BSOD irql not less or equal

Luds_1234

Commendable
Aug 10, 2016
39
0
1,530
Hello,

I have built a gaming PC last year and since day one I've been getting BSOD with typically this kind of messages:
irql not less or equal
page fault in nonpaged area

At that time, I handled that by disabling the automated page file.

But since today I keep having thoses message again. I tried to re-enable the default page size but it still crash more often.

Computer :
Asus Z170-A
i5-6600K
GTX 1070
2 x G Skill Ripjaws F4-2133C15-8GRR
CT250BX100SSD1 (250 GB, SATA-III) (Windows)
Crucial_CT525MX300SSD1 (525 GB, SATA-III) (Games)

Last whocrashed report:

On Wed 02-08-17 17:40:02 your computer crashed
crash dump file: C:\WINDOWS\Minidump\080217-5125-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x16C4C0)
Bugcheck code: 0xA (0xFFFFFA862A03ED48, 0x2, 0x0, 0xFFFFF8027EB0A794)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Wed 02-08-17 17:40:02 your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0xA (0xFFFFFA862A03ED48, 0x2, 0x0, 0xFFFFF8027EB0A794)
Error: IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Wed 02-08-17 16:28:59 your computer crashed
crash dump file: C:\WINDOWS\Minidump\080217-5437-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x16C4C0)
Bugcheck code: 0x50 (0xFFFFFD02A203D461, 0x10, 0xFFFFFD02A203D461, 0x2)
Error: PAGE_FAULT_IN_NONPAGED_AREA
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that invalid system memory has been referenced.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Wed 02-08-17 15:50:28 your computer crashed
crash dump file: C:\WINDOWS\Minidump\080217-5812-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x16C4C0)
Bugcheck code: 0xF7 (0x6692BFF56ECF, 0x6E92BFF56ECF, 0xFFFF916D400A9130, 0x0)
Error: DRIVER_OVERRAN_STACK_BUFFER
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a driver has overrun a stack-based buffer.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Wed 02-08-17 15:37:52 your computer crashed
crash dump file: C:\WINDOWS\Minidump\080217-5718-01.dmp
This was probably caused by the following module: hdaudbus.sys (HDAudBus+0x2EE8)
Bugcheck code: 0xD1 (0xFFFFA087C5DD04EC, 0x2, 0x1, 0xFFFFF80795632EE8)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
file path: C:\WINDOWS\system32\drivers\hdaudbus.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: High Definition Audio Bus Driver
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.

Mini dumps are here : https://drive.google.com/drive/folders/0B-Mr6iz5C17QQjFiQU5kSmxudkk

Thanks for the help :)
 
Solution
Ok, now it seems its the processor. Did you bend any motherboard pins while installing the processor, if so that could cause problems.
There's also another logic, i.e, you may be unlucky to receive bad ram sticks twice; but again thats a shot too far.
I think its your cpu.
hdaudbus.sys is the generic sound driver for windows, Did you get the drivers from Realtek from your motherboard web site: https://www.asus.com/au/Motherboards/Z170-A/HelpDesk_Download/ (look under audio)

whocrashed would have put the minidumps it used to create those reports in c/windows/minidump. Can you copy them to documents and then upload the copies to a cloud server like google drive or onedrive and share links here. Someoine will go through them and find other possible causes for bsod

the other fills mentioned are both parts of windows kernel, they got blame but are highly unlikely to be the cause. they are just what crashed.
 
