Solved BSOD/Lockups playing Hearthstone - ntoskrnl.exe

[Glodan]

Hey guys, been getting BSODs, hardlocks with stuttering sound and other really bizarre crashes while playing Hearthstone. My system is normally rock solid, but with HS it crashes in about 30% of my matches, and even when just sitting in the menus sometimes. I've been trying to work out whats going on and nothing really seems to help. I've attached my logs using dm log collecter.

 

[PeregrineX]

Hello, and welcome to SevenForums!

Your BSOD seems to be caused by your NetIO Legacy TDI Support driver:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000018000000408, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80003697ee8, address which referenced memory

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800038ca100
GetUlongFromAddress: unable to read from fffff800038ca1c0
 0000018000000408 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KeReleaseInStackQueuedSpinLockFromDpcLevel+68
fffff800`03697ee8 f04883700801    lock xor qword ptr [rax+8],1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  networx.exe

TRAP_FRAME:  fffff8800af94070 -- (.trap 0xfffff8800af94070)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000018000000400 rbx=0000000000000000 rcx=fffff8800af94460
rdx=fffffa800a2d35c0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003697ee8 rsp=fffff8800af94200 rbp=0000000000000000
 r8=fffff8800af94460  r9=0000000000000001 r10=fffff880032f9a60
r11=fffffa8006fa03e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!KeReleaseInStackQueuedSpinLockFromDpcLevel+0x68:
fffff800`03697ee8 f04883700801    lock xor qword ptr [rax+8],1 ds:00000180`00000408=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003692169 to fffff80003692bc0

STACK_TEXT:  
fffff880`0af93f28 fffff800`03692169 : 00000000`0000000a 00000180`00000408 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0af93f30 fffff800`03690de0 : 00000000`00000001 fffff880`032f9a60 fffffa80`06fa03e0 fffff880`0af94460 : nt!KiBugCheckDispatch+0x69
fffff880`0af94070 fffff800`03697ee8 : fffffa80`0689a000 00000000`00000000 fffff880`0af94760 fffff880`0af94800 : nt!KiPageFault+0x260
fffff880`0af94200 fffff880`018bb8c1 : fffffa80`073c1000 fffff880`0af94800 00000000`00000000 00000000`00000000 : nt!KeReleaseInStackQueuedSpinLockFromDpcLevel+0x68
fffff880`0af94230 fffff880`0183c695 : fffff880`0af94760 00000000`00000006 00000000`00000001 00000000`00000000 : tcpip! ?? ::FNODOBFM::`string'+0x32560
fffff880`0af94620 fffff800`0369e878 : fffffa80`0b6ac430 fffff880`0187a160 fffff880`0187a8d0 fffff880`01277fa4 : tcpip!UdpTlProviderSendMessagesCalloutRoutine+0x15
fffff880`0af94650 fffff880`0183c728 : fffff880`0183c680 fffffa80`0b6ac430 fffffa80`0b5a2000 00000000`00000001 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`0af94730 fffff880`01275675 : fffffa80`06fa63d0 fffffa80`06fa03e0 fffffa80`0b2827a0 fffffa80`0b224db6 : tcpip!UdpTlProviderSendMessages+0x78
fffff880`0af947b0 fffff880`012758c2 : fffff800`03822800 fffffa80`06e746e4 fffffa80`0b2c6880 fffff800`036a3b91 : tdx!TdxSendDatagramTransportAddress+0x2f5
fffff880`0af94890 fffff880`017ea862 : fffffa80`0b48f850 fffffa80`0b224d30 00000000`00000000 fffff880`032f9180 : tdx!TdxTdiDispatchInternalDeviceControl+0x52
fffff880`0af94910 fffffa80`0b48f850 : fffffa80`0b224d30 00000000`00000000 fffff880`032f9180 00000000`00000001 : networx+0x7862
fffff880`0af94918 fffffa80`0b224d30 : 00000000`00000000 fffff880`032f9180 00000000`00000001 00000000`0000006d : 0xfffffa80`0b48f850
fffff880`0af94920 00000000`00000000 : fffff880`032f9180 00000000`00000001 00000000`0000006d fffff880`07240000 : 0xfffffa80`0b224d30


STACK_COMMAND:  kb

FOLLOWUP_IP: 
tdx!TdxSendDatagramTransportAddress+2f5
fffff880`01275675 448be0          mov     r12d,eax

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  tdx!TdxSendDatagramTransportAddress+2f5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tdx

IMAGE_NAME:  tdx.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79332

FAILURE_BUCKET_ID:  X64_0xA_tdx!TdxSendDatagramTransportAddress+2f5

BUCKET_ID:  X64_0xA_tdx!TdxSendDatagramTransportAddress+2f5

Followup: MachineOwner
---------

Since this is a Windows driver, you cannot update it. However, you can try to reinstall it:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Hold CTRL+R on the keyboard,

Type in "devmgmt.msc" (without quotes),

On the taskbar on top, click on "VIEW -- SHOW HIDDEN DEVICES",

Expand "Non Plug And Play Drivers",

Right click on NetIO Legacy TDI Support Driver-Uninstall,

Restart the PC.

