MacBook Pro (15-inch, 2017) Kernel panic

Hi,

i get a kernel panic each time my Mac system is rebooted for any reason ( upgrade, app installation,...)

This is the report i got last time after upgraded to Catalina 10.15.4.

I also noticed that my Mac reboot if the "Turn off display after" setting is enabled ( this problem starts after upgraded to Catalina 10.15.4).


panic(cpu 2 caller 0xffffff801664c32a): Kernel trap at 0xffffff7f9986f176, type 14=page fault, registers:

CR0: 0x000000008001003b, CR2: 0x0000000000000000, CR3: 0x000000002c12d000, CR4: 0x00000000003626e0

RAX: 0x0000000000000000, RBX: 0xffffff923d56d000, RCX: 0xffffff8016ea30a0, RDX: 0x0000000000000000

RSP: 0xffffff82172c3d10, RBP: 0xffffff82172c3d20, RSI: 0xffffff804cb9be40, RDI: 0xffffff923d56d000

R8: 0x0000000000000000, R9: 0x0000000000000004, R10: 0x0000000000000051, R11: 0x0000000000000041

R12: 0x0000000000000000, R13: 0x0000000000000000, R14: 0xffffff923d56d000, R15: 0xffffff804b9c3000

RFL: 0x0000000000010282, RIP: 0xffffff7f9986f176, CS: 0x0000000000000008, SS: 0x0000000000000000

Fault CR2: 0x0000000000000000, Error code: 0x0000000000000000, Fault CPU: 0x2, PL: 0, VF: 1


Backtrace (CPU 2), Frame : Return Address

0xffffff82172c3770 : 0xffffff80165215cd

0xffffff82172c37c0 : 0xffffff801665a3c5

0xffffff82172c3800 : 0xffffff801664bf7e

0xffffff82172c3850 : 0xffffff80164c7a40

0xffffff82172c3870 : 0xffffff8016520c97

0xffffff82172c3970 : 0xffffff8016521087

0xffffff82172c39c0 : 0xffffff8016cc2c7c

0xffffff82172c3a30 : 0xffffff801664c32a

0xffffff82172c3bb0 : 0xffffff801664c028

0xffffff82172c3c00 : 0xffffff80164c7a40

0xffffff82172c3c20 : 0xffffff7f9986f176

0xffffff82172c3d20 : 0xffffff7f9986f2be

0xffffff82172c3d40 : 0xffffff7f99864099

0xffffff82172c3d60 : 0xffffff7f99863fb7

0xffffff82172c3d80 : 0xffffff7f9984137f

0xffffff82172c3db0 : 0xffffff7f9983f462

0xffffff82172c3de0 : 0xffffff8016c08c06

0xffffff82172c3e40 : 0xffffff8016c08741

0xffffff82172c3ef0 : 0xffffff8016c07ade

0xffffff82172c3f50 : 0xffffff8016c0a296

0xffffff82172c3fa0 : 0xffffff80164c713e

Kernel Extensions in backtrace:

com.apple.driver.AppleIntelKBLGraphics(14.0.5)[902E45A7-CCAF-33D6-9462-99BF0CA58E68]@0xffffff7f99834000->0xffffff7f99929fff

dependency: com.apple.iokit.IOPCIFamily(2.9)[1B1F3BBB-9212-3CF9-94F8-8FEF0D3ACEC4]@0xffffff7f96f31000

dependency: com.apple.iokit.IOSurface(269.11)[E71EAC82-A838-3430-B5D1-2CB347E6CF59]@0xffffff7f99729000

dependency: com.apple.iokit.IOGraphicsFamily(575.1)[D47CA481-C5E5-3F03-9B04-6634DF5F3121]@0xffffff7f97a71000

dependency: com.apple.iokit.IOAcceleratorFamily2(438.4.5)[33DA860E-90A6-3224-A944-93FA125B054E]@0xffffff7f9975b000


BSD process name corresponding to current thread: kernel_task


Mac OS version:

19E266


Kernel version:

