: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* PAGE_FAULT_IN_NONPAGED_AREA (50) Invalid system memory was referenced. This cannot be protected by try-except. Typically the address is just plain bad or it is pointing at freed memory. Arguments: Arg1: ffffd18ec2b47580, memory referenced. Arg2: 0000000000000011, X64: bit 0 set if the fault was due to a not-present PTE. bit 1 is set if the fault was due to a write, clear if a read. bit 3 is set if the processor decided the fault was due to a corrupted PTE. bit 4 is set if the fault was due to attempted execute of a no-execute PTE. - ARM64: bit 1 is set if the fault was due to a write, clear if a read. bit 3 is set if the fault was due to attempted execute of a no-execute PTE. Arg3: ffffd18ec2b47580, If non-zero, the instruction address which referenced the bad memory address. Arg4: 0000000000000002, (reserved) Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : AV.PTE Value: Valid Key : AV.Type Value: Execute Key : Analysis.CPU.mSec Value: 359 Key : Analysis.Elapsed.mSec Value: 916 Key : Analysis.IO.Other.Mb Value: 0 Key : Analysis.IO.Read.Mb Value: 1 Key : Analysis.IO.Write.Mb Value: 0 Key : Analysis.Init.CPU.mSec Value: 62 Key : Analysis.Init.Elapsed.mSec Value: 5207 Key : Analysis.Memory.CommitPeak.Mb Value: 115 Key : Analysis.Version.DbgEng Value: 10.0.27725.1000 Key : Analysis.Version.Description Value: 10.2408.27.01 amd64fre Key : Analysis.Version.Ext Value: 1.2408.27.1 Key : Bugcheck.Code.KiBugCheckData Value: 0x50 Key : Bugcheck.Code.LegacyAPI Value: 0x50 Key : Bugcheck.Code.TargetModel Value: 0x50 Key : Dump.Attributes.AsUlong Value: 1800 Key : Dump.Attributes.DiagDataWrittenToHeader Value: 1 Key : Dump.Attributes.ErrorCode Value: 0 Key : Dump.Attributes.LastLine Value: Dump completed successfully. Key : Dump.Attributes.ProgressPercentage Value: 100 Key : Failure.Bucket Value: AV_X_(null)_nt!MiSystemFault Key : Failure.Hash Value: {49578414-34a9-c6dc-c795-b8c5552d5975} Key : Hypervisor.Enlightenments.ValueHex Value: 1417df84 Key : Hypervisor.Flags.AnyHypervisorPresent Value: 1 Key : Hypervisor.Flags.ApicEnlightened Value: 0 Key : Hypervisor.Flags.ApicVirtualizationAvailable Value: 1 Key : Hypervisor.Flags.AsyncMemoryHint Value: 0 Key : Hypervisor.Flags.CoreSchedulerRequested Value: 0 Key : Hypervisor.Flags.CpuManager Value: 1 Key : Hypervisor.Flags.DeprecateAutoEoi Value: 1 Key : Hypervisor.Flags.DynamicCpuDisabled Value: 1 Key : Hypervisor.Flags.Epf Value: 0 Key : Hypervisor.Flags.ExtendedProcessorMasks Value: 1 Key : Hypervisor.Flags.HardwareMbecAvailable Value: 1 Key : Hypervisor.Flags.MaxBankNumber Value: 0 Key : Hypervisor.Flags.MemoryZeroingControl Value: 0 Key : Hypervisor.Flags.NoExtendedRangeFlush Value: 0 Key : Hypervisor.Flags.NoNonArchCoreSharing Value: 1 Key : Hypervisor.Flags.Phase0InitDone Value: 1 Key : Hypervisor.Flags.PowerSchedulerQos Value: 0 Key : Hypervisor.Flags.RootScheduler Value: 0 Key : Hypervisor.Flags.SynicAvailable Value: 1 Key : Hypervisor.Flags.UseQpcBias Value: 0 Key : Hypervisor.Flags.Value Value: 21631230 Key : Hypervisor.Flags.ValueHex Value: 14a10fe Key : Hypervisor.Flags.VpAssistPage Value: 1 Key : Hypervisor.Flags.VsmAvailable Value: 1 Key : Hypervisor.RootFlags.AccessStats Value: 1 Key : Hypervisor.RootFlags.CrashdumpEnlightened Value: 1 Key : Hypervisor.RootFlags.CreateVirtualProcessor Value: 1 Key : Hypervisor.RootFlags.DisableHyperthreading Value: 0 Key : Hypervisor.RootFlags.HostTimelineSync Value: 1 Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled Value: 0 Key : Hypervisor.RootFlags.IsHyperV Value: 1 Key : Hypervisor.RootFlags.LivedumpEnlightened Value: 1 Key : Hypervisor.RootFlags.MapDeviceInterrupt Value: 1 Key : Hypervisor.RootFlags.MceEnlightened Value: 1 Key : Hypervisor.RootFlags.Nested Value: 0 Key : Hypervisor.RootFlags.StartLogicalProcessor Value: 1 Key : Hypervisor.RootFlags.Value Value: 1015 Key : Hypervisor.RootFlags.ValueHex Value: 3f7 Key : SecureKernel.HalpHvciEnabled Value: 1 Key : WER.OS.Branch Value: ni_release Key : WER.OS.Version Value: 10.0.22621.1 BUGCHECK_CODE: 50 BUGCHECK_P1: ffffd18ec2b47580 BUGCHECK_P2: 11 BUGCHECK_P3: ffffd18ec2b47580 BUGCHECK_P4: 2 FILE_IN_CAB: MEMORY.DMP TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b DUMP_FILE_ATTRIBUTES: 0x1800 FAULTING_THREAD: ffffe68a976af0c0 WRITE_ADDRESS: unable to get nt!PspSessionIdBitmap ffffd18ec2b47580 MM_INTERNAL_CODE: 2 BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) BLACKBOXWINLOGON: 1 PROCESS_NAME: iCloudHome.exe TRAP_FRAME: ffffd18ec2b47300 -- (.trap 0xffffd18ec2b47300) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000000022 rbx=0000000000000000 rcx=ffffd283c2df3010 rdx=000000a6029308e8 rsi=0000000000000000 rdi=0000000000000000 rip=ffffd18ec2b47580 rsp=ffffd18ec2b47490 rbp=fffff806bf0b0690 r8=ffffd18ec2b476a0 r9=ffffd283c2df3010 r10=0000000000000000 r11=ffffd18ec2b474b0 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na po nc ffffd18e`c2b47580 0010 add byte ptr [rax],dl ds:00000000`00000022=?? Resetting default scope STACK_TEXT: ffffd18e`c2b470d8 fffff806`7d67376c : 00000000`00000050 ffffd18e`c2b47580 00000000`00000011 ffffd18e`c2b47300 : nt!KeBugCheckEx ffffd18e`c2b470e0 fffff806`7d46c19c : 00000000`00000003 00000000`00000011 00000000`00000000 ffffd18e`c2b47580 : nt!MiSystemFault+0x23947c ffffd18e`c2b471e0 fffff806`7d625f7e : 00000000`00000000 00000000`00000000 ffffd283`c2df3010 00000000`00000000 : nt!MmAccessFault+0x29c ffffd18e`c2b47300 ffffd18e`c2b47580 : fffff806`bf0b0690 00000000`00000000 ffff0dea`37d2fa92 ffffcf0f`79e4088d : nt!KiPageFault+0x37e ffffd18e`c2b47490 fffff806`bf0b0690 : 00000000`00000000 ffff0dea`37d2fa92 ffffcf0f`79e4088d fffff806`bf0b0690 : 0xffffd18e`c2b47580 ffffd18e`c2b47498 00000000`00000000 : ffff0dea`37d2fa92 ffffcf0f`79e4088d fffff806`bf0b0690 00000000`00000000 : 0xfffff806`bf0b0690 SYMBOL_NAME: nt!MiSystemFault+23947c MODULE_NAME: nt STACK_COMMAND: .process /r /p 0xffffe68a96cc10c0; .thread 0xffffe68a976af0c0 ; kb IMAGE_NAME: ntkrnlmp.exe BUCKET_ID_FUNC_OFFSET: 23947c FAILURE_BUCKET_ID: AV_X_(null)_nt!MiSystemFault OS_VERSION: 10.0.22621.1 BUILDLAB_STR: ni_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {49578414-34a9-c6dc-c795-b8c5552d5975} Followup: MachineOwner ---------