When Windows 8.1 VM Host Runs Out of Disk Space…

When copying a large file in Windows 8.1 Parallels Virtual Machine, the host ran out of disk space…

image

We can see from the stack trace explorer was copying file at time of crash…

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQLw
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8007689692a, address which referenced memory

Debugging Details:
——————

READ_ADDRESS: unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
0000000000000000

CURRENT_IRQL:  2

FAULTING_IP:
nt!MiAddViewsForSection+22
fffff800`7689692a 488b01          mov     rax,qword ptr [rcx]

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  explorer.exe

ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre

TRAP_FRAME:  ffffd00021a6cd90 — (.trap 0xffffd00021a6cd90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffd00021a6cf88 rbx=0000000000000000 rcx=0000000000000000
rdx=000000000005b500 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8007689692a rsp=ffffd00021a6cf20 rbp=ffffe001f0f943d0
r8=fffff6d80022b000  r9=ffffd00021a6cfd0 r10=fffff6c000000000
r11=ffffd00021a6cf60 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!MiAddViewsForSection+0x22:
fffff800`7689692a 488b01          mov     rax,qword ptr [rcx] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff8007697dae9 to fffff80076971fa0

STACK_TEXT: 
ffffd000`21a6cc48 fffff800`7697dae9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd000`21a6cc50 fffff800`7697c33a : 00000000`00000000 00000000`00000000 fffff800`76b6b000 ffffd000`21a6cd90 : nt!KiBugCheckDispatch+0x69
ffffd000`21a6cd90 fffff800`7689692a : 00000000`00000200 00000000`00000004 00000000`0000002f ffffe001`f08a8770 : nt!KiPageFault+0x23a
ffffd000`21a6cf20 fffff800`768aff8f : 00000000`00000000 00000000`0005b500 00000000`00000000 ffffd000`21a6cfd0 : nt!MiAddViewsForSection+0x22
ffffd000`21a6cf90 fffff800`768ae0d7 : fffff800`7681e000 00000000`00000001 00000000`00000001 fffff800`76b04830 : nt!MmMapViewInSystemCache+0x113
ffffd000`21a6d100 fffff800`7689f6ff : 00000000`00000001 ffffe001`eeae2010 00000000`00000000 00000000`00000000 : nt!CcGetVacbMiss+0xef
ffffd000`21a6d190 fffff800`7689bd13 : 00000000`00000000 00000000`5b500000 ffffd000`21a6d298 ffffd000`21a6d26c : nt!CcGetVirtualAddress+0x36f
ffffd000`21a6d230 fffff800`7689b313 : ffffe001`eeae2010 00000000`37782040 ffffd000`21a6d388 00000000`00100000 : nt!CcMapAndCopyInToCache+0x157
ffffd000`21a6d320 fffff800`769e07e9 : ffffe001`f14705c0 ffffe001`f14705c0 00000000`5b500000 00000000`5b500000 : nt!CcCopyWriteEx+0x1bb
ffffd000`21a6d3c0 fffff800`8922d393 : ffffc000`805b3480 ffffe001`f14705c0 fffff800`89230500 00000000`5b500000 : nt!CcCopyWrite+0x19
ffffd000`21a6d400 fffff800`8920a841 : ffffe001`f148ea80 ffffe001`f14705c0 ffffe001`ef2ec000 00000000`00000000 : prl_fs+0x2d393
ffffd000`21a6d5d0 fffff800`8921ebb1 : fffff800`892112e0 ffffe001`f0659600 ffffe001`f14705c0 ffffe001`ef2ec040 : prl_fs+0xa841
ffffd000`21a6d6c0 fffff800`89204b77 : ffffe001`f14705c0 ffffe001`f14705c0 ffffe001`f0659680 ffffe001`f0659680 : prl_fs+0x1ebb1
ffffd000`21a6d6f0 fffff800`88c083cd : ffffe001`f14705c0 00000000`00000000 fffff800`88c05010 ffffe001`ee36b8a0 : prl_fs+0x4b77
ffffd000`21a6d720 fffff800`8861ccf8 : ffffd000`21a6d860 00000000`00000000 ffffc000`78ab6770 00000000`00000000 : mup!MupFsdIrpPassThrough+0x1ee
ffffd000`21a6d7a0 fffff800`8861b0b6 : ffffe001`eeea7df0 ffffe001`f0659680 ffffe001`f14705c0 fffff800`8861fcdf : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x258
ffffd000`21a6d840 fffff800`76c238ec : 00000000`00000001 ffffd000`21a6d921 ffffe001`f0659680 fffff800`88645ac1 : fltmgr!FltpDispatch+0xb6
ffffd000`21a6d8a0 fffff800`76c23298 : ffffe001`f0659604 ffffe001`f0659680 ffffe001`f0d4afe0 ffffe001`f0659680 : nt!IopSynchronousServiceTail+0x16c
ffffd000`21a6d970 fffff800`7697d7b3 : ffffe001`f1ad5801 00000000`00003918 00000000`00000000 00000000`224ffd90 : nt!NtWriteFile+0x750
