What to do when Windows 11 crashes due to a BSOD caused by a system service exception?
What to do when Windows 11 crashes due to a BSOD caused by a system service exception?
Hello all,
My Windows 11 PC just crashed and made a .dmp dump file. It says that a system service routine was the cause. How can I fix this issue and ensure it doesn't happen again? My computer also gets memory access violations (I ordered new RAM sticks but memory access violation occurred once after I installed them) error in Chrome browsers as well. Could this be connected to this?
Here is the .dmp file:
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the BugCheck
Arg2: fffff80318b410e6, Address of the instruction which caused the BugCheck
Arg3: fffffb0ff1c15880, Address of the context record for the exception that caused the BugCheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 796
Key : Analysis.Elapsed.mSec
Value: 842
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 1
Key : Analysis.IO.Write.Mb
Value: 25
Key : Analysis.Init.CPU.mSec
Value: 890
Key : Analysis.Init.Elapsed.mSec
Value: 133662
Key : Analysis.Memory.CommitPeak.Mb
Value: 112
Key : Analysis.Version.DbgEng
Value: 10.0.29457.1000
Key : Analysis.Version.Description
Value: 10.2506.23.01 amd64fre
Key : Analysis.Version.Ext
Value: 1.2506.23.1
Key : Bugcheck.Code.LegacyAPI
Value: 0x3b
Key : Bugcheck.Code.TargetModel
Value: 0x3b
Key : Dump.Attributes.AsUlong
Value: 0x21808
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0x0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: AV_CI!MinAsn1ExtractValues
Key : Failure.Exception.IP.Address
Value: 0xfffff80318b410e6
Key : Failure.Exception.IP.Module
Value: CI
Key : Failure.Exception.IP.Offset
Value: 0x810e6
Key : Failure.Hash
Value: {07bd1d9f-f185-9a6c-d8eb-74e4802abe93}
Key : Hypervisor.Enlightenments.ValueHex
Value: 0x7417df84
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 55185662
Key : Hypervisor.Flags.ValueHex
Value: 0x34a10fe
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 0x3f7
Key : WER.System.BIOSRevision
Value: 5.32.0.0
BUGCHECK_CODE: 3b
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff80318b410e6
BUGCHECK_P3: fffffb0ff1c15880
BUGCHECK_P4: 0
FILE_IN_CAB: 102225-7734-01.dmp
TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b
DUMP_FILE_ATTRIBUTES: 0x21808
Kernel Generated Triage Dump
FAULTING_THREAD: ffffd98260d98080
CONTEXT: fffffb0ff1c15880 -- (.cxr 0xfffffb0ff1c15880)
rax=0000000000000030 rbx=fffffb0ff1c162b0 rcx=0000028c80e4f699
rdx=0000000000000002 rsi=0000000000000001 rdi=0000028c80e4f675
rip=fffff80318b410e6 rsp=fffffb0ff1c162b0 rbp=0000000000000004
r8=000000000a061030 r9=02a2190102378201 r10=0000000000000000
r11=0000028c80e4f683 r12=000000000401062b r13=0000000000000000
r14=0000028c80e4f678 r15=0000000000000001
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050202
CI!MinAsn1ExtractValues+0xd6:
fffff803`18b410e6 410fb609 movzx ecx,byte ptr [r9] ds:002b:02a21901`02378201=??
