search

TrungNguyen1909 / qemu-t8030

iPhone 11 emulated on QEMU
Other
1.97k stars 194 forks source link

Ticket spinlock timeout #56

Closed raspiduino closed 2 years ago

raspiduino commented 2 years ago

qemu-t8030 commit: 617fa85c2161e765b39ca32d4c9a7bafa3fce87d

QEMU command line: qemu-system-aarch64 -s -M t8030,trustcache-filename=Firmware/038-44135-124.dmg.trustcache,ticket-filename=root_ticket.der -kernel kernelcache.research.iphone12b -dtb Firmware/all_flash/DeviceTree.n104ap.im4p -append "wdt=-1 debug=0x14e kextlog=0xffff serial=3 -v" -initrd 038-44135-124.dmg -cpu max -smp 4 -m 4G -serial mon:stdio -drive file=nvme.1,format=raw,if=none,id=drive.1 -device nvme-ns,drive=drive.1,bus=nvme-bus.0,nsid=1,nstype=1,logical_block_size=4096,physical_block_size=4096 -drive file=nvme.2,format=raw,if=none,id=drive.2 -device nvme-ns,drive=drive.2,bus=nvme-bus.0,nsid=2,nstype=2,logical_block_size=4096,physical_block_size=4096 -drive file=nvme.3,format=raw,if=none,id=drive.3 -device nvme-ns,drive=drive.3,bus=nvme-bus.0,nsid=3,nstype=3,logical_block_size=4096,physical_block_size=4096 -drive file=nvme.4,format=raw,if=none,id=drive.4 -device nvme-ns,drive=drive.4,bus=nvme-bus.0,nsid=4,nstype=4,logical_block_size=4096,physical_block_size=4096 -drive file=nvram,if=none,format=raw,id=nvram -device apple-nvram,drive=nvram,bus=nvme-bus.0,nsid=5,nstype=5,id=nvram,logical_block_size=4096,physical_block_size=4096 -drive file=nvme.6,format=raw,if=none,id=drive.6 -device nvme-ns,drive=drive.6,bus=nvme-bus.0,nsid=6,nstype=6,logical_block_size=4096,physical_block_size=4096 -drive file=nvme.7,format=raw,if=none,id=drive.7 -device nvme-ns,drive=drive.7,bus=nvme-bus.0,nsid=7,nstype=8,logical_block_size=4096,physical_block_size=4096 -monitor telnet:127.0.0.1:1235,server,nowait

Boot log:

Loading iOS 14.0...
kernel_low: 0xfffffff004000000
kernel_high: 0xfffffff00a4cd4f0
KPF: found apfs_vfsop_mount
KPF: found handle_eval_rootauth
KPF: Found AMFI hashtype check
kpf_amfi_callback: Found AMFI (Leaf)
kpf_amfi_callback: Found lookup_in_trust_cache_module @ 0xfffffff007b5d71c
KPF: Found mac_mount
KPF: Found mac_mount
kpf_amfi_callback: Found AMFI (Routine)
kpf_amfi_callback: Found lookup_in_static_trust_cache @ 0xfffffff0097edcb8
KPF: Found AppleKeyStoreUserClient::handleUserClientCommandGated
Qemu FB realize
g_virt_base: 0xfffffff018000000
g_phys_base: 0x0000000802000000
slide_virt: 0x0000000015c00000
slide_phys: 0x0000000001c00000
entry: 0x0000000807d204e8
boot_mode: 0
auto-boot=true
cmdline: [wdt=-1 debug=0x14e kextlog=0xffff serial=3 -v]
VNC server running on 127.0.0.1:5900
iBoot version: qemu-t8030
Darwin Image4 Validator Version 3.0.0: Wed Aug 12 22:19:21 PDT 2020; root:AppleImage4-106.0.4.0.1~129/AppleImage4/RELEASE_ARM64E
AMFI is running in RESEARCH mode!
AUC:[0xffffffe19b864390]::init(0xffffffe19b895e78)

AUC:[0xffffffe19b864390]::probe(0xffffffe19b62df40, 0xffffffe807d93dac)

