Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Random crash MacOS session (hard logout/logoff)

Hello Community,


my Mac randomly log me hard off. 1-3 times a day I get for 1 second a gray display and after that I see the loginscreen. When I log in, all apps start new and it work for a half day fine.


In the system.log is every time the same:


May 11 10:42:17 rml067 com.apple.xpc.launchd[1] (com.apple.WindowServer[78318]): Service exited due to SIGSEGV | sent by exc handler[78318]
May 11 10:42:17 rml067 com.apple.xpc.launchd[1] (com.apple.ViewBridgeAuxiliary[79983]): Service exited with abnormal code: 2
May 11 10:42:17 rml067 sessionlogoutd[79981]: DEAD_PROCESS: 78312 console


The wifi.log, fsck_apfs.log and fsck_apfs_error.og is clear at this timestamps.


There are much PerfPowerServices Crash reports on the whole day, but there is only on one day a Crashreport in the Console at this timestamps:


Process:               WindowServer [95142]
Path:                  /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer
Identifier:            WindowServer
.
.
.
Crashed Thread:        4  Dispatch queue: com.apple.skylight.stats

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [95142]



You can see the times and frequency here:

grep -i DEAD_PROCESS *

system.log:May 13 09:31:00 rml067 sessionlogoutd[98438]: DEAD_PROCESS: 95136 console
system.log.0:May 12 07:37:43 rml067 sessionlogoutd[87619]: DEAD_PROCESS: 79986 console
system.log.0:May 12 21:06:17 rml067 sessionlogoutd[95133]: DEAD_PROCESS: 87622 console
system.log.1:May 11 08:50:02 rml067 sessionlogoutd[78310]: DEAD_PROCESS: 71339 console
system.log.1:May 11 10:42:17 rml067 sessionlogoutd[79981]: DEAD_PROCESS: 78312 console
system.log.4:May  8 20:57:41 rml067 sessionlogoutd[71336]: DEAD_PROCESS: 61019 console
system.log.5:May  7 16:01:43 rml067 sessionlogoutd[61017]: DEAD_PROCESS: 54034 console
system.log.5:May  7 16:59:15 rml067 login[61283]: DEAD_PROCESS: 61283 ttys004
system.log.5:May  7 23:06:16 rml067 login[65413]: DEAD_PROCESS: 65413 ttys000
system.log.6:May  6 11:19:40 rml067 sessionlogoutd[48531]: DEAD_PROCESS: 39351 console
system.log.6:May  6 13:21:38 rml067 sessionlogoutd[50179]: DEAD_PROCESS: 48533 console
system.log.6:May  6 19:51:13 rml067 sessionlogoutd[54031]: DEAD_PROCESS: 50183 console
system.log.7:May  5 16:09:25 rml067 sessionlogoutd[39341]: DEAD_PROCESS: 29546 console




With an old research I found a link to a Phyton-Problem using Python 3.7.4. But I don't find the article anymore and I don't know which of my apps is based on Phyton...


Anyone a hint for me at wich point I have to beginn to search? Does anyone know something about the SkyLight.framework?


Greetings


Specs:

  • macOS Catalina Version 10.15.4
  • MacBook Pro (13-inch, 2018, Four Thunderbolt 3 Ports)
  • 2,3 GHz Quad-Core Intel Core i5
  • 16 GB 2133 MHz LPDDR3
  • Intel Iris Plus Graphics 655 1536 MB

MacBook

Posted on May 13, 2020 7:12 AM

Reply
Question marked as Best reply

Posted on May 24, 2020 4:39 AM

I haven't had another crash, either.


Summary for troubleshooting:


The error is due to virtual webcams. The CamTwist software left plug-ins in the system despite uninstalling it.

  • Path: /Library/CoreMediaIO/Plug-Ins/DAL
    • CamTwist.plugin (CamTwist)
    • AkVirtualCamera.plugin (webcamoid)
    • EpocCamPlugIn.slot (EpocCam)


I have deleted the two files of Webcamiod and CamTwist and restarted the computer.

