Question Win11 crashing on startup (mostly restarts, but also fresh starts)

Nov 2, 2022
13
0
10
Hello all,

I'm quite fresh here, but I believe here's the best place to ask that question.
I'm having issues with my PC running Windows 11 22H2. Everything started when I enabled Hyper-V and WSL features in settings. I had the Critial_Process_Died BSODs and tried to fix it, but without any luck - even restore points did not work.
So then, I reinstalled Windows from scratch - formatted the primary system drive and installed it. Updated each and every driver, enabled Hyper-V and WSL and it happened again - not a BSOD this time, but my PC came into a reboot loop - I could hear the Win11 welcome sound at the beginning, but it was interrupted and the restart happened. As you can guess, after 3 reboots my PC displayed the "It looks like Windows didn't load correctly" and I had two options - advanced recovery options (which dissapointed me last time, so I didn't want to fight it anymore) and reboot. So I tried the latter option and after 1-3 more reboots the Windows starts properly and works without any issue, like nothing happened.
So now, I have the issue that my PC is sometimes stuck in the reboot loop (1-5 times) and starts properly - especially after a reboot from Windows menu. When I perform a fresh start, it most likely starts properly (sometimes needs several reboots).
As you can imagine, it's a big pain. I've seen a similar thread (https://forums.tomshardware.com/threads/win11-bsod-ntoskrnl-exe-416b40-unsure-what-cause.3762290/), but I can see that even a small difference in a minidump/dump makes a difference here, so I can't count on the same solution.
As the author of mentioned thread, I'm also tech savvy as I work as an architect, but I'm not that into Windows. I've tried debugging dumps with WinDgb and BlueScreenView, but I can't find the root cause.

What is also worth mentioning is that I haven't had any of those problems before enabling Hyper-V and WSL features. Unfortunately, WSL requires Hyper-V enabled, which requires SVM Mode (virtualization) enabled in BIOS.

  • What did I discover so far? (detailed outputs at the end of the post)
    • Bugcheck string - UNEXPECTED_KERNEL_MODE_TRAP
    • Bugcheck code - 0x1000007f
    • Caused by - ntoskrnl.exe
    • Arg1 that indicates the double fault - 0000000000000008, EXCEPTION_DOUBLE_FAULT
  • Tried the following:
    • sfc /scannow - fixed some corrupted files
    • chkdsk - no issues here
    • SMART on all 3 SSDs - no bad sectors and issues
    • MemTest86+ v6.0 - 9 full runs with 10 tests each (14hrs) and no errors
    • updated BIOS and tried default settings (I have a little OC memory)
    • updated low-level drivers (chipset, etc.), directly from the manufacturer site
  • PC specs:
    • CPU: AMD Ryzen 5 3600X
    • RAM: 4x8GB 3066MHz
    • GPU: NVIDIA GeForce RTX 3070
    • MB: GIGABYTE B550 AORUS PRO
    • OS: Microsoft Windows 11 Education (x64) Build 22621.755
    • SSD: 1xNVMe + 2xSATA
Dump files: https://drive.google.com/drive/folders/175Qho-_QFnkNcTjQjnW0h0yAezUUVGfn?usp=sharing

I would be really grateful if there's anyone who could help me finding a root cause and fixing it. I will provide all the needed details/files as soon as possible. Any help appreciated!

kd !analyze -v results:
Code:
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
BugCheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: fffff80714245e70
Arg3: ffffc48363839000
Arg4: fffff8071641a9c9

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for nvlddmkm.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1015

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 2051

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 234

    Key  : Analysis.Init.Elapsed.mSec
    Value: 7768

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 98

    Key  : Bugcheck.Code.DumpHeader
    Value: 0x1000007f

    Key  : Bugcheck.Code.Register
    Value: 0x7f

    Key  : Dump.Attributes.AsUlong
    Value: 1808

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0


FILE_IN_CAB:  110222-10453-01.dmp

TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b


DUMP_FILE_ATTRIBUTES: 0x1808
  Kernel Generated Triage Dump

BUGCHECK_CODE:  7f

BUGCHECK_P1: 8

BUGCHECK_P2: fffff80714245e70

BUGCHECK_P3: ffffc48363839000

BUGCHECK_P4: fffff8071641a9c9

STACK_OVERFLOW: Stack Limit: ffffc48363839000. Use (kF) and (!stackusage) to investigate stack usage.