Hi, I ran the 4 dump files through the debugger and got the following information: https://pastebin.com/VBFGFtey

File: 080217-5718-01.dmp (Wed Aug 2 09:37:52 2017)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)] {ffffa087c5dd04ec, 2, 1, fffff80795632ee8}
Probably caused by: HDAudBus.sys (Process: System)

File: 080217-5812-01.dmp (Wed Aug 2 09:50:28 2017)
BugCheck: [DRIVER_OVERRAN_STACK_BUFFER (F7)] {6692bff56ecf, 6e92bff56ecf, ffff916d400a9130, 0}
Probably caused by: ntkrnlmp.exe (Process: nvspcaps64.exe)

File: 080217-5125-01.dmp (Wed Aug 2 11:40:02 2017)
BugCheck: [IRQL_NOT_LESS_OR_EQUAL (A)] {fffffa862a03ed48, 2, 0, fffff8027eb0a794}
Probably caused by: ntkrnlmp.exe (Process: System)

File: 080217-5437-01.dmp (Wed Aug 2 10:28:59 2017)
BugCheck: [PAGE_FAULT_IN_NONPAGED_AREA (50)] {fffffd02a203d461, 10, fffffd02a203d461, 2}
Probably caused by: memory_corruption (Process: System)
I can't help you with this. Wait for someone else to reply. Good luck.
 
2nd error was Nvidia Geforce experience crashing, can't say I seen that before. I have no evidence to blame it for crash, exe files generally aren't the cause, just what crashed.

Motherboard web site: https://www.asus.com/au/Motherboards/Z170-A/HelpDesk_Download/

oldeish drivers (your PC much better than most i see)
e1d65x64.sys (Dated Thu Aug 13 2015) - Intel Pro/1000 Network Adapter driver - Update these, latest version released last month
TeeDriverW8x64.sys (Dated Mon Mar 28 2016) - Intel Management engine interface - latest version released last month
RTKVHD64.sys (dated Tue Aug 16 2016) - Realtek HD Audio drivers - you said you already updating these, newest oin motherboard site from June 2017


Might want to update BIOS, you are on 1902 and latest is 3503, you are 6 versions behind. It could help with errors as well.
 
I ran the 3 new dump files through the debugger and got the following info: https://pastebin.com/EmCwdz6t

File: 080217-5812-01.dmp (Wed Aug 2 09:50:28 2017)
BugCheck: [DRIVER_OVERRAN_STACK_BUFFER (F7)] {6692bff56ecf, 6e92bff56ecf, ffff916d400a9130, 0}
Probably caused by: ntkrnlmp.exe (Process: nvspcaps64.exe)

File: 080217-5718-01.dmp (Wed Aug 2 09:37:52 2017)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)] {ffffa087c5dd04ec, 2, 1, fffff80795632ee8}
Probably caused by: HDAudBus.sys (Process: System)

File: 080217-4109-01.dmp (Wed Aug 2 15:06:57 2017)
BugCheck: [PAGE_FAULT_IN_NONPAGED_AREA (50)] {fffff900a32af461, 10, fffff900a32af461, 2}
Probably caused by: memory_corruption (Process: dwm.exe)
This one has a driver listed that wasn't listed in the other dumps, its IOMap64.sys from 2014.

I can't help you with this. Wait for Colif or someone else to reply. Good luck.
 
I believe e1d65x64.sys is part of Intel LAN Driver Version 22.4.16.0 released 19th July 2017 (on the Asus web site for your board), under LAN

nvspcaps64.exe = NVIDIA Capture Server which is part of Geforce experience

Did you install Asus GPU Tweak or AI Suite? IOMap64.sys = ASUS Kernel Mode Driver Asus Smart Doctor/iTracker 2 Asus GPU Tweak and GPU Tweak streaming... if it streams, it may have crashed the Nvidia capture server
 
might want to remove gpu tweak, it might be conflicting with nvidia streaming service..

I didn't look at last error, that is just based on previous error.
dwm.exe = desktop windows manager.. part of Windows
strange you still getting hdaudio errors after updating realtek drivers
 


Thanks, I'll remove Gpu tweak.

How do you think I should handle the page file? I've the feeling that bsod occurs more often since I re set it to auto

 
I don't think any of the errors you are getting are in anyway related to what you did with page file. I would leave it running though with 16gb of ram, its unlikely its very big or used very much. Mine is set to auto but its only 1gb in size and hardly ever used

In the 1st batch, 2 bsod mention driver in name, 1 is an IRQ error which mostly are driver errors, and Page fault in non paged area is normally drivers as well, and refers to ram, not hdd. So none really look like ssd related,

in most recent ones Gardenman looked at, all 3 look like driver errors again.
 