Similar questions

17 replies
Question marked as Best reply

May 24, 2020 4:39 AM in response to fadysghatas

I haven't had another crash, either.


Summary for troubleshooting:


The error is due to virtual webcams. The CamTwist software left plug-ins in the system despite uninstalling it.

  • Path: /Library/CoreMediaIO/Plug-Ins/DAL
    • CamTwist.plugin (CamTwist)
    • AkVirtualCamera.plugin (webcamoid)
    • EpocCamPlugIn.slot (EpocCam)


I have deleted the two files of Webcamiod and CamTwist and restarted the computer.

May 13, 2020 7:58 PM in response to tonitonic

Hello and welcome to Apple Support Communities tonitonic,


I see that you're having an issue with your Mac logging you off or restarting. I know how important it is to have your Mac working properly, and I'd be happy to look into this with you.


Take a look at the article below that has some great troubleshooting steps that can help with this issue.


If your Mac restarted because of a problem


If the issue remains after trying the steps in the article above, including safe mode, create a test user on your Mac and test to see if the issue persists.


How to test an issue in another user account on your Mac


Let me know how this goes and if you notice any changes.

Have a great day!

May 17, 2020 3:23 AM in response to fadysghatas

PerfPowerServices (timestamps does not match)


PerfPowerServices_2020-05-13-093730_rml067.crash:    0x7fff5ac12000 -     0x7fff5ac18fff  com.apple.GPUWrangler (5.1.16 - 5.1.16) <F91AD6D6-8242-348C-8296-AF1DD8DBA2EF> /System/Library/PrivateFrameworks/GPUWrangler.framework/Versions/A/GPUWrangler
PerfPowerServices_2020-05-13-093730_rml067.crash:    0x7fff602f4000 -     0x7fff603c5ffa  com.apple.gpusw.MetalTools (1.0 - 1) <BA343D96-58EA-374A-818C-E42968101EA8> /System/Library/PrivateFrameworks/MetalTools.framework/Versions/A/MetalTools


WindowServer (timestamps match to the crashes)

WindowServer_2020-05-13-093104_rml067.crash:GPU:IG
WindowServer_2020-05-13-093104_rml067.crash:IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/IGPU@2/AppleIntelFramebuffer@0
WindowServer_2020-05-13-093104_rml067.crash:    0x7fff59561000 -     0x7fff59562fff  libmetal_timestamp.dylib (902.14.9) <E675DA7E-A99D-3351-94D1-3485CD86808B> /System/Library/PrivateFrameworks/GPUCompiler.framework/Versions/3902/Libraries/libmetal_timestamp.dylib
WindowServer_2020-05-13-093104_rml067.crash:    0x7fff5ac06000 -     0x7fff5ac11ff7  libGPUSupportMercury.dylib (17.10.22) <FE3E328E-F2AC-3FE3-BE4C-31592ABB168B> /System/Library/PrivateFrameworks/GPUSupport.framework/Versions/A/Libraries/libGPUSupportMercury.dylib
WindowServer_2020-05-13-093104_rml067.crash:    0x7fff5ac12000 -     0x7fff5ac18fff  com.apple.GPUWrangler (5.1.16 - 5.1.16) <F91AD6D6-8242-348C-8296-AF1DD8DBA2EF> /System/Library/PrivateFrameworks/GPUWrangler.framework/Versions/A/GPUWrangler
WindowServer_2020-05-13-093104_rml067.crash:    0x7fff602f4000 -     0x7fff603c5ffa  com.apple.gpusw.MetalTools (1.0 - 1) <BA343D96-58EA-374A-818C-E42968101EA8> /System/Library/PrivateFrameworks/MetalTools.framework/Versions/A/MetalTools


Its tricky, in the console - overview of the Crash Report has the Timestamp: 2020-05-14 11:02 When I open it, the date/time match to the crash the day before: Date/Time: 2020-05-13 09:31:00.722 +0200. Thanks for the hint.


