Question [W11] [BSOD] IRQL_NOT_LESS_OR_EQUAL - afd.sys

Nov 4, 2023
3
0
10
Paging @Colif and @gardenman

Reaching out because I'm trying to troubleshoot a buddy of mine's PC. He's been getting BSOD for IRQL referencing various services, most recently afd.sys. This is a new build, it's a
AMD 5600X
Gigabyte B550M DS3H AC
Nvidia 4070
GSkill 32GB mem

I've parsed through basically every IRQL thread on this forum you two have ever worked, and when afd.sys is involved they seem to come down to reference the network drivers. I've uninstalled and reinstalled the Realtek ethernet + BT drivers a half dozen time.

One crash previously referenced a nvidia driver, so I also used DDU to re-install the actual GPU driver twice.

The crash occurs when he's streaming to Twitch.tv using OBS recording software.

chkdsk did not have any dirty sectors to clean
sfc /scannow did repair system files (both this time and 1 other time previously that this crash occurred).

Latest full DMP attached, hoping you can break it down for me.


Additionally, here's 4 previous minidumps (I believe you can ignore the one with Discord trigger unless it looks relevant):
 
Last edited:
These are old dumps, they're all from September. Are there no more current ones? The problem is that much may have changed on the system between September and now...

You're right that afd.sys is referenced in all the dumps, although there is no reference to a third-party network adapter driver in any of them. The afd.sys driver's full name is Ancillary Function Driver for Winsock, it's actually the high-level networking API and it does sometimes become fouled-up. The first thing I'd suggest then, is to reset winsock...
  1. Open an elevated command prompt
  2. Enter the command: netsh winsock reset
I'd also suggest resettingthe TCP/IP network stack as well...
  1. Open an elevated command prompt
  2. Enter the command: netsh int ip reset

If the user also has a third-party anti-malware product installed (McAfee, Avast, Norton, etc. etc.) then please ask them to disable it completely.

If it still BSODs after all this then please upload the new dumps.
 
These are old dumps, they're all from September. Are there no more current ones? The problem is that much may have changed on the system between September and now...

You're right that afd.sys is referenced in all the dumps, although there is no reference to a third-party network adapter driver in any of them. The afd.sys driver's full name is Ancillary Function Driver for Winsock, it's actually the high-level networking API and it does sometimes become fouled-up. The first thing I'd suggest then, is to reset winsock...
  1. Open an elevated command prompt
  2. Enter the command: netsh winsock reset
I'd also suggest resettingthe TCP/IP network stack as well...
  1. Open an elevated command prompt
  2. Enter the command: netsh int ip reset

If the user also has a third-party anti-malware product installed (McAfee, Avast, Norton, etc. etc.) then please ask them to disable it completely.

If it still BSODs after all this then please upload the new dumps.
Thanks!

Yeah, the last time this occurred (September), I reinstalled the network driver and ran DDU and installed the new nvidia 4070 driver, which seemed to solve it until today.

I’ll run those commands and provide another full dump when/if occurs again. It does seem strange that it only occurs when he’s streaming. If it’s the network API like you suggest, then the only thing I can think is maybe the extra strain on this APi when streaming is causing fault? I really am grasping at straws here.

As far as AV, it’s simply Windows 11/defender protected. No 3pp