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  csrss.exe

STACK_TEXT:
ffffc483`63839000 fffff807`1641a8b5     : 69570000`00000000 577c4950`4132336e 4e207377`6f646e69 00000000`00000000 : nt!KiSearchForNewThreadOnProcessor+0x59
ffffc483`638393c0 fffff807`164c7c3e     : 00000000`00000000 fffff807`16f0e3c0 ffffc483`63839890 ffffc483`63839520 : nt!KiSearchForNewThreadOnSubNode+0xe5
ffffc483`63839420 fffff807`164c6c20     : ffffc58f`d31ee820 00000000`00000000 fffff807`12fad180 00000000`00000002 : nt!KiSearchForNewThread+0x91e
ffffc483`63839810 fffff807`164c8287     : ffffc58f`d31ee0c0 656c6f6f`00000000 7070614d`00006e61 00000000`00000000 : nt!KiSwapThread+0x8c0
ffffc483`63839960 fffff807`164ca8d6     : 50413233`00000000 5320656c`00000001 7546206d`00000011 00000000`0847da87 : nt!KiCommitThreadWait+0x137
ffffc483`63839a10 fffff807`1655928f     : 30353962`00000002 fffff807`16f48940 fffff807`16f489a0 00000000`00000000 : nt!KeWaitForSingleObject+0x256
ffffc483`63839db0 fffff807`164c4882     : fffff807`16f48940 ffffc483`63839e78 00000000`00010244 fffff807`1657f0b0 : nt!ExpWaitForResource+0x6b
ffffc483`63839e40 fffff807`164c3a59     : fffff807`16f48940 00000000`00000000 00000000`00000001 00000000`00000001 : nt!ExpAcquireResourceSharedLite+0x5f2
ffffc483`63839ee0 fffff807`16ce11d1     : 000000b9`ffff0000 00000000`00000000 00001200`44490000 00000000`00000000 : nt!ExAcquireResourceSharedLite+0x39
ffffc483`63839f20 fffff807`168b60ea     : 0000005d`00000142 b9ffff00`00000b00 00002008`02000000 000000fa`0000008b : nt!CmpLockRegistry+0x41
ffffc483`63839f50 fffff807`168b9265     : 00000000`0000001c ffffc483`6383a490 ffffc483`6383a418 00000000`00000000 : nt!CmpDoParseKey+0x3fa
ffffc483`6383a3a0 fffff807`168c0d37     : fffff807`168b8f01 ffffc58f`00000000 ffffc58f`d0bc95f0 00000000`00000000 : nt!CmpParseKey+0x2e5
ffffc483`6383a590 fffff807`168c0162     : ffffc58f`d0bc95f0 ffffc483`6383a7c0 00000000`00000240 ffffc58f`c7dfe6c0 : nt!ObpLookupObjectName+0x697
ffffc483`6383a730 fffff807`168bb188     : 00000000`00000000 ffffc58f`c7dfe6c0 ffffc483`6383ace8 00000000`00000000 : nt!ObOpenObjectByNameEx+0x1f2
ffffc483`6383a860 fffff807`1699f688     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!CmOpenKey+0x2c8
ffffc483`6383aab0 fffff807`1663a968     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtOpenKeyEx+0x48
