Question Random crashes; DMP file points to win32kfull.sys and ntoskrnl.exe ?

[TheJunta]

Hi all, would really like some help here as I am stumped. I've been having issues with random system restarts. No BSOD or errors, just full on restart with no warnings.

Another forum user pointed me toward the Reliability app in Win 10, which shows the events:
Imgur list of screenshots from Reliabilty & BlueScreenView
As you can see, win32kfull.sys and ntoskrnl.exe are reported a couple of times.

The error dropped out a DMP file:
DMP file is here, as a 153mb .rar

I've run SFC and Memtest and nothing's reported. Win10 is up-to-date.

System specs:
i5 9600k
16gb DDR 4 RAM Kingston
500gb SSD + 1tb HDD
Asus Tuf Gaming Z390
RTX 2060
850W CORSAIR RM850x PSU

Any help appreciated!

 

[rgd1101]

brand and model of the psu?

 

[TheJunta]

It's an 850W Corsair RM850x PSU
Added to main description

 

[gardenman]

Hi, I ran the dump file through the debugger and got the following information: https://jsfiddle.net/7tLr9cje/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:	MEMORY.DMP (Jan 26 2022 - 01:22:07)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kfull.sys (Process running at time of crash: csrss.exe)
Uptime:	0 Day(s), 3 Hour(s), 44 Min(s), and 43 Sec(s)

Possible Motherboard page: https://www.asus.com/Motherboards-Components/Motherboards/TUF-Gaming/TUF-Z390-PLUS-GAMING/
There are BIOS updates available however they may not be helpful. Don't update just yet. Wait for additional information before deciding to update or not. Important: Verify that I have linked to the correct motherboard. Updating your BIOS can be risky. Never try it when you might lose power (lightning storms, recent power outages, etc).

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[TheJunta]

Thanks @gardenman that's awesome insight. I thought my BIOS was up-to-date but it appears it's now a version or two out of date.

With this said, I've diabled fast boot in the Windows options and since doing so the machine hasn't randomly rebooted. Perhaps I'm slowly onto something...

 

[Colif]

Normally gardenman's results page includes a list of drivers running at time of crash. Your dump file is missing all of those. Which makes it hard to tell what might be cause
csrss.exe - Client service AKA the environment your user runs in.

dump just mentions 2 parts of the windows kernel

SO as to see what drivers you do have,
Can you download and run Driverview - http://www.nirsoft.net/utils/driverview.html

All it does is looks at drivers installed; it won't install any (this is intentional as 3rd party driver updaters often get it wrong)

When you run it, go into view tab and set it to hide all Microsoft drivers, will make list shorter.

Now its up to you, you can look through the drivers and try to find old drivers, or you can take a screenshot from (and including)Driver name to (and including)Creation date.

upload it to an image sharing website and show link here

All I would do is look at driver versions (or dates if you lucky to have any) to see what might have newer versions.

 

[TheJunta]

Thanks @Colif - yes unfortunately I provided full dump files vs minidump. In any case, here's the DriverView with MS drivers excluded: https://imgur.com/LZUdz8H

 

[TheJunta]

Update: machine hasn't crashed in over 36 hours. I disabled Fast Boot for Windows and it seems to have done the trick? Bit random.

 

[Colif]

turning off fast startup fixing it just means the problem is a driver that doesn't agree with the new power modes that fast startup uses. Pretty common for older drivers

I don't see any that would fall into that category though. your oldest driver is 2018 and not a driver I suspect.

 

[TheJunta]

It just crashed again. Minidump here: https://drive.google.com/file/d/1ele_eaeETegQl_9WrL3GAIHlidZYDZqf/view?usp=sharing
cc @Colif / @gardenman

 

[gardenman]

I ran the dump file through the debugger and got the following information: https://jsfiddle.net/gxwsdk8m/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:	013022-7500-01.dmp (Jan 29 2022 - 21:20:05)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kfull.sys (Process running at time of crash: csrss.exe)
Uptime:	0 Day(s), 1 Hour(s), 03 Min(s), and 36 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

Edit: Results from dump on next post: https://jsfiddle.net/5kpujzh7/show

Spoiler: Dump File Results

File information:	020122-6109-01.dmp (Jan 31 2022 - 18:53:31)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kfull.sys (Process running at time of crash: csrss.exe)
Uptime:	0 Day(s), 1 Hour(s), 31 Min(s), and 10 Sec(s)

 

[TheJunta]

Still crashing. Just did it again. I'm at a loss! Latest minidump

Should I try and replace/update all those drivers in DriverView @Colif ?