AppleCredentialManager: init: called, instance = <ptr>.
ACMFirstResponderKernelService: init: called, .
ACMRM-S: init: called, starting PersistentStore service.
ACMRM-C: init: called, starting AccessoryCache service.
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache size = 16 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache expiration = 2592000 (default).
ACMRM: init: called, starting TRM service.
ACMRM-A: init: called, starting TRM Analytics service.
ACMKernelService: initValueFromBootArgAliasesUInt32: analytics collection period = 86400 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: policy mode timeout = 259200 (default).
ACMRM-A: notifyStandardModeTimeoutChanged: called, value = 259200 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: (bounded) grace period timeout = 3600 (default).
ACMRM-A: notifyGracePeriodTimeoutChanged: called, value = 3600 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: enabled = 1 (default).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO* BtArg=NO LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO* LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _loadDisabledByOSEnvironment: disabled by OSEnvironment: NO.
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO LegHW=NO OSEnv=NO* | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _mapAndPublishTRM: set TRM_PolicyTimeout = 259200.
ACMRM: _mapAndPublishTRM: sending kIOMessageServicePropertyChange(n=1) while DISABLED, TRM: 259200 -/ff 4294967295 -/ff miss=ff (CUR: 259200 -/ff 4294967295 -/ff).
AppleCredentialManager: init: returning, result = true, instance = <ptr>.
AppleARMBootPerf: Error: profile region not found (2)
AppleARMBootPerf: Error: failed to publish profile data (2)
virtual bool CoreAnalyticsHub::start(IOService *)::105:CoreAnalyticsHub start
virtual bool AppleARMLightEmUp::start(IOService *): starting...
AppleSSE::start called
AppleSSE::start returning, result = 1
AUC:[0xffffffe19b864390]::start(0xffffffe19b62df40)

AppleInterruptController::start: Num Shared Timestamps == 0
AppleS5L8940XI2CController::start: i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c2 this: <ptr> _i2cBaseAddress: <ptr>
AppleSEPKeyStore:321:0: starting (BUILT: Aug 12 2020 22:51:30)
AppleSEPKeyStore:545:0: _sep_enabled = 1
AppleCredentialManager: start: called, instance = <ptr>.
ACMRM: _publishIOResource: AppleUSBRestrictedModeTimeout = 259200.
AppleS5L8960XUSBPhy::start: hsic disabled
AppleCredentialManager: start: initializing power management, instance = <ptr>.
AppleCredentialManager: start: started, instance = <ptr>.
AppleCredentialManager: start: returning, result = true, instance = <ptr>.
AppleS8000AES::start: registers at phys:0x0x235008000/0x0x23d2d0000 virt:0x<ptr>/0x0x4000 / 0x<ptr>/0x0x4000
000012.449209 wlan0.A[1] start@968:Default options property found with value 4
AppleS5L8940XI2CController::start: i2c0 this: <ptr> _i2cBaseAddress: <ptr>
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
Creating an object of AppleBCMWLANPlatformFunctionEmbeddedAMFM class
000012.856236 wlan0.A[2] start@1401: Raised adjustBusy(+1), getBusyState() -> 1
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c3 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: smc-i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: smc-i2c0 this: <ptr> _i2cBaseAddress: <ptr>
000013.085061 wlan0.A[3] start@1403:Setting up notifier for CoreAnalyticsHub
000013.129032 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::prepareDefaults: model iPhone version 12.1
Identified Serial Port uart7 at 0x23521c000(<ptr>)
Identified Serial Port uart0 at 0x235200000(<ptr>)
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(SMC): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(ANS2): start(<ptr>) - (Aug 12 2020@22:50:37)
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(SIO): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(SMC): Boot args override: wdt = -1
RTBuddy(ANS2): Boot args override: wdt = -1
000013.738421 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_handleUSBCableConnect: cable connected, but don't have device configuration yet
RTBuddy(SIO): Boot args override: wdt = -1
RTBuddy(SMC): Resuming...

LPM: Log data is NOT valid. 0x0 0x0
AppleDialogSPMIPMU::start: Primary PMU detected
RTBuddy(ANS2): Resuming...

