The "adgnetworkwfpdrv.sys" caused BSOD

[bestpika]

AdGuard version

7.13 nightly 10 (build 4252, CL 1.11.88)

Browser version

All

OS version

Windows 10 x64 21H2 7.13 build 19044.2846

What filters do you have enabled?

No response

What Stealth Mode options do you have enabled?

No response

Support ticket ID

No response

Issue Details

Recently, I have been experiencing BSOD (Blue Screen of Death) errors whenever there is a sudden surge in traffic, but the reason is unknown.
This has happened at least four times and on different hardware.
The only common factor is that I have disabled memory compression using commands on both computers.

Expected Behavior

No response

Screenshots

Additional Information

Minidump.zip

[VladisLoveZh]

@bestpika
Hi,

Would you please disable all VPN\proxies, antivirus, firewall and related software to see if that helps? Most likely third-party apps are involved, rather than just AdGuard causes that.

[bestpika]

Although I have installed WARP and WireGuard, I am not connected.
Additionally, when I turn off AdGuard, I no longer experience BSOD (previously occurred while browsing Twitch and playing Johren web games simultaneously).
And I also mentioned that it happened after turning off memory compression.
I used the following PowerShell command to disable memory compression.

Disable-MMAgent -MemoryCompression

[marcmv1]

I also have a memory.dmp file showing a crash for the same reason using the adguard beta channel. It's 32G uncompressed. If you want me to send it, is there someplace I can upload something that large, preferably someplace not public.

It compressed down to 13.6G.

[VladisLoveZh]

@bestpika
@marcmv1
That mostly looks like a third-party app is in conflict with AdGuard, therefore, please disable third-party apps (as much as you can) and reproduce the issue.
Exclude those apps from AdGuard via AdGuard>Settings>General>Advanced>Exclude the app from filtering by entering the full path>enter a full path to an app, separate each path to an app with semicolons

[marcmv1]

@bestpika @marcmv1 That mostly looks like a third-party app is in conflict with AdGuard, therefore, please disable third-party apps (as much as you can) and reproduce the issue. Exclude those apps from AdGuard via AdGuard>Settings>General>Advanced>Exclude the app from filtering by entering the full path>enter a full path to an app, separate each path to an app with semicolons

I uninstalled Adguard and went back to the current release version, 7.12. I haven't gotten a single crash since downgrading. On the beta version, I would BSOD at least 2x/day.

[VladisLoveZh]

@marcmv1 do you remember something remarkable when it crashed?

[marcmv1]

@marcmv1 do you remember something remarkable when it crashed?

It's a brand new laptop. I set it up from scratch. I use it for work so I am on it all day. It would just crash randomly. Sometimes when I'm using it, other times, I'd wake the screen up and it had rebooted. I couldn't track it to a specific thing I was doing.

[VladisLoveZh]

@marcmv1 do you remember something remarkable when it crashed?

It's a brand new laptop. I set it up from scratch. I use it for work so I am on it all day. It would just crash randomly. Sometimes when I'm using it, other times, I'd wake the screen up and it had rebooted. I couldn't track it to a specific thing I was doing.

Alright, could you please upload your dump file somewhere for us to download? We'll definitely need to take a look at it

You can send us a link to your dump files via [email protected]
Don't forget to attach #4691 this link to your email as well.

[marcmv1]

You can send us a link to your dump files via [email protected] Don't forget to attach #4691 this link to your email as well.

It's aprox 14G. Do you have a private location that I can upload it to? sftp server, box, dropbox, etc?

[VladisLoveZh]

You can send us a link to your dump files via [email protected] Don't forget to attach #4691 this link to your email as well.

It's aprox 14G. Do you have a private location that I can upload it to? sftp server, box, dropbox, etc?

Choose that suits you best, we're fine with dropbox.
Simply email the dropbox link that leads to dumps via [email protected]. Once we receive and download them – we will let you know when we are done with them and you are free to delete them completely

[marcmv1]

I sent a dropbox link to the email address you provided. Please let me know when you've downloaded it so I can delete it from Dropbox.

[bestpika]

@bestpika @marcmv1 That mostly looks like a third-party app is in conflict with AdGuard, therefore, please disable third-party apps (as much as you can) and reproduce the issue. Exclude those apps from AdGuard via AdGuard>Settings>General>Advanced>Exclude the app from filtering by entering the full path>enter a full path to an app, separate each path to an app with semicolons

But when I followed @marcmv1's method to roll back the version to 7.12, the issue no longer occurred.
However, when I upgraded to the version mentioned in the post, the issue continued to happen.
It always happens when my browser suddenly experiences an increase in traffic and uses a lot of memory.

[tiomoh]

I was experiencing the same while on 7.13.4262.0 Nightly. BSOD apparently caused by adgnetworkwfpdrv.sys, stop code PAGE_FAULT_IN_NONPAGED_AREA. Windows 11, 22H2, build 22621.1776.

Just sent an email as instructed above with a link for the memory dump file, but I've attached the minidumps here.

I reinstalled Adguard, now on the beta channel, and the issue hasn't happened again so far.

