TrungNguyen1909 / qemu-t8030

iPhone 11 emulated on QEMU
Other
1.97k stars 194 forks source link

Segmentation Fault (core dumped) when start restore #73

Closed Duy-Thanh closed 2 years ago

Duy-Thanh commented 2 years ago

Hi, I'm getting an error while restoring my iPhone using idevicerestore cloned from your repository.

Specifically, I am using a Linux distribution in a virtual machine called Lubuntu 22.04.1, and have fully installed the dependencies

But when I do restore, this error appears on my Linux distro:

./restore.sh
Using ApTicket found at root_ticket.der length 8931
idevicerestore 1.0.0-96-g610b186
progress: 0 0.000000
progress: 0 0.1000000
Found device in Restore mode
INFO: device serial number is C39ZRMDEN72J
./restore.sh: line 1: 1595 Segmentation fault (core dumped) idevicerestore -P --erase --restore-mode -i 0x1122334455667788 iPhone11,8,iPhone12,1_14.0_18A5351d_Restore.ipsw -T root_ticket.der

Contents of file restore.sh:

idevicerestore -P --erase --restore-mode -i 0x1122334455667788 iPhone11,8,iPhone12,1_14.0_18A5351d_Restore.ipsw -T root_ticket.der

And here is the log of the iOS emulator:

Loading iOS 14.0...
kernel_low: 0xfffffff004000000
kernel_high: 0xfffffff00a4cd4f0
KPF: found apfs_vfsop_mount
KPF: found handle_eval_rootauth
KPF: Found AMFI hashtype check
kpf_amfi_callback: Found AMFI (Leaf)
kpf_amfi_callback: Found lookup_in_trust_cache_module @ 0xfffffff007b5d71c
KPF: Found mac_mount
KPF: Found mac_mount
kpf_amfi_callback: Found AMFI (Routine)
kpf_amfi_callback: Found lookup_in_static_trust_cache @ 0xfffffff0097edcb8
KPF: Found AppleKeyStoreUserClient::handleUserClientCommandGated
Qemu FB realize
qemu-system-aarch64: -device apple-nvram,drive=nvram,bus=nvme-bus.0,nsid=5,nstype=5,id=nvram,logical_block_size=4096,physical_block_size=4096: nvram bank fails adler32: expected: 0x0, got 0x1fec0001
qemu-system-aarch64: nvram bank fails adler32: expected: 0x0, got 0x1fec0001
boot_mode: 0
auto-boot=false
g_virt_base: 0xfffffff01a000000
g_phys_base: 0x0000000802000000
slide_virt: 0x0000000016338000
slide_phys: 0x0000000000338000
entry: 0x00000008064584e8
cmdline: [debug=0x14e kextlog=0xffff serial=3 -v wdt=-1 -restore rd=md0 nand-enable-reformat=1 -progress]
iBoot version: qemu-t8030
Darwin Image4 Validator Version 3.0.0: Wed Aug 12 22:19:21 PDT 2020; root:AppleImage4-106.0.4.0.1~129/AppleImage4/RELEASE_ARM64E
AppleImage4: failed to read nvram property: nonce-seeds: 2
AppleImage4: error reading seeds: 2
AMFI is running in RESEARCH mode!
AUC:[0xffffffe19b7573c0]::init(0xffffffe19b78a058)

AUC:[0xffffffe19b7573c0]::probe(0xffffffe19b5224e0, 0xffffffe807d4bdac)

AppleCredentialManager: init: called, instance = <ptr>.
ACMFirstResponderKernelService: init: called, .
ACMRM-S: init: called, starting PersistentStore service.
ACMRM-C: init: called, starting AccessoryCache service.
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache size = 16 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache expiration = 2592000 (default).
ACMRM: init: called, starting TRM service.
ACMRM-A: init: called, starting TRM Analytics service.
ACMKernelService: initValueFromBootArgAliasesUInt32: analytics collection period = 86400 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: policy mode timeout = 259200 (default).
ACMRM-A: notifyStandardModeTimeoutChanged: called, value = 259200 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: (bounded) grace period timeout = 3600 (default).
ACMRM-A: notifyGracePeriodTimeoutChanged: called, value = 3600 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: enabled = 1 (default).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO* BtArg=NO LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO* LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _loadDisabledByOSEnvironment: disabled by OSEnvironment: NO.
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO LegHW=NO OSEnv=NO* | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _mapAndPublishTRM: set TRM_PolicyTimeout = 259200.
ACMRM: _mapAndPublishTRM: sending kIOMessageServicePropertyChange(n=1) while DISABLED, TRM: 259200 -/ff 4294967295 -/ff miss=ff (CUR: 259200 -/ff 4294967295 -/ff).
AppleCredentialManager: init: returning, result = true, instance = <ptr>.
AppleARMBootPerf: Error: profile region not found (2)
AppleARMBootPerf: Error: failed to publish profile data (2)
virtual bool CoreAnalyticsHub::start(IOService *)::105:CoreAnalyticsHub start
AppleSSE::start called
AppleSSE::start returning, result = 1
AUC:[0xffffffe19b7573c0]::start(0xffffffe19b5224e0)