Please inform us of the results.

Best of luck,

PeregrineX

 

[Glodan]

Hi Peregrine,

I followed your steps to remove the NetIO Legacy TDI Support Driver, restarted and had another go at hearthstone. I manage to get through a got 6-7 games before it crashed this time.

The error on the BSOD was DRIVER_CORRUPTED_EXPOOL 0x000000c5, the same as the majority of the dump files I've collected.

 

[PeregrineX]

Well, this is embarrassing...

Apparently while I was helping multiple people at once, I posted somebody else's error in this post.

Please excuse me, I will have a look at YOURS now.

 

[PeregrineX]

Sorry for the confusion, this is YOUR error:

Your NVidia Graphics Driver is corrupting the system memory pool:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80003809b05, address which referenced memory

Debugging Details:
------------------

[COLOR="Red"]*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys[/COLOR]

BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExDeferredFreePool+249
fffff800`03809b05 4c395808        cmp     qword ptr [rax+8],r11

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  System

TRAP_FRAME:  fffff8800355b8f0 -- (.trap 0xfffff8800355b8f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff80003864800
rdx=fffff8800a7fc450 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003809b05 rsp=fffff8800355ba80 rbp=0000000000000000
 r8=0000000000000000  r9=fffff8800a7fc450 r10=0000000000000001
r11=fffff8800a7fc460 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac po cy
nt!ExDeferredFreePool+0x249:
fffff800`03809b05 4c395808        cmp     qword ptr [rax+8],r11 ds:00000000`00000008=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800036d4169 to fffff800036d4bc0

STACK_TEXT:  
fffff880`0355b7a8 fffff800`036d4169 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0355b7b0 fffff800`036d2de0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0355b8f0 fffff800`03809b05 : fffffa80`07f4d040 fffffa80`07f4d040 00000000`00000001 00000000`00000001 : nt!KiPageFault+0x260
fffff880`0355ba80 fffff800`038084f1 : 00000000`00000000 fffffa80`09dc81d0 00000000`00000000 00000000`00000001 : nt!ExDeferredFreePool+0x249
fffff880`0355bb10 fffff880`0f3b33a6 : fffffa80`09dc81e0 fffff800`0387a2d8 fffffa80`20206f49 00000000`00000000 : nt!ExFreePoolWithTag+0x411
fffff880`0355bbc0 fffffa80`09dc81e0 : fffff800`0387a2d8 fffffa80`20206f49 00000000`00000000 fffffa80`07fcfb50 : nvlddmkm+0x19b3a6
fffff880`0355bbc8 fffff800`0387a2d8 : fffffa80`20206f49 00000000`00000000 fffffa80`07fcfb50 00000113`00db30e4 : 0xfffffa80`09dc81e0
fffff880`0355bbd0 fffffa80`20206f49 : 00000000`00000000 fffffa80`07fcfb50 00000113`00db30e4 00000113`6c2502e4 : nt!ExWorkerQueue+0x58
fffff880`0355bbd8 00000000`00000000 : fffffa80`07fcfb50 00000113`00db30e4 00000113`6c2502e4 00000113`6c2502e4 : 0xfffffa80`20206f49


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+249
fffff800`03809b05 4c395808        cmp     qword ptr [rax+8],r11

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!ExDeferredFreePool+249

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0xC5_2_nt!ExDeferredFreePool+249

BUCKET_ID:  X64_0xC5_2_nt!ExDeferredFreePool+249

Followup: Pool_corruption
---------

Did you update your drivers recently? If so, they may have been corrupted whilst downloading.

I'd recommend following this to ensure the cleanest driver reinstallation possible.

Best of luck,

PeregrineX

 

[Glodan]

Hey Peregine,

I have a -really- slow download rate, so I couldn't use the latest version but:
Yesterday I cleaned off the drivers I had installed (GeForce 33-something) and went to reinstall, found I didn't have the same version of drivers so I installed the latest ones I had - GeForce 320.18. I played a fairly lengthy session of Hearthstone and experienced only two.. soft lockups.. they're really bizarre. My network connectivity dies off, and I can still operate most programs normally, but when I try to open Task Manager it freezes entirely.
I set the latest Nvidia drivers downloading overnight and did the same uninstall/install procedure for the new ones. I've had 3 of the c5 BSODs this morning, which I imagine is due to the same thing.

I'll get a friend with a more reliable connection to download the drivers for me, but living in a remote area that could take a while to sort out.

Edit:

I think for now I may go back to the 320.18 drivers as it was a bit more stable. Although I'm seeing in other threads that Networx was crashing peoples games, so I may try uninstalling that before I swap drivers again.

Edit 2:

Ok, After a couple hours of play with no crashes I'm thinking the clean driver install and uninstalling networx has done the trick!

I'll tentatively keep this thread active while I keep playing today, but it's looking good!

 

[Glodan]

So, after 23 games and no crashes I think we can call this one solved!
Thanks for the help Peregrine!