Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos related kernel panic

Wondering how this can be explained: Just after using Disk Utility Restore to put an image of an EFI Apple Service Diagnostic on a flash drive. (Btw, scanned the ASD dmg and its mounted image beforehand with Sophos, and it gave it a clean bill of health. The restore went perfectly fine (the ASD appears as a bootable volume from the starup manager), which the DU log shows, except, curiously, the destination turned blank just after the restore finished and a few seconds later it KPed.

Wonder if Sophos InterCheck got into the middle of things causing the KP? Subsequent mounting of the ASD volume does not cause a KP. This appears to have been a one off event.

The backtrace from the panic log appears to be the tipoff.

Kernel Extensions in backtrace:
      com.sophos.kext.sav(9.0.11)[00000000-0000-0000-0000-000000000000]@0xffffff7f8b17d000->0xffffff7f8b181fff

Seems to be USB kext related (DU restore to USB flash drive).

last loaded kext at 428532771928: com.apple.driver.AppleUSBCDC    4.1.23 (addr 0xffffff7f8ce54000, size 16384)

last unloaded kext at 543438186261: com.apple.driver.AppleUSBCDC    4.1.23 (addr 0xffffff7f8ce54000, size 12288)

Here is the full panic log. (Never had a KP before from Sophos, and never from Little Snitch or Bresink/Hardware Monitor. In fact, this is the very first KP on this Mac in four + years).

Thu Aug 14 09:09:29 2014
panic(cpu 0 caller 0xffffff800acf7ab2): "vnode_rele_ext: vp 0xffffff802e5813e0 usecount -ve : -1.  v_tag = 16, v_type = 1, v_flag = 84800."@/SourceCache/xnu/xnu-2050.48.12/bsd/vfs/vfs_subr.c:1788
Backtrace (CPU 0), Frame : Return Address
0xffffff816499b600 : 0xffffff800ac1d636
0xffffff816499b670 : 0xffffff800acf7ab2
0xffffff816499b6b0 : 0xffffff7f8b17e762
0xffffff816499b6d0 : 0xffffff7f8b17df54
0xffffff816499ba00 : 0xffffff7f8b17feb3
0xffffff816499ba40 : 0xffffff800af48dc1
0xffffff816499baa0 : 0xffffff800acfc6ee
0xffffff816499baf0 : 0xffffff800ad103ee
0xffffff816499bb90 : 0xffffff800ad02bc9
0xffffff816499bc40 : 0xffffff800ad03394
0xffffff816499bf50 : 0xffffff800afe97ba
0xffffff816499bfb0 : 0xffffff800accf453
      Kernel Extensions in backtrace:
         com.sophos.kext.sav(9.0.11)[00000000-0000-0000-0000-000000000000]@0xffffff7f8b17d000->0xffffff7f8b181fff

BSD process name corresponding to current thread: mds

Mac OS version:
12F45

Kernel version:
Darwin Kernel Version 12.5.0: Sun Sep 29 13:33:47 PDT 2013; root:xnu-2050.48.12~1/RELEASE_X86_64
Kernel UUID: EA38B02E-2B88-309F-BA68-1DE29F605DD8
Kernel slide:     0x000000000aa00000
Kernel text base: 0xffffff800ac00000
System model name: iMac10,1 (Mac-F2268CC8)

