Random BSOD

TrainFan475 · June 23, 2020

This is the second bsod I've gotten this week. I don't remember the error of the first one, but I collected the minidump info on the one from today.

The first BSOD was caused by wdfilter.sys and the secons one said PFN_LIST_CORRUPT

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 000000000030ff66, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0000021000212d65, 0

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.Sec
    Value: 3

    Key  : Analysis.DebugAnalysisProvider.CPP
    Value: Create: 8007007e on AJ-PC

    Key  : Analysis.DebugData
    Value: CreateObject

    Key  : Analysis.DebugModel
    Value: CreateObject

    Key  : Analysis.Elapsed.Sec
    Value: 7

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 72

    Key  : Analysis.System
    Value: CreateObject


BUGCHECK_CODE:  4e

BUGCHECK_P1: 99

BUGCHECK_P2: 30ff66

BUGCHECK_P3: 2

BUGCHECK_P4: 21000212d65

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

PROCESS_NAME:  firefox.exe

STACK_TEXT:  
fffffd02`3f747d48 fffff806`6eff7788 : 00000000`0000004e 00000000`00000099 00000000`0030ff66 00000000`00000002 : nt!KeBugCheckEx
fffffd02`3f747d50 fffff806`6ee77aa7 : 00000000`00000003 fffffd02`3f7484a0 fffffd02`3f7484a0 fffffd02`3f7483f0 : nt!MiDeletePteRun+0x1b8748
fffffd02`3f747f70 fffff806`6ee735c2 : ffffb30f`d8f58580 ffffe781`6d326000 00000000`00004000 00000000`00000000 : nt!MiDeleteVaTail+0x77
fffffd02`3f747fa0 fffff806`6ee73751 : fffffd02`3f7483f0 ffffe7f3`c0b69928 00000000`00000000 0a000003`0ff6e867 : nt!MiWalkPageTablesRecursively+0x512
fffffd02`3f748060 fffff806`6ee73751 : fffffd02`3f7483f0 ffffe7f3`f9e05b48 00000000`00000000 0a000000`5b817867 : nt!MiWalkPageTablesRecursively+0x6a1
fffffd02`3f748120 fffff806`6ee73751 : fffffd02`3f7483f0 ffffe7f3`f9fcf028 ffffe7f3`00000000 0a000003`00316867 : nt!MiWalkPageTablesRecursively+0x6a1
fffffd02`3f7481e0 fffff806`6ee72edc : fffffd02`3f7483f0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x6a1
fffffd02`3f7482a0 fffff806`6ee71348 : fffffd02`3f7483f0 ffffeb00`00000002 00000000`00000001 00000000`00000000 : nt!MiWalkPageTables+0x36c
fffffd02`3f7483a0 fffff806`6ee7f4a0 : ffffffff`ffffffff ffffb30f`d8f583f8 00000000`00000001 00000000`00000000 : nt!MiDeletePagablePteRange+0x268
fffffd02`3f748740 fffff806`6eec51aa : 00000000`2da64dff ffffb30f`d24b7080 00000000`00000000 fffff806`6ee7a47a : nt!MiDeleteVad+0x860
fffffd02`3f748900 fffff806`6f3e9a00 : 00000000`00000000 00000000`00000000 fffffd02`3f748a60 ffffffff`ffffffff : nt!MiFreeVadRange+0x9e
fffffd02`3f748960 fffff806`6f3e963b : 00000000`00000000 fffffd02`3f748a00 00000000`00000001 ffff9d81`4adf5c00 : nt!MmFreeVirtualMemory+0x390
fffffd02`3f748aa0 fffff806`6efd3c18 : ffffb30f`d24b7080 00000000`00000000 fffffd02`3f748b80 00000000`00000000 : nt!NtFreeVirtualMemory+0x8b
fffffd02`3f748b00 00007ff8`b60dc434 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000e6`b09ff3f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`b60dc434


SYMBOL_NAME:  nt!MiDeletePteRun+1b8748

MODULE_NAME: nt

STACK_COMMAND:  .thread ; .cxr ; kb

IMAGE_NAME:  memory_corruption

BUCKET_ID_FUNC_OFFSET:  1b8748

FAILURE_BUCKET_ID:  0x4E_99_nt!MiDeletePteRun

OS_VERSION:  10.0.18362.1

BUILDLAB_STR:  19h1_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {826a8dfe-b402-47c5-bb75-e9ab5230289f}

Followup:     MachineOwner
---------