Starting AppleSMC kext(<ptr>) - (Aug 12 2020@22:51:44)
000014.070541 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_handleUSBCableConnect: cable connected, but don't have device configuration yet
virtual IOService *AppleANS2NVMeController::probe(IOService *, SInt32 *)::194:Found (ANS2) provider, returning score 100000
AppleARMRTC started!#####
AppleSMCEmbedded::setPowerState(): ENTER powerStateOrdinal=1, _activeKeyCommand=0 newState=1
virtual bool AppleANS2NVMeController::start(IOService *)::394:Found the ANS2Endpoint1
bool AppleEmbeddedNVMeController::SetNamespacesStruct()::186:Obtained 7 namespaces from DT
virtual IOFilterInterruptEventSource *AppleANS2NVMeController::CreateDeviceInterrupt(IOInterruptEventSource::Action, IOFilterInterruptEventSource::Filter, IOService *)::2719:ANS2 NVMe interrupt index - 0x4
AppleDialogSPMIPMURTC started!******
Failed to read info-leg_scrpadAppleDialogSPMIPMURTC tick read!&&&&&&&
AppleDialogSPMIPMURTC ending!%%%
AppleARMRTC registering service!@@@@@@
/Library/Caches/com.apple.xbs/Sources/AppleSMC/AppleSMC-589.0.5/AppleSMCEmbeddedCharger/AppleSMCCharger.cpp:408 _setPowerStateGated() ENTER powerStateOrdinal=1, _powerState=1
AppleARMRTC service registered!$$$$$
AppleARMRTC publishing service!^^^^^^
apfs_module_start:2411: load: com.apple.filesystems.apfs, v1677.0.5, apfs-1677.0.5, 2020/08/12
com.apple.AppleFSCompressionTypeZlib kmod start
apfs_sysctl_register:1253: done registering sysctls.
com.apple.AppleFSCompressionTypeZlib load succeeded
L2TP domain init
L2TP domain init complete
Load request for com.apple.nke.pptp failed: -603946998
Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOMedia</string><key>IOPropertyMatch</key><dict ID="2"><key>Partition ID</key><integer size="64" ID="3">0x1</integer></dict></dict>
virtual IANS2: MMIO write to unknown vendor register, offset=0x1210 value=0x240024, returning
ANS2: MMIO write to unknown vendor register, offset=0x24004 value=0x1000, returning
ANS2: MMIO write to unknown vendor register, offset=0x24008 value=0x0, returning
ANS2: MMIO write to unknown vendor register, offset=0x24118 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24108 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24420 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24414 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x2441c value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24418 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24144 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24524 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24508 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24504 value=0x10002, returning
OReturn IONVMeController::CreateSubmisANS2: MMIO write to unknown vendor register, offset=0x1304 value=0x0, returning
sionQueue(uint16_t, uint8_t)::2886:SQ index=0 entrysize=64
virtual IOReturn IONVMeController::CreateSubmissionQueue(uint16_t, uint8_t)::2886:SQ index=1 entrysize=128
virtual void AppleANS2NVMeController::SetModeselRegister(uint32_t)::1186:Setting modesel to 0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1964:nvme: Vendor ID     : 0x1b36
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1965:nvme: Model Number  : QEMU NVMe Ctrl                       
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1966:nvme: Serial Number : QEMUT8030ANS
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1967:nvme: Firmware Rev  : 1.0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2000:nvme: S3E A0 Invalid 1x slc 1D 0 plane 128GB NAND
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2009:ECCVersion   : 0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2010:FTL Rev      : 0.0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2011:DM_Version   : 0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2012:=======================
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2019:Found 16 namespaces in current NAND
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[1] as nstype[1]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[2] as nstype[2]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[3] as nstype[3]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[4] as nstype[4]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[5] as nstype[5]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[6] as nstype[6]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[7] as nstype[8]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[8] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[9] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[10] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[11] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[12] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[13] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[14] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[15] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[16] as nstype[0]
bool AppleEmbeddedNVMeController::SetSwapWriteLimit(uint32_t)::2192: Swap limit set to 2147483648bytes, 2GB
uint32_t AppleEmbeddedNVMeNVRAM::GetNVRAMSize()::745:NVRAM size is 8192 bytes
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1578:allocateAll 1
dev_init:297: disk0 device accelerated crypto: 0 (compiled @ Aug 12 2020 22:19:57)
dev_init:300: disk0 device_handle block size 4096 block count 2097141 features 0 internal
nx_kernel_mount:1134: disk0 initializing cache w/hash_size 4096 and cache size 10064
nx_kernel_mount:1402: disk0 checkpoint search: largest xid 174, best xid 174 @ 7
nx_kernel_mount:1404: disk0 reloading after unclean unmount, checkpoint xid 174, superblock xid 163
import_iboot_forwarded_roothash:2577: importing root hash ...
apfs_extract_root_hash_arm:10001: could not retrieve system-volume-auth-blob from device tree
import_iboot_forwarded_roothash:2580: apfs_extract_root_hash_and_manifest failed with error: No such file or directory (2)
Got boot device = IOService:/AppleARMPE/arm-io@10F00000/AppleT803xIO/ans@77400000/AppleASCWrapV2/iop-ans-nub/RTBuddyV2/RTBuddyService/AppleANS2NVMeController/NS_01@1/IOBlockStorageDriver/QEMU NVMe Ctrl Media/IOGUIDPartitionScheme/Container@1
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 2, NSTYPE - 2
BSD root: disk0s1, major 1, minor 1
apfs_vfsop_mountroot:2188: apfs: mountroot called!
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 3, NSTYPE - 3
dev_init:297: disk0s1 device accelerated crypto: 3 (compiled @ Aug 12 2020 22:19:57)
dev_init:300: disk0s1 device_handle block size 4096 block count 2097141 features 22 internal solidstate
nx_kernel_mount:1134: disk0s1 initializing cache w/hash_size 4096 and cache size 10064
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 6, NSTYPE - 6