System uptime in nanoseconds: 697371228172
last loaded kext at 428532771928: com.apple.driver.AppleUSBCDC    4.1.23 (addr 0xffffff7f8ce54000, size 16384)
last unloaded kext at 543438186261: com.apple.driver.AppleUSBCDC    4.1.23 (addr 0xffffff7f8ce54000, size 12288)
loaded kexts:
com.sophos.kext.sav    9.0.11
com.bresink.driver.BRESINKx86Monitoring    9.0
com.sophos.nke.swi    9.0.3
at.obdev.nke.LittleSnitch    2.5.4
com.apple.driver.AppleBluetoothMultitouch    75.19
com.apple.driver.AppleHWSensor    1.9.5d0
com.apple.driver.AGPM    100.13.14
com.apple.iokit.IOBluetoothSerialManager    4.1.7f2
com.apple.driver.AudioAUUC    1.60
com.apple.filesystems.autofs    3.0
com.apple.driver.AppleHDA    2.4.7fc4
com.apple.driver.AppleMikeyHIDDriver    124
com.apple.iokit.IOUserEthernet    1.0.0d1
com.apple.driver.AppleMikeyDriver    2.4.7fc4
com.apple.Dont_Steal_Mac_OS_X    7.0.0
com.apple.driver.ApplePolicyControl    3.4.5
com.apple.driver.AppleSMBusPCI    1.0.11d1
com.apple.driver.AppleLPC    1.6.3
com.apple.driver.AppleUpstreamUserClient    3.5.12
com.apple.GeForce    8.1.6
com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport    4.1.7f4
com.apple.driver.ACPI_SMC_PlatformPlugin    1.0.0
com.apple.driver.AppleBacklight    170.3.5
com.apple.driver.AppleMCCSControl    1.1.11
com.apple.driver.AppleIRController    320.15
com.apple.driver.AppleUSBCardReader    3.3.1
com.apple.driver.Oxford_Semi    3.3.1
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless    1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib    1.0.0d1
com.apple.BootCache    34
com.apple.iokit.SCSITaskUserClient    3.5.6
com.apple.driver.XsanFilter    404
com.apple.iokit.IOAHCIBlockStorage    2.3.5
com.apple.driver.AirPort.Atheros40    600.72.2
com.apple.driver.AppleUSBHub    635.4.0
com.apple.driver.AppleFWOHCI    4.9.9
com.apple.driver.AppleRTC    1.5
com.apple.driver.AppleAHCIPort    2.6.6
com.apple.nvenet    2.0.19
com.apple.driver.AppleUSBEHCI    621.4.6
com.apple.driver.AppleUSBOHCI    621.4.0
com.apple.driver.AppleHPET    1.8
com.apple.driver.AppleACPIButtons    1.8
com.apple.driver.AppleSMBIOS    1.9
com.apple.driver.AppleACPIEC    1.8
com.apple.driver.AppleAPIC    1.7
com.apple.driver.AppleIntelCPUPowerManagementClient    214.0.0
com.apple.nke.applicationfirewall    4.0.39
com.apple.security.quarantine    2.1
com.apple.driver.AppleIntelCPUPowerManagement    214.0.0
com.apple.driver.IOBluetoothHIDDriver    4.1.7f2
com.apple.driver.AppleMultitouchDriver    237.4
com.apple.iokit.IOSerialFamily    10.0.6
com.apple.kext.triggers    1.0
com.apple.driver.DspFuncLib    2.4.7fc4
com.apple.iokit.IOSurface    86.0.4
com.apple.iokit.IOBluetoothFamily    4.1.7f2
com.apple.nvidia.nv50hal    8.1.6
com.apple.NVDAResman    8.1.6
com.apple.iokit.IOFireWireIP    2.2.5
com.apple.iokit.IOBluetoothHostControllerUSBTransport    4.1.7f2
com.apple.driver.AppleUSBAudio    2.9.3f3
com.apple.iokit.IOAudioFamily    1.9.2fc7
com.apple.kext.OSvKernDSPLib    1.12
com.apple.driver.AppleSMC    3.1.5d4
com.apple.driver.IOPlatformPluginLegacy    1.0.0
com.apple.driver.IOPlatformPluginFamily    5.4.1d13
com.apple.driver.AppleHDAController    2.4.7fc4
com.apple.iokit.IOHDAFamily    2.4.7fc4
com.apple.driver.AppleGraphicsControl    3.4.5
com.apple.driver.AppleBacklightExpert    1.0.4
com.apple.driver.AppleSMBusController    1.0.11d1
com.apple.iokit.IONDRVSupport    2.3.7
com.apple.iokit.IOGraphicsFamily    2.3.7
com.apple.iokit.IOUSBHIDDriver    623.4.0
com.apple.iokit.IOSCSIBlockCommandsDevice    3.5.6
com.apple.iokit.IOUSBMassStorageClass    3.5.2
com.apple.iokit.IOFireWireSerialBusProtocolTransport    2.1.1
com.apple.iokit.IOFireWireSBP2    4.2.5
com.apple.driver.AppleUSBMergeNub    621.4.6
com.apple.driver.AppleUSBComposite    621.4.0
com.apple.iokit.IOSCSIMultimediaCommandsDevice    3.5.6
com.apple.iokit.IOBDStorageFamily    1.7
com.apple.iokit.IODVDStorageFamily    1.7.1
com.apple.iokit.IOCDStorageFamily    1.7.1
com.apple.iokit.IOAHCISerialATAPI    2.5.5
com.apple.iokit.IOSCSIArchitectureModelFamily    3.5.6
com.apple.iokit.IO80211Family    530.5
com.apple.iokit.IOUSBUserClient    630.4.4
com.apple.iokit.IOFireWireFamily    4.5.5
com.apple.iokit.IOAHCIFamily    2.5.1
com.apple.iokit.IONetworkingFamily    3.0
com.apple.iokit.IOUSBFamily    635.4.0
com.apple.driver.NVSMU    2.2.9
com.apple.driver.AppleEFINVRAM    2.0
com.apple.driver.AppleEFIRuntime    2.0
com.apple.iokit.IOHIDFamily    1.8.1
com.apple.iokit.IOSMBusFamily    1.1
com.apple.security.sandbox    220.3
com.apple.kext.AppleMatch    1.0.0d1
com.apple.security.TMSafetyNet    7
com.apple.driver.DiskImages    345
com.apple.iokit.IOStorageFamily    1.8
com.apple.driver.AppleKeyStore    28.21
com.apple.driver.AppleACPIPlatform    1.8
com.apple.iokit.IOPCIFamily    2.8
com.apple.iokit.IOACPIFamily    1.4
com.apple.ke

:1018707


This thread was automatically locked due to age.
Parents
  • Might try the update, but wanted to point out that I do not use TM or have it enabled. In that case, how does that change the explanation you gave before for the KP?

    If I do run the update, can it be downgraded back to the 9.0.11. Would that require simply uninstaling the 9.1 and reinstalling the 9.0.11? Just in case something gets weird.

    :1018763
Reply
  • Might try the update, but wanted to point out that I do not use TM or have it enabled. In that case, how does that change the explanation you gave before for the KP?

    If I do run the update, can it be downgraded back to the 9.0.11. Would that require simply uninstaling the 9.1 and reinstalling the 9.0.11? Just in case something gets weird.

    :1018763
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?