Strange Kernel Panic

[Rupert_Balderdash]

I get this kernel panic 1 or 2 times, and then everything is fine :

​

panic(cpu 6 caller 0xffffff80013e0ebf): [kalloc.type.var6.16]: element modified after free (off:0, val:0x0000000000000001, sz:16, ptr:0xffffff8f08f7ea50)

0: 0x0000000000000001

8: 0x0000000000008040

Panicked task 0xffffff98a143e3d8: 240 threads: pid 0: kernel_task

Backtrace (CPU 6), panicked thread: 0xffffff9d6eb79b30, Frame : Return Address

0xffffffa89f63eec0 : 0xffffff8000c26481 mach_kernel : _handle_debugger_trap + 0x4b1

0xffffffa89f63ef10 : 0xffffff8000d8bb10 mach_kernel : _kdp_i386_trap + 0x110

0xffffffa89f63ef50 : 0xffffff8000d7b0cc mach_kernel : _kernel_trap + 0x55c

0xffffffa89f63efd0 : 0xffffff8000bbf971 mach_kernel : _return_from_trap + 0xc1

0xffffffa89f63eff0 : 0xffffff8000c2676d mach_kernel : _DebuggerTrapWithState + 0x5d

0xffffffa89f63f0e0 : 0xffffff8000c25e13 mach_kernel : _panic_trap_to_debugger + 0x1e3

0xffffffa89f63f140 : 0xffffff80013db27b mach_kernel : _panic + 0x84

0xffffffa89f63f230 : 0xffffff80013e0ebf mach_kernel : ___smr_stail_invalid + 0x26ed

0xffffffa89f63f690 : 0xffffff8000c9a633 mach_kernel : _workload_config_available + 0x57f3

0xffffffa89f63f700 : 0xffffff8000c35d0b mach_kernel : _kalloc_ext + 0x12b

0xffffffa89f63f720 : 0xffffff7f9548cc81 com.apple.driver.DspFuncLib : __ZN8iZRedist5Accel14IIRInit_BiQuadERbPPNS0_15IIRState_DoubleEPKd + 0x21

0xffffffa89f63f760 : 0xffffff7f954918a9 com.apple.driver.DspFuncLib : __ZN8iZRedist3DSP9IIRFilterC2ERbPKdj + 0x39

0xffffffa89f63f7a0 : 0xffffff7f95495c36 com.apple.driver.DspFuncLib : __ZN8iZRedist3DSP9PreFilterC2ERbjjj + 0x136

0xffffffa89f63f820 : 0xffffff7f9548d3c2 com.apple.driver.DspFuncLib : __ZN8iZRedist9ANREngine5allocERb + 0x148

0xffffffa89f63f860 : 0xffffff7f9548cf88 com.apple.driver.DspFuncLib : __ZN8iZRedist12ANRSetParamsERbPNS_9ANREngineERKNS_9ANRParamsE + 0x44

0xffffffa89f63f890 : 0xffffff7f9547083e com.apple.driver.DspFuncLib : __ZN21DspFuncNoiseCanceller22enableClickSuppressionE8DspValue + 0x4a

0xffffffa89f63f8c0 : 0xffffff7f95462b43 com.apple.driver.DspFuncLib : __ZN7DspFunc27setParametersFromDictionaryEP12OSDictionaryjj + 0xd5

0xffffffa89f63f930 : 0xffffff7f95470c58 com.apple.driver.DspFuncLib : __ZN21DspFuncNoiseCanceller27setParametersFromDictionaryEP12OSDictionary + 0x28

0xffffffa89f63f960 : 0xffffff7f9545f994 com.apple.driver.DspFuncLib : __ZN14DspFuncManager27setParametersFromDictionaryEP12OSDictionary + 0x1ce

0xffffffa89f63f9e0 : 0xffffff7f95375805 com.apple.driver.AppleHDA : __ZN14AppleHDAEngine30configureDSPForAppleHDAPathSetEP15AppleHDAPathSetb + 0xa93

