BSOD - ndis.sys driver_irql_not_less_or_equal

Culbrelai · Dec 5, 2023

Randomly had this bsod while gaming. Only one occurrence so far.

Heard it could be a network driver? Thanks in advance.

x BlueRobot · Dec 6, 2023

Yes, but it more likely to be some network filter driver like a VPN client or some third-party AV software, do you have either of those installed? Your .nfo file seems to be corrupt too, could you please generate a new one using the following command:

Code:

msinfo32 /nfo %userprofile%\Desktop\msinfo32

In addition to that, could you please zip up and then upload the following file to a file sharing site such as WeTransfer, Dropbox or Google Drive:

Code:

C:\Windows\MEMORY.DMP

glasskuter · Dec 6, 2023

Have you checked the support site for your motherboard and updated your drivers. There was an update for your wifi driver dated 5/30/23, chipset 5/30/23, and various others within the last few months including an unusual number of UEFI bios updates.Gigabyte Control Center can tell you the drivers that are outdated and install the updates. (I strongly suggest making a system image before updating drivers, or at least make a system restore point)

X670E AORUS MASTER (rev. 1.x) Support | Motherboard - GIGABYTE Global

Lasting Quality from GIGABYTE.GIGABYTE Ultra Durable™ motherboards bring together a unique blend of features and technologies that offer users the absolute ...

www.gigabyte.com

IMO I would not be too concerned with only one bsod. It could have been transient. If it happens regularly that's a horse of a different color and would be concerning. @zbook or one of the others who are experienced in analyzing log files can better advise you.

ubuysa · Dec 6, 2023

In the one dump that was uploaded there are two third party drivers involved in the operation that led up to the bugcheck; nvlddmkm.sys and e2f.sys....

The nvlddmkm.sys driver is your Nvidia graphics driver and the version you have installed appears to be current...

Code:

14: kd> lmDvm nvlddmkm
Browse full module list
start             end                 module name
fffff807`673a0000 fffff807`6acb9000   nvlddmkm T (no symbols)          
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_1fea8972dc2f0a69\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Browse all global symbols  functions  data
    Timestamp:        Thu Nov  9 23:35:30 2023 (654D50A2)
    CheckSum:         03804E98
    ImageSize:        03919000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    Information from resource tables:

The e2f.sys driver doesn't actually appear in the call stack, but the ndis.sys driver does. This is the Windows high-level network driver, below this in the network driver stack will be the network adapter driver. You're using the Intel I225-V LAN adapter and the driver for that is e2f.sys. The version of this driver that you have installed may not be current...

Code:

14: kd> lmDvm e2f
Browse full module list
start             end                 module name
fffff807`66f90000 fffff807`67010000   e2f        (deferred)            
    Image path: \SystemRoot\System32\DriverStore\FileRepository\e2f.inf_amd64_f00467d5bba0b3ef\e2f.sys
    Image name: e2f.sys
    Browse all global symbols  functions  data
    Timestamp:        Thu Feb  3 14:28:19 2022 (61FBCA63)
    CheckSum:         00089F3E
    ImageSize:        00080000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    Information from resource tables:

I would suggest downloading the Intel Driver and Support Assistant and run that to identify any driver updates for your Intel devices - install any drivers that it finds.

zbook · Dec 6, 2023

Please perform the following steps: (in sequence)

1) Run: Tuneup plus

https://www.tenforums.com/attachments/bsod-crashes-debugging/360139d1645183596-batch-files-use-bsod-debugging-tuneup_plus_log.zip

Batch files for use in BSOD debugging - Windows 10 Help Forums

Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first

www.tenforums.com

Post a share link into the newest post.

