[SOLVED] Win 10 BSOD - ntoskrnl.exe issue?

[drikosuave]

Hello all!

My desktop has had chronic issues for over a year now. It will be fine for several days, but that's about as long as it's lasted without me waking to a BSOD. It almost always occurs overnight when in theory it's idle, but lately I've had some incidents where it's happened in my presence. Those more rare times I didn't have much going on except for a web browser open at the time.

I've run memtest isolating single sticks as well as Windows Memory diagnostic with all memory installed, and no issues were discovered.
I've run sfc /scannow and chkdsk with no apparent issues discovered.
Windows updates are all applied.
At one point during the last year, I did a clean reinstall of Windows, and BSODs returned soon thereafter.

I've posted the last couple of minidumps here: https://filebin.net/x7wlq5k1oxeo5m8u

If anyone can help, I'd really appreciate it; I've searched for solutions on and off for literally a year and don't have the expertise to debug things myself. I'm to the point now that I'm considering looking for a Black Friday replacement so that I have a stable workstation, although I really don't want to buy a new computer after only 2 years.

Thanks in advance!

Andrew

P.S. If it helps any here's a summary of major hardware specs (bought prebuilt from CyberpowerPC):

• CPU: Intel® Core™ Processor i7-9700KF 3.60GHZ 12MB Intel Smart Cache LGA1151 [w/o Integrated Graphic] (Coffee Lake)
• HDD: 480GB Kingston A400 SATA-III 6.0Gb/s SSD - 500MB/s Read and 450MB/s Write [-52] (Single Drive)
• HDD2: 2TB (2TBx1) SATA-III 6.0Gb/s 64MB Cache 7200RPM HDD [+46] (Single Drive)
• MEMORY: 32GB (8GBx4) DDR4/3200MHz Dual Channel Memory (Team T-Force Delta RGB)
• MOTHERBOARD: MSI MPG Z390 GAMING EDGE AC ATX w/ ARGB, 802.11ac Wi-Fi, USB 3.1, 3 PCIe x16, 3 PCIe x1, 6 SATA3, 2 M.2 SATA/PCIe
• MOUSE: CyberPowerPC Standard 4000 DPI with Weight System Optical Gaming Mouse
• NETWORK: Onboard Gigabit LAN Network
• OS: Windows 10 Home (64-bit Edition)
• OVERCLOCK: No Overclocking
• POWERSUPPLY: 600 Watts - Standard 600Watts 80 Plus Gold high-efficient Power Supply
• SOUND: HIGH DEFINITION ON-BOARD 7.1 AUDIO
• VIDEO: GeForce® RTX 2060 SUPER™ 8GB GDDR6 (Turing) [VR Ready] (Single Card)

 

[Colif]

Standard 600Watts 80 Plus Gold high-efficient Power Supply

this told me it was cyberpower before i saw you said it.

if BSOD reappear after BSOD it generally means problem is hardware
try running this on CPU - https://www.intel.com/content/www/us/en/download/15951/intel-processor-diagnostic-tool.html
see if this can test ssd - https://www.kingston.com/en/support/technical/ssdmanager
what makes are other drives?
can't really test MB.
until a friend converts the dumps I won't know what else to suggest.

 

[drikosuave]

this told me it was cyberpower before i saw you said it.

if BSOD reappear after BSOD it generally means problem is hardware
try running this on CPU - https://www.intel.com/content/www/us/en/download/15951/intel-processor-diagnostic-tool.html
see if this can test ssd - https://www.kingston.com/en/support/technical/ssdmanager
what makes are other drives?
can't really test MB.
until a friend converts the dumps I won't know what else to suggest.

Thanks for the reply!

The CPU and SSD both passed those tests. I have two Seagate HDs.

Hopefully someone will be kind enough to debug the minidumps to see what they can tell us.

 

[Colif]

A mod called Gardenman should reply later, i sent him a link before. He probably asleep now.

could run this on hdd - https://www.seagate.com/au/en/support/downloads/seatools/seatools-win-master/

 

[gardenman]

Hi, I ran the dump files through the debugger and got the following information: https://jsfiddle.net/80owkj7n/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

Spoiler: Dump File Results

File information:	111921-12765-01.dmp (Nov 19 2021 - 13:51:26)
Bugcheck:	IRQL_NOT_LESS_OR_EQUAL (A)
Probably caused by:	win32kbase.sys (Process: csrss.exe)
Uptime:	6 Day(s), 0 Hour(s), 45 Min(s), and 51 Sec(s)

File information:	111321-10484-01.dmp (Nov 13 2021 - 10:17:42)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kfull.sys (Process: csrss.exe)
Uptime:	0 Day(s), 0 Hour(s), 06 Min(s), and 14 Sec(s)

Possible Motherboard page: https://www.msi.com/Motherboard/mpg-z390-gaming-edge-ac
There is a BIOS update available for your system. You are using version A.7 and the latest stable version is A.B. I recommend avoiding Beta versions unless there is a specific need for one. Wait for additional information before deciding to update or not. Important: Verify that I have linked to the correct motherboard. Updating your BIOS can be risky. Never try it when you might lose power (lightning storms, recent power outages, etc).