[effaceable:ERR ] unable to find content
[effaceable:INIT] started
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 7, NSTYPE - 8
virtual IOReturn AppleNVMeNamespaceDevice::GetDeviceProperties()::269: Logical Blocks Size = 4096
 virtual IOReturn AppleNVMeNamespaceDevice::GetDeviceProperties()::272: Block Count = 256
 virtual bool AppleNVMeNamespaceDevice::start(IOService *)::111:NVMe Namespace Device registration done for NSID: 7, NSTYPE: 8
virtual bool AppleEmbeddedNVMeController::StartController()::1547:Setting NAND status to Ready
nx_kernel_mount:1402: disk0s1 checkpoint search: largest xid 174, best xid 174 @ 7
nx_kernel_mount:1404: disk0s1 reloading after unclean unmount, checkpoint xid 174, superblock xid 163
apfs_vfsop_mount:1848: Promoter has been locked for disk0s1
apfs_vfsop_mount:1998: disk0s1s1:0 Rooting from snapshot with xid 159.
handle_snapshot_mount:844: mounting snapshot w/snap_xid 159 and sblock oid 0x1f0006
handle_snapshot_mount:1000: setting dev block size to 4096 from 512
handle_mount:627: vol-uuid: DB5E5127-915A-4F0E-9BF6-1C49E3FB4851 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.12)
nx_volume_group_update:6634: Volume com.apple.os.update-5118EA8F39FF61D152BA7E1F92591910CDE7A2B09B867D8D58DC37E2CDC0B7C98DD296D4BF57862D143413DD17012D70 is not in a volume group
apfs_vfsop_mount:2171: disk0s1s1:0 mounted volume: System
dyld: setting comm page to 0x0
Sat May 21 11:27:50 2022  com.apple.xpc.launchd[1] <Notice>: hello
Darwin Bootstrapper Version 7.0.0: Mon Aug 10 04:09:14 PDT 2020; root:libxpc_executables-2038.0.13~13/launchd/RELEASE_ARM64E
boot-args = wdt=-1 debug=0x14e kextlog=0xffff serial=3 -v
Sat May 21 11:27:50 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Notice>: entering ondemand mode
Sat May 21 11:27:50 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: fsck
000032.975537 wlan0.A[4] initWithProvider@120:amfm not matched
000033.160367 wlan0.A[5] deferredStart@1730: Lowered adjustBusy(-1), getBusyState() -> 4
** Checking the container superblock.
** Checking the object map.
** Checking volume.
** Checking the APFS volume superblock.
** The volume System was formatted by newfs_apfs (945.200.129.100.10) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Data was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Hardware was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Preboot was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Update was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** QUICKCHECK ONLY; FILESYSTEM CLEAN
Sat May 21 11:28:05 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: mount-phase-1
mount: found boot container: /dev/disk0s1, data volume: /dev/disk0s1s2 env: 1
com.apple.os.update-5118EA8F39FF61D152BA7E1F92591910CDE7A2B09B867D8D58DC37E2CDC0B7C98DD296D4BF57862D143413DD17012D70@/dev/disk0s1s1 on / (apfs, local, nosuid, read-only, journaled, noatime)
handle_mount:627: vol-uuid: F5DEACDF-4954-4120-BAF2-7E092DD4E684 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6628: Volume Preboot role 10 Not a System or data volume
apfs_vfsop_mount:2171: disk0s1s4:0 mounted volume: Preboot
/dev/disk0s1s4 on /private/preboot (apfs, local, nodev, nosuid, read-only, journaled, noatime, nobrowse)
Sat May 21 11:28:07 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: data-protection
init_data_protection: No SEP present on this device
Sat May 21 11:28:08 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: finish-obliteration
Obliterator: In INIT check
IORegistryEntryGetProperty failed, may be does not exist
Obliterator: No obliteration needed, continue booting, returning 0
Sat May 21 11:28:09 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: commit-boot-mode
Sat May 21 11:28:09 2022 localhost com.apple.xpc.launchd[1] <Notice>: boot-mode committed: (null)
Sat May 21 11:28:09 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: restore-datapartition
Sat May 21 11:28:09 2022 localhost com.apple.xpc.launchd[1] <Notice>: restore-datapartition: optional boot task not present
Sat May 21 11:28:09 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: mount-phase-2
mount: found boot container: /dev/disk0s1, data volume: /dev/disk0s1s2 env: 1
spaceman_metazone_init:189: disk0s1 metazone for device 0 of size 131072 blocks (encrypted: 1966069-2031605 unencrypted: 2031605-2097141)
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 1 blocks starting at paddr 32768
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 2 blocks starting at paddr 65536
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 3 blocks starting at paddr 98304
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 4 blocks starting at paddr 131072
dev_dump:256: Aggregate constructed: dev=<ptr> di=0 dv_num_slice=8 dv_num_slice_blk=262144 dv_num_lslice_blk=262133
migrate_media_keys_if_needed:1206: no media keys to migrate for container = disk0s1
mount: failed to migrate Media Keys, error = c002
spaceman_trim_free_blocks:3361: disk0s1 scan took 2.034399 s, trims took 0.295646 s
spaceman_trim_free_blocks:3369: disk0s1 245561 blocks free in 322 extents
spaceman_trim_free_blocks:3377: disk0s1 245561 blocks trimmed in 322 extents (918 us/trim, 1089 trims/s)
spaceman_trim_free_blocks:3380: disk0s1 trim distribution 1:198 2+:97 4+:15 16+:4 64+:0 256+:8
handle_mount:627: vol-uuid: 946E93CE-C991-4E1A-B650-7685AF0B9095 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6634: Volume Data is not in a volume group
apfs_vfsop_mount:2171: disk0s1s2:0 mounted volume: Data
/dev/disk0s1s2 on /private/var (apfs, local, nodev, nosuid, journaled, noatime)
handle_mount:627: vol-uuid: 180F6F92-F4A0-4E37-9B94-D2E6CB4607D9 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6628: Volume Update role c0 Not a System or data volume
apfs_vfsop_mount:2171: disk0s1s5:0 mounted volume: Update
/dev/disk0s1s5 on /private/var/MobileSoftwareUpdate (apfs, local, nodev, nosuid, journaled, noatime, nobrowse)
handle_mount:627: vol-uuid: 521EEEEA-7A6E-4FD6-B067-55BBA3533710 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6628: Volume Hardware role 140 Not a System or data volume
apfs_vfsop_mount:2171: disk0s1s3:0 mounted volume: Hardware
/dev/disk0s1s3 on /private/var/hardware (apfs, local, nodev, nosuid, journaled, noatime, nobrowse)
Sat May 21 04:28:24 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: init-with-data-volume
Sat May 21 04:28:26 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: MSUEarlyBootTask
main: MSUEarlyBootTask running
main: Content from the ramdisk will be present at /private/var/MobileSoftwareUpdate/5118ea8f39ff61d152ba7e1f92591910cde7a2b09b867d8d58dc37e2cdc0b7c98dd296d4bf57862d143413dd17012d70-MSUData if it exists
MSUEarlyBootTask: I have nothing to do. Goodbye!!
