Timed out waiting for bootstrap upload (error code: -20)

[mailinglists35]

Tell us about your setup:

1. What iDevice are you using? iPhone8,4
2. On what version of iOS is it? 12.4
3. What version of checkra1n are you using? 0.12.4
4. What is your host system (OS version? Hackintosh? VM? etc.)? macos monterey 21D5025f
5. How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? Apple USB-A

What are the steps to reproduce the issue?

1. I'm not sure is reproductible. I tried on a intel mac mini on monterey as well on a usb controller pci passthrough mojave kvm. both stuck in normal mode and both work in safe mode

3. ...

What do you expect, and what is happening instead? expect: jailbreak as sometime in the recent past (it worked before many times)

happening: phone stuck in "booting", checkra1n stuck in "booting"

Did you see a popup on the device stating it entered "Safe Mode" due to an error? no

Does the issue also occur if you tick "Safe Mode" in the checkra1n options? no

Any other info, error logs, screenshots, ...?

% /Applications/checkra1n.app/Contents/MacOS/checkra1n -c -n -V -v 
#
# Checkra1n beta 0.12.4
#
# Proudly written in nano
# (c) 2019-2021 Kim Jong Cracks
#
#========  Made by  =======
# argp, axi0mx, danyl931, jaywalker, kirb, littlelailo, nitoTV
# never_released, nullpixel, pimskeks, qwertyoruiop, sbingner, siguza
#======== Thanks to =======
# haifisch, jndok, jonseals, xerub, lilstevie, psychotea, sferrini
# Cellebrite (ih8sn0w, cjori, ronyrus et al.)
#==========================

 - [12/22/21 15:01:33] <Info>: Waiting for DFU devices
 - [12/22/21 15:01:33] <Verbose>: DFU mode device found
 - [12/22/21 15:01:33] <Info>: Exploiting
 - [12/22/21 15:01:33] <Verbose>: Attempting to perform checkm8 on 8003 1...
 - [12/22/21 15:01:33] <Info>: Checking if device is ready
 - [12/22/21 15:01:33] <Verbose>: == Checkm8 Preparation stage ==
 - [12/22/21 15:01:33] <Verbose>: DFU mode device found
 - [12/22/21 15:01:33] <Info>: Setting up the exploit (this is the heap spray)
 - [12/22/21 15:01:33] <Verbose>: == Checkm8 Setup stage ==
 - [12/22/21 15:01:33] <Info>: Right before trigger (this is the real bug setup)
 - [12/22/21 15:01:33] <Verbose>: Entered initial checkm8 state after 2 steps, issuing DFU abort..
 - [12/22/21 15:01:33] <Verbose>: DFU device disconnected
 - [12/22/21 15:01:33] <Verbose>: DFU mode device found
 - [12/22/21 15:01:33] <Verbose>: == Checkm8 Trigger stage ==
 - [12/22/21 15:01:33] <Verbose>: Checkmate!
 - [12/22/21 15:01:33] <Verbose>: DFU device disconnected
 - [12/22/21 15:01:33] <Verbose>: DFU mode device found
 - [12/22/21 15:01:33] <Verbose>: == Checkm8 Trying to run payload... ==
 - [12/22/21 15:01:33] <Verbose>: If everything went correctly, you should now have code execution.
 - [12/22/21 15:01:33] <Verbose>: DFU device disconnected
 - [12/22/21 15:01:34] <Info>: Entered download mode
 - [12/22/21 15:01:34] <Verbose>: Download mode device found
 - [12/22/21 15:01:34] <Info>: Booting...
 - [12/22/21 15:01:34] <Verbose>: Setting bootargs to: rootdev=md0 -v
 - [12/22/21 15:01:36] <Verbose>: Download mode device disconnected
 - [12/22/21 15:03:03] <Error>: Timed out waiting for bootstrap upload (error code: -20)

