Mac OS, Crash on device connect

Submitted by vertex on #1

Hi When Trying to tunnel any device that relays on "com.apple.iokit.IOUSBFamily" results kernel panic.

I paste the crashlog below:
panic(cpu 4 caller 0xffffff801aa666aa): Kernel trap at 0xffffff7f9e42dfae, type 14=page fault, registers:
CR0: 0x0000000080010033, CR2: 0x000000000000000a, CR3: 0x000000045240b008, CR4: 0x00000000001626e0
RAX: 0x0000000000000000, RBX: 0x0000000000000003, RCX: 0x0000000000000000, RDX: 0xffffff81d738ab9e
RSP: 0xffffff8206f6ba10, RBP: 0xffffff8206f6ba40, RSI: 0x0000000000000000, RDI: 0x0000000000000000
R8: 0x0000000000000010, R9: 0x0000000000000001, R10: 0x0000000000000000, R11: 0x0000000000000000
R12: 0xffffff81b80c9000, R13: 0x000000000000000a, R14: 0xffffff802db30420, R15: 0xffffff81b80cc6e0
RFL: 0x0000000000010246, RIP: 0xffffff7f9e42dfae, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0x000000000000000a, Error code: 0x0000000000000002, Fault CPU: 0x4, PL: 0, VF: 0

Backtrace (CPU 4), Frame : Return Address
0xffffff8206f6b470 : 0xffffff801a93d5fb
0xffffff8206f6b4c0 : 0xffffff801aa74815
0xffffff8206f6b500 : 0xffffff801aa662fb
0xffffff8206f6b550 : 0xffffff801a8e3bb0
0xffffff8206f6b570 : 0xffffff801a93cce7
0xffffff8206f6b670 : 0xffffff801a93d0cb
0xffffff8206f6b6c0 : 0xffffff801b0ce2a9
0xffffff8206f6b730 : 0xffffff801aa666aa
0xffffff8206f6b8b0 : 0xffffff801aa663ac
0xffffff8206f6b900 : 0xffffff801a8e3bb0
0xffffff8206f6b920 : 0xffffff7f9e42dfae
0xffffff8206f6ba40 : 0xffffff7f9e42c7e6
0xffffff8206f6ba50 : 0xffffff801b040838
0xffffff8206f6bab0 : 0xffffff7f9e42fb45
0xffffff8206f6baf0 : 0xffffff801b0655eb
0xffffff8206f6bb40 : 0xffffff801b06e443
0xffffff8206f6bc80 : 0xffffff801aa24502
0xffffff8206f6bd90 : 0xffffff801a9433f8
0xffffff8206f6bdf0 : 0xffffff801a919895
0xffffff8206f6be70 : 0xffffff801a930d15
0xffffff8206f6bf00 : 0xffffff801aa4c9f5
0xffffff8206f6bfa0 : 0xffffff801a8e4396
Kernel Extensions in backtrace:
com.virtualhere.vhhcd(1.0.98)[FC231D12-B60F-3997-8D26-3825C58EE605]@0xffffff7f9e421000->0xffffff7f9e436fff
dependency: com.apple.iokit.IOUSBFamily(900.4.2)[14629A5F-5C3D-3D21-8E6F-ADBFA37A6FA5]@0xffffff7f9bacb000

BSD process name corresponding to current thread: VirtualHere

Mac OS version:
19A512f

Kernel version:
Darwin Kernel Version 19.0.0: Thu Jul 11 18:37:36 PDT 2019; root:xnu-6153.0.59.141.4~1/RELEASE_X86_64
Kernel UUID: 94E541DB-A7EA-3FB9-AE8A-75F775E67241
Kernel slide: 0x000000001a600000
Kernel text base: 0xffffff801a800000
__HIB text base: 0xffffff801a700000
System model name: MacBookPro11,5 (Mac-06F11F11946D27C5)

