[Currawong]

I regularly read about people having their machine kernel panic (you get a black screen with a "You must restart" message written in many languages) or a program "unexpectedly quit" so I thought for the benefits of trouble-shooting, people can post the logs of these events here and, with any luck, we can figure out what's broken.

Where to find the logs?

If you had a kernel panic, the log will be

/Library/Logs/panic.log (Tiger 10.4 and earlier)
or
/Library/Logs/PanicReporter/<date and time>.log (Leopard 10.5)

If you've had a program crash (unexpectedly quit) the log will be in:

/Users/yourusername/Library/logs/CrashReporter/<program name, date and time>.log

IMPORTANT! for program crash logs, please post ONLY the headers and the thread that crashed, NOT the whole log.

Example:

Code Type:       X86 (Native)
Parent Process:  launchd [1]

Date/Time:       2008-05-11 09:06:14.691 +0900
OS Version:      Mac OS X 10.5.2 (9C7010)
Report Version:  6

Exception Type:  EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000002, 0x0000000000000000
Crashed Thread:  0

Application Specific Information:
*** Terminating app due to uncaught exception 'NSInvalidReceivePortException', reason: 'connection went invalid while waiting for a reply'

Thread 0 Crashed:
0   com.apple.CoreFoundation      	0x94f5a0f4 ___TERMINATING_DUE_TO_UNCAUGHT_EXCEPTION___ + 4
1   libobjc.A.dylib               	0x94d670fb objc_exception_throw + 40
2   com.apple.Foundation          	0x903da1a6 -[NSConnection sendInvocation:internal:] + 2422
3   com.apple.Foundation          	0x903d9569 -[NSDistantObject forwardInvocation:] + 329
4   com.apple.CoreFoundation      	0x94f5faaa ___forwarding___ + 986
5   com.apple.CoreFoundation      	0x94f5fb12 _CF_forwarding_prep_0 + 50
6   DFPreviewServer               	0x00002e8d main + 1180
7   DFPreviewServer               	0x0000237b _start + 209
8   DFPreviewServer               	0x000022a9 start + 41

Edit: Off-topic posts from now on will be deleted. Please start your own thread if you have another computer issue. This thread is strictly for panics and program crashes.

[Wheels]

Well I'm not sure if you classify this as a 'crash' but every since I restarted my computer, it stalls at the blue login screen, just before the dialog login box appears. Anything I can do?

Am I forced to reinstall the whole thing? If so, is there a best way to go about it? (Time wise)

Cheers

[Currawong]

Hold down command-v at start-up and see what it's stalling on. You have to hold down that key combo asap after hitting the power switch to turn the computer on.

Please keep this thread on topic though.

[Mac Ram]

I have just had a kernel panic on my mac mini (1.83 GHz CD, 2GB Ram). I've actually had a few before and am almost certain they're related to eyetv (no real tech related reasoning, but simply deduced from the fact that that's usually all that's really running at the time -I also have two other macs without eyetv and have no kernel panics on them).

Anyways, onto the log report

Wed May 14 20:19:53 2008
panic(cpu 0 caller 0x001A8C8A): Kernel trap at 0x00197e36, type 14=page fault, registers:
CR0: 0x80010033, CR2: 0x283b4000, CR3: 0x00fe6000, CR4: 0x000006e0
EAX: 0x4a85ad3c, EBX: 0x03f83000, ECX: 0x00000044, EDX: 0x00002100
CR2: 0x283b4000, EBP: 0x343a7cd8, ESI: 0x283b4000, EDI: 0x4a85cd2c
EFL: 0x00010202, EIP: 0x00197e36, CS: 0x00000008, DS: 0x00190010
Error code: 0x00000000