Resetting default scope
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1 (!blackboxwinlogon)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
fffffb0f`f1c162b0 fffff803`18b4153d : 00000000`00000000 fffff800`00000000 0000028c`80e48d72 00000000`00000000 : CI!MinAsn1ExtractValues+0xd6
fffffb0f`f1c163b0 fffff803`18b401f1 : ffff808d`05fce050 00000000`000010f6 fffffb0f`00000004 00000000`000010f6 : CI!I_LocateCatalogPageHashesBlob+0x169
fffffb0f`f1c16540 fffff803`18b4259a : ffff808d`05fce050 fffff803`18aec920 fffffb0f`f1c16648 00000000`00000003 : CI!I_MapPageHashes+0x12d
fffffb0f`f1c16600 fffff803`18b91429 : 00000000`00000000 ffff808d`074ce538 ffff808d`074ce470 ffff808d`05e9e8c8 : CI!I_ParseCatalogAndMapHashes+0x186
fffffb0f`f1c16680 fffff803`18b3bb2c : ffff808c`ea386010 fffffb0f`00022350 0000028c`80e40000 ffff808d`074ce470 : CI!I_MapCatalog+0x3ed
fffffb0f`f1c16750 fffff803`18b3b620 : ffff808c`ea386010 00000000`0000045a ffff808d`05eaa608 00000000`00000000 : CI!I_ReloadCatalog+0x304
fffffb0f`f1c16920 fffff803`18b3d85b : ffff808c`ea386010 fffffb0f`f1c16b01 fffffb0f`00000000 fffffb0f`00000000 : CI!I_ReloadCatalogDirectory+0x2d0
fffffb0f`f1c16a50 fffff803`18b3d5ae : 00000000`00000001 fffffb0f`f1c16bc0 fffffb0f`00000001 00000000`0000800c : CI!I_ReloadCatalogs+0x18f
fffffb0f`f1c16ac0 fffff803`18b3c69d : ffff808c`ea386010 00000000`00000001 00000000`0000800c ffff808c`ea386010 : CI!CiFindFileOrHeaderHashInCatalogs+0x52e
fffffb0f`f1c16c40 fffff803`18b93f52 : 00000000`00000000 fffffb0f`f1c16e21 00000000`00000004 fffffb0f`f1c16e21 : CI!CiVerifyPageHashInCatalogs+0x13d
fffffb0f`f1c16d40 fffff803`18b95342 : 00000000`00000003 fffffb0f`f1c172c8 00000000`00000000 00000000`00000000 : CI!CipGetPageHashesForFile+0x1fe
fffffb0f`f1c16e70 fffff803`18b4425a : ffff808c`ea386010 ffffd982`6619a5e0 ffffd982`64c14080 ffff808d`034ff000 : CI!CipValidatePageHash+0x312
fffffb0f`f1c16f60 fffff803`18b16d67 : 00000000`00000057 fffffb0f`f1c172d0 00000000`00004084 00000000`0000000c : CI!CipValidateImageHash+0x112
fffffb0f`f1c17050 fffff803`86f2b660 : 20000000`00000008 ffffd982`6619a5e0 00000000`00000000 20000000`00000008 : CI!CiValidateImageHeader+0x9b7
fffffb0f`f1c17230 fffff803`86f2bc6f : 00000000`00000000 00000000`00000000 ffffffff`ffffffff 00000000`00000000 : nt!MiValidateSectionCreate+0x63c
fffffb0f`f1c17480 fffff803`86f2535d : fffffb0f`f1c17750 00000000`0000000c 00000000`00000002 00000000`00000000 : nt!MiValidateSectionSigningPolicy+0xc7
fffffb0f`f1c174f0 fffff803`86f23cb9 : ffffd982`6619a5e0 ffffd982`6619a5e0 fffffb0f`f1c17750 ffff808c`e1b3a420 : nt!MiValidateExistingImage+0x231
fffffb0f`f1c17580 fffff803`86f232d5 : 00000000`00000000 00000000`00000000 00000000`00000002 fffffb0f`f1c17750 : nt!MiShareExistingControlArea+0xf9
fffffb0f`f1c175b0 fffff803`86f22898 : 00000000`00000002 ffffd982`6619a5e0 ffffd982`4f580d00 ffffd982`4f580d00 : nt!MiCreateImageOrDataSection+0x1d5
fffffb0f`f1c176d0 fffff803`86ece25c : fffffb0f`f1c178c8 00000000`01000000 fffffb0f`f1c17aa0 ffffd982`64c14080 : nt!MiCreateSection+0xf8
fffffb0f`f1c17850 fffff803`8702c9a5 : 0000009a`93c86fd8 0000009a`0000000d 00000000`00000000 00000000`00000000 : nt!MiCreateSectionCommon+0x218
fffffb0f`f1c17930 fffff803`86cb1455 : ffffd982`60d98080 00000291`949ed960 fffffb0f`f1c17aa0 0000009a`93c870c0 : nt!NtCreateSection+0x75
