Bluescreen ntkrpamp.exe

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

INVALID_WORK_QUEUE_ITEM (96)
This message occurs when KeRemoveQueue removes a queue entry whose flink
or blink field is null.  This is almost always called by code misusing
worker thread work items, but any queue misuse can cause this.  The rule
is that an entry on a queue may only be inserted on the list once. When an
item is removed from a queue, it's flink field is set to NULL. This bugcheck  
occurs when remove queue attempts to remove an entry, but the flink or blink
field is NULL. In order to debug this problem, you need to know the queue being
referenced.
In an attempt to help identify the guilty driver, this bugcheck assumes the
queue is a worker queue (ExWorkerQueue) and prints the worker routine as
parameter 4 below.
Arguments:
Arg1: 86752af0, The address of the queue entry whose flink/blink field is NULL
Arg2: 8056485c, The address of the queue being references. Usually this is one
	of the ExWorkerQueues.
Arg3: 80564820, The base address of the ExWorkerQueue array. This will help determine
	if the queue in question is an ExWorkerQueue and if so, the offset from
	this parameter will isolate the queue.
Arg4: 80576ae6, If this is an ExWorkerQueue (which it usually is), this is the address
	of the worker routine that would have been called if the work item was
	valid. This can be used to isolate the driver that is misusing the work
	queue.

Debugging Details:
------------------


WORKER_ROUTINE: 
nt!IopProcessWorkItem+0
80576ae6 8bff            mov     edi,edi

FAULTING_IP: 
nt!IopProcessWorkItem+0
80576ae6 8bff            mov     edi,edi

WORK_ITEM:  86752af0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x96

PROCESS_NAME:  System

LAST_CONTROL_TRANSFER:  from 804fcd80 to 804f9f43

STACK_TEXT:  
f7a91d34 804fcd80 00000096 86752af0 8056485c nt!KeBugCheckEx+0x1b
f7a91d74 805387a8 00000001 00000001 00000000 nt!KeRemoveQueue+0x314
f7a91dac 805cffa8 86752af0 00000000 00000000 nt!ExpWorkerThread+0xcc
f7a91ddc 8054615e 805386dc 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND:  .bugcheck ; kb

FOLLOWUP_IP: 
nt!IopProcessWorkItem+0
80576ae6 8bff            mov     edi,edi

SYMBOL_NAME:  nt!IopProcessWorkItem+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4d00d46f

FAILURE_BUCKET_ID:  0x96_nt!IopProcessWorkItem+0

BUCKET_ID:  0x96_nt!IopProcessWorkItem+0

Followup: MachineOwner