ffffc483`6383ab00 fffff807`1662c8b0     : fffff807`169145d4 00000000`00000000 00000000`00000010 ffffd78d`8ca3bdb0 : nt!KiSystemServiceCopyEnd+0x28
ffffc483`6383ac98 fffff807`169145d4     : 00000000`00000000 00000000`00000010 ffffd78d`8ca3bdb0 00000000`00000004 : nt!KiServiceLinkage
ffffc483`6383aca0 fffff807`169144fa     : ffffffff`800000a0 00000000`00000000 ffffd78d`93967510 ffffffff`800000a0 : nt!_RegRtlOpenKeyTransacted+0xc4
ffffc483`6383ad40 fffff807`16913ee9     : 00000000`00000086 00000000`00000000 00000000`00000100 00000000`00000001 : nt!SysCtxRegOpenKey+0x3a
ffffc483`6383ad80 fffff807`16913cd8     : ffffd78d`94188100 ffffc58f`ca48f2a0 00000000`0000005d 00000000`00000000 : nt!_CmOpenDeviceRegKeyWorker+0x1b9
ffffc483`6383ae40 fffff807`1691351a     : 00000000`00000000 ffffc483`6383afa0 ffffc483`6383b140 00000000`00000000 : nt!_CmOpenDeviceRegKey+0xdc
ffffc483`6383aea0 fffff807`16913397     : 00000000`00000000 00000000`00000000 00000000`00000000 ffffc483`6383b144 : nt!_CmGetDeviceRegPropWorker+0x102
ffffc483`6383aff0 fffff807`1691664c     : ffffd78d`94179000 fffff807`164d2615 00000000`00000100 00000000`00000401 : nt!_CmGetDeviceRegProp+0xff
ffffc483`6383b100 fffff807`1691691f     : 00000000`00042cc0 ffffc483`6383b2c1 00000000`00000000 ffffc483`6383b430 : nt!_CmGetDeviceSoftwareKey+0x74
ffffc483`6383b210 fffff807`1691422e     : 00000000`52504e50 fffff807`164d192f 00000000`00000012 00000000`000000f0 : nt!_CmGetDeviceSoftwareKeyPath+0x5b
ffffc483`6383b310 fffff807`16913dfe     : 00000000`00000000 fffff807`16c9a68d 00000000`00000100 00000000`00000001 : nt!_CmGetDeviceRegKeyPath+0xba
ffffc483`6383b360 fffff807`16913cd8     : ffffd78d`94188480 ffffc58f`ca48f2a0 00000000`00000000 00000000`00000000 : nt!_CmOpenDeviceRegKeyWorker+0xce
ffffc483`6383b420 fffff807`16916ba2     : 00000000`00000012 00000000`00020019 ffffc58f`ca5240a0 fffff807`16c9a68d : nt!_CmOpenDeviceRegKey+0xdc
ffffc483`6383b480 fffff807`432721d3     : 00000000`00020019 ffffc483`6383b531 00000000`00000000 00000000`00000002 : nt!IoOpenDeviceRegistryKey+0xc2
ffffc483`6383b4d0 00000000`00020019     : ffffc483`6383b531 00000000`00000000 00000000`00000002 fffff807`42d8db40 : nvlddmkm+0xf621d3
ffffc483`6383b4d8 ffffc483`6383b531     : 00000000`00000000 00000000`00000002 fffff807`42d8db40 fffff807`423a2734 : 0x20019
ffffc483`6383b4e0 00000000`00000000     : 00000000`00000002 fffff807`42d8db40 fffff807`423a2734 00000000`00000003 : 0xffffc483`6383b531