Darwin Kernel Version 19.4.0: Wed Mar 4 22:28:40 PST 2020; root:xnu-6153.101.6~15/RELEASE_X86_64

Kernel UUID: AB0AA7EE-3D03-3C21-91AD-5719D79D7AF6

Kernel slide: 0x0000000016200000

Kernel text base: 0xffffff8016400000

__HIB text base: 0xffffff8016300000

System model name: MacBookPro14,3 (Mac-551B86E5744E2388)

System shutdown begun: NO

Panic diags file available: YES (0x0)



MacBook Pro

Posted on Mar 29, 2020 3:12 AM

41 replies

Mar 30, 2020 7:28 AM in response to Community User

rosboc wrote:
...
The report always show the same problem even if i have removed the carbon extension:


The report shows that the carbon black extension is still loaded and active.


loaded kexts:

com.carbonblack.defense.kext 3.3.4fc6

>AudioAUUC 1.70


Perhaps it is being loaded from a different directory than you expect, but there it is in the report, as the first listed "loaded kext"


Like many so-called anti-Virus apps. when it finds something it does not like, it causes a reference to an illegal memory address which causes the indicated, kernel panic, page fault, and the Kernel-Task (that it modified) takes the blame.

Mar 30, 2020 11:22 AM in response to Grant Bennet-Alder

since you did the last update with anti-virus software in place, it is possible that all the components did not get installed properly -- your anti-Virus might have been "protecting" you.


You can re-install MacOS in-place, right over the same version. By design, this does not eliminate any User files or added Applications. But it is always prudent to have a backup before you begin any operation that will re-write over 350,000 files.


How to reinstall macOS from macOS Recovery - Apple Support


.

Mar 30, 2020 8:53 AM in response to Community User

 menu > About This Mac > (system Report) > ...

Scroll down the sidebar.

under "Software" in the sidebar, find the heading "Extensions".

Click on it and wait up to several minutes for it to produce its report.

Stretch the window wide enough to read the "Obtained from" heading, and click on it to sort by "obtained from" in down order:


select the 'not-obtained from Apple' extension in question.

look in the list below for the heading: Location, about eighth item down in the text for that extension.

That is the directory/name on your Mac where the extension resides.


in my example, the directory is /Library/Extensions and the filename is 'hp_io_enabler_compound'


Copy the directory EXCEPT the last part, after the last / which is the filename

Finder > Go Menu > go to Folder ...

... paste the string and press return to get directly to the directory where the extension is located.

Drag the extension to the Trash (you can not Empty trash yet, it is still part of running MacOS)

Restart your Mac. [when it starts up, the Trashed extension will not become part of MacOS, and the Trash can be emptied.]


Mar 31, 2020 8:40 AM in response to Community User

The Catalina Upgrade to 10.15.4 was enormous. Many Users run anti-Virus software, and many users are now having issue with the upgrade. So far only a correlation, and not a proven cause-and-effect.


You can assure yourself that your MacOS is "pure" by doing a re-install-in-place, right over your existing version. This is a common debugging technique, and if you contact support as suggested, this will be one of the first things they will ask you to do.

Mar 29, 2020 11:06 AM in response to Community User

while you are up, you should also move Norton and Symantec to the Trash. SymIPS is a Symantec extension that does not belong here.. acsock is a Cisco add-on, and finding it here is also dodgy.


Most of the rest are Drivers for Apple-Approved hardware that you could add. that is what is supposed to be in this folder.


When you Restart, the ones you moved to the Trash will not be included in MacOS. They will also no longer be marked as "in-use" and the Trash can be emptied after that.

Mar 29, 2020 9:47 AM in response to Community User

MacOS kernel does not panic in this fashion.

But you are not running MacOS kernel, as you have modified it with this invasive extension:


loaded kexts:

com.carbonblack.defense.kext 3.3.4fc6


this is not something that should be running on your already well-protected Macintosh computer. If you want to reduce the panics, remove it and leave it out permanently.


Effective defenses against malware and ot… - Apple Community


.

