Hello,
I am running Windows Server 2012 Standard on a HP Proliant DL380 Gen8 with internal Storage on a Smart Array p420i Controller.
This server has been in production since Nov 2011 as a Hyper-V Host.
Recently we began seeing the following events in the event logs copied at the end of this post. (disk 3 is the large volume where I store my .VHDs)
I believe they started when we started using Windows Server Backup, but I am not certain.
Most recently, last night, when we received these errors the Host Paused all Guest VMs.
I see others reporting this error on Windows 8.
But these are also people with individual drives.
HP Array diagnostics come back clean.
I've very concerned my new server may have disk corruption as a result of a 2012 bug.
Log Name: System
Source: disk
Date: 3/5/2013 11:22:23 PM
Event ID: 153
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LBHOST.lbpa.local
Description:
The IO operation at logical block address 1b5ec0 for Disk 3 was retried.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="disk" />
<EventID Qualifiers="32772">153</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-03-06T04:22:23.366596000Z" />
<EventRecordID>16599</EventRecordID>
<Channel>System</Channel>
<Computer>LBHOST.lbpa.local</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk3\DR49</Data>
<Data>1b5ec0</Data>
<Data>3</Data>
<Binary>0F01040003002C00000000009900048000000000000000000000000000000000000000000000000000020828</Binary>
</EventData>
</Event>
and
Log Name: System
Source: volsnap
Date: 3/5/2013 11:22:23 PM
Event ID: 27
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LBHOST.lbpa.local
Description:
The shadow copies of volume
\\?\Volume{bcb9c7f0-7c43-11e2-93f4-ac162d779bbf} were aborted during detection because a critical control file could not be opened.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="volsnap" />
<EventID Qualifiers="49158">27</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-03-06T04:22:23.366596000Z" />
<EventRecordID>16601</EventRecordID>
<Channel>System</Channel>
<Computer>LBHOST.lbpa.local</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\\?\Volume{bcb9c7f0-7c43-11e2-93f4-ac162d779bbf}</Data>
<Binary>0000000002003000000000001B0006C0050000000E0000C058000000000000000000000000000000</Binary>
</EventData>
</Event>
and
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 3/5/2013 11:22:23 PM
Event ID: 140
Task Category: None
Level: Warning
Keywords: (8)
User: SYSTEM
Computer: LBHOST.lbpa.local
Description:
The system failed to flush data to the transaction log. Corruption may occur in VolumeId:\\?\Volume{bcb9c7f0-7c43-11e2-93f4-ac162d779bbf}, DeviceName: \Device\HarddiskVolume95.
(A device which does not exist was specified.)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Ntfs" Guid="{3FF37A1C-A68D-4D6E-8C9B-F79E8B16C482}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000008</Keywords>
<TimeCreated SystemTime="2013-03-06T04:22:23.366596000Z" />
<EventRecordID>16604</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="456" />
<Channel>System</Channel>
<Computer>LBHOST.lbpa.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="VolumeId">\\?\Volume{bcb9c7f0-7c43-11e2-93f4-ac162d779bbf}</Data>
<Data Name="DeviceName">\Device\HarddiskVolume95</Data>
<Data Name="Error">0xc000000e</Data>
</EventData>
</Event>
followed by:
Log Name: System
Source: Ntfs
Date: 3/5/2013 11:22:39 PM
Event ID: 50
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LBHOST.lbpa.local
Description:
{Delayed Write Failed} Windows was unable to save all the data for the file . The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="32772">50</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-03-06T04:22:39.823576400Z" />
<EventRecordID>16661</EventRecordID>
<Channel>System</Channel>
<Computer>LBHOST.lbpa.local</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>
</Data>
<Binary>04000400020030000000000032000480000000006E0200C0000000000000000000000000000000006E0200C0</Binary>
</EventData>
</Event>
-Ryan Biddle-