Kernel panic during screensaver - OS X 10.7.5

Question

Level 1

6 points

Kernel panic during screensaver - OS X 10.7.5

Hello everybody,

my Mac suddenly crashed, a few hours ago, due to a kernel panic ("You need to restart your computer..."). I'm on OS X 10.7.5 . This is my second kernel panic. The other one happened very long time ago. Please notice that my MacBook Pro suddenly freezes - sometimes, and for some time - during the screensaver.

I've submitted the following report to Apple, should I be scared? Is something failing on my MBP? I think not: the line "BSD process name corresponding to current thread: uTorrent" indicates that uTorrent crashed the Mac. Am I right?

Maybe it crashed because of bad interactions with Little Snitch? There is another line indicating that Little Snitch had caused some issues with it: "

Kernel Extensions in backtrace:

at.obdev.nke.LittleSnitch(2.4.4)"

Any help is appreciated. Thanks in advance!

*** REPORT BEGIN ***

Interval Since Last Panic Report: 17382446 sec

Panics Since Last Report: 1

Anonymous UUID: BBBE5138-057E-4801-8987-EF6EABB6C983

Sun Jun 9 07:05:48 2013

panic(cpu 1 caller 0xffffff80002447d9): "zalloc: \"tcpcb\" (16104 elements) retry fail 3, kfree_nop_count: 51"@/SourceCache/xnu/xnu-1699.32.7/osfmk/kern/zalloc.c:1766

Backtrace (CPU 1), Frame : Return Address

0xffffff808df4bcf0 : 0xffffff8000220792

0xffffff808df4bd70 : 0xffffff80002447d9

0xffffff808df4be50 : 0xffffff80003af893

0xffffff808df4be80 : 0xffffff80003d6039

0xffffff808df4beb0 : 0xffffff80005853be

0xffffff808df4bf00 : 0xffffff8000588236

0xffffff808df4bf60 : 0xffffff80005cde98

0xffffff808df4bfb0 : 0xffffff80002daa79

BSD process name corresponding to current thread: uTorrent

Mac OS version:

11G63

Kernel version:

Darwin Kernel Version 11.4.2: Thu Aug 23 16:25:48 PDT 2012; root:xnu-1699.32.7~1/RELEASE_X86_64

Kernel UUID: FF3BB088-60A4-349C-92EA-CA649C698CE5

System model name: MacBookPro5,4 (Mac-F22587A1)

System uptime in nanoseconds: 235448102711934

vm objects:22846208

vm object hash entri:2031840

VM map entries:5725040

pv_list:3796992

kalloc.16:120856576

kalloc.64:256233472

kalloc.128:970178560

kalloc.256:6205440

kalloc.512:2433024

kalloc.1024:1236992

kalloc.2048:3272704

kalloc.4096:3715072

kalloc.8192:2244608

vm pages:69136200

ipc ports:1460592

socket:14946952

vnodes:15492312

namecache:6234240

HFS node:20336000

HFS fork:6344704

cluster_write:2385512

buf.4096:9588736

ubc_info zone:3506616

tcpcb:15459840

vnode pager structur:1946160

Kernel Stacks:1671168

PageTables:28008448

Kalloc.Large:8793152

Backtrace suspected of leaking: (outstanding bytes: 235392)

0xffffff80002266bd

0xffffff8000226866

0xffffff7f8163d309

0xffffff7f8163bd0d

0xffffff800059b225

0xffffff800059b57d

0xffffff800058540f

0xffffff8000588236

0xffffff80005cde98

Kernel Extensions in backtrace:

at.obdev.nke.LittleSnitch(2.4.4)[CC6472EC-BC7A-AD8F-3F07-1977181B9E16]@0xffffff 7f81632000->0xffffff7f81677fff

last loaded kext at 233429306570312: com.apple.driver.AppleUSBAudio 2.9.0f5 (addr 0xffffff7f8087e000, size 258048)

last unloaded kext at 235162288328243: com.apple.driver.AppleUSBAudio 2.9.0f5 (addr 0xffffff7f8087e000, size 258048)

loaded kexts:

