OSX 10.12.3 - Panic Log - Advice Please

[JKnightley]

Morning,

Is anyone able to give me some advice on the below Panic log, I have a few users having random crashes without warning, the device is manly running Adobe products which are patch up to date.

Many thanks for any info.

Anonymous UUID: 993F98E5-2D4F-990F-E7E1-2DF3F2CDA1CF

Fri Mar 24 10:02:16 2017

Panic Report
panic(cpu 1 caller 0xffffff8013605ecd): Kernel trap at 0xffffff801392544b, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff80409b4000, CR3: 0x0000000377b5e09b, CR4: 0x00000000001627e0
RAX: 0x0000000000000001, RBX: 0xffffff80409b3ff0, RCX: 0x0000000000000000, RDX: 0x0000000000000010
RSP: 0xffffff92042a3d20, RBP: 0xffffff92042a3e60, RSI: 0xffffff80409b4000, RDI: 0xffffff803e811708
R8: 0x0000000000000000, R9: 0xffffff80370d3668, R10: 0x00007000025b2ba0, R11: 0xffffff803bcfb050
R12: 0xffffff8037148e88, R13: 0x000000000000000e, R14: 0xffffff803e8111d0, R15: 0xe1c96c8ef1bf0089
RFL: 0x0000000000010202, RIP: 0xffffff801392544b, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0xffffff80409b4000, Error code: 0x0000000000000000, Fault CPU: 0x1, PL: 0, VF: 1

Backtrace (CPU 1), Frame : Return Address
0xffffff92042a39b0 : 0xffffff80134f210c 0xffffff92042a3a30 : 0xffffff8013605ecd 0xffffff92042a3c10 : 0xffffff80134a3743 0xffffff92042a3c30 : 0xffffff801392544b 0xffffff92042a3e60 : 0xffffff80139de83b 0xffffff92042a3ee0 : 0xffffff80139de47a 0xffffff92042a3f50 : 0xffffff8013a273ea 0xffffff92042a3fb0 : 0xffffff80134a3f46

BSD process name corresponding to current thread: sharingd

Mac OS version:
16D32

Kernel version:
Darwin Kernel Version 16.4.0: Thu Dec 22 22:53:21 PST 2016; root:xnu-3789.41.3~3/RELEASE_X86_64
Kernel UUID: C67A8D03-DEAC-35B8-8F68-06FF7B687215
Kernel slide: 0x0000000013200000
Kernel text base: 0xffffff8013400000
__HIB text base: 0xffffff8013300000
System model name: iMac15,1 (Mac-42FD25EABCABB274)