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

both crashes only show windows processes.
csrss.exe = the environment your user runs in. it crashes, windows has to crash.

right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:
Repair-WindowsImage -Online -RestoreHealth and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

 

[drikosuave]

Thanks again for your help!

I tried a couple of things over the weekend and thought that I had replied, but now I'm not sure they posted correctly.

The Seagate HD that came with the system passed, but a second one that I added afterwards (and after the BSODs started) had issues that I (hopefully) fixed during the Seagate Boot Test.

I ran SFC /scannow and the Windows image repair, and it appears that they finished successfully. I don't know whether the image repair actually fixed anything, though. The system has now been up for a day and a half, for what it's worth, but at this point I've learned to be wary about things actually being "fixed."

 

[drikosuave]

So, I left my office for a bit and came back to another BSOD, so still no solution. Here's the latest minidump file:

https://filebin.net/9iu5quw909qeeydb

Obviously this is very frustrating, but I really appreciate everyone's help so far. Any other ideas with this latest info?

 

[gardenman]

I ran the dump file through the debugger and got the following information: https://jsfiddle.net/4gy5jak1/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:	112221-21625-01.dmp (Nov 22 2021 - 13:53:31)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kfull.sys (Process: csrss.exe)
Uptime:	1 Day(s), 20 Hour(s), 34 Min(s), and 44 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

All 3 crashes are the same part of windows.

Client Server Runtime Subsystem, or csrss.exe, is a component of the Windows NT family of operating systems that provides the user mode side of the Win32 subsystem and is included in Windows NT 3.1 and later.[1] Because most of the Win32 subsystem operations have been moved to kernel mode drivers in Windows NT 4 and later, CSRSS is mainly responsible for Win32 console handling and GUI shutdown. It is critical to system operation; therefore, terminating this process will result in system failure.

win32 console - CMD... i didn't know it run cmd.

https://en.wikipedia.org/wiki/Client/Server_Runtime_Subsystem

just trying to see what it does in hope it might give a clue...

wonder if i can approach it from another angle
can you run this for me? it will make a zip file, if you can upload that to same place as dumps it might give me a clue

SysnativeBSODCollectionApp

 

[drikosuave]

All 3 crashes are the same part of windows.

Client Server Runtime Subsystem, or csrss.exe, is a component of the Windows NT family of operating systems that provides the user mode side of the Win32 subsystem and is included in Windows NT 3.1 and later.[1] Because most of the Win32 subsystem operations have been moved to kernel mode drivers in Windows NT 4 and later, CSRSS is mainly responsible for Win32 console handling and GUI shutdown. It is critical to system operation; therefore, terminating this process will result in system failure.

win32 console - CMD... i didn't know it run cmd.

https://en.wikipedia.org/wiki/Client/Server_Runtime_Subsystem

just trying to see what it does in hope it might give a clue...

wonder if i can approach it from another angle
can you run this for me? it will make a zip file, if you can upload that to same place as dumps it might give me a clue

SysnativeBSODCollectionApp

Good morning! Here's the zip file generated: https://filebin.net/z98q7n45lpm4vvn8

 

[Colif]

unexpectedly chrome rejects the download and Firefox tells me it includes a virus.

I don't know if that is real or a false positive but I had seen other people have problems even running the app before, first time I have been warned about downloading results.

Maybe scan pc and make sure you okay.

 

[drikosuave]

I got a "headers error" warning when I unzipped, but I have no idea whether that could trigger Chrome or Firefox.

<Knock on wood> haven't had virus issues that I know of, did a Windows Defender quick scan with no issues.

 

[Colif]

Try updating your bios, only up to AB. It might help since errors are probably hardware of some type but it all seems to be passing tests.

 

[drikosuave]

Will do, thanks. Already downloaded that latest non-beta BIOS version and was waiting to pull the trigger. And then the waiting begins...

 

[gardenman]

I think Sysnative file is ok. Firefox didn't warn me, and I uploaded it to VirusTotal. Results show (0 of 56 scanners detected an issue): https://www.virustotal.com/gui/file...8ec3ae8b8409060c611caf1cd6517d1cb4e?nocache=1

 

[drikosuave]

Well, so much for the BIOS update being the issue. Was working fine on the computer this morning, walked away for a few minutes to a BSOD. SMH... Here's the minidump:

https://filebin.net/ch836e1f0upbnel9

I really hate to throw in the towel on a computer that's barely two years old, but I'm very much leaning towards taking advantage of Black Friday sales on a new desktop. Anything but CyperpowerPC, though; they were supremely unhelpful when I tried to resolve this with them a year or so ago. Any thoughts; do I just consider this a lemon and cut my losses at this point?

 

[gardenman]

I ran the dump file through the debugger and got the following information: https://jsfiddle.net/w1uahyde/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:	112421-22906-01.dmp (Nov 24 2021 - 10:48:15)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	win32kfull.sys (Process: csrss.exe)
Uptime:	1 Day(s), 1 Hour(s), 07 Min(s), and 14 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.