Some of them are tied to nVidia drivers, and I guess get replaced each time I update the GeForce drivers?

 

[Colif]

i think the cause of the last one Gardenamn converted is actually the Nvidia drivers, even though you have January ones.
try running ddu in safe mode and reinstall Nvidia drivers

How To - How to perform a CLEAN install of your video card drivers.

Updated 9-19-19 How to do a CLEAN install of your graphics card drivers using the Wagnard tools Display Driver Uninstaller A major issue on many systems is the presence of multiple graphics card drivers or drivers that have been incompletely uninstalled followed by the installation of...

forums.tomshardware.com

you can probably use a program in the Asus Armoury package to update drivers. As I said, most of yours are new and didn't stand out as obvious causes.

 

[TheJunta]

Thanks @Colif - I followed those instructions using DDU in Safe Mode. When I reinstalled the drivers, I unchecked the option for HD Audio and USBC drivers. But it installed them anyway! So I've left them in for now, esp since - as you say - the thinking is that it's the GPU drivers in any case.

 

[TheJunta]

Crashed again. Minidump here 🙁

 

[gardenman]

I ran the dump file through the debugger and got the following information: https://jsfiddle.net/nkrdh0mL/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:	020222-6171-01.dmp (Feb 1 2022 - 15:08:54)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kbase.sys (Process running at time of crash: csrss.exe)
Uptime:	0 Day(s), 0 Hour(s), 21 Min(s), and 17 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

its not like we have many driver makers to blame here... 4

Jan 10 2020	nvvhci.sys	Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
Jul 09 2020	UcmCxUcsiNvppc.sys	NVIDIA USB Type-C Port Policy Controller driver
Jul 24 2020	iaStorAC.sys	Intel Rapid Storage Technology driver
Aug 11 2020	NvModuleTracker.sys	NVIDIA Module Tracker driver
Jun 22 2021	e1d68x64.sys	Intel(R) Gigabit Adapter driver
Jul 27 2021	TeeDriverW10x64.sys	Intel Management Engine Interface driver
Aug 17 2021	ssdevfactory.sys	SteelSeries Device Factory driver https://steelseries.com/
Sep 13 2021	nvvad64v.sys	Nvidia Virtual Audio driver http://www.nvidia.com/
Oct 21 2021	nvhda64v.sys	Nvidia HDMI Audio Device http://www.nvidia.com/
Jan 04 2022	SteelSeries-Sonar-VAD.sys	SteelSeries Sonar VAD driver
Jan 10 2022	nvlddmkm.sys	Nvidia Graphics Card driver http://www.nvidia.com/
Jan 25 2022	EasyAntiCheat.sys	EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/

thats all drivers running during last crash. its less than last time so it helps remove some from blame. Not razer there.

I don't expect you to update any, just showing what was there.

its consistent in its crashing of csrss.exe

try running this and see if it offers anything new - https://www.intel.com.au/content/www/au/en/support/intel-driver-support-assistant.html

 

[TheJunta]

Thanks both - yeah the list has reduced since I took out Realtek, Razer and a few other errant ones. I've done some reaserch and updated the LAN driver, and am about to do the SATA driver too. I will run that Intel proggy shortly...

Update: Intel says -

No supported driver or software updates are available for your system.

 

[TheJunta]

And again - minidump
And an hour after - minidump - this one only seemed to highlight ntoskrnl.exe in the BlueScreenView though?

 

[gardenman]

I ran the dump files through the debugger and got the following information: https://jsfiddle.net/36ha8dj7/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

Spoiler: Dump File Results

File information:	020322-6218-01.dmp (Feb 2 2022 - 22:29:04)
Bugcheck:	MACHINE_CHECK_EXCEPTION (9C)
Probably caused by:	intelppm.sys (Process running at time of crash: System)
Uptime:	0 Day(s), 0 Hour(s), 46 Min(s), and 34 Sec(s)

File information:	020322-6203-01.dmp (Feb 2 2022 - 21:42:04)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kfull.sys (Process running at time of crash: csrss.exe)
Uptime:	0 Day(s), 5 Hour(s), 25 Min(s), and 42 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

try running this on CPU - https://www.intel.com/content/www/us/en/download/15951/19792/intel-processor-diagnostic-tool.html?
i could have done without a machine check exception.
intelppm is a part of windows designed to talk to the CPU
stack pointer error - the stack is an area of ram used by CPU to know what program to run next

Try running memtest86 on each of your ram sticks, one stick at a time, up to 4 passes. Only error count you want is 0, any higher could be cause of the BSOD. Remove/replace ram sticks with errors.