SYMBOL_NAME:  nt!KiSearchForNewThreadOnProcessor+59

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.22621.755

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  59

FAILURE_BUCKET_ID:  0x7f_8_nt!KiSearchForNewThreadOnProcessor

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {27f4e8d4-5014-6cef-bdf1-bb6ec72b9ac0}

Followup:     MachineOwner
---------
 
Last edited:
Ntoskrnl - Windows kernel. . It handles all driver requests, power management, and memory management. It sits between Hardware and Applications. It got blamed but its not the cause

Above dump blames Nvidia display drivers
if you see this it generally means the driver named is cause
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
it also mentions Nvidia in the dump text.

I just looked at the minidumps and they all blame it as well.
Conversion of dumps

report - Click run as fiddle to see report

File: 110322-10671-01.dmp (Nov 3 2022 - 11:23:30)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 13 Sec(s)

File: 110322-10531-01.dmp (Nov 3 2022 - 11:25:06)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 12 Sec(s)

File: 110322-10390-01.dmp (Nov 3 2022 - 11:24:10)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 13 Sec(s)

File: 110222-9421-01.dmp (Nov 2 2022 - 10:08:54)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 13 Sec(s)

File: 110222-10984-01.dmp (Nov 2 2022 - 10:36:48)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 12 Sec(s)

File: 110222-10875-01.dmp (Nov 2 2022 - 10:35:08)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 12 Sec(s)

File: 110222-10453-01.dmp (Nov 2 2022 - 10:38:18)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 13 Sec(s)

File: 110222-10421-01.dmp (Nov 2 2022 - 10:35:53)
BugCheck: [UNEXPECTED_KERNEL_MODE_TRAP_M (1000007F)]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
Probably caused by: ntkrnlmp.exe (Process: csrss.exe)
Uptime: 0 Day(s), 0 Hour(s), 00 Min(s), and 13 Sec(s)

Comment: 2 or more types of RAM are installed.

The nvlddmkm.sys file is a NVIDIA graphics card driver. There are a few things you can do to fix this problem. First off, try a full uninstall using DDU in Safe Mode then re-install the driver (more information). Or try getting the latest version of the driver. Or try one of the 3 most recent drivers released by NVIDIA. Drivers can be found here: http://www.nvidia.com/ or you can allow Windows Update to download the driver for you, which might be a older/better version.

Try updating chipset drivers from here, you don't need stormi or raid - https://www.amd.com/en/support/chipsets/amd-socket-am4/b550

well, its pretty obvious. I wish all BSOD problems were so obvious

Having 2 different maker ram sticks can cause errors as well, but lets see if the blame moves after you replace Nvidia drivers. Ram errors tend to move to another driver once fixed. Yes, I know it passes memtest but having 2 sticks of Crucual and 2 sticks of Goodram(?) together can mean the timings are just different enough to cause errors.
SizeSpeedManufacturerPart No.
8192MB3066MHzUnknownBLS8G4D26BFSC.16FD2
8192MB3066MHzUnknownIRX2666D464L16S/8G
8192MB3066MHzUnknownBLS8G4D26BFSC.16FD2
8192MB3066MHzUnknownIRX2666D464L16S/8G
How long you been using both sets?
 
Last edited:
  • Like
Reactions: syzmekk
hey @Colif , thanks for your help :) really appreciate

so, first off - what I did:
  • downloaded DDU and the latest Nvidia drivers
  • downloaded and installed the latest chipset drivers
  • booted into safe mode (minimal)
  • run DDU
  • reboot
  • run driver installer with a clean install option
  • rebooted back into safe mode and disabled it
  • rebooted into normal Windows 11
And no issues while booting.

Now, I also installed the Nvidia control panel and Nvidia Experience. Everything works fine.
Tried a reboot a few times and... again an interrupted sound of Windows 11 followed by a reboot, then a "It looks like Windows didn't load correctly" screen. Another reboot (from the mentioned screen) and back to Windows 11.

Give me a few minutes - will upload the dumps and try to follow your investigation process.

Btw - two different pairs of RAM sticks are not recommended? Should I replace them with another set of same sticks? I have been using them for a month or so, since I bought this PC from my friend. He's been using it for a few months as well.

EDIT:
Dumps loaded - available under the same Google drive dir.
One of them says - *** WARNING: Unable to verify timestamp for nvlddmkm.sys
What should I do in this case? Repeat the procedure? Try an older driver (if so, when do I know I can update it?)?
Should I replace RAM sticks?
 
Last edited:
Trying to downgrade the driver from 526.47 (DCH) to 522.25 (one before 526.47). I think that could be the case as the latest one (526.47) has been released on 27th of October and that was the evening I started having issues. Wish me luck :)

EDIT:
Same with a previous driver (and retried the procedure with DDU) - reboots all the time. Same entry in the dump. Uploading them as well.
Should I try an older (let's say a month/two old) driver?

EDIT v2:
Tried the 3rd driver - 516.93, also with the DDU. Now, I'm left only with the Windows Update, but I'm not sure how to do that - would Windows Update automatically pull the third party driver?
 
