BSOD bug check

Question

Hello,

I've recently experienced a BSOD while trying to put my computer to sleep for the evening. I used WinDBG to analyze the dump file, pasted below:

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 0000000000034dd0, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0e0003600036cdd1, 0

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 4562

    Key  : Analysis.Elapsed.mSec
    Value: 5825

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 453

    Key  : Analysis.Init.Elapsed.mSec
    Value: 6551

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 98

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x4e

    Key  : Failure.Bucket
    Value: 0x4E_99_nt!MiBadShareCount

    Key  : Failure.Hash
    Value: {60e553e9-e4c5-ed08-9be6-c353e0011003}

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Version
    Value: 10.0.19041.1

BUGCHECK_CODE:  4e

BUGCHECK_P1: 99

BUGCHECK_P2: 34dd0

BUGCHECK_P3: 2

BUGCHECK_P4: e0003600036cdd1

FILE_IN_CAB:  080823-9671-01.dmp

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  svchost.exe

STACK_TEXT:  
ffff8486`33f3ee18 fffff804`521f3547     : 00000000`0000004e 00000000`00000099 00000000`00034dd0 00000000`00000002 : nt!KeBugCheckEx
ffff8486`33f3ee20 fffff804`520abe36     : ffff8486`33f3f620 fffff804`520ab4be 1a000001`6bef7867 00000009`00000000 : nt!MiBadShareCount+0x5b
ffff8486`33f3ee60 fffff804`520aac3b     : ffffe785`b8b4b700 00007ffe`00000001 00000000`00000000 06400000`34dd04d1 : nt!MiWsleFree+0x806
ffff8486`33f3eef0 fffff804`521440ef     : ffffcc66`1fff9340 00000000`00000000 ffff8486`33f3f5d0 00000000`00000000 : nt!MiFreeWsleList+0x1bb
ffff8486`33f3f0c0 fffff804`52144028     : 00000000`00000000 00000000`00000000 ffffe785`b8b4b700 00000000`00000016 : nt!MiTrimWorkingSetBuildup+0x87
ffff8486`33f3f140 fffff804`5206dd2d     : 00000000`00000004 ffffe785`b8b4b700 00000000`00000000 ffff8486`33f3f6c8 : nt!MiTrimWorkingSetTail+0x28
ffff8486`33f3f170 fffff804`5206d94b     : ffffcc66`00000000 ffffe785`b8b4b700 00000000`00000000 ffff8486`33f3f570 : nt!MiWalkPageTablesRecursively+0xc6d
ffff8486`33f3f210 fffff804`5206d94b     : ffffcc66`00000000 ffffe785`b8b4b700 00000000`00000001 ffff8486`33f3f580 : nt!MiWalkPageTablesRecursively+0x88b
ffff8486`33f3f2b0 fffff804`5206d94b     : ffffcc66`00000000 ffffe785`b8b4b700 00000000`00000002 ffff8486`33f3f590 : nt!MiWalkPageTablesRecursively+0x88b
ffff8486`33f3f350 fffff804`5206a94b     : ffffcc66`00000000 ffffe785`b8b4b700 0000000f`00000003 ffff8486`33f3f5a0 : nt!MiWalkPageTablesRecursively+0x88b
ffff8486`33f3f3f0 fffff804`5211b3ef     : ffff8486`33f3f520 00000000`00000000 00000000`00000002 00000000`00000001 : nt!MiWalkPageTables+0x36b
ffff8486`33f3f4f0 fffff804`5223e6fb     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiTrimWorkingSet+0x1db
ffff8486`33f3f8d0 fffff804`520690e7     : 00000000`00000000 ffff8486`33f3fa80 ffff8486`33f3fa40 00000000`00000000 : nt!MiTrimOrAgeWorkingSet+0x1d518b
ffff8486`33f3f9c0 fffff804`520663d0     : fffff804`52a50c00 ffff8486`33f3fa80 00000000`00001b3f ffffe785`00000200 : nt!MiProcessWorkingSets+0x227
ffff8486`33f3fa60 fffff804`521b8d1c     : 00000000`00000007 00000000`00000006 00000000`ffffffff ffffab81`34136180 : nt!MiWorkingSetManager+0x110
ffff8486`33f3fb20 fffff804`52126915     : ffffe785`a813d040 00000000`00000080 fffff804`521b8a70 00048847`00000007 : nt!KeBalanceSetManager+0x2ac
ffff8486`33f3fc10 fffff804`52204cf8     : ffffab81`33f00180 ffffe785`a813d040 fffff804`521268c0 00000000`00000000 : nt!PspSystemThreadStartup+0x55
ffff8486`33f3fc60 00000000`00000000     : ffff8486`33f40000 ffff8486`33f3a000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28

SYMBOL_NAME:  nt!MiBadShareCount+5b

MODULE_NAME: nt

IMAGE_VERSION:  10.0.19041.3208

STACK_COMMAND:  .cxr; .ecxr ; kb

IMAGE_NAME:  ntkrnlmp.exe

BUCKET_ID_FUNC_OFFSET:  5b

FAILURE_BUCKET_ID:  0x4E_99_nt!MiBadShareCount

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {60e553e9-e4c5-ed08-9be6-c353e0011003}

Followup:     MachineOwner

If anyone has any ideas as to what is causing this, I'd very much appreciate it. Thank you!

Answer 1

Thanks. No drivers were named in the crash.

The next step,

Let us try finding any misbehaving driver

Enable Driver Verifier:

http://answers.microsoft.com/en-us/windows/wiki...

(Must create a Restore point before)

Upload the newer dumps when you get Driver_Verifier_detected_voilation.

Please note that the system might crash before you reach the desktop-if it does please let us know so that we can guide you to disable Verifier.

Answer 2

Thank you. Here is the dump file: https://1drv.ms/u/s!Avup3m1eUkFjhHonoo8JMhgl4B6Z?e=qgfhrQ

Answer 3

Hi,

I'm Sumit, here to answer your query at the Microsoft Community.

We will need the actual dmp files.

We need log files(called dump files) that tell us what lead to crash.

Please share them with us for a better analysis of the problem. Instructions can be found here:

https://answers.microsoft.com/en-us/windows/for...

To share files here, please see:

How to share diagnostic files/logs on Microsoft community

https://answers.microsoft.com/en-us/feedback/fo...