AppleSEPKeyStore:321:0: starting (BUILT: Aug 12 2020 22:51:30)
AppleS5L8940XI2CController::start: i2c3 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: smc-i2c0 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c2 this: <ptr> _i2cBaseAddress: <ptr>
AppleSEPKeyStore:545:0: _sep_enabled = 1
AppleCredentialManager: start: called, instance = <ptr>.
ACMRM: _publishIOResource: AppleUSBRestrictedModeTimeout = 259200.
AppleS5L8940XI2CController::start: smc-i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleCredentialManager: start: initializing power management, instance = <ptr>.
AppleCredentialManager: start: started, instance = <ptr>.
AppleCredentialManager: start: returning, result = true, instance = <ptr>.
AppleS5L8960XUSBPhy::start: hsic disabled
000004.400458 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::prepareDefaults: model iPhone version 12.1
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleS8000AES::start: registers at phys:0x0x235008000/0x0x23d2d0000 virt:0x<ptr>/0x0x4000 / 0x<ptr>/0x0x4000
000004.619666 wlan0.A[1] start@968:Default options property found with value 4
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c0 this: <ptr> _i2cBaseAddress: <ptr>
Creating an object of AppleBCMWLANPlatformFunctionEmbeddedAMFM class
000004.725713 wlan0.A[2] start@1401: Raised adjustBusy(+1), getBusyState() -> 1
000004.726166 wlan0.A[3] start@1403:Setting up notifier for CoreAnalyticsHub
virtual bool AppleARMLightEmUp::start(IOService *): starting...
AppleInterruptController::start: Num Shared Timestamps == 0
Identified Serial Port uart0 at 0x235200000(<ptr>)
Identified Serial Port uart7 at 0x23521c000(<ptr>)
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(SMC): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(SMC): Boot args override: wdt = -1
RTBuddy(SMC): Resuming...

Starting AppleSMC kext(<ptr>) - (Aug 12 2020@22:51:44)
AppleSMCEmbedded::setPowerState(): ENTER powerStateOrdinal=1, _activeKeyCommand=17 newState=1
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

LPM state clear
LPM: Log data is NOT valid. 0x0 0x0
AppleDialogSPMIPMU::start: Primary PMU detected
AppleARMRTC started!#####
AppleDialogSPMIPMURTC started!******
Failed to read info-leg_scrpadAppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

AppleDialogSPMIPMURTC tick read!&&&&&&&
AppleDialogSPMIPMURTC ending!%%%
AppleARMRTC registering service!@@@@@@
/Library/Caches/com.apple.xbs/Sources/AppleSMC/AppleSMC-589.0.5/AppleSMCEmbeddedCharger/AppleSMCCharger.cpp:408 _setPowerStateGated() ENTER powerStateOrdinal=1, _powerState=1
RTBuddy(SIO): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(ANS2): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(ANS2): Boot args override: wdt = -1
RTBuddy(SIO): Boot args override: wdt = -1
AppleARMRTC service registered!$$$$$
AppleARMRTC publishing service!^^^^^^
000005.385397 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_handleUSBCableConnect: cable connected, but don't have device configuration yet
000005.401049 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_handleUSBCableConnect: cable connected, but don't have device configuration yet
RTBuddy(ANS2): Resuming...

