locked
BSOD Bad_Pool_Caller Windows 8 RRS feed

  • Question

  • Hello my photo booth is having issues.  I have an elo touch screen hooked up to the vga port on the computer and a slideshow monitor hooked up with a usb2vgapro video card adapter.  usb out also goes to dslr camera and powered usb hub.  powered usb hub goes to elo touch screen and printer. At shut down I get the error bad_pool_caller I have also seen system_service_exception too.  I am desperate for assistance. 

    http://sdrv.ms/1cGNJ91

    Wednesday, September 4, 2013 6:32 PM

Answers

  • activate driver verifier and upload the larger Memory.dmp (zip the file before uploading)

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-16-WinDbg-Driver-Verifier

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-17-WinDbg-Driver-Verifier-Part-2

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-18-WinDbg-Driver-Verifier-Part-3


    "A programmer is just a tool which converts caffeine into code"

    • Marked as answer by Niki Han Tuesday, September 10, 2013 3:05 AM
    Friday, September 6, 2013 6:37 PM
    Answerer

All replies

  • *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff80154cc2ee1, Address of the instruction which caused the bugcheck
    Arg3: fffff8801bd69da0, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.
    
    FAULTING_IP: 
    nt!MiGetVadWakeList+11
    fffff801`54cc2ee1 4d8b10          mov     r10,qword ptr [r8]
    
    CONTEXT:  fffff8801bd69da0 -- (.cxr 0xfffff8801bd69da0;r)
    rax=0000000000000000 rbx=fffffa8006b46cc0 rcx=fffffa8006b46cc0
    rdx=0000000000000002 rsi=0000000000000000 rdi=0000000000000001
    rip=fffff80154cc2ee1 rsp=fffff8801bd6a7a8 rbp=fffffa8003cd2940
     r8=0000000000000001  r9=fffffa80047d3530 r10=0000000000000001
    r11=fffff8801bd6a790 r12=0000000000000000 r13=000000000c32afff
    r14=0000000000000000 r15=0000000000000001
    iopl=0         nv up ei pl nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
    nt!MiGetVadWakeList+0x11:
    fffff801`54cc2ee1 4d8b10          mov     r10,qword ptr [r8] ds:002b:00000000`00000001=????????????????
    Last set context:
    rax=0000000000000000 rbx=fffffa8006b46cc0 rcx=fffffa8006b46cc0
    rdx=0000000000000002 rsi=0000000000000000 rdi=0000000000000001
    rip=fffff80154cc2ee1 rsp=fffff8801bd6a7a8 rbp=fffffa8003cd2940
     r8=0000000000000001  r9=fffffa80047d3530 r10=0000000000000001
    r11=fffff8801bd6a790 r12=0000000000000000 r13=000000000c32afff
    r14=0000000000000000 r15=0000000000000001
    iopl=0         nv up ei pl nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
    nt!MiGetVadWakeList+0x11:
    fffff801`54cc2ee1 4d8b10          mov     r10,qword ptr [r8] ds:002b:00000000`00000001=????????????????
    Resetting default scope
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    PROCESS_NAME:  splwow64.exe
    
    CURRENT_IRQL:  0
    
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    
    LAST_CONTROL_TRANSFER:  from fffff801550456a5 to fffff80154cc2ee1
    
    STACK_TEXT:  
    00 nt!MiGetVadWakeList
    01 nt!MiRemoveVadCharges
    02 nt!MiFinishVadDeletion
    03 nt!MiUnmapVad
    04 nt!MmCleanProcessAddressSpace
    05 nt!PspExitThread
    06 nt!PsExitSpecialApc
    07 nt!KiDeliverApc
    08 nt!KiInitiateUserApc
    09 nt!KiSystemServiceExit
    0a 0x0
    
    
    
    IMAGE_NAME:  memory_corruption
    
    ANALYSIS_SOURCE:  KM
    
    FAILURE_ID_HASH_STRING:  km:0x3b_nt!migetvadwakelist
    

    I have no idea what nt!MiGetVadWakeList does why the memory is corrupted.

