Kernel panic on MacBook Pro (15" 2018) - Sonoma 14.1.1

My mom's 2018 MacBook Pro has started to kernel panic in the past few days. The screen does not show the kernel panic message but the screen only shows the "your computer restarted because of a problem message". The panic seems to be caused by "perfpowerservice".


The laptop is a 15" MacBook Pro (2018) with the Radeon 560X running Sonoma 14.1.1.


I have attached the kernel panic (excluding the ProcessedStackshotData because it's really long). I lave also attached an EtreCheck.


Does anyone know the cause of this issue?


(I have added iCloud links to both files because the kernel panic is too long)


EtreCheck:

https://www.icloud.com/iclouddrive/03dBC2RNlgXhjlFQkbltGWkeA#Etrecheck

Kernel panic log:

https://www.icloud.com/iclouddrive/0f8cwSheYH5TqG8OFlKWzCtdA#panic

MacBook Pro 15″

Posted on Nov 24, 2023 2:12 PM

Reply
Question marked as Top-ranking reply

Posted on Nov 24, 2023 4:31 PM

"macOSPanicString" : "panic(cpu 2 caller 0xffffff8007388fb3): Kernel trap at 0xffffff800736add0, type 14=page fault,


----------

Microsoft Defender or Cisco Anyconnect appear to have caused a page fault "to protect you"

The sooner you use the maker's Un-installer to remove that un-necessary junk, the sooner your problems will be reduced.


Antivirus software: Apple and Microsoft Defender


System Extensions:

[Not Loaded] Microsoft Defender Network Extension - version 101.23102.0015 (Microsoft Corporation - 2023-11-18)

Application: /Applications/Microsoft Defender.app - version 101.23102.0015 (Microsoft Corporation - 2023-11-19)

Description: MdAtp Network Filter extension


[Running] Microsoft Defender Endpoint Security Extension - version 101.23102.0015 (Microsoft Corporation - 2023-11-18)

Application: /Applications/Microsoft Defender.app - version 101.23102.0015 (Microsoft Corporation - 2023-11-19)

Description: MdAtp Endpoint Security extension


[Running] Cisco AnyConnect Socket Filter Extension - version 4.10.07061 (Cisco - 2023-04-28)

Application: /Applications/Cisco/Cisco AnyConnect Socket Filter.app - version 4.10.07061 (Cisco - 2023-10-14)

Description: This system extension provides socket filter capabilities.


Kernel Extensions:

/Library/Application Support/Cisco/AnyConnect Secure Mobility Client

[Not Loaded] acsock.kext - com.cisco.kext.acsock (4.10.10 - SDK 12)



Although MalwareBytes has the best respected virus SCANNER, no senior contributors here suggest it should be run in the background, ONLY on demand.


Similar questions

17 replies
Question marked as Top-ranking reply

Nov 24, 2023 4:31 PM in response to traman124

"macOSPanicString" : "panic(cpu 2 caller 0xffffff8007388fb3): Kernel trap at 0xffffff800736add0, type 14=page fault,


----------

Microsoft Defender or Cisco Anyconnect appear to have caused a page fault "to protect you"

The sooner you use the maker's Un-installer to remove that un-necessary junk, the sooner your problems will be reduced.


Antivirus software: Apple and Microsoft Defender


System Extensions:

[Not Loaded] Microsoft Defender Network Extension - version 101.23102.0015 (Microsoft Corporation - 2023-11-18)

Application: /Applications/Microsoft Defender.app - version 101.23102.0015 (Microsoft Corporation - 2023-11-19)

Description: MdAtp Network Filter extension


[Running] Microsoft Defender Endpoint Security Extension - version 101.23102.0015 (Microsoft Corporation - 2023-11-18)

Application: /Applications/Microsoft Defender.app - version 101.23102.0015 (Microsoft Corporation - 2023-11-19)

Description: MdAtp Endpoint Security extension


[Running] Cisco AnyConnect Socket Filter Extension - version 4.10.07061 (Cisco - 2023-04-28)

Application: /Applications/Cisco/Cisco AnyConnect Socket Filter.app - version 4.10.07061 (Cisco - 2023-10-14)

Description: This system extension provides socket filter capabilities.


Kernel Extensions:

/Library/Application Support/Cisco/AnyConnect Secure Mobility Client

[Not Loaded] acsock.kext - com.cisco.kext.acsock (4.10.10 - SDK 12)



Although MalwareBytes has the best respected virus SCANNER, no senior contributors here suggest it should be run in the background, ONLY on demand.


Nov 24, 2023 4:30 PM in response to traman124

By far the easiest way to cause poor performance, instability, overheating and crashing is to install ANY third-party speeder-uppers, Cleaners, Optimizers, or Virus scanners. or a VPN that you installed yourself. The main reason is that they are relentless in scanning your files, non-stop, looking for things virus-like patterns in Everything. When completed, they do it all again.




The idea that a third party, with no special knowledge of the inner workings of MacOS, can somehow find a simple way to protect your computer — that is not already being done by MacOS itself — suggests that the MacOS developers are somehow "holding out on you". That is absurd.




 You should remove any and all (other than Apple built-in) virus scanners, speeder uppers, optimizers, cleaners, App deleters or VPN packages you installed yourself, or anything of that ilk.




Third-party file Sync-ers such as DropBox, BackBlaze, OneDrive, or GoogleDrive can ruin performance, but are not inherently dangerous.




Effective defenses against malware and ot… - Apple Community


To determine whether added software is the problem, run in Safe Mode, where no third-party items are loaded.

