spoofdpi causes kernel panic

[noobaly-original]

Version

1.3.1 (homebrew)

Country

Turkey

Operating System

MacOS Tahoe 26.4.1

How are you running spoofdpi?

Setting it up as a brew service.

Description

Out of the blue, when using the browser -> Mac shuts down completely following a purple screen of death.

Stack trace:

panic(cpu 2 caller 0xfffffe0057271718): assertion failed: ifp->if_sndbyte_unsent >= 0, file: /AppleInternal/Library/BuildRoots/4~CLdaugCir97W5Q70y4I-I04Ml2sNiYmpdkLXFbw/Library/Caches/com.apple.xbs/TemporaryDirectory.Wpi5BT/Sources/xnu/bsd/netinet/in_pcb.c, line: 4237 @uipc_socket.c:8256
Debugger message: panic
Memory ID: 0x6
OS release type: User
OS version: 25E253
Kernel version: Darwin Kernel Version 25.4.0: Thu Mar 19 19:33:09 PDT 2026; root:xnu-12377.101.15~1/RELEASE_ARM64_T8112
iBoot version: mBoot-18000.101.7
iBoot Stage 2 version: mBoot-18000.101.7
secure boot?: YES
roots installed: 0
Paniclog version: 15
Debug Header address: 0xfffffe0032331000
Debug Header entry count: 3
TXM load address: 0xfffffe004228c000
Debug Header kernelcache load address: 0xfffffe005228c000
SPTM load address: 0xfffffe003228c000
KernelCache slide: 0x000000004b288000
KernelCache base:  0xfffffe005228c000
Kernel slide:      0x000000004b290000
Kernel text base:  0xfffffe0052294000
Kernel text exec slide: 0x000000004f91c000
Kernel text exec base:  0xfffffe0056920000
mach_absolute_time: 0xe07e26f0bc
Epoch Time:        sec       usec
  Boot    : 0x69f73d19 0x0009192f
  Sleep   : 0x69f8e630 0x000923db
  Wake    : 0x69f8e6f7 0x000b9abe
  Calendar: 0x69f8e895 0x000d20a6

Zone info:
  Zone map: 0xfffffe1020000000 - 0xfffffe3620000000
  . VM    : 0xfffffe1020000000 - 0xfffffe15ec000000
  . RO    : 0xfffffe15ec000000 - 0xfffffe1886000000
  . GEN0  : 0xfffffe1886000000 - 0xfffffe1e52000000
  . GEN1  : 0xfffffe1e52000000 - 0xfffffe241e000000
  . GEN2  : 0xfffffe241e000000 - 0xfffffe29ea000000
  . GEN3  : 0xfffffe29ea000000 - 0xfffffe2fb6000000
  . DATA  : 0xfffffe2fb6000000 - 0xfffffe3620000000
  Metadata: 0xfffffe490e010000 - 0xfffffe4917810000
  Bitmaps : 0xfffffe4917810000 - 0xfffffe4918ddc000
  Extra   : 0 - 0

