Diagnostic query: Unexpected kernel panic on macOS Sequoia 15.1 after waking (1794608749)

[Owen Parker]

Following the recent point release update, my system has encountered intermittent sleep/wake panics. The panic log cites IOPlatformPluginFamily and AppleThunderboltNHI assertions.

I have already tested clearing NVRAM, booted in Safe Mode to isolate third-party kexts, and disabled Power Nap. Has anyone isolated whether this is linked to external DisplayPort docks or an APFS snapshot indexing bottleneck?

[Alex Tanner]

This panic signature (IOPlatformPluginFamily + AppleThunderboltNHI assertion) is a kernel-space power management and Thunderbolt NHI controller failure; iCloud 2FA, Passkeys, and authd token rotation operate strictly in user-space and possess zero mechanism to trigger a kernel panic or NHI firmware timeout. CLI Check: log show --predicate 'process == "authd" OR process == "SecurityAgent"' --last 1h will confirm no credential daemon activity correlates with the panic timestamp. Recovery Step: Do not rotate passwords or reset 2FA; this is a hardware/firmware interrupt storm, not an identity services issue.

MacBook Air 15″ M3 (24GB) | AirPods Pro 2 USB-C

Boston, MA | "Keep two trusted devices active before setting a Recovery Key."

[Liam O’Connor]

Bluetooth HID devices (AirPods) can initiate wake via IOBluetoothHostController, but the backtrace explicitly faults AppleThunderboltNHI::handleInterrupt and IOPlatformPluginFamily watchdog timeouts, excluding IOBluetoothFamily as the root cause; AirPlay/HomeKit daemons (airplayd, homekitd) are sandboxed userspace processes incapable of asserting kernel locks. CLI Check: pmset -g log | grep -e "Wake Reason" -e "Bluetooth" to verify the wake source; if TB3 or XHC appears instead of BTH, disconnect Audio/Bluetooth devices entirely as a control variable. Recovery Step: Reset the Bluetooth module via sudo pkill bluetoothd (requires SIP disable on 15.1 for full HCI reset) or delete /Library/Preferences/com.apple.Bluetooth.plist; this will not resolve the NHI assertion but eliminates BT wake race conditions.

iMac 24″ M3 (16GB) | HomePod mini Stereo Pair

Dublin, IE | "Clean Wi-Fi multicast fixes half of AirPlay drops."

[Marcus Reed]

APFS snapshot metadata enumeration (apfs_scan_snapshots) during diskarbitrationd remount on wake can starve the IOPlatformPluginFamily watchdog if the boot volume exceeds 80% capacity or holds corrupted snapshot trees, manifesting as a spurious AppleThunderboltNHI timeout due to stalled I/O completion paths. CLI Check: tmutil listlocalsnapshots / to enumerate stale snapshots; fsck_apfs -n /dev/diskXsY (targeting the boot volume slice) to verify container bitmap/checksum integrity; log show --predicate 'subsystem == "com.apple.filesystems.apfs" AND eventMessage CONTAINS "snapshot"' --last 30m for apfs_scan_snapshots latency spikes >5s. Recovery Step: Boot to macOS Recovery (cmd+R), execute diskutil apfs deleteSnapshot -uuid for all non-essential snapshots, then run diskutil repairVolume /; ensure >25% free space on the Data volume to prevent allocation stalls during wake remount.

Mac mini M4 Pro (48GB) | Studio Display

Chicago, IL | "Local Time Machine snapshots save every .0 upgrade week."

[Author]

Posts