virtual IOService *AppleANS2NVMeController::probe(IOService *, SInt32 *)::194:Found (ANS2) provider, returning score 100000
void AppleEmbeddedNVMeController::GetRestoreEnvironment()::444:Restore Environment!
virtual bool AppleANS2NVMeController::start(IOService *)::394:Found the ANS2Endpoint1
void AppleEmbeddedNVMeController::GetRestoreEnvironment()::444:Restore Environment!
bool AppleEmbeddedNVMeController::SetNamespacesStruct()::186:Obtained 7 namespaces from DT
virtual IOFilterInterruptEventSource *AppleANS2NVMeController::CreateDeviceInterrupt(IOInterruptEventSource::Action, IOFilterInterruptEventSource::Filter, IOService *)::2719:ANS2 NVMe interrupt index - 0x4
apfs_module_start:2411: load: com.apple.filesystems.apfs, v1677.0.5, apfs-1677.0.5, 2020/08/12
com.apple.AppleFSCompressionTypeZlib kmod start
apfs_sysctl_register:1253: done registering sysctls.
com.apple.AppleFSCompressionTypeZlib load succeeded
L2TP domain init
L2TP domain init complete
Load request for com.apple.nke.pptp failed: -603946998
BSD root: md0, major 3, minor 0
apfs_vfsop_mountroot:2188: apfs: mountroot called!
virtual IOReturn IONVMeController::CreateSubmissionQueue(uint16_t, uint8_t)::2886:SQ index=0 entrysize=64
apfs_vfsop_mount:1745: unable to root from devvp <ptr> (root_device): 2
virtual IOReturn IONVMeController::CreateSubmissionQueue(uint16_t, uint8_t)::2886:SQ index=1 entrysize=128
apfs_vfsop_mountroot:2192: apfs: mountroot failed, error: 2
ANS2: MMIO write to unknown vendor register, offset=0x1210 value=0x240024, returning
ANS2: MMIO write to unknown vendor register, offset=0x24004 value=0x1000, returning
ANS2: MMIO write to unknown vendor register, offset=0x24008 value=0x0, returning
ANS2: MMIO write to unknown vendor register, offset=0x24118 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24108 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24420 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24414 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x2441c value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24418 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24144 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24524 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24508 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24504 value=0x10002, returning
virtual void AppleANS2NVMeController::SetModeselRegister(uint32_t)::1186:Setting modesel to 4
ANS2: MMIO write to unknown vendor register, offset=0x1304 value=0x4, returning
hfs: mounted AzulSeed18A5351d.arm64eCustomerRamDisk on device b(3, 0)
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1964:nvme: Vendor ID     : 0x1b36
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1965:nvme: Model Number  : QEMU NVMe Ctrl                          
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1966:nvme: Serial Number : QEMUT8030ANS        
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1967:nvme: Firmware Rev  : 1.0     
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2000:nvme: S3E A0 Invalid 1x slc 1D 0 plane 128GB NAND
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2009:ECCVersion   : 0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2010:FTL Rev      : 0.0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2011:DM_Version   : 0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2012:=======================
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2019:Found 16 namespaces in current NAND
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[1] as nstype[1]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[2] as nstype[2]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[3] as nstype[3]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[4] as nstype[4]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[5] as nstype[5]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[6] as nstype[6]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[7] as nstype[8]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[8] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[9] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[10] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[11] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[12] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[13] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[14] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[15] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[16] as nstype[0]
bool AppleEmbeddedNVMeController::SetSwapWriteLimit(uint32_t)::2192: Swap limit set to 2147483648bytes, 2GB
virtual bool AppleEmbeddedNVMeController::InitializeController()::507:FW update not complete, create dummy block device
uint32_t AppleEmbeddedNVMeNVRAM::GetNVRAMSize()::745:NVRAM size is 8192 bytes
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1578:allocateAll 1
virtual bool AppleEmbeddedNVMeController::StartController()::1547:Setting NAND status to Ready
dyld: setting comm page to 0x0
Fri Sep  2 15:43:37 2022  com.apple.xpc.launchd[1] <Notice>: hello
Darwin Bootstrapper Version 7.0.0: Mon Aug 10 04:09:14 PDT 2020; root:libxpc_executables-2038.0.13~13/launchd/RELEASE_ARM64E
boot-args = -restore rd=md0 nand-enable-reformat=1 -progress debug=0x14e kextlog=0xffff serial=3 -v wdt=-1 -restore rd=md0 nand-enable-reformat=1 -progress
Fri Sep  2 15:43:37 2022  com.apple.xpc.launchd[1] <Notice>: Restore environment starting.
Fri Sep  2 15:43:37 2022  com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Notice>: entering ondemand mode
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: fsck
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: mount-phase-1
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: data-protection
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: finish-obliteration
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: commit-boot-mode
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: boot-mode committed: (null)
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: restore-datapartition
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: restore-datapartition: optional boot task not present
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: mount-phase-2
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: init-with-data-volume
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: MSUEarlyBootTask
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: fips
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: keybag
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: usermanagerd
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: init_featureflags
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: fud
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: tzinit
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: finish-restore
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: finish-demo-restore
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: sysstatuscheck
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: prng_seedctl
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Error>: Unable to open /System/Library/xpc/launchd.plist [2:No such file or directory]
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Skipping boot-task: launchd_cache_loader
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Error>: No MRM cache found
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Warning>: Unable to load cache
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: launchd UUID: 4C2464F5-9F87-31DE-B252-584E3391D4FA
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] <Notice>: Early boot complete. Continuing system boot.
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Notice>: entering bootstrap mode
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.KeyMaker) <Warning>: Unknown key for Boolean: EnablePressureExit
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Error>: com.apple.KeyMaker (lint): Unable to find persona with type 6: kpersona_find returned -1
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Error>: com.apple.PurpleReverseProxy.ramdisk (lint): Unable to find persona with type 6: kpersona_find returned -1
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Error>: com.apple.diskimagesiod.ram (lint): Unable to find persona with type 6: kpersona_find returned -1
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Error>: com.apple.restored_external (lint): Unable to find persona with type 6: kpersona_find returned -1
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Error>: Failed to bootstrap path: path = /System/Library/NanoLaunchDaemonsAltAccount, error = 2: No such file or directory
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Error>: Failed to bootstrap path: path = /System/Library/NanoLaunchDaemons, error = 2: No such file or directory
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Error>: Failed to bootstrap path: path = /AppleInternal/Library/LaunchDaemons, error = 2: No such file or directory
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Notice>: exiting bootstrap mode
Fri Sep  2 15:43:37 2022 localhost com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Notice>: exiting ondemand mode
Fri Sep  2 15:43:38 2022 localhost com.apple.xpc.launchd[1] (com.apple.KeyMaker.3) <Warning>: Could not find and/or execute program specified by service: 2: No such file or directory: /usr/local/bin/KeyMaker
Fri Sep  2 15:43:38 2022 localhost com.apple.xpc.launchd[1] (com.apple.KeyMaker.3) <Notice>: Service setup event to handle failure and will not launch until it fires.
Fri Sep  2 15:43:38 2022 localhost com.apple.xpc.launchd[1] (com.apple.KeyMaker.3) <Error>: Missing executable detected. Job: 'com.apple.KeyMaker' Executable: '/usr/local/bin/KeyMaker'
Fri Sep  2 15:43:38 2022 localhost com.apple.xpc.launchd[1] (com.apple.KeyMaker.3) <Warning>: Service exited with abnormal code: 78
objc[4]: Class AMSupportURLConnectionDelegate is implemented in both ?? (0x10182c000) and ?? (0x10223c028). One of the two will be used. Which one is undefined.
objc[4]: Class AMSupportURLSession is implemented in both ?? (0x10182c050) and ?? (0x10223c078). One of the two will be used. Which one is undefined.
[15:43:43.0685-GMT]{1>4} CHECKPOINT ANOMALY: [check_collection]auto-boot(does_not_exist)
[15:43:43.0718-GMT]{1>4} CHECKPOINT PROGRESS: START (unknown) -> (initial_monitor_no_return)
[15:43:43.0719-GMT]{1>4} CHECKPOINT NOTICE: NVRAM access available on initial check
restore-anomalies = {0x00000000:[check_collection]auto-boot(does_not_exist)}
restore-outcome = initial_monitor_no_return
executing /usr/sbin/nvram -s restore-outcome=initial_monitor_no_return
[15:43:44.0740-GMT]{1>4} CHECKPOINT NOTICE: (NVRAM set) restore-outcome=initial_monitor_no_return [sync=true] (initial entry)
entering set_boot_stage
[15:43:44.0843-GMT]{1>4} CHECKPOINT MONITOR: [0x0204] boot_stage
restore-step-monitor = {0x11010204:"boot_stage"}
executing /sbin/mount_tmpfs /mnt5
entering show_service_nodes
disk0