Memtest is created as a bootable USB so that you don’t need windows to run it

 

[TheJunta]

Thanks @Colif - Intel CPU test results were a pass:

--- IPDT64 - Revision: 4.1.5.37
--- IPDT64 - Start Time: 3/02/2022 8:18:19 PM

----------------------------------------------
-- Testing
----------------------------------------------
CPU 1 - Genuine Intel - Pass.
CPU 1 - BrandString - Pass.
CPU 1 - Cache - Pass.
CPU 1 - MMXSSE - Pass.
CPU 1 - IMC - Pass.
CPU 1 - Prime Number - Pass.
CPU 1 - Floating Point - Pass.
CPU 1 - Math - Pass.
CPU 1 - GPUStressW - Pass.
CPU 1 - CPULoad - Pass.
CPU 1 - CPUFreq - Pass.

IPDT64 Passed
--- IPDT64 - Revision: 4.1.5.37
--- IPDT64 - End Time: 3/02/2022 8:22:12 PM

----------------------------------------------
PASS

Full results file behind spoiler

Spoiler: Full test results

--- IPDT64 - Revision: 4.1.5.37
--- IPDT64 - Start Time: 3/02/2022 8:18:19 PM

CPU1
Genuine Intel CPU Test
Module Version: 1.0.19.64b.W
Start Time: Thu Feb 3 20:18:20 2022
Test Result - PASS
Expected: GenuineIntel
Detected: GenuineIntel
End Time: Thu Feb 3 20:18:20 2022
Total Time: in seconds: 0
--------------------------------------------------------------------
CPU1
CPU Brand String Test
Module Version: 1.0.23.64b.W
Start Time: Thu Feb 3 20:18:20 2022
Test Result - PASS
Expected: Intel(R) Core(TM) @
Detected: Intel(R) Core(TM) i5-9600K CPU @ 3.70GHz
Intel(R) Core(TM) processor detected..!!..
End Time: Thu Feb 3 20:18:20 2022
Total Time: in seconds: 0
--------------------------------------------------------------------
CPU1
Cache Test
Module Version: 1.0.18.64b.W
Start Time: Thu Feb 3 20:18:20 2022
Test Result - PASS

--- Reading Cache Size ---

• Detected L1 Data Cache Size --> 32
• Detected L1 Inst Cache Size --> 32

• Detected L2 Cache Size --> 256
• Detected L3 Cache Size --> 9216

Cache Size Test Passed!!!

End Time: Thu Feb 3 20:18:20 2022
Total Time: in seconds: 0
--------------------------------------------------------------------
CPU1
MMXSSE Test
Module Version: 1.0.25.64b.W
Start Time: Thu Feb 3 20:18:20 2022
Test Result - PASS

DetectUtils64 DLL Version - 1.1.3

--- Determining MMX - SSE capabilities ---
..MMX is supported on this CPU..
..SSE is supported on this CPU..
..SSE2 is supported on this CPU..
..SSE3 is supported on this CPU..
..SSSE3 is supported on this CPU..
..SSE4.1 is supported on this CPU..
..SSE4.2 is supported on this CPU..

MMX Test Result --- PASS
SSE Test Result --- PASS
SSE2 Test Result --- PASS
SSE3 Test Result --- PASS
SSSE3 Test Result --- PASS
SSE4.1 Test Result --- PASS
SSE4.2 Test Result --- PASS

End Time: Thu Feb 3 20:18:20 2022
Total Time: in seconds: 0
--------------------------------------------------------------------
CPU1
IMC Test
Module Version: 1.0.20.64b.W
Start Time: Thu Feb 3 20:18:20 2022
Test Result - PASS
--- Reading Memory Size ---
Detected Memory Size is --> 16.00GB
--- Subtest - Memory Size Test Passed!!! ---
--- Integrated Memory Controller Stress Test ---
Memory to be allocated = 1048576 bytes
Memory Allocated.
Test 1 Ones and Zeros Moving Inversions write operations - Passed
Test 1 Ones and Zeros Moving Inversions verification operations - Passed
Test 2 32Bits Sliding Ones write operations - Passed
Test 2 32Bits Sliding Ones verification operations - Passed
Test 3 32Bits Sliding Zero write operations - Passed
Test 3 32Bits Sliding Zero verification operations - Passed
Memory Deallocated.
--- Subtest - Memory Stress Test Passed!!! ---
Integrated Memory Controller Test Passed!!!
End Time: Thu Feb 3 20:18:21 2022
Total Time: in seconds: 1
--------------------------------------------------------------------
CPU1
Parallel_PrimeNum Test
Module Version: 1.0.0.10
Start Time: 3/02/2022 8:18:21 PM
Test Result - PASS

