Question Random BSOD

golemka

Distinguished
Sep 24, 2013
120
2
18,715
Hello there,
Having some weird BSODs since I changed my hw to i7 4790k, MSI Z97 Gaming 5 and 16GB of DDR3. Reinstalled the system so its fresh. Was having alot of issues with the nvidia drivers, was cleaned with DDU.

NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88008c837d8
Arg3: fffff88008c83040
Arg4: fffff80002c55070

Debugging Details:
------------------


EXCEPTION_RECORD: fffff88008c837d8 -- (.exr 0xfffff88008c837d8)
ExceptionAddress: fffff80002c55070 (nt!ExpCheckForIoPriorityBoost+0x000000000000005c)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT: fffff88008c83040 -- (.cxr 0xfffff88008c83040)
rax=fffff88008c83a48 rbx=fffffa80119b9ef0 rcx=fffffa80119b9ef0
rdx=0000000000000002 rsi=0000000000000000 rdi=ffdffff6ffdffff4
rip=fffff80002c55070 rsp=fffff88008c83a10 rbp=0000000000000001
r8=0000000000000000 r9=0000000000000000 r10=fffffa800d357358
r11=0000000000000006 r12=0000000000000000 r13=fffff8800357b180
r14=0000000000000002 r15=0000000000010244
iopl=0 nv up di ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010082
nt!ExpCheckForIoPriorityBoost+0x5c:
fffff80002c55070 8b8750040000 mov eax,dword ptr [rdi+450h] ds:002b:ffdffff6ffe00444=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: svchost.exe

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ea7100
ffffffffffffffff

FOLLOWUP_IP:
Ntfs!NtfsAcquireFcbWithPaging+13a
fffff8800181236a 84c0 test al,al FAULTING_IP: nt!ExpCheckForIoPriorityBoost+5c fffff80002c55070 8b8750040000 mov eax,dword ptr [rdi+450h]

BUGCHECK_STR: 0x24

LAST_CONTROL_TRANSFER: from fffff80002c52279 to fffff80002c55070

STACK_TEXT:
fffff88008c83a10 fffff80002c52279 : fffffa80119b9ef0 0000000000000001 0000000000000000 fffff8800357b180 : nt!ExpCheckForIoPriorityBoost+0x5c
fffff88008c83a50 fffff80002c520ff : ffffffffffb3b4c0 ffdffff6ffdffff6 fffffa80119b9ef0 fffff8a00927b350 : nt!ExpWaitForResource+0x8d
fffff88008c83ac0 fffff8800181236a : 00000000c00000d8 0000000000000001 0000000000000000 fffff8a00927a3a8 : nt!ExAcquireResourceExclusiveLite+0x14f
fffff88008c83b30 fffff880018ab963 : fffffa800cdc25f0 fffff8a00927a010 fffff8a0123638da fffff8800a0c7501 : Ntfs!NtfsAcquireFcbWithPaging+0x13a
fffff88008c83b90 fffff880018a9b52 : fffffa800cdc25f0 fffffa800d357358 fffff8a000397140 fffffa800cdc2501 : Ntfs!NtfsFindPrefixHashEntry+0xabe
fffff88008c83cc0 fffff880018a8105 : fffffa800cdc25f0 fffffa8011fa1630 fffff88008c83e90 fffff88008c83eb0 : Ntfs!NtfsFindStartingNode+0x452
fffff88008c83d90 fffff880018124dd : fffffa800cdc25f0 fffffa8011fa1630 fffff8800a0c7370 fffffa801218eb00 : Ntfs!NtfsCommonCreate+0x865
fffff88008c83f30 fffff80002ca11e7 : fffff8800a0c72e0 0000000000000000 0000000000000000 0000000000000000 : Ntfs!NtfsCommonCreateCallout+0x1d
fffff88008c83f60 fffff80002ca11a8 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KxSwitchKernelStackCallout+0x27
fffff8800a0c71a0 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSwitchKernelStackContinue


SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: Ntfs!NtfsAcquireFcbWithPaging+13a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME: Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 5c6044e6