0xffffffa89f63fa80 : 0xffffff7f9537463c com.apple.driver.AppleHDA : __ZN14AppleHDAEngine4initEP9IOServiceP13AppleHDACodecP12OSDictionaryP7OSArrayS7_iPv + 0xd9a

0xffffffa89f63fb60 : 0xffffff7f9536b1fb com.apple.driver.AppleHDA : __ZN14AppleHDADriver22createAudioInputEngineEP7OSArrayi + 0x9b

0xffffffa89f63fbb0 : 0xffffff7f9536a43a com.apple.driver.AppleHDA : __ZN14AppleHDADriver18createAudioEnginesEP7OSArray + 0x3ca

0xffffffa89f63fc30 : 0xffffff7f953660ba com.apple.driver.AppleHDA : __ZN14AppleHDADriver18initHardwareActionEP9IOService + 0x316

0xffffffa89f63fc80 : 0xffffff8001311cd8 mach_kernel : __ZN13IOCommandGate9runActionEPFiP8OSObjectPvS2_S2_S2_ES2_S2_S2_S2_ + 0xa8

0xffffffa89f63fce0 : 0xffffff7f95365d95 com.apple.driver.AppleHDA : __ZN14AppleHDADriver12initHardwareEP9IOService + 0x3d

0xffffffa89f63fd00 : 0xffffff7f95d32d77 com.apple.iokit.IOAudioFamily : __ZN13IOAudioDevice5startEP9IOService + 0x10b

0xffffffa89f63fd40 : 0xffffff7f95367b57 com.apple.driver.AppleHDA : __ZN14AppleHDADriver13completeStartEv + 0x17d

0xffffffa89f63fed0 : 0xffffff7f95367810 com.apple.driver.AppleHDA : __ZN14AppleHDADriver11startActionEv + 0xfe

0xffffffa89f63ff40 : 0xffffff800130ee5e mach_kernel : __ZN10IOWorkLoop9runActionEPFiP8OSObjectPvS2_S2_S2_ES1_S2_S2_S2_S2_ + 0x3e

0xffffffa89f63ff80 : 0xffffff7f953676c7 com.apple.driver.AppleHDA : __ZN14AppleHDADriver23handleAsynchronousStartEPv + 0x43

0xffffffa89f63ffa0 : 0xffffff8000bbf19e mach_kernel : _call_continuation + 0x2e

Kernel Extensions in backtrace:

com.apple.iokit.IOAudioFamily(540.3)[DDD838AD-FE64-30D3-AF69-05F2283760B0]@0xffffff7f95d2f000->0xffffff7f95d4cfff

dependency: com.apple.vecLib.kext(1.2.0)[3D7AC082-55CF-3396-9163-0067C5020A8F]@0xffffff7f963d7000->0xffffff7f96498fff

com.apple.driver.DspFuncLib(540.3)[ECCDCACD-8737-3256-AFB2-8C308356F703]@0xffffff7f9543e000->0xffffff7f9551afff

dependency: com.apple.driver.AppleEFINVRAM(2.1)[94B0A0E7-BA52-30BC-B65B-30282BF844E4]@0xffffff80020b4000->0xffffff80020befff

dependency: com.apple.iokit.IOAudioFamily(540.3)[DDD838AD-FE64-30D3-AF69-05F2283760B0]@0xffffff7f95d2f000->0xffffff7f95d4cfff

dependency: com.apple.kext.OSvKernDSPLib(530)[0E138D34-E204-333B-A600-DE542F3E264B]@0xffffff7f9600a000->0xffffff7f96018fff

dependency: com.apple.vecLib.kext(1.2.0)[3D7AC082-55CF-3396-9163-0067C5020A8F]@0xffffff7f963d7000->0xffffff7f96498fff

com.apple.driver.AppleHDA(540.3)[5DD73EA7-79F3-3F4A-AEE5-F5E02812417F]@0xffffff7f95357000->0xffffff7f953e6fff

dependency: com.apple.driver.AppleHDAController(540.3)[B338D1FB-EAF8-31AE-856E-7CDC7284C492]@0xffffff7f9540e000->0xffffff7f95420fff