System uptime in nanoseconds: 596572005715
last loaded kext at 479363012738: com.paragon-software.lvm-for-mac 1 (addr 0xffffff7f9e464000, size 159744)
last unloaded kext at 251141175536: >usb.!UHostPacketFilter 1.0 (addr 0xffffff7f9bd7c000, size 24576)
loaded kexts:
com.paragon-software.lvm-for-mac 1
org.virtualbox.kext.VBoxNetAdp 6.0.4
org.virtualbox.kext.VBoxNetFlt 6.0.4
com.virtualhere.vhhcd 1.0.98
org.virtualbox.kext.VBoxUSB 6.0.4
org.virtualbox.kext.VBoxDrv 6.0.4
com.paragon-software.filesystems.extfs 16.2.11
@filesystems.smbfs 3.4
@kext.AMDFramebuffer 3.0.0
@kext.AMDRadeonX4000 3.0.0
@kext.AMDRadeonServiceManager 3.0.0
>!AGraphicsDevicePolicy 4.1.30
>!ULegacyHub 900.4.2
@AGDCPluginDisplayMetrics 4.1.30
>AudioAUUC 1.70
@fileutil 20.036.15
>!AHV 1
|IOUserEthernet 1.0.1
|IO!BSerialManager 7.0.0d98
>AGPM 111.1.17
>!APlatformEnabler 2.7.0d0
>X86PlatformShim 1.0.0
>pmtelemetry 1
>!AUpstreamUserClient 3.6.8
@Dont_Steal_Mac_OS_X 7.0.0
>!A!IHD5000Graphics 14.0.0
>AGDCBacklightControl 4.1.30
>!AHDA 283.13
>eficheck 1
>!AThunderboltIP 3.1.2
|Broadcom!B20703USBTransport 7.0.0d98
>!ALPC 3.1
>!AMuxControl 4.1.30
>!ASMCLMU 212
>AirPort.BrcmNIC 1400.1.1
>!ACameraInterface 7.3.0
>!A!ISlowAdaptiveClocking 4.0.0
@kext.AMD7000!C 3.0.0
>!A!IFramebufferAzul 14.0.0
>!AMCCSControl 1.10
@filesystems.autofs 3.0
>!UCardReader 488
>!ATopCaseHIDEventDriver 151
>!UTopCaseDriver 151
@filesystems.apfs 1409.0.0
>!AAHCIPort 341.0.2
>!AVirtIO 1.0
@filesystems.hfs.kext 520
@!AFSCompression.!AFSCompressionTypeDataless 1.0.0d1
@BootCache 40
@!AFSCompression.!AFSCompressionTypeZlib 1.0.0
@private.KextAudit 1.0
>!ASmartBatteryManager 161.0.0
>!AACPIButtons 6.1
>!AHPET 1.8
>!ARTC 2.0
>!ASMBIOS 2.1
>!AACPIEC 6.1
>!AAPIC 1.7
$!AImage4 1
@nke.applicationfirewall 301
$TMSafetyNet 8
@!ASystemPolicy 2.0.0
|EndpointSecurity 1
@kext.AMDRadeonX4030HWLibs 1.0
@kext.AMDRadeonX4000HWServices 3.0.0
|IOAVB!F 800.13
|IOUSBUserClient 900.4.2
>!ASSE 1.0
@plugin.IOgPTPPlugin 800.12
|IOEthernetAVB!C 1.1.0
>DspFuncLib 283.13
@kext.OSvKernDSPLib 529
@!AGPUWrangler 4.1.30
>!ABacklightExpert 1.1.0
|IONDRVSupport 557
|Broadcom!BHost!CUSBTransport 7.0.0d98
|IO!BHost!CUSBTransport 7.0.0d98
|IO!BHost!CTransport 7.0.0d98
>!AHDA!C 283.13
|IOHDA!F 283.13
|IOAudio!F 300.2
@vecLib.kext 1.2.0
>!AGraphicsControl 4.1.30
|IO80211!F 1200.12.2b1
>mDNSOffloadUserClient 1.0.1b8
>corecapture 1.0.4
|IOSkywalk!F 1
>X86PlatformPlugin 1.0.0
>IOPlatformPlugin!F 6.0.0d8
|IOSlowAdaptiveClocking!F 1.0.0
@kext.AMDSupport 3.0.0
@!AGraphicsDeviceControl 4.1.30
|IOAccelerator!F2 438.1.13
>!ASMBus!C 1.0.18d1
|IOGraphics!F 557
@kext.triggers 1.0
>!AActuatorDriver 3000.30
>!AHS!BDriver 151
>IO!BHIDDriver 7.0.0d98
|IO!B!F 7.0.0d98
|IO!BPacketLogger 7.0.0d98
>usb.IOUSBHostHIDDevice 1.2
>!AMultitouchDriver 3000.30
>!AInputDeviceSupport 3000.24
>!AHIDKeyboard 209
>usb.networking 5.0.0
>usb.!UHostCompositeDevice 1.2
|IOAHCIBlock!S 316.0.3
|IOAHCI!F 290.0.1
>usb.!UXHCIPCI 1.2
>usb.!UXHCI 1.2
|IOSerial!F 11
|IOSurface 269.6
@filesystems.hfs.encodings.kext 1
>!AThunderboltDPInAdapter 6.1.7
>!AThunderboltDPAdapter!F 6.1.7
>!AThunderboltPCIDownAdapter 2.5.1
>!AThunderboltNHI 5.5.8
|IOThunderbolt!F 7.4.3
|IOUSB!F 900.4.2
>!AEFINVRAM 2.1
>!AEFIRuntime 2.1
|IOSMBus!F 1.1
|IOHID!F 2.0.0
$quarantine 4
$sandbox 300.0
@kext.!AMatch 1.0.0d1
>DiskImages 493.0.0
>!AFDEKeyStore 28.30
>!AEffaceable!S 1.0
>!AKeyStore 2
>!UTDM 488
|IOSCSIBlockCommandsDevice 422
>!ACredentialManager 1.0
>KernelRelayHost 1
>!ASEPManager 1.0.1
>IOSlaveProcessor 1
|IOTimeSync!F 800.12
|IONetworking!F 3.4
|IOUSBMass!SDriver 157
|IOSCSIArchitectureModel!F 422
|IO!S!F 2.1
|IOUSBHost!F 1.2
>!UHostMergeProperties 1.2
>usb.!UCommon 1.0
>!ABusPower!C 1.0
|CoreAnalytics!F 1
>!AMobileFileIntegrity 1.0.5
@kext.CoreTrust 1
|IOReport!F 47
>!AACPIPlatform 6.1
>!ASMC 3.1.9
>watchdog 1
|IOPCI!F 2.9
|IOACPI!F 1.4
@kec.pthread 1
@kec.Libm 1
@kec.corecrypto 1.0