System uptime in nanoseconds: 8784760711195
last loaded kext at 3471103098053: com.apple.driver.usb.cdc 5.0.0 (addr 0xffffff7f9787c000, size 28672)
last unloaded kext at 3655773878274: com.apple.driver.usb.cdc 5.0.0 (addr 0xffffff7f9787c000, size 28672)
loaded kexts:
com.trendmicro.kext.KERedirect 1.0.0
com.trendmicro.kext.filehook 1.5.0
com.apple.filesystems.smbfs 3.1.1
com.apple.driver.AppleBluetoothMultitouch 92
com.apple.driver.AudioAUUC 1.70
com.apple.filesystems.autofs 3.0
com.apple.driver.X86PlatformShim 1.0.0
com.apple.driver.AGPM 110.23.14
com.apple.driver.ApplePlatformEnabler 2.7.0d0
com.apple.driver.AppleOSXWatchdog 1
com.apple.driver.AppleMikeyHIDDriver 127
com.apple.driver.AppleMikeyDriver 278.56
com.apple.driver.AppleHDA 278.56
com.apple.driver.AppleGraphicsDevicePolicy 3.13.79
com.apple.driver.AppleUpstreamUserClient 3.6.4
com.apple.kext.AMDFramebuffer 1.4.8
com.apple.AMDRadeonX4000 1.4.8
com.apple.driver.pmtelemetry 1
com.apple.iokit.IOUserEthernet 1.0.1
com.apple.iokit.IOBluetoothSerialManager 5.0.3f1
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AppleIntelHD5000Graphics 10.2.2
com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 5.0.3f1
com.apple.driver.AppleLPC 3.1
com.apple.driver.AppleThunderboltIP 3.0.8
com.apple.driver.AppleHV 1
com.apple.driver.AppleSMCLMU 208
com.apple.kext.AMD7000Controller 1.4.8
com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0
com.apple.driver.AppleIntelFramebufferAzul 10.2.2
com.apple.driver.AppleMCCSControl 1.2.15
com.apple.iokit.SCSITaskUserClient 394.30.2
com.apple.driver.AppleUSBStorageCoexistentDriver 404.30.1
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0
com.apple.BootCache 40
com.apple.filesystems.hfs.kext 366.30.3
com.apple.iokit.IOAHCIBlockStorage 295.20.1
com.apple.driver.AppleSDXC 1.7.6
com.apple.iokit.AppleBCM5701Ethernet 10.2.7
com.apple.driver.AirPort.Brcm4360 1130.3.1a5
com.apple.driver.AppleAHCIPort 326
com.apple.driver.AppleRTC 2.0
com.apple.driver.AppleACPIButtons 5.0
com.apple.driver.AppleHPET 1.8
com.apple.driver.AppleSMBIOS 2.1
com.apple.driver.AppleACPIEC 5.0
com.apple.driver.AppleAPIC 1.7
com.apple.nke.applicationfirewall 172
com.apple.security.quarantine 3
com.apple.security.TMSafetyNet 8
com.apple.driver.IOBluetoothHIDDriver 5.0.3f1
com.apple.driver.AppleMultitouchDriver 368.7
com.apple.driver.AppleInputDeviceSupport 76.4
com.apple.kext.triggers 1.0
com.apple.driver.DspFuncLib 278.56
com.apple.kext.OSvKernDSPLib 525
com.apple.iokit.IOSerialFamily 11
com.apple.driver.AppleSSE 1.0
com.apple.iokit.IOSurface 153.3
com.apple.iokit.IOBluetoothHostControllerUSBTransport 5.0.3f1
com.apple.iokit.IOBluetoothHostControllerTransport 5.0.3f1
com.apple.iokit.IOBluetoothFamily 5.0.3f1
com.apple.kext.AMDSupport 1.4.8
com.apple.driver.AppleSMBusPCI 1.0.14d1
com.apple.driver.AppleThunderboltEDMSink 4.1.1
com.apple.driver.X86PlatformPlugin 1.0.0
com.apple.driver.IOPlatformPluginFamily 6.0.0d8
com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0
com.apple.AppleGraphicsDeviceControl 3.13.79
com.apple.iokit.IOAcceleratorFamily2 289.32
com.apple.driver.AppleHDAController 278.56
com.apple.iokit.IOHDAFamily 278.56
com.apple.iokit.IOAudioFamily 205.12
com.apple.vecLib.kext 1.2.0
com.apple.driver.AppleGraphicsControl 3.13.79
com.apple.iokit.IONDRVSupport 513.1
com.apple.driver.AppleSMC 3.1.9
com.apple.driver.AppleSMBusController 1.0.14d1
com.apple.iokit.IOGraphicsFamily 513.1
com.apple.driver.AppleHIDKeyboard 197
com.apple.driver.usb.IOUSBHostHIDDevice 1.1
com.apple.iokit.IOSCSIBlockCommandsDevice 394.30.2
com.apple.iokit.IOUSBMassStorageClass 4.0.4
com.apple.iokit.IOUSBMassStorageDriver 131.1.1
com.apple.iokit.IOSCSIArchitectureModelFamily 394.30.2
com.apple.driver.usb.AppleUSBHub 1.1
com.apple.driver.usb.networking 5.0.0
com.apple.driver.usb.AppleUSBHostCompositeDevice 1.1
com.apple.filesystems.hfs.encodings.kext 1
com.apple.driver.AppleThunderboltDPInAdapter 4.6.1
com.apple.driver.AppleThunderboltDPOutAdapter 4.6.1
com.apple.driver.AppleThunderboltDPAdapterFamily 4.6.1
com.apple.driver.AppleThunderboltPCIDownAdapter 2.1.1
com.apple.driver.AppleThunderboltNHI 4.1.8
com.apple.iokit.IOThunderboltFamily 6.3.3
com.apple.iokit.IOEthernetAVBController 1.0.3b4
com.apple.iokit.IO80211Family 1200.12.2
com.apple.driver.mDNSOffloadUserClient 1.0.1b8
com.apple.iokit.IONetworkingFamily 3.2
com.apple.driver.corecapture 1.0.4
com.apple.iokit.IOAHCIFamily 288
com.apple.driver.usb.AppleUSBXHCIPCI 1.1
com.apple.driver.usb.AppleUSBXHCI 1.1
com.apple.driver.usb.AppleUSBHostPacketFilter 1.0
com.apple.iokit.IOUSBFamily 900.4.1
com.apple.driver.AppleUSBHostMergeProperties 1.1
com.apple.driver.AppleEFINVRAM 2.1
com.apple.driver.AppleEFIRuntime 2.0
com.apple.iokit.IOHIDFamily 2.0.0
com.apple.iokit.IOSMBusFamily 1.1
com.apple.security.sandbox 300.0
com.apple.kext.AppleMatch 1.0.0d1
com.apple.driver.AppleKeyStore 2
com.apple.driver.AppleMobileFileIntegrity 1.0.5
com.apple.driver.AppleCredentialManager 1.0
com.apple.driver.KernelRelayHost 1
com.apple.iokit.IOUSBHostFamily 1.1
com.apple.driver.AppleBusPowerController 1.0
com.apple.driver.DiskImages 444.41.1
com.apple.iokit.IOStorageFamily 2.1
com.apple.iokit.IOReportFamily 31
com.apple.driver.AppleFDEKeyStore 28.30
com.apple.driver.AppleACPIPlatform 5.0
com.apple.iokit.IOPCIFamily 2.9
com.apple.iokit.IOACPIFamily 1.4
com.apple.kec.Libm 1
com.apple.kec.pthread 1
com.apple.kec.corecrypto 1.0

