Blue screen error: info and dump attached

Question

Good morning everybody,
I got a blue screen errore this morning. It's not the first time it happens. Here's some info about the error.

• System
  • Provider
  [ Name] Microsoft-Windows-Kernel-Power
  [ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4} EventID 41 Version 6 Level 1 Task 63 Opcode 0 Keywords 0x8000400000000002
  • TimeCreated
  [ SystemTime] 2020-06-14T09:24:08.010400100Z EventRecordID 69225 Correlation
  • Execution
  [ ProcessID] 4
  [ ThreadID] 8 Channel System Computer Y50-Marco
  • Security
  [ UserID] S-1-5-18
• EventData BugcheckCode 25
  BugcheckParameter1 0x21
  BugcheckParameter2 0xfffffe4c0416e000
  BugcheckParameter3 0x1900
  BugcheckParameter4 0x2f5000007ff
  SleepInProgress 0
  PowerButtonTimestamp 0
  BootAppStatus 0
  Checkpoint 0
  ConnectedStandbyInProgress false
  SystemSleepTransitionsToOn 6
  CsEntryScenarioInstanceId 0
  BugcheckInfoFromEFI false
  CheckpointStatus 0

I also have the dump file here, sorry for it being big
https://drive.google.com/file/d/1kRfXvKoyjuyt-ojJt30JiMIa8nqJbhbU/view?usp=sharing

Thanks in advance to anyone who can help

P.S: once it happened the laptop kept restarting. I had to open it, remove a RAM stick and then reinsert it. Could it be the same RAM stick malfunctioning?

Answer 1

Here is the analysis.

You have the Windows 10 1803 version installed to your computer. If you have the latest device drivers installed, I recommend to perform an Windows 10 May 2020 Update.

It will resolve the dll errors.

https://www.microsoft.com/en-us/software-download/windows10

---

• *
• Bugcheck Analysis *
• *

  ---

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000021, the data following the pool block being freed is corrupt. Typically this means the consumer (call stack ) has overrun the block.
Arg2: fffffe4c0416e000, The pool pointer being freed.
Arg3: 0000000000001900, The number of bytes allocated for the pool block.
Arg4: 000002f5000007ff, The corrupted value found following the pool block.

Debugging Details:

---

KEY_VALUES_STRING: 1

Key  : Analysis.CPU.Sec
Value: 3

Key  : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-SEDO9Q8

Key  : Analysis.DebugData
Value: CreateObject

Key  : Analysis.DebugModel
Value: CreateObject

Key  : Analysis.Elapsed.Sec
Value: 27

Key  : Analysis.Memory.CommitPeak.Mb
Value: 73

Key  : Analysis.System
Value: CreateObject

BUGCHECK_CODE: 19

BUGCHECK_P1: 21

BUGCHECK_P2: fffffe4c0416e000

BUGCHECK_P3: 1900

BUGCHECK_P4: 2f5000007ff

POOL_ADDRESS: fffffe4c0416e000 Paged session pool

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXPNP: 1 (!blackboxpnp)

PROCESS_NAME: explorer.exe

STACK_TEXT:
ffffcb8f65ca0608 fffff801c2210e8e : 0000000000000019 0000000000000021 fffffe4c0416e000 0000000000001900 : nt!KeBugCheckEx
ffffcb8f65ca0610 fffff801c22f9a0c : fffffe4c0416e000 ffffcb8f65ca07b8 0000000000000000 0000000000000021 : nt!ExFreeLargePool+0x126e0e
ffffcb8f65ca06c0 fffffe0f40ed7bec : fffffe4c00000fb0 fffffe4c03cf4a48 0000000000000000 000000006d627047 : nt!ExFreePoolWithTag+0x5fc
ffffcb8f65ca07a0 fffffe0f4158535c : 0000000000000000 fffffe4c0416e000 fffffe4c0416e000 0000000000000001 : win32kfull!Win32FreePoolImpl+0x4c
ffffcb8f65ca07d0 fffffe0f41585288 : 0000000000000001 fffffe4c03cf4a48 0000000000000000 0000000000000014 : win32kbase!Win32FreePool+0x1c
ffffcb8f65ca0800 fffffe0f4157e82d : 0000000000000000 ffffcb8f65ca0930 0000000000000001 0000000000000000 : win32kbase!SURFACE::Free+0x2c
ffffcb8f65ca0830 fffffe0f40eba8d8 : 0000000000000000 0000000000000605 fffffe4c03cf4840 ffffa10400000000 : win32kbase!SURFACE::bDeleteSurface+0x68d
ffffcb8f65ca09f0 fffffe0f40e1fed8 : fffffe4c00255be0 0000000000000000 fffffe4c00255be0 fffffe4c00255be0 : win32kfull!GreDereferenceObject+0x6c
ffffcb8f65ca0a30 fffffe0f40e1fd77 : 0000000000000001 0000000000030233 0000000000000002 fffffe0f41587e86 : win32kfull!CleanupCursorObject+0x80
ffffcb8f65ca0a60 fffffe0f40e1cfbc : 0000000000030233 ffffcb8f00000001 0000000000000001 0000000000000050 : win32kfull!_DestroyCursor+0x12f
ffffcb8f65ca0ad0 fffff801c21ca143 : ffffa10458a4d080 0000000000000000 ffffa10458a4d000 0000000000030235 : win32kfull!NtUserDestroyCursor+0x5c
ffffcb8f65ca0b00 00007ffec7d423a4 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13
000000000d80ed68 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x00007ffe`c7d423a4

SYMBOL_NAME: win32kfull!Win32FreePoolImpl+4c

MODULE_NAME: win32kfull

IMAGE_NAME: win32kfull.sys

IMAGE_VERSION: 10.0.17134.1488

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 4c

FAILURE_BUCKET_ID: 0x19_21_win32kfull!Win32FreePoolImpl

OS_VERSION: 10.0.17134.1

BUILDLAB_STR: rs4_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {ec099e7e-1832-8fd9-1686-79f50c55c8fe}

Followup: MachineOwner

Answer 2

Windows failures is not currently supported here on QnA. They're actively answering question in dedicated forums here.

https://answers.microsoft.com/en-us/windows/forum/performance

--please don't forget to Accept as answer if the reply is helpful--

---

Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management

Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.