Module Math_PrimeNum.exe Completed - Pass


Prime Number Generation Test
Module Version: 1.0.23.64b.W
Start Time: Thu Feb 3 20:18:21 2022
DetectUtils64 DLL Version - 1.1.3
AVX is supported in your OS
Max AVX supported = AVX2
Test Result - PASS
Operation Per Second: 202573
Error: 0
--- Prime Number Generation Test Passed!!!---
End Time: Thu Feb 3 20:19:06 2022
Total Time: in seconds: 45

Parallel_PrimeNum
End Time: 3/02/2022 8:19:06 PM
--------------------------------------------------------------------
CPU1
Parallel_FP Test
Module Version: 1.0.0.10
Start Time: 3/02/2022 8:19:06 PM
Test Result - PASS

Module AVX.exe Completed - Pass
Module Math_FP.exe Completed - Pass


AVX Test
Module Version: 2.0.25.64b.W
Start Time: Thu Feb 3 20:19:06 2022
Test Result - PASS

DetectUtils64 DLL Version - 1.1.3

--- CPU Features Detection ---
..AVX is supported by this CPU..
..AVX2 is supported by this CPU..
..AVX512BW is NOT supported by this CPU..
..AVX512CD is NOT supported by this CPU..
..AVX512DQ is NOT supported by this CPU..
..AVX512ER is NOT supported by this CPU..
..AVX512F is NOT supported by this CPU..
..AVX512IFMA52 is NOT supported by this CPU..
..AVX512PF is NOT supported by this CPU..
..AVX512VBMI is NOT supported by this CPU..
..AVX512VL is NOT supported by this CPU..
..AES is supported by this CPU..
..PCLMULQDQ is supported by this CPU..

..AVX is supported by this Operating System..

Most Advanced AVX Feature Detected.. AVX2
AVX2 Test Result --- PASS
AES Test Result --- PASS
PCLMULQDQ Test Result --- PASS

End Time: Thu Feb 3 20:19:54 2022
Total Time: in seconds: 48


Floating Point Test
Module Version: 1.0.22.64b.W
Start Time: Thu Feb 3 20:19:06 2022
DetectUtils64 DLL Version - 1.1.3
AVX is supported in your OS
Max AVX supported = AVX2
FMA3 supported
Test Result - PASS
Million Floating Points per Second, MFLOPS: 0.52
Error: 0
--- Floating Point Test Passed!!!---
End Time: Thu Feb 3 20:19:51 2022
Total Time: in seconds: 45

Parallel_FP
End Time: 3/02/2022 8:19:54 PM
--------------------------------------------------------------------
CPU1
Parallel_Math Test
Module Version: 1.0.0.10
Start Time: 3/02/2022 8:19:54 PM
Test Result - PASS

Module Math_PrimeNum.exe Completed - Pass
Module FMA3.exe Completed - Pass


Prime Number Generation Test
Module Version: 1.0.23.64b.W
Start Time: Thu Feb 3 20:19:54 2022
DetectUtils64 DLL Version - 1.1.3
AVX is supported in your OS
Max AVX supported = AVX2
Test Result - PASS
Operation Per Second: 106913
Error: 0
--- Prime Number Generation Test Passed!!!---
End Time: Thu Feb 3 20:20:39 2022
Total Time: in seconds: 45


FMA3 Test
Module Version: 1.0.23.64b.W
Start Time: Thu Feb 3 20:19:54 2022
Test Result - PASS

DetectUtils64 DLL Version - 1.1.3

--- CPU Features Detection ---
..FMA3 is supported by this CPU..
..FMA3 is supported by this Operating System..

