jag har gjort det på alla 3 dmp filer nu och tror att det beror på nvata.sys
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 806e8d04, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 00000004
CURRENT_IRQL: 2
FAULTING_IP:
hal!HalPutScatterGatherList+a
806e8d04 8b4104 mov eax,dword ptr [ecx+4]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: Idle
LAST_CONTROL_TRANSFER: from ba5dd682 to 806e8d04
STACK_TEXT:
bacd7ca4 ba5dd682 8a5cb948 00000000 00000001 hal!HalPutScatterGatherList+0xa
WARNING: Stack unwind information not available. Following frames may be wrong.
bacd7cc4 ba5ddb9c 8a51e0e8 88041390 8a69152c nvata+0x3682
bacd7ce8 ba6b8d54 8a51e1dc 8a51e0e8 00000000 nvata+0x3b9c
bacd7d28 80545e6f 8a51e1dc 8a51e0e8 00000000 sptd+0x11d54
bacd7d50 80545d54 00000000 0000000e 00020012 nt!KiRetireDpcList+0x61
bacd7d54 00000000 0000000e 00020012 00000400 nt!KiIdleLoop+0x28
STACK_COMMAND: kb
FOLLOWUP_IP:
nvata+3682
ba5dd682 ?? ???
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nvata+3682
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nvata
IMAGE_NAME: nvata.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4456a751
FAILURE_BUCKET_ID: 0xA_nvata+3682
BUCKET_ID: 0xA_nvata+3682
Followup: MachineOwner
---------