2) Turn off Windows fast startup:

Turn On or Off Fast Startup in Windows 11 Tutorial

This tutorial will show you how to turn on or off fast startup in Windows 11. There are three startup modes in Windows: Cold (traditional) Wake-from-hibernation Fast Starting with Windows 8.x, the default shutdown and restart scenario has been updated and named fast startup. Fast startup...

www.elevenforum.com

3) The CPU AMD Ryzen 7 7800X3D supports RAM speeds up to 5200
At the time that the V2 log collector ran the speed was recorded at 6000
Turn off RAM overclocking and / or XMP

4) Create a new restore point:

Create System Restore Point in Windows 11 Tutorial

This tutorial will show you how to manually create a restore point in Windows 11. Turning on system protection for a drive allows System Restore to include the drive when restore points are created so you can undo undesired system changes by reverting to a previous point in time. System...

www.elevenforum.com

5) Post an image or share link displaying disk management:

How to Post a Screenshot of Disk Management

How to Post a Screenshot of Disk Management at Ten Forums

www.tenforums.com

6) Run Sea Tools for Windows long generic test (all drives):

https://www.seagate.com/content/dam/seagate/migrated-assets/www-content/support-content/downloads/seatools/_shared/downloads/100869623_B.pdf

https://www.seagate.com/content/dam/seagate/migrated-assets/www-content/support-content/downloads/seatools/_shared/downloads/SeaToolsWindowsInstaller.exe

Post a share link into the newest post.

7) Run HD Tune (free or trial version) (all drives)

HD Tune website

HD Tune

www.hdtune.com

Post images or share links for results on these tabs:
a) Health
b) Benchmark
c) Full error scan

Post a share link into the newest post.

8) Open administrative command prompt and copy and paste: chkdsk /b /v

Run these chkdsk switches on all drives using the syntax: chkdsk /b /v c: or chkdsk /b /v d: or chkdsk /b /v e: , etc.

Make sure that the chkdsk on the windows drive runs overnight while sleeping

C:\WINDOWS\system32>chkdsk /b /v c:
The type of the file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Type: y

Reboot as needed.

9) After completing chkdsk /b /v on all drives run:

https://www.tenforums.com/attachment...kfromevent.bat

Post a share link into the newest post.

10) Download and install Samsung Magician: Samsung Magician Software | Samsung Semiconductor USA

Run the software on the applicable drive(s) post images or share links:

Drive Details
Update software /firmware
Diagnostic Scan > full scan
Performance Benchmark
Over Provisioning
Performance Optimization

11) Post a new V2 share link into the newest post

Code:

------------------------
Disk & DVD/CD-ROM Drives
------------------------
      Drive: C:
 Free Space: 1426.2 GB
Total Space: 1906.9 GB
File System: NTFS
      Model: CT2000T700SSD5

      Drive: D:
 Free Space: 1782.5 GB
Total Space: 1907.6 GB
File System: NTFS
      Model: Samsung SSD 980 PRO 2TB

      Drive: E:
 Free Space: 297.0 GB
Total Space: 1907.7 GB
File System: NTFS
      Model: Samsung SSD 970 EVO Plus 2TB

      Drive: F:
 Free Space: 1436.3 GB
Total Space: 17166.3 GB
File System: NTFS
      Model: ST18000NM000J-2TV103

      Drive: J:
 Free Space: 3970.7 GB
Total Space: 5722.6 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: K:
 Free Space: 2689.1 GB
Total Space: 3815.4 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: L:
 Free Space: 2119.3 GB
Total Space: 5723.1 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: M:
 Free Space: 5251.0 GB
Total Space: 7630.9 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: N:
 Free Space: 4923.9 GB
Total Space: 7630.9 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: O:
 Free Space: 6929.4 GB
Total Space: 19074.0 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: P:
 Free Space: 1715.2 GB
Total Space: 17166.3 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: Q:
 Free Space: 10237.7 GB
Total Space: 19074.0 GB
File System: NTFS
      Model: LSI MR9280-24i4e SCSI Disk Device

      Drive: R:
 Free Space: 17166.0 GB
Total Space: 17166.3 GB
File System: NTFS
      Model: WDC WD180EDGZ-11B2DA0

      Drive: S:
 Free Space: 17166.0 GB
Total Space: 17166.3 GB
File System: NTFS
      Model: WDC WD180EDGZ-11B2DA0

Code:

Windows has found problems and some were fixed online;
the remaining problems must be fixed offline.

Code:

CHKDSK is recovering remaining unindexed files.
    Lost and found is located at \found.000

Code:

Event[1048]
  Log Name: System
  Source: Ntfs
  Date: 2023-11-16T16:57:42.0900000Z
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: Info

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-79DSQ8E
  Description:
A corruption was discovered in the file system structure on volume G:.

