Server 2003, Backup Exec 10d crashes during backup.

Posted on 2007-09-28
Last Modified: 2013-12-01
Server 2003 Standard SP2 crashing during backup. See minidump below. Always happens during backup and causes the device and media service to hang. Server crashes on restart. Backup exec 10d SP4 installed and remote agents pushed out to remote servers since SP'ing. Fails at random points during the backup.

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arg1: ffffffe0, memory referenced
Arg2: d0000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8082f61a, address which referenced memory

Debugging Details:

READ_ADDRESS:  ffffffe0


8082f61a 8b51e0          mov     edx,dword ptr [ecx-20h]





TRAP_FRAME:  f792ac84 -- (.trap fffffffff792ac84)
.trap fffffffff792ac84
ErrCode = 00000000
eax=00000001 ebx=00000000 ecx=00000000 edx=00000001 esi=ab4a8000 edi=00000004
eip=8082f61a esp=f792acf8 ebp=f792ad08 iopl=0         nv up ei pl nz ac po cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010213
8082f61a 8b51e0          mov     edx,dword ptr [ecx-20h] ds:0023:ffffffe0=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 8082f61a to 80836de5

f792ac84 8082f61a badb0d00 00000001 f792acc0 nt!KiTrap0E+0x2a7
f792ad08 8082f5e3 808b7508 808b7500 8082f458 nt!ExpScanGeneralLookasideList+0x22
f792ad14 8082f458 00000000 8a782020 00000000 nt!ExAdjustLookasideDepth+0x32
f792adac 80920833 00000000 00000000 00000000 nt!KeBalanceSetManager+0xc5
f792addc 8083fe9f 8082f3a8 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


8082f61a 8b51e0          mov     edx,dword ptr [ecx-20h]


FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  ntkrnlmp.exe


SYMBOL_NAME:  nt!ExpScanGeneralLookasideList+22

FAILURE_BUCKET_ID:  0xA_nt!ExpScanGeneralLookasideList+22

BUCKET_ID:  0xA_nt!ExpScanGeneralLookasideList+22

Followup: MachineOwner

eax=f772f13c ebx=d0000002 ecx=00000001 edx=40000000 esi=f772f120 edi=ffffffe0
eip=80836de5 esp=f792ac6c ebp=f792ac84 iopl=0         nv up ei ng nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286
80836de5 833d40ee8a8000  cmp     dword ptr [nt!KiFreezeFlag (808aee40)],0 ds:0023:808aee40=????????
ChildEBP RetAddr  Args to Child              
f792ac84 8082f61a badb0d00 00000001 f792acc0 nt!KiTrap0E+0x2a7 (FPO: [0,0] TrapFrame @ f792ac84)
f792ad08 8082f5e3 808b7508 808b7500 8082f458 nt!ExpScanGeneralLookasideList+0x22 (FPO: [Non-Fpo])
f792ad14 8082f458 00000000 8a782020 00000000 nt!ExAdjustLookasideDepth+0x32 (FPO: [0,0,0])
f792adac 80920833 00000000 00000000 00000000 nt!KeBalanceSetManager+0xc5 (FPO: [Non-Fpo])
f792addc 8083fe9f 8082f3a8 00000000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start    end        module name
80800000 80a7a000   nt       ntkrnlmp.exe Mon Mar 05 13:02:02 2007 (45EC14CA)
80a7a000 80aa6000   hal      halmacpi.dll Sat Feb 17 05:48:26 2007 (45D6972A)
ba193000 ba1a8000   Cdfs     Cdfs.SYS     Sat Feb 17 06:27:08 2007 (45D6A03C)
ba1a8000 ba1b9000   Fips     Fips.SYS     Sat Feb 17 06:26:33 2007 (45D6A019)
ba1b9000 ba22f000   mrxsmb   mrxsmb.sys   Sat Feb 17 06:28:15 2007 (45D6A07F)
ba257000 ba287000   rdbss    rdbss.sys    Sat Feb 17 06:27:37 2007 (45D6A059)
ba287000 ba29a900   savonaccesscontrol savonaccesscontrol.sys Thu Jan 05 15:43:55 2006 (43BD3EBB)
ba29b000 ba2c5000   afd      afd.sys      Sat Feb 17 06:28:16 2007 (45D6A080)
ba2e3000 ba314000   netbt    netbt.sys    Sat Feb 17 06:28:57 2007 (45D6A0A9)
ba314000 ba3a4000   tcpip    tcpip.sys    Sat Feb 17 06:28:05 2007 (45D6A075)
ba3a4000 ba3bd000   ipsec    ipsec.sys    Sat Feb 17 06:29:28 2007 (45D6A0C8)
ba4e9000 ba4f3000   dump_diskdump dump_diskdump.sys Sat Feb 17 06:07:44 2007 (45D69BB0)
ba5a9000 ba5be000   usbhub   usbhub.sys   Sat Feb 17 06:13:05 2007 (45D69CF1)
ba5e6000 ba5fe420   st3wolf  st3wolf.sys  Sun Apr 27 12:43:05 2003 (3EABC249)
ba5ff000 ba65e000   update   update.sys   Mon May 28 13:15:16 2007 (465AC7D4)
ba686000 ba6bd000   rdpdr    rdpdr.sys    Sat Feb 17 05:51:00 2007 (45D697C4)
ba6bd000 ba713000   wlbs     wlbs.sys     Sat Feb 17 06:27:46 2007 (45D6A062)
ba713000 ba725000   raspptp  raspptp.sys  Sat Feb 17 06:29:20 2007 (45D6A0C0)
ba725000 ba73e000   ndiswan  ndiswan.sys  Sat Feb 17 06:29:22 2007 (45D6A0C2)
ba73e000 ba752000   rasl2tp  rasl2tp.sys  Sat Feb 17 06:29:02 2007 (45D6A0AE)
ba7f2000 ba819000   ks       ks.sys       Sat Feb 17 06:30:40 2007 (45D6A110)
ba819000 ba82d000   redbook  redbook.sys  Sat Feb 17 06:07:26 2007 (45D69B9E)
ba82d000 ba842000   cdrom    cdrom.sys    Sat Feb 17 06:07:48 2007 (45D69BB4)
ba842000 ba857000   serial   serial.sys   Sat Feb 17 06:06:46 2007 (45D69B76)
ba857000 ba86f000   parport  parport.sys  Sat Feb 17 06:06:42 2007 (45D69B72)
ba887000 ba89a000   i8042prt i8042prt.sys Sat Feb 17 06:30:40 2007 (45D6A110)
ba89a000 ba8e6000   cpqasm2  cpqasm2.sys  Tue May 18 18:59:39 2004 (40AA4F0B)