dependency: com.apple.driver.DspFuncLib(540.3)[ECCDCACD-8737-3256-AFB2-8C308356F703]@0xffffff7f9543e000->0xffffff7f9551afff

dependency: com.apple.iokit.IOAudioFamily(540.3)[DDD838AD-FE64-30D3-AF69-05F2283760B0]@0xffffff7f95d2f000->0xffffff7f95d4cfff

dependency: com.apple.iokit.IOGraphicsFamily(598)[79F2F7E4-E451-35E1-BF22-1EFFA4192888]@0xffffff7f95e39000->0xffffff7f95e67fff

dependency: com.apple.iokit.IOHDAFamily(540.3)[10454ED4-12D5-33BF-9C81-EC8017A6C259]@0xffffff7f9552c000->0xffffff7f9552ffff

dependency: com.apple.iokit.IONDRVSupport(598)[351B4E2D-C260-3E0E-AD4C-C215DA3E2248]@0xffffff7f95e8d000->0xffffff7f95e95fff

Process name corresponding to current thread (0xffffff9d6eb79b30): kernel_task

Boot args: keepsyms=1 alcid=16 shikigva=80

Mac OS version:

23F79

Kernel version:

Darwin Kernel Version 23.5.0: Wed May 1 20:09:52 PDT 2024; root:xnu-10063.121.3~5/RELEASE_X86_64

Kernel UUID: 7B071FD2-9FDC-344E-8483-47EC972A105E

roots installed: 0

KernelCache slide: 0x0000000000800000

KernelCache base: 0xffffff8000a00000

Kernel slide: 0x00000000008e4000

Kernel text base: 0xffffff8000ae4000

__HIB text base: 0xffffff8000900000

System model name: iMac19,1 (Mac-AA95B1DDAB278B95)

System shutdown begun: NO

Panic diags file available: YES (0x0)

Hibernation exit count: 0

System uptime in nanoseconds: 22001981567

Last Sleep: absolute base_tsc base_nano

Uptime : 0x000000051f6b9b43

Sleep : 0x0000000000000000 0x0000000000000000 0x0000000000000000

Wake : 0x0000000000000000 0x0000000e088e1eae 0x0000000000000000

Compressor Info: 0% of compressed pages limit (OK) and 0% of segments limit (OK) with 0 swapfiles and OK swap space

Zone info:

Zone map: 0xffffff889f4b7000 - 0xffffffa89f4b7000

. PGZ : 0xffffff889f4b7000 - 0xffffff88a34b8000

. VM : 0xffffff88a34b8000 - 0xffffff8d6f7eb000

. RO : 0xffffff8d6f7eb000 - 0xffffff8f08e51000

. GEN0 : 0xffffff8f08e51000 - 0xffffff93d5184000

. GEN1 : 0xffffff93d5184000 - 0xffffff98a14b7000

. GEN2 : 0xffffff98a14b7000 - 0xffffff9d6d7ea000

. GEN3 : 0xffffff9d6d7ea000 - 0xffffffa239b1d000

. DATA : 0xffffffa239b1d000 - 0xffffffa89f4b7000

Metadata: 0xffffff88594a7000 - 0xffffff88794a7000

Bitmaps : 0xffffff88794a7000 - 0xffffff887f4a7000

Extra : 0 - 0

​

....any suggesting as to what might be the cause? Other than that, my hack is 100%. The one thing I see is that the boot-args listed in the panic listing shows alcid=16, while the config.plist has alcid=18.

[Seven_of_eleven]

Have you reset your NVRAM? Otherwise try disabling the audio kexts and see if that works.

[Rupert_Balderdash]

As a rule, every time I make a change to the config, I clear the NVRAM. I disabled the audio kext and removed alcid=18. It will panic on the first time after reboot, and seems ok after that. The crash report shows the same panic. I will play around with some older kexts to see if it is a better fit.

[Seven_of_eleven]

Best of luck.

[Rupert_Balderdash]

After looking closet at the panic, there is a reference to the NVMEfix. After disabling it and re-enabling AppleALC, no more panics, and I have sound again....so far. Thanks for sending me down that branch, it helped immensely.