IOBlockStorageDriver RegistryID : 0x100000220 Busy State : 0x0 Service State : 0x1e
NS_01 RegistryID : 0x10000021f Busy State : 0x0 Service State : 0x1e
AppleANS2NVMeController RegistryID : 0x10000020a Busy State : 0x0 Service State : 0x1e
RTBuddyService RegistryID : 0x100000207 Busy State : 0x0 Service State : 0x1e
RTBuddyV2 RegistryID : 0x100000202 Busy State : 0x0 Service State : 0x1e
iop-ans-nub RegistryID : 0x100000133 Busy State : 0x0 Service State : 0x1e
AppleASCWrapV2 RegistryID : 0x1000001e5 Busy State : 0x0 Service State : 0x0
ans RegistryID : 0x100000132 Busy State : 0x0 Service State : 0x1e
AppleT803xIO RegistryID : 0x1000001ad Busy State : 0x5 Service State : 0x1e
arm-io RegistryID : 0x100000116 Busy State : 0x1 Service State : 0x1e
AppleARMPE RegistryID : 0x100000187 Busy State : 0x2 Service State : 0x1e
N104DEV RegistryID : 0x100000186 Busy State : 0x1 Service State : 0x1e
Root RegistryID : 0x100000100 Busy State : 0x0 Service State : 0x0
----

