BAD_POOL_HEADER bugcheck in Kmdf

I’ve gotten a dump file that shows a BAD_POOL_HEADER bugcheck in a Kmdf
worker thread. So far it’s got me stumped, if it’s my bug.

The crash occurs in an internal Kmdf worker thread, doing some inscrutable
C++ stuff. While the bugcheck indicates a problem with the size field, that
does not appear to be the case. The pool being freed is already free (and
previously owned by Ntfs).

The current state of things is that a general object with several offspring
objects is being deleted. One of the offspring objects is a manual queue.
In response to an ioctl, an attempt was just made to forward a request to
the manual queue. That failed, and the request was completed with
STATUS_DEVICE_BUSY.

I have appended relevant windbg output below.

Any ideas?

Thanks,

  • Dan.

1: kd> !analyze -v
****************************************************************************
***
*
*
* Bugcheck Analysis
*
*
*
****************************************************************************
***

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 89082d50, The pool entry we were looking for within the page.
Arg3: 89083990, The next pool entry.
Arg4: 89885b58, (reserved)

Debugging Details:

OVERLAPPED_MODULE: Address regions for ‘vmx86’ and ‘Serial.SYS’ overlap

BUGCHECK_STR: 0x19_20

POOL_ADDRESS: 89082d50 Nonpaged pool

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 808927bb to 80827451

STACK_TEXT:
f78e2c4c 808927bb 00000019 00000020 89082d50 nt!KeBugCheckEx+0x1b
f78e2cb4 f72f0ef4 89082d58 00000000 89885b68 nt!ExFreePoolWithTag+0x477
f78e2ccc f72ec0e9 89885b68 f78e2ce8 f72fc21a Wdf01000!FxPoolFree+0xc4
f78e2cd8 f72fc21a 89885b68 89885b68 f78e2d08 Wdf01000!FxObject::operator
delete+0x13
f78e2ce8 f72c5970 00000001 f72f201f 89885b84 Wdf01000!FxObject::`vector
deleting destructor’+0x19
f78e2cf0 f72f201f 89885b84 00000000 00000000
Wdf01000!FxObject::SelfDestruct+0xb
f78e2d08 f72f29c8 89f70200 89f70238 00000000
Wdf01000!FxObject::ProcessDestroy+0x9f
f78e2d20 f72fadd0 89f1bb08 89f70200 89f1f818
Wdf01000!FxObject::DeferredDisposeWorkItem+0x4b
f78e2d3c f72fae11 f78e2d53 89f70200 89f1f818
Wdf01000!FxDisposeList::DrainListLocked+0x5d
f78e2d58 f72fae7f 89f94660 89f4dc98 89f1f818
Wdf01000!FxDisposeList::WorkItemHandler+0x27
f78e2d6c 808eb5d7 89f4dc98 89f70200 808ae5fc
Wdf01000!FxDisposeList::WorkItemThunk+0x15
f78e2d80 8087f925 89f1f818 00000000 89f94660 nt!IopProcessWorkItem+0x13
f78e2dac 80948bb2 89f1f818 00000000 00000000 nt!ExpWorkerThread+0xeb
f78e2ddc 8088d4d2 8087f83a 00000001 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

STACK_COMMAND: kb

FOLLOWUP_IP:
Wdf01000!FxPoolFree+c4
f72f0ef4 5e pop esi

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: Wdf01000!FxPoolFree+c4

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Wdf01000

IMAGE_NAME: Wdf01000.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4549b23a