ba8e6000 ba902000   VIDEOPRT VIDEOPRT.SYS Sat Feb 17 06:10:30 2007 (45D69C56)
ba902000 ba955d80   ati2mpad ati2mpad.sys Fri Jul 19 02:13:20 2002 (3D3767B0)
ba956000 ba980000   USBPORT  USBPORT.SYS  Sat Feb 17 06:12:59 2007 (45D69CEB)
ba980000 ba99ee80   q57xp32  q57xp32.sys  Thu Dec 02 00:55:18 2004 (41AE67F6)
bad2d000 bad35000   RDPCDD   RDPCDD.sys   Tue Mar 25 07:03:05 2003 (3E7FFF29)
bad35000 bad3d000   mnmdd    mnmdd.SYS    Tue Mar 25 07:07:53 2003 (3E800049)
bad3d000 bad44000   Beep     Beep.SYS     Tue Mar 25 07:03:04 2003 (3E7FFF28)
bad45000 bad4c000   Null     Null.SYS     Tue Mar 25 07:03:05 2003 (3E7FFF29)
bad4d000 bad55000   Fs_Rec   Fs_Rec.SYS   Tue Mar 25 07:08:36 2003 (3E800074)
bad75000 bad7d000   audstub  audstub.sys  Tue Mar 25 07:09:12 2003 (3E800098)
f7097000 f70a2000   ptilink  ptilink.sys  Sat Feb 17 06:06:38 2007 (45D69B6E)
f70a7000 f70b1000   mouclass mouclass.sys Tue Mar 25 07:03:09 2003 (3E7FFF2D)
f70d7000 f70e4000   netbios  netbios.sys  Sat Feb 17 05:58:29 2007 (45D69985)
f70e7000 f70f4580   CPQCISSE CPQCISSE.sys Thu Mar 11 21:50:26 2004 (4050DF22)
f70f7000 f7101000   dwvkbd   dwvkbd.sys   Wed Apr 11 22:23:28 2007 (461D51D0)
f7107000 f7113000   USBSTOR  USBSTOR.SYS  Sat Feb 17 06:13:05 2007 (45D69CF1)
f7117000 f7120000   mssmbios mssmbios.sys Sat Feb 17 05:59:12 2007 (45D699B0)
f7127000 f7136000   raspppoe raspppoe.sys Sat Feb 17 05:59:23 2007 (45D699BB)
f71cf000 f71ee000   Mup      Mup.sys      Sat Feb 17 06:27:41 2007 (45D6A05D)
f71ee000 f722d000   NDIS     NDIS.sys     Sat Feb 17 06:28:49 2007 (45D6A0A1)
f722d000 f72c2000   Ntfs     Ntfs.sys     Sat Feb 17 06:27:23 2007 (45D6A04B)
f72c2000 f72e8000   KSecDD   KSecDD.sys   Sat Feb 17 05:46:32 2007 (45D696B8)
f72e8000 f730d000   fltmgr   fltmgr.sys   Sat Feb 17 05:51:08 2007 (45D697CC)
f730d000 f7320000   CLASSPNP CLASSPNP.SYS Sat Feb 17 06:28:16 2007 (45D6A080)
f7320000 f733b000   adpu160m adpu160m.sys Mon Sep 29 19:14:03 2003 (3F78766B)
f733b000 f735a000   SCSIPORT SCSIPORT.SYS Sat Feb 17 06:28:41 2007 (45D6A099)
f735a000 f7381140   LsiCsb6  LsiCsb6.sys  Thu Jul 31 21:38:06 2003 (3F297E2E)
f7382000 f739f000   atapi    atapi.sys    Sat Feb 17 06:07:34 2007 (45D69BA6)
f739f000 f73c9000   volsnap  volsnap.sys  Sat Feb 17 06:08:23 2007 (45D69BD7)
f73c9000 f73f5000   dmio     dmio.sys     Sat Feb 17 06:10:44 2007 (45D69C64)
f73f5000 f741c000   ftdisk   ftdisk.sys   Sat Feb 17 06:08:05 2007 (45D69BC5)
f741c000 f7432000   pci      pci.sys      Sat Feb 17 05:59:03 2007 (45D699A7)
f7432000 f7466000   ACPI     ACPI.sys     Sat Feb 17 05:58:47 2007 (45D69997)
f7487000 f7490000   WMILIB   WMILIB.SYS   Tue Mar 25 07:13:00 2003 (3E80017C)
f7497000 f74a6000   isapnp   isapnp.sys   Sat Feb 17 05:58:57 2007 (45D699A1)
f74a7000 f74b4000   PCIIDEX  PCIIDEX.SYS  Sat Feb 17 06:07:32 2007 (45D69BA4)
f74b7000 f74c7000   MountMgr MountMgr.sys Sat Feb 17 06:05:35 2007 (45D69B2F)
f74c7000 f74d2000   PartMgr  PartMgr.sys  Sat Feb 17 06:29:25 2007 (45D6A0C5)
f74d7000 f74e3000   symc8xx  symc8xx.sys  Thu Oct 14 22:29:38 2004 (416EEFC2)
f74e7000 f74f2000   sym_hi   sym_hi.sys   Fri Oct 29 23:09:18 2004 (4182BF8E)
f74f7000 f7507000   symmpi   symmpi.sys   Wed May 26 17:30:13 2004 (40B4C615)