Backtrace, Format - Frame : Return Address (4 potential args on stack)
0x343a7ae8 : 0x12b0f7 (0x4581f4 0x343a7b1c 0x133230 0x0)
0x343a7b38 : 0x1a8c8a (0x461720 0x197e36 0xe 0x460ed0)
0x343a7c18 : 0x19ece5 (0x343a7c2c 0x343a7cd8 0x197e36 0xe)
0x343a7c24 : 0x197e36 (0xe 0x2160048 0x2e3e0010 0x343a0010)
0x343a7cd8 : 0xa6a82a (0x3f83000 0x283b2010 0x4a844000 0x5b4f)
0x343a7d28 : 0xa6a66e (0x4344900 0x5b4f 0x840 0x2b0cd)
0x343a7d68 : 0xa6a46d (0x4344900 0x1 0x343a7dd8 0x0)
0x343a7de8 : 0xa65afc (0x4344900 0x4bfa308 0x5d8f 0x3)
0x343a7e68 : 0xa65196 (0x4f32c00 0x5d8f 0x3 0x42835c0)
0x343a7ea8 : 0x43c47e (0x4f32c00 0x5d8f 0x3 0x0)
0x343a7f08 : 0x1972ea (0x343a7f44 0x0 0x0 0x0)
0x343a7fc8 : 0x19f2b3 (0x4512dc4 0x1 0x1a20b5 0x6a0d2e8)
No mapping exists for frame pointer
Backtrace terminated-invalid frame pointer 0xb34dab58
Kernel loadable modules in backtrace (with dependencies):
com.apple.iokit.IOAudioFamily(1.6.4b7)@0xa5b000->0xa71fff
dependency: com.apple.kext.OSvKernDSPLib(1.1)@0xa58000

BSD process name corresponding to current thread: EyeTV

Mac OS version:
9C7010

Kernel version:
Darwin Kernel Version 9.2.2: Tue Mar 4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386
System model name: Macmini1,1 (Mac-F4208EC8)

Any assistance greatly appreciated.

[Mac Ram]

Anybody able to decipher?

[Venom71]

EyeTV had a problem.

[Mac Ram]

Originally Posted by MacPomme

EyeTV had a problem.

Was it a conflict or just eyetv being buggy?

[Venom71]

Without having the EyeTV code available - no way of knowing. Whatever the issue was it had something to do with audio.

Sorry.

[Mac Ram]

ahh ok. Thanks MacPomme.

[Currawong]

com.apple.iokit.IOAudioFamily(1.6.4b7)@0xa5b000->0xa71fff

Yup, audio screwed up in some way, caused by EyeTV. "IO" = Input Output. You'll often see IOUSB or IOsomethingelse in kernel panics, depending which bit of hardware or related drivers were involved.

[chrism238]

Hopefully mostly on topic;
if, like me, you find your machine suddenly short on disk space, have a look in the directory /cores, where some programs like to foul the sidewalk.

I had near 3GB of several-month-old files there, and was happy to recover that space.

[vecsty]

Originally Posted by chrism238

Hopefully mostly on topic;
if, like me, you find your machine suddenly short on disk space, have a look in the directory /cores, where some programs like to foul the sidewalk.

I had near 3GB of several-month-old files there, and was happy to recover that space.

/cores by defult is not enabled on OS X and should be an empty directory.

If you have core files in that directory then you have had a core dump from Applications crashing.

[chrism238]

Originally Posted by vecsty

/cores by defult is not enabled on OS X and should be an empty directory.

If you have core files in that directory then you have had a core dump from Applications crashing.

Thanks; as /cores is a directory, I'm unsure what you mean by "by default not enabled". Do you mean that no "official" OS-X activities dump their core to that directory, that only certain applications choose to? Without any intervention or creation by me, I have /cores on my 4 x 10.5 Macs, even a week-old out-of-the-box model.

[montfort]

here is a safari one...have i posted the right information?

