Kernel panic unless I remove IOGraphicsFamily.kext bit from config.yml

[fstanis]

Hey all, I tried to install this on Intel i9-14900KF and at first I kept getting a kernel panic:

shared_region: 0xdd339615e75999bf [311(exfat.util)] check_np(0x7ff7bbb7dbe8) vm_shared_region_start_address() failed
shared_region: 0xdd339615e75999bf [311(exfat.util)] check_np(0x7ff7bbb7cb98) vm_shared_region_start_address() failed
shared_region: 0xdd339615e7aa2f57 [312(exfat.util)] check_np(0x7ff7bba73be8) vm_shared_region_start_address() failed
shared_region: 0xdd339615e70ee127 [313(exfat.util)] check_np(0x7ff7bb1a5abe0) vm_shared_region_start_address() failed
shared_region: 0xdd339615e70ee127 [313(exfat.util)] check_np(0x7ff7bb1a5ab80) vm_shared_region_start_address() failed
shared_region: 0xdd339615e7aa2f57 [312(exfat.util)] check_np(0x7ff7bba73b68) vm_shared_region_start_address() failed
shared_region: 0xdd339615e75c99bf [314(exfat.util)] check_np(0x7ff7bb4705be8) vm_shared_region_start_address() failed
shared_region: 0xdd339615e7b25f57 [315(exfat.util)] check_np(0x7ff7bb24bbbe8) vm_shared_region_start_address() failed
shared_region: 0xdd339615e75c99bf [314(exfat.util)] check_np(0x7ff7bb4704b98) vm_shared_region_start_address() failed
shared_region: 0xdd339615e70fe127 [316(exfat.util)] check_np(0x7ff7bb1d29be0) vm_shared_region_start_address() failed
shared_region: 0xdd339615e70fe127 [316(exfat.util)] check_np(0x7ff7bb1d28b98) vm_shared_region_start_address() failed
shared_region: 0xdd339615e7b25f57 [315(exfat.util)] check_np(0x7ff7bb24bab98) vm_shared_region_start_address() failed
KextLog: kernelmanagerd is not active
KextLog: Loading FileSet KC(s)
KextLog: Loading Pageable KC from file /System/Library/KernelCollections/BaseSystemKernelExtensions.kc
KextLog: Collection UUID matches with loaded KCS.
Refusing new kext com.apple.iokit.IOGraphicsFamily, v599.0: a loaded copy is already present (same version and executable).
deferred rematching count 1
nfs_kext_start: successfully loaded NFS kext
panic(cpu 0 caller 0xffffff8018d3ceba): Kernel trap at 0xffffff7f9a492b26, type = 14=page fault, registers:
CR0: 0x80010033, CR2: 0xffffff7f9a492b26, CR3: 0x000000001df00000, CR4: 0x00000000002006e0
RAX: 0xffffff9c5cc20f00, RBX: 0xffffff9c5cc20f00, RCX: 0x0000000000000000, RDX: 0x0000000000000300
RSP: 0xffffffcabadb7da8, RBP: 0xffffffcabadb7dc0, RSI: 0xffffff7f9a4d9d80, RDI: 0xffffff9c5cc20f00
R8: 0x0000000000000000, R9: 0x0000000000000004, R10: 0x0000000000000000, R11: 0x0000000000000300
R12: 0xffffffa129300b40, R13: 0xffffffa5f59c04a0, R14: 0xffffff7f9a4d9d80, R15: 0xffffff001b3dade8
RFL: 0x0000000000010282, RIP: 0xffffff7f9a492b26, CS: 0x0000000000000008, SS: 0x0000000000000000
Fault CR2: 0xffffff7f9a492b26, Error code: 0x0000000000000010, Fault CPU: 0x0 VMM, PL: 0, VF: 1

