Why do you use DDIC user not SAP* for Support Packs and SPAM?
Do _NOT_ use neither DDIC nor SAP* for applying support packages. Copy DDIC to a separate user and use that user to apply them