[SOLVED] Win11 BSOD ntoskrnl.exe+416b40 , unsure what cause

[Karrthus]

Good evening, I have a Acer Aspire 5 A514-54 that has began to BSOD after a windows 11 update

it is under warrently, but sending it back for a software issue is inconvenient, especially as the machine is used daily and is integral to the system we have here and currently cannot be away.

the machine is crashing with a Kmode_Exception_Not_handled, with Nirsoft's Bluescreen Viewer pointing to ntoskrnl.exe+416b40 to be the cause
Windows auto repair also failed, pointing to C:\Windows\System32\Logfiles\Srt\SrtTrail.txt , which shows
--
Root cause found

Boot Critical File Boot critical file c:\efi\microsoft\boot\cipolicies\active\{cdd5cb55-db68-4d71-aa38-3df2b6473a52}.cip is corrupt.
Repair action: File repair
Result: Failed. Error code = 0x57
Time taken = 1282 ms
--

Rebuilding the MBR with CMD pulls up access denied (ngl never had any success with this) and i dont currently have access to any third party software to do this, and i dont really want to perform a full clean install as windows 11 is annoying to work with in this area,

I am fairly tech savvy, but i do not currently fully understand how to read a dump file, I have included a wetransfer link (valid for 7 days from posting this thread) to the C:/Windows/Minidump file for this crash, if anyone can interpret it and give me an idea of what the offending thing is that would be sweet

https://wetransfer.com/downloads/cf...57d0a047a408b9c975944ba220220511204330/19d9a2

Crash Replication
boot up pc
hope its fine
sometimes it is and you can access your machine as normal
sometimes it doesnt

restarting the pc using restart is a garunteed crash
pc will crash + loop crash until windows startup repair starts and fails, continuing to windows 11 crashes

shutting down the pc after startup repair crash loop has happened, then turning it back on usually boots it into win11

Cheers


Edit
I have been asked by a moderator to include my full system specs

the machine is an Aspire 5 A514-54 bought from Acer

it comes with an Intel I5-1135G7 4 cores @ 2.40ghz
It has Intel Xe Graphics
It has 8GB DDR4 SDRAM
and a 256gb SSD running through PCI Express, I am using /256gb
The machine runs on a 3-Cell Lithium Ion battery rated at 10 hours with a 45W Power Supply Wattage

the machine is running on the latest version of Windows 11, obtained through a free Upgrade from Windows 10 when the machine was purchased

Event viewer logs
The only big error that is visible in my logs is the following

The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xffffffffc0000005, 0x0000000000000000, 0x0000000000000008, 0x0000000000000000).
A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 23e4608f-1887-4967-aed1-4c63a3515326.

- System

- Provider

[ Name] Microsoft-Windows-WER-SystemErrorReporting
[ Guid] {ABCE23E7-DE45-4366-8631-84FA6C525952}
[ EventSourceName] BugCheck

- EventID 1001

[ Qualifiers] 16384

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2022-05-11T23:33:42.8186554Z

EventRecordID 8418

Correlation

- Execution

[ ProcessID] 944
[ ThreadID] 0

Channel System

Computer LAPTOP-EUO2QIBB

Security


- EventData

param1 0x0000001e (0xffffffffc0000005, 0x0000000000000000, 0x0000000000000008, 0x0000000000000000)
param2 C:\WINDOWS\MEMORY.DMP
param3 23e4608f-1887-4967-aed1-4c63a3515326


memory dump along with a minidump can be found here for the next 7 days
https://wetransfer.com/downloads/17...52d6f704c60cdb8a4b02426c20220511223837/c7aca5



Reliability History shows that this error has been happening since the 20th Aptil 2022

"Windows Failed to start due to missing system files, The following file was necessary for windows startup was corrupt: ot\cipolicies\active\{cdd5cb55-db68-4d71-aa38-3df2b6473a52}.cip

 

[johnbl]

bad memory address passed from a driver. driver not named in the bugcheck but I would suspect your intel smart technology driver. I have no proof
your system was only up for 9 seconds before the bugcheck.

you would have to change the memory dump to kernel so that more debug info is saved. then provide memory.dmp file.