The Master File Table (MFT) contains a corrupted file record.  The file reference number is 0x8000000000069.  The name of the file is "\csb.log\desktop.ini".

Culbrelai · Dec 6, 2023

x BlueRobot said:
Yes, but it more likely to be some network filter driver like a VPN client or some third-party AV software, do you have either of those installed? Your .nfo file seems to be corrupt too, could you please generate a new one using the following command:

Code:

msinfo32 /nfo %userprofile%\Desktop\msinfo32

In addition to that, could you please zip up and then upload the following file to a file sharing site such as WeTransfer, Dropbox or Google Drive:

Code:

C:\Windows\MEMORY.DMP

Do not have a third party AV, but I do have a VPN, airVPN, but was not running at the time. Been using it for years with no issue.

glasskuter said:
Have you checked the support site for your motherboard and updated your drivers. There was an update for your wifi driver dated 5/30/23, chipset 5/30/23, and various others within the last few months including an unusual number of UEFI bios updates.Gigabyte Control Center can tell you the drivers that are outdated and install the updates. (I strongly suggest making a system image before updating drivers, or at least make a system restore point)

X670E AORUS MASTER (rev. 1.x) Support | Motherboard - GIGABYTE Global

Lasting Quality from GIGABYTE.GIGABYTE Ultra Durable™ motherboards bring together a unique blend of features and technologies that offer users the absolute ...

www.gigabyte.com

IMO I would not be too concerned with only one bsod. It could have been transient. If it happens regularly that's a horse of a different color and would be concerning. @zbook or one of the others who are experienced in analyzing log files can better advise you.

Yes I have this Windows install is very recent, newly built system definitely after 5/320/23. Bios is the newest beta one.
I tend to agree with your point though, only one bsod. If it actually is the network driver I have a USB to ethernet that I can use instead. People have been having tons of problems with this particular Intel network chipset.

ubuysa said:
In the one dump that was uploaded there are two third party drivers involved in the operation that led up to the bugcheck; nvlddmkm.sys and e2f.sys....

The nvlddmkm.sys driver is your Nvidia graphics driver and the version you have installed appears to be current...

Code:

14: kd> lmDvm nvlddmkm Browse full module list start end module name fffff807`673a0000 fffff807`6acb9000 nvlddmkm T (no symbols) Loaded symbol image file: nvlddmkm.sys Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_1fea8972dc2f0a69\nvlddmkm.sys Image name: nvlddmkm.sys Browse all global symbols functions data Timestamp: Thu Nov 9 23:35:30 2023 (654D50A2) CheckSum: 03804E98 ImageSize: 03919000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables:

The e2f.sys driver doesn't actually appear in the call stack, but the ndis.sys driver does. This is the Windows high-level network driver, below this in the network driver stack will be the network adapter driver. You're using the Intel I225-V LAN adapter and the driver for that is e2f.sys. The version of this driver that you have installed may not be current...

Code:

14: kd> lmDvm e2f Browse full module list start end module name fffff807`66f90000 fffff807`67010000 e2f (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\e2f.inf_amd64_f00467d5bba0b3ef\e2f.sys Image name: e2f.sys Browse all global symbols functions data Timestamp: Thu Feb 3 14:28:19 2022 (61FBCA63) CheckSum: 00089F3E ImageSize: 00080000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables:

I would suggest downloading the Intel Driver and Support Assistant and run that to identify any driver updates for your Intel devices - install any drivers that it finds.

Network driver might have been old, went and got the new one directly from intel bypassing motherboard's site. Nvidia driver was updated too.

Msinfo msinfo32. Memory.dump is huge, 2gb, dropbox is too small for that lol.

x BlueRobot · Dec 6, 2023

Culbrelai said:
Memory.dump is huge, 2gb, dropbox is too small for that lol.

If you place the file in a .zip folder then it won't be so large, you should be able to upload it to WeTransfer or Dropbox quite easily.

Have you checked that the Air VPN service wasn't running in the background? If the application isn't running, then it doesn't nesscarily mean that the associated drivers weren't.

meadas · Jan 5, 2024

Hey Culbrelai Did you end up fixing it? A relative of mine is currently dealing with the same problem. He also has a 7800x3d, altough he has a different mobo and gpu. Please let me know if you something.