com.sophos.kext.sav 8.0.14

at.obdev.nke.LittleSnitch 2.4.4

com.apple.driver.iPodSBCDriver 1.6.0

com.apple.filesystems.smbfs 1.7.2

com.apple.driver.AppleHWSensor 1.9.5d0

com.apple.filesystems.autofs 3.0

com.apple.driver.AudioAUUC 1.59

com.apple.driver.AppleMikeyHIDDriver 122

com.apple.driver.AppleUpstreamUserClient 3.5.9

com.apple.driver.AppleHDA 2.2.5a5

com.apple.driver.AppleMikeyDriver 2.2.5a5

com.apple.driver.AGPM 100.12.75

com.apple.iokit.IOUserEthernet 1.0.0d1

com.apple.iokit.IOBluetoothSerialManager 4.0.8f17

com.apple.Dont_Steal_Mac_OS_X 7.0.0

com.apple.driver.AudioIPCDriver 1.2.3

com.apple.driver.ApplePolicyControl 3.1.33

com.apple.driver.AppleBacklight 170.2.2

com.apple.driver.AppleMCCSControl 1.0.33

com.apple.driver.AppleLPC 1.6.0

com.apple.GeForce 7.3.2

com.apple.driver.SMCMotionSensor 3.0.2d6

com.apple.driver.AppleSMCLMU 2.0.1d2

com.apple.driver.ACPI_SMC_PlatformPlugin 5.0.0d8

com.apple.driver.AppleUSBTCButtons 227.6

com.apple.driver.BroadcomUSBBluetoothHCIController 4.0.8f17

com.apple.driver.AppleUSBTCKeyboard 227.6

com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1

com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1

com.apple.BootCache 33

com.apple.driver.AppleIRController 312

com.apple.driver.AppleUSBCardReader 3.0.6

com.apple.iokit.SCSITaskUserClient 3.2.1

com.apple.driver.XsanFilter 404

com.apple.iokit.IOAHCISerialATAPI 2.0.3

com.apple.iokit.IOAHCIBlockStorage 2.1.0

com.apple.driver.AirPort.Brcm4331 561.7.22

com.apple.driver.AppleFWOHCI 4.9.0

com.apple.nvenet 2.0.17

com.apple.driver.AppleAHCIPort 2.3.1

com.apple.driver.AppleUSBHub 5.1.0

com.apple.driver.AppleUSBEHCI 5.1.0

com.apple.driver.AppleUSBOHCI 5.1.0

com.apple.driver.AppleEFINVRAM 1.6.1

com.apple.driver.AppleRTC 1.5

com.apple.driver.AppleSmartBatteryManager 161.0.0

com.apple.driver.AppleHPET 1.7

com.apple.driver.AppleACPIButtons 1.5

com.apple.driver.AppleSMBIOS 1.9

com.apple.driver.AppleACPIEC 1.5

com.apple.driver.AppleAPIC 1.6

com.apple.driver.AppleIntelCPUPowerManagementClient 195.0.0

com.apple.nke.applicationfirewall 3.2.30

com.apple.security.quarantine 1.4

com.apple.security.TMSafetyNet 8

com.apple.driver.AppleIntelCPUPowerManagement 195.0.0

com.apple.kext.triggers 1.0

com.apple.driver.DspFuncLib 2.2.5a5

com.apple.iokit.IOSurface 80.0.2

com.apple.iokit.IOSerialFamily 10.0.5

com.apple.iokit.IOAudioFamily 1.8.6fc18

com.apple.kext.OSvKernDSPLib 1.3

com.apple.nvidia.nv50hal 7.3.2

com.apple.NVDAResman 7.3.2

com.apple.iokit.IOFireWireIP 2.2.5

com.apple.driver.AppleHDAController 2.2.5a5

com.apple.iokit.IOHDAFamily 2.2.5a5

com.apple.driver.AppleBacklightExpert 1.0.4

com.apple.driver.AppleGraphicsControl 3.1.33

com.apple.iokit.IONDRVSupport 2.3.4

com.apple.iokit.IOGraphicsFamily 2.3.4

com.apple.driver.AppleSMBusController 1.0.10d0

com.apple.driver.AppleSMC 3.1.3d10

com.apple.driver.IOPlatformPluginLegacy 5.0.0d8

com.apple.driver.IOPlatformPluginFamily 5.1.1d6

com.apple.driver.AppleSMBusPCI 1.0.10d0

com.apple.driver.AppleUSBBluetoothHCIController 4.0.8f17

com.apple.iokit.IOBluetoothFamily 4.0.8f17

com.apple.driver.AppleUSBMultitouch 230.5

com.apple.iokit.IOUSBHIDDriver 5.0.0

com.apple.iokit.IOSCSIBlockCommandsDevice 3.2.1

com.apple.iokit.IOUSBMassStorageClass 3.0.3

com.apple.driver.AppleUSBMergeNub 5.1.0

com.apple.driver.AppleUSBComposite 5.0.0

com.apple.iokit.IOSCSIMultimediaCommandsDevice 3.2.1

com.apple.iokit.IOBDStorageFamily 1.7

com.apple.iokit.IODVDStorageFamily 1.7.1

com.apple.iokit.IOCDStorageFamily 1.7.1

com.apple.iokit.IOSCSIArchitectureModelFamily 3.2.1

com.apple.iokit.IO80211Family 420.3

com.apple.iokit.IOFireWireFamily 4.4.8

com.apple.iokit.IONetworkingFamily 2.1

com.apple.iokit.IOAHCIFamily 2.0.8

com.apple.iokit.IOUSBUserClient 5.0.0

com.apple.iokit.IOUSBFamily 5.1.0

com.apple.driver.NVSMU 2.2.9

com.apple.driver.AppleEFIRuntime 1.6.1

com.apple.iokit.IOHIDFamily 1.7.1

com.apple.iokit.IOSMBusFamily 1.1

com.apple.security.sandbox 177.11

com.apple.kext.AppleMatch 1.0.0d1

com.apple.driver.DiskImages 331.7

com.apple.iokit.IOStorageFamily 1.7.2

com.apple.driver.AppleKeyStore 28.18

com.apple.driver.AppleACPIPlatform 1.5

com.apple.iokit.IOPCIFamily 2.7

com.apple.iokit.IOACPIFamily 1.4

*** REPORT END ***

Posted on Jun 8, 2013 10:22 PM

Reply

Answer 1

Jun 8, 2013 10:26 PM in response to Tyrexionibus

You are correct in thinking that uTorrent is of concern in this case.