FAILURE_BUCKET_ID: 0x19_20_Wdf01000!FxPoolFree+c4

BUCKET_ID: 0x19_20_Wdf01000!FxPoolFree+c4

Followup: MachineOwner

1: kd> !pool 89082d50
Pool page 89082d50 region is Nonpaged pool
89082000 size: 98 previous size: 0 (Allocated) File (Protected)
89082098 size: 510 previous size: 98 (Free) …
890825a8 size: 40 previous size: 510 (Allocated) Ntfr
890825e8 size: 8 previous size: 40 (Free) Ntfr
890825f0 size: 198 previous size: 8 (Allocated) Ntft
89082788 size: 98 previous size: 198 (Allocated) File (Protected)
89082820 size: 18 previous size: 98 (Free) usbp
89082838 size: 28 previous size: 18 (Allocated) NtFs
89082860 size: 98 previous size: 28 (Allocated) File (Protected)
890828f8 size: 18 previous size: 98 (Free) Ntfn
89082910 size: 50 previous size: 18 (Allocated) TCPC
89082960 size: 30 previous size: 50 (Allocated) Even (Protected)
89082990 size: 190 previous size: 30 (Free) NtFs
89082b20 size: 40 previous size: 190 (Allocated) SeTd
89082b60 size: 8 previous size: 40 (Free) Ntfr
89082b68 size: a8 previous size: 8 (Allocated) File (Protected)
89082c10 size: 70 previous size: a8 (Allocated) MmCa
89082c80 size: 40 previous size: 70 (Allocated) WmiR
89082cc0 size: 18 previous size: 40 (Free) usbp
89082cd8 size: 70 previous size: 18 (Allocated) MmCa
*89082d48 size: 208 previous size: 70 (Free) *NtFs
Pooltag NtFs : StrucSup.c, Binary : ntfs.sys
89082f50 size: 70 previous size: 208 (Allocated) MmCa
89082fc0 size: 40 previous size: 70 (Allocated) Ntfr

1: kd> dd 89082d48
89082d48 0041000e 7346744e 89885b58 808aed10
89082d58 88f88518 89f475a8 f732cef4 01d81003
89082d68 00000000 89f475a8 000c0058 89082d74
89082d78 89082d74 00000000 00000000 89082d84
89082d88 89082d84 00000000 00000000 f7329f40
89082d98 00050101 00046100 00000001 89082da4
89082da8 89082da4 00000001 0000ad00 00000001
89082db8 00000003 00000002 89082dc0 89082dc0

1: kd> !wdfqueue 0x7677a490

Dumping WDFQUEUE 0x7677a490

Manual, Deleted, Disposing, Not power-managed, PowerOn, Cannot accept, Can
dispatch, Dispatching, ExecutionLevelDispatch, SynchronizationScopeNone
Number of driver owned requests: 0
Number of waiting requests: 0

EvtIoCanceledOnQueue: (0xf754873c) AAVolFlt!AAVolNotifyCanceledOnQueue

1: kd> !wdflogdump aavolflt
Trace searchpath is:

