BSOD driver_irql_not_less_or_equal

Ganondorf · 08 Sep 2012

I've been having recurring bsod errors lately. It went from once a month, to once a week, to once a day, to a few minutes after startup.

I haven't really changed anything... they have just become more frequent. I'm almost positive it's a driver issue. I ran driver verifier with the 3 that create false positives disabled and it caused a bsod on startup everytime. I couldn't figure out what was causing it though.

I need my pc fully operational so I can work so any help would be more than appreciated!

I've done some analysis of my own and it looks like ndis.sys is the cause. I suspect an issue with the nic card interaction given my asus p8p67's dual onboard nic cards. I've disabled one and activated the other. Maybe this will resolve any issues.

koolkat77 · 08 Sep 2012

Welcome

Do you have an antivirus installed? Please name it as I don't seem to find any. And whats the age of this computer?

Arc · 08 Sep 2012

Answer the question asked by koolkat77 first, and then have a look.

► Your nvidia display driver seems to be very old.

Code:

lmvm nvlddmkm
start             end                 module name
fffff880`0f28a000 fffff880`0ff01000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        Sat Oct 15 11:37:55 2011 (4E99233B)
    CheckSum:         00C61687
    ImageSize:        00C77000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Download and install |MG| Driver Fusion (Driver Sweeper) 1.1.1 Download.
Reboot the computer in Advanced Boot Options, safe mode. Search Driver Fusion in your start menu, and remove all components of your nVidia display driver.
Boot normally now. Go to Drivers - Download NVIDIA Drivers, follow option two to search for the appropriate driver for your system automatically, and install it.

► I doubt there is some issue with your Graphics memory

Code:

2: kd> .exr 0xfffff88004805ed8
ExceptionAddress: fffff8800fb3d3f9 (nvlddmkm+0x00000000006663f9)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000001
   Parameter[1]: 0000000000009d08
Attempt to write to address 0000000000009d08
2: kd> .cxr 0xfffff88004805730
rax=0000000000008000 rbx=0000000000000001 rcx=0000000000001d08
rdx=0000000000008000 rsi=00000000000003c0 rdi=00000000000003a1
rip=fffff8800fb3d3f9 rsp=fffff88004806110 rbp=fffffa800a7e16c0
 r8=0000000000000020  r9=0000000000000000 r10=fffff88004806240
r11=0000000000000002 r12=00000000000003c0 r13=0000000000001000
r14=fffffa800a433d88 r15=fffffa8009126f40
iopl=0         nv up ei pl nz ac pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010212
nvlddmkm+0x6663f9:
fffff880`0fb3d3f9 44890c11        mov     dword ptr [rcx+rdx],r9d ds:002b:00000000`00009d08=????????

Please do it: Video Card - Stress Test with Furmark

► Most of the dumps are indicating to Memory Management failure. In such a situation, the best option is to go for memtest.
RAM - Test with Memtest86+
Run it, at lease 8 passes, if possible, overnight.

► Enable Driver Verifier:
Driver Verifier - Enable and Disable

Let us know the results of the tests, and if there are subsequent dumps you got, post those for analyzing, with Driver Verifier on.

Ganondorf · 09 Sep 2012

I decided to take a shot at it myself. I took a look at the minidumps and noticed that from all the recent bsods (the ones that are the culprit and real issue) there was a pattern.

In the crash stack of all minidumps I noticed ntoskernl.exe and ndis.sys. Under all the driver_irql_not_less_or_equal.... only ndis.sys could be found in the crash stack of all of them.

Network Driver Interface Specification is what it stands for. So obviously all my driver_irql_not_less_or_equal problems are caused by a network driver. My p8p67 has two network cards built in. They are intel and realtek cards. I was using the realtek card. I disabled it and switched to the intel one. I haven't had a bosd since.

Out of curiosity I googled "realtek nic p8p67 driver issue" and found a ton of related problems. So that's that.

It's my first time analyzing a dump and I while I do have a CS degree with a minor in secure computing and networking I just used bluescreenview and a bit of knowhow. How did you reach the conclusions and suggestions you found?

After attempting it myself the solution seemed fairly obvious. I'm curious if there is some relation that is easily missed (I'm a bsod noob) or if you just paste the same suggestions for fixing it (the most common culprits) and then take a look if the basic fixes don't work. I understand the latter is necessary for the amount of volume you folks probably see day to day.

Thanks for your assistance,
Ganon