[bentoms]

@JKnightley I'm always quick to blame security products, cos they often cause these issues.

com.trendmicro.kext.KERedirect 1.0.0 com.trendmicro.kext.filehook 1.5.0

Is that version of TrendMicro compatible with 10.12.3? Or maybe are there known issues with it?

[JKnightley]

All our clients have this version installed which is 11, i'll try removing it and leave it running over the weekend and see what happens. Thanks

[kglover]

The first part of the log is the important bit.

panic(cpu 1 caller 0xffffff8013605ecd): Kernel trap at 0xffffff801392544b, type 14=page fault, registers: CR0: 0x000000008001003b, CR2: 0xffffff80409b4000, CR3: 0x0000000377b5e09b, CR4: 0x00000000001627e0 RAX: 0x0000000000000001, RBX: 0xffffff80409b3ff0, RCX: 0x0000000000000000, RDX: 0x0000000000000010 RSP: 0xffffff92042a3d20, RBP: 0xffffff92042a3e60, RSI: 0xffffff80409b4000, RDI: 0xffffff803e811708 R8: 0x0000000000000000, R9: 0xffffff80370d3668, R10: 0x00007000025b2ba0, R11: 0xffffff803bcfb050 R12: 0xffffff8037148e88, R13: 0x000000000000000e, R14: 0xffffff803e8111d0, R15: 0xe1c96c8ef1bf0089 RFL: 0x0000000000010202, RIP: 0xffffff801392544b, CS: 0x0000000000000008, SS: 0x0000000000000010 Fault CR2: 0xffffff80409b4000, Error code: 0x0000000000000000, Fault CPU: 0x1, PL: 0, VF: 1

The rest of it is just everything running the moment the Panic occurred. This is showing that CPU 1 failed. Unless your an engineer with Apple, there is no more info to gather from this.
It could be a RAM or CPU failure.
Do you have an external bootable drive? Try running from that. If it works then we know the hardware is good and something in the OS is screwed up.
From there try safe mode, if that works then try another user.
Just keep working your way down.