FMA3 Test Result --- PASS

End Time: Thu Feb 3 20:20:40 2022
Total Time: in seconds: 46

Parallel_Math
End Time: 3/02/2022 8:20:40 PM
--------------------------------------------------------------------
CPU1
Parallel_GPUStressW Test
Module Version: 1.0.0.10
Start Time: 3/02/2022 8:20:40 PM
Test Result - PASS

Module AVX.exe Completed - Pass
Module FMA3.exe Completed - Pass


AVX Test
Module Version: 2.0.25.64b.W
Start Time: Thu Feb 3 20:20:40 2022
Test Result - PASS

DetectUtils64 DLL Version - 1.1.3

--- CPU Features Detection ---
..AVX is supported by this CPU..
..AVX2 is supported by this CPU..
..AVX512BW is NOT supported by this CPU..
..AVX512CD is NOT supported by this CPU..
..AVX512DQ is NOT supported by this CPU..
..AVX512ER is NOT supported by this CPU..
..AVX512F is NOT supported by this CPU..
..AVX512IFMA52 is NOT supported by this CPU..
..AVX512PF is NOT supported by this CPU..
..AVX512VBMI is NOT supported by this CPU..
..AVX512VL is NOT supported by this CPU..
..AES is supported by this CPU..
..PCLMULQDQ is supported by this CPU..

..AVX is supported by this Operating System..

Most Advanced AVX Feature Detected.. AVX2
AVX2 Test Result --- PASS
AES Test Result --- PASS
PCLMULQDQ Test Result --- PASS

End Time: Thu Feb 3 20:21:10 2022
Total Time: in seconds: 30


FMA3 Test
Module Version: 1.0.23.64b.W
Start Time: Thu Feb 3 20:20:40 2022
Test Result - PASS

DetectUtils64 DLL Version - 1.1.3

--- CPU Features Detection ---
..FMA3 is supported by this CPU..
..FMA3 is supported by this Operating System..

FMA3 Test Result --- PASS

End Time: Thu Feb 3 20:21:11 2022
Total Time: in seconds: 31

Parallel_GPUStressW
End Time: 3/02/2022 8:21:11 PM
--------------------------------------------------------------------
CPU1
DGEMM Stress Test
Module Version: 1.0.11.64b.W
Start Time: Thu Feb 3 20:21:11 2022
Test Result - PASS

DetectUtils64 DLL Version - 1.1.3

--- CPU Features Detection ---
..AVX is supported by this Operating System..

Most Advanced AVX Feature Detected.. AVX2
DGEMM AVX2 Test Result --- PASS

End Time: Thu Feb 3 20:22:11 2022
Total Time: in seconds: 60
--------------------------------------------------------------------
CPU1
Frequency Check
Module Version: 1.0.3.64b.W
Start Time: Thu Feb 3 20:22:11 2022
Test Result - PASS
Processor Name: Intel(R) Core(TM) i5-9600K CPU @ 3.70GHz
Expected Processor Frequency: 3.70
Measured Processor Frequency: 3.693748
End Time: Thu Feb 3 20:22:12 2022
Total Time: in seconds: 1
--------------------------------------------------------------------

System Information
------------------
Processor Name: Intel(R) Core(TM) i5-9600K CPU @ 3.70GHz
Processor Information: Family 6 Model 9E Stepping C
Number of Physical Cores: 6
Number of Logical Cores: 6
Operating System: Microsoft Windows 10 Home 64-bit
Graphics Information: NVIDIA GeForce RTX 2060
--------------------------------------------------------------------

--- IPDT64 - End Time: 3/02/2022 8:22:12 PM
--- IPDT64 - Result: Pass
--------------------------------------------------------------------

I will try running memtest later/tomorrow morning

 

[TheJunta]

And again. I upgraded to Windows 11 in the vain hope it might help.
Mindump

Interestingly, the Reliabilty app provides a bit more info in Win11. This came up:

 

[Colif]

https://docs.microsoft.com/en-us/wi...ugger/bug-check-0x9c--machine-check-exception
same as previous one I didn't want to see.

You on a newer version of 11 than I am, guess i could run windows update

 

[gardenman]

I ran the dump file through the debugger and got the following information: https://jsfiddle.net/fg48ud2p/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:	020422-6125-01.dmp (Feb 3 2022 - 22:28:20)
Bugcheck:	MACHINE_CHECK_EXCEPTION (9C)
Probably caused by:	intelppm.sys (Process running at time of crash: System)
Uptime:	0 Day(s), 0 Hour(s), 44 Min(s), and 42 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.