Submitted by Michael on Wed, 2019/07/17 - 10:37

#2

It seems there is a conflict with the paragon software program that you have installed. At the moment i cannot implement a workaround until apple updates some things.

Submitted by vertex on Thu, 2019/07/18 - 05:34

#3

I tried to unload paragons kexts as well as Virtualbox' and it didn't change the situation, but and this is odd, I can connect to device and work with most of them until I run Google Chrome - the order doesn't matter chrome first, then connect to device -> crash; connect to device first, then chrome -> crash. (At this point I am thinking of running a memtest). I'll paste the log below, just in case.

==== Crash log of crash without third party kexts ====
panic(cpu 4 caller 0xffffff8003e666aa): Kernel trap at 0xffffff7f87731fae, type 14=page fault, registers:
CR0: 0x0000000080010033, CR2: 0x000000000000000a, CR3: 0x000000046c665037, CR4: 0x00000000001626e0
RAX: 0x0000000000000000, RBX: 0x0000000000000003, RCX: 0x0000000000000000, RDX: 0xffffff81c073b948
RSP: 0xffffff81e2b53a10, RBP: 0xffffff81e2b53a40, RSI: 0x0000000000000000, RDI: 0x0000000000000000
R8: 0x0000000000000010, R9: 0x0000000000000001, R10: 0x0000000000000000, R11: 0x0000000000000000
R12: 0xffffff81a1435000, R13: 0x0000000000000027, R14: 0xffffff81e2a84660, R15: 0xffffff81a1438750
RFL: 0x0000000000010246, RIP: 0xffffff7f87731fae, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0x000000000000000a, Error code: 0x0000000000000002, Fault CPU: 0x4, PL: 0, VF: 0

Backtrace (CPU 4), Frame : Return Address
0xffffff81e2b53470 : 0xffffff8003d3d5fb
0xffffff81e2b534c0 : 0xffffff8003e74815
0xffffff81e2b53500 : 0xffffff8003e662fb
0xffffff81e2b53550 : 0xffffff8003ce3bb0
0xffffff81e2b53570 : 0xffffff8003d3cce7
0xffffff81e2b53670 : 0xffffff8003d3d0cb
0xffffff81e2b536c0 : 0xffffff80044ce2a9
0xffffff81e2b53730 : 0xffffff8003e666aa
0xffffff81e2b538b0 : 0xffffff8003e663ac
0xffffff81e2b53900 : 0xffffff8003ce3bb0
0xffffff81e2b53920 : 0xffffff7f87731fae
0xffffff81e2b53a40 : 0xffffff7f877307e6
0xffffff81e2b53a50 : 0xffffff8004440838
0xffffff81e2b53ab0 : 0xffffff7f87733b45
0xffffff81e2b53af0 : 0xffffff80044655eb
0xffffff81e2b53b40 : 0xffffff800446e443
0xffffff81e2b53c80 : 0xffffff8003e24502
0xffffff81e2b53d90 : 0xffffff8003d433f8
0xffffff81e2b53df0 : 0xffffff8003d19895
0xffffff81e2b53e70 : 0xffffff8003d30d15
0xffffff81e2b53f00 : 0xffffff8003e4c9f5
0xffffff81e2b53fa0 : 0xffffff8003ce4396
Kernel Extensions in backtrace:
com.virtualhere.vhhcd(1.0.98)[FC231D12-B60F-3997-8D26-3825C58EE605]@0xffffff7f87725000->0xffffff7f8773afff
dependency: com.apple.iokit.IOUSBFamily(900.4.2)[14629A5F-5C3D-3D21-8E6F-ADBFA37A6FA5]@0xffffff7f84ecb000

