BSOD When Using SoftEther on Lenovo Yoga 920

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
sigtherm
Posts: 3
Joined: Sat Aug 11, 2018 6:14 pm

BSOD When Using SoftEther on Lenovo Yoga 920

Post by sigtherm » Sat Aug 11, 2018 6:49 pm

I have tried numerous things, including a fresh install of Windows 10 pro on this machine, but no matter what - if I am connected to the internet through the USB dock (occasionally even on wifi, or even cellular hot spot, but mostly using Ethernet connection through Plugable USB-C dock - every time) when I activate SoftEther VPN connection, my computer will crash - BSOD. I have updated all drivers from Microsoft and Lenovo. The laptop is only a month old, and it has done this since day 1. I have look at event logs and dump files and all things point to SoftEther as the issue. Can anyone on this forum lend a hand to figure out what the issue is?

Here is a sample for the latest dump file:

Microsoft (R) Windows Debugger Version 10.0.18206.1001 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\jbeville\OneDrive\Desktop\081018-9562-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 17134 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 17134.1.amd64fre.rs4_release.180410-1804
Machine Name:
Kernel base = 0xfffff803`ade0c000 PsLoadedModuleList = 0xfffff803`ae1c71f0
Debug session time: Fri Aug 10 16:52:24.451 2018 (UTC - 4:00)
System Uptime: 0 days 0:27:39.738
Loading Kernel Symbols
...............................................................
................................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
........................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff8000a715dda, ffff810ead966738, ffff810ead965f80}

*** WARNING: Unable to verify timestamp for ndisrfl.sys
*** ERROR: Module load completed but symbols could not be loaded for ndisrfl.sys
Probably caused by : mslldp.sys ( mslldp!lldpReceivePermittedPacket+c0 )

Followup: MachineOwner
---------

nt!KeBugCheckEx:
fffff803`adfa4560 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff810e`ad965740=000000000000001e
6: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8000a715dda, The address that the exception occurred at
Arg3: ffff810ead966738, Parameter 0 of the exception
Arg4: ffff810ead965f80, Parameter 1 of the exception

Debugging Details:
------------------


KEY_VALUES_STRING: 1


STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: LENOVO

SYSTEM_PRODUCT_NAME: 80Y7

SYSTEM_SKU: LENOVO_MT_80Y7_BU_idea_FM_YOGA 920-13IKB

SYSTEM_VERSION: Lenovo YOGA 920-13IKB

BIOS_VENDOR: LENOVO

BIOS_VERSION: 5NCN38WW

BIOS_DATE: 02/22/2018

BASEBOARD_MANUFACTURER: LENOVO

BASEBOARD_PRODUCT: LNVNB161216

BASEBOARD_VERSION: SDK0J40709 WIN

DUMP_TYPE: 2

BUGCHECK_P1: ffffffffc0000005

BUGCHECK_P2: fffff8000a715dda

BUGCHECK_P3: ffff810ead966738

BUGCHECK_P4: ffff810ead965f80

WRITE_ADDRESS: fffff803ae267388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffff810ead965f80

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

FAULTING_IP:
ndis!memcpy+21a
fffff800`0a715dda f30f6f4410f0 movdqu xmm0,xmmword ptr [rax+rdx-10h]

EXCEPTION_PARAMETER1: ffff810ead966738

EXCEPTION_PARAMETER2: ffff810ead965f80

BUGCHECK_STR: 0x1E_c0000005

CPU_COUNT: 8

CPU_MHZ: 7c8

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 8e

CPU_STEPPING: a

CPU_MICROCODE: 6,8e,a,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

PROCESS_NAME: vpnclient_x64.exe

CURRENT_IRQL: 2

thisjun
Posts: 2458
Joined: Mon Feb 24, 2014 11:03 am

Re: BSOD When Using SoftEther on Lenovo Yoga 920

Post by thisjun » Wed Sep 05, 2018 8:03 am

Do you use any security software that monitoring traffic?
Can you upload minidump?

lschweiss
Posts: 3
Joined: Fri Apr 13, 2018 2:44 pm

Re: BSOD When Using SoftEther on Lenovo Yoga 920

Post by lschweiss » Wed Sep 05, 2018 7:37 pm

I'm having a similar problem using a Lenovo Thinkpad p51s.

Doesn't matter how I'm connected to the network, shortly after I connect the VPN the system will BSOD with DRIVER_IRQL_NOT_LESS_OR_EQUAL via ndis.sys.

I've disabled the antivirus and web protection. Everything has been fully updated. (Windows, Lenovo Driver, BIOS) Doesn't make a difference.

Minidump is available at ftp://ftp.nrg.wustl.edu/pub/090518-11843-01.dmp Sorry, the forum would not allow me to upload a file type '.dmp'. Renaming it then said it was too big. It is 1.8GB.

Any help on this would be greatly appreciated.

-Chip

infomaniac50
Posts: 1
Joined: Thu Sep 13, 2018 2:26 am

Re: BSOD When Using SoftEther on Lenovo Yoga 920

Post by infomaniac50 » Thu Sep 13, 2018 2:39 am

DRIVER_IRQL_NOT_LESS_OR_EQUAL is usually caused by a kernel driver accessing a memory address it's not supposed to.

Try disabling Avira's USB Filter driver or Avira's Network Filter driver. Also try uninstalling Avira completely if you don't use it.

sigtherm
Posts: 3
Joined: Sat Aug 11, 2018 6:14 pm

Re: BSOD When Using SoftEther on Lenovo Yoga 920

Post by sigtherm » Wed Oct 17, 2018 4:17 pm

I do not have any specific traffic monitoring, not on client end at least.

thisjun
Posts: 2458
Joined: Mon Feb 24, 2014 11:03 am

Re: BSOD When Using SoftEther on Lenovo Yoga 920

Post by thisjun » Thu Nov 01, 2018 7:16 am

lschweiss wrote:
Wed Sep 05, 2018 7:37 pm
I've disabled the antivirus and web protection.
Could you uninstall the antivirus?
It seems that BSOD is caused by a filter driver.
The filter driver doesn't stop filtering by only disable the application.

Post Reply