Not really. I normally leave mine alone unless they are causing bsod. I know I have old drivers but PC works so I don't bother updating them.

There are tools that say they will update drivers for you but they can and will install the wrong drivers. Better to get them from motherboard maker or the people who actually made the chips - realtek HD audo, for instance, can often have newer drivers direct from realtek than the motherboard makers, but that really depends on age of motherboard. Keep using drivers supplied by motherboard makers until they stop updating them.

Asus AI Suite 3 includes EZ Update 2 which can update drivers for you, the downside is much Asus software causes bsod so its a 2 edged sword really.
 
AsIO.sys (dated Wed Aug 22 2012) - Asus Input output driver, Asus PCProbe Utility. Did you install AI Suite?

ASUS PC Probe is a utility software used for hardware device management which is often preinstalled on computers manufactured by ASUS. AsIO.sys is a driver that is necessary for the proper functioning of ASUS PC Probe. This file is not a critical Windows file and can be removed if known to create problems. ASUS PC Probe is a freeware application designed for the Windows platform that allows users to manage processor and graphics processing unit speeds, monitor and manage system fan RPM, AGP power levels, GPU and RAM temperature. After installation, the program resides in the taskbar and alerts the user on possible hardware issues such as the processor overheating. This program requires an ASUS motherboard as a prerequisite to work.

http://www.file.net/process/asio.sys.html

(Why is Asus giving you 5 year old drivers for a 2 year old motherboard? ... my guess is its a win 7 driver that was upgraded to work with win 10 since 1st version of AI Suite on board was released on 20 Aug 2015)

fun how everytime we run reports we find new files.

I would remove all Asus software unless its drivers or you use it. They make amazing hardware but their windows software isn't all that great
 
Hmm indeed AI Suite was not installed. I tried just now and nothing happens when I run the setup(even after reboot). Is AI Suite a driver?

It might be a silly question, but how do I know all drivers I need? Should I install everything on the link you gave me to the asus page?

I'm considering to reinstall windows. Should I ? 😉
 
PC probe maybe part of GPU Tweak since it looks for temperatures, it can also be part of AI Suite. Only works on Asus motherboards, why I thought it might be AI Suite.

You don't need/want AI Suite, its a package of programs created by Asus that comes with their motherboards but isn't essential. Can be more pain than its worth.

No, don't install everything on the web site. Some of the things are extras or for specific purposes. If you fresh installed win 10 its likely windows update will pick up a package called AMD. This stands for Asus Motherboard Drivers, there is likely a package containing all the drivers for your board. I know I got one a few years adgo.

Have you had any more errors since removing GPU tweak? I would only fresh install if its the last option, or if your current install was an upgrade from win 7 or 8, as then it would force PC to get all new drivers. But from what I can tell, you don't have many of those now so it might be a waste of time.

If you want to ask somewhere else, I will give you a link to another web site that might get to conclusion faster (read instructions and look here). Only difference is they have more people there who can read these files.
 
I just realized I did not totally removed GPU Tweak (or there was a second installed). It is done now.

If I encounter any other BSOD I'll ask to the forum you recommend me and keep you updated 😉

Many thanks for your valuable help

 
Hi, I ran the dump file(s) through the debugger and got the following information: https://pastebin.com/H9nTmXg4

File: 080317-4031-01.dmp (Thu Aug 3 11:31:56 2017)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)] {3e914ffa561, 2, 0, fffff803235b77ef}
Probably caused by: NETIO.SYS (Process: firefox.exe)

File: 080317-4375-01.dmp (Thu Aug 3 13:02:54 2017)
BugCheck: [PAGE_FAULT_IN_NONPAGED_AREA (50)] {ffff9785e5ca5ad0, 2, fffff800c2666ae3, 2}
Probably caused by: memory_corruption (Process: svchost.exe)

I can't help you with this. Wait for someone else to reply. Good luck.