[15:43:45.0488-GMT]{1>4} CHECKPOINT MONITOR: [0x1180] create_ramdisk
restore-step-monitor = {0x11011180:"create_ramdisk"}
[15:43:45.0493-GMT]{1>4} CHECKPOINT MONITOR: [0x0206] monitoring_child
restore-step-monitor = {0x11010206:"monitoring_child"}
objc[7]: Class AMSupportURLConnectionDelegate is implemented in both ?? (0x105e80000) and ?? (0x106890028). One of the two will be used. Which one is undefined.
objc[7]: Class AMSupportURLSession is implemented in both ?? (0x105e80050) and ?? (0x106890078). One of the two will be used. Which one is undefined.
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:43:48.972178+0000 restored_external[7:371] RestoreLog: Client Query: Image4Supported
libMobileGestalt utility.c:64: Could not open /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches/com.apple.MobileGestalt.plist: No such file or directory
2022-09-02 15:43:49.015682+0000 restored_external[7:371] Could not open /private/var/containers/Shared/SystemGroup/systemgroup.com.apple.mobilegestaltcache/Library/Caches/com.apple.MobileGestalt.plist: No such file or directory
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:43:49.055271+0000 restored_external[7:371] RestoreLog: Client Response: Image4Supported : 1
[15:43:49.0058-GMT]{4>7} CHECKPOINT NOTICE: Image4 device: AP nonce clearable
entering ramrod_clear_ap_nonce
[15:43:49.0120-GMT]{4>7} CHECKPOINT NOTICE: AP nonce consumed
[15:43:49.0138-GMT]{4>7} CHECKPOINT NOTICE: Pre-existing NVRAM variable: restore-outcome=initial_monitor_no_return
[15:43:49.0165-GMT]{4>7} CHECKPOINT ANOMALY: [check_collection]auto-boot(does_not_exist)
[15:43:49.0169-GMT]{4>7} CHECKPOINT PROGRESS: START (unknown) -> (initial_engine_no_return)
[15:43:49.0171-GMT]{4>7} CHECKPOINT NOTICE: NVRAM access available on initial check
restore-anomalies = {0x00000000:[check_collection]auto-boot(does_not_exist)}
restore-outcome = initial_engine_no_return
executing /usr/sbin/nvram restore-outcome=initial_engine_no_return
[15:43:50.0200-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0400] umask
restore-step-ids = {0x11030400:1}
restore-step-names = {0x11030400:umask}
restore-step-uptime = 15
restore-step-user-progress = -1
[15:43:50.0218-GMT]{4>7} CHECKPOINT END: MAIN:[0x0400] umask
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 15
restore-step-user-progress = -1
[15:43:50.0233-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0402] setvbuf
restore-step-ids = {0x11030402:2}
restore-step-names = {0x11030402:setvbuf}
restore-step-uptime = 15
restore-step-user-progress = -1
[15:43:50.0249-GMT]{4>7} CHECKPOINT END: MAIN:[0x0402] setvbuf
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 15
restore-step-user-progress = -1
[15:43:50.0263-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0403] kernel_logger_thread
restore-step-ids = {0x11030403:3}
restore-step-names = {0x11030403:kernel_logger_thread}
restore-step-uptime = 15
restore-step-user-progress = -1
[15:43:50.0282-GMT]{4>7} CHECKPOINT END: MAIN:[0x0403] kernel_logger_thread
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 15
restore-step-user-progress = -1
[15:43:50.0297-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0406] set_progress_0
restore-step-ids = {0x11030406:4}
restore-step-names = {0x11030406:set_progress_0}
restore-step-uptime = 15
restore-step-user-progress = -1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: DeviceClass
2022-09-02 15:43:50.320267+0000 restored_external[7:371] RestoreLog: Client Query: DeviceClass
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: DeviceClass : iPhone
2022-09-02 15:43:50.326107+0000 restored_external[7:371] RestoreLog: Client Response: DeviceClass : iPhone
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: DeviceColorMapPolicy
2022-09-02 15:43:50.330546+0000 restored_external[7:371] RestoreLog: Client Query: DeviceColorMapPolicy
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: DeviceColorMapPolicy : 0
2022-09-02 15:43:50.357165+0000 restored_external[7:371] RestoreLog: Client Response: DeviceColorMapPolicy : 0
2022-09-02 15:43:50.382544+0000 restored_external[7:371] IOMFB: /System/Library/Frameworks/MediaToolbox.framework/MediaToolbox not found
2022-09-02 15:43:50.390784+0000 restored_external[7:371] IOMFB: /System/Library/PrivateFrameworks/MediaToolbox.framework/MediaToolbox not found
2022-09-02 15:43:50.399413+0000 restored_external[7:371] IOMFB: /System/Library/PrivateFrameworks/Celestial.framework/Celestial not found
2022-09-02 15:43:50.402757+0000 restored_external[7:371] IOMFB: FigInstallVirtualDisplay not found
000024.725701 wlan0.A[4] initWithProvider@120:amfm not matched
000024.733298 wlan0.A[5] deferredStart@1730: Lowered adjustBusy(-1), getBusyState() -> 4
unable to get display list
unable to get framebuffer
No framebuffer but an internal display. Ok on bridge but weird anywhere else.
ramrod_display_set_granular_progress_forced: 0.000000
[15:43:56.0087-GMT]{4>7} CHECKPOINT END: MAIN:[0x0406] set_progress_0
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0097-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0407] start_gasgauge_thread
restore-step-ids = {0x11030407:5}
restore-step-names = {0x11030407:start_gasgauge_thread}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0114-GMT]{4>7} CHECKPOINT WARNING: MAIN:[0x0407] gasgauge_start_update_thread failed: -1
restored_external: gasgauge_start_update_thread failed: -1
[15:43:56.0119-GMT]{4>7} CHECKPOINT END: MAIN:[0x0407] start_gasgauge_thread
restore-step-ids = {}
restore-step-names = {}
restore-step-warnings = {0x11060407:{0:"gasgauge_start_update_thread failed: -1"}}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0133-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0408] listen_for_log_client
restore-step-ids = {0x11030408:6}
restore-step-names = {0x11030408:listen_for_log_client}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0162-GMT]{4>7} CHECKPOINT END: MAIN:[0x0408] listen_for_log_client
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0173-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x040D] create_listen_socket
restore-step-ids = {0x1103040D:7}
restore-step-names = {0x1103040D:create_listen_socket}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0187-GMT]{4>7} CHECKPOINT END: MAIN:[0x040D] create_listen_socket
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0198-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0404] update_root_mount
restore-step-ids = {0x11030404:8}
restore-step-names = {0x11030404:update_root_mount}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0292-GMT]{4>7} CHECKPOINT END: MAIN:[0x0404] update_root_mount
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0303-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x0405] disable_watchdog
restore-step-ids = {0x11030405:9}
restore-step-names = {0x11030405:disable_watchdog}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0324-GMT]{4>7} CHECKPOINT END: MAIN:[0x0405] disable_watchdog
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 21
restore-step-user-progress = 0
[15:43:56.0338-GMT]{4>7} CHECKPOINT BEGIN: MAIN:[0x040E] enable_usb
restore-step-ids = {0x1103040E:10}
restore-step-names = {0x1103040E:enable_usb}
restore-step-uptime = 21
restore-step-user-progress = 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: UniqueDeviceID
2022-09-02 15:43:56.415833+0000 restored_external[7:371] RestoreLog: Client Query: UniqueDeviceID
2022-09-02 15:43:56.419938+0000 restored_external[7:371] [fast-path] taking platform fast path for key: re6Zb+zwFKJNlkQTUeT+/w
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: nFRqKto/RuQAV1P+0/qkBA
2022-09-02 15:43:56.423293+0000 restored_external[7:371] RestoreLog: Client Query: nFRqKto/RuQAV1P+0/qkBA
2022-09-02 15:43:56.425416+0000 restored_external[7:371] [fast-path] taking platform fast path for key: nFRqKto/RuQAV1P+0/qkBA
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: TF31PAB6aO8KAbPyNKSxKA
2022-09-02 15:43:56.432606+0000 restored_external[7:371] RestoreLog: Client Query: TF31PAB6aO8KAbPyNKSxKA
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: TF31PAB6aO8KAbPyNKSxKA : 1234605616436508552
2022-09-02 15:43:56.445187+0000 restored_external[7:371] RestoreLog: Client Response: TF31PAB6aO8KAbPyNKSxKA : 1234605616436508552
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: 566JrJVMlDfnslGpwUzNlQ
2022-09-02 15:43:56.449054+0000 restored_external[7:371] RestoreLog: Client Query: 566JrJVMlDfnslGpwUzNlQ
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: 566JrJVMlDfnslGpwUzNlQ : 32816
2022-09-02 15:43:56.464770+0000 restored_external[7:371] RestoreLog: Client Response: 566JrJVMlDfnslGpwUzNlQ : 32816