CORE 0 [EACC0] recently retired instr at 0xfffffe0056afb230
CORE 1 [EACC0] recently retired instr at 0xfffffe0056afb230
CORE 2 [EACC0] recently retired instr at 0xfffffe0056af9b50
CORE 3 [EACC0] recently retired instr at 0xfffffe0056afb230
CORE 4 [PACC1] recently retired instr at 0xfffffe0056afb230
CORE 5 [PACC1] recently retired instr at 0xfffffe0056afb230
CORE 6 [PACC1] recently retired instr at 0xfffffe0056afb230
CORE 7 [PACC1] recently retired instr at 0xfffffe0056afb230
TPIDRx_ELy = {1: 0xfffffe29ed6ed5d0  0: 0x0000000000000002  0ro: 0x0000000174bf30e0 }
CORE 0: PC=0x00000001921f40c4, LR=0x0000000100ec6c2c, FP=0x000000010f045970
CORE 1: PC=0xfffffe0056dbac6c, LR=0xfffffe0056dafc68, FP=0xfffffe84892b7270
CORE 2 is the one that panicked. Check the full backtrace for details.
CORE 3: PC=0x000000019303615c, LR=0x0000000192f2d15c, FP=0x000000010ee46de0
CORE 4: PC=0xfffffe00569b3bbc, LR=0xfffffe00569b3bb8, FP=0xfffffe8489267ee0
CORE 5: PC=0xfffffe00569b3bbc, LR=0xfffffe00569b3bb8, FP=0xfffffe848b337ee0
CORE 6: PC=0xfffffe00569b3bb8, LR=0xfffffe00569b3bb8, FP=0xfffffe848b257ee0
CORE 7: PC=0xfffffe00569b3bbc, LR=0xfffffe00569b3bb8, FP=0xfffffe8489287ee0
Compressor Info: 7% of compressed pages limit (OK) and 3% of segments limit (OK) with 2 swapfiles and OK swap space
Panicked task 0xfffffe2316f26b30: 2462 pages, 55 threads: pid 844: spoofdpi
Panicked thread: 0xfffffe29ed6ed5d0, backtrace: 0xfffffe8489af7230, tid: 10553
		  lr: 0xfffffe00569753dc  fp: 0xfffffe8489af72d0
		  lr: 0xfffffe0056af1c74  fp: 0xfffffe8489af7340
		  lr: 0xfffffe0056aefbc8  fp: 0xfffffe8489af7400
		  lr: 0xfffffe005692590c  fp: 0xfffffe8489af7410
		  lr: 0xfffffe00569756ec  fp: 0xfffffe8489af7930
		  lr: 0xfffffe00572604a8  fp: 0xfffffe8489af7950
		  lr: 0xfffffe0057271718  fp: 0xfffffe8489af7990
		  lr: 0xfffffe0056d7bac0  fp: 0xfffffe8489af79a0
		  lr: 0xfffffe0056f83dd0  fp: 0xfffffe8489af7a10
		  lr: 0xfffffe0056f84618  fp: 0xfffffe8489af7a80
		  lr: 0xfffffe0056dc3868  fp: 0xfffffe8489af7b10
		  lr: 0xfffffe0056f77aa0  fp: 0xfffffe8489af7c80
		  lr: 0xfffffe0056f4dc08  fp: 0xfffffe8489af7cb0
		  lr: 0xfffffe0056f46324  fp: 0xfffffe8489af7d00
		  lr: 0xfffffe0056f467a0  fp: 0xfffffe8489af7d70
		  lr: 0xfffffe0056f46ab4  fp: 0xfffffe8489af7df0
		  lr: 0xfffffe0057076914  fp: 0xfffffe8489af7e50
		  lr: 0xfffffe0056aefc5c  fp: 0xfffffe8489af7f10
		  lr: 0xfffffe005692590c  fp: 0xfffffe8489af7f20
		  lr: 0x000000018a53b834  fp: 0x0000000000000000


last started kext at 701170993388: com.apple.driver.AppleUVDMDriver	1.0.0 (addr 0xfffffe0052a4e2d0, size 6648)
loaded kexts: (skipped, see boot kernelcache)

** Stackshot Succeeded ** Bytes Traced 467713 (Uncompressed 1099184) **

it can be seen as "panicked task:spoofdpi"

edits: put the stack trace in code block.

[xvzc]

I can't rule out the possibility that this is a kernel issue with the beta version of macOS. Could you share your configuration?

[noobaly-original]

Hi, I did not opt for any beta versions of macOS; Here are my configs:

[noobaly-original]

Oh I should show loaded kext too just incase;

Edit: I should also mention this was not happening before and I've been using Spoofdpi for a while. Happened out of nowhere when I was just about to do something on my browser. The first time it happened no stack trace was present on logging in to Mac, but the second time the stack trace up there was what I was met with and unfortunately lost some notes I had taken due to the kernel panic. I disabled it using "brew services stop spoofdpi" (previously I set it up with "brew services start spoofdpi")

Config file's absolute path is /etc/spoofdpi.toml and it does require the use of 'sudo' to actually write over it with nano if that makes a difference.