Here a few informations:



May 17, 2020 5:08 AM in response to fadysghatas

Now the error has occurred while the computer was logged on without any activity at the table. The screen was unlocked and a few Safari windows (without video) and other applications were open. No video playback.


I will go through the logs later. The Microsoft auto-updater was active.


My applications, which are related to Safari - Webcams and Video:

- Blizz.

- Discord (off)

- EpocCamViewer (similar to)

- Skype (off)

- Teams (was active)

- Whatsapp (was akitv)

- AdGuard Safari

- 1Password


Services

- Jabra software

- EpocCam Agent

- The Little Snitch

- PulseSecure

- com.rogueamoeba.aceagent


Safari Extensions:

  • 1Password
  • AdGuard
  • Browser Fairy
  • Parallels Desktop
  • DuckDuckGo Privacy Essentilas


Sorry if I don't answer a question, ask it again. I don't understand everything in English.


May 17, 2020 7:26 AM in response to fadysghatas

I had uninstalled CamTwist last month. So I searched the system and found 2 plugins besides EpocCam:


Path: /Library/CoreMediaIO/Plug-Ins/DAL

  • CamTwist.plugin (CamTwist)
  • AkVirtualCamera.plugin (webcamoid)
  • EpocCamPlugIn.plugin (EpocCam)


Here's a match. The plugin from Webcamoid.


I deleted the plugins from Webcamiod and CamTwist. I did not find any other files.


Restart and continue testing


May 17, 2020 3:20 AM in response to fadysghatas

hmm... in the console is unfortunately nothing with "Binary Images". I attached a screenshot. I'm sorry, it's in German only.



A search for Intel or similar in the console will not break any success.


pwd
/Library/Logs/DiagnosticReports

grep -i Accelerator2D *

grep: ProxiedDevice-Bridge: Is a directory
grep: Retired: Is a directory
WindowServer_2020-05-11-085006_rml067.crash:       0x105d2d000 -        0x105d2dfff  com.apple.driver.IOAccelerator2D (438.4.5 - 438.4.5) <21085DCF-0AE3-315D-80C7-0C2CCACDE8B1> /System/Library/Extensions/IOAccelerator2D.plugin/Contents/MacOS/IOAccelerator2D
WindowServer_2020-05-11-104219_rml067.crash:       0x101f6e000 -        0x101f6efff  com.apple.driver.IOAccelerator2D (438.4.5 - 438.4.5) <21085DCF-0AE3-315D-80C7-0C2CCACDE8B1> /System/Library/Extensions/IOAccelerator2D.plugin/Contents/MacOS/IOAccelerator2D
WindowServer_2020-05-12-073752_rml067.crash:       0x106165000 -        0x106165fff  com.apple.driver.IOAccelerator2D (438.4.5 - 438.4.5) <21085DCF-0AE3-315D-80C7-0C2CCACDE8B1> /System/Library/Extensions/IOAccelerator2D.plugin/Contents/MacOS/IOAccelerator2D
WindowServer_2020-05-12-210622_rml067.crash:       0x100bf3000 -        0x100bf3fff  com.apple.driver.IOAccelerator2D (438.4.5 - 438.4.5) <21085DCF-0AE3-315D-80C7-0C2CCACDE8B1> /System/Library/Extensions/IOAccelerator2D.plugin/Contents/MacOS/IOAccelerator2D
WindowServer_2020-05-13-093104_rml067.crash:       0x102deb000 -        0x102debfff  com.apple.driver.IOAccelerator2D (438.4.5 - 438.4.5) <21085DCF-0AE3-315D-80C7-0C2CCACDE8B1> /System/Library/Extensions/IOAccelerator2D.plugin/Contents/MacOS/IOAccelerator2D
WindowServer_2020-05-15-012700_rml067.crash:       0x10a5eb000 -        0x10a5ebfff  com.apple.driver.IOAccelerator2D (438.4.5 - 438.4.5) <21085DCF-0AE3-315D-80C7-0C2CCACDE8B1> /System/Library/Extensions/IOAccelerator2D.plugin/Contents/MacOS/IOAccelerator2D


A search with "GPU" brings many lines. Most of them in "PerfPowerServices" and "WindowServer"

A few in: shutdown_stall, systemstats, Photo Booth and GeForceNOWReliabilityMonitor.