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: nFRqKto/RuQAV1P+0/qkBA : <CFData 0x148806d30 [0x1065741b8]>{length = 25, capacity = 25, bytes = 0x30303030383033302d31313232333334 ... 3535363637373838}
2022-09-02 15:43:56.510829+0000 restored_external[7:371] RestoreLog: Client Response: nFRqKto/RuQAV1P+0/qkBA : {length = 25, bytes = 0x30303030 38303330 2d313132 32333334 ... 35353636 37373838 }
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: UniqueDeviceID : 00008030-1122334455667788
2022-09-02 15:43:56.516816+0000 restored_external[7:371] RestoreLog: Client Response: UniqueDeviceID : 00008030-1122334455667788
000026.840296 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: Apple Mobile Device
000026.841649 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000026.843476 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: Reserved 1 + Apple Mobile Device
000026.844382 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: Reserved
000026.845535 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000026.846682 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: Reserved 2 + Apple Mobile Device
000026.847475 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: Reserved
000026.848125 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000026.848875 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: Reserved 3 + Apple Mobile Device
000026.849650 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: Reserved
000026.850345 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
waiting for matching IOKit service: {
    IOProviderClass = AppleUSBDeviceMux;
}
AppleUSBDeviceMux build: Aug 12 2020 22:50:42
000026.885860 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function Reserved
000026.889493 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function AppleUSBMux
000026.890512 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::startUSBStack: starting usb stack
000027.350748 AppleNubSynopsysOTG3Device@0: IOUSBDeviceController::setupDeviceSetAddress: setting USB device address 3
000027.437830 AppleNubSynopsysOTG3Device@3: IOUSBDeviceController::setupDeviceSetConfiguration: configuration 0 -> 0
000027.441601 AppleNubSynopsysOTG3Device@3: IOUSBDeviceController::setupDeviceSetConfiguration: configuration 0 -> 1
AppleUSBDeviceMux::message - kMessageInterfaceWasActivated
000027.521009 AppleNubSynopsysOTG3Device@3: IOUSBDeviceController::setupDeviceSetConfiguration: configuration 1 -> 4
AppleUSBDeviceMux::message - kMessageInterfaceWasDeActivated
AppleUSBDeviceMux::reportStats: USB mux statistics: 
USB mux: 0 reads / 0 errors, 0 writes / 0 errors
USB mux: 0 short packets, 0 dups
AppleUSBDeviceMux::message - kMessageInterfaceWasActivated
IOReturn AppleUSBDeviceMux::setPropertiesGated(OSObject *) setting debug level to 7
[15:43:59.0575-GMT]{4>7} CHECKPOINT END: MAIN:[0x040E] enable_usb
restore-step-ids = {}
restore-step-names = {}
restore-step-uptime = 24
restore-step-user-progress = 0
waiting for host to trigger start of restore [timeout of 120 seconds]
recv(9, 4) failed: connection closed
unable to read message size: -1
could not receive message
unrecognized request 'GetValue'
unrecognized request 'GetValue'
unrecognized request 'GetValue'
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:05.847916+0000 restored_external[7:385] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:05.852803+0000 restored_external[7:385] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:05.857489+0000 restored_external[7:385] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:05.869532+0000 restored_external[7:385] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:05.873878+0000 restored_external[7:385] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:05.885661+0000 restored_external[7:385] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:05.889334+0000 restored_external[7:385] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:05.899365+0000 restored_external[7:385] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:06.058550+0000 restored_external[7:385] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:06.064646+0000 restored_external[7:385] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:06.072697+0000 restored_external[7:385] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:06.078662+0000 restored_external[7:385] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:06.084663+0000 restored_external[7:385] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:06.089648+0000 restored_external[7:385] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:06.093308+0000 restored_external[7:385] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:06.105369+0000 restored_external[7:385] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
recv(12, 4) failed: connection closed
unable to read message size: -1
could not receive message
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:16.740469+0000 restored_external[7:387] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:16.750940+0000 restored_external[7:387] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:16.759318+0000 restored_external[7:387] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:16.767130+0000 restored_external[7:387] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:16.772191+0000 restored_external[7:387] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:16.777137+0000 restored_external[7:387] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:16.779949+0000 restored_external[7:387] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:16.782752+0000 restored_external[7:387] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:16.954096+0000 restored_external[7:387] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:16.965578+0000 restored_external[7:387] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:16.980289+0000 restored_external[7:387] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:16.986204+0000 restored_external[7:387] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:16.990659+0000 restored_external[7:387] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:16.994611+0000 restored_external[7:387] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:16.997525+0000 restored_external[7:387] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:17.000539+0000 restored_external[7:387] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
recv(12, 4) failed: connection closed
unable to read message size: -1
could not receive message
unrecognized request 'GetValue'
unrecognized request 'GetValue'
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:54.966448+0000 restored_external[7:389] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:54.971777+0000 restored_external[7:389] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:54.975090+0000 restored_external[7:389] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:54.982571+0000 restored_external[7:389] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:54.988511+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:54.994169+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:54.996711+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:55.001422+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:55.104164+0000 restored_external[7:389] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:55.109748+0000 restored_external[7:389] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:55.113215+0000 restored_external[7:389] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:55.123235+0000 restored_external[7:389] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:55.135113+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:55.141609+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:55.146259+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:55.149971+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
recv(12, 4) failed: connection closed
unable to read message size: -1
could not receive message
recv(10, 4) failed: connection closed
unable to read message size: -1
could not receive message
unrecognized request 'GetValue'
recv(11, 4) failed: connection closed
unable to read message size: -1
could not receive message
unrecognized request 'GetValue'
error waiting for events: timed out
[15:45:59.0286-GMT]{4>7} CHECKPOINT NOTICE: MAIN:[0x0104] handle_new_connections
[15:45:59.0288-GMT]{4>7} CHECKPOINT FINISHED-ENGINES:(FAILURE:1) 
[15:45:59.0291-GMT]{4>7} CHECKPOINT PROGRESS: FAILED (initial_engine_no_return) -> (initial_engine_failure_no_return)
restore-outcome = initial_engine_failure_no_return
executing /usr/sbin/nvram -s restore-outcome=initial_engine_failure_no_return
thanhduynguyen@Thanhs-MacBook-Pro iPhone_OS % 