Last edited:
Windows update: After you have deleted driver in safe mode, restart PC and run windows update. It should recognise card and load a driver.

Try taking 1 set of ram out and just see if it makes any difference. Ryzen CPU can be picky about ram, it could possibly be cause. Have you been having errors the entire time?
I would use the Crucial ram...

Normally when a driver is mentioned in every BSOD, replacing it fixes it.
 
Last edited:
Trying Windows Update now. If that does not work, I'm gonna buy a new set of RAM sticks tomorrow and give it a try. If that doesn't help, I can just return them.
 
Okay, what I did now is:
  • uninstalled the nvidia drivers using DDU in safe mode
  • rebooted into normal mode
  • the driver installed automagically a few seconds after normal startup, without my action/approval or anything
Will try to reboot it a few times now and see what happens.
 
Alright, rebooted like 5-7 times. All works right now. The driver I got from Windows is 471.41 (released on 19.7.2021). I can see on the Nvidia support page that this is not a DCH driver, but a Standard one. Does it matter? Could it possibly make a difference here?
Another thing is, there's a newer Standard driver - 472.12 from 20.9.2021 - should I try to update it? Or just leave it as it is?
 
Personally I would leave it as is, but as the windows update driver is easy to get back again, you could try the newer standard drivers if you want.

As for ram, if Drivers fixed, you could probably keep using ram you have now.

If you want to replace it, I would replace them with 1 set of 4 sticks, if you want 4 sticks.
Don't buy 2 sets, as ram in sets is only tested to run with the other sticks sold in that set.
The more sticks you add that weren't tested to work with the other sticks, the more chance of errors.
 
Cool, I guess your advice saved me some money this time. 😉 And thanks for the explanation, I wasn't aware of any of those things.
Really appreciate the support during the whole adventure.
Hopefully not, but I will reach out again if Windows decides to fight the driver again. Many thanks one more time!
 
Hey, quick update - I did change the RAM sticks, 4x8 bought all together (CMW32GX4M4C3200C16, listed on the MB's QVL) and it did not help - just got back to the old driver installed by Windows.
I'm wondering if it's some kind of my system-hardware-driver setup incompatibility or what? Just Win11 things? I don't like having something broken, so if anyone has any clue, please share :)

Now, going to reinstall my old sticks back and return the new ones 😛
 
i uninstalled it and then windows installed it again i think in 22H2.... i hadn't actually used it, was just going to play and then forgot it was there and removed it so it is sort of half here. I see an icon in File explorer but it no longer shows in windows terminal.

seems i have https://devblogs.microsoft.com/comm...ilable-for-the-windows-subsystem-for-linux-2/ and an update to wsl..

I might use it again one day.
 
Do you think it can make difference in my case? I mean having wsl and hyperv.
Btw, it was possible with the vcxsrv before I believe. I used it a few years back.
 
Yeah, using the drivers from 2021, installed by Windows seems to solve it, but I can’t stand having something „broken” and I’m trying to find a root cause. And eventually fix it for good 😉
On top of that, it makes me angry even more while thinking that I have to use an old driver and (possibly) have a worse GPU performance, because of some incompatibility which I cannot solve.

Occupational quirk I guess :)
 
well, eventually unless you keep buying new cards, you will have to use older drivers anyway as I fail to believe that Nvidia drivers made for newer cards are so good for older ones. I have used the drivers from Windows Update before on my current card, the performance lost is an unknown really, I doubt its a lot.

is that start up issue fixed?
 
I would suggest leaving feedback on the feedback hub as its likely not many people have encounted that error yet, or perhaps some have. I know Microsoft look at it as they have looked at a few of the problems I posted, as I have received notice of it being commented on. by them,
WSL is a fairly new feature so if they require Hyper V on for it, then it has to work with drivers.

Perhaps if told they can fix it as I suspect its preferred people use the new drivers with win 11.
 
