iPad stuck in recovery mode after restarting

[magic egret]

I dualbooted my iPad Air 2. But after restarting it got stuck in recovery mode. iTunes restore failed with error -35. palera1n verbose logs showed some files missing in /private/var…

[magic egret]

I get this verbose when booting

palera1n -c -f -V

[stable badge]

What iOS did you dualboot

[magic egret]

14.3

So I figured out, that the System KeyBag is faulty

/private/var/keybags/systembag.kb.writing can’t be found

[lean frost]

I have similar issue how do you solve it?

[magic egret]

I didn’t solve it yet

I think the NAND is screwed. So I’ll solder a new one onto it :/

@lean frost

[hallow axle]

uh this doesn’t seem like nand is screwed to me (might be wrong though, this is the first time I’ve seen this as well)

but what would this be, since:

• DFU restore doesn’t work
• SSV brick shouldn’t happen on A11 or earlier

well this isn’t related clearly

[magic egret]

I thought about booting a SSH Ramdisk

Erasing the NAND

And restore it with 15.7.5 Ipsw

[hallow axle]

<@&355177530061357057> hey sorry for pinging, but I have legitimately no idea what this issue is, as:

• iTunes error code doesn’t make sense whatsoever (-35 is some iTunes songs failure, 35 points to a bad cable or NAND failure, but the latter seems so insanely unlikely that this doesn’t make much sense)
• DFU restore didn’t work (context: #jailbreak)
• SSV brick shouldn’t be unrecoverable on A11 or earlier (this is an Air 2 so)

[magic egret]

What’s SSV BTW?

[hallow axle]

https://theapplewiki.com/wiki/Signed_System_Volume

[magic egret]

Ah thx 🙂

[crystal bone]

theres no reason ssv brick cant happen on A11 and earlier

its just recoverable on A11 and earlier

[hallow axle]

yeah but this isn’t recoverable (seemingly)

should clarify that

[magic egret]

So how can I get my iPad back to life again?

[crystal bone]

its recoverable, you just have to practically tether downgrade to ios 14 first

or any version that dont care about ssv

that or use that ssv resealer script

[hallow axle]

well on A11 and earlier a DFU restore normally works

[crystal bone]

not for an ssv brick it wont

[hallow axle]

you can break SSV on A11 and earlier and still restore fine - it only impacts the restore ramdisk on A12+

[crystal bone]

this is why i want a seperate restore error category on the applewiki

[crystal bone]

it does?

i thought it just affected everything

[magic egret]

So y’all mean my SSV is bricked?

[hallow axle]

well it impacts everything, I’m saying it doesn’t impact the restore ramdisk on A11 and earlier

[crystal bone]

Yeah but I thought it did on the ram disks on everything is what I meant

It was just iOS 15 it began to care

[crystal bone]

Bricked, yet recoverable, provided this is an SSV brick

[hallow axle]

nand failure, while technically possible, seems so incredibly unlikely

[magic egret]

It doesn’t want to restore… I thought my NAND is dead. But fortunately only the SSV?

[crystal bone]

@hallow axle something something https://github.com/0xallie/apfs-reseal

[magic egret]

I thought first it was the nand. But that shouldn’t be the case, since I haven’t used the iPad much… when I bought it back then

[crystal bone]

I gtg

[crystal bone]

Pretty sure it's just basic sshrd principe

[hallow axle]

try this @magic egret

[magic egret]

So that repairs my iPad?

[hallow axle]

who knows

will reseal if you did break the seal though

[crystal bone]

Me back

[crystal bone]

The funny thing is this is probably the first genuine use case for it

[magic egret]

@hallow axle I’m not sure what version it’s running now. Bricked was in 15.7.3 then tried to restore to 15.7.5… but failed so what version now?

[crystal bone]

15.7.5 likely

[magic egret]

Errrmmm

It’s not my Mac Minis fault

[crystal bone]

Scroll through the script and check the gaster link it downloads

Might be a bad link

[magic egret]

It can’t find gaster at all so I think the submodule has a bad link

[magic egret]

That doesn’t look good @crystal bone

And here it stucks

[crystal bone]

that is likely your cable rapidly disconnecting and reconnecting

i think

it might be fine however

[magic egret]

Should I disconnect and reconnect it?

Or use other cable?

[crystal bone]

nah just leave it

for now

that dmg is large so

[magic egret]

So do I understand that right. The iPad is currently booted into a Ramdisk isn’t it?

[magic egret]

297 MB

[crystal bone]

yes

a customised one that is

[magic egret]

Mhm okay… it still extracts…

Somehow

@crystal bone my iPad only has 2 GB of RAM but the Ramdisk (Volume) has 2.05

The dmg file has 300 MB

[crystal bone]

ignore that

its only extracting on the mac as far as im concerned as of this moment

[magic egret]

@crystal bone it failed:

[crystal bone]

hm

@hallow axle may be deeper rooted than ssv?

[hallow axle]

could it (somehow) be nand failure

[crystal bone]

wait that says source not target

[hallow axle]

could it also be the cable?

[crystal bone]

me thinks cable

[hallow axle]

referencing this

[magic egret]

okay lemme change the cable

[crystal bone]

also

@magic egret do this in terminal too

[magic egret]

i have about 20 of them laying around

[crystal bone]

sudo killall -STOP -c usbd

[crystal bone]

prevents any artificial actioned disconnects on behalf of ever so slightly dodgy cables

[magic egret]

okay 👍

[magic egret]

@crystal bone it succeeded…

But still…

[crystal bone]

try restore in itunes once more

if its an ssv brick then ideally it should be restorable now

[magic egret]

Nope

@crystal bone still error

@hallow axle You know anything?

This damn iPad is so silly... i'll throw it away...