% /Applications/checkra1n.app/Contents/MacOS/checkra1n -c -n -s -V -v 
#
# Checkra1n beta 0.12.4
#
# Proudly written in nano
# (c) 2019-2021 Kim Jong Cracks
#
#========  Made by  =======
# argp, axi0mx, danyl931, jaywalker, kirb, littlelailo, nitoTV
# never_released, nullpixel, pimskeks, qwertyoruiop, sbingner, siguza
#======== Thanks to =======
# haifisch, jndok, jonseals, xerub, lilstevie, psychotea, sferrini
# Cellebrite (ih8sn0w, cjori, ronyrus et al.)
#==========================

 - [12/22/21 15:33:30] <Info>: Waiting for DFU devices
 - [12/22/21 15:34:06] <Verbose>: DFU mode device found
 - [12/22/21 15:34:06] <Info>: Exploiting
 - [12/22/21 15:34:06] <Verbose>: Attempting to perform checkm8 on 8003 1...
 - [12/22/21 15:34:06] <Info>: Checking if device is ready
 - [12/22/21 15:34:06] <Verbose>: == Checkm8 Preparation stage ==
 - [12/22/21 15:34:06] <Verbose>: DFU device disconnected
 - [12/22/21 15:34:06] <Verbose>: DFU mode device found
 - [12/22/21 15:34:06] <Info>: Setting up the exploit (this is the heap spray)
 - [12/22/21 15:34:06] <Verbose>: == Checkm8 Setup stage ==
 - [12/22/21 15:34:06] <Info>: Right before trigger (this is the real bug setup)
 - [12/22/21 15:34:06] <Verbose>: Entered initial checkm8 state after 1 steps, issuing DFU abort..
 - [12/22/21 15:34:06] <Verbose>: DFU device disconnected
 - [12/22/21 15:34:06] <Verbose>: DFU mode device found
 - [12/22/21 15:34:06] <Verbose>: == Checkm8 Trigger stage ==
 - [12/22/21 15:34:06] <Verbose>: Checkmate!
 - [12/22/21 15:34:06] <Verbose>: DFU device disconnected
 - [12/22/21 15:34:06] <Verbose>: DFU mode device found
 - [12/22/21 15:34:06] <Verbose>: == Checkm8 Trying to run payload... ==
 - [12/22/21 15:34:06] <Verbose>: If everything went correctly, you should now have code execution.
 - [12/22/21 15:34:06] <Verbose>: DFU device disconnected
 - [12/22/21 15:34:08] <Info>: Entered download mode
 - [12/22/21 15:34:08] <Verbose>: Download mode device found
 - [12/22/21 15:34:08] <Info>: Booting...
 - [12/22/21 15:34:08] <Verbose>: Setting bootargs to: rootdev=md0 -v
 - [12/22/21 15:34:09] <Verbose>: Download mode device disconnected
 - [12/22/21 15:35:36] <Error>: Timed out waiting for bootstrap upload (error code: -20)
 - [12/22/21 15:35:42] <Info>: All Done
 - [12/22/21 15:35:42] <Verbose>: Bootstrap already installed, done

[mailinglists35]

unc0ver does work ok on same device

[lulukittyn]

I’m having the same exact issues with my iPad Pro Os 14.4. I keep thinking I’m doing something wrong but this has been an issue since March of this year for me. I keep thinking with different updates it would change but I can never get past this. I too am using a Mac book. This is so frustrating!! I’ve literally tried everything.

[mailinglists35]

hello?

[mailinglists35]

I mean, I understand you must be busy with ios 15, but... at least give us a hint :)

[mailinglists35]

if anyone else hits this, my workaround is now to checkra1n in safe mode then install/run unc0ver without rebooting using who-knows-what modifications 3utools has done to it (because altstore is always a pain) then launchctl reboot userspace

[P5-2005]

if anyone else hits this, my workaround is now to checkra1n in safe mode then install/run unc0ver without rebooting using who-knows-what modifications 3utools has done to it (because altstore is always a pain) then launchctl reboot userspace

you wanna jailbreak without bootstrap checkra1n loader to install unc0ver or what?

[mailinglists35]

no, I just want checkra1n or u0, without the use of altstore

[P5-2005]

restore rootfs first : checkra1n -c --force-revert, then erase content, then use only checkra1n with this for ipad pro : https://github.com/checkra1n/BugTracker/issues/2074