Hello all,

I'm quite fresh here, but I believe here's the best place to ask that question.
I'm having issues with my PC running Windows 11 22H2. Everything started when I enabled Hyper-V and WSL features in settings. I had the Critial_Process_Died BSODs and tried to fix it, but without any luck - even restore points did not work.
So then, I reinstalled Windows from scratch - formatted the primary system drive and installed it. Updated each and every driver, enabled Hyper-V and WSL and it happened again - not a BSOD this time, but my PC came into a reboot loop - I could hear the Win11 welcome sound at the beginning, but it was interrupted and the restart happened. As you can guess, after 3 reboots my PC displayed the "It looks like Windows didn't load correctly" and I had two options - advanced recovery options (which dissapointed me last time, so I didn't want to fight it anymore) and reboot. So I tried the latter option and after 1-3 more reboots the Windows starts properly and works without any issue, like nothing happened.
So now, I have the issue that my PC is sometimes stuck in the reboot loop (1-5 times) and starts properly - especially after a reboot from Windows menu. When I perform a fresh start, it most likely starts properly (sometimes needs several reboots).
As you can imagine, it's a big pain. I've seen a similar thread (https://forums.tomshardware.com/threads/win11-bsod-ntoskrnl-exe-416b40-unsure-what-cause.3762290/), but I can see that even a small difference in a minidump/dump makes a difference here, so I can't count on the same solution.
As the author of mentioned thread, I'm also tech savvy as I work as an architect, but I'm not that into Windows. I've tried debugging dumps with WinDgb and BlueScreenView, but I can't find the root cause.

What is also worth mentioning is that I haven't had any of those problems before enabling Hyper-V and WSL features. Unfortunately, WSL requires Hyper-V enabled, which requires SVM Mode (virtualization) enabled in BIOS.

  • What did I discover so far? (detailed outputs at the end of the post)
    • Bugcheck string - UNEXPECTED_KERNEL_MODE_TRAP
    • Bugcheck code - 0x1000007f
    • Caused by - ntoskrnl.exe
    • Arg1 that indicates the double fault - 0000000000000008, EXCEPTION_DOUBLE_FAULT
  • Tried the following:
    • sfc /scannow - fixed some corrupted files
    • chkdsk - no issues here
    • SMART on all 3 SSDs - no bad sectors and issues
    • MemTest86+ v6.0 - 9 full runs with 10 tests each (14hrs) and no errors
    • updated BIOS and tried default settings (I have a little OC memory)
    • updated low-level drivers (chipset, etc.), directly from the manufacturer site
  • PC specs:
    • CPU: AMD Ryzen 5 3600X
    • RAM: 4x8GB 3066MHz
    • GPU: NVIDIA GeForce RTX 3070
    • MB: GIGABYTE B550 AORUS PRO
    • OS: Microsoft Windows 11 Education (x64) Build 22621.755
    • SSD: 1xNVMe + 2xSATA
Dump files: https://drive.google.com/drive/folders/175Qho-_QFnkNcTjQjnW0h0yAezUUVGfn?usp=sharing

I would be really grateful if there's anyone who could help me finding a root cause and fixing it. I will provide all the needed details/files as soon as possible. Any help appreciated!

kd !analyze -v results:
Code:
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
BugCheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: fffff80714245e70
Arg3: ffffc48363839000
Arg4: fffff8071641a9c9

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for nvlddmkm.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1015

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 2051

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 234

    Key  : Analysis.Init.Elapsed.mSec
    Value: 7768

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 98

    Key  : Bugcheck.Code.DumpHeader
    Value: 0x1000007f

    Key  : Bugcheck.Code.Register
    Value: 0x7f

    Key  : Dump.Attributes.AsUlong
    Value: 1808

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0


FILE_IN_CAB:  110222-10453-01.dmp

TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b


DUMP_FILE_ATTRIBUTES: 0x1808
  Kernel Generated Triage Dump

BUGCHECK_CODE:  7f

BUGCHECK_P1: 8

BUGCHECK_P2: fffff80714245e70

BUGCHECK_P3: ffffc48363839000

BUGCHECK_P4: fffff8071641a9c9

STACK_OVERFLOW: Stack Limit: ffffc48363839000. Use (kF) and (!stackusage) to investigate stack usage.

