Share via

keep BSOD with Error code: PFN_LIST_CORRUPT

vhs117 0 Reputation points
2024-03-01T06:12:04.6833333+00:00

I recently build a new PC, and I just install the drivers and softwares like normal. But it crashes 4 times in a row today, I tried to find reason using WinDbg, however I cannot understand this report. Can anyone help a little.

also here is the link to my mini dump: https://drive.google.com/file/d/1wXQiQRRMjcKwnZNO2XMLK5_d8RzYSKTm/view

************* Preparing the environment for Debugger Extensions Gallery repositories **************
   ExtensionRepository : Implicit
   UseExperimentalFeatureForNugetShare : true
   AllowNugetExeUpdate : true
   AllowNugetMSCredentialProviderInstall : true
   AllowParallelInitializationOfLocalRepositories : true

   -- Configuring repositories
      ----> Repository : LocalInstalled, Enabled: true
      ----> Repository : UserExtensions, Enabled: true

>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds

************* Waiting for Debugger Extensions Gallery to Initialize **************

>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.110 seconds
   ----> Repository : UserExtensions, Enabled: true, Packages count: 0
   ----> Repository : LocalInstalled, Enabled: true, Packages count: 36

Microsoft (R) Windows Debugger Version 10.0.25921.1001 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.

Symbol search path is: srv*
Executable search path is: 
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Kernel base = 0xfffff800`18a00000 PsLoadedModuleList = 0xfffff800`1962a750
Debug session time: Fri Mar  1 00:29:54.013 2024 (UTC - 5:00)
System Uptime: 0 days 0:46:03.672
Loading Kernel Symbols
...............................................................
................................................................
................................................................
............................
Loading User Symbols
PEB is paged out (Peb.Ldr = 000000dd`e096a018).  Type ".hh dbgerr001" for details
Loading unloaded module list
...........
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`18dfd3a0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffe20e`e65de560=000000000000004e
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 0000000000243664, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0a0001200012e863, 0

Debugging Details:
------------------

*** WARNING: Check Image - Checksum mismatch - Dump: 0xd94f, File: 0x72fd - C:\ProgramData\Dbg\sym\hal.dll\1A7BE8E96000\hal.dll

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 2374

    Key  : Analysis.Elapsed.mSec
    Value: 2719

    Key  : Analysis.IO.Other.Mb
    Value: 15

    Key  : Analysis.IO.Read.Mb
    Value: 9

    Key  : Analysis.IO.Write.Mb
    Value: 29

    Key  : Analysis.Init.CPU.mSec
    Value: 749

    Key  : Analysis.Init.Elapsed.mSec
    Value: 22138

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 90

    Key  : Bugcheck.Code.KiBugCheckData
    Value: 0x4e

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x4e

    Key  : Failure.Bucket
    Value: 0x4E_99_nt!MiReduceShareCount

    Key  : Failure.Hash
    Value: {91d02afb-db3f-b168-31f1-a44dcaddd901}

    Key  : Hypervisor.Enlightenments.Value
    Value: 0

    Key  : Hypervisor.Enlightenments.ValueHex
    Value: 0

    Key  : Hypervisor.Flags.AnyHypervisorPresent
    Value: 0

    Key  : Hypervisor.Flags.ApicEnlightened
    Value: 0

    Key  : Hypervisor.Flags.ApicVirtualizationAvailable
    Value: 1

    Key  : Hypervisor.Flags.AsyncMemoryHint
    Value: 0

    Key  : Hypervisor.Flags.CoreSchedulerRequested
    Value: 0

    Key  : Hypervisor.Flags.CpuManager
    Value: 0

    Key  : Hypervisor.Flags.DeprecateAutoEoi
    Value: 0

    Key  : Hypervisor.Flags.DynamicCpuDisabled
    Value: 0

    Key  : Hypervisor.Flags.Epf
    Value: 0

    Key  : Hypervisor.Flags.ExtendedProcessorMasks
    Value: 0

    Key  : Hypervisor.Flags.HardwareMbecAvailable
    Value: 1

    Key  : Hypervisor.Flags.MaxBankNumber
    Value: 0

    Key  : Hypervisor.Flags.MemoryZeroingControl
    Value: 0

    Key  : Hypervisor.Flags.NoExtendedRangeFlush
    Value: 0

    Key  : Hypervisor.Flags.NoNonArchCoreSharing
    Value: 0

    Key  : Hypervisor.Flags.Phase0InitDone
    Value: 0

    Key  : Hypervisor.Flags.PowerSchedulerQos
    Value: 0

    Key  : Hypervisor.Flags.RootScheduler
    Value: 0

    Key  : Hypervisor.Flags.SynicAvailable
    Value: 0

    Key  : Hypervisor.Flags.UseQpcBias
    Value: 0

    Key  : Hypervisor.Flags.Value
    Value: 16908288

    Key  : Hypervisor.Flags.ValueHex
    Value: 1020000

    Key  : Hypervisor.Flags.VpAssistPage
    Value: 0

    Key  : Hypervisor.Flags.VsmAvailable
    Value: 0

    Key  : Hypervisor.RootFlags.AccessStats
    Value: 0

    Key  : Hypervisor.RootFlags.CrashdumpEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.CreateVirtualProcessor
    Value: 0

