*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, 109b, 44a0004, fffffa8018d0a410}
*** WARNING: Unable to verify timestamp for epfw.sys
*** ERROR: Module load completed but symbols could not be loaded for epfw.sys
GetPointerFromAddress: unable to read from fffff80002f0b100
GetUlongFromAddress: unable to read from fffff80002f0b1c0
Probably caused by : epfw.sys ( epfw+1ee1e )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 000000000000109b, (reserved)
Arg3: 00000000044a0004, Memory contents of the pool block
Arg4: fffffa8018d0a410, Address of the block of pool being deallocated
Debugging Details:
------------------
POOL_ADDRESS: fffffa8018d0a410 Nonpaged pool
FREED_POOL_TAG: Mloc
BUGCHECK_STR: 0xc2_7_Mloc
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80002e06be9 to fffff80002cdbfc0
STACK_TEXT:
fffff880`121567a8 fffff800`02e06be9 : 00000000`000000c2 00000000`00000007 00000000`0000109b 00000000`044a0004 : nt!KeBugCheckEx
fffff880`121567b0 fffff880`031a3e1e : fffffa80`11dab520 fffff880`12156860 00000000`00000000 fffff880`121569b8 : nt!ExDeferredFreePool+0x1201
fffff880`12156860 fffffa80`11dab520 : fffff880`12156860 00000000`00000000 fffff880`121569b8 00000000`00000000 : epfw+0x1ee1e
fffff880`12156868 fffff880`12156860 : 00000000`00000000 fffff880`121569b8 00000000`00000000 00000000`000005ad : 0xfffffa80`11dab520
fffff880`12156870 00000000`00000000 : fffff880`121569b8 00000000`00000000 00000000`000005ad fffffa80`0f777af0 : 0xfffff880`12156860
STACK_COMMAND: kb
FOLLOWUP_IP:
epfw+1ee1e
fffff880`031a3e1e ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: epfw+1ee1e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: epfw
IMAGE_NAME: epfw.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4e098302
FAILURE_BUCKET_ID: X64_0xc2_7_Mloc_epfw+1ee1e
BUCKET_ID: X64_0xc2_7_Mloc_epfw+1ee1e
Followup: MachineOwner
---------