Sat May 21 04:28:31 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: fips
Tracing: disabled
FIPSPOST_USER [1557131414] fipspost_post:158: PASSED: (89 ms) - fipspost_post_integrity
FIPSPOST_USER [1558100585] fipspost_post:164: PASSED: (11 ms) - fipspost_post_hmac
FIPSPOST_USER [1558759941] fipspost_post:165: PASSED: (10 ms) - fipspost_post_aes_ecb
FIPSPOST_USER [1561097014] fipspost_post:166: PASSED: (2 ms) - fipspost_post_aes_cbc
FIPSPOST_USER [1564188582] fipspost_post:167: PASSED: (114 ms) - fipspost_post_rsa_sig
FIPSPOST_USER [1567310180] fipspost_post:168: PASSED: (86 ms) - fipspost_post_ecdsa
FIPSPOST_USER [1572905885] fipspost_post:169: PASSED: (91 ms) - fipspost_post_ecdh
FIPSPOST_USER [1578096036] fipspost_post:170: PASSED: (74 ms) - fipspost_post_drbg_ctr
FIPSPOST_USER [1579127619] fipspost_post:171: PASSED: (10 ms) - fipspost_post_aes_ccm
FIPSPOST_USER [1586953336] fipspost_post:173: PASSED: (229 ms) - fipspost_post_pbkdf
FIPSPOST_USER [1587973156] fipspost_post:174: PASSED: (25 ms) - fipspost_post_kdf_ctr
FIPSPOST_USER [1607684126] fipspost_post:175: PASSED: (439 ms) - fipspost_post_aes_gcm
FIPSPOST_USER [1610118992] fipspost_post:176: PASSED: (4 ms) - fipspost_post_aes_xts
FIPSPOST_USER [1610686578] fipspost_post:177: PASSED: (7 ms) - fipspost_post_tdes_cbc
FIPSPOST_USER [1612386590] fipspost_post:178: PASSED: (4 ms) - fipspost_post_drbg_hmac
FIPSPOST_USER [1615174948] fipspost_post:180: PASSED: (96 ms) - fipspost_post_ffdh
FIPSPOST_USER [1620719951] fipspost_post:181: PASSED: (219 ms) - fipspost_post_rsa_enc_dec
FIPSPOST_USER [1622339821] fipspost_post:201: all tests PASSED (2806 ms)
Sat May 21 04:28:35 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: keybag
****** DIAGNOSTICS MODE ENABLED, SKIP INIT ****
Sat May 21 04:28:40 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: usermanagerd
Sat May 21 04:28:40 2022 localhost com.apple.xpc.launchd[1] <Notice>: usermanagerd: optional boot task not present
Sat May 21 04:28:41 2022 localhost com.apple.xpc.launchd[1] <Notice>: launchd logging initialized
Sat May 21 04:28:42 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: xpcroleaccountd
Sat May 21 04:28:43 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: init_featureflags
init_featureflags: skipping directory: /System/Library/FeatureFlags/Domain
init_featureflags: skipping directory: /Library/Preferences/FeatureFlags/Domain
Sat May 21 04:28:44 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: fud
objc[20]: Class UARPManifestProperties is implemented in both /System/Library/PrivateFrameworks/CoreUARP.framework/CoreUARP and /System/Library/PrivateFrameworks/MobileAccessoryUpdater.framework/Support/fud. One of the two will be used. Which one is undefined.
fud: -[FudEarlyBoot doFUDEarlyBoot:](): Starting Early Boot
fud: No Early Boot Accessories
fud: -[FudEarlyBoot doFUDEarlyBoot:](): End Early Boot
Sat May 21 04:28:54 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: tzinit
Sat May 21 04:28:55 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: finish-restore
Sat May 21 04:28:55 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: finish-demo-restore
Sat May 21 04:28:55 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: sysstatuscheck
Sat May 21 04:28:56 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: prng_seedctl
PRNG diagnostics:
0 user reseeds, 1 scheduled reseeds, 64 max samples in a scheduled reseed, 284 max samples in an entropy input
generator 0: 2 rekeys, 458 requests, 5456 total bytes requested, 64 max bytes requested in a request, 3304 bytes requested since rekey, 3304 max bytes requested between rekeys
generator 1: 2 rekeys, 55 requests, 800 total bytes requested, 64 max bytes requested in a request, 784 bytes requested since rekey, 784 max bytes requested between rekeys
generator 2: 2 rekeys, 14 requests, 228 total bytes requested, 64 max bytes requested in a request, 180 bytes requested since rekey, 180 max bytes requested between rekeys
generator 3: 2 rekeys, 32 requests, 496 total bytes requested, 64 max bytes requested in a request, 432 bytes requested since rekey, 432 max bytes requested between rekeys
pool 0: 0 samples, 1 drains, 64 max samples
pool 1: 284 samples, 0 drains, 284 max samples
pool 2: 38 samples, 0 drains, 38 max samples
pool 3: 69 samples, 0 drains, 69 max samples
pool 4: 85 samples, 0 drains, 85 max samples
pool 5: 113 samples, 0 drains, 113 max samples
pool 6: 40 samples, 0 drains, 40 max samples
pool 7: 48 samples, 0 drains, 48 max samples
pool 8: 88 samples, 0 drains, 88 max samples
pool 9: 34 samples, 0 drains, 34 max samples
pool 10: 58 samples, 0 drains, 58 max samples
pool 11: 37 samples, 0 drains, 37 max samples
pool 12: 40 samples, 0 drains, 40 max samples
pool 13: 45 samples, 0 drains, 45 max samples
pool 14: 126 samples, 0 drains, 126 max samples
pool 15: 70 samples, 0 drains, 70 max samples
pool 16: 0 samples, 0 drains, 0 max samples
pool 17: 0 samples, 0 drains, 0 max samples
pool 18: 0 samples, 0 drains, 0 max samples
pool 19: 0 samples, 0 drains, 0 max samples
pool 20: 0 samples, 0 drains, 0 max samples
pool 21: 0 samples, 0 drains, 0 max samples
pool 22: 0 samples, 0 drains, 0 max samples
pool 23: 0 samples, 0 drains, 0 max samples
pool 24: 0 samples, 0 drains, 0 max samples
pool 25: 0 samples, 0 drains, 0 max samples
pool 26: 0 samples, 0 drains, 0 max samples
pool 27: 0 samples, 0 drains, 0 max samples
pool 28: 0 samples, 0 drains, 0 max samples
pool 29: 0 samples, 0 drains, 0 max samples
pool 30: 0 samples, 0 drains, 0 max samples
pool 31: 0 samples, 0 drains, 0 max samples
failed to load virtual random: (-147) (-536870212)
Sat May 21 04:28:56 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: launchd_cache_loader
0 Found valid port: 2307 Valid: 1
1 Found valid port: 0 Valid: 0
2 Found valid port: 0 Valid: 0
Using default cache paths
Code: /System/Library/xpc/launchd.plist Sig: /System/Library/xpc/launchd.plist.sig
static IOReturn AppleMobileFileIntegrityUserClient::isCdhashInTrustCache(OSObject *, void *, IOExternalMethodArguments *): Process 26 is checking if a cdhash is in the trust cache
static IOReturn AppleMobileFileIntegrityUserClient::isCdhashInTrustCache(OSObject *, void *, IOExternalMethodArguments *): Returning IOReturn 0x0 to process 26
cdhash: {length = 20, bytes = 0x1f926e82fb7151558f895e958a422ee5c570b6bc} is trusted
Attached signature to file, checking ...
Trying to send bytes to launchd: 2307 16384
Sending validated cache to launchd
Cache sent to launchd successfully
Sat May 21 04:29:02 2022 localhost com.apple.xpc.launchd[1] <Notice>: launchd UUID: 4C2464F5-9F87-31DE-B252-584E3391D4FA
Sat May 21 04:29:02 2022 localhost com.apple.xpc.launchd[1] <Notice>: Early boot complete. Continuing system boot.

