Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD process or thread crucial to system operation has ended

09 Jul 2013   #11
x BlueRobot

 

Code:
BugCheck A, {0, 2, 0, fffff80002ea6bd4}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
Code:
Usual causes:  Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility
This bugcheck indicates that device driver has attempted to access a invalid memory address, or perform an instruction at a inappropriate IRQL level.

Code:
TRAP_FRAME:  fffff880031c4130 -- (.trap 0xfffff880031c4130)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880031c44f8 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ea6bd4 rsp=fffff880031c42c0 rbp=0000000000000000
 r8=fffff880031c43c8  r9=fffff880031c43c0 r10=0000000000000002
r11=fffff80002ea5f70 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac pe cy
nt!IopCompleteRequest+0xc64:
fffff800`02ea6bd4 488b09          mov     rcx,qword ptr [rcx] ds:00000000`00000000=????????????????
Code:
1: kd> k
Child-SP          RetAddr           Call Site
fffff880`031c3fe8 fffff800`02e911a9 nt!KeBugCheckEx
fffff880`031c3ff0 fffff800`02e8fe20 nt!KiBugCheckDispatch+0x69
fffff880`031c4130 fffff800`02ea6bd4 nt!KiPageFault+0x260 <-- Offending Instruction
fffff880`031c42c0 fffff800`02e84617 nt!IopCompleteRequest+0xc64 
fffff880`031c4390 fffff800`02e8781d nt!KiDeliverApc+0x1c7
fffff880`031c4410 fffff800`02e9898f nt!KiCommitThreadWait+0x3dd
fffff880`031c44a0 fffff800`030ffd32 nt!KeWaitForSingleObject+0x19f
fffff880`031c4540 fffff800`0324efe4 nt!IopSynchronousCall+0x102
fffff880`031c45b0 fffff800`0327fd2f nt!IopQueryLegacyBusInformation+0x64
fffff880`031c4660 fffff800`032811b2 nt!PipCallDriverAddDevice+0x76f
fffff880`031c4810 fffff800`0328164c nt!PipProcessDevNodeTree+0x2b2
fffff880`031c4a80 fffff800`02f947f2 nt!PiProcessStartSystemDevices+0x7c
fffff880`031c4ad0 fffff800`02e9b251 nt!PnpDeviceActionWorker+0x302
fffff880`031c4b70 fffff800`0312fede nt!ExpWorkerThread+0x111
fffff880`031c4c00 fffff800`02e82906 nt!PspSystemThreadStartup+0x5a
fffff880`031c4c40 00000000`00000000 nt!KiStartSystemThread+0x16
From the call stack, the thread was placed in a wait state, to allow the APC to called, and allow a driver to complete it's I/O request, which is why the IRQL level was pushed up to DISPATCH_LEVEL. The IRQL level was lowered, so when a driver wanted to page some data into memory, it was a illegal operation.

Code:
1: kd> !irql
Debugger saved IRQL for processor 0x1 -- 2 (DISPATCH_LEVEL)
Now, although noticed that the Flink and Blink addresses for the linked list were invalid, therefore I went and checked the instruction, and it said that there was some pool corruption.

Code:
LOCK_ADDRESS:  fffff80003095b80 -- (!locks fffff80003095b80)

Resource @ nt!PiEngineLock (0xfffff80003095b80)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks
Code:
1: kd> !poolval fffff80002ea6000
Pool page fffff80002ea6000 region is Nonpaged pool

Validating Pool headers for pool page: fffff80002ea6000

Pool page [ fffff80002ea6000 ] is __inVALID.

Analyzing linked list...
[ fffff80002ea6000 ]: invalid previous size [ 0x41 ] should be [ 0x0 ]
[ fffff80002ea6000 --> fffff80002ea6030 (size = 0x30 bytes)]: Corrupt region


Scanning for single bit errors...

None found
Sorry for the really long post, but I think we may be dealing with some kind of driver issue here. I would keep Driver Verifier running, some people even recommend 36 hours.


