanceId 0
    BugcheckInfoFromEFI false
    CheckpointStatus 0


I also have the dump file here, sorry for it being big
https://drive.google.com/file/d/1kRfXvKoyjuyt-ojJt30JiMIa8nqJbhbU/view?usp=sharing


Thanks in advance to anyone who can help

P.S: once it happened the laptop kept restarting. I had to open it, remove a RAM stick and then reinsert it. Could it be the same RAM stick malfunctioning?

not-supported
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TKujala avatar image
0 Votes"
TKujala answered TKujala published

Here is the analysis.

You have the Windows 10 1803 version installed to your computer. If you have the latest device drivers installed, I recommend to perform an Windows 10 May 2020 Update.

It will resolve the dll errors.

https://www.microsoft.com/en-us/software-download/windows10



  •                      Bugcheck Analysis                                    *
    



BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000021, the data following the pool block being freed is corrupt. Typically this means the consumer (call stack ) has overrun the block.
Arg2: fffffe4c0416e000, The pool pointer being freed.
Arg3: 0000000000001900, The number of bytes allocated for the pool block.
Arg4: 000002f5000007ff, The corrupted value found following the pool block.

Debugging Details:




KEY_VALUES_STRING: 1

 Key  : Analysis.CPU.Sec
 Value: 3

 Key  : Analysis.DebugAnalysisProvider.CPP
 Value: Create: 8007007e on DESKTOP-SEDO9Q8

 Key  : Analysis.DebugData
 Value: CreateObject

 Key  : Analysis.DebugModel
 Value: CreateObject

 Key  : Analysis.Elapsed.Sec
 Value: 27

 Key  : Analysis.Memory.CommitPeak.Mb
 Value: 73

 Key  : Analysis.System
 Value: CreateObject


BUGCHECK_CODE: 19

BUGCHECK_P1: 21

BUGCHECK_P2: fffffe4c0416e000

BUGCHECK_P3: 1900

BUGCHECK_P4: 2f5000007ff

POOL_ADDRESS: fffffe4c0416e000 Paged session pool

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


PROCESS_NAME: explorer.exe

STACK_TEXT:
ffffcb8f`65ca0608 fffff801`c2210e8e : 00000000`00000019 00000000`00000021 fffffe4c`0416e000 00000000`00001900 : nt!KeBugCheckEx
ffffcb8f`65ca0610 fffff801`c22f9a0c : fffffe4c`0416e000 ffffcb8f`65ca07b8 00000000`00000000 00000000`00000021 : nt!ExFreeLargePool+0x126e0e
ffffcb8f`65ca06c0 fffffe0f`40ed7bec : fffffe4c`00000fb0 fffffe4c`03cf4a48 00000000`00000000 00000000`6d627047 : nt!ExFreePoolWithTag+0x5fc
ffffcb8f`65ca07a0 fffffe0f`4158535c : 00000000`00000000 fffffe4c`0416e000 fffffe4c`0416e000 00000000`00000001 : win32kfull!Win32FreePoolImpl+0x4c
ffffcb8f`65ca07d0 fffffe0f`41585288 : 00000000`00000001 fffffe4c`03cf4a48 00000000`00000000 00000000`00000014 : win32kbase!Win32FreePool+0x1c
ffffcb8f`65ca0800 fffffe0f`4157e82d : 00000000`00000000 ffffcb8f`65ca0930 00000000`00000001 00000000`00000000 : win32kbase!SURFACE::Free+0x2c
ffffcb8f`65ca0830 fffffe0f`40eba8d8 : 00000000`00000000 00000000`00000605 fffffe4c`03cf4840 ffffa104`00000000 : win32kbase!SURFACE::bDeleteSurface+0x68d
ffffcb8f`65ca09f0 fffffe0f`40e1fed8 : fffffe4c`00255be0 00000000`00000000 fffffe4c`00255be0 fffffe4c`00255be0 : win32kfull!GreDereferenceObject+0x6c
ffffcb8f`65ca0a30 fffffe0f`40e1fd77 : 00000000`00000001 00000000`00030233 00000000`00000002 fffffe0f`41587e86 : win32kfull!CleanupCursorObject+0x80
ffffcb8f`65ca0a60 fffffe0f`40e1cfbc : 00000000`00030233 ffffcb8f`00000001 00000000`00000001 00000000`00000050 : win32kfull!_DestroyCursor+0x12f
ffffcb8f`65ca0ad0 fffff801`c21ca143 : ffffa104`58a4d080 00000000`00000000 ffffa104`58a4d000 00000000`00030235 : win32kfull!NtUserDestroyCursor+0x5c
ffffcb8f`65ca0b00 00007ffe`c7d423a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0d80ed68 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`c7d423a4


SYMBOL_NAME: win32kfull!Win32FreePoolImpl+4c

MODULE_NAME: win32kfull

IMAGE_NAME: win32kfull.sys

IMAGE_VERSION: 10.0.17134.1488

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 4c

FAILURE_BUCKET_ID: 0x19_21_win32kfull!Win32FreePoolImpl

OS_VERSION: 10.0.17134.1

BUILDLAB_STR: rs4_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {ec099e7e-1832-8fd9-1686-79f50c55c8fe}

Followup: MachineOwner


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Windows failures is not currently supported here on QnA. They're actively answering question in dedicated forums here.


https://answers.microsoft.com/en-us/windows/forum/performance



--please don't forget to Accept as answer if the reply is helpful--


Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management


Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.







5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.