Every 3 days, system locks up

[mrnickmay]

On the 3rd day my system locks up, some process sucks up all CPU and system becomes un-responsive. I have to do forced shutdown with holding hardware button.

This started sometime in 2025. Not sure what got installed. I've been disabling extra services and such but it still happens. It looks like something is trying to install more stuff but the install fails. Any clue? Here is the portion of the install.log and shows what it is trying to do. I'm not sure what is normal and what isn't anymore.

2025-11-09 10:38:08-05 localhost Installer Progress[134]: Progress UI App Starting
2025-11-09 10:38:16-05 Mac-mini loginwindow[179]: BootTimeInstall: Service connection invalidated.
2025-11-09 10:38:16-05 Mac-mini loginwindow[179]: isModernOS = 1
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASGetCurrentInstallPhaseList: Unable to get phases
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASGetCurrentInstallPhase: Unable to get the current phase name
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: currentPhase = "(null)", phases = (null)
2025-11-09 10:38:16-05 Mac-mini loginwindow[179]: ISAP: Show progress UI called
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASClearInstallProgress: Clearing Registry
2025-11-09 10:38:16-05 Mac-mini loginwindow[179]: ISAP: Done with Phase "IOKit Boot"
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: currentPhase = "(null)", phases = (
"<IASPPhase: 0x60000128d6c0: 'IOKit Boot', percentage 69.7, delay 0>"
)
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASSetCurrentInstallPhaseList: phases set to (
{
ConclusionDelay = 0;
InstallPhase = "IOKit Boot";
InstallPhaseActualPercentageKey = "69.72656";
InstallPhasePercentageKey = 70;
}
)
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASSetCurrentInstallPhase: Current phase name set to "IOKit Boot"
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: currentPhase = "<IASPPhase: 0x60000128d6c0: 'IOKit Boot', percentage 69.7, delay 0>", phases = (
"<IASPPhase: 0x60000128d6c0: 'IOKit Boot', percentage 69.7, delay 0>",
"<IASPPhase: 0x60000128d5c0: 'loginwindow Boot', percentage 30.3, delay -1>"
)
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASSetCurrentInstallPhaseList: phases set to (
{
ConclusionDelay = 0;
InstallPhase = "IOKit Boot";
InstallPhaseActualPercentageKey = "69.72656";
InstallPhasePercentageKey = 70;
},
{
ConclusionDelay = "-1";
InstallPhase = "loginwindow Boot";
InstallPhaseActualPercentageKey = "30.27344";
InstallPhasePercentageKey = 30;
}
)
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Connected processes {
"4B603488-C7C8-4DDA-A266-DA35F850292A" = {
"Phase Name" = "loginwindow Boot";
"Process ID" = 179;
UUID = "4B603488-C7C8-4DDA-A266-DA35F850292A";
};
}
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Connected processes {
"4B603488-C7C8-4DDA-A266-DA35F850292A" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x600003195310>";
"Phase Name" = "loginwindow Boot";
"Process ID" = 179;
UUID = "4B603488-C7C8-4DDA-A266-DA35F850292A";
};
}
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Connected processes {
"4B603488-C7C8-4DDA-A266-DA35F850292A" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x600003195310>";
"Phase Name" = "loginwindow Boot";
"Process ID" = 179;
UUID = "4B603488-C7C8-4DDA-A266-DA35F850292A";
};
"A7E25E9F-074A-4C58-9E09-16C41F222049" = {
"Phase Name" = "IOKit Boot";
"Process ID" = 179;
UUID = "A7E25E9F-074A-4C58-9E09-16C41F222049";
};
}
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Connected processes {
"4B603488-C7C8-4DDA-A266-DA35F850292A" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x600003195310>";
"Phase Name" = "loginwindow Boot";
"Process ID" = 179;
UUID = "4B603488-C7C8-4DDA-A266-DA35F850292A";
};
"A7E25E9F-074A-4C58-9E09-16C41F222049" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x60000319da90>";
"Phase Name" = "IOKit Boot";
"Process ID" = 179;
UUID = "A7E25E9F-074A-4C58-9E09-16C41F222049";
};
}