    Try to update those 3 drivers:

        Image path: \SystemRoot\system32\drivers\dlkmd.sys
        Image name: dlkmd.sys
        Browse all global symbols  functions  data
        Timestamp:        Wed Apr 03 07:30:04 2013 (515BBE5C)
    
    
    
        Image path: \SystemRoot\system32\drivers\NISx64\1401000.018\SYMEFA64.SYS
        Image name: SYMEFA64.SYS
        Browse all global symbols  functions  data
        Timestamp:        Mon Aug 06 21:31:31 2012 
    
            
        Loaded symbol image file: atikmdag.sys
        Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
        Image name: atikmdag.sys
        Browse all global symbols  functions  data
        Timestamp:        Wed Dec 19 21:38:55 2012 

    because I can see those drivers floating around near to your callstack :

    Start memory scan  : 0xfffff8801bd694a8 ($csp)
    End memory scan    : 0xfffff8801bd6b000 (Stack Base)
    
                   rsp : 0xfffff8801bd694a8 : 0xfffff80154c67769 : nt!KiBugCheckDispatch+0x69
    0xfffff8801bd694a8 : 0xfffff80154c67769 : nt!KiBugCheckDispatch+0x69
    0xfffff8801bd694c0 : 0xfffff80154cc2ee1 : nt!MiGetVadWakeList+0x11
    0xfffff8801bd695e0 : 0xfffff80154c674fa : nt!KiSystemServiceExit+0x9f
    0xfffff8801bd695e8 : 0xfffff80154c670bc : nt!KiSystemServiceHandler+0x7c
    0xfffff8801bd69600 : 0xfffff80155079fb8 : nt!PspExitThread+0x5e8
    0xfffff8801bd69628 : 0xfffff80154cd447d : nt!RtlpExecuteHandlerForException+0xd
    0xfffff8801bd69650 : 0xfffff8801bd69710 : 0xfffff80154c674fa : nt!KiSystemServiceExit+0x9f
    0xfffff8801bd69658 : 0xfffff80154cfc364 : nt!RtlDispatchException+0x458
    0xfffff8801bd69688 : 0xfffff880014ded12 : fltmgr!FltpGetStreamListCtrl+0x62
    0xfffff8801bd69698 : 0xfffff80155376e3b : hal!KeQueryPerformanceCounter+0x4b
    0xfffff8801bd696d0 : 0xfffff80154f1f410 : "nt!KiInitialPCR <PERF> (nt+0x311410)"
    0xfffff8801bd696d8 : 0xfffff80154e163f0 : nt!HV_EVENTLOG_IOMMU_INIT_WARNING_BAD_ACPI_TABLE+0xc
    0xfffff8801bd69710 : 0xfffff80154c674fa : nt!KiSystemServiceExit+0x9f
    0xfffff8801bd69720 : 0xfffff80154f1f410 : "nt!KiInitialPCR <PERF> (nt+0x311410)"
    Unable to load image \SystemRoot\system32\drivers\dlkmd.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for dlkmd.sys
    *** ERROR: Module load completed but symbols could not be loaded for dlkmd.sys
    0xfffff8801bd69740 : 0xfffff80154c67040 : nt!KiSystemServiceHandler
    0xfffff8801bd69748 : 0xfffff80154e163f0 : nt!HV_EVENTLOG_IOMMU_INIT_WARNING_BAD_ACPI_TABLE+0xc
    0xfffff8801bd69788 : 0xfffff88005817910 : dxgmms1!VidSchDdiNotifyInterrupt+0xcc
    0xfffff8801bd697b8 : 0xfffff88005893275 : dxgkrnl!DxgNotifyInterruptCB+0x65
    Unable to load image \SystemRoot\system32\drivers\NISx64\1401000.018\SYMEFA64.SYS, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for SYMEFA64.SYS
    *** ERROR: Module load completed but symbols could not be loaded for SYMEFA64.SYS
    0xfffff8801bd69838 : 0xfffff880014ddf78 : fltmgr!FltpPerformPostCallbacks+0x358
    0xfffff8801bd698b0 : 0xfffff80154f5f888 : nt!KeNodeBlock+0x8
    0xfffff8801bd698c0 : 0xfffff80154f06180 : nt!KiInitialPCR+0x180
    Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for atikmdag.sys
    *** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
    0xfffff8801bd69b18 : 0xfffff801553802a1 : hal!HalpApicRequestInterrupt+0x1e5
    0xfffff8801bd69b90 : 0xfffff8801bd69c60 : 0xfffff80154f23004 : "nt!KiInitialPCR <PERF> (nt+0x315004)"
    0xfffff8801bd69b98 : 0xfffff80155371325 : hal!HalpInterruptSendIpi+0x576
    0xfffff8801bd69bb0 : 0xfffff8801bd69cd0 : 0xfffff80154f2469c : "nt!KiInitialPCR <PERF> (nt+0x31669c)"
    0xfffff8801bd69c30 : 0xfffff8801bd69c90 : 0xfffff80154f226c8 : "nt!KiInitialPCR <PERF> (nt+0x3146c8)"
    0xfffff8801bd69c48 : 0xfffff80154c671c0 : nt!KiSystemCall64
    0xfffff8801bd69c50 : 0xfffff801550a5b08 : nt!PsDereferencePrimaryToken
    0xfffff8801bd69c60 : 0xfffff80154f23004 : "nt!KiInitialPCR <PERF> (nt+0x315004)"
    0xfffff8801bd69c70 : 0xfffff80154f3dbc0 : "nt!KiInitialPCR <PERF> (nt+0x32fbc0)"
    0xfffff8801bd69c80 : 0xfffff80154f2139c : "nt!KiInitialPCR <PERF> (nt+0x31339c)"
    0xfffff8801bd69c90 : 0xfffff80154f226c8 : "nt!KiInitialPCR <PERF> (nt+0x3146c8)"
    0xfffff8801bd69ca0 : 0xfffff80154f400b0 : "nt!KiInitialPCR <PERF> (nt+0x3320b0)"
    0xfffff8801bd69cb0 : 0xfffff80154f3f21c : "nt!KiInitialPCR <PERF> (nt+0x33121c)"
    0xfffff8801bd69cc0 : 0xfffff80154f40860 : "nt!KiInitialPCR <PERF> (nt+0x332860)"
    0xfffff8801bd69cd0 : 0xfffff80154f2469c : "nt!KiInitialPCR <PERF> (nt+0x31669c)"
    0xfffff8801bd69ce0 : 0xfffff80154f24cc0 : "nt!KiInitialPCR <PERF> (nt+0x316cc0)"
    0xfffff8801bd69cf0 : 0xfffff80154f1f410 : "nt!KiInitialPCR <PERF> (nt+0x311410)"
    0xfffff8801bd69d00 : 0xfffff80154cc2ee1 : nt!MiGetVadWakeList+0x11
    0xfffff8801bd69d08 : 0xfffff80154cc2ee3 : nt!MiGetVadWakeList+0x13
    0xfffff8801bd69d68 : 0xfffff80154cd61d6 : nt!KiDispatchException+0x455
    0xfffff8801bd69de8 : 0xfffff80154cd4c36 : nt!MiUpdatePageFileSectionList+0x11a
    0xfffff8801bd69e38 : 0xfffff8801bd6a7a8 : 0xfffff801550456a5 : nt!MiRemoveVadCharges+0x1c3
    0xfffff8801bd69e70 : 0xfffff8801bd6a790 : 0xfffff8801bd6a7a8 : 0xfffff801550456a5 : nt!MiRemoveVadCharges+0x1c3
    0xfffff8801bd69e98 : 0xfffff80154cc2ee1 : nt!MiGetVadWakeList+0x11
    0xfffff8801bd69ee0 : 0xfffff80154f5f888 : nt!KeNodeBlock+0x8
    0xfffff8801bd69ef0 : 0xfffff80154f06180 : nt!KiInitialPCR+0x180
    