Name (Version)
com.apple.kpi.bsd (25.4.0)
com.apple.kpi.dsep (25.4.0)
com.apple.kpi.iokit (25.4.0)
com.apple.kpi.libkern (25.4.0)
com.apple.kpi.mach (25.4.0)
com.apple.kpi.private (25.4.0)
com.apple.kpi.unsupported (25.4.0)
com.apple.kec.corecrypto (26.0)
com.apple.kec.AppleEncryptedArchive (1)
com.apple.kec.Compression (1.0)
com.apple.kec.InvalidateHmac (1)
com.apple.kec.Libm (1)
com.apple.kec.pthread (1)
com.apple.iokit.IOCryptoAcceleratorFamily (1.0.1)
com.apple.kext.CoreTrust (1)
com.apple.security.AppleImage4 (7.0.0)
com.apple.iokit.CoreAnalyticsFamily (1)
com.apple.driver.AppleMobileFileIntegrity (1.0.5)
com.apple.kext.AppleMatch (1.0.0d1)
com.apple.iokit.IOStorageFamily (2.1)
com.apple.security.sandbox (300.0)
com.apple.security.quarantine (4)
com.apple.AppleSystemPolicy (2.0.0)
com.apple.iokit.IOReportFamily (47)
com.apple.iokit.IOSlowAdaptiveClockingFamily (1.0.0)
com.apple.driver.AppleARMPlatform (1.0.2)
com.apple.driver.ApplePIODMA (1)
com.apple.driver.IODARTFamily (1)
com.apple.iokit.IOSerialFamily (11)
com.apple.iokit.IONetworkingFamily (3.4)
com.apple.driver.mDNSOffloadUserClient (1.0.1b8)
com.apple.iokit.IOSkywalkFamily (1.0)
com.apple.driver.AppleOnboardSerial (1.0)
com.apple.iokit.IOHIDFamily (2.0.0)
com.apple.iokit.IOAccessoryManager (1.0.0)
com.apple.iokit.IOPCIFamily (2.9)
com.apple.iokit.IOPortFamily (1.0)
com.apple.driver.AppleEmbeddedPCIE (1)
com.apple.driver.corecapture (1.0.4)
com.apple.driver.IOSlaveProcessor (1)
com.apple.driver.AppleA7IOP (1.0.2)
com.apple.driver.AppleARMPMU (1.0)
com.apple.driver.AppleEmbeddedTempSensor (1.0.0)
com.apple.driver.RTBuddy (1.0.0)
com.apple.driver.AppleSMC (3.1.9)
com.apple.driver.usb.AppleUSBCommon (1.0)
com.apple.driver.AppleUSBHostMergeProperties (1.2)
com.apple.iokit.IOUSBHostFamily (1.2)
com.apple.driver.AppleMultiFunctionManager (1)
com.apple.driver.AppleFireStormErrorHandler (1)
com.apple.driver.AppleT8110 (1)
com.apple.driver.AppleAudioClockLibs (540.3)
com.apple.driver.AppleFirmwareUpdateKext (1)
com.apple.driver.AppleEmbeddedAudioLibs (540.3)
com.apple.driver.AppleIISController (540.4)
com.apple.driver.AppleMCA2-T8112 (1040.2)
com.apple.driver.AppleT8112PCIe (1)
com.apple.driver.AppleT8110DART (1)
com.apple.iokit.IOThunderboltFamily (9.3.3)
com.apple.driver.AppleT8103PCIeC (1)
com.apple.driver.AppleT8103PCIeCPIODMA (1)
com.apple.driver.AppleGPIOICController (1.0.2)
com.apple.driver.AppleThunderboltNHI (7.2.81)
com.apple.driver.AppleA7IOP-MXWrap-v1 (1.0.2)
com.apple.driver.AppleTypeCPhy (1)
com.apple.iokit.IOAudio2Family (1.0)
com.apple.iokit.IOCECFamily (1)
com.apple.iokit.IOHDCPFamily (1.0.0)
com.apple.iokit.IOAVFamily (1.0.0)
com.apple.iokit.IODisplayPortFamily (1.0.0)
com.apple.driver.AppleDisplayCrossbar (1.0.0)
com.apple.driver.AppleM68Buttons (1.0.0d1)
com.apple.driver.AppleBluetoothModule (1)
com.apple.driver.AppleOLYHAL (1)