f7507000 f7517000   disk     disk.sys     Sat Feb 17 06:07:51 2007 (45D69BB7)
f7517000 f7522480   vsp      vsp.sys      Fri Dec 09 13:30:55 2005 (4399870F)
f7527000 f7533000   Dfs      Dfs.sys      Sat Feb 17 05:51:17 2007 (45D697D5)
f7537000 f7541000   crcdisk  crcdisk.sys  Sat Feb 17 06:09:50 2007 (45D69C2E)
f7577000 f7582000   TDI      TDI.SYS      Sat Feb 17 06:01:19 2007 (45D69A2F)
f7587000 f7594000   wanarp   wanarp.sys   Sat Feb 17 05:59:17 2007 (45D699B5)
f7597000 f75a5000   NDProxy  NDProxy.SYS  Sat Feb 17 05:59:21 2007 (45D699B9)
f75b7000 f75c6000   intelppm intelppm.sys Sat Feb 17 05:48:30 2007 (45D6972E)
f75d7000 f75e0000   raspti   raspti.sys   Sat Feb 17 05:59:23 2007 (45D699BB)
f7607000 f7612000   kbdclass kbdclass.sys Sat Feb 17 06:05:39 2007 (45D69B33)
f7617000 f7623000   vga      vga.sys      Sat Feb 17 06:10:30 2007 (45D69C56)
f7627000 f7633000   TAPE     TAPE.SYS     Sat Feb 17 06:08:04 2007 (45D69BC4)
f7637000 f7640000   ndistapi ndistapi.sys Sat Feb 17 05:59:19 2007 (45D699B7)
f7657000 f7660000   watchdog watchdog.sys Sat Feb 17 06:11:45 2007 (45D69CA1)
f7667000 f7672000   fdc      fdc.sys      Sat Feb 17 06:07:16 2007 (45D69B94)
f7677000 f7682000   Msfs     Msfs.SYS     Sat Feb 17 05:50:33 2007 (45D697A9)
f7687000 f7694000   Npfs     Npfs.SYS     Sat Feb 17 05:50:36 2007 (45D697AC)
f7697000 f76a1000   serenum  serenum.sys  Sat Feb 17 06:06:44 2007 (45D69B74)
f76a7000 f76b6000   termdd   termdd.sys   Sat Feb 17 05:44:32 2007 (45D69640)
f76b7000 f76c5000   msgpc    msgpc.sys    Sat Feb 17 05:58:37 2007 (45D6998D)
f76e7000 f76eae20   dump_cpqcissm dump_cpqcissm.sys Mon Feb 02 20:01:16 2004 (401EAC8C)
f7707000 f770f000   kdcom    kdcom.dll    Tue Mar 25 07:08:00 2003 (3E800050)
f770f000 f7717000   BOOTVID  BOOTVID.dll  Tue Mar 25 07:07:58 2003 (3E80004E)
f7717000 f771e000   PCIIde   PCIIde.sys   Tue Mar 25 07:04:46 2003 (3E7FFF8E)
f771f000 f7726000   intelide intelide.sys Sat Feb 17 06:07:32 2007 (45D69BA4)
f7727000 f772e000   dmload   dmload.sys   Tue Mar 25 07:08:08 2003 (3E800058)
f7747000 f774ba20   CpqCiDrv CpqCiDrv.sys Fri Jul 11 16:32:03 2003 (3F0ED873)
f778f000 f7797000   rasacd   rasacd.sys   Tue Mar 25 07:11:50 2003 (3E800136)
f779f000 f77a4e00   savonaccessfilter savonaccessfilter.sys Thu Jan 05 15:43:47 2006 (43BD3EB3)
f77ff000 f7807000   hplto    hplto.sys    Wed Mar 15 14:36:06 2006 (44182656)
f7807000 f780c180   usbuhci  usbuhci.sys  Sat Feb 17 06:13:02 2007 (45D69CEE)
f780f000 f7815b80   usbehci  usbehci.sys  Sat Feb 17 06:12:56 2007 (45D69CE8)
f7817000 f781f000   OPRGHDLR OPRGHDLR.SYS Tue Mar 25 07:16:25 2003 (3E800249)
f7897000 f7899200   stwlfbus stwlfbus.sys Sun Apr 27 13:39:15 2003 (3EABCF73)
f789b000 f789ef80   symc810  symc810.sys  Fri Dec 08 17:40:59 2000 (3A311D2B)
f789f000 f78a2e20   cpqcissm cpqcissm.sys Mon Feb 02 20:01:16 2004 (401EAC8C)
f78a3000 f78a6460   cpqarry2 cpqarry2.sys Mon Nov 05 21:47:33 2001 (3BE708F5)
f79bf000 f79c0280   swenum   swenum.sys   Sat Feb 17 06:05:56 2007 (45D69B44)
f79c1000 f79c2580   USBD     USBD.SYS     Tue Mar 25 07:10:39 2003 (3E8000EF)
f7a8b000 f7a8bb80   DamewareMini DamewareMini.sys Wed Oct 26 21:51:22 2005 (435FEC4A)
f7aab000 f7aab860   BANTExt  BANTExt.sys  Thu May 28 03:43:29 1998 (356CCF51)