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  csrss.exe

STACK_TEXT:
ffffc483`63839000 fffff807`1641a8b5     : 69570000`00000000 577c4950`4132336e 4e207377`6f646e69 00000000`00000000 : nt!KiSearchForNewThreadOnProcessor+0x59
ffffc483`638393c0 fffff807`164c7c3e     : 00000000`00000000 fffff807`16f0e3c0 ffffc483`63839890 ffffc483`63839520 : nt!KiSearchForNewThreadOnSubNode+0xe5
ffffc483`63839420 fffff807`164c6c20     : ffffc58f`d31ee820 00000000`00000000 fffff807`12fad180 00000000`00000002 : nt!KiSearchForNewThread+0x91e
ffffc483`63839810 fffff807`164c8287     : ffffc58f`d31ee0c0 656c6f6f`00000000 7070614d`00006e61 00000000`00000000 : nt!KiSwapThread+0x8c0
ffffc483`63839960 fffff807`164ca8d6     : 50413233`00000000 5320656c`00000001 7546206d`00000011 00000000`0847da87 : nt!KiCommitThreadWait+0x137
ffffc483`63839a10 fffff807`1655928f     : 30353962`00000002 fffff807`16f48940 fffff807`16f489a0 00000000`00000000 : nt!KeWaitForSingleObject+0x256
ffffc483`63839db0 fffff807`164c4882     : fffff807`16f48940 ffffc483`63839e78 00000000`00010244 fffff807`1657f0b0 : nt!ExpWaitForResource+0x6b
ffffc483`63839e40 fffff807`164c3a59     : fffff807`16f48940 00000000`00000000 00000000`00000001 00000000`00000001 : nt!ExpAcquireResourceSharedLite+0x5f2
ffffc483`63839ee0 fffff807`16ce11d1     : 000000b9`ffff0000 00000000`00000000 00001200`44490000 00000000`00000000 : nt!ExAcquireResourceSharedLite+0x39
ffffc483`63839f20 fffff807`168b60ea     : 0000005d`00000142 b9ffff00`00000b00 00002008`02000000 000000fa`0000008b : nt!CmpLockRegistry+0x41
ffffc483`63839f50 fffff807`168b9265     : 00000000`0000001c ffffc483`6383a490 ffffc483`6383a418 00000000`00000000 : nt!CmpDoParseKey+0x3fa
ffffc483`6383a3a0 fffff807`168c0d37     : fffff807`168b8f01 ffffc58f`00000000 ffffc58f`d0bc95f0 00000000`00000000 : nt!CmpParseKey+0x2e5
ffffc483`6383a590 fffff807`168c0162     : ffffc58f`d0bc95f0 ffffc483`6383a7c0 00000000`00000240 ffffc58f`c7dfe6c0 : nt!ObpLookupObjectName+0x697
ffffc483`6383a730 fffff807`168bb188     : 00000000`00000000 ffffc58f`c7dfe6c0 ffffc483`6383ace8 00000000`00000000 : nt!ObOpenObjectByNameEx+0x1f2
ffffc483`6383a860 fffff807`1699f688     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!CmOpenKey+0x2c8
ffffc483`6383aab0 fffff807`1663a968     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtOpenKeyEx+0x48
ffffc483`6383ab00 fffff807`1662c8b0     : fffff807`169145d4 00000000`00000000 00000000`00000010 ffffd78d`8ca3bdb0 : nt!KiSystemServiceCopyEnd+0x28
ffffc483`6383ac98 fffff807`169145d4     : 00000000`00000000 00000000`00000010 ffffd78d`8ca3bdb0 00000000`00000004 : nt!KiServiceLinkage
ffffc483`6383aca0 fffff807`169144fa     : ffffffff`800000a0 00000000`00000000 ffffd78d`93967510 ffffffff`800000a0 : nt!_RegRtlOpenKeyTransacted+0xc4
ffffc483`6383ad40 fffff807`16913ee9     : 00000000`00000086 00000000`00000000 00000000`00000100 00000000`00000001 : nt!SysCtxRegOpenKey+0x3a
ffffc483`6383ad80 fffff807`16913cd8     : ffffd78d`94188100 ffffc58f`ca48f2a0 00000000`0000005d 00000000`00000000 : nt!_CmOpenDeviceRegKeyWorker+0x1b9
