Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Kernel Panic with ver. 8.0.1 c

Hi,

today I have expirienced the Kernel Panic.

OS:

Mac OS X 10.7.3

Machine:

Model Name:    iMac
Model Identifier:    iMac11,1
Processor Name:    Intel Core i5
Processor Speed:    2.66 GHz
Number of Processors:    1
Total Number of Cores:    4
L2 Cache (per Core):    256 KB
L3 Cache:    8 MB
Memory:    16 GB
Processor Interconnect Speed:    4.8 GT/s
Boot ROM Version:    IM111.0034.B02
SMC Version (system):    1.54f36

Panic copy/paste ----------------------

Fri Apr 13 13:07:52 2012
panic(cpu 1 caller 0xffffff80002c266d): Kernel trap at 0xffffff7f81dfa97d, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0x000000000000001c, CR3: 0x000000004da6e000, CR4: 0x0000000000000660
RAX: 0x0000000000000023, RBX: 0x000000000000eb40, RCX: 0xffffff803e336000, RDX: 0xffffff8026c3f240
RSP: 0xffffff81c8d23780, RBP: 0xffffff81c8d23a00, RSI: 0x0000000027a31840, RDI: 0xffffff8026c3f240
R8:  0x000039104cea8d60, R9:  0xffffff8024d6d980, R10: 0x0000000000000048, R11: 0xffffff80002d8220
R12: 0xffffff81c8d239b0, R13: 0x0000000000000000, R14: 0xffffff80269d1d10, R15: 0xffffff8023fa0c60
RFL: 0x0000000000010246, RIP: 0xffffff7f81dfa97d, CS:  0x0000000000000008, SS:  0x0000000000000010
CR2: 0x000000000000001c, Error code: 0x0000000000000000, Faulting CPU: 0x1

Backtrace (CPU 1), Frame : Return Address
0xffffff81c8d23440 : 0xffffff8000220702 
0xffffff81c8d234c0 : 0xffffff80002c266d 
0xffffff81c8d23660 : 0xffffff80002d7a1d 
0xffffff81c8d23680 : 0xffffff7f81dfa97d 
0xffffff81c8d23a00 : 0xffffff7f81dfbfc2 
0xffffff81c8d23a40 : 0xffffff800052a2b4 
0xffffff81c8d23aa0 : 0xffffff80002f92ec 
0xffffff81c8d23af0 : 0xffffff8000311706 
0xffffff81c8d23b90 : 0xffffff800030a290 
0xffffff81c8d23c50 : 0xffffff800030a80e 
0xffffff81c8d23f50 : 0xffffff80005caa7b 
0xffffff81c8d23fb0 : 0xffffff80002d8363 
      Kernel Extensions in backtrace:
         com.sophos.kext.sav(8.0.1)[9F2DF25D-B665-7144-C1AE-C2168D411D43]@0xffffff7f81df9000->0xffffff7f81dfdfff

BSD process name corresponding to current thread: ath

Mac OS version:
11D50b

Kernel version:
Darwin Kernel Version 11.3.0: Thu Jan 12 18:47:41 PST 2012; root:xnu-1699.24.23~1/RELEASE_X86_64
Kernel UUID: 7B6546C7-70E8-3ED8-A6C3-C927E4D3D0D6
System model name: iMac11,1 (Mac-F2268DAE)