ffffd000`21a6da90 00007ff8`68f6ac0a : 00007ff8`66363979 00000000`224ffd90 00000000`00000001 00000000`ffffffff : nt!KiSystemServiceCopyEnd+0x13
00000000`3700cfc8 00007ff8`66363979 : 00000000`224ffd90 00000000`00000001 00000000`ffffffff 00000000`224ffd60 : ntdll!NtWriteFile+0xa
00000000`3700cfd0 00007ff8`66387e0e : 00000000`5b500000 00000000`5b500000 00000000`00000008 00000000`00000000 : KERNELBASE!WriteFile+0x10c
00000000`3700d050 00007ff8`663861eb : 00000000`00004001 00000000`00000002 00000000`48200000 00000000`00000000 : KERNELBASE!BaseCopyStream+0x9c8
00000000`3700df00 00007ff8`663df751 : 00000000`229ad198 00000000`3700e508 00000000`000002a8 00007ff8`66e42c2d : KERNELBASE!BasepCopyFileExW+0x74f
00000000`3700e4e0 00007ff8`66c99a8e : 00000000`2feb8b50 00000000`80070bea 00000000`00000000 ffffffff`ffffffff : KERNELBASE!CopyFile2+0xd9
00000000`3700e5a0 00007ff8`6706e2be : 00000000`00000000 00000000`00000000 00000000`00000000 00007ff8`66c84ac9 : SHELL32!CFSTransfer::_PerformCopyFileWithRetry+0xde
00000000`3700e650 00007ff8`66c84317 : 00000000`3700e9e0 00000000`00000000 00000000`2fe61228 00000000`229ae000 : SHELL32!CFSTransfer::CopyItem+0x23a
00000000`3700e6c0 00007ff8`66c840f8 : 00000000`223116c0 00000000`226f26f0 00000000`226f26f0 00000000`3700e860 : SHELL32!CCopyOperation::_CreateDestinationOrCopyItemWithRetry+0x9b
00000000`3700e760 00007ff8`66a66bf9 : 00000000`22256680 00000000`12ca0c40 00000000`226f26f0 00000000`12ca0c40 : SHELL32!CCopyOperation::Do+0x134
00000000`3700ea40 00007ff8`66a67806 : 00000000`12ca0c40 00000000`12ca0c40 00000000`3700eb40 00000000`226f26f0 : SHELL32!CCopyWorkItem::_DoOperation+0x49
00000000`3700eab0 00007ff8`66a697db : 00000000`12ca0c40 00000000`12ca0c40 00000000`3700eef0 00000000`00000000 : SHELL32!CCopyWorkItem::_SetupAndPerformOp+0x23a
00000000`3700edf0 00007ff8`66a69645 : 00000000`14a2e780 00000000`14a2e780 00000000`14a2e780 00000000`14a2e780 : SHELL32!CCopyWorkItem::ProcessWorkItem+0x14b
00000000`3700f0b0 00007ff8`66a67d6f : 00000000`2fe61228 00000000`2fe61228 00000000`00000000 00000000`14a2e780 : SHELL32!CRecursiveFolderOperation::Do+0x195
00000000`3700f150 00007ff8`66a6919c : 00000000`3022e9f0 00000000`3700f259 00000000`3022eb28 00000000`00000000 : SHELL32!CFileOperation::_EnumRootDo+0x23b
00000000`3700f1f0 00007ff8`66a6f212 : 00000000`00000000 00000000`00000000 00000000`3022e9f0 00000000`3022ea00 : SHELL32!CFileOperation::PrepareAndDoOperations+0x19c
00000000`3700f2c0 00007ff8`6707f37e : 00000000`222e2f28 00000000`00000001 00000000`00000000 00000000`144f7430 : SHELL32!CFileOperation::PerformOperations+0xd2
00000000`3700f310 00007ff8`6707d96e : 00000000`226f03f0 00000000`226f03f0 00000000`00000000 00000000`144f7430 : SHELL32!CFSDropTargetHelper::_MoveCopyHIDA+0x232
00000000`3700f3c0 00007ff8`6707ff2a : 00000000`00000052 00000000`144f7430 00000000`00000000 00000000`00000048 : SHELL32!CFSDropTargetHelper::_Drop+0x2be
00000000`3700f690 00007ff8`64bd8023 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`00000000 : SHELL32!CFSDropTargetHelper::s_DoDropThreadProc+0x3e
00000000`3700f6c0 00007ff8`68c9168d : 00000000`24a3c480 00000000`00000000 00000000`00000000 00000000`00000000 : SHCORE!Microsoft::WRL::FtmBase::MarshalInterface+0x17b
00000000`3700f7e0 00007ff8`68f44629 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0xd
00000000`3700f810 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d

About chentiangemalc

specializes in end-user computing technologies. disclaimer 1) use at your own risk. test any solution in your environment. if you do not understand the impact/consequences of what you're doing please stop, and ask advice from somebody who does. 2) views are my own at the time of posting and do not necessarily represent my current view or the view of my employer and family members/relatives. 3) over the years Microsoft/Citrix/VMWare have given me a few free shirts, pens, paper notebooks/etc. despite these gifts i will try to remain unbiased.
This entry was posted in WinDbg and tagged . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s