Unloaded modules:
f7037000 f703a000   key5usb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7647000 f7655000   imapi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f702f000 f7032000   scsichng.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
bad55000 bad5d000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Closing open log file c:\debuglog.txt
Question by:utilize
    LVL 28

    Accepted Solution

    I'm no specialist in reading crash dumps, but googling around a bit seems to indicate a driver is causing this.
    Maybe creating and analysing a full memory dump may give you more info - or point to a specific driver.

    Otherwise you may have to focus on drivers that are generally used during the backup: vsp.sys, hplto.sys, adpu160m.sys

    Personally I'd try the following:
    * Disable the Advanced Open File option in your backup job - see if that makes a difference
    * Make sure the tape drivers and SCSI card drivers are completely up to date with the manufacturer's latest version.
    * Unistall antivirus completely. See if that make a difference
    * Uninstall what seems to be "Belarc Advisor" software.
    * If you're writing to tape, try making backup to disk instead and see if that makes a difference.
    * Generally update all possible firmware and drivers for all devices attached to the system.
    LVL 23

    Expert Comment

    how much RAM do we have on the server??
    please ensure that the page file settings are correct.
    Ideally for normal Windows operation it is recommended that the page file size is at leat 1,5 times the total amount of RAM
    set it to SYSTEM MANAGED
    LVL 9

    Expert Comment

    hi, there

    What kinda server is this HP, IBM, Dell or other

    just to take memory out of the equation please run memtest program and yes I do know that it takes some time to complete. It is important to run the tools that is from your vendor as some vendors does not test to be run with ex. Linux tools, also some will not replace memory unless it has been verified by their own tools.

    the Dell tools you can find here:

    I have another page here from Microsoft that gives a hotfix.

    Also saw in the dump:
    IRQL_NOT_LESS_OR_EQUAL  Now i am almost curtain it is a Dell server in fact the 28xx series.
    if i am correct then you need to reseat the Riser card, also you could call Dell and get them to check the memory on the Riser card, get the revision number and give it to them There was some issues with the 28xx series regarding this. But very easy to fix.



    Author Comment

    It's actually an HP Proliant ML series. The memory has been tested and all the HP FW updates off of the 7.9 CD have been applied as have all the 7.9 PSP updates.
    LVL 28

    Expert Comment

    Have my very first suggestions helped in any way?

    Author Comment

    Backup to USB disk works fine and I have since found a error relating sympi.sys at the exact point the last backup to tape crashed. Looks like  might be an intermitent fault on the SCSI controller.

    Author Comment

    Replacement of SCSI card appears have fixed it

    Author Comment


    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    Are you looking to recover an email message or a contact you just deleted mistakenly? Or you are searching for a contact that you erased from your MS Outlook ‘Contacts’ folder and now realized that it was important.
    This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
    This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now