BSD process name corresponding to current thread: VirtualHere

Mac OS version:
19A512f

Kernel version:
Darwin Kernel Version 19.0.0: Thu Jul 11 18:37:36 PDT 2019; root:xnu-6153.0.59.141.4~1/RELEASE_X86_64
Kernel UUID: 94E541DB-A7EA-3FB9-AE8A-75F775E67241
Kernel slide: 0x0000000003a00000
Kernel text base: 0xffffff8003c00000
__HIB text base: 0xffffff8003b00000
System model name: MacBookPro11,5 (Mac-06F11F11946D27C5)

System uptime in nanoseconds: 153680907779
last loaded kext at 153541980645: |IOUSBHIDDriver 900.4.2 (addr 0xffffff7f85743000, size 36864)
last unloaded kext at 128735936269: com.paragon-software.filesystems.extfs 16.2.11 (addr 0xffffff7f862f1000, size 225280)
loaded kexts:
com.virtualhere.vhhcd 1.0.98
@filesystems.smbfs 3.4
@kext.AMDFramebuffer 3.0.0
@kext.AMDRadeonX4000 3.0.0
>AudioAUUC 1.70
@kext.AMDRadeonServiceManager 3.0.0
>!AGraphicsDevicePolicy 4.1.30
>!ULegacyHub 900.4.2
@AGDCPluginDisplayMetrics 4.1.30
@fileutil 20.036.15
>!AHV 1
|IOUserEthernet 1.0.1
|IO!BSerialManager 7.0.0d98
>pmtelemetry 1
>!AUpstreamUserClient 3.6.8
>!APlatformEnabler 2.7.0d0
>AGPM 111.1.17
>X86PlatformShim 1.0.0
@Dont_Steal_Mac_OS_X 7.0.0
>AGDCBacklightControl 4.1.30
>!AHDAHardwareConfigDriver 283.13
>!A!IHD5000Graphics 14.0.0
>!ABacklight 170.17
>!AHDA 283.13
>eficheck 1
>ACPI_SMC_PlatformPlugin 1.0.0
>!AThunderboltIP 3.1.2
|Broadcom!B20703USBTransport 7.0.0d98
>!A!ISlowAdaptiveClocking 4.0.0
>!AMCCSControl 1.10
>!AMuxControl 4.1.30
>!ASMCLMU 212
>!ALPC 3.1
>AirPort.BrcmNIC 1400.1.1
>!ACameraInterface 7.3.0
@kext.AMD7000!C 3.0.0
>!A!IFramebufferAzul 14.0.0
>!AFIVRDriver 4.1.0
@filesystems.autofs 3.0
|SCSITaskUserClient 422
>!U!SCoexistentDriver 488
>!UCardReader 488
|IO!BUSBDFU 7.0.0d98
>!ATopCaseHIDEventDriver 151
>!UTopCaseDriver 151
@filesystems.apfs 1409.0.0
>!AAHCIPort 341.0.2
>!AFileSystemDriver 3.0.1
>!AVirtIO 1.0
@filesystems.hfs.kext 520
@!AFSCompression.!AFSCompressionTypeDataless 1.0.0d1
@BootCache 40
@!AFSCompression.!AFSCompressionTypeZlib 1.0.0
@private.KextAudit 1.0
>!ASmartBatteryManager 161.0.0
>!AACPIButtons 6.1
>!ARTC 2.0
>!AHPET 1.8
>!ASMBIOS 2.1
>!AACPIEC 6.1
>!AAPIC 1.7
$!AImage4 1
@nke.applicationfirewall 301
$TMSafetyNet 8
@!ASystemPolicy 2.0.0
|EndpointSecurity 1
|IOUSBHIDDriver 900.4.2
>!UComposite 900.4.2
@kext.AMDRadeonX4030HWLibs 1.0
>!UAudio 320.46
@kext.AMDRadeonX4000HWServices 3.0.0
|IOAVB!F 800.13
>!ASSE 1.0
@plugin.IOgPTPPlugin 800.12
|IOEthernetAVB!C 1.1.0
@!AGPUWrangler 4.1.30
>!ABacklightExpert 1.1.0
>DspFuncLib 283.13
@kext.OSvKernDSPLib 529
|IONDRVSupport 557
>IOPlatformPluginLegacy 1.0.0
|Broadcom!BHost!CUSBTransport 7.0.0d98
|IO!BHost!CUSBTransport 7.0.0d98
|IO!BHost!CTransport 7.0.0d98
>!ASMBusPCI 1.0.14d1