ffffc483`6383ae40 fffff807`1691351a     : 00000000`00000000 ffffc483`6383afa0 ffffc483`6383b140 00000000`00000000 : nt!_CmOpenDeviceRegKey+0xdc
ffffc483`6383aea0 fffff807`16913397     : 00000000`00000000 00000000`00000000 00000000`00000000 ffffc483`6383b144 : nt!_CmGetDeviceRegPropWorker+0x102
ffffc483`6383aff0 fffff807`1691664c     : ffffd78d`94179000 fffff807`164d2615 00000000`00000100 00000000`00000401 : nt!_CmGetDeviceRegProp+0xff
ffffc483`6383b100 fffff807`1691691f     : 00000000`00042cc0 ffffc483`6383b2c1 00000000`00000000 ffffc483`6383b430 : nt!_CmGetDeviceSoftwareKey+0x74
ffffc483`6383b210 fffff807`1691422e     : 00000000`52504e50 fffff807`164d192f 00000000`00000012 00000000`000000f0 : nt!_CmGetDeviceSoftwareKeyPath+0x5b
ffffc483`6383b310 fffff807`16913dfe     : 00000000`00000000 fffff807`16c9a68d 00000000`00000100 00000000`00000001 : nt!_CmGetDeviceRegKeyPath+0xba
ffffc483`6383b360 fffff807`16913cd8     : ffffd78d`94188480 ffffc58f`ca48f2a0 00000000`00000000 00000000`00000000 : nt!_CmOpenDeviceRegKeyWorker+0xce
ffffc483`6383b420 fffff807`16916ba2     : 00000000`00000012 00000000`00020019 ffffc58f`ca5240a0 fffff807`16c9a68d : nt!_CmOpenDeviceRegKey+0xdc
ffffc483`6383b480 fffff807`432721d3     : 00000000`00020019 ffffc483`6383b531 00000000`00000000 00000000`00000002 : nt!IoOpenDeviceRegistryKey+0xc2
ffffc483`6383b4d0 00000000`00020019     : ffffc483`6383b531 00000000`00000000 00000000`00000002 fffff807`42d8db40 : nvlddmkm+0xf621d3
ffffc483`6383b4d8 ffffc483`6383b531     : 00000000`00000000 00000000`00000002 fffff807`42d8db40 fffff807`423a2734 : 0x20019
ffffc483`6383b4e0 00000000`00000000     : 00000000`00000002 fffff807`42d8db40 fffff807`423a2734 00000000`00000003 : 0xffffc483`6383b531


SYMBOL_NAME:  nt!KiSearchForNewThreadOnProcessor+59

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.22621.755

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  59

FAILURE_BUCKET_ID:  0x7f_8_nt!KiSearchForNewThreadOnProcessor

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {27f4e8d4-5014-6cef-bdf1-bb6ec72b9ac0}

Followup:     MachineOwner
---------
I would be looking to update or disable any audio capturing device.
(microphone driver?)

reported double fault looks like a stack overflow in nvdia driver.
memory.dmp file looks like the nvidia driver was trying to read something from the registry and was waiting for access. Looks like the lock was held by srvnet.sys
registry key was open for audio capture device.

system up timer was 12 seconds.

sorry laptop got dropped and the stupid mouse pad cracked and does not work. Makes using the debugger very difficult since I now have to type in long memory addresses and can not use the mouse to cut and paste.



looked like the driver was waiting for a lock that was being held by sersrv.sys

I will try to take a look at the memory dump on my desktop when I get back from movies
 
Last edited:
I would be looking to update or disable any audio capturing device.
(microphone driver?)

I will try to take a look at the memory dump on my desktop when I get back from movies

I believe DDU has such option:
fFFCjpO.png