Attempting to forcibly halt cpu 0
cpu 0 failed to halt with error -5: halt not supported for this configuration
Attempting to forcibly halt cpu 1
cpu 1 failed to halt with error -5: halt not supported for this configuration
Attempting to forcibly halt cpu 2
cpu 2 failed to halt with error -5: halt not supported for this configuration
Debugger synchronization timed out; waited 10000000 nanoseconds
IOPlatformPanicAction -> AppleANS2NVMeController
IOPlatformPanicAction -> AppleNubSynopsysOTG3Device
IOPlatformPanicAction -> AppleS5L8960XWatchDogTimer
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> AppleSMC
IOPlatformPanicAction -> AppleT8030PMGR
panic(cpu 3 caller 0xfffffff01d64434c): "Ticket spinlock timeout; start: 0x9cae6fec, end: 0x9cdc36ac, current: 0x9cdc6de7, lock: 0xfffffff01f5a6f80, *lock: 0x8f, waiting for 0x90, owner: 0"
Debugger message: panic
Memory ID: 0x0
OS release type: Beta
OS version: 18A5351d
Kernel version: Darwin Kernel Version 20.0.0: Wed Aug 12 22:56:55 PDT 2020; root:xnu-7195.0.33~64/RELEASE_ARM64_T8030
Kernel UUID: FDDAF386-4EA2-35FC-8235-1F167AEFD6F3
iBoot version: qemu-t8030
secure boot?: YES
Paniclog version: 13
Kernel slide:      0x0000000015c00000
Kernel text base:  0xfffffff01cc04000
mach_absolute_time: 0xd0408738
Epoch Time:        sec       usec
  Boot    : 0x6288ccae 0x0001fac2
  Sleep   : 0x00000000 0x00000000
  Wake    : 0x00000000 0x00000000
  Calendar: 0x6288cd31 0x000174bf