Trace format prefix is: %7!u!: %!FUNC! -
TMF file used for formatting IFR log is:
c:\winddk\6000\tools\tracing\i386\wdf01005.tmf
Log at 89f13000
Gather log: Please wait, this may take a moment (reading 4032 bytes).
% read so far … 10, 20, 30, 40, 50, 60, 70, 80, 90, 100
There are 93 log entries
— start of log —
5283: FxIoQueue::QueuePurge - All driver cancellable requests cancelled in
WDFQUEUE 0x76E58B08
5284: FxIoQueue::Dispose - Purging WDFQUEUE 0x768721E8 synchronously
5285: FxIoQueue::QueuePurge - All WDFQUEUE 0x768721E8 requests cancelled
5286: FxIoQueue::QueuePurge - All driver cancellable requests cancelled in
WDFQUEUE 0x768721E8
5287: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 766D7EB8 cleared
pointers F78E2814 state WdfIoTargetClosedForQueryRemove, open state 1, pdo
89D664B0, fileobj 8994D258, handle 00000000
5288: FxIoTargetRemote::Close - WDFIOTARGET 766D7EB8 derefing PDO 89D664B0
on close
5289: FxIoTargetRemote::Close - WDFIOTARGET 766D7EB8 derefing FileObj
8994D258 on close
5290: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 766D7EB8 cleared
pointers F78E27C4 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5291: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 77388118 cleared
pointers F78DE814 state WdfIoTargetClosedForQueryRemove, open state 1, pdo
899175A8, fileobj 89183D30, handle 00000000
5292: FxIoTargetRemote::Close - WDFIOTARGET 77388118 derefing PDO 899175A8
on close
5293: FxIoTargetRemote::Close - WDFIOTARGET 77388118 derefing FileObj
89183D30 on close
5294: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 77388118 cleared
pointers F78DE7C4 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5295: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering PnP State WdfDevStatePnpInit from WdfDevStatePnpObjectCreated
5296: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering PnP State WdfDevStatePnpInit from WdfDevStatePnpObjectCreated
5297: FxPkgPnp::Dispatch - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0,
IRP_MJ_PNP, 0x00000000(IRP_MN_START_DEVICE) IRP 0x8981F6E0
5298: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering PnP State WdfDevStatePnpInitStarting from WdfDevStatePnpInit
5299: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering PnP State WdfDevStatePnpHardwareAvailable from
WdfDevStatePnpInitStarting
5300: FxPkgPnp::NotPowerPolicyOwnerEnterNewState - WDFDEVICE 0x772641F0
!devobj 0x88BDF2C0 entering not power policy owner state
WdfDevStatePwrPolStarting from WdfDevStatePwrPolObjectCreated
5301: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering Power State WdfDevStatePowerStartingCheckDeviceType from
WdfDevStatePowerObjectCreated
5302: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering Power State WdfDevStatePowerD0Starting from
WdfDevStatePowerStartingCheckDeviceType
5303: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering Power State WdfDevStatePowerD0StartingConnectInterrupt from
WdfDevStatePowerD0Starting
5304: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering Power State WdfDevStatePowerD0StartingDmaEnable from
WdfDevStatePowerD0StartingConnectInterrupt
5305: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering Power State WdfDevStatePowerD0StartingStartSelfManagedIo from
WdfDevStatePowerD0StartingDmaEnable
5306: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering Power State WdfDevStatePowerDecideD0State from
WdfDevStatePowerD0StartingStartSelfManagedIo
5307: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering Power State WdfDevStatePowerD0NP from WdfDevStatePowerDecideD0State
5308: FxPkgPnp::NotPowerPolicyOwnerEnterNewState - WDFDEVICE 0x772641F0
!devobj 0x88BDF2C0 entering not power policy owner state
WdfDevStatePwrPolStarted from WdfDevStatePwrPolStarting
5309: FxPkgPnp::NotPowerPolicyOwnerEnterNewState - WDFDEVICE 0x772641F0
!devobj 0x88BDF2C0 entering not power policy owner state
WdfDevStatePwrPolStartingSucceeded from WdfDevStatePwrPolStarted
5310: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering PnP State WdfDevStatePnpEnableInterfaces from
WdfDevStatePnpHardwareAvailable
