Code:
BugCheck 19, {3, fffffa8003629e20, dffffa8003629e20, 99fffa8003629e20}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+a53 )
Code:
Usual causes: Device driver
It appears that the pool freelist is corrupt, the pool freelist is a linked list which contains all the available pool allocations (blocks) to be used by device drivers.
Code:
0: kd> !poolval fffffa8003629e20
Pool page fffffa8003629e20 region is Nonpaged pool
Validating Pool headers for pool page: fffffa8003629e20
Pool page [ fffffa8003629000 ] is __inVALID.
Analyzing linked list...
[ fffffa8003629000 --> fffffa80036299e0 (size = 0x9e0 bytes)]: Corrupt region
Scanning for single bit errors...
None found
Code:
0: kd> !pool fffffa8003629e20
GetPointerFromAddress: unable to read from fffff800032af100
Pool page fffffa8003629e20 region is GetUlongFromAddress: unable to read from fffff800032af1c0
Nonpaged pool
fffffa8003629000 size: 620 previous size: 0 (Allocated) .... (Protected)
The pool allocation also has the Protected bit set, which basically adds some extra checking when freeing pool allocations.
Code:
0: kd> dt nt!_POOL_HEADER fffffa8003629e20
+0x000 PreviousSize : 0y01100000 (0x60)
+0x000 PoolIndex : 0y11100100 (0xe4)
+0x000 BlockSize : 0y01001011 (0x4b)
+0x000 PoolType : 0y00001000 (0x8)
+0x000 Ulong1 : 0x84be460
+0x004 PoolTag : 0xfffff8a0
+0x008 ProcessBilled : 0xfffff8a0`084be460 _EPROCESS
+0x008 AllocatorBackTraceIndex : 0xe460
+0x00a PoolTagHash : 0x84b
This seems to be a clear driver problem, there is also a pending IRP associated with the crashed thread, although the stack for the IRP can't be revealed since this information wasn't retained within the Minidump.
Code:
0: kd> !verifier
Verify Level 0 ... enabled options are:
Summary of All Verifier Statistics
RaiseIrqls 0x0
AcquireSpinLocks 0x0
Synch Executions 0x0
Trims 0x0
Pool Allocations Attempted 0x0
Pool Allocations Succeeded 0x0
Pool Allocations Succeeded SpecialPool 0x0
Pool Allocations With NO TAG 0x0
Pool Allocations Failed 0x0
Resource Allocations Failed Deliberately 0x0
Current paged pool allocations 0x0 for 00000000 bytes
Peak paged pool allocations 0x0 for 00000000 bytes
Current nonpaged pool allocations 0x0 for 00000000 bytes
Peak nonpaged pool allocations 0x0 for 00000000 bytes
Driver Verifier doesn't seem to be enabled, please follow:
Run Driver Verifier to scan for any corrupted drivers which may be causing problems, this program works by running various stress tests on drivers, in order to produce a BSOD which will locate the driver; run for least 24 hours: