locked
Bad pool caller and header BSOD suddenly occuring. RRS feed

  • Question

  • I am running windows 8.1 64 bit version. Recently I have been getting both of these bad pool blue screens. I believe that they started happening after I installed drivers for a USB to headphone jack adapter. They seem to happen usually after loading a YouTube video or when playing any games, which is why I thought that this adapter is the culprit, but the most recent one happened after clicking on a normal link with my headphones and adapter unplugged from the laptop so I'm stumped.

    Here are the minidump files:

    https://onedrive.live.com/redir?resid=433147C65656982C!286&authkey=!AF0DDOfF91XdgSA&ithint=folder%2cdmp

    Please let me know if I didn't follow any steps correctly. This is my first time asking for help here.

    Thursday, May 12, 2016 8:49 PM

Answers

  • Hi LoneHero33,

    According to your dump you provided, I find it could be caused by NETIO.SYS. I suggest that we need to update the Network drivers and disable 3rd party antivirus software to avoid the conflicts and corruption.

    Hope it will be helpful to you.


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Marked as answer by LoneHero33 Saturday, May 14, 2016 2:26 PM
    Friday, May 13, 2016 11:34 AM

All replies

  • Hi LoneHero33,

    According to your dump you provided, I find it could be caused by NETIO.SYS. I suggest that we need to update the Network drivers and disable 3rd party antivirus software to avoid the conflicts and corruption.

    Hope it will be helpful to you.


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Marked as answer by LoneHero33 Saturday, May 14, 2016 2:26 PM
    Friday, May 13, 2016 11:34 AM
  • These were related to your MBAM.  I would remove it and use the built in defender.

    Microsoft (R) Windows Debugger Version 10.0.14318.1022 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\Zigzag3143\Desktop\051116-36796-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    
    ************* Symbol Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       SRV*D:\symbols*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*D:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 8.1 Kernel Version 9600 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 9600.18264.amd64fre.winblue_ltsb.160310-0600
    Machine Name:
    Kernel base = 0xfffff803`9ea81000 PsLoadedModuleList = 0xfffff803`9ed54630
    Debug session time: Wed May 11 17:42:06.602 2016 (UTC - 4:00)
    System Uptime: 1 days 16:30:28.368
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ............................................
    Loading User Symbols
    Loading unloaded module list
    ..................................................
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck C2, {7, 1200, 0, ffffe0019ab4f6d8}
    
    *** WARNING: Unable to verify timestamp for mwac.sys
    *** ERROR: Module load completed but symbols could not be loaded for mwac.sys
    GetUlongPtrFromAddress: unable to read from fffff8039eddd298
    GetUlongPtrFromAddress: unable to read from fffff8039eddd520
    Probably caused by : NETIO.SYS ( NETIO!NetioFreeMdl+225c3 )
    
    Followup:     MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 0000000000000007, Attempt to free pool which was already freed
    Arg2: 0000000000001200, Pool tag value from the pool header
    Arg3: 0000000000000000, Contents of the first 4 bytes of the pool header
    Arg4: ffffe0019ab4f6d8, Address of the block of pool being deallocated
    
    Debugging Details:
    ------------------
    
    GetUlongPtrFromAddress: unable to read from fffff8039eddd298
    GetUlongPtrFromAddress: unable to read from fffff8039eddd520
    
    DUMP_CLASS: 1
    
    DUMP_QUALIFIER: 400
    
    BUILD_VERSION_STRING:  6.3.9600.18264 (winblue_ltsb.160310-0600)
    
    SYSTEM_MANUFACTURER:  Hewlett-Packard
    
    SYSTEM_PRODUCT_NAME:  HP Pavilion 17 Notebook PC
    
    SYSTEM_SKU:  F9A46UAR#ABA
    
    SYSTEM_VERSION:  0973110003405E00000620180
    
    BIOS_VENDOR:  Insyde
    
    BIOS_VERSION:  F.37
    
    BIOS_DATE:  10/26/2015
    
    BASEBOARD_MANUFACTURER:  Hewlett-Packard
    
    BASEBOARD_PRODUCT:  1984
    
    BASEBOARD_VERSION:  01.16
    
    DUMP_TYPE:  2
    
    BUGCHECK_P1: 7
    
    BUGCHECK_P2: 1200
    
    BUGCHECK_P3: 0
    
    BUGCHECK_P4: ffffe0019ab4f6d8
    
    POOL_ADDRESS: GetUlongPtrFromAddress: unable to read from fffff8039eddd298
    GetUlongPtrFromAddress: unable to read from fffff8039eddd520
     ffffe0019ab4f6d8 Nonpaged pool
    
    FREED_POOL_TAG:  Mdl 
    
    BUGCHECK_STR:  0xc2_7_Mdl 
    
    CPU_COUNT: 4
    
    CPU_MHZ: 9bf
    
    CPU_VENDOR:  AuthenticAMD
    
    CPU_FAMILY: 15
    
    CPU_MODEL: 13
    
    CPU_STEPPING: 1
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    PROCESS_NAME:  mbamservice.ex
    
    CURRENT_IRQL:  2
    
    ANALYSIS_SESSION_HOST:  DESKTOP-6TOHK78
    
    ANALYSIS_SESSION_TIME:  05-13-2016 07:56:35.0060
    
    ANALYSIS_VERSION: 10.0.14318.1022 amd64fre
    
    LAST_CONTROL_TRANSFER:  from fffff8039ed1ff5c to fffff8039ebcf3a0
    
    STACK_TEXT:  
    ffffd001`ca646ad8 fffff803`9ed1ff5c : 00000000`000000c2 00000000`00000007 00000000`00001200 00000000`00000000 : nt!KeBugCheckEx
    ffffd001`ca646ae0 fffff801`fcb3b8c3 : 00000000`00000000 ffffe001`a1903000 00000000`00000000 fffff801`00000000 : nt!ExDeferredFreePool+0x6ec
    ffffd001`ca646bd0 fffff801`fcd75280 : ffffe001`a18f6cd0 ffffe001`98d61230 ffffe001`990a46f0 fffff801`ff8970ee : NETIO!NetioFreeMdl+0x225c3
    ffffd001`ca646c20 fffff801`fcb12122 : ffffe001`a1903030 fffff801`00000001 00000000`00000000 00000000`00000000 : tcpip!FlpReturnNetBufferListChain+0x8dfb0
    ffffd001`ca646c70 fffff801`fcb0e3a2 : 00000000`00000000 ffffe001`a1903030 00000000`00000000 ffffe001`a18f6cd0 : NETIO!NetioDereferenceNetBufferList+0xb2
    ffffd001`ca646cb0 fffff801`fcce9753 : 00000000`00000000 ffffd001`ca646e00 00000000`00000000 00000000`00000000 : NETIO!NetioDereferenceNetBufferListChain+0x2e2
    ffffd001`ca646d50 fffff801`fcce7b31 : 00000000`00000001 ffffe001`a18f6cd0 ffffe001`99adb000 ffffe001`99adb000 : tcpip!IppReceiveHeaderBatch+0x323
    ffffd001`ca646e70 fffff801`fcdddbe4 : ffffe001`9bdb9e20 00000000`00000000 00000000`00000001 00000000`00000000 : tcpip!IppFlcReceivePacketsCore+0x671
    ffffd001`ca647190 fffff801`fceea2fd : 00000000`00000002 ffffe001`98fcff10 ffffd001`ca647469 ffffd001`ca641000 : tcpip!IppInspectInjectReceive+0x148
    ffffd001`ca6471f0 fffff803`9eb09c23 : ffffe001`a1903030 00000014`00000001 ffffe001`a18f6cd0 fffff801`fcb48983 : fwpkclnt!FwppInjectionStackCallout+0xe5
    ffffd001`ca647280 fffff801`fcefb7ae : fffff801`fceea218 ffffd001`ca6473f0 00000000`00000010 ffffe001`98d61230 : nt!KeExpandKernelStackAndCalloutInternal+0xf3
    ffffd001`ca647370 fffff801`ff8941b8 : ffffe001`98d61230 00000000`00000000 ffffe001`990a4600 00000000`00000000 : fwpkclnt!FwpsInjectTransportReceiveAsync0+0x2ea
    ffffd001`ca6474b0 ffffe001`98d61230 : 00000000`00000000 ffffe001`990a4600 00000000`00000000 ffffe001`990a0002 : mwac+0x61b8
    ffffd001`ca6474b8 00000000`00000000 : ffffe001`990a4600 00000000`00000000 ffffe001`990a0002 ffffe001`00000001 : 0xffffe001`98d61230
    
    
    STACK_COMMAND:  kb
    
    THREAD_SHA1_HASH_MOD_FUNC:  27507f4f8735398c849e70c8c087d9160e2009c9
    
    THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  642454ac974ce41b1fef9f95b0c3c55f66ff6d58
    
    THREAD_SHA1_HASH_MOD:  8fdf7d3de3da0b5f267f12ace37e91490c114737
    
    FOLLOWUP_IP: 
    NETIO!NetioFreeMdl+225c3
    fffff801`fcb3b8c3 90              nop
    
    FAULT_INSTR_CODE:  dadce990
    
    SYMBOL_STACK_INDEX:  2
    
    SYMBOL_NAME:  NETIO!NetioFreeMdl+225c3
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: NETIO
    
    IMAGE_NAME:  NETIO.SYS
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  5681bedf
    
    IMAGE_VERSION:  6.3.9600.18183
    
    BUCKET_ID_FUNC_OFFSET:  225c3
    
    FAILURE_BUCKET_ID:  0xc2_7_Mdl__NETIO!NetioFreeMdl
    
    BUCKET_ID:  0xc2_7_Mdl__NETIO!NetioFreeMdl
    
    PRIMARY_PROBLEM_CLASS:  0xc2_7_Mdl__NETIO!NetioFreeMdl
    
    TARGET_TIME:  2016-05-11T21:42:06.000Z
    
    OSBUILD:  9600
    
    OSSERVICEPACK:  18264
    
    SERVICEPACK_NUMBER: 0
    
    OS_REVISION: 0
    
    SUITE_MASK:  784
    
    PRODUCT_TYPE:  1
    
    OSPLATFORM_TYPE:  x64
    
    OSNAME:  Windows 8.1
    
    OSEDITION:  Windows 8.1 WinNt TerminalServer SingleUserTS Personal
    
    OS_LOCALE:  
    
    USER_LCID:  0
    
    OSBUILD_TIMESTAMP:  2016-03-10 11:12:58
    
    BUILDDATESTAMP_STR:  160310-0600
    
    BUILDLAB_STR:  winblue_ltsb
    
    BUILDOSVER_STR:  6.3.9600.18264
    
    ANALYSIS_SESSION_ELAPSED_TIME: 725
    
    ANALYSIS_SOURCE:  KM
    
    FAILURE_ID_HASH_STRING:  km:0xc2_7_mdl__netio!netiofreemdl
    
    FAILURE_ID_HASH:  {f2c46e80-d936-89a0-13f9-f9b302dc640b}
    
    Followup:     MachineOwner
    ---------
    
    


    Wanikiya and Dyami--Team Zigzag Windows IT-PRO (MS-MVP)

    Friday, May 13, 2016 12:01 PM
  • I have disabled the realtime malware and website protection. Would this be enough? I would prefer not to uninstall it because of it's auto daily scan, but I will if it's really causing the problems. And how would I go about updating my Network Drivers?
    Friday, May 13, 2016 6:19 PM
  • Hi LoneHero33,

    Thank you for your reply. To check for a driver using Device Manager

    1. Swipe in from the right edge of the screen, and then tap Search.
      (If you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search.) ‌
    2. Enter Device Manager in the search box, and then tap or click Device Manager.‌
    3. Double-tap or double-click Network Adapters, press and hold or right-click your adapter, and then tap or click Properties.
    4. Tap or click the Driver tab, and then tap or click Update Driver.

    If it doesn’t work, please download from the manufacturer official website. According to the machine model, you could download corresponding driver.

    Hope it will be helpful to you.


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, May 16, 2016 8:00 AM