Mar 30, 2020 10:33 AM in response to Community User

One trouble is, when you have a panic with third-party extension present, it gives Apple the excuse to say, "not me, its that third-party extension!".


The bad news is that now that extension is gone, you do indeed have a kernel panic in the graphics drivers with NO third-party extensions present.


In the US, you can call 1-800-APL-CARE or use the "Contact Support" link at the top of every forum page.

May 11, 2020 7:47 AM in response to Community User

I have a MacBok Pro (15" inch, 2017) and have been getting panic errors at night and the computer reboots.

I worked with the Apple tech and we created a new partition with nothing in it, but it still crashes. No icloud, software, only base image. It has already been in the shop 4 times now. Twice motherboard and recently battery. The panics have only been happening the last few weeks or so. Computer has never been as fast as a expected. In fact my old 2012 Macbook with Core 2 Duo and reg HD is faster. :(

Here is the latest panic error. I have a fresh image and reset SMC, etc.



Mar 29, 2020 9:41 AM in response to kaz-k

Again :


panic(cpu 6 caller 0xffffff8006e4c32a): Kernel trap at 0xffffff7f8a06f176, type 14=page fault, registers:

CR0: 0x000000008001003b, CR2: 0x0000000000000000, CR3: 0x000000001c92d000, CR4: 0x00000000003626e0

RAX: 0x0000000000000000, RBX: 0xffffff922dd65000, RCX: 0xffffff80076a30a0, RDX: 0x0000000000000000

RSP: 0xffffff8207983d10, RBP: 0xffffff8207983d20, RSI: 0xffffff803cf58420, RDI: 0xffffff922dd65000

R8: 0x0000000000000010, R9: 0x0000000000000004, R10: 0x0000000000000020, R11: 0x0000000000000000

R12: 0x0000000000000000, R13: 0x0000000000000000, R14: 0xffffff922dd65000, R15: 0xffffff803bb94000

RFL: 0x0000000000010282, RIP: 0xffffff7f8a06f176, CS: 0x0000000000000008, SS: 0x0000000000000000

Fault CR2: 0x0000000000000000, Error code: 0x0000000000000000, Fault CPU: 0x6, PL: 0, VF: 1


Backtrace (CPU 6), Frame : Return Address

0xffffff8207983770 : 0xffffff8006d215cd

0xffffff82079837c0 : 0xffffff8006e5a3c5

0xffffff8207983800 : 0xffffff8006e4bf7e

0xffffff8207983850 : 0xffffff8006cc7a40

0xffffff8207983870 : 0xffffff8006d20c97

0xffffff8207983970 : 0xffffff8006d21087

0xffffff82079839c0 : 0xffffff80074c2c7c

0xffffff8207983a30 : 0xffffff8006e4c32a

0xffffff8207983bb0 : 0xffffff8006e4c028

0xffffff8207983c00 : 0xffffff8006cc7a40

0xffffff8207983c20 : 0xffffff7f8a06f176

0xffffff8207983d20 : 0xffffff7f8a06f2be

0xffffff8207983d40 : 0xffffff7f8a064099

0xffffff8207983d60 : 0xffffff7f8a063fb7

0xffffff8207983d80 : 0xffffff7f8a04137f

0xffffff8207983db0 : 0xffffff7f8a03f462

0xffffff8207983de0 : 0xffffff8007408c06

0xffffff8207983e40 : 0xffffff8007408741

0xffffff8207983ef0 : 0xffffff8007407ade

0xffffff8207983f50 : 0xffffff800740a296

0xffffff8207983fa0 : 0xffffff8006cc713e

Kernel Extensions in backtrace:

com.apple.driver.AppleIntelKBLGraphics(14.0.5)[902E45A7-CCAF-33D6-9462-99BF0CA58E68]@0xffffff7f8a034000->0xffffff7f8a129fff

dependency: com.apple.iokit.IOPCIFamily(2.9)[1B1F3BBB-9212-3CF9-94F8-8FEF0D3ACEC4]@0xffffff7f87731000

dependency: com.apple.iokit.IOSurface(269.11)[E71EAC82-A838-3430-B5D1-2CB347E6CF59]@0xffffff7f89f29000

dependency: com.apple.iokit.IOGraphicsFamily(575.1)[D47CA481-C5E5-3F03-9B04-6634DF5F3121]@0xffffff7f88271000

dependency: com.apple.iokit.IOAcceleratorFamily2(438.4.5)[33DA860E-90A6-3224-A944-93FA125B054E]@0xffffff7f89f5b000