In it, here is the log of the iOS simulator every time I run irestoredevice:

libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:54.966448+0000 restored_external[7:389] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:54.971777+0000 restored_external[7:389] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:54.975090+0000 restored_external[7:389] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:54.982571+0000 restored_external[7:389] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:54.988511+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:54.994169+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:54.996711+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:55.001422+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: Image4Supported
2022-09-02 15:44:55.104164+0000 restored_external[7:389] RestoreLog: Client Query: Image4Supported
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: Image4Supported : true
2022-09-02 15:44:55.109748+0000 restored_external[7:389] RestoreLog: Client Response: Image4Supported : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: CertificateSecurityMode
2022-09-02 15:44:55.113215+0000 restored_external[7:389] RestoreLog: Client Query: CertificateSecurityMode
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: CertificateSecurityMode : false
2022-09-02 15:44:55.123235+0000 restored_external[7:389] RestoreLog: Client Response: CertificateSecurityMode : 0
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveProductionStatusAp
2022-09-02 15:44:55.135113+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveProductionStatusAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveProductionStatusAp : true
2022-09-02 15:44:55.141609+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveProductionStatusAp : 1
libMobileGestalt MobileGestalt.c:711: RestoreLog: Client Query: EffectiveSecurityModeAp
2022-09-02 15:44:55.146259+0000 restored_external[7:389] RestoreLog: Client Query: EffectiveSecurityModeAp
libMobileGestalt MobileGestalt.c:743: RestoreLog: Client Response: EffectiveSecurityModeAp : false
2022-09-02 15:44:55.149971+0000 restored_external[7:389] RestoreLog: Client Response: EffectiveSecurityModeAp : 0
recv(12, 4) failed: connection closed
unable to read message size: -1
could not receive message