    "A programmer is just a tool which converts caffeine into code"

    Wednesday, September 4, 2013 6:43 PM
    Answerer
  • Thanks so much for the very fast response.  I have been following your responses for over a month.  Here are some other dump files.  They are from the same computer.  I have a total of 8 machines with these issues.  Some with amd some with intel.

    http://sdrv.ms/18sKnDC

    http://sdrv.ms/18sKqiR

    http://sdrv.ms/18sKy1N

    http://sdrv.ms/18sKS0v

    http://sdrv.ms/18sKXkE

    Wednesday, September 4, 2013 6:56 PM
  • You also get Win32k.sys related crashes:

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 0000000000000007, Attempt to free pool which was already freed
    Arg2: 00000000000011c1, (reserved)
    Arg3: 0000000004040013, Memory contents of the pool block
    Arg4: fffffa800475c5a0, Address of the block of pool being deallocated
    
    Debugging Details:
    ------------------
    
    
    POOL_ADDRESS:  fffffa800475c5a0 Nonpaged pool
    
    FREED_POOL_TAG:  MmSe
    
    BUGCHECK_STR:  0xc2_7_MmSe
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    PROCESS_NAME:  DarkroomBooth.
    
    CURRENT_IRQL:  0
    
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    
    LAST_CONTROL_TRANSFER:  from fffff80105084a5a to fffff80104e8ed40
    
    STACK_TEXT: 
    nt!KeBugCheckEx
    nt!ExDeferredFreePool
    nt!MmUnsecureVirtualMemory
    win32k!SURFACE::bDeleteSurface
    win32k!vCleanupSurfaces
    win32k!NtGdiCloseProcess
    win32k!GdiProcessCallout
    win32k!W32pProcessCallout
    win32k!W32CalloutDispatch
    nt!ExCallCallBack
    nt!PspExitThread
    nt!PsExitSpecialApc
    nt!KiDeliverApc
    nt!KiInitiateUserApc
    nt!KiSystemServiceExit
    0x0
    
    
    
    
    
    BiosVersion = 6.20
    BiosReleaseDate = 01/09/2013
    SystemManufacturer = TOSHIBA
    SystemProductName = Satellite C855D
    SystemFamily = Dakar 10ABX/10ABXG
    
    
    
    
    
    ProcessorNameString = REG_SZ AMD E-300 APU with Radeon(tm) HD Graphics
    Update Status = REG_SZ Existing Patch Level Already Current"
    VendorIdentifier = REG_SZ AuthenticAMD
    

    this is a known issue with older AMD GPu drivers, So get the latest driver

    http://support.amd.com/us/kbarticles/Pages/AMDCatalyst13-8WINBetaDriver.aspx

    and also install this update:

    http://support.microsoft.com/kb/2818604


    "A programmer is just a tool which converts caffeine into code"

    Wednesday, September 4, 2013 7:36 PM
    Answerer
  • Thanks so much.  Here are the dump files for an toshiba satellite intel i3 pc & win 8.  What do these tell you?

    http://sdrv.ms/17FaJCe

    http://sdrv.ms/1a7wLzM

    http://sdrv.ms/1a7wQn5

    Wednesday, September 4, 2013 8:33 PM
  • *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    BAD_POOL_HEADER (19)
    The pool is already corrupt at the time of the current request.
    This may or may not be due to the caller.
    The internal pool links must be walked to figure out a possible cause of
    the problem, and then special pool applied to the suspect tags or the driver
    verifier to a suspect driver.
    Arguments:
    Arg1: 0000000000000003, the pool freelist is corrupt.
    Arg2: fffffa800ae83c50, the pool entry being checked.
    Arg3: fffffa800485e710, the read back flink freelist value (should be the same as 2).
    Arg4: fffffa800ae83c50, the read back blink freelist value (should be the same as 2).
    
    Debugging Details:
    ------------------
    
    
    OVERLAPPED_MODULE: Address regions for 'hidusb' and 'WinUsb.sys' overlap
    
    BUGCHECK_STR:  0x19_3
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    PROCESS_NAME:  svchost.exe
    
    CURRENT_IRQL:  2
    
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    
    LAST_CONTROL_TRANSFER:  from fffff80333af4534 to fffff803338fed40
    
    STACK_TEXT:  
    00 nt!KeBugCheckEx
    01 nt!ExDeferredFreePool
    02 nt!IoSetCompletionRoutineEx
    03 Wdf01000!FxIoTarget::SubmitLocked
    04 Wdf01000!FxIoTarget::Submit
    05 Wdf01000!imp_WdfRequestSend
    06 THAccel
    07 0x0
    
    
    FAILURE_ID_HASH_STRING:  km:0x19_3_nt!exdeferredfreepool
    
             
        Loaded symbol image file: THAccel.sys
        Image path: \SystemRoot\system32\DRIVERS\THAccel.sys
        Image name: THAccel.sys
        Browse all global symbols  functions  data
        Timestamp:        Thu Aug 09 05:44:38 2012

    what is this THAccel.sys? Look for an update.

    "A programmer is just a tool which converts caffeine into code"

    Thursday, September 5, 2013 5:21 AM
    Answerer
  • THAccel.sys is part of HDD Hard Disk Drive. I have the most recent update. I tested my setup using a windows 7 computer and I had no issues.  I think I need to order Dell laptops with win7.  I have computers that need to be fixed.  Do the dumps read anything other than THAccel.sys? The graphics card needed an update but not sure if Windows Update includes that?
    Friday, September 6, 2013 12:47 PM
  • http://sdrv.ms/14xfrzR

    I updated the graphics cards and windows update.  Still crashing

    Friday, September 6, 2013 3:11 PM
  • activate driver verifier and upload the larger Memory.dmp (zip the file before uploading)

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-16-WinDbg-Driver-Verifier

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-17-WinDbg-Driver-Verifier-Part-2

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-18-WinDbg-Driver-Verifier-Part-3


    "A programmer is just a tool which converts caffeine into code"

    • Marked as answer by Niki Han Tuesday, September 10, 2013 3:05 AM
    Friday, September 6, 2013 6:37 PM
    Answerer
  • Follow these steps to get rid of this annoying issue:-


    - Identify Hardware Problems 
    - Run System in Safe Mode 
    - Reinstall the Security Software
    - Start Security Scan 
    - Scan for Registry Errors 



    More details of given steps are available here:-
    http://www.backspacetab.com/fix-bad-pool-caller-windows-8/



    Monday, September 9, 2013 9:41 AM