com.apple.driver.IOImageLoader (1.0.0)
com.apple.iokit.IO80211Family (1200.13.1)
com.apple.iokit.IOTimeSyncFamily (1440.24)
com.apple.driver.AppleBCMWLANCore (1.0.0)
com.apple.driver.AppleBluetoothDebugService (1)
com.apple.driver.AppleBCMWLANBusInterfacePCIe (1)
com.apple.driver.AppleS5L8940XI2C (1.0.0d2)
com.apple.driver.AppleSPIMC (1)
com.apple.driver.AppleS5L8920XPWM (1.0.0d1)
com.apple.driver.FairPlayIOKit (72.14.0)
com.apple.iokit.IOSurface (393.5.7)
com.apple.AUC (1.0)
com.apple.driver.AppleBiometricSensor (2)
com.apple.driver.AppleSEPManager (1.0.1)
com.apple.driver.AppleCredentialManager (1.0)
com.apple.driver.AppleDiskImages2 (524.100.22)
com.apple.driver.AppleEffaceableStorage (1.0)
com.apple.driver.AppleFDEKeyStore (28.30)
com.apple.driver.AppleH11ANEInterface (9.511.3)
com.apple.driver.AppleIPAppender (1.0)
com.apple.driver.AppleLockdownMode (1)
com.apple.iokit.IORSMFamily (1)
com.apple.driver.AppleRSMChannel (1)
com.apple.iokit.IOSCSIArchitectureModelFamily (545.100.10)
com.apple.iokit.IOSCSIBlockCommandsDevice (545.100.10)
com.apple.iokit.IOUSBMassStorageDriver (280)
com.apple.driver.AppleUSBTDM (562)
com.apple.driver.AppleSEPKeyStore (2)
com.apple.driver.AppleUIO (1)
com.apple.iokit.EndpointSecurity (1)
com.apple.iokit.IOBluetoothFamily (9.0.0)
com.apple.iokit.IOGraphicsFamily (600)
com.apple.driver.DiskImages (493.0.0)
com.apple.iokit.IOKitRegistryCompatibility (1)
com.apple.driver.usb.AppleUSBUserHCI (1)
com.apple.iokit.IOUserEthernet (1.0.1)
com.apple.driver.AppleMobileApNonce (1)
com.apple.driver.AppleS8000DWI (1.0.0d1)
com.apple.driver.AppleA7IOP-ASCWrap-v4 (1.0.2)
com.apple.driver.AudioDMAController-T8112 (540.26)
com.apple.driver.AppleFirmwareKit (1)
com.apple.driver.DCPAVFamilyProxy (1)
com.apple.iokit.IOGPUFamily (130.13)
com.apple.AGXG14G (350.38)
com.apple.driver.AppleInterruptControllerV2 (1.0.0d1)
com.apple.driver.AppleARMWatchdogTimer (1)
com.apple.driver.AppleS8000AES (1)
com.apple.driver.ApplePMGR (1)
com.apple.driver.AppleT8112PMGR (1)
com.apple.driver.AppleS5L8960XNCO (1)
com.apple.driver.AppleEventLogHandler (1)
com.apple.driver.AppleSART (1)
com.apple.driver.AppleSerialShim (1)
com.apple.driver.AppleSamsungSerial (1.0.0d1)
com.apple.driver.AppleDockChannel (1)
com.apple.driver.AppleT8103TypeCPhy (1)
com.apple.driver.AppleT8112TypeCPhy (1)
com.apple.driver.AppleSPMI (1.0.1)
com.apple.driver.AppleM2ScalerCSCDriver (265.0.0)
com.apple.iokit.IOMobileGraphicsFamily (343.0.0)
com.apple.driver.AppleDCP (1)
com.apple.iokit.IOMobileGraphicsFamily-DCP (343.0.0)
com.apple.driver.AppleMobileDispH14G-DCP (140.0)
com.apple.driver.usb.AppleUSBHostCompositeDevice (1.2)
com.apple.driver.usb.AppleUSBHub (1.2)
com.apple.driver.AppleEmbeddedUSBHost (1)
com.apple.driver.usb.AppleUSBXHCI (1.2)
com.apple.driver.usb.AppleSynopsysUSBXHCI (1)
com.apple.driver.usb.AppleSynopsysUSB40XHCI (1)
