Question Four BSODs in the past 20 minutes ?

[Puddzz]

As title says, I've had four BSODs in the past 20 mins or so, and I have a feeling it's my USB HDD, but it happened when it was unplugged. It could also have been my M.2 SSD enclosure which was still plugged in but I don't know.

Dump files: https://www.mediafire.com/file/qrf4r3gciko7c9k/Minidump.rar/file

System Specs
Motherboard: Gigabyte 650 Aorus Elite
CPU: Amd Ryzen 7 7800X3D
GPU: Gigabyte Gaming OC Geforce RTX 4090 24GB
RAM: Corsair Vengenace RBG 32GB (2 x16GB) DDR6-6000 cl30
PSU: MSI A1000g PCIe5 1000w 80+ Gold
OS: Windows 11
Storage:
Corsair mp600 G5 m.2-2280 PCie 4. x4 NVMe - 376gb filled
Corsair MP600 Core XT 2tb M.2-2280 PCIe 4.0 x4 - 1204gb filled
Corsair MP600 Core XT 2tb M.2-2280 PCIe 4.0 x4 - 1257gb filled
External
USB HDD: WD 4TB Elements portable external hard drive, USB 3.0 interface - about 2.7gb filled
USB m.2 Enclosure: Beikell M.2 NVME Enclosure - Kingston NV2 PCIe 4.0 NVMe m.2 - barely filled.

Both externals unplugged right now.

Whole system is about a year old.

 

[Ralston18]

Update your post to include full system hardware specs and OS information.

Include PSU: make, model, wattage, age, condition (original to build, new, refurbished, used)?

Disk drive(s): make, model, capacity, how full?

= = = =

Dump files are useful and there are members here that are well versed in reading and understanding the dump files.

In the meantime, take a look in Reliability History/Monitor and Event Viewer for any error codes, warnings, or even informational events being captured just before or at the time of the BSODs.

Post accordingly.

 

[Puddzz]

Update your post to include full system hardware specs and OS information.

Include PSU: make, model, wattage, age, condition (original to build, new, refurbished, used)?

Disk drive(s): make, model, capacity, how full?

= = = =

Dump files are useful and there are members here that are well versed in reading and understanding the dump files.

In the meantime, take a look in Reliability History/Monitor and Event Viewer for any error codes, warnings, or even informational events being captured just before or at the time of the BSODs.

Post accordingly.

Updated post. Sorry. Just wanted to get the post up before another BSOD happened.

 

[Ralston18]

Look for error codes.

If the BSODs just started then it is very likely that there will be some correspondng log entries.

Reliability History/Monitor is end user friendly and the timeline format may reveal patterns and, perhaps in your case, some sudden change that, in turn, is now causing problems.

Event Viewer requires more time and effort to navigate and understand. However, it can help as well.

FYI:

How To - How to use Windows 10 Event Viewer | Tom's Hardware Forum (tomshardware.com)

Log entries can be clicked for more details. The details may or may not prove helpful.

= = = =

Another possiblity is that something is coming loose.

Power down, unplug, open the case.

Carefully clean out dust and debris.

Verify by sight and feel that all connectors, cards, RAM, jumpers, and case connections are fully and firmly in place.

Use a bright flashlight to inspect for signs of damage: bare conductor showing, pinched or kinked wires, browned or blackened areas, melting, loose or missing screws, swollen components, corrosion, signs of moisture, etc..

 

[Puddzz]

From Reliability History:

The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000009f (0x0000000000000003, 0xffffd70f8e0a3420, 0xffff9a84006e7b68, 0xffffd70fac5729a0). A dump was saved in: C:\Windows\Minidump\112624-24546-01.dmp. Report Id: c1ac953d-ff80-4d26-965a-3f15f59bdf93.
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000009f (0x0000000000000003, 0xffff9084587b9d60, 0xffffec0324247178, 0xffff908462eed810). A dump was saved in: C:\Windows\Minidump\112624-18562-01.dmp. Report Id: 2e523d07-a0b2-4fd0-bee0-2901ed117321.
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000009f (0x0000000000000003, 0xffffc80a5891cc90, 0xffffa181b683fb68, 0xffffc80a8ff03010). A dump was saved in: C:\Windows\Minidump\112624-32531-01.dmp. Report Id: 8dc504fd-1b0b-4946-bcff-e6d8d84369b3.
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000009f (0x0000000000000003, 0xffffe607f6ec4ca0, 0xffffb28839087b68, 0xffffe60808e98670). A dump was saved in: C:\Windows\Minidump\112624-20375-01.dmp. Report Id: 95bfacbc-2b6d-4a13-84c7-2b0814942649.

