failover cluster 2022 node hyper-v-vmswitch event log

[lwegner_ecs7451]

Hi guys,

somebody got a hint at this? it's spamming my event log on the nodes of my windows server 2022 failover cluster:

Microsoft-Windows-Hyper-V-VmSwitch/Operational

Ioctl End

ioctlCode: 0xD1C,
delta (100 ns): 146,
ntStatus: 0x80000005(NT=Pufferüberlauf)

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Hyper-V-VmSwitch" Guid="{67dc0d66-3695-47c0-9642-33f76f7bd7ad}" />
<EventID>0</EventID>
<Version>0</Version>
<Level>5</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2023-06-13T07:49:47.7426025Z" />
<EventRecordID>20369025</EventRecordID>
<Correlation />
<Execution ProcessID="2952" ThreadID="3496" />
<Channel>Microsoft-Windows-Hyper-V-VmSwitch-Operational</Channel>
<Computer>CNode1-SRV.pcad.local</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData Name="Ioctl End">
<Data Name="ioctlCode">0xd0d</Data>
<Data Name="delta (100 ns)">84</Data>
<Data Name="ntStatus">2147483653</Data>
</EventData>
- <RenderingInfo Culture="zxx">
<Level>5</Level>
<Opcode>0</Opcode>
<Task>Ioctl End</Task>
<Channel>16</Channel>
<Provider>Microsoft.Windows.Hyper-V.VmSwitch</Provider>
- <Keywords>
<Keyword>0</Keyword>
</Keywords>
<Message>Ioctl End ioctlCode: 0xD0D, delta (100 ns): 84, ntStatus: 0x80000005(NT=Pufferüberlauf)</Message>
</RenderingInfo>
</Event>

[#2]

@lwegner_ecs7451, I hope you're having an amazing night tonight. The event log entry you provided indicates an issue related to the Hyper-V VmSwitch on your Windows Server 2022 Failover Cluster. Specifically, it's an "Ioctl End" event with some error details:

• ioctlCode: 0xD1C
• delta (100 ns): 146
• ntStatus: 0x80000005 (NT=Pufferüberlauf)

The error code "0x80000005" with the description "Pufferüberlauf" indicates a buffer overflow in German. A buffer overflow is a type of software vulnerability that occurs when more data is written into a buffer (temporary data storage) than it can hold, leading to potential memory corruption and crashes. This error message suggests that there might be a problem with the VmSwitch driver or the interaction between the VmSwitch and the underlying hardware or network components.

To troubleshoot and resolve this issue, you can try the following steps:

1. Check for Updates: Ensure that your Windows Server 2022 and Hyper-V components are up to date with the latest updates and patches. Microsoft often releases updates to fix known issues.

2. Check Hardware and Network Configuration: Verify that your hardware, network adapters, and switch configurations are compatible and meet the requirements for Windows Server 2022 and Hyper-V.

3. Analyze Network Traffic: Monitor the network traffic on the affected node(s) to see if there are any unusual patterns or spikes that could be causing the buffer overflow.

4. Review Hyper-V Settings: Check the settings of your Hyper-V virtual switches to ensure they are configured correctly and aren't causing any conflicts.

5. Review Other Event Logs: Look for additional related event log entries that might provide more context or information about the issue.

6. Contact Microsoft Support: If the problem persists, consider contacting Microsoft Support for further assistance. They might be able to provide specific guidance based on the error details and system configuration.

Please keep in mind that diagnosing and resolving system issues like this can be complex, and it's essential to handle server and network configurations with care to avoid any unintended consequences. Goodnight 

Elgin Tarot Resolutions
Microsoft Tech Cummuntiy | Answering Your Questions

"We are Uniting the World, Unveiling Destiny's Path "