BSD process name corresponding to current thread: kernel_task


Mac OS version:

19E266



Mar 29, 2020 1:08 PM in response to Community User

Hi,

a new crash even if the problematic extension has been removed.


System uptime in nanoseconds: 16109838660

last loaded kext at 15468517328: >AudioAUUC 1.70 (addr 0xffffff7f99503000, size 32768)

loaded kexts:

com.carbonblack.defense.kext 3.3.4fc6


rosario@Rosarios-MBP Extensions % ls

ACS6x.kext AppleMobileDevice.kext HighPointRR.kext SymIPS.kext

ATTOCelerityFC8.kext ArcMSR.kext NortonForMac.kext SymInternetSecurity.kext

ATTOExpressSASHBA2.kext CalDigitHDProDrv.kext PromiseSTEX.kext

ATTOExpressSASRAID2.kext HighPointIOP.kext SoftRAID.kext

rosario@Rosarios-MBP Extensions %



Mar 30, 2020 12:13 AM in response to Community User

I have removed Symantec antivirus and after rebooting machine same crash.

The report always show the same problem even if i have removed the carbon extension:


System uptime in nanoseconds: 15445775896

last loaded kext at 14840027269: >AudioAUUC 1.70 (addr 0xffffff7f9b303000, size 32768)

loaded kexts:

com.carbonblack.defense.kext 3.3.4fc6


Why did you suggest me to remove com.carbonblack.defense.kext ?


This is list of actual extensions (no more Symantec ext as you can see):


rosario@Rosarios-MBP Extensions % ls -la

total 0

drwxr-xr-x 13 root wheel 416 Mar 30 08:51 .

drwxr-xr-x 68 root wheel 2176 Mar 30 08:51 ..

drwxr-xr-x 3 root wheel 96 Apr 16 2019 ACS6x.kext

drwxr-xr-x 3 root wheel 96 May 8 2018 ATTOCelerityFC8.kext

drwxr-xr-x 3 root wheel 96 May 7 2018 ATTOExpressSASHBA2.kext

drwxr-xr-x 3 root wheel 96 May 7 2018 ATTOExpressSASRAID2.kext

drwxr-xr-x@ 3 root wheel 96 Mar 19 2019 AppleMobileDevice.kext

drwxr-xr-x 3 root wheel 96 Aug 19 2019 ArcMSR.kext

drwxr-xr-x 3 root wheel 96 Sep 1 2013 CalDigitHDProDrv.kext

drwxr-xr-x 3 root wheel 96 May 4 2018 HighPointIOP.kext

drwxr-xr-x 3 root wheel 96 Dec 5 2017 HighPointRR.kext

drwxr-xr-x 3 root wheel 96 Jul 26 2019 PromiseSTEX.kext

drwxr-xr-x 3 root wheel 96 Aug 9 2018 SoftRAID.kext

rosario@Rosarios-MBP Extensions %


Problems are :

1) After rebooting system gets severals crashes and once logged in i can see a panic report.

2) If i enable the sleeping settings after display is turned off system crash and i got panic report.


Report is attached.


Could you please someone help definitely here ?

Thanks



Mar 30, 2020 10:26 AM in response to Grant Bennet-Alder

Hi,

i have removed all the not-apple extensions and after reboot i got again a crash.

Are you sure issue was with not-apple extensions ?

If you surf google many users is experiencing crashes after upgrading to Catalina 10.15.4 !!!!

I have attached the crash report.


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

MacBook Pro (15-inch, 2017) Kernel panic

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.