BSOD - Windows 8.1

[rick990099]

My first time posting a thread here,sorry for mistakes.
I am getting BSODs mostly restarting/shutting down. It take 5-10 minutes while restarting/ shut down and then BSOD(Driver power state failure).Earlier it was because of raspppoe.sys,that was solved by replacing the file, Now cause seems to be hal.dll for now but causes are different time to time but same BSOD(Driver power state failure). very frustrating.Trying SysnativeBSODApps to analyze the bsod and the attached error msg is coming. What to do? driver verifier is also not resulting dmp files. RAM test shows no error.
Using Windows 8.1

 

[Patrick]

Earlier it was because of raspppoe.sys,that was solved by replacing the file

What do you mean by replacing the file?

5: kd> .bugcheck
Bugcheck code 0000000A
Arguments fffff802`577232d8 00000000`00000002 00000000`00000008 fffff802`577232d8

5: kd> kv
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd001`0e8da7f8 fffff802`573d64e9 : 00000000`0000000a fffff802`577232d8 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
ffffd001`0e8da800 fffff802`573d4d3a : 00000000`00000008 ffffe000`fc998a60 ffffd001`0e8d6000 ffffd001`0e8dc000 : nt!KiBugCheckDispatch+0x69
ffffd001`0e8da940 fffff802`577232d8 : fffff800`c29a49c7 00000000`00000001 ffffd001`0e8dab70 00000004`00000001 : nt!KiPageFault+0x23a (TrapFrame @ ffffd001`0e8da940)
ffffd001`0e8daad8 fffff800`c29a49c7 : 00000000`00000001 ffffd001`0e8dab70 00000004`00000001 0000040b`00000861 : nt!RtlQueryRegistryValues
ffffd001`0e8daae0 00000000`00000001 : ffffd001`0e8dab70 00000004`00000001 0000040b`00000861 00000000`00000000 : SynTP+0x3b9c7
ffffd001`0e8daae8 ffffd001`0e8dab70 : 00000004`00000001 0000040b`00000861 00000000`00000000 00000000`00000000 : 0x1
ffffd001`0e8daaf0 00000004`00000001 : 0000040b`00000861 00000000`00000000 00000000`00000000 00000008`00000000 : 0xffffd001`0e8dab70
ffffd001`0e8daaf8 0000040b`00000861 : 00000000`00000000 00000000`00000000 00000008`00000000 00000000`00000000 : 0x00000004`00000001
ffffd001`0e8dab00 00000000`00000000 : 00000000`00000000 00000008`00000000 00000000`00000000 00000000`00000000 : 0x0000040b`00000861

Synaptics touchpad driver called the RtlQueryRegistryValues function to specify a key path/table, most likely. Why did we go off the rails after this call?

5: kd> .trap ffffd001`0e8da940
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff800c29d4b40 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff802577232d8 rsp=ffffd0010e8daad8 rbp=ffffd0010e8daca0
 r8=ffffd0010e8dab20  r9=0000000000000000 r10=0000000000000000
r11=ffffe000fc999608 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!RtlQueryRegistryValues:
fffff802`577232d8 4883ec38        sub     rsp,38h

Looking at the trapframe for the unhandled exception regarding the instruction, it was subtracting 38 from rsp.

5: kd> !pte ffffd0010e8daad8
                                           VA ffffd0010e8daad8
PXE at FFFFF6FB7DBEDD00    PPE at FFFFF6FB7DBA0020    PDE at FFFFF6FB740043A0    PTE at FFFFF6E8008746D0
contains 0000000000E2E863  contains 0000000000340863  contains 00000000032A1863  contains 800000000320C963
GetUlongFromAddress: unable to read from fffff802575dd104
pfn e2e       ---DA--KWEV  pfn 340       ---DA--KWEV  pfn 32a1      ---DA--KWEV  pfn 320c      -G-DA--KWEV

rsp was valid contents wise, so why did this fail? Synaptics' touchpad driver is notorious for having bugs, so I'd update it if available or just rid of it and disable the touchpad + using a mouse. Rather unfortunate workaround, but it beats crashing.