STACK_COMMAND: .cxr 0xfffff88008c83040 ; kb

FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsAcquireFcbWithPaging+13a

BUCKET_ID: X64_0x24_Ntfs!NtfsAcquireFcbWithPaging+13a

Followup: MachineOwner

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002c8732c, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88009ebabe0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!ObfDereferenceObject+2c
fffff80002c8732c f0480fc11f lock xadd qword ptr [rdi],rbx CONTEXT: fffff88009ebabe0 -- (.cxr 0xfffff88009ebabe0) rax=fffff8a00114b4b0 rbx=ffffffffffffffff rcx=fff1fa75114563b7 rdx=fffff8a00114b4b1 rsi=fff1fa75114563b7 rdi=fff1fa7511456387 rip=fffff80002c8732c rsp=fffff88009ebb5b0 rbp=0000000000000001 r8=fffff8a00114b4b0 r9=0000000000000050 r10=fffff8800357c780 r11=fffff8a00901c820 r12=0000000000000000 r13=0000000000000000 r14=fffffa800caf2170 r15=fffffa800caec000 iopl=0 nv up ei ng nz na po nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286 nt!ObfDereferenceObject+0x2c: fffff80002c8732c f0480fc11f lock xadd qword ptr [rdi],rbx ds:002b:fff1fa7511456387=???????????????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x3B PROCESS_NAME: qbittorrent.ex CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002c8732c STACK_TEXT: fffff88009eba318 fffff80002cf52e9 : 000000000000003b 00000000c0000005 fffff80002c8732c fffff88009ebabe0 : nt!KeBugCheckEx fffff88009eba320 fffff80002cf49fc : fffff88009ebb378 fffff88009ebabe0 0000000000000000 fffff80002cd51bc : nt!KiBugCheckDispatch+0x69 fffff88009eba460 fffff80002cee1fd : fffff80002edd458 fffff80002e18458 fffff80002c53000 fffff88009ebb378 : nt!KiSystemServiceHandler+0x7c fffff88009eba4a0 fffff80002cae125 : fffff80002dfcde8 fffff88009eba518 fffff88009ebb378 fffff80002c53000 : nt!RtlpExecuteHandlerForException+0xd fffff88009eba4d0 fffff80002dcdeee : fffff88009ebb378 fffff88009ebabe0 fffff88000000000 fff1fa7511456387 : nt!RtlDispatchException+0x415 fffff88009ebabb0 fffff80002cf53c2 : fffff88009ebb378 ffffffffffffffff fffff88009ebb420 fff1fa75114563b7 : nt!KiDispatchException+0x17e fffff88009ebb240 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiExceptionDispatch+0xc2 STACK_COMMAND: kb FOLLOWUP_IP: nt!KiSystemServiceHandler+7c fffff80002cf49fc b801000000 mov eax,1

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!KiSystemServiceHandler+7c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 5dc1df00

FAILURE_BUCKET_ID: X64_0x3B_nt!KiSystemServiceHandler+7c

BUCKET_ID: X64_0x3B_nt!KiSystemServiceHandler+7c

Followup: MachineOwner

I did a few things, like memtest with and without XMP, 12-12 hours, both of them passed.
Also did a test with and without turbo boost 12-12 hours in OCCT and Prime95, also passed.
BSOD1
BSOD2
I have attached 2 links with the BSODs.
 
Last edited:

Lutfij

Titan
Moderator
By change to, what did you change from? In fact you should list your specs like so:
CPU:
Motherboard:
Ram:
SSD/HDD:
GPU:
PSU:
Chassis:
OS:

Since you made an upgrade, we should be seeing two sets of specs, one before and one after the upgrade. With the OS being Windows 7, did you make sure to perform an update via Windows updates?
 

golemka

Distinguished
Sep 24, 2013
120
2
18,715
Cpu was Phenom II x4 955 and was changed to i7 4790k
Mobo was Gigabyte GA970A and was changed to MSI Z97 Gaming 5.
Ram was 2x4Gb Kingston, had to change due to compatibility to Gskill 2x8. It is compatible with the mobo.
SSD and HDD stood the same, Corsair Neutron XT 240Gb and a Black WD 1TB drive.
Gpu also the same NV GTX660.
PSU also the same , EVGA 850 G2 Supernova.
Os was freshly installed for the new system, also have the latest updates.
 

golemka

Distinguished
Sep 24, 2013
120
2
18,715
Another update, another BSOD.
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800033174c7, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800b5cb980, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!ObpWaitForMultipleObjects+187
fffff800033174c7 488b4a20 mov rcx,qword ptr [rdx+20h] CONTEXT: fffff8800b5cb980 -- (.cxr 0xfffff8800b5cb980) rax=000000000000002e rbx=fffff8a0026df880 rcx=fffff80003014000 rdx=0000000000000000 rsi=0000000000000002 rdi=fffffa80121e2fb0 rip=fffff800033174c7 rsp=fffff8800b5cc350 rbp=fffff8800b5ccb60 r8=0000000000000008 r9=fffff8a0026ad000 r10=fffffa80122cf060 r11=fffffffffffffd80 r12=fffff8800b5cc868 r13=fffff8a0015fa670 r14=0000000000000001 r15=0000000000000003 iopl=0 nv up ei pl nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202 nt!ObpWaitForMultipleObjects+0x187: fffff800033174c7 488b4a20 mov rcx,qword ptr [rdx+20h] ds:002b:0000000000000020=???????????????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x3B PROCESS_NAME: audiodg.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff800033174c7 STACK_TEXT: fffff8800b5cc350 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!ObpWaitForMultipleObjects+0x187 FOLLOWUP_IP: nt!ObpWaitForMultipleObjects+187 fffff800033174c7 488b4a20 mov rcx,qword ptr [rdx+20h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!ObpWaitForMultipleObjects+187

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 5dc1df00

STACK_COMMAND: .cxr 0xfffff8800b5cb980 ; kb

FAILURE_BUCKET_ID: X64_0x3B_nt!ObpWaitForMultipleObjects+187

BUCKET_ID: X64_0x3B_nt!ObpWaitForMultipleObjects+187

Followup: MachineOwner