Remove it to further troubleshoot the issue. Realistically speaking, Kernel Panics are really only of concern if they happen frequently.

Reply

Answer 2

Kappy

Level 10

361,741 points

Jun 8, 2013 10:27 PM in response to Tyrexionibus

Here's my educated suggestion:

Uninstall Sophos and any other anti-malware software you may have installed.

Uninstall Little Snitch

Stop using uTorrent.

One or more of the above are likely causing the panics. Also visit The XLab FAQs and read the FAQ on diagnosing kernel panics.

Uninstalling Software: The Basics

Most OS X applications are completely self-contained "packages" that can be uninstalled by simply dragging the application to the Trash. Applications may create preference files that are stored in the /Home/Library/Preferences/ folder. Although they do nothing once you delete the associated application, they do take up some disk space. If you want you can look for them in the above location and delete them, too.

Some applications may install an uninstaller program that can be used to remove the application. In some cases the uninstaller may be part of the application's installer, and is invoked by clicking on a Customize button that will appear during the install process.

Some applications may install components in the /Home/Library/Applications Support/ folder. You can also check there to see if the application has created a folder. You can also delete the folder that's in the Applications Support folder. Again, they don't do anything but take up disk space once the application is trashed.

Some applications may install a startupitem or a Log In item. Startupitems are usually installed in the /Library/StartupItems/ folder and less often in the /Home/Library/StartupItems/ folder. Log In Items are set in the Accounts preferences. Open System Preferences, click on the Accounts icon, then click on the LogIn Items tab. Locate the item in the list for the application you want to remove and click on the "-" button to delete it from the list.

Some software use startup daemons or agents that are a new feature of the OS. Look for them in /Library/LaunchAgents/ and /Library/LaunchDaemons/ or in /Home/Library/LaunchAgents/.

If an application installs any other files the best way to track them down is to do a Finder search using the application name or the developer name as the search term. Unfortunately Spotlight will not look in certain folders by default. You can modify Spotlight's behavior or use a third-party search utility, EasyFind, instead.

Some applications install a receipt in the /Library/Receipts/ folder. Usually with the same name as the program or the developer. The item generally has a ".pkg" extension. Be sure you also delete this item as some programs use it to determine if it's already installed.

There are many utilities that can uninstall applications. Here is a selection:

4. Hazel

6. CleanApp

8. Amnesia

9. Uninstaller 1.15.1

10. Spring Cleaning 11.0.1

For more information visit The XLab FAQs and read the FAQ on removing software.

Reply

Answer 3

Tyrexionibus Author

Level 1

6 points

Jun 8, 2013 10:44 PM in response to Tyrexionibus

Sophos is really unneeded for my Mac, no malware detected in 2+ years, but I need it to avoid getting "infected" by Windows viruses and spread them to other Windows computers I interact with, even in my home.

But you are right, chances of getting "seropositive" with a Windows virus are so low that I could uninstall it for sure. It eats so much CPU and RAM ! Plus, viruses for Mac are not a problem at all...

uTorrent: well, in the past hours I saw it was very slow, something was happening. I think it had asked Little Snitch a permission to access a website while I was away.. Little Snitch was waiting for my authorization, and it denies it -freezing uTorrent- if I don't say "yes". Maybe this caused the kernel panic.

uTorrent has never caused issues like this though. I've chosen it because it's the simplest, less-resource-eating torrent client available. Can you suggest me a better one? 🙂

Reply

Answer 4

Kappy

Level 10

361,741 points

Jun 8, 2013 10:51 PM in response to Tyrexionibus

You can only transmit viruses to Windows computers if Windows computers have transmitted them to you by way of documents you have downloaded or received via email. You can use ClamXAV for this purpose without the concern for incompatibilities created by Sophos or you can trust the built-in protection in OS X.

Torrent programs will spread viruses a lot faster than your email buddies. Stop using them is the best substitute for uTorrent. Besides, I'm more concerned in helping you with the panic problem. So remove what i've suggested and see if that stops the panics.

Helpful Links Regarding Malware Protection

An excellent link to read is Tom Reed's Mac Malware Guide.

Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.

See these Apple articles:

Mac OS X Snow Leopard and malware detection

OS X Lion- Protect your Mac from malware

OS X Mountain Lion- Protect your Mac from malware

About file quarantine in OS X

If you require anti-virus protection I recommend using ClamXav.

Reply

Answer 5

Jun 8, 2013 11:12 PM in response to Kappy

Personally I use the iTunes Store as a fantastic alternative to torrent clients.

Reply