1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000002, A list entry was corrupt
Arg2: 0000000000240fa6, entry in list being removed
Arg3: 00000000003cefff, highest physical page number
Arg4: 0000000000000001, reference count of entry being removed
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 3186
Key : Analysis.Elapsed.mSec
Value: 6580
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 358
Key : Analysis.Init.Elapsed.mSec
Value: 1973
Key : Analysis.Memory.CommitPeak.Mb
Value: 86
Key : Bugcheck.Code.LegacyAPI
Value: 0x4e
Key : Failure.Bucket
Value: 0x4E_2_nt!MiUnlinkPageFromList
Key : Failure.Hash
Value: {b084f841-86a9-e353-1d26-a04cfe7406b4}
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 4e
BUGCHECK_P1: 2
BUGCHECK_P2: 240fa6
BUGCHECK_P3: 3cefff
BUGCHECK_P4: 1
FILE_IN_CAB: 070923-6828-01.dmp
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: MetroExodus.exe
STACK_TEXT:
ffff9984`545cb648 fffff805`41079d19 : 00000000`0000004e 00000000`00000002 00000000`00240fa6 00000000`003cefff : nt!KeBugCheckEx
ffff9984`545cb650 fffff805`41078db0 : fffff805`41b25440 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiUnlinkPageFromList+0xc89
ffff9984`545cb6e0 fffff805`41078394 : ffff9984`545cb880 ffff9984`545cb920 0000000f`ffffffff 81000002`40fa68c0 : nt!MiHandleTransitionFault+0x180
ffff9984`545cb760 fffff805`4107061e : ffff9984`545cb880 ffffa101`82b35740 00000000`00000000 00000000`00000000 : nt!MiResolveTransitionFault+0x424
ffff9984`545cb820 fffff805`4106e539 : 00000000`00000001 00000000`00000006 00000000`c0000016 00000000`00000000 : nt!MiDispatchFault+0x3fe
ffff9984`545cb960 fffff805`4120bad8 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`00000001 : nt!MmAccessFault+0x189
ffff9984`545cbb00 00007ff6`b984792e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x358
0000006f`bbffed00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff6`b984792e
SYMBOL_NAME: nt!MiUnlinkPageFromList+c89
MODULE_NAME: nt
IMAGE_VERSION: 10.0.19041.3086
STACK_COMMAND: .cxr; .ecxr ; kb
IMAGE_NAME: ntkrnlmp.exe
BUCKET_ID_FUNC_OFFSET: c89
FAILURE_BUCKET_ID: 0x4E_2_nt!MiUnlinkPageFromList
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {b084f841-86a9-e353-1d26-a04cfe7406b4}
Followup: MachineOwner
---------