(minidump link deleted due to privacy reasons)

[VladWinner]

7.13 nightly 13 (build 4268, CL 1.11.88)
Windows 11 22624.1755 x64 22624.1755

[adbuker]

@bestpika, @marcmv1, @tiomoh, @VladWinner, we've handled the issue and publish fix today within the nightly channel

[adbuker]

upd: the nightly has been published

[fieraoh]

When does "13.1" release, I can't live with this anymore.

[bestpika]

upd: the nightly has been published

The version is v7.13 nightly 14?

[zeroalias74]

when will this fix be published to the stable version of Adguard. I'm running into this BSOD with the same adgnetworkwfpdrv.sys issue anytime I have some apps open then run Youtube as a PWA...

[silverwings15]

still getting the BSOD error on 7.13 nightly 14

[Celexi]

I also got the bsod on the nightly that ended with me having to uninstall and use the extension instead, any updates on this?

[nimbus2332]

And I also use Wiresock. I just installed a new version and after a couple of minutes of viewing pictures on yandex.images my PC gave me a blue screen!!!

Can someone tell me which version is working stably?

[silverwings15]

still occurring on 7.13.1

[zeroalias74]

This issue is still happening on my end. This is with stable version 7.13.1 so the problem hasn't been fixed. I'll have a few apps open, 2 browsers, email client, notepad, etc... I notice that it almost always seems to happen when I open up Youtube, either via a tab, or a PWA... I get the BSOD, pointing to adgnetworkwfpdrv.sys and the Page Fault error.

[tiomoh]

@zeroalias74 same thing happened to me yesterday. Lost progress on work because of it. Updated to the latest Nightly release hoping it's working ok there as I can't really troubleshoot this issue again in the incoming days.

[monkeylove]

I tried downgrading to 7.12, but after a while, I couldn't access anything online, and could do so only after I upgraded again to 7.13. I also notice that browsing is a lot faster with browser addons, although I need the desktop app for things like Ferdium, which can't load addons.

I used WinDbg to analyze the minidump, and this is what I got (using Win 10 with 16 GB RAM and v. 7.13 or the latest stable version):

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.

...

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: AdguardSvc.exe

TRAP_FRAME: fffffb0d8f5064c0 -- (.trap 0xfffffb0d8f5064c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=ffffad0c5be3ff80
rdx=00003a73eb5a3070 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8078022f805 rsp=fffffb0d8f506658 rbp=fffffb0d8f5066e9
r8=0000000034dd2845 r9=0000000001a70932 r10=0000000000001001
r11=ffffad0c5be00000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
adgnetworkwfpdrv+0xf805:
fffff8078022f805 f30f6f4c0a10 movdqu xmm1,xmmword ptr [rdx+rcx+10h] ds:ffffe780473e3000=????????????????????????????????
Resetting default scope

STACK_TEXT:
fffffb0d8f506218 fffff80771a4af03 : 0000000000000050 ffffe780473e3000 0000000000000000 fffffb0d8f5064c0 : nt!KeBugCheckEx
fffffb0d8f506220 fffff8077186e7b0 : 0000000034e13000 0000000000000000 fffffb0d8f506540 0000000000000000 : nt!MiSystemFault+0x1b2523
fffffb0d8f506320 fffff80771a0b7d8 : 0000000034e13000 fffff807718127d0 ffffad0c5be00000 0000000044554c46 : nt!MmAccessFault+0x400
fffffb0d8f5064c0 fffff8078022f805 : fffff80780228810 0000000000000000 fffffb0d8f5066e9 ffffad0c50343ea0 : nt!KiPageFault+0x358
fffffb0d8f506658 fffff80780228810 : 0000000000000000 fffffb0d8f5066e9 ffffad0c50343ea0 0000000000000000 : adgnetworkwfpdrv+0xf805
fffffb0d8f506660 0000000000000000 : fffffb0d8f5066e9 ffffad0c50343ea0 0000000000000000 0000000000000000 : adgnetworkwfpdrv+0x8810

SYMBOL_NAME: adgnetworkwfpdrv+f805

MODULE_NAME: adgnetworkwfpdrv

IMAGE_NAME: adgnetworkwfpdrv.sys

STACK_COMMAND: .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET: f805

FAILURE_BUCKET_ID: AV_R_(null)_adgnetworkwfpdrv!unknown_function

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {6a7e6cf0-81d9-6cf0-35d1-73db48bad268}

Followup: MachineOwner

[bestpika]

It's really too bad that I'm having the same BSOD problem again.

[PrynsTag]

If in case you are still experiencing this issue even after upgrading, just disable the Use WFP network driver.

Just follow the breadcrumbs below and uncheck the mentioned setting:
Settings > Network > Use WFP network driver

[silverwings15]

so what happens exactly when you disable it? do you lose the ability to manually choose what programs to filter/not filter?

[monkeylove]

I disabled the WFP network driver, but the OS still freezes, with no BSOD (so no minidump).

[cdwmhcc]

Any update?

[silverwings15]

still occurring even on Adguard 15.0 stable

[Celexi]

would be nice if this got fixed, having to use the adguard browser extensions because of this is annoying.

[Aydinv13]

We're dealing with the problem in a new task #4841

could someone please send their latest dump file for us. Specify the number of the new task in the message (4841)