BugCheck - INVALID_WORK_QUEUE_ITEM (96)

This server has been running fine.. until 2 wks ago.
Now it recycles except this morning the server hung.

Intel P4 dual 2.8
RAM 2.00
Windows Server 2003 Standard Edition SP1 build 3790
Exchange 2003 ver:6.5.7638.1

Will SP2 resolve the issue with ntkrnlmp.exe?
Or at least this is my interpretation of the problem.

INVALID_WORK_QUEUE_ITEM (96)
This message occurs when KeRemoveQueue removes a queue entry whose flink
or blink field is null. This is almost always called by code misusing
worker thread work items, but any queue misuse can cause this. The rule
is that an entry on a queue may only be inserted on the list once. When an
item is removed from a queue, it's flink field is set to NULL. This bugcheck
occurs when remove queue attempts to remove an entry, but the flink or blink
field is NULL. In order to debug this problem, you need to know the queue being
referenced.
In an attempt to help identify the guilty driver, this bugcheck assumes the
queue is a worker queue (ExWorkerQueue) and prints the worker routine as
parameter 4 below.
Arguments:
Arg1: 88ba4238, The address of the queue entry whose flink/blink field is NULL
Arg2: 808b70dc, The address of the queue being references. Usually this is one
of the ExWorkerQueues.
Arg3: 808b70a0, The base address of the ExWorkerQueue array. This will help determine
if the queue in question is an ExWorkerQueue and if so, the offset from
this parameter will isolate the queue.
Arg4: 8091808d, If this is an ExWorkerQueue (which it usually is), this is the address
of the worker routine that would have been called if the work item was
valid. This can be used to isolate the driver that is misusing the work
queue.

Debugging Details:
------------------


WORKER_ROUTINE:
nt!IopProcessWorkItem+0
8091808d 8bff mov edi,edi

FAULTING_IP:
nt!IopProcessWorkItem+0
8091808d 8bff mov edi,edi

WORK_ITEM: 88ba4238

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x96

PROCESS_NAME: System

CURRENT_IRQL: 1b

LAST_CONTROL_TRANSFER: from 8085afcc to 8087b6be

STACK_TEXT:
f78f2d1c 8085afcc 00000096 88ba4238 808b70dc nt!KeBugCheckEx+0x1b
f78f2d78 8083f707 808b70dc c3ef1d01 00000000 nt!KeRemoveQueue+0x58e
f78f2dac 8092ccff 88ba4238 00000000 00000000 nt!ExpWorkerThread+0xc8
f78f2ddc 80841a96 8083f671 00000001 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: .bugcheck ; kb

FOLLOWUP_IP:
nt!IopProcessWorkItem+0
8091808d 8bff mov edi,edi

SYMBOL_NAME: nt!IopProcessWorkItem+0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e60