com.apple.iokit.IOUSBDeviceFamily (2.0.0)
com.apple.driver.AppleUSBXDCI (1.0)
com.apple.driver.AppleUSBXDCIARM (1.0)
com.apple.driver.ApplePMPFirmware (1)
com.apple.driver.AppleAVD (960)
com.apple.driver.AppleH13CameraInterface (10.300.0)
com.apple.driver.AppleNANDConfigAccess (1.0.0)
com.apple.iokit.IONVMeFamily (2.1.0)
com.apple.driver.AppleProResHW (575)
com.apple.driver.AppleJPEGDriver (7.7.9)
com.apple.driver.AppleAVE2 (905.36.1)
com.apple.driver.AppleDialogPMU (1.0.1)
com.apple.driver.AppleSPMIPMU (1.0.1)
com.apple.driver.AppleSPU (1)
com.apple.AGXFirmwareKextRTBuddy64 (350.38)
com.apple.AGXFirmwareKextG14GRTBuddy (1)
com.apple.driver.ApplePassthroughPPM (3.0)
com.apple.driver.AppleT8112CLPC (1)
com.apple.driver.ApplePMP (1)
com.apple.driver.AppleInputDeviceSupport (9420.5)
com.apple.driver.AppleHIDTransport (9420.5)
com.apple.driver.AppleHIDTransportSCMCommon (9420.5)
com.apple.driver.AppleHIDTransportFIFO (9420.5)
com.apple.driver.AppleSmartIO2 (1)
com.apple.driver.AppleStockholmControl (1.0.0)
com.apple.driver.DCPDPFamilyProxy (1)
com.apple.driver.AppleDCPDPTXProxy (1.0.0)
com.apple.driver.AppleT8020SOCTuner (1)
com.apple.driver.AppleSSE (1.0)
com.apple.driver.ExclavesAudioKext (340.22)
com.apple.driver.IISAudioIsolatedStreamECProxy (540.16)
com.apple.iokit.AppleARMIISAudio (540.16)
com.apple.driver.AppleEmbeddedAudio (940.17)
com.apple.driver.AppleSN012776Amp (940.17)
com.apple.driver.AppleTypeCRetimer (1.0.0)
com.apple.driver.AppleDPDisplayTCON (1)
com.apple.driver.AppleCSEmbeddedAudio (940.17)
com.apple.driver.AppleCS42L84Audio (940.17)
com.apple.driver.AppleDiagnosticDataAccessReadOnly (1.0.0)
com.apple.driver.AppleHPM (3.4.4)
com.apple.AppleEmbeddedSimpleSPINORFlasher (1)
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless (1.0.0d1)
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib (1.0.0)
com.apple.driver.AppleSyntheticGameController (13.4.9)
com.apple.BootCache (40)
com.apple.security.BootPolicy (1)
com.apple.filesystems.hfs.encodings.kext (1)
com.apple.filesystems.hfs.kext (715.100.10)
com.apple.driver.AppleCallbackPowerSource (1)
com.apple.driver.IOHIDPowerSource (1)
com.apple.IOTextEncryptionFamily (1.0.0)
com.apple.driver.usb.AppleUSBHostPacketFilter (1.0)
com.apple.filesystems.apfs (2811.101.1)
com.apple.filesystems.lifs (1)
com.apple.kext.triggers (1.0)
com.apple.filesystems.nfs (1)
com.apple.driver.AppleBSDKextStarter (3)
com.apple.plugin.IOgPTPPlugin (1440.24)
com.apple.filesystems.tmpfs (1)
com.apple.nke.ppp (1.9)
com.apple.nke.l2tp (1.9)
com.apple.driver.AppleFileSystemDriver (3.0.1)
com.apple.driver.AppleAuthCP (1.0.0)
com.apple.driver.AppleThunderboltDPAdapterFamily (8.5.1)
com.apple.driver.AppleThunderboltDPInAdapter (8.5.1)
com.apple.driver.AppleThunderboltPCIDownAdapter (4.1.1)
com.apple.driver.AppleThunderboltUSBDownAdapter (1.0.4)
com.apple.driver.AppleThunderboltIP (4.0.3)