"Works in Safe Mode, Fails in regular mode" implies, "it's something you added."


Start up your Mac in safe mode - Apple Support



Nov 24, 2023 2:39 PM in response to traman124

First,. start the MacBook in the safe mode to see if the issue persists.


Start up your Intel-based Mac in safe mode

  1. Turn on or restart your Mac, then immediately press and hold the Shift key until you see the login window.
  2. Log in to your Mac.
  3. You might be asked to log in again.
  4. On either the first or second login window, you should see “Safe Boot” in the menu bar.


If the issue is not persisting in the safe mode, it is caused by an external piece of software.


You also want to scan the MacBook with the free version of malwarebytes anti malware, as this could be a malware thing going on

Nov 24, 2023 5:09 PM in response to traman124

Macs have always used Swap aggressively when a new App is launched. Unless actual FREE RAM is available they tend to Swap now and discard old cached files later.


Chrome is the biggest resource hog that is not blatant malware. Nobody over there seems to care about treading lightly. If you used a different browser, it might be faster and less trouble.

Nov 24, 2023 5:12 PM in response to traman124

EtreCheckPro version: 6.8.3 (68032)

Report generated: 2023-11-23 23:42:04

Download EtreCheckPro from https://etrecheck.com

Runtime: 6:09

Performance: Below Average


that is really surprisingly slow. That might be down to Virus scanners along with File sync-ers at the same time


File providers:

Google Drive - /Applications/Google Drive.app

OneDrive File Provider - /Applications/OneDrive.app


Share services:

OneNote - /Applications/Microsoft OneNote.app


Nov 24, 2023 4:29 PM in response to traman124

MacOS completely changed how you should think about malware. The System Files are on a separate locked volume, not writeable. if something, somehow, manages to modify anything on that locked Volume, it is detected quickly. Applications are all sand-boxed with a list of the resources they require, and they cannot ask for anything outside their sandbox without crashing.


So you could store just about every malware known to mankind on your Mac, and your Mac would not get infected spontaneously. Scanning for virus-like patterns might make you feel a little better now, but it is outdated nonsense.


Nothing can become Executable Unless/Until you supply your Admin password to "make it so".

At that moment, the candidate to become executable WILL be scanned for virus patterns Apple keeps frequently updated, provided you allow:

[√] install system data files and security updates

Nov 24, 2023 4:35 PM in response to Grant Bennet-Alder

Believe me, I am not a fan of programs that claim to “clean up” your computer (especially on Windows; so many people had issues because of random software that claimed to do these things - I have one particular computer in mind that I troubleshooted as interim IT manager at a school).


The laptop belongs to my mom and the only software she has is OneDrive and MS Defender…


Like I stated above, the issue is mot consistently reproducible (only seems to occur when the laptop is asleep and plugged into a dock).

Nov 24, 2023 4:41 PM in response to Grant Bennet-Alder

I know about the system/data structure that was introduced with Catalina… I have legacy patched a fair number of non Metal Macs without a patcher tool and know about the permission structure that macOS has used to protect the volume, especially since Big Sur (you need to use custom SP configs and usually disable AMFI too).


Again, this is my mom’s laptop so I didn’t install Defender.

Nov 24, 2023 4:47 PM in response to Grant Bennet-Alder

System Software:

macOS Sonoma 14.1.1 (23B81)

Time since boot: About an hour


>>That must have been a wild hour, you ran through all of available RAM and spilled 4 MB into the Swap file on disk.


Virtual Memory Information:

Physical RAM: 16 GB


Free RAM: 3.80 GB

Used RAM: 6.49 GB

Cached files: 5.71 GB


Available RAM: 9.51 GB

Swap Used: 4 MB



Nov 24, 2023 4:56 PM in response to Grant Bennet-Alder

(edit: the etrecheck was actually older; my mom was using the laptop with Jupyter notebooks in Chrome for that hour. The panic happpened the hour before that)


MacOS uses dynamic_pager and will start to spill into swap even if the RAM isn’t full. However, in my experience, this is more true on Apple Silicon than Intel (where swap is used a lot less).


I have no idea how RAM management on macOS works beyond a surface level understanding (is it comparable to Linux? I know a lot more about its ram management systems than those of macOS).


It only shows 6.5GB used with 5.7GB cached files… interestingly enough none of my other Macs seem to reach that level, even the patched ones from 10-15 years ago


If you have any suggestions, tell me; I know the disadvantages of VPNs and AVs.


Thanks so much!


Tejas



Nov 24, 2023 5:17 PM in response to Grant Bennet-Alder

FOR THE LAST TIME: it’s not my laptop.

My mom uses Chrome and Safari to separate personal from university and work sites (and before you tell me it has profiles now, I know). The personal is in Safari, work is in Chrome.


I know that Chrome loves to use as much ram as is possible. However, the issue has nothing to do with Chrome.


Looking back at the Etrecheck, the usage was pretty high, even compared to now (although she had Jupyter/Chrome/Safari open. I force quit all of them before running an Etrecheck…

Nov 24, 2023 7:32 PM in response to traman124

I mean you no harm.

Please just ignore my suggestions if they are not applicable, including this one if it does not apply:


There is also no time machine backup.


if there are other computers on the same network, Time Machine can use a "shared backup destination" on another Mac, and just do its background backups without having to cable up an external drive. I use that on my wife's laptop, and backup up to an external drive on the Mac server in the basement.


Back up to a shared folder with Time Machine on Mac - Apple Support


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Kernel panic on MacBook Pro (15" 2018) - Sonoma 14.1.1

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.