Alright I’m gonna have to point the finger at the Mac now. The problem consistently disappears when I restart the Mac (reboot works, not just power-cycle), and consistently comes back when I power-cycle the 'bone after that first working session. Using kextunload on HoRNDIS and kextload doesn’t seem to help so I suspect a bug in the Mac’s USB subsystem that clears up after a reboot.