Panicked task 0xffffffe19b603840: 67 pages, 1 threads: pid 32: xpcproxy
Panicked thread: 0xffffffe19bf1e2e0, backtrace: 0xffffffe934452ab0, tid: 423
                  lr: 0xfffffff01d62af48  fp: 0xffffffe934452af0
                  lr: 0xfffffff01d62ad48  fp: 0xffffffe934452b60
                  lr: 0xfffffff01d764940  fp: 0xffffffe934452b80
                  lr: 0xfffffff01d756e1c  fp: 0xffffffe934452c40
                  lr: 0xfffffff01dd1c5f4  fp: 0xffffffe934452c50
                  lr: 0xfffffff01d62aa30  fp: 0xffffffe934452fd0
                  lr: 0xfffffff01d62aa30  fp: 0xffffffe934453030
                  lr: 0xfffffff01f3db97c  fp: 0xffffffe934453050
                  lr: 0xfffffff01d64434c  fp: 0xffffffe9344530a0
                  lr: 0xfffffff01d657b0c  fp: 0xffffffe9344530d0
                  lr: 0xfffffff01d657db0  fp: 0xffffffe934453110
                  lr: 0xfffffff01d641074  fp: 0xffffffe934453140
                  lr: 0xfffffff01d755444  fp: 0xffffffe934453170
                  lr: 0xfffffff01dbc48c0  fp: 0xffffffe9344531b0
                  lr: 0xfffffff01db8cdd8  fp: 0xffffffe9344531d0
                  lr: 0xfffffff01def38e4  fp: 0xffffffe9344531f0
                  lr: 0xfffffff01eeaad5c  fp: 0xffffffe934453490
                  lr: 0xfffffff01eea9fa0  fp: 0xffffffe9344534f0
                  lr: 0xfffffff01eea2528  fp: 0xffffffe934453710
                  lr: 0xfffffff01dd04a54  fp: 0xffffffe934453760
                  lr: 0xfffffff01d7eda08  fp: 0xffffffe9344537b0
                  lr: 0xfffffff01d80e1a4  fp: 0xffffffe934453870
                  lr: 0xfffffff01d7f771c  fp: 0xffffffe934453ad0
                  lr: 0xfffffff01da60318  fp: 0xffffffe934453da0
                  lr: 0xfffffff01db7fc80  fp: 0xffffffe934453e30
                  lr: 0xfffffff01d756c6c  fp: 0xffffffe934453ef0
                  lr: 0xfffffff01dd1c5f4  fp: 0xffffffe934453f00