fffffb0f`f1c179b0 00007ffd`16e22534 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
0000009a`93c86f88 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`16e22534
SYMBOL_NAME: CI!MinAsn1ExtractValues+d6
MODULE_NAME: CI
IMAGE_NAME: CI.dll
IMAGE_VERSION: 10.0.26100.6899
STACK_COMMAND: .cxr 0xfffffb0ff1c15880 ; kb
BUCKET_ID_FUNC_OFFSET: d6
FAILURE_BUCKET_ID: AV_CI!MinAsn1ExtractValues
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {07bd1d9f-f185-9a6c-d8eb-74e4802abe93}
Followup: MachineOwner
Welcome to the forums, newcomer!
My Windows 11 PC
Please list the specs to your build like so:
CPU:
CPU cooler:
Motherboard:
Ram:
SSD/HDD:
GPU:
PSU:
Chassis:
OS:
Monitor:
include the age of the PSU apart from it's make and model. BIOS version for your motherboard at this moment of time.
just crashed and made a .dmp dump file.
Would've been good if you included the .dmp file for us to read through. Host the file on a site akin to DropBox or their ilk and then pass on an URL here, for us to go through.
(I ordered new RAM sticks but memory access violation occurred once after I installed them)
Would be a good idea to include a link to the new ram kit as well.
Run memtest and see if any errors come back after 10 passes.
I performed memtest several months prior and observed no issues.
The dump file is available at the provided link.
Processor specifications include an Intel i9-14900KF with 3200 Mhz, 24 cores, and a CORSAIR iCUE H150i liquid cooler.
The motherboard features MSI PRO Z790-P WiFi with WiFi 6E and ARGB header, USB ports, and M.2 slots.
RAM is an ADATA XPG Lancer RGB 32GB kit at 5200MHz CL38.
Storage consists of a 1TB WD Black SN850X M.2 PCIe Gen 4 SSD with high-speed read/write rates.
The GPU is a Nvidia GeForce RTX 4070 TI.
Power supply is a 1000W Thermaltake Toughpower GF3, fully modular and rated for 80 PLUS Gold.
Chassis is an iBUYPOWER HYTE Y40 Pro RGB case in black.
Operating system is Windows 11, running on an Asus monitor.
BIOS version is 7E06vAI.
I ran memtest a few months back and saw no errors. That was then, I thought now, about your situation.
CI.dll
This is the Core Integrity module designed to check driver integrity and authenticity on your operating system. It suggests your OS might be corrupt.
Check this guide: https://youtu.be/3ka-FIiZK2k for assistance in fixing any corruption.
I experienced corruption problems a while back too, attempted to upgrade Windows 11 to the newest release but encountered errors during the download. I reviewed the Event Viewer and noticed RPC-related error events. I had to fix and reinstall the operating system. Still, some issues remained, but the OS eventually reached the latest version after updates. Corruption tends to reappear after a short period or even weeks despite using DISM and performing a clean install.
I tried this but when doing the RestoreHealth command it gets stuck at 62.3%. EDIT: Seems to have downloaded bigger files to restore, but it completed successfully.
I also tried sfc /scannow but it failed first time (probably due to RPC fail as typical) but I ran it a second time and it says it fixed some corruption. Here is the CBS.log file.
CBS Log:
https://drive.google.com/file/d/1QzjTQl6...sp=sharing