 

[Ralston18]

Corrupted file(s) perhaps:

Run "dism" and "sfc /scannow".

FYI:

https://www.windowscentral.com/how-use-dism-command-line-utility-repair-windows-10-image

https://www.lifewire.com/how-to-use-sfc-scannow-to-repair-windows-system-files-2626161

 

[Puddzz]

C:\Windows\System32>DISM /Online /Cleanup-Image /CheckHealth

Deployment Image Servicing and Management tool
Version: 10.0.22621.2792

Image Version: 10.0.22631.4460

No component store corruption detected.
The operation completed successfully.

C:\Windows\System32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files and successfully repaired them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

C:\Windows\System32>DISM /Online /Cleanup-Image /ScanHealth

Deployment Image Servicing and Management tool
Version: 10.0.22621.2792

Image Version: 10.0.22631.4460

[==========================100.0%==========================] No component store corruption detected.
The operation completed successfully.

C:\Windows\System32>

Also log file for the sfc scan: https://www.mediafire.com/file/aro5bysl7rzpd9b/CBS.log/file

 

[ubuysa]

You're right that the problem is a USB device, but it's not your external HDD it's your USB wireless adapter. The dumps are all similar, all fail because a USB device failed a power transition request. From the dump we can see the IRP that managed the power trasisition and the driver that hung. Here's part of that output...

 [IRP_MJ_POWER(16), IRP_MN_WAIT_WAKE(0)]
            0  0 ffffe607f6ec4ca0 00000000 fffff8056ca1cf60-ffffe607fab2e0d0   
           \Driver\USBHUB3    UsbHub3!HUBPDO_WdmPnpPowerIrpCompletionRoutineForAsynchronousCompletion
            Args: 00000000 00000000 00000000 00000000
 [IRP_MJ_POWER(16), IRP_MN_WAIT_WAKE(0)]
            0  0 ffffe607f6ec4ca0 00000000 00000000-00000000   
           \Driver\USBHUB3
            Args: 00000000 00000000 00000000 00000000
>[IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)]
            0 e1 ffffe607f74eb7e0 00000000 fffff805d6a9d540-19f7f3449ff8 Success Error Cancel pending
\Driver\RtkBtFilter RtkBtfilter
            Args: 00000000 00000001 00000001 00000000
 [IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)]
            0 e0 ffffe607f74eb7e0 00000000 00000000-00000000   
 \Driver\RtkBtFilter
            Args: 00000000 00000001 00000001 00000000
 [IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)]
            0 e1 ffffe607f70a7af0 00000000 fffff805660060f0-ffffe608128b67a0 Success Error Cancel pending
           \Driver\BTHUSB    nt!PopRequestCompletion
            Args: 00000000 00000001 00000001 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-ffffe608128b67a0   

            Args: 00000000 00000000 00000000 00000000

The RtkBtfilter.sys driver is the problem driver here, and it's hung during a Bluetooth operation (note the BTHUSB.sys driver call). The version you have installed is quite old now, dating from 2022...

4: kd> lmvm RtkBtfilter
Browse full module list
start             end                 module name
fffff805`d6a40000 fffff805`d6b14000   RtkBtfilter T (no symbols)          
    Loaded symbol image file: RtkBtfilter.sys
    Image path: RtkBtfilter.sys
Image name: RtkBtfilter.sys
    Browse all global symbols  functions  data  Symbol Reload
    Timestamp:        Wed May 11 13:35:23 2022 (627B916B)
    CheckSum:         000D7CD1
    ImageSize:        000D4000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    Information from resource tables:

From the dump we can also obtain the address of the device node that describes the actual device, here's part of that output...

4: kd> !devnode ffffe607fab738a0
DevNode 0xffffe607fab738a0 for PDO 0xffffe607f6ec4ca0
  Parent 0xffffe607fa41d9a0   Sibling 0xffffe607f9511bf0   Child 0xffffe60805792810  
  InstancePath is "USB\VID_0BDA&PID_0852\00e04c000001"
  ServiceName is "BTHUSB"
  TargetDeviceNotify List - f 0xffffa183cdd02390  b 0xffffa183d227c690
  State = DeviceNodeStarted (0x30a) @ 2024 Nov 26 11:22:25.175
  Previous State = DeviceNodeEnumerateCompletion (0x30f) @ 2024 Nov 26 11:22:25.175

The USB\VID_0BDA&PID_0852 hardware IDs indicate the actual device. This is for a Realtek based USB WiFi/Bluetooth adapter - though it's probably badged as something else (TP-Link perhaps?). It's not impossible that it's the adapter itself that's at fault.


In summary, first look for an updated driver for this USB wireless adapter and if none is available condider replacing the adapter.