FAILURE_BUCKET_ID: 0x96_nt!IopProcessWorkItem+0

BUCKET_ID: 0x96_nt!IopProcessWorkItem+0

Followup: MachineOwner
---------

eax=f772f13c ebx=808b70dc ecx=00000002 edx=808b70dc esi=f772f120 edi=89f96098
eip=8087b6be esp=f78f2d04 ebp=f78f2d1c iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8087b6be 5d pop ebp
ChildEBP RetAddr Args to Child
f78f2d1c 8085afcc 00000096 88ba4238 808b70dc nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f78f2d78 8083f707 808b70dc c3ef1d01 00000000 nt!KeRemoveQueue+0x58e (FPO: [Non-Fpo])
f78f2dac 8092ccff 88ba4238 00000000 00000000 nt!ExpWorkerThread+0xc8 (FPO: [Non-Fpo])
f78f2ddc 80841a96 8083f671 00000001 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a75000 nt ntkrnlmp.exe Thu Mar 24 17:42:08 2005 (42435E60)
80a75000 80aa1000 hal halmacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
b204f000 b2060440 naveng naveng.sys Thu Mar 15 21:34:29 2007 (45FA1E55)
b2061000 b212f820 navex15 navex15.sys Thu Mar 15 22:14:23 2007 (45FA27AF)
b5be6000 b5bf9000 sysaudio sysaudio.sys Thu Mar 24 17:40:23 2005 (42435DF7)
b5bf9000 b5c14000 wdmaud wdmaud.sys Thu Mar 24 17:40:49 2005 (42435E11)
b650f000 b653c000 RDPWD RDPWD.SYS Wed Jun 15 08:33:14 2005 (42B04A3A)
b6db4000 b6dbf000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
b6e30000 b6e32f60 SYMREDRV SYMREDRV.SYS Tue Apr 05 11:11:10 2005 (4252D4BE)
b74dc000 b7506000 Fastfat Fastfat.SYS Thu Mar 24 17:40:20 2005 (42435DF4)
b78ee000 b7906000 mqac mqac.sys Thu Mar 24 17:27:39 2005 (42435AFB)
b79f6000 b7a46000 HTTP HTTP.sys Thu Mar 24 17:40:36 2005 (42435E04)
b7b86000 b7bf2000 srv srv.sys Fri Sep 01 07:32:26 2006 (44F8447A)
b7cba000 b7ce9000 RMCAST RMCAST.sys Thu Mar 24 17:32:19 2005 (42435C13)
b7cfb000 b7d2ae60 exifs exifs.sys Thu Aug 25 17:29:05 2005 (430E6251)
b7d2b000 b7d57000 dump_fasttx2k dump_fasttx2k.sys Tue Aug 05 19:43:09 2003 (3F306B3D)
b7d57000 b7d6c000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
b7d6c000 b7d7d000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
b7d7d000 b7dfd000 mrxsmb mrxsmb.sys Mon May 08 10:18:45 2006 (445F7D75)
b7dfd000 b7e36000 rdbss rdbss.sys Mon May 08 10:18:53 2006 (445F7D7D)
b7e36000 b7e60000 afd afd.sys unavailable (FFFFFFFE)
b7e60000 b7e91000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
b7e91000 b7ea5000 arp1394 arp1394.sys Thu Mar 24 17:27:19 2005 (42435AE7)
b7ea5000 b7ee4ce0 SYMTDI SYMTDI.SYS Tue Apr 05 11:10:52 2005 (4252D4AC)
b7ee5000 b7f46000 tcpip tcpip.sys Tue May 23 18:02:22 2006 (4473B09E)
b7f46000 b7f5f000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
b8094000 b809e000 HidBatt HidBatt.sys Tue Mar 25 00:16:30 2003 (3E80024E)
b80a4000 b80b1000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
b811c000 b8124000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
b8134000 b813b000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
b83db000 b83edf00 SYMEVENT SYMEVENT.SYS Wed Jan 14 18:02:13 2004 (4005F4A5)
b851d000 b8524000 parvdm parvdm.sys unavailable (FFFFFFFE)
b85cd000 b85d9000 vga vga.sys Thu Mar 24 17:29:54 2005 (42435B82)
b85ed000 b85fb000 HIDCLASS HIDCLASS.SYS Tue Mar 25 00:10:17 2003 (3E8000D9)
b8861000 b8869000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
b8995000 b89e4000 savrt savrt.sys Mon Feb 09 15:24:30 2004 (402816AE)
b8a2c000 b8a32300 HIDPARSE HIDPARSE.SYS Thu Mar 24 17:30:36 2005 (42435BAC)
b8aa0000 b8aa9000 hidusb hidusb.sys Tue Mar 25 00:10:17 2003 (3E8000D9)
b8b00000 b8b10000 Savrtpel Savrtpel.sys Mon Feb 09 15:24:34 2004 (402816B2)
b8df8000 b8e06000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
b9338000 b9340000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
b9678000 b968c000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
b9a9c000 b9aaa000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
b9acc000 b9ad5000 ndisuio ndisuio.sys Thu Mar 24 17:33:16 2005 (42435C4C)
b9b0c000 b9b14000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
b9b44000 b9b4b000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
b9b6c000 b9b76000 flpydisk flpydisk.sys Tue Mar 25 00:04:32 2003 (3E7FFF80)
b9e03000 b9e10000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
b9e13000 b9e1d000 dump_diskdump dump_diskdump.sys Thu Mar 24 17:28:56 2005 (42435B48)
b9ea3000 b9eae000 Msfs Msfs.SYS unavailable (FFFFFFFE)
b9ec3000 b9ecd000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
b9f33000 b9f73000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
b9f73000 b9faa000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
b9faa000 b9fbd000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
b9fbd000 b9fd7000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
b9fd7000 b9fec000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
b9fec000 ba0038a0 aeaudio aeaudio.sys Thu Mar 13 14:54:09 2003 (3E70FE01)
ba004000 ba019000 drmk drmk.sys Thu Mar 24 17:30:34 2005 (42435BAA)
ba019000 ba042000 portcls portcls.sys Thu Mar 24 17:40:46 2005 (42435E0E)
ba042000 ba0cf300 smwdm smwdm.sys Mon Jun 02 10:42:12 2003 (3EDB8C74)
ba0d0000 ba0f8000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
ba0f8000 ba10c000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
ba10c000 ba121000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
ba121000 ba139000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
ba139000 ba14e000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
ba14e000 ba161000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
ba161000 ba173000 nic1394 nic1394.sys Thu Mar 24 17:27:19 2005 (42435AE7)
ba173000 ba19d000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
ba19d000 ba1c5200 e1000325 e1000325.sys Thu Apr 27 09:26:28 2006 (4450F0B4)
ba1c6000 ba1e1000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
ba1e1000 ba24ee80 ati2mtag ati2mtag.sys Thu Aug 08 13:46:38 2002 (3D52D8AE)
ba8f2000 ba8f7180 usbuhci usbuhci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
ba8fa000 ba900a00 usbehci usbehci.sys Thu Mar 24 17:30:43 2005 (42435BB3)
bae10000 bae1f000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
bae20000 bae2b000 fdc fdc.sys Thu Mar 24 17:28:43 2005 (42435B3B)
bf800000 bf9d0000 win32k win32k.sys Wed Oct 05 17:37:08 2005 (434471B4)
bf9d0000 bf9e6000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bf9e6000 bfa17700 ati2dvag ati2dvag.dll Tue Mar 25 02:43:39 2003 (3E8024CB)
bfa18000 bfae6320 ati3d1ag ati3d1ag.dll Tue Mar 25 02:43:40 2003 (3E8024CC)
bff60000 bff7e000 RDPDD RDPDD.dll Thu Mar 24 19:30:48 2005 (424377D8)
f700b000 f7014000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f703b000 f7046000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f704b000 f705a000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f705b000 f7065000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f706b000 f7074000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f707b000 f7086000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f7173000 f7192000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f7192000 f71c8000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f71c8000 f725d000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)
f725d000 f72c5000 revfs revfs.sys Fri Mar 19 13:46:27 2004 (405B5C23)
f72c5000 f72ec000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f72ec000 f72ff7e0 drvmcdb drvmcdb.sys Tue Aug 06 00:09:47 2002 (3D4F763B)
f7300000 f7325000 fltmgr fltmgr.sys Mon Aug 21 02:59:45 2006 (44E98411)
f7325000 f7338000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f7338000 f7357000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f7357000 f7383000 fasttx2k fasttx2k.sys Tue Aug 05 19:43:09 2003 (3F306B3D)
f7383000 f739f000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b5f00 ohci1394 ohci1394.sys Thu Mar 24 17:31:18 2005 (42435BD6)
f74b7000 f74c4200 1394BUS 1394BUS.SYS Thu Mar 24 17:31:17 2005 (42435BD5)
f74c7000 f74d4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74d7000 f74e7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74e7000 f74f2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74f7000 f7503000 Mraid35x Mraid35x.sys Thu Dec 11 22:13:16 2003 (3FD95C7C)
f7507000 f7517000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f7517000 f75220e0 vsp vsp.sys Thu Apr 03 12:16:05 2003 (3E8C8875)
f7527000 f7533000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f7537000 f7541000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7547000 f7557000 agp440 agp440.sys Thu Mar 24 17:34:11 2005 (42435C83)
f7577000 f7584000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
f7587000 f7596000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f7627000 f7631000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f7657000 f7660000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f7697000 f76a1000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f76e7000 f76f0000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 00:04:46 2003 (3E7FFF8E)
f771f000 f7726000 intelide intelide.sys Thu Mar 24 17:28:48 2005 (42435B40)
f7727000 f772e000 dmload dmload.sys unavailable (FFFFFFFE)
f7737000 f773f000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f77f7000 f77fe000 Null Null.SYS unavailable (FFFFFFFE)
f7897000 f7899800 compbatt compbatt.sys Tue Mar 25 00:16:28 2003 (3E80024C)
f789b000 f789e900 BATTC BATTC.SYS Thu Mar 24 17:34:07 2005 (42435C7F)
f789f000 f78a29a0 imdrvfsf imdrvfsf.sys Fri Mar 05 10:23:08 2004 (4048C58C)
f798f000 f7990280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f79b7000 f79b8580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)