===== Display starts at offset 1276640 within file of length 1407712. ====
===== Use File->Reload (Cmd-R) to display more. ====
0x937a9800 -[NSIBObjectData nibInstantiateWithOwner:topLevelObjects:] + 864
8 com.apple.AppKit 0x93880528 old_loadNib + 244
9 com.apple.AppKit 0x937954f8 +[NSBundle(NSNibLoading) _loadNibFile:nameTable:withZone:ownerBundle:] + 832
10 com.apple.AppKit 0x937ec954 +[NSBundle(NSNibLoading) loadNibFile:externalNameTable:withZone:] + 156
11 com.apple.AppKit 0x9387c78c +[NSBundle(NSNibLoading) loadNibNamed:owner:] + 344
12 com.apple.AppKit 0x9387c52c NSApplicationMain + 344
13 com.apple.Safari 0x000b717c 0x1000 + 745852
14 com.apple.Safari 0x000b6e80 0x1000 + 745088

Thread 1:
0 libSystem.B.dylib 0x9002c3c8 semaphore_wait_signal_trap + 8
1 libSystem.B.dylib 0x90030eac pthread_cond_wait + 480
2 com.apple.WebCore 0x95a4a680 WebCore::IconDatabase::syncThreadMainLoop() + 320
3 com.apple.WebCore 0x95a06e48 WebCore::IconDatabase::iconDatabaseSyncThread() + 424
4 libSystem.B.dylib 0x9002bd08 _pthread_body + 96

[Venom71]

Looks to me like the crash may possibly have occurred in Safari trying to load a favicon.

[vecsty]

Originally Posted by chrism238

Thanks; as /cores is a directory, I'm unsure what you mean by "by default not enabled". Do you mean that no "official" OS-X activities dump their core to that directory, that only certain applications choose to? Without any intervention or creation by me, I have /cores on my 4 x 10.5 Macs, even a week-old out-of-the-box model.

LNPF* strikes again
/cores by default is an empty directory. If files are there they are core memory dumps form an application crash.

* Late Night Posting Fatigue

[Currawong]

montfort: no, you need to post the thread that crashed from the beginning. It will be labelled something like "Thread 0 crashed". Here is an example:

Process:         DFPreviewServer [9178]
Path:            /Users/currawong/Library/PreferencePanes/Default Folder X.prefPane/Contents/Resources/Default Folder X.bundle/Contents/Resources/DFPreviewServer
Identifier:      DFPreviewServer
Version:         ??? (???)
Code Type:       X86 (Native)
Parent Process:  launchd [1]

Date/Time:       2008-05-11 09:06:14.691 +0900
OS Version:      Mac OS X 10.5.2 (9C7010)
Report Version:  6

Exception Type:  EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000002, 0x0000000000000000
Crashed Thread:  0

Application Specific Information:
*** Terminating app due to uncaught exception 'NSInvalidReceivePortException', reason: 'connection went invalid while waiting for a reply'

Thread 0 Crashed:
0   com.apple.CoreFoundation      	0x94f5a0f4 ___TERMINATING_DUE_TO_UNCAUGHT_EXCEPTION___ + 4
1   libobjc.A.dylib               	0x94d670fb objc_exception_throw + 40
2   com.apple.Foundation          	0x903da1a6 -[NSConnection sendInvocation:internal:] + 2422
3   com.apple.Foundation          	0x903d9569 -[NSDistantObject forwardInvocation:] + 329
4   com.apple.CoreFoundation      	0x94f5faaa ___forwarding___ + 986
5   com.apple.CoreFoundation      	0x94f5fb12 _CF_forwarding_prep_0 + 50
6   DFPreviewServer               	0x00002e8d main + 1180
7   DFPreviewServer               	0x0000237b _start + 209
8   DFPreviewServer               	0x000022a9 start + 41

[montfort]

Originally Posted by MacPomme

Looks to me like the crash may possibly have occurred in Safari trying to load a favicon.

favicon? sorry to sound dumb?

[Graham]

I've had two kernel panics in recent days. I've run TechTools Deluxe and it reports a clean bill of health. It's also a new install of Leopard with all updates installed:

Mon May 12 10:48:52 2008
panic(cpu 0 caller 0x001A8C8A): Kernel trap at 0x00000000, type 14=page fault, registers:
CR0: 0x8001003b, CR2: 0x00000000, CR3: 0x01026000, CR4: 0x000026e0
EAX: 0x04278800, EBX: 0x3050a342, ECX: 0x3050a356, EDX: 0xffff16ff
CR2: 0x00000000, EBP: 0x2e527cb8, ESI: 0x03ce8144, EDI: 0x00000001
EFL: 0x00010206, EIP: 0x00000000, CS:  0x00000004, DS:  0x0000000c
Error code: 0x00000010