System uptime in nanoseconds: 62742172669353
last loaded kext at 56555585929769: com.apple.iokit.IOAVBFamily	1.0.0d22 (addr 0xffffff7f8078e000, size 36864)
last unloaded kext at 56620042886674: com.apple.iokit.IOAVBFamily	1.0.0d22 (addr 0xffffff7f8078e000, size 36864)
loaded kexts:
com.pihto.driver.KirguduDriver	1.0.5
com.parallels.kext.prl_hid_hook	6.0 12106.692267
com.parallels.kext.prl_hypervisor	6.0 12106.692267
com.parallels.kext.prl_usb_connect	6.0 12106.692267
com.sophos.kext.sav	8.0.1
foo.tap	1.0
foo.tun	1.0
com.taoeffect.ispy.kext	2.0.1
com.parallels.kext.prl_vnic	6.0 12106.692267
com.parallels.kext.prl_netbridge	6.0 12106.692267
com.metakine.handsoff.driver	2.0
com.apple.filesystems.smbfs	1.7.0
com.apple.filesystems.exfat	1.1
com.apple.filesystems.autofs	3.0
com.apple.driver.AppleBluetoothMultitouch	66.6
com.apple.driver.AppleHWSensor	1.9.4d0
com.apple.driver.AudioAUUC	1.59
com.apple.iokit.IOUserEthernet	1.0.0d1
com.apple.Dont_Steal_Mac_OS_X	7.0.0
com.apple.driver.AGPM	100.12.42
com.apple.driver.AppleMikeyHIDDriver	122
com.apple.driver.AppleHDA	2.1.7f9
com.apple.driver.AppleUpstreamUserClient	3.5.9
com.apple.driver.AppleMCCSControl	1.0.26
com.apple.kext.ATIFramebuffer	7.1.8
com.apple.driver.AppleMikeyDriver	2.1.7f9
com.apple.ATIRadeonX2000	7.1.8
com.apple.driver.AudioIPCDriver	1.2.2
com.apple.driver.ACPI_SMC_PlatformPlugin	4.7.5d4
com.apple.driver.AppleLPC	1.5.3
com.apple.driver.AppleBacklight	170.1.9
com.apple.driver.AppleIRController	312
com.apple.driver.AppleUSBCardReader	3.0.1
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless	1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib	1.0.0d1
com.apple.BootCache	33
com.apple.iokit.SCSITaskUserClient	3.0.3
com.apple.iokit.IOAHCIBlockStorage	2.0.1
com.apple.driver.AppleFWOHCI	4.8.9
com.apple.driver.AirPort.Atheros40	503.60.3
com.apple.iokit.AppleBCM5701Ethernet	3.0.8b2
com.apple.driver.AppleUSBHub	4.5.0
com.apple.driver.AppleEFINVRAM	1.5.0
com.apple.driver.AppleAHCIPort	2.2.0
com.apple.driver.AppleUSBEHCI	4.5.8
com.apple.driver.AppleACPIButtons	1.4
com.apple.driver.AppleRTC	1.4
com.apple.driver.AppleHPET	1.6
com.apple.driver.AppleSMBIOS	1.7
com.apple.driver.AppleACPIEC	1.4
com.apple.driver.AppleAPIC	1.5
com.apple.driver.AppleIntelCPUPowerManagementClient	167.3.0
com.apple.nke.applicationfirewall	3.2.30
com.apple.security.quarantine	1.1
com.apple.driver.AppleIntelCPUPowerManagement	167.3.0
com.apple.kext.triggers	1.0
com.apple.driver.AppleMultitouchDriver	220.62.1
com.apple.driver.IOBluetoothHIDDriver	4.0.3f12
com.apple.iokit.IOSurface	80.0
com.apple.iokit.IOBluetoothSerialManager	4.0.3f12
com.apple.iokit.IOSerialFamily	10.0.5
com.apple.driver.DspFuncLib	2.1.7f9
com.apple.driver.AppleSMBusController	1.0.10d0
com.apple.kext.ATI4800Controller	7.1.8
com.apple.kext.ATISupport	7.1.8
com.apple.iokit.IOFireWireIP	2.2.4
com.apple.driver.AppleHDAController	2.1.7f9
com.apple.iokit.IOHDAFamily	2.1.7f9
com.apple.iokit.IOAudioFamily	1.8.6fc6
com.apple.kext.OSvKernDSPLib	1.3
com.apple.driver.ApplePolicyControl	3.0.16
com.apple.driver.AppleSMC	3.1.1d8
com.apple.driver.IOPlatformPluginFamily	4.7.5d4
com.apple.driver.AppleGraphicsControl	3.0.16
com.apple.driver.AppleSMBusPCI	1.0.10d0
com.apple.driver.AppleBacklightExpert	1.0.3
com.apple.iokit.IONDRVSupport	2.3.2
com.apple.iokit.IOGraphicsFamily	2.3.2
com.apple.driver.CoreStorage	182.10
com.apple.driver.AppleUSBHIDKeyboard	152.3
com.apple.driver.AppleHIDKeyboard	152.3
com.apple.driver.BroadcomUSBBluetoothHCIController	4.0.3f12
com.apple.driver.AppleUSBBluetoothHCIController	4.0.3f12
com.apple.iokit.IOBluetoothFamily	4.0.3f12
com.apple.iokit.IOUSBHIDDriver	4.4.5
com.apple.iokit.IOSCSIBlockCommandsDevice	3.0.3
com.apple.iokit.IOUSBMassStorageClass	3.0.1
com.apple.iokit.IOFireWireSerialBusProtocolTransport	2.1.0
com.apple.iokit.IOFireWireSBP2	4.2.0
com.apple.driver.AppleUSBMergeNub	4.5.3
com.apple.driver.AppleUSBComposite	4.5.8
com.apple.iokit.IOSCSIMultimediaCommandsDevice	3.0.3
com.apple.iokit.IOBDStorageFamily	1.6
com.apple.iokit.IODVDStorageFamily	1.7
com.apple.iokit.IOCDStorageFamily	1.7
com.apple.driver.XsanFilter	403
com.apple.iokit.IOAHCISerialATAPI	2.0.1
com.apple.iokit.IOSCSIArchitectureModelFamily	3.0.3
com.apple.iokit.IOFireWireFamily	4.4.5
com.apple.iokit.IO80211Family	412.2
com.apple.iokit.IOEthernetAVBController	1.0.0d5
com.apple.iokit.IONetworkingFamily	2.0
com.apple.iokit.IOUSBUserClient	4.5.8
com.apple.iokit.IOAHCIFamily	2.0.7
com.apple.iokit.IOUSBFamily	4.5.8
com.apple.driver.AppleEFIRuntime	1.5.0
com.apple.iokit.IOHIDFamily	1.7.1
com.apple.iokit.IOSMBusFamily	1.1
com.apple.security.sandbox	177.3
com.apple.kext.AppleMatch	1.0.0d1
com.apple.security.TMSafetyNet	7
com.apple.driver.DiskImages	331.3
com.apple.iokit.IOStorageFamily	1.7
com.apple.driver.AppleKeyStore	28.18
com.apple.driver.AppleACPIPlatform	1.4
com.apple.iokit.IOPCIFamily	2.6.8
com.apple.iokit.IOACPIFamily	1.4