Unloaded modules:
b1839000 b188f000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1839000 b188f000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1839000 b188f000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1839000 b188f000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1839000 b188f000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b43ae000 b43c0000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b43c0000 b448f000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b2c50000 b2c80000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b2c2a000 b2c80000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b2c2a000 b2c80000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b31c8000 b31f8000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b50dd000 b50ef000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b50ef000 b51be000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b4987000 b49b7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b4987000 b49b7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7f7f000 b7f91000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7f91000 b8060000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b563e000 b566e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b563e000 b566e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9cbc000 b9cc4000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5b39000 b5b69000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5b69000 b5b98000 MidiSyn.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5b98000 b5baa000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5baa000 b5bbe000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5bbe000 b5be6000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79c9000 f79cb000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5f41000 b5f54000 sysaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5f54000 b5f6f000 wdmaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b813c000 b8144000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5e94000 b5ec4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5ec4000 b5ef3000 MidiSyn.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5ef3000 b5f05000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5f05000 b5f19000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b5f19000 b5f41000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8789000 b878b000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b7c64000 b7cba000 wlbs.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b80c4000 b80d2000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8b1c000 b8b1f000 scsichng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9b1c000 b9b24000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000

 

Bugcheck code 96 is rare to occur. Probably the culprit is faulty ram. Does your windows always crashed with bugcheck code 96. If your windows crashes with various bugcheck code and it is the symptom of faulty ram as well.