Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Panic (BSD) on new MacBook

Please, can someone let me know what might have caused this based on the informations below - I always "send to Apple" but that never helps - thanks!


panic(cpu 6 caller 0xffffff80102449ea): Kernel trap at 0xffffff801023d483, type 14=page fault, registers:

CR0: 0x000000008001003b, CR2: 0x0000000000000008, CR3: 0x000000016a5f60a0, CR4: 0x00000000003626e0

RAX: 0x0000000000000000, RBX: 0xffffff7f94a48540, RCX: 0x0000000002000000, RDX: 0x0000000003000000

RSP: 0xffffff81ffafaac8, RBP: 0xffffff81ffafaae0, RSI: 0x0000000000000000, RDI: 0x0000000000000000

R8: 0x0000000000000800, R9: 0xffffff8042e74000, R10: 0xffffff803ef641c8, R11: 0x0000000000000002

R12: 0x0000000000000000, R13: 0xffffff8042e74008, R14: 0xffffff7f94a48558, R15: 0x0000000000000008

RFL: 0x0000000000010246, RIP: 0xffffff801023d483, CS: 0x0000000000000008, SS: 0x0000000000000000

Fault CR2: 0x0000000000000008, Error code: 0x0000000000000000, Fault CPU: 0x6, PL: 0, VF: 0


Backtrace (CPU 6), Frame : Return Address

0xffffff81ffafa520 : 0xffffff801011868d

0xffffff81ffafa570 : 0xffffff8010252ab5

0xffffff81ffafa5b0 : 0xffffff801024463e

0xffffff81ffafa600 : 0xffffff80100bea40

0xffffff81ffafa620 : 0xffffff8010117d57

0xffffff81ffafa720 : 0xffffff8010118147

0xffffff81ffafa770 : 0xffffff80108bf2bc

0xffffff81ffafa7e0 : 0xffffff80102449ea

0xffffff81ffafa960 : 0xffffff80102446e8

0xffffff81ffafa9b0 : 0xffffff80100bea40

0xffffff81ffafa9d0 : 0xffffff801023d483

0xffffff81ffafaae0 : 0xffffff7f94a32f92

0xffffff81ffafab40 : 0xffffff7f94a38fba

0xffffff81ffafb3f0 : 0xffffff7f94a30a90

0xffffff81ffafb850 : 0xffffff8010635760

0xffffff81ffafb8c0 : 0xffffff801039de2f

0xffffff81ffafb940 : 0xffffff8010386626

0xffffff81ffafbba0 : 0xffffff801038712e

0xffffff81ffafbf40 : 0xffffff8010782437

0xffffff81ffafbfa0 : 0xffffff80100bf206

Kernel Extensions in backtrace:

com.fireeye.agent(32.6)[A6E255C5-86D6-33F9-A0DC-49D4DF69E4F0]@0xffffff7f94a25000->0xffffff7f94a49fff


BSD process name corresponding to current thread: lsd

Boot args: chunklist-security-epoch=0 -chunklist-no-rev2-dev


Mac OS version:

19H15


Kernel version:

Darwin Kernel Version 19.6.0: Thu Oct 29 22:56:45 PDT 2020; root:xnu-6153.141.2.2~1/RELEASE_X86_64

Kernel UUID: 9B5A7191-5B84-3990-8710-D9BD9273A8E5

Kernel slide: 0x000000000fe00000

Kernel text base: 0xffffff8010000000

__HIB text base: 0xffffff800ff00000

System model name: MacBookPro16,1 (Mac-E1008331FDC96864)

