*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000002, A list entry was corrupt
Arg2: 000000000003bd09, entry in list being removed
Arg3: 000000000022f33f, highest physical page number
Arg4: 0000000000000001, reference count of entry being removed
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2406
Key : Analysis.Elapsed.mSec
Value: 14996
Key : Analysis.IO.Other.Mb
Value: 2
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 6
Key : Analysis.Init.CPU.mSec
Value: 515
Key : Analysis.Init.Elapsed.mSec
Value: 1820
Key : Analysis.Memory.CommitPeak.Mb
Value: 92
Key : Analysis.Version.DbgEng
Value: 10.0.27704.1001
Key : Analysis.Version.Description
Value: 10.2408.27.01 amd64fre
Key : Analysis.Version.Ext
Value: 1.2408.27.1
Key : Bugcheck.Code.LegacyAPI
Value: 0x4e
Key : Bugcheck.Code.TargetModel
Value: 0x4e
Key : Failure.Bucket
Value: 0x4E_2_nt!MiUnlinkPageFromList
Key : Failure.Hash
Value: {b084f841-86a9-e353-1d26-a04cfe7406b4}
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 4e
BUGCHECK_P1: 2
BUGCHECK_P2: 3bd09
BUGCHECK_P3: 22f33f
BUGCHECK_P4: 1
FILE_IN_CAB: 4.dmp
FAULTING_THREAD: ffff9604823ba080
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
PROCESS_NAME: MpSigStub.exe
STACK_TEXT:
fffff680`bdc83ff8 fffff806`80044cf9 : 00000000`0000004e 00000000`00000002 00000000`0003bd09 00000000`0022f33f : nt!KeBugCheckEx
fffff680`bdc84000 fffff806`8008a049 : 00000000`00000000 ffff8d80`00000000 00000000`00000001 ffff8d80`00b37210 : nt!MiUnlinkPageFromList+0xc89
fffff680`bdc84090 fffff806`8008823f : 00000000`00000180 00000000`02c80000 00000000`00040000 ffff9604`80626010 : nt!MmCheckCachedPageStates+0x1339
fffff680`bdc84260 fffff806`80445b80 : 00000000`02c80000 00000000`00000000 00000000`00000001 fffff680`bdc84370 : nt!CcFetchDataForRead+0x8f
fffff680`bdc842c0 fffff806`80087fd9 : ffff9604`77ab1130 00000000`02c80000 fffff680`00040000 fffff806`8005ba01 : nt!CcMapAndCopyFromCache+0xe0
fffff680`bdc84360 fffff806`8305d946 : fffff680`bdc844c0 00000000`00000000 fffff680`00040000 00000000`00040000 : nt!CcCopyReadEx+0x139
fffff680`bdc84410 fffff806`7ceb783b : 00000000`00000000 fffff680`bdc847e8 fffff680`bdc847a8 000002a2`956b2d30 : Ntfs!NtfsCopyReadA+0x426
fffff680`bdc84700 fffff806`7ceb464a : fffff680`bdc84810 fffff680`bdc847a8 ffff9604`826a37e0 ffff9604`826a36e0 : FLTMGR!FltpPerformFastIoCall+0x16b
fffff680`bdc84760 fffff806`7ceea715 : fffff680`bdc85000 fffff680`bdc7f000 fffff680`bdc84918 00000000`00000001 : FLTMGR!FltpPassThroughFastIo+0x10a
fffff680`bdc847e0 fffff806`803cf621 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : FLTMGR!FltpFastIoRead+0x165
fffff680`bdc84890 fffff806`803fdb58 : ffff9604`83006ce0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopReadFile+0x425
fffff680`bdc84980 fffff806`80212308 : 00000000`00000204 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x8a8
fffff680`bdc84a90 00007ffb`85bad624 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000b6`eb3fe7f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`85bad624
SYMBOL_NAME: nt!MiUnlinkPageFromList+c89
MODULE_NAME: nt
IMAGE_VERSION: 10.0.19041.4894
STACK_COMMAND: .process /r /p 0xffff960482876080; .thread 0xffff9604823ba080 ; kb
IMAGE_NAME: ntkrnlmp.exe
BUCKET_ID_FUNC_OFFSET: c89
FAILURE_BUCKET_ID: 0x4E_2_nt!MiUnlinkPageFromList
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {b084f841-86a9-e353-1d26-a04cfe7406b4}
Followup: MachineOwner