5311: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x772641F0 !devobj 0x88BDF2C0
entering PnP State WdfDevStatePnpStarted from WdfDevStatePnpEnableInterfaces
5312: FxPkgPnp::Dispatch - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28,
IRP_MJ_PNP, 0x00000000(IRP_MN_START_DEVICE) IRP 0x8981F6E0
5313: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering PnP State WdfDevStatePnpInitStarting from WdfDevStatePnpInit
5314: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering PnP State WdfDevStatePnpHardwareAvailable from
WdfDevStatePnpInitStarting
5315: FxPkgPnp::NotPowerPolicyOwnerEnterNewState - WDFDEVICE 0x76EB7E80
!devobj 0x8822CB28 entering not power policy owner state
WdfDevStatePwrPolStarting from WdfDevStatePwrPolObjectCreated
5316: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering Power State WdfDevStatePowerStartingCheckDeviceType from
WdfDevStatePowerObjectCreated
5317: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering Power State WdfDevStatePowerD0Starting from
WdfDevStatePowerStartingCheckDeviceType
5318: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering Power State WdfDevStatePowerD0StartingConnectInterrupt from
WdfDevStatePowerD0Starting
5319: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering Power State WdfDevStatePowerD0StartingDmaEnable from
WdfDevStatePowerD0StartingConnectInterrupt
5320: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering Power State WdfDevStatePowerD0StartingStartSelfManagedIo from
WdfDevStatePowerD0StartingDmaEnable
5321: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering Power State WdfDevStatePowerDecideD0State from
WdfDevStatePowerD0StartingStartSelfManagedIo
5322: FxPkgPnp::PowerEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering Power State WdfDevStatePowerD0NP from WdfDevStatePowerDecideD0State
5323: FxPkgPnp::NotPowerPolicyOwnerEnterNewState - WDFDEVICE 0x76EB7E80
!devobj 0x8822CB28 entering not power policy owner state
WdfDevStatePwrPolStarted from WdfDevStatePwrPolStarting
5324: FxPkgPnp::NotPowerPolicyOwnerEnterNewState - WDFDEVICE 0x76EB7E80
!devobj 0x8822CB28 entering not power policy owner state
WdfDevStatePwrPolStartingSucceeded from WdfDevStatePwrPolStarted
5325: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering PnP State WdfDevStatePnpEnableInterfaces from
WdfDevStatePnpHardwareAvailable
5326: FxPkgPnp::PnpEnterNewState - WDFDEVICE 0x76EB7E80 !devobj 0x8822CB28
entering PnP State WdfDevStatePnpStarted from WdfDevStatePnpEnableInterfaces
5327: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 77388118 cleared
pointers F78F2814 state WdfIoTargetClosedForQueryRemove, open state 1, pdo
89D664B0, fileobj 898F1080, handle 00000000
5328: FxIoTargetRemote::Close - WDFIOTARGET 77388118 derefing PDO 89D664B0
on close
5329: FxIoTargetRemote::Close - WDFIOTARGET 77388118 derefing FileObj
898F1080 on close
5330: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 77388118 cleared
pointers F78F27C4 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5331: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 766D7EB8 cleared
pointers F78E2814 state WdfIoTargetClosedForQueryRemove, open state 1, pdo
899175A8, fileobj 888C2F80, handle 00000000
5332: FxIoTargetRemote::Close - WDFIOTARGET 766D7EB8 derefing PDO 899175A8
on close
5333: FxIoTargetRemote::Close - WDFIOTARGET 766D7EB8 derefing FileObj
888C2F80 on close
5334: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 766D7EB8 cleared
pointers F78E27C4 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5335: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 772F14B0 cleared
pointers B7650628 state WdfIoTargetClosedForQueryRemove, open state 1, pdo
89D664B0, fileobj 88B7A328, handle 00000000
5336: FxIoTargetRemote::Close - WDFIOTARGET 772F14B0 derefing PDO 89D664B0
on close
5337: FxIoTargetRemote::Close - WDFIOTARGET 772F14B0 derefing FileObj
88B7A328 on close
5338: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 772F14B0 cleared
pointers B76505D8 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5339: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 761F75C8 cleared
pointers B765062C state WdfIoTargetClosedForQueryRemove, open state 1, pdo
