Random BSOD's with Crash Address ntoskrnl.exe

ostapblender

Reputable
Nov 28, 2015
6
0
4,520
Hi2all, I'm experiencing strange issues with a BSOD caused by ntoskrnl.exe
There is three logs from Blue Screen View:
==================================================
Dump File : 112217-28187-01.dmp
Crash Time : 11/22/2017 19:17:10
Bug Check String : SYSTEM_SERVICE_EXCEPTION
Bug Check Code : 0x0000003b
Parameter 1 : 00000000`c0000005
Parameter 2 : fffff80b`45a48ee1
Parameter 3 : ffffcb00`2c4eca80
Parameter 4 : 00000000`00000000
Caused By Driver : nvlddmkm.sys
Caused By Address : nvlddmkm.sys+2c8ee1
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+16c580
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\112217-28187-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 15063
Dump File Size : 681,788
Dump File Time : 11/22/2017 19:19:52
==================================================
==================================================
Dump File : 121717-8734-01.dmp
Crash Time : 12/17/2017 6:54:54 PM
Bug Check String : KMODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x0000001e
Parameter 1 : ffffffff`c0000094
Parameter 2 : fffff80d`8ad9d8ef
Parameter 3 : 00000000`00000000
Parameter 4 : ffffc700`bbd84790
Caused By Driver : nvlddmkm.sys
Caused By Address : nvlddmkm.sys+10d8ef
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+1640e0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\121717-8734-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 16299
Dump File Size : 713,660
Dump File Time : 12/17/2017 6:55:35 PM
==================================================
==================================================
Dump File : 010718-7281-01.dmp
Crash Time : 1/7/2018 4:43:48 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : fffff800`412b9198
Parameter 2 : 00000000`00000000
Parameter 3 : fffff809`2fee18ac
Parameter 4 : 00000000`00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+1756e0
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+1756e0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\010718-7281-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 16299
Dump File Size : 745,228
Dump File Time : 1/7/2018 4:44:48 PM
==================================================

What's interesting is that crashes seems to be random and not under load - at least 2 of 3 times only thing opened was Firefox, and once it's all crashed while Twitter browsing, and the last time when some video played on Youtube. First crash occurred on an old drive and since then I installed a new one with a fresh installation of Windows, but problem still persist. Another strange thing is: it occurs just about once in a month, without any visible pattern. And nothing seems to be in Event log before crash.
First. dmp: https://drive.google.com/open?id=1Z9yAkaEo3pUDITDpVBdKJ0XE8yEAvzpv
Last .dmp: https://drive.google.com/open?id=16IxZDt2dsXU-HsqyBm2-OjobrTXaEjrg
And DxDiag: https://drive.google.com/open?id=1LGq0oRmE6WMouugkNWI8ELT-95jqYd60
Any thoughts?


 
Solution
remove overclock tool:
C:\Program Files (x86)\MSI Afterburner\RTCore64.sys Fri Sep 30 05:03:17 2016

go to NVidia and do a reinstall of the graphics driver.

go to your motherboard vendor and install the motherboard audio driver.

all of the bugchecks were due to corruption of the graphics driver. looks like something corrupted the stack, often would be caused by a old audio driver
Realtek High Definition Audio Function Driver
\SystemRoot\system32\drivers\RTKVHD64.sys Tue Jul 7 04:13:02 2015
here is a update from the chip vendor:
http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=14&PFid=24&Level=4&Conn=3&DownTypeID=3&GetDown=false
or you can get it from the motherboard vendor.


(other unrelated problems below)...
remove overclock tool:
C:\Program Files (x86)\MSI Afterburner\RTCore64.sys Fri Sep 30 05:03:17 2016

go to NVidia and do a reinstall of the graphics driver.

go to your motherboard vendor and install the motherboard audio driver.

all of the bugchecks were due to corruption of the graphics driver. looks like something corrupted the stack, often would be caused by a old audio driver
Realtek High Definition Audio Function Driver
\SystemRoot\system32\drivers\RTKVHD64.sys Tue Jul 7 04:13:02 2015
here is a update from the chip vendor:
http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=14&PFid=24&Level=4&Conn=3&DownTypeID=3&GetDown=false
or you can get it from the motherboard vendor.


(other unrelated problems below)
Note: you bios is very old, feb of 2012
this means it will not have the proper support for USB 2.2 or USB 3.0
you should go to your motherboard vendor and see if you can get a updated bios and matching USB drivers (cpu chipset drivers and external USB drivers)

your network driver is also very old 2013, you should try and get a current version so that it dose not mess up virus scanners or streaming software.
Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
\SystemRoot\System32\drivers\L1C63x64.sys Sun Mar 31 20:15:17 2013
(check the motherboard vendor for a update)

machine info:
BIOS Version F3
BIOS Starting Address Segment f000
BIOS Release Date 02/15/2012
Manufacturer Gigabyte Technology Co., Ltd.
Product B75-D3V
Processor Version Intel(R) Core(TM) i5-2550K CPU @ 3.40GHz
Processor Voltage 8ch - 1.2V
External Clock 100MHz
Max Speed 7000MHz
Current Speed 3500MHz



 
Solution
>remove overclock tool:
C:\Program Files (x86)\MSI Afterburner\RTCore64.sys Fri Sep 30 05:03:17 2016

I don't think that's and issue in this case, because first two times it happened without Afterburner and now only things that I changed was fan curve and target temp.
Uninstalled for now.

>go to NVidia and do a reinstall of the graphics driver.
Done now and waiting for a 390 circa 11 jan or when it suppose to be released

>looks like something corrupted the stack, often would be caused by a old audio driver
Realtek High Definition Audio Function Driver
And that's a very good call, since on a both systems that was nearly only same thing software-wise. It was [R4.31] from 2015/08/25 from a mobo vendor site (https://www.gigabyte.com/Motherboard/GA-B75-D3V-rev-10#support-dl). Indeed, music from Spotify or sound from video was present all three times, but playback device was switched to a Rapoo Wireless Audio, which is a usb headset and doesn't come with any drivers. Can it be valuable for pinpointing the issue?

Now installed R2.82 from Realtek site.

>our network driver is also very old 2013
Yup, same thing: newest from a vendor website.

Also turned off hardware acceleration in Firefox 57. Continue to observe.
 
So, two month passed and no issues whatsoever. Looks like it was indeed Realtek driver. Or 388 Nvidia driver, or the combination of both.
Oh, and I turned on hardware acceleration on FF back almost immediately, because this twitchy scrolling is unbearable.