OS crash

Question

Level 1

4 points

OS crash

OS crashes and gives this error

panic(cpu 5 caller 0xfffffe0028381314): Kernel data abort. at pc 0xfffffe0028406bf0, lr 0x12e07e0028406a64 (saved state: 0xfffffe30b6442e20)

x0: 0x0000000000000000 x1: 0x0000000000000000 x2: 0x0000000000000000 x3: 0x0000000000220003

x4: 0x0000000000000000 x5: 0x0000000000220003 x6: 0x0000000000000042 x7: 0x0000000000000000

x8: 0xfffffe3fe76a4000 x9: 0x0000000000000000 x10: 0xfffffe3fe7734040 x11: 0x0000000000000004

x12: 0xfffffe30010f0000 x13: 0xfffffe3fe7bbc000 x14: 0x0000000000000003 x15: 0x0000000000000004

x16: 0x0000000000000000 x17: 0x0000000000000001 x18: 0x0000000000000000 x19: 0xfffffe2332324b40

x20: 0xfffffe2330705590 x21: 0x0000000000000008 x22: 0x0000000000000001 x23: 0x0000000000000001

x24: 0x0000000000000001 x25: 0x0000000000000001 x26: 0x00000000e00002d8 x27: 0x0000000000000001

x28: 0x00000000000a0940 fp: 0xfffffe30b6443180 lr: 0x12e07e0028406a64 sp: 0xfffffe30b6443170

pc: 0xfffffe0028406bf0 cpsr: 0x80401208 esr: 0x96000046 far: 0x0000000000000000

Debugger message: panic

Memory ID: 0x6

OS release type: User

OS version: 20G165

Kernel version: Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:20 PDT 2021; root:xnu-7195.141.6~3/RELEASE_ARM64_T8101

Fileset Kernelcache UUID: 6304A06696A657F4CF48CC569B129642

Kernel UUID: DA16DC13-5845-3638-9BB4-B14F9AC08E55

iBoot version: iBoot-6723.140.2

secure boot?: YES

Paniclog version: 13

KernelCache slide: 0x000000001ff64000

KernelCache base: 0xfffffe0026f68000

Kernel slide: 0x0000000020aac000

Kernel text base: 0xfffffe0027ab0000

Kernel text exec base: 0xfffffe0027b7c000

mach_absolute_time: 0x178b70721c

Epoch Time: sec usec

Boot : 0x614e4ee1 0x000375d8

Sleep : 0x614e6a3e 0x000eed72

Wake : 0x614e6c4b 0x0007eccd

Calendar: 0x614e6de8 0x000681c0

error details

MacBook Pro 13″, macOS 11.6

Posted on Sep 24, 2021 5:42 PM

Reply

Answer 1

Best reply

James Brickley

Level 5

4,636 points

Sep 25, 2021 3:16 PM in response to Raiden_13

"and BINGO, was his NAME-O", "Winner, winner, chicken dinner" That is the root cause of the problem.

"com.symantec.mes.systemextension" this is Symantec Norton Antivirus. Do you have it installed? It's possible you removed it and this system extension is still installed. You do not need antivirus on macOS Big Sur. It causes more problems than it prevents. Remove Norton Antivirus and then you'll need to remove that system extension which is a bit trickier.

You will need to boot into Recovery Mode on the M1 MacBook Pro 13" by shutting down completely. Then hold the power button until you are presented with Recovery options. Authenticate with your admin account and then go to the Utilities drop down menu and select Terminal. Enter the following command:

csrutil disable

Then shutdown and reboot normally.

Open Terminal and issue this command:

sudo systemextensionctl uninstall 9PTGMPNXZ2 com.symantec.mes.systemextension

Then shutdown completely and hold the power button again to get back into Recovery Mode and open the Terminal in Recovery Mode and re-enable SIP (System Integrity Protection)

csrutil enable

Then restart again. That should hopefully prevent the kernel panics.

Reply

Answer 2

Sep 25, 2021 12:55 PM in response to Raiden_13

What are you doing just before it crashes? Do you have any 3rd party hardware attached to the MacBook Pro 13" M1? Such as a USB-C docking station, external drives, etc.? Where you surfing a website? There is a WebKit mention in the stack trace as well as SMB which would be an SMB network share in use potentially. What are you mounting via SMB and from what system or server?

What kernel and/or system extensions do you have installed?

Open Terminal, and run these two commands. Copy the output and attach via the Additional Text button on reply like you did with the kernel dump trace. The first one lists any non-Apple kernel extensions and the second one lists any system extensions. By default there should be zero results on either. If you have kernel / system extensions they are put there by 3rd party software. Both have the potential to cause kernel panics if there are any bugs in the extensions.

sudo kextstat | grep -v com.apple

sudo systemextensionsctl list

Reply

Answer 3

Raiden_13 Author

Level 1

4 points

Sep 25, 2021 2:31 PM in response to James Brickley

ast login: Fri Sep 24 20:32:43 on console

~ % sudo kextstat | grep -v com.apple

Password:

Executing: /usr/bin/kmutil showloaded

No variant specified, falling back to release

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

~ % sudo systemextensionsctl list

1 extension(s)

--- com.apple.system_extension.endpoint_security

enabled active teamID bundleID (version) name [state]

* * 9PTGMPNXZ2 com.symantec.mes.systemextension (9.0.6/9.0.6) Norton System Extension [activated enabled]

I have a Synology NAS on my network that uses SMB. There is no hardware attached. I have parallels running windows 11. This happens when I try to open a website or when I try to wake Mac book after it has been idle.