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASGetCurrentInstallPhaseList: phases = (
{
ConclusionDelay = 0;
InstallPhase = "IOKit Boot";
InstallPhaseActualPercentageKey = "69.7265625";
InstallPhasePercentageKey = 70;
},
{
ConclusionDelay = "-1";
InstallPhase = "loginwindow Boot";
InstallPhaseActualPercentageKey = "30.2734375";
InstallPhasePercentageKey = 30;
}
)
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: IASGetCurrentInstallPhase: Current phase name is "IOKit Boot"
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: currentPhase = "<IASPPhase: 0x60000128d700: 'IOKit Boot', percentage 69.7, delay 0>", phases = (
"<IASPPhase: 0x60000128d700: 'IOKit Boot', percentage 69.7, delay 0>",
"<IASPPhase: 0x60000128d5c0: 'loginwindow Boot', percentage 30.3, delay -1>"
)
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Progress app is loading…
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Progress app is running…
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Showing Progress UI
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: There are 0 window(s) and 1 display(s), 1 window(s) will be added
2025-11-09 10:38:16-05 Mac-mini Installer Progress[134]: Created a window at {{0, 0}, {1920, 1080}}
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Status is ""
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Alternate status is ""
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Setting window alpha values to 0.0
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Ordering windows front
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Ordering windows front
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Setting window alpha values to 1.0
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Done with phase = "IOKit Boot"
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: IASSetCurrentInstallPhase: Current phase name set to "loginwindow Boot"
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Connected processes {
"4B603488-C7C8-4DDA-A266-DA35F850292A" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x600003195310>";
"Phase Name" = "loginwindow Boot";
"Process ID" = 179;
UUID = "4B603488-C7C8-4DDA-A266-DA35F850292A";
};
"A7E25E9F-074A-4C58-9E09-16C41F222049" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x60000319db80>";
"Phase Name" = "IOKit Boot";
"Process ID" = 179;
UUID = "A7E25E9F-074A-4C58-9E09-16C41F222049";
};
}
2025-11-09 10:38:17-05 Mac-mini Installer Progress[134]: Connected processes {
"4B603488-C7C8-4DDA-A266-DA35F850292A" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x600003195310>";
"Phase Name" = "loginwindow Boot";
"Process ID" = 179;
UUID = "4B603488-C7C8-4DDA-A266-DA35F850292A";
};
}
2025-11-09 10:38:20-05 Mac-mini loginwindow[179]: ISAP: Done with Phase "loginwindow Boot"
2025-11-09 10:38:20-05 Mac-mini Installer Progress[134]: Done with phase = "loginwindow Boot"
2025-11-09 10:38:20-05 Mac-mini Installer Progress[134]: IASClearInstallProgress: Clearing Registry
2025-11-09 10:38:20-05 Mac-mini loginwindow[179]: ISAP: hide progress UI called
2025-11-09 10:38:20-05 Mac-mini Installer Progress[134]: Hiding Progress UI
2025-11-09 10:38:20-05 Mac-mini Installer Progress[134]: Setting window alpha values to 0.0
2025-11-09 10:38:20-05 Mac-mini Installer Progress[134]: Connected processes {
"4B603488-C7C8-4DDA-A266-DA35F850292A" = {
CompletionHandlerKey = "<__NSMallocBlock__: 0x600003194140>";
"Phase Name" = "loginwindow Boot";
"Process ID" = 179;
UUID = "4B603488-C7C8-4DDA-A266-DA35F850292A";
};
}
2025-11-09 10:38:20-05 Mac-mini Installer Progress[134]: Connected processes {
}
2025-11-09 10:38:21-05 Mac-mini Installer Progress[134]: Ordering windows out
2025-11-09 10:38:21-05 Mac-mini Installer Progress[134]: Quitting because there are no phases. There are no connected processes. The UI is not showing.
2025-11-09 10:38:21-05 Mac-mini Installer Progress[134]: Quitting Progress App
2025-11-09 10:38:21-05 Mac-mini Installer Progress[134]: Setting window alpha values to 0.0