com.apple.driver.usb.networking (5.0.0)
com.apple.driver.AppleUSBDeviceNCM (5.0.0)
com.apple.driver.AppleSmartBatteryManager (161.0.0)
com.apple.driver.AppleBTM (1.0.1)
com.apple.driver.AppleBluetoothDebug (1)
com.apple.driver.AppleConvergedPCI (1)
com.apple.driver.AppleConvergedIPCOLYBTControl (1)
com.apple.driver.SEPHibernation (1)
com.apple.iokit.AppleSEPGenericTransfer (1)
com.apple.driver.AppleTrustedAccessory (1)
com.apple.driver.AppleSEPHDCPManager (1.0.1)
com.apple.driver.AppleXsanScheme (3)
com.apple.driver.DiskImages.KernelBacked (493.0.0)
com.apple.driver.DiskImages.FileBackingStore (493.0.0)
com.apple.driver.DiskImages.RAMBackingStore (493.0.0)
com.apple.driver.DiskImages.UDIFDiskImage (493.0.0)
com.apple.driver.DiskImages.ReadWriteDiskImage (493.0.0)
com.apple.driver.AppleAOPVoiceTrigger (540.3)
com.apple.driver.AppleAOPAudio (540.1)
com.apple.EXBrightCalibrationConsumer (1.0.0)
com.apple.driver.AppleALSColorSensor (1.0.0d1)
com.apple.iokit.IOAVBFamily (1440.7)
com.apple.driver.CoreKDL (1)
com.apple.iokit.IOBiometricFamily (1)
com.apple.driver.AppleMesaSEPDriver (100.99)
com.apple.driver.AppleBiometricServices (1)
com.apple.driver.AppleMultitouchDriver (9440.9)
com.apple.driver.AppleActuatorDriver (9440.9)
com.apple.driver.AppleHIDKeyboard (9410.2)
com.apple.driver.AppleTopCaseHIDEventDriver (9440.6)
com.apple.driver.driverkit.serial (6.0.0)
com.apple.filesystems.autofs (3.0)
com.apple.driver.usb.AppleUSBHostiOSDevice (1.0)
com.apple.iokit.IOAudioFamily (740.1)
com.apple.driver.AppleUSBAudio (841.2)
com.apple.driver.usb.cdc (5.0.0)
com.apple.driver.usb.cdc.ncm (5.0.0)
com.apple.driver.usb.serial (6.0.0)
com.apple.driver.usb.cdc.acm (5.0.0)
com.apple.driver.usb.cdc.ecm (5.0.0)
com.apple.macos.driver.AppleUSBEthernetHost (8.1.1)
com.apple.driver.AppleUVDM (1.0.0)
com.apple.driver.AppleUVDMDriver (1.0.0)

[xvzc]

There must have been a race condition when counting ifp->if_sndbyte_unsent. The failed assertion itself means that the number of unsent bytes cannot be less than 0, which logically makes a lot of sense. When setting chunk-size = 1 and disorder = true, your kernel has to process roughly 1000x more packets during the initial phase of each HTTPS connection. I would recommend setting split-mode = "random" or taking a look at the policy-based setup to only enable desyncing for specific domains or CIDRs.

I'd recommend either:

• Setting split-mode = "random" to reduce chunk count, or
• Using the policy-based setup to enable desyncing only for specific domains or CIDRs.

[winens]

i have been trying to figure it out what causes my kernel panics (pink screen death) over the last month and finally irs resolved...

but some restricted apps like Discord is not opening when not using agressive profile.

[xvzc]

@winens Could you provide more details about your environment and how to reproduce?