REFERENCE_BY_POINTER (18)
Arguments:
Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
Arg2: ffffa80430e2a240, Object whose reference count is being lowered
Arg3: 0000000000000002, Reserved
Arg4: ffffffffffffffff, Reserved
The reference count of an object is illegal for the current state of the object.
Each time a driver uses a pointer to an object the driver calls a kernel routine
to increment the reference count of the object. When the driver is done with the
pointer the driver calls another kernel routine to decrement the reference count.
Drivers must match calls to the increment and decrement routines. This BugCheck
can occur because an object's reference count goes to zero while there are still
open handles to the object, in which case the fourth parameter indicates the number
of opened handles. It may also occur when the object's reference count drops below zero
whether or not there are open handles to the object, and in that case the fourth parameter
contains the actual value of the pointer references count.
Debugging Details:
------------------
PROCESS_NAME: firefox.exe
STACK_TEXT:
ffffa389`71882378 fffff803`7fe2b1a3 : 00000000`00000018 00000000`00000000 ffffa804`30e2a240 00000000`00000002 : nt!KeBugCheckEx
ffffa389`71882380 fffff803`7fc2ea8e : ffffa804`368cd270 00000000`00000000 00000000`00000001 01000000`00100000 : nt!ObfDereferenceObjectWithTag+0x1fc703
ffffa389`718823c0 fffff803`80019384 : 00000000`00000000 ffffa804`2d5c6460 ffffa804`18cfe800 00000000`00000000 : nt!HalPutDmaAdapter+0xe
ffffa389`718823f0 fffff803`80007220 : ffffa804`18cfe820 00000000`00000001 ffffa804`368cd240 ffffa804`2d5c6460 : nt!IopDeleteFile+0x1d4
ffffa389`71882470 fffff803`7fc2eb67 : 00000000`00000000 00000000`00000000 ffffa389`718825f9 ffffa804`368cd270 : nt!ObpRemoveObjectRoutine+0x80
ffffa389`718824d0 fffff803`8000ca89 : ffffa804`368cd240 00000000`00000000 00000000`00000000 ffffa804`368cd240 : nt!ObfDereferenceObjectWithTag+0xc7
ffffa389`71882510 fffff803`8008e9a5 : 00000000`00000004 ffff908f`4f1c0698 00000000`00000103 00000000`00000000 : nt!ObCloseHandleTableEntry+0x6c9
ffffa389`71882650 fffff803`800f0911 : ffffa804`378f70c0 ffffa804`378f70c0 ffffffff`ffffff01 ffffa804`378f3518 : nt!ExSweepHandleTable+0xd5
ffffa389`71882700 fffff803`800dfae8 : ffffffff`ffffffff ffffa804`378f30c0 ffffa389`71882750 fffff803`800e2e24 : nt!ObKillProcess+0x35
ffffa389`71882730 fffff803`800fb4fa : ffffa804`378f30c0 ffff908f`4fd38060 ffffa389`71882959 00000000`00000000 : nt!PspRundownSingleProcess+0x204
ffffa389`718827c0 fffff803`8010a388 : ffffa804`00000001 ffffa389`71882b01 ffffa804`378f30c0 00000044`0c7ba000 : nt!PspExitThread+0x5f6
ffffa389`718828c0 fffff803`7fc517ad : 00000000`00000000 00000000`00000100 00000000`00000000 fffff803`7fc2a7f7 : nt!KiSchedulerApcTerminate+0x38
ffffa389`71882900 fffff803`7fe03690 : 00000000`00000000 ffffa389`718829c0 ffffa389`71882b00 00000000`0000000b : nt!KiDeliverApc+0x60d
ffffa389`718829c0 fffff803`7fe120af : ffffa804`378f70c0 00000000`00000000 00000000`00000000 ffffa804`00000000 : nt!KiInitiateUserApc+0x70
ffffa389`71882b00 00007ffc`1e1d0f24 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
00000044`0c52f638 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`1e1d0f24
SYMBOL_NAME: nt!ObfDereferenceObjectWithTag+1fc703
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.5848
STACK_COMMAND: .process /r /p 0xffffa804378f30c0; .thread 0xffffa804378f70c0 ; kb
BUCKET_ID_FUNC_OFFSET: 1fc703
FAILURE_BUCKET_ID: 0x18_OVER_DEREFERENCE_nt!ObfDereferenceObjectWithTag