I would disable the sound subsystem in bios if you can. maybe see if the machine is stable while in bios also.
if you can get the system stable, go to the motherboard vendors website and download the various drivers and chipset updates. update the bios if there is a new one.

 

[Ralston18]

Also:

Update your post to include full system hardware specs and OS information.

Include PSU: make, model, wattage, age, condition (original, new, refurbished, used)?

Disk drive(s): make, model, capacity, how full?

Look in Reliability History and Event Viewer: either one or both may be capturing some error codes, warnings, or even informational events that correspond with or precede the BSOD's.

 

[Karrthus]

bad memory address passed from a driver. driver not named in the bugcheck but I would suspect your intel smart technology driver. I have no proof
your system was only up for 9 seconds before the bugcheck.

you would have to change the memory dump to kernel so that more debug info is saved. then provide memory.dmp file.

I would disable the sound subsystem in bios if you can. maybe see if the machine is stable while in bios also.
if you can get the system stable, go to the motherboard vendors website and download the various drivers and chipset updates. update the bios if there is a new one.

Thank you for your reply

I have changed my memory dump to kernal and crashed the machine again, and can provide my memory.dump file located in C:\Windows, I also included the latest minidump file incase that is any use at all

they are both avalible through this wetransfer link, and will be valid for 7 days as of this message
https://wetransfer.com/downloads/17c1b40be077cd6f9153f1d23f71b81920220511223825/905bb76052d6f704c60cdb8a4b02426c20220511223837/c7aca5


The Machine is stable running through the bios, and i have had no issues booting usb troubleshooters off the machine either (which were not very helpful in this situation, but it was good to check)
Unfortunatly the Acer BIOS is awful, and doesnt actually have many helpful settings and features, so i was unable to disable my sound subsystem through it,

The machine is an Acer Aspire 5 laptop, finding the motherboard vendor will be a challenge, but i can certainly have a look

Thanks

 

[Karrthus]

Also:

Update your post to include full system hardware specs and OS information.

Include PSU: make, model, wattage, age, condition (original, new, refurbished, used)?

Disk drive(s): make, model, capacity, how full?

Look in Reliability History and Event Viewer: either one or both may be capturing some error codes, warnings, or even informational events that correspond with or precede the BSOD's.

thank you for letting me know i was missing some information, i have updated my original post of this thread with my system specs, details, an important looking event viewer log that coincided with the crash, and some information from my reliability history

 

[johnbl]

edit, looked at the internal logs most of the logs for the hid devices were messed up. I would focus on updating all of the drivers
==========
check for bios updates and driver updates
https://www.acer.com/ac/en/US/content/support-product/8626?b=1
----------
good chance this driver might be the one not installing correctly:
\SystemRoot\System32\drivers\AcerAirplaneModeController.sys Thu Aug 5 02:02:26 2021 (looks like this driver has a update on the website)
you might download autoruns from here https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
find that driver and disable it and reboot.
you might also go to acer and download a update version.

--------
windows plug and play was trying to install some usb device but it was blocked because a service problem

InstancePath is "ROOT\HIDCLASS\0000"
ServiceName is "mshidumdf"
State = DeviceNodeInitialized (0x304)
Previous State = DeviceNodeUninitialized (0x301)
Problem = CM_PROB_FAILED_DRIVER_ENTRY
Problem Status = 0xc0000034
4: kd> !error 0xc0000034
Error code: (NTSTATUS) 0xc0000034 (3221225524) - Object Name not found.

I would go into windows control panel, device manager, find the menu option to show hidden devices, delete any hidden device, then remove any device that is not working and plug and play will reinstall it. See if that helps.
machine info:
Vendor Insyde Corp.
BIOS Version V1.26
BIOS Starting Address Segment e000
BIOS Release Date 03/14/2022
Manufacturer Acer
Product Name Aspire A514-54
Version V1.26
Manufacturer TGL
Product Lily_TL
Version V1.26
Chassis Type Notebook
Processor Version 11th Gen Intel(R) Core(TM) i5-1135G7 @ 2.40GHz