    Key  : Hypervisor.RootFlags.DisableHyperthreading
    Value: 0

    Key  : Hypervisor.RootFlags.HostTimelineSync
    Value: 0

    Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
    Value: 0

    Key  : Hypervisor.RootFlags.IsHyperV
    Value: 0

    Key  : Hypervisor.RootFlags.LivedumpEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.MapDeviceInterrupt
    Value: 0

    Key  : Hypervisor.RootFlags.MceEnlightened
    Value: 0

    Key  : Hypervisor.RootFlags.Nested
    Value: 0

    Key  : Hypervisor.RootFlags.StartLogicalProcessor
    Value: 0

    Key  : Hypervisor.RootFlags.Value
    Value: 0

    Key  : Hypervisor.RootFlags.ValueHex
    Value: 0

    Key  : SecureKernel.HalpHvciEnabled
    Value: 0

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Version
    Value: 10.0.19041.1


BUGCHECK_CODE:  4e

BUGCHECK_P1: 99

BUGCHECK_P2: 243664

BUGCHECK_P3: 2

BUGCHECK_P4: a0001200012e863

FILE_IN_CAB:  MEMORY.DMP

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

PROCESS_NAME:  EpicWebHelper.exe

STACK_TEXT:  
ffffe20e`e65de558 fffff800`18e760bc     : 00000000`0000004e 00000000`00000099 00000000`00243664 00000000`00000002 : nt!KeBugCheckEx
ffffe20e`e65de560 fffff800`18c8f9b8     : 00000000`006e8027 80000000`00000000 00000000`00000001 00000000`00000027 : nt!MiReduceShareCount+0x149a40
ffffe20e`e65de5a0 fffff800`18c87ece     : ffffe20e`e65de850 ffffe58e`02fe5080 00000000`00000000 ffffe20e`e65df290 : nt!MiDeletePteList+0x738
ffffe20e`e65de680 fffff800`1905c02d     : ffffe58e`00000040 ffffe58e`0156a080 ffff8000`00000000 ffff8000`00000000 : nt!MiDecommitPages+0x121e
ffffe20e`e65df250 fffff800`1905b693     : ffffe20e`e65df3d0 00000000`00000000 ffffe20e`e65df3d0 ffffe58d`fc742c10 : nt!MiDecommitRegion+0x7d
ffffe20e`e65df2d0 fffff800`1905af85     : 00000000`00000000 ffffe58d`fd32e1c0 00000000`00000003 00000000`00000000 : nt!MmFreeVirtualMemory+0x6d3
ffffe20e`e65df420 fffff800`18e10f38     : ffffe58e`0156a080 00000000`00000000 00000000`00000000 ffffe58e`00000000 : nt!NtFreeVirtualMemory+0x95
ffffe20e`e65df480 00007ff9`6a5ed3a4     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000dd`f6e7f4b8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`6a5ed3a4


SYMBOL_NAME:  nt!MiReduceShareCount+149a40

MODULE_NAME: nt

STACK_COMMAND:  .cxr; .ecxr ; kb

IMAGE_NAME:  ntkrnlmp.exe

BUCKET_ID_FUNC_OFFSET:  149a40

FAILURE_BUCKET_ID:  0x4E_99_nt!MiReduceShareCount

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {91d02afb-db3f-b168-31f1-a44dcaddd901}

Followup:     MachineOwner
---------
Windows for business Windows Client for IT Pros User experience Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wesley Li 11,245 Reputation points
    2024-03-04T04:02:26.4633333+00:00

    Hello

    1. Please ensure the machine is connected to windows update for the latest updates.
    2. Try to download the drivers from the device manufacturer website.
    3. If there is any third party antivirus software installed, please remove it temporarily.
    4. Try to enable the driver verifier to narrow down the issue further.

    Driver Verifier - Windows drivers | Microsoft Learn

    Analyzing the dump is usually a complex and professional task, we may try to reinstall the machine and the drivers from the device manufacturer website. For the software, we may install them one by one to narrow down the issue.

    If the issue persists for brand new windows system without any drivers or software, we may consider hardware issue.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.