!! debugger synchronization failed, no stackshot !!
IOPlatformPanicAction -> AppleANS2NVMeController
IOPlatformPanicAction -> AppleNubSynopsysOTG3Device
IOPlatformPanicAction -> AppleS5L8960XWatchDogTimer
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> AppleSMC
IOPlatformPanicAction -> AppleT8030PMGR
IOPlatformPanicAction -> AppleANS2NVMeController
IOPlatformPanicAction -> AppleNubSynopsysOTG3Device
IOPlatformPanicAction -> AppleS5L8960XWatchDogTimer
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> AppleSMC
IOPlatformPanicAction -> AppleT8030PMGR
IOPlatformPanicAction -> AppleANS2NVMeController
IOPlatformPanicAction -> AppleNubSynopsysOTG3Device
IOPlatformPanicAction -> AppleS5L8960XWatchDogTimer
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> RTBuddyV2
IOPlatformPanicAction -> AppleSMC
IOPlatformPanicAction -> AppleT8030PMGR
wdog panic (attempt 1)

I actually added wdt=-1 to command line (you can see above), and iOS still say wdog panic. What should I do now? Thanks!

TrungNguyen1909 commented 2 years ago

Your machine is a bit slow or you backgrounded the process, Add tlto_us=300000 to the cmdline

raspiduino commented 2 years ago

Yes, my WSL is super slow :)

I will try switching to a different machine and see what will happen.

Anyway where do you get the kernel parameters (list) from? Thanks!

raspiduino commented 2 years ago

Closed

AlexLearnsToCode commented 1 year ago

@raspiduino Is there any luck after you swich to a different machine?