00000000, fileobj 89034A88, handle 80001504
5340: FxIoTargetRemote::Close - WDFIOTARGET 761F75C8 derefing FileObj
89034A88 on close
5341: FxIoTargetRemote::Close - WDFIOTARGET 761F75C8 closing handle 80001504
on close
5342: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 761F75C8 cleared
pointers B76505DC state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5343: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 762D8330 cleared
pointers B7650628 state WdfIoTargetClosedForQueryRemove, open state 1, pdo
899175A8, fileobj 88BA7C78, handle 00000000
5344: FxIoTargetRemote::Close - WDFIOTARGET 762D8330 derefing PDO 899175A8
on close
5345: FxIoTargetRemote::Close - WDFIOTARGET 762D8330 derefing FileObj
88BA7C78 on close
5346: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 762D8330 cleared
pointers B76505D8 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5347: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 77077AD8 cleared
pointers B765062C state WdfIoTargetClosedForQueryRemove, open state 1, pdo
00000000, fileobj 897844B0, handle 80001570
5348: FxIoTargetRemote::Close - WDFIOTARGET 77077AD8 derefing FileObj
897844B0 on close
5349: FxIoTargetRemote::Close - WDFIOTARGET 77077AD8 closing handle 80001570
on close
5350: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 77077AD8 cleared
pointers B76505DC state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5351: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 7699C2E8 cleared
pointers F78DEBFC state WdfIoTargetClosedForQueryRemove, open state 1, pdo
00000000, fileobj 88931A40, handle 80001060
5352: FxIoTargetRemote::Close - WDFIOTARGET 7699C2E8 derefing FileObj
88931A40 on close
5353: FxIoTargetRemote::Close - WDFIOTARGET 7699C2E8 closing handle 80001060
on close
5354: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 7699C2E8 cleared
pointers F78DEC38 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5355: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 777BFC90 cleared
pointers F78DEC38 state WdfIoTargetDeleted, open state 3, pdo 00000000,
fileobj 00000000, handle 00000000
5356: FxIoQueue::Dispose - Purging WDFQUEUE 0x76ECCF70 synchronously
5357: FxIoQueue::QueuePurge - All WDFQUEUE 0x76ECCF70 requests cancelled
5358: FxIoQueue::QueuePurge - All driver cancellable requests cancelled in
WDFQUEUE 0x76ECCF70
5359: FxIoQueue::Dispose - Purging WDFQUEUE 0x77657568 synchronously
5360: FxIoQueue::QueuePurge - All WDFQUEUE 0x77657568 requests cancelled
5361: FxIoQueue::QueuePurge - All driver cancellable requests cancelled in
WDFQUEUE 0x77657568
5362: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 762D8330 cleared
pointers F78DEBFC state WdfIoTargetClosedForQueryRemove, open state 1, pdo
00000000, fileobj 897844B0, handle 80001570
5363: FxIoTargetRemote::Close - WDFIOTARGET 762D8330 derefing FileObj
897844B0 on close
5364: FxIoTargetRemote::Close - WDFIOTARGET 762D8330 closing handle 80001570
on close
5365: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 762D8330 cleared
pointers F78DEC38 state WdfIoTargetDeleted, open state 1, pdo 00000000,
fileobj 00000000, handle 00000000
5366: FxIoTargetRemote::ClearTargetPointers - WDFIOTARGET 77077AD8 cleared
pointers F78DEC38 state WdfIoTargetDeleted, open state 3, pdo 00000000,
fileobj 00000000, handle 00000000
5367: FxIoQueue::Dispose - Purging WDFQUEUE 0x76F7D298 synchronously
5368: FxIoQueue::QueuePurge - All WDFQUEUE 0x76F7D298 requests cancelled
5369: FxIoQueue::QueuePurge - All driver cancellable requests cancelled in
WDFQUEUE 0x76F7D298
5370: FxIoQueue::Dispose - Purging WDFQUEUE 0x7677A490 synchronously
5371: FxIoQueue::QueuePurge - All WDFQUEUE 0x7677A490 requests cancelled
5372: FxIoQueue::QueuePurge - All driver cancellable requests cancelled in
WDFQUEUE 0x7677A490
5373: FxIoQueue::QueueRequestFromForward - WDFQUEUE 0x7677A490 is not
accepting requests state is WdfIoQueueDispatchRequests, WDFREQUEST
0x761B32F0 NTSTATUS=C0200204
5374: FxRequest::CompleteInternal - Converting WDF NTSTATUS value
0xc0200204…
5375: FxRequest::CompleteInternal - … to 0x80000011(STATUS_DEVICE_BUSY)
---- end of log ----