Backtrace, Format - Frame : Return Address (4 potential args on stack) 
0x2e527ae8 : 0x12b0f7 (0x4581f4 0x2e527b1c 0x133230 0x0) 
0x2e527b38 : 0x1a8c8a (0x461720 0x0 0xe 0x460ed0) 
0x2e527c18 : 0x19ece5 (0x2e527c34 0x206 0x2e527c78 0x2e527cb8) 
0x2e527c2c : 0x0 (0xe 0x48 0x241000c 0x2b18000c) 
0x2e527cb8 : 0x23d822 (0x3050a300 0x14 0x6 0x0) 
0x2e527dd8 : 0x23d85e (0x3050a300 0x0 0x2e527e48 0x13679a) 
0x2e527df8 : 0x2297b6 (0x2 0x3050a300 0x43ffd14 0x0) 
0x2e527e38 : 0x2187c5 (0x2 0x3050a300 0x2e527e88 0x1369ad) 
0x2e527ec8 : 0x214f04 (0x42e6404 0x2 0x3050a300 0x3e859c) 
0x2e527ef8 : 0x21565d (0x5258e4 0x429d908 0x3050a334 0x2e527f4c) 
0x2e527f68 : 0x2158bb (0x0 0x3050a300 0x0 0x43ffd2c) 
0x2e527fc8 : 0x19eadc (0x43ffd04 0x0 0x1a20b5 0x3caf128) 
Backtrace terminated-invalid frame pointer 0

BSD process name corresponding to current thread: kernel_task

Mac OS version:
9C7010

Kernel version:
Darwin Kernel Version 9.2.2: Tue Mar  4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386
System model name: MacBook1,1 (Mac-F4208CC8)

and

Tue May 13 17:29:31 2008
panic(cpu 0 caller 0x001A8C8A): Kernel trap at 0x00000000, type 14=page fault, registers:
CR0: 0x8001003b, CR2: 0x00000000, CR3: 0x01026000, CR4: 0x000026e0
EAX: 0x0445a000, EBX: 0x30221034, ECX: 0x30221048, EDX: 0xffff58a0
CR2: 0x00000000, EBP: 0x2e5dbde8, ESI: 0x03ce42c4, EDI: 0x00000001
EFL: 0x00010206, EIP: 0x00000000, CS:  0x00000004, DS:  0x0053000c
Error code: 0x00000010

Backtrace, Format - Frame : Return Address (4 potential args on stack) 
0x2e5dbc18 : 0x12b0f7 (0x4581f4 0x2e5dbc4c 0x133230 0x0) 
0x2e5dbc68 : 0x1a8c8a (0x461720 0x0 0xe 0x460ed0) 
0x2e5dbd48 : 0x19ece5 (0x2e5dbd64 0x1dc32f95 0x2e5dbda8 0x2e5dbde8) 
0x2e5dbd5c : 0x0 (0xe 0x2e5d0048 0x14000c 0xc) 
0x2e5dbde8 : 0x23d822 (0x30221000 0x14 0x6 0x0) 
0x2e5dbf08 : 0x23d85e (0x30221000 0x0 0x0 0x525940) 
0x2e5dbf28 : 0x2296a0 (0x2 0x30221000 0x0 0x3dbbe60) 
0x2e5dbf68 : 0x2158df (0x3dbbe60 0x1 0x0 0x525968) 
0x2e5dbfc8 : 0x19eadc (0x525940 0x0 0x1a20b5 0x3d844f0) 
Backtrace terminated-invalid frame pointer 0

BSD process name corresponding to current thread: kernel_task

Mac OS version:
9C7010

Kernel version:
Darwin Kernel Version 9.2.2: Tue Mar  4 21:17:34 PST 2008; root:xnu-1228.4.31~1/RELEASE_I386
System model name: MacBook1,1 (Mac-F4208CC8)

[Venom71]

Sorry Graham. Not a lot I can help you with. The process that crashed was the OS kernel on both occasions.