Panicked task 0xffffffa1297b0980: 157 threads: pid 0: kernel_task
Backtrace (CPU 0), panicked thread: 0xffffffa12a375598, Frame : Return Address
0xffffffcabadb7c40 : 0xffffff8018b4aff1 mach_kernel : _handle_debugger_trap + 0x4c1
0xffffffcabadb7c90 : 0xffffff8018d4d6c6 mach_kernel : _kdp_t386_trap + 0x126
0xffffffcabadb7cd0 : 0xffffff8018d3c85c mach_kernel : _kernel_trap + 0x75c
0xffffffcabadb7d90 : 0xffffff8018b6f971 mach_kernel : _return_from_trap + 0xc1
0xffffffcabadb7db0 : 0xffffff8018bda737 mach_kernel : _DebuggerTrapWithState + 0x67
0xffffffcabadb7dd0 : 0xffffff8018b69db mach_kernel : _panic_trap_to_debugger + 0x1fb
[...]

The "Refusing new kext com.apple.iokit.IOGraphicsFamily" tipped me off, so I tried removing this from config.yml and it booted fine:

  Force:
    # Required when loading MacHyperVFramebuffer from /Library/Extensions.
    # - If loading from /Library/Extensions in macOS 11 (Big Sur) and newer,
    #   kext signing must be disabled. Use `csr-active-config` to set this.
    # - If loaded from /System/Library/Extensions, this patch is not required,
    #   but SIP (filesystem protections and kext signing) must be disabled.
    - Arch:                 String  | "Any"
      BundlePath:           String  | "System/Library/Extensions/IOGraphicsFamily.kext"
      ExecutablePath:       String  | "IOGraphicsFamily"
      Identifier:           String  | "com.apple.iokit.IOGraphicsFamily"
      PlistPath:            String  | "Info.plist"

I'm not really sure what the cause may be, but I figured I'd share if anyone else runs into the same issue.

[Qonfused]

Huh, well this is an oversight anyways. It's not supposed to be enabled until the HyperVFramebuffer kext is installed in /Library/Extensions (post-install), though I also didn't realize it'd cause issues beforehand when force-loaded.

The IOGraphicsFamily kext only has the IOPCIFamily kext as a dependency (outside of the many KPIs both require), though this is generally cached w/ IOACPIFamily, etc. Will need to repro to look into what is causing this issue. It doesn't need to be loaded here, so I can disable this by default and have it be re-enabled w/ the post-install script.

[fstanis]

Thank you, do you mind telling me what I'd need to do after installing to enable IOGraphicsFamily if I'd removed it from config.yml? Happy to test and report back.

[Qonfused]

The easiest way would be to download OCE-Build and run ocebuild patch -p patch.yml -p /Volumes/EFI/EFI/OC/config.plist (making sure you use the below patch, i.e. patch.yml file):

Kernel:
  @override
  Force:
    # Required when loading MacHyperVFramebuffer from /Library/Extensions.
    # - If loading from /Library/Extensions in macOS 11 (Big Sur) and newer, 
    #   kext signing must be disabled. Use `csr-active-config` to set this.
    # - If loaded from /System/Library/Extensions, this patch is not required,
    #   but SIP (filesystem protections and kext signing) must be disabled.
    - Arch:                 String  | "Any"
      BundlePath:           String  | "System/Library/Extensions/IOGraphicsFamily.kext"
      ExecutablePath:       String  | "IOGraphicsFamily"
      Identifier:           String  | "com.apple.iokit.IOGraphicsFamily"
      PlistPath:            String  | "Info.plist"
      Enabled:              Boolean | true

You can also do this on windows if you mount the EFI VHDX image and point it to the config.plist there. Note that the binary extensions follow the same convention as acidanthera; ocebuild is for macOS, ocebuild.linux is for linux, and ocebuild.exe is for windows.

Though in my testing on macOS Catalina, force-loading IOGrapicsFamily doesn't seem to be required for MacHyperVFramebuffer to load and handle framebuffer resizing and the hardware cursor. The official guidance is to force-load it unless you're loading MacHyperVFramebuffer from /System/Library/Extensions instead, and YMMV on newer macOS versions after Big Sur.