 ---------------------------------------------

Cheers

:1006211


This thread was automatically locked due to age.
  • Did this happen when you were running VMWare or LogMeIn?  The only other notable non-standard kexts listed there are for your BluRay drive.

    :1007891
  • LogmeIn is idle i the background and VMware was not running.  The BlueRay thing is part of Toast 11 but I do not have a BlueRay device attached to my system.  No panic today, we'll see what tomorrow brings.

    :1007901
  • no panic today yet either, any suggestions on course of action for troubleshooting purposes?

    :1007925
  • So on-access has been disabled?

    When on-access was enabled, did you have archive scanning enabled or disabled?  This would be the next bit to check.  After that, we'll have to isolate specific file paths that may need to be excluded from on-access scanning.

    :1007929
  • I do not believe I had archive scanning enabled but I've re-enabled on-access scanning without archives or network files being scanned.  One piece of information that may be useful is that I've had Firefox running (basically non-stop) every time I've had the panic.  My machine has limited memory and Firefox hogs most of it.  I won't change any other variables at this point.  One change at a time to aid debug.

    :1007937
  • sometime afer re-enabling on-access scanning I had a kernel panic... I'll do some additional testing with Firefox and memory.

    :1007945
  • Thanks!  You're definitely going above and beyond on this one.  I'm guessing it'll come down to memory management in the end.

    :1007949
  • My concern is that this regular (repeatable) panic situation just started recently and I have not made very many changes to my machine.  Did I get panics before? Sure, one every month or so.  The latest version of FireFox is WAY friendlier with my paltry 2G of memory.  I have a bunch of tabs open so it is possible one of those pages is mis-behaving.  I have a background in testing and diagnostics so I love the challenge.  I will be trying various test cases and I'll report back with my findings in a day or two.

    :1007961
  • I wrote a shell script to monitor memory usage and included a timestamp in the log file it created.  I ran the script every minute via cron and reviewed the results after a kernel panic this morning.  The available memory was low but nothing I don't see all of the time while actually sitting at the machine.  Looking at the last entry of the log file I realized that it corresponded to the timing of my nightly backup.  I am using Carbon Copy Cloner to do an incremental backup daily at 2:00am and send me an email with the results.  Sure enough, on the days there was a kernel panic there was no email for a successful backup.

    So, with Firefox runnning and on-access scanning enabled I get kernel panics when CCC backup runs but not every time.  I can see where that would point to a memory issue with my setup but I am currenty running below the free memory mark of this morning's panic.  I know CCC isn't running but I run at the edge of available memory all of the time and a manual launch of CCC has not triggered a panic that I can recall.  My concerns are the inconsistent nature of the panics and this activity only becoming prominent in recent weeks.  The major changes that I have made to my setup include updating to Sophos 8.0.4 and updating to Firefox 13.0.1.  

    :1007985
  • Newcomer to the forums. I've been using 8.0.5c for a while on a bare bones Mac mini. Following installation, I was getting daily kernal panics. Disabled on-access scanning, and have now been kernal panic free for about 1.5 months. From daily kernal panics, to not a single one. 

    Mainly posting as I would like to use onaccess scanning, but obviously will not re-enable unless the issue has been fixed. From this thread, it sounds like it has not. Is that correct?

    :1008053