|IOSlowAdaptiveClocking!F 1.0.0
>!ASMBus!C 1.0.18d1
>!AGraphicsControl 4.1.30
>!AHDA!C 283.13
|IOHDA!F 283.13
|IOAudio!F 300.2
@vecLib.kext 1.2.0
|IO80211!F 1200.12.2b1
>mDNSOffloadUserClient 1.0.1b8
>corecapture 1.0.4
|IOSkywalk!F 1
@kext.AMDSupport 3.0.0
@!AGraphicsDeviceControl 4.1.30
|IOAccelerator!F2 438.1.13
|IOGraphics!F 557
>X86PlatformPlugin 1.0.0
>IOPlatformPlugin!F 6.0.0d8
>!AThunderboltEDMSink 4.2.0
>!AThunderboltDPOutAdapter 6.1.7
@kext.triggers 1.0
|IOUSBMass!SClass 4.0.4
>!AActuatorDriver 3000.30
>!AHS!BDriver 151
>IO!BHIDDriver 7.0.0d98
|IO!B!F 7.0.0d98
|IO!BPacketLogger 7.0.0d98
>usb.IOUSBHostHIDDevice 1.2
>!AMultitouchDriver 3000.30
>!AInputDeviceSupport 3000.24
>!AHIDKeyboard 209
>usb.cdc 5.0.0
>usb.networking 5.0.0
>usb.!UHostCompositeDevice 1.2
>!AXsanScheme 3
|IOAHCIBlock!S 316.0.3
>!A!ILpssGspi 3.0.60
>usb.!UXHCIPCI 1.2
>usb.!UXHCI 1.2
|IOAHCI!F 290.0.1
|IOSerial!F 11
|IOSurface 269.6
@filesystems.hfs.encodings.kext 1
>!AThunderboltDPInAdapter 6.1.7
>!AThunderboltDPAdapter!F 6.1.7
>!AThunderboltPCIDownAdapter 2.5.1
>!AThunderboltNHI 5.5.8
|IOThunderbolt!F 7.4.3
>usb.!UHostPacketFilter 1.0
|IOUSB!F 900.4.2
>!AEFINVRAM 2.1
>!AEFIRuntime 2.1
|IOSMBus!F 1.1
|IOHID!F 2.0.0
$quarantine 4
$sandbox 300.0
@kext.!AMatch 1.0.0d1
>DiskImages 493.0.0
>!AFDEKeyStore 28.30
>!AEffaceable!S 1.0
>!AKeyStore 2
>!UTDM 488
|IOSCSIBlockCommandsDevice 422
>!ACredentialManager 1.0
>KernelRelayHost 1
>!ASEPManager 1.0.1
>IOSlaveProcessor 1
|IOTimeSync!F 800.12
|IONetworking!F 3.4
|IOUSBMass!SDriver 157
|IOSCSIArchitectureModel!F 422
|IO!S!F 2.1
|IOUSBHost!F 1.2
>!UHostMergeProperties 1.2
>usb.!UCommon 1.0
>!ABusPower!C 1.0
|CoreAnalytics!F 1
>!AMobileFileIntegrity 1.0.5
@kext.CoreTrust 1
|IOReport!F 47
>!AACPIPlatform 6.1
>!ASMC 3.1.9
>watchdog 1
|IOPCI!F 2.9
|IOACPI!F 1.4
@kec.pthread 1
@kec.Libm 1
@kec.corecrypto 1.0
==========================

Cheers,
Adam

Submitted by Michael on Thu, 2019/07/18 - 09:10

#4

OK thats very interesting, I was wondering what the USBHostPacketFilter was doing in the stack.

I think what is happening is that google chrome can now control USB devices (via webusb) and that is probably filtering all usb devices on the OSX system to attach to at a later date, and this is what is causing the panic due to something chrome is expecting but is not there.

Submitted by vertex on Tue, 2019/07/23 - 02:56

#5

Is there anything more I can provide for debugging? like ioreg dumps for the device connected directly vs via VirtualHere?

Submitted by Michael on Tue, 2019/07/23 - 09:59

#6

No unfortunately i cant do much about it until apple fixes something related to their usb host controller which virtualhere relies on. There is no ETA on this at the moment