I did exactly as instructed. So what's going on. Sorry for my poor English.

Please help. Thank you very much.

nstarke commented 2 years ago

if you are using iPhone 11, try this patch:

diff --git a/src/restore.c b/src/restore.c
index 862bb75..8467938 100644
--- a/src/restore.c
+++ b/src/restore.c
@@ -292,27 +292,8 @@ irecv_device_t restore_get_irecv_device(struct idevicerestore_client_t* client)
                node = NULL;
        }

-       restore_error = restored_get_value(restore, "HardwareModel", &node);
-       restored_client_free(restore);
-       idevice_free(device);
-       if (restore_error != RESTORE_E_SUCCESS || !node || plist_get_node_type(node) != PLIST_STRING) {
-               error("ERROR: Unable to get HardwareModel from restored\n");
-               plist_free(node);
-               return NULL;
-       }
-
-       plist_get_string_val(node, &model);
-       fprintf(stderr, "%s: Found model %s\n", __func__, model);
-
-       /* HACK: Replace DEV devices with AP equivalent devices
-        * So that it can enjoy FDR-less restore
-        */
-       if (strstr(model, "DEV")) {
-               strncpy(strstr(model, "DEV"), "AP\0", 3);
-       }

-       irecv_devices_get_device_by_hardware_model(model, &irecv_device);
-       free(model);
+       irecv_devices_get_device_by_hardware_model("N104AP", &irecv_device);

        return irecv_device;
 }

It's totally a hack that will not work with any other model. YMMV. HTH.

Duy-Thanh commented 2 years ago

@nstarke Thank you, I will try it right away and let you know the results

Duy-Thanh commented 2 years ago

Okay, I fixed the bug, but I keep having new problems. I will create a new issue and set it as Closed