[Bug] Crash reboot

[elkinguerrab]

What happened?

When I apply the tweaks I get a reboot, many attempts, many reboots

Device

IPhone 13

iOS version

18.6.2

Anything else?

Cyanide 1.2.7 installed with LiveContainer

[0xjohnnydev]

Thanks for the report. Since this sounds like a reboot while applying tweaks, the device logs from that same time would be the most useful next evidence.

Could you please reproduce once if you can, then attach:

• The Cyanide chain log: open Cyanide -> Log tab, or Cyanide Settings -> Share Log, and attach the latest chain-*.log.
• Any kernel panic report from the same time: iOS Settings -> Privacy & Security -> Analytics & Improvements -> Analytics Data, then search panic, panic-full, or panic-base. Attach the newest matching file from right after the reboot if one exists.
• Any SpringBoard crash report from the same time: in Analytics Data, search SpringBoard.

Please also mention which single tweak triggers it first if you test them one at a time. That will help narrow whether this is shared SpringBoard injection state or a specific tweak path.

[RaymondChen299]

I am 18.4 same iPhone13, same here. I can provide logs.
Cyanide log since last crash

Cyanide diagnostic log
Cyanide 1.2.26 · iOS 18.4 · iPhone14,5 # Cyanide chain session 2026-06-22 13:56:18
[13:56:18.999] [PLAN] 2 stages: power(off)
[13:56:18.999] [RUN 1/2] Racing kernel allocator for r/w primitives
[13:56:18.999] [KRW] No cached state — running fresh exploit chain.
[13:56:18.999] [+] Running on non-A18/M4 device
[13:56:18.999] [KRW] Racing TCP socket zone allocator...
[13:56:19.001] [+] readFd: 16
[13:56:19.001] [+] writeFd: 17
[13:56:19.001] [i] process marker guest='Cyanide' host='Cyanide' kernel='LiveContainer'
[13:56:19.001] [i] process_marker[0]=Cyanide
[13:56:19.001] [i] process_marker[1]=LiveContainer
[13:56:19.001] [i] totalSearchMappingPagesNum: 0x10000
[13:56:19.001] [i] searchMappingSize: 0x8000000
[13:56:19.001] [i] totalSearchMappingSize: 0x40000000
[13:56:19.001] [i] searchMappingNum: 0x8
[13:56:19.003] [+] physicalMappingAddress: 0x117308000
[13:56:19.003] [+] pcObject: 79107
[13:56:19.003] [+] pcAddress: 0x3ae36c000
[13:56:44.553] [i] socketPortsCount: 22528
[13:56:44.554] [i] startPcbId: 4
[13:56:44.554] [i] endPcbId: 45058
[13:56:44.554] [i] looking in search mapping: 0
[13:56:44.997] [+] matched PCB via process marker: LiveContainer
[13:56:44.997] [+] pcbStartOffset: 0
[13:56:44.997] [+] targetInpGencnt: 0x7328
[13:56:44.998] [+] inpListNextPointer: 0xffffffde7b0c0400
[13:56:44.998] [+] icmp6Filter: 0xffffffe2619afb80
[13:56:44.998] [KRW] restore snapshot saved controlFilter=0xffffffe2619afb80 rwFilter=0xffffffe2619afd60
[13:56:44.998] [+] Corrupting icmp6filter pointer...
[13:56:45.006] [+] target corrupted: 0xffffffde7b0c0548
[13:56:45.006] [+] Found control_socket at idx: 14738
[13:56:45.116] [+] pe_v1: post-acquire cleanup complete
[13:56:45.116] [+] highestSuccessIdx: 449
[13:56:45.116] [+] successReadCount: 73
[13:56:45.116] [OK] Kernel memory r/w acquired.
[13:56:45.117] [+] controlSocketPcb: 0xffffffde7b0c0000
[13:56:45.117] [+] pcbinfo_pointer: 0xfffffff047b83060
[13:56:45.117] [+] ipi_zone: 0xfffffff044f94650
[13:56:45.117] [+] zv_name: 0xfffffff04458fef2
[13:56:45.117] [+] searching for kernel Mach-O header from 0xfffffff04458c000...
[13:56:45.117] [+] candidate Mach-O at 0xfffffff044528000: filetype=2 cpuinfo=0x2c0000002 iter=25
[13:56:45.117] [+] candidate Mach-O at 0xfffffff044520000: filetype=12 cpuinfo=0xc00000002 iter=27
[13:56:45.117] [+] found MH_FILESET header at 0xfffffff044520000
[13:56:45.117] [+] kernel_base:  0xfffffff044520000
[13:56:45.117] [+] kernel_slide: 0x3d51c000
[13:56:45.117] [OK] Kernel mapped at 0xfffffff044520000 (slide +0x3d51c000).
[13:56:45.117] early_kread64(0xfffffff044520000) -> 0x100000cfeedfacf
[13:56:45.117] win??
[13:56:45.117] [PERSIST] Anchoring KRW fileports in launchd for recovery...
[13:56:45.120] [RemoteCall] Found launchd in kernel (pid=1) — preparing EXC_GUARD thread hijack.
[13:56:45.530] [RemoteCall] EXC_GUARD injected on 2 thread(s) — waiting for trap.
[13:56:49.620] [RemoteCall] Thread trapped — hijacking execution inside launchd.

Kernel panic-full log is too big to share it here. I will share it in google drive.

https://drive.google.com/file/d/1kk6nbL0_6qrzYUqwmRV3m_uEPzESN0mx/view?usp=drivesdk