We're taking on new cases now · Weekdays, 9am–5:30pm Need it back quickly? Call 0800 6890668
MKDR Milton Keynes Data Recovery 0800 6890668 Get it diagnosed
MKDR / Specialist jobs / Synology & NAS recovery

Specialist work · Synology NAS

“Volume Crashed” means DSM gave up. Your files have not moved an inch.

Behind that one red banner sit three separate problems: a RAID member that has vanished, LVM metadata that no longer lines up, or a btrfs tree that has stopped making sense. DSM reports the lot in the same words. Each wants a different fix, and the wrong fix costs you data. So until the disks have been read properly, do two things: switch the unit off, and ignore Repair.

No data back, no fee — most jobs Free diagnosis, one fixed quote Send it by post from anywhere in Buckinghamshire

Run the problem past an engineer
0800 6890668

What those symptoms actually mean.

No page for your town? Try the fault-finder →
The problemWhat's behind itFirst move
DSM is reporting Volume CrashedOne message, three possible culprits: the RAID, LVM or btrfsSwitch it off; leave Repair alone
The Storage Pool reads DegradedA drive has dropped out; the box still serves files, unprotectedTime is no longer on your side
The DiskStation will not power upNothing has moved; your files live on the drives, not in the chassisAbout the easiest case we get
The rebuild onto a replacement drive stalledAll that heavy reading exposed a second worn memberStop the rebuild; clone first
Windows wants to format the NAS drivesNormal enough: Windows cannot read a Linux volumeAlways decline
Shares gone, a ransom note in their placeOne of the strains that scans for exposed NAS unitsPhotograph it, power off, then read our ransomware page
Sending it by post: send it in on a tracked, insured service to our secure intake lab — the return postage is ours — or ring first and an engineer will talk you through packing it. Every posting step is set out on the enquiry page.

SHR up close, and why most software finds nothing.

Sliced, not wholeSHR cuts each disk into chunks measured against the smallest drive present, which is how mixed sizes avoid wasted space. Neat idea, with one consequence: your single volume is really spread over several arrays.
Standard parts, odd arrangementNothing here is proprietary: mdadm over the slice sets, LVM tying those into a pool, ext4 or btrfs on top. Recovering it takes no Synology hardware — only the discipline to take the layers apart in order.
Why single-array tools failFour different-sized disks in SHR-1 can leave three or four mdadm arrays underneath, all feeding one LVM pool. A program looking for a single flat array has nothing recognisable to grab hold of.
Two repairs we never runDSM's Repair, which during a failure can drop good members and write over metadata; and btrfs repair, whose own documentation warns that it may finish off a damaged tree. Neither gets used here. Everything is put back read-only from the clones.

How the recovery runs, stage by stage.

See the newest cases →
01

Logged in, checked at no charge Free

Every item gets its own case number on the day it lands here. An engineer traces the fault, gives you a plain assessment of what is realistically recoverable, and puts one fixed price in writing. The diagnosis is free, you are under no obligation, and chargeable work starts only when you say go.

No charge to diagnoseOne written quote, fixedNo commitment
02

Clone the drives, change nothing

Nothing else happens until every disk has a sector-mapped clone. The unit stays powered off throughout, so no rebuild can start itself and the earlier btrfs roots remain exactly as they were.

Imaged one by oneEarlier tree roots kept
03

Take the stack apart in order

Everything runs on the clones: slices mapped first, then each mdadm array reassembled, then LVM read out, and last the btrfs or ext4 volume mounted read-only. The sequence is not optional, and we follow it.

Slices, then arrays, then volumeRead-only throughout
04

Fix whichever layer failed

RAID, LVM or btrfs — the repair goes onto the rebuilt copy and nowhere near your drives. If the live btrfs tree is beyond saving, we fall back to an earlier sound generation, then open and check every share.

Failed layer repairedAll shares checked
05

Played back, checked, handed back

You get the full list of recovered files first, and nothing is charged until you approve it. Data goes back on fresh media, return postage paid, and the job stays open on our side until you confirm every file opens at your end.

You sign off the file listCopied onto unused mediaReturn post is paid by us

What the imager checks first

  • The warning tells you nothing useful — Volume Crashed fits a shredded btrfs tree, missing LVM metadata or a dead mdadm member equally well. Reading the layers off the disks is the only way to tell.
  • Copy-on-write leaves you a way back — btrfs writes new blocks instead of overwriting old ones, so earlier tree roots usually still exist. Rolling back a generation often brings up a volume the current tree called lost.
  • Repair is the button that costs people data — pressed mid-failure it can throw out good members and write over the evidence a recovery needs. Sound on a healthy pool; disastrous on a crashed one.
  • Ransomware picks the exposed, not the unlucky — the big NAS campaigns have all gone after one thing: units reachable from the internet with old firmware on them. Get yours off the public web and keep DSM patched; that shuts the front door.

This is the detail that settles most cases: put unequal drives in an SHR pool and there is no single array to find. What exists is a set of mdadm arrays built on slices of each disk, tied into one filesystem by LVM. Tackle that in the wrong sequence and you see nothing at all; unpick it properly and a 'crashed' volume is usually complete.

Lately in the casebook.

MK · MKD-2026-4857CONFIRMED ✓

A DS box with four odd-sized disks, brought down by its own cleverness

Two 8TB disks, two 4TB, one member down — the DSM rebuild ran overnight and finished on Volume Crashed. Inside were three distinct mdadm arrays: two healthy, the third degraded but usable. We rebuilt them off the box, wound the btrfs tree back a generation, and every share came back intact.

All shares recovered5 days on the workbench

While it is still in your hands.

Worth doing

  • Shut the unit down the moment Crashed or Degraded shows
  • Mark up the bay position of every drive you remove
  • Post the disks exactly as they are, or the whole NAS
  • Tell us the volume type if you know it — SHR or RAID

Best avoided

  • Touch Repair on a pool that is degraded or crashed
  • Run btrfs repair commands against the original disks
  • Let Windows initialise the drives when it asks
  • Shuffle drives between bays to find the faulty one

The questions we get asked most.

'Volume Crashed' in DSM — is the data lost?

Rarely. All 'Crashed' tells you is that DSM could not put the stack back together: a RAID member missing, LVM metadata broken, or a btrfs tree corrupted. Three separate faults, most of them recoverable, and the warning cannot tell them apart. Leave the box off and nothing is closed off.

Is SHR locked to Synology — must I buy another NAS to read it?

No. Take the badge off and SHR is plain Linux underneath: mdadm software RAID over partition slices, LVM pooling those, and btrfs or ext4 laid on top. With clean images of the drives it comes back together on a normal workstation. Trouble starts only when a tool — or an engineer — assumes a single flat array.

Is it safe to let DSM rebuild to a fresh disk?

Only after each member disk has an image behind it. A rebuild pulls every surviving drive from one end to the other, which is the likeliest single way to lose a second one, and it can overwrite filesystem structures that a recovery still has to read. Take the images first and the rebuild stops being a risk.

Ransomware hit the NAS — is there anything to save?

Usually some, now and then everything — it depends which strain hit you. NAS boxes exposed to the internet have been a target for years, so we look at snapshots, replication copies and whatever survives in free space. Photograph the ransom note, shut the unit down, then work through the options on the ransomware page.

Leave it switched off until it reaches us.

Switch a failing device on again and you lose a little more. Open a case before you do — the diagnosis is free, whatever it finds.

0800 6890668