May 15, 2020 6:30 AM in response to tonitonic

I have the exact same problem and can't solve it for at least a month now with the same exact errors in Console and the same automatic logout with a 1-second grayish screen before the login prompt. I saw some references online that it might be a problem with video playback on browsers, which I find quite odd.

One common thing on our setups is the usage of Intel Graphics card, on my end I see references to Graphics card in the error stack.


0x7fff2b606000 -     0x7fff2bb17ff7  com.apple.driver.AppleIntelHD5000GraphicsGLDriver (14.5.22 - 14.0.5) AppleIntelHD5000GraphicsGLDriver.bundle/Contents/MacOS/AppleIntelHD5000GraphicsGLDriver


May 17, 2020 2:32 AM in response to fadysghatas

Hello Sarah, Hello Mr. Ghatas,


thank you very much for your support.


Save Mode:


First thing I did was try the save mode. It took me a while to understand that I had to log in twice because of the hard disk encryption. No work was possible in save mode. When calling up the Applications menu and other things the system got stuck for a short time. Other things also reacted very slow, or did not start due to a missing service. So I could not reproduce the error.


New User:


I have created a new user. Here I still need time until it is set up accordingly to work with it completely. As soon as I have gained more experience here, I will write it here


Video playback on browsers:


This reference is very good. One of the last hard logoffs occurred when I tried to start a YouTube video. Many of the other failures occurred when I was in a Microsoft Team video conference. But not exclusively.

Because it was very annoying in the video conferences, I start teams on the iPad since then. Since then the error has not occurred so often:


grep -i DEAD_PROCESS *
system.log.1:May 15 01:21:34 rml067 sessionlogoutd[11580]: DEAD_PROCESS: 98440 console
system.log.1:May 15 11:19:21 rml067 sessionlogoutd[13540]: DEAD_PROCESS: 11583 console
system.log.1:May 15 11:51:55 rml067 sessionlogoutd[788]: DEAD_PROCESS: 149 console
system.log.3:May 13 09:31:00 rml067 sessionlogoutd[98438]: DEAD_PROCESS: 95136 console
system.log.3:May 13 16:38:22 rml067 login[2343]: DEAD_PROCESS: 2343 ttys000


Where can I find references to this error? I can't find anything in the crash reports or in the /var/log directory.


Greetings

May 17, 2020 4:04 AM in response to tonitonic

Yeah, the problem is 100% related to the WindowServer, so now all we need to do is trying to find out what's on common on our setups :D.


The problem is that I usually get the same problem when using meeting, hangouts, Web Skype and sometimes the App and sometimes Zoom.


The Binary Images is in the crash report itself, so in your screenshot you should go to "Crash Reports" (First tab) and find those "WindowServer" crashes, it will have the complete crash report which will have a "Binary Images" section.


The only 2 things I see in all crashes are the VirtualCamera implementation (I use webcamoid), which makes sense as crashes happen when I'm on an active call, on the same stack there is com.apple.avfoundation which directly fetches the webcam stream as well.


The 2nd thing is my integrated GPU, All the crashes have the same lines that point all the guilt to the GPU.


One new observation I had 2 seconds ago is that the Crashed Thread on my end is actually com.apple.powerlog.workqueue.PLCameraAgent which again gets us back to the webcam.


Do you have a similar setup?


Cheers

Random crash MacOS session (hard logout/logoff)

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.