System shutdown begun: NO


System uptime in nanoseconds: 71148532192306

last loaded kext at 71123023273084: com.fireeye.agent 32.6.0 (addr 0xffffff7f94a25000, size 151552)

last unloaded kext at 71148526640801: com.fireeye.agent 32.6.0 (addr 0xffffff7f94a25000, size 147456)

loaded kexts:

com.fireeye.agent 32.6.0

com.symantec.dlp.macpd 15.5.02

com.symantec.dlp.fsd 15.5.02

com.cisco.kext.acsock 4.9.40

com.symantec.nfm.kext 9.0.4

com.symantec.ips.kext 9.0.4

com.symantec.SymXIPS 9.0.1

com.symantec.internetSecurity.kext 9.0.4

com.Bitdefender.iokit.av 3.0.2




MacBook Pro 15″, macOS 10.15

Posted on Jun 12, 2021 6:38 AM

Reply
Question marked as Best reply

Posted on Jun 12, 2021 7:25 AM

Your notebook appears to have multiple AntiVirus type apps installed: Symantec, FireEye, & Bitdefender. I suggest removing them all to see if these kernel panics stop. macOS already has built-in AV functionality. It does not require any third-party AV "solutions." We find numerous posts here with folks asking for help to remove AV apps that cause these types of problems.

Similar questions

6 replies
Question marked as Best reply

Jun 12, 2021 7:25 AM in response to KewlDallas

Your notebook appears to have multiple AntiVirus type apps installed: Symantec, FireEye, & Bitdefender. I suggest removing them all to see if these kernel panics stop. macOS already has built-in AV functionality. It does not require any third-party AV "solutions." We find numerous posts here with folks asking for help to remove AV apps that cause these types of problems.

Jun 12, 2021 1:42 PM in response to KewlDallas

KewlDallas wrote:

Do you know of any documentation that shows Macs are well protected without additional apps? I am also in IT and know how they work: they have to protect-up Window OS devices so the IT Security Team thinks they have to do Mac devices as well...


I hardly doubt you are going to talk sense into your IT department—


Apple uses its Software Update service (which also drives the system software updates that show in the App Store) as a mechanism for installing “background and critical” updates that are installed silently in the background with no notifications to the user.


Typically third party Anti-Virus does nothing but add issues and compete directly with Apple’s® own built in Security:

The macOS uses these to combat malware/adware


Gatekeeper mechanism, central to security services, which tries to ensure that any code loaded is ‘safe’. Code signatures are only part of this.


XProtect checks the security and integrity of files, including in broader ways too, vulnerable document types, such as JPEG images, are also screened to ensure that they’re not malicious.


Apple’s Malware Removal Tool (MRT) an app which often complements XProtect’s signature-based screening, and can automatically remove all traces of many different species of malware.


System Integrity Protection (SIP) which ensures that nothing can tamper with key system files, or even Apple’s bundled apps.


ref: macOS - Security - Apple

https://www.apple.com/macos/security/


ref: Apple Platform Security - Apple

https://support.apple.com/guide/security/welcome/web




https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/apple-platform-security-guide.pdf




Jun 12, 2021 8:55 AM in response to KewlDallas

The panic most likely occurred in the 3rd party kernel extension com.fireeye.agent

Kernel Extensions in backtrace:
         com.fireeye.agent(32.6)[A6E255C5-86D6-33F9-A0DC-49D4DF69E4F0]@0xffffff7f94a25000->0xffffff7f94a49fff

I do not know what fireeye is, but if it is not needed, consider removing it. If it is mandated by your corporate IT, then tell them they are responsible for working with fireeye to get this fixed.


When it comes to 3rd party anti-virus packages on the Mac, Symantic has the highest number of kernel panics reported in the discussions.apple.com forums.


My employer is using Cybereason which licenses the BitDefender. My employer also uses some of McAfee for Firewall, Web, and FileVault encryption key escrow; McAfee Threat Prevention totally destroys all performance on the Mac, which is why my employer is moving to Cybereason/BitDefender.


If I had my way, I would scrap all of the 3rd party anti-virus, and maybe keep JUST the McAfee FileVault encryption key escrow for employees that forget their password, or when the password expiration policies expire before the user changes their password and they get locked out. All the rest is junk that just slows down the Mac for no good reason.

Panic (BSD) on new MacBook

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.