 

[Bigwaff]

How about a clue regarding your Mac hardware year, model, and configuration?

 

[mrnickmay]

Oh, sure. Of course. But honestly, I think it is a software thing. Regardless,
Hardware Overview:
Model Name: Mac mini
Model Identifier: Macmini7,1
Processor Name: Dual-Core Intel Core i5
Processor Speed: 1.4 GHz
Number of Processors: 1
Total Number of Cores: 2
L2 Cache (per Core): 256 KB
L3 Cache: 3 MB
Hyper-Threading Technology: Enabled
Memory: 4 GB
Boot ROM Version: 433.140.2.0.0
SMC Version (system): 2.24f32

It has 1T SSD for drive as a post-Apple upgrade.

 

[!!!]

some process sucks up all CPU and system becomes un-responsive

Mind telling us what that process is? In Activity Monitor, make sure you have it set to show "All Processes" and check the CPU tab for what's consuming all your CPU.

 

[mrnickmay]

Yes, it is difficult to capture but I have managed to run top from command line when it happens. I do get to run current processes, but new processes with a GUI won't start. It normally does not run so I have to go from memory. It is some network related process.

Going by system.log history though, I can see this ... this is right at the time where it goes haywire. It is net and bluetooth related. I'm suspecting a malicious program but having issues tracking it down. Also seems telephony related -- which is weird. Not sure if it is normal to see two versions of an object here, that could be a clue. But how to tell which one should be deleted?

Nov 9 10:33:17 Mac-mini login[5177]: USER_PROCESS: 5177 ttys000
Nov 9 10:33:17 Mac-mini Terminal[5176]: assertion failed: 19H2026: libxpc.dylib + 92759 [8DA7D88F-AE2F-3BCF-8426-8D041E57A9AA]: 0x89
Nov 9 10:35:23 Mac-mini bluetoothd[5265]: objc[5265]: Class PipeInfo is implemented in both /System/Library/PrivateFrameworks/WPDaemon.framework/Versions/A/WPDaemon and /usr/sbin/bluetoothd. One of the two will be used. Which one is undefined.
Nov 9 10:35:23 Mac-mini xpcproxy[5277]: libcoreservices: _dirhelper_userdir: 557: bootstrap_look_up returned (ipc/send) invalid destination port
Nov 9 10:35:23 Mac-mini xpcproxy[5282]: libcoreservices: _dirhelper_userdir: 557: bootstrap_look_up returned (ipc/send) invalid destination port
Nov 9 10:35:23 Mac-mini CommCenter[5203]: objc[5203]: Class CTAsciiAddress is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:23 Mac-mini CommCenter[5203]: objc[5203]: Class CTCellularPlanManagerCameraScanAction is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:23 Mac-mini CommCenter[5203]: objc[5203]: Class CTPhoneNumber is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:23 Mac-mini CommCenter[5203]: objc[5203]: Class CTSimLabel is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:23 Mac-mini xpcproxy[5287]: libcoreservices: _dirhelper_userdir: 557: bootstrap_look_up returned (ipc/send) invalid destination port
Nov 9 10:35:23 Mac-mini launchd[1]: BUG in libdispatch: 19H2026 - 2914 - 0x4
Nov 9 10:35:24 Mac-mini xpcproxy[5407]: libcoreservices: _dirhelper_userdir: 557: bootstrap_look_up returned (ipc/send) invalid destination port
Nov 9 10:35:24 Mac-mini CommCenter[5313]: objc[5313]: Class CTAsciiAddress is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini CommCenter[5313]: objc[5313]: Class CTCellularPlanManagerCameraScanAction is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini CommCenter[5313]: objc[5313]: Class CTPhoneNumber is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini CommCenter[5313]: objc[5313]: Class CTSimLabel is implemented in both /System/Library/Frameworks/CoreTelephony.framework/Versions/A/CoreTelephony and /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_SEParameters is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_SEKey is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_TKDataSource is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_TKTLVRecord is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_TKBERTLVRecord is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_TKSimpleTLVRecord is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_TKCompactTLVRecord is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class CTKClientSEP_TKTokenRefSEP is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini secd[5260]: objc[5260]: Class SecXPCHelper is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security and /usr/libexec/secd. One of the two will be used. Which one is undefined.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.KernelEventAgent): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.mDNSResponder.reloaded): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.logind): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.fseventsd): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.bluetoothd): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.corebrightnessd): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.opendirectoryd): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.diskarbitrationd): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.displaypolicyd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.auditd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (org.cups.cupsd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (org.apache.httpd): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.vix.cron): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (nukshtplink): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.cleverfiles.cfbackd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.Kerberos.kdc): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.autofsd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.apfsd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.airportd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.distnoted.xpc.daemon): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.AirPlayXPCHelper): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.cfprefsd.xpc.daemon): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.coreservices.launchservicesd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.thermald): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.smbd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.netbiosd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.imklaunchagent): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini com.apple.xpc.launchd[1] (com.apple.pboard): Service only ran for 1 seconds. Pushing respawn out by 9 seconds.
Nov 9 10:35:24 Mac-mini Dock[447]: BUG in libdispatch: 19H2026 - 2914 - 0x4