My System SpecsSystem Spec
.
09 Jul 2013   #12
Petey7

Windows 7 Professional SP1 64-bit
 
 

I switched out the drivers, played a couple games, and saw no degradation in performance. I still have the driver verifier on, but haven't had another crash yet.

I'm fine with long posts. They are most informative. Thank you for the help so far.
My System SpecsSystem Spec
09 Jul 2013   #13
x BlueRobot

 

Welcome, hopefully we can see this issue solved
My System SpecsSystem Spec
.

10 Jul 2013   #14
Petey7

Windows 7 Professional SP1 64-bit
 
 

Just to keep you updated, I've had the driver verifier on for about 45 hours now, and I haven't received a crash since the first one. Maybe it was the video driver, since it was the only one not from Toshiba, but I'm not sure. Should I turn off driver verifier at this point?
My System SpecsSystem Spec
10 Jul 2013   #15
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Run a scan with Malwarebytes . Update the definitions before you do a Full Scan .

Have you ran a memory test running memtest86+ ?
My System SpecsSystem Spec
10 Jul 2013   #16
Petey7

Windows 7 Professional SP1 64-bit
 
 

Vistaking, all of that is covered in the first post. Multiple scans with MBAM, MSE and WDO found no viruses. Memtest86+ ran for 7 passes with no errors.
My System SpecsSystem Spec
10 Jul 2013   #17
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Turn off the Driver verifier . See how the PC is running if you get any crashes (BSOD) upload using the Tool
My System SpecsSystem Spec
11 Jul 2013   #18
x BlueRobot

 

Disable Driver Verifier as already suggested, and you may run this command in an elevated command prompt, to make sure Driver Verifier has been disabled:

Code:
verifier /query
My System SpecsSystem Spec
11 Jul 2013   #19
Petey7

Windows 7 Professional SP1 64-bit
 
 

I turned off driver verifier when Vista said to. The computer seems to be running well at the moment. I'm gonna give it some time before marking the thread as solved. I repped bluerobot. Would have done it for Vista too but it says I need to spread it around more first.
My System SpecsSystem Spec
11 Jul 2013   #20
x BlueRobot

 

Leave the thread open for a few days
My System SpecsSystem Spec
Reply

 BSOD process or thread crucial to system operation has ended




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
BSOD with System Thread, IRQL Less than, Memory Managment, etc.
Hello, I just want to say thanks for checking out my post, as this has been an ongoing problem with my computer for about a year now. First off, when the BSOD's started I tried a computer repair store hoping they would find the problem right away. While they had my computer it never...
BSOD Help and Support
Sound Doesn't Work After Ended Process of Audiodg.exe
After ended process tree of audiodg.exe using Resource Monitor,my volume doesn't work. How to make my volume back to normal? Help me please.
General Discussion
Superfetch error, "Error 1067: The thread unexpectedly ended."
Hello people who read this, Note: I am Dutch and my English is not that good. I got an error from Windows right after a BSOD that Windows unexpectedly closed. Happened 100+ times on my computer, nothing new, seems unsolvable and I could not find a solution for it. Windows sent me a message...
Performance & Maintenance
BSOD driver IRQL not less or equal (process name: system)
Hello I have BSOD problem which occurs randomly. In the blue screen it’s written “Driver IRQL not less or equal”. The important fact is that BSOD only appears when I use Win 7, and when I go back to Win XP the BSOD problem disappears. I have tested different versions of Win 7 on my laptop, but...
BSOD Help and Support
another BSOD on system wake thread
I have the same problem as many that my windows 7 x64 system will bsod on wake from sleep about 1/5 of the time. I've attached the minidump
BSOD Help and Support
connection by the system process and killed process
I have a few apps running, incl. Firefox, Outlook. I took down their PID and then exit those programs. I run the following command: netstat -a -o -b -p tcp It will list many connections like below TCP 192.168.83.2:57471 xx.xx.xx.xx:http ESTABLISHED 4184 TCP ...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 23:03.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App