How to get a shell?

[raspiduino]

I followed the Auto boot instruction in the wiki and restored it successfully (idevicerestore report OK). But when I boot it back, it just stuck at the line ``

tx_flush:1075: disk0s1 xid 250 tx stats: # 80 finish 80 enter 1391 wait 4 18175us close 110us flush 53892us
tx_flush:1075: disk0s1 xid 270 tx stats: # 100 finish 100 enter 1514 wait 5 21778us close 98us flush 54782us

Full log:

Loading iOS 14.0...
kernel_low: 0xfffffff004000000
kernel_high: 0xfffffff00a4cd4f0
KPF: found apfs_vfsop_mount
KPF: found handle_eval_rootauth
KPF: Found AMFI hashtype check
kpf_amfi_callback: Found AMFI (Leaf)
kpf_amfi_callback: Found lookup_in_trust_cache_module @ 0xfffffff007b5d71c
KPF: Found mac_mount
KPF: Found mac_mount
kpf_amfi_callback: Found AMFI (Routine)
kpf_amfi_callback: Found lookup_in_static_trust_cache @ 0xfffffff0097edcb8
KPF: Found AppleKeyStoreUserClient::handleUserClientCommandGated
Qemu FB realize
g_virt_base: 0xfffffff010000000
g_phys_base: 0x0000000802000000
slide_virt: 0x000000000ce00000
slide_phys: 0x0000000000e00000
entry: 0x0000000806f204e8
boot_mode: 0
auto-boot=true
cmdline: [wdt=-1 debug=0x14e kextlog=0xffff serial=3 -v]
VNC server running on 127.0.0.1:5900
iBoot version: qemu-t8030
Darwin Image4 Validator Version 3.0.0: Wed Aug 12 22:19:21 PDT 2020; root:AppleImage4-106.0.4.0.1~129/AppleImage4/RELEASE_ARM64E
AMFI is running in RESEARCH mode!
AUC:[0xffffffe19bd77980]::init(0xffffffe19bdb9c98)

AUC:[0xffffffe19bd77980]::probe(0xffffffe19bb421c0, 0xffffffe80831bdac)

AppleCredentialManager: init: called, instance = <ptr>.
ACMFirstResponderKernelService: init: called, .
ACMRM-S: init: called, starting PersistentStore service.
ACMRM-C: init: called, starting AccessoryCache service.
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache size = 16 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache expiration = 2592000 (default).
ACMRM: init: called, starting TRM service.
ACMRM-A: init: called, starting TRM Analytics service.
ACMKernelService: initValueFromBootArgAliasesUInt32: analytics collection period = 86400 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: policy mode timeout = 259200 (default).
ACMRM-A: notifyStandardModeTimeoutChanged: called, value = 259200 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: (bounded) grace period timeout = 3600 (default).
ACMRM-A: notifyGracePeriodTimeoutChanged: called, value = 3600 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: enabled = 1 (default).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO* BtArg=NO LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO* LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _loadDisabledByOSEnvironment: disabled by OSEnvironment: NO.
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO LegHW=NO OSEnv=NO* | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _mapAndPublishTRM: set TRM_PolicyTimeout = 259200.
ACMRM: _mapAndPublishTRM: sending kIOMessageServicePropertyChange(n=1) while DISABLED, TRM: 259200 -/ff 4294967295 -/ff miss=ff (CUR: 259200 -/ff 4294967295 -/ff).
AppleCredentialManager: init: returning, result = true, instance = <ptr>.
AppleARMBootPerf: Error: profile region not found (2)
AppleARMBootPerf: Error: failed to publish profile data (2)
virtual bool CoreAnalyticsHub::start(IOService *)::105:CoreAnalyticsHub start
AppleS5L8940XI2CController::start: smc-i2c0 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c3 this: <ptr> _i2cBaseAddress: <ptr>
AppleS8000AES::start: registers at phys:0x0x235008000/0x0x23d2d0000 virt:0x<ptr>/0x0x4000 / 0x<ptr>/0x0x4000
AppleSSE::start called
AppleSSE::start returning, result = 1
AUC:[0xffffffe19bd77980]::start(0xffffffe19bb421c0)

AppleS5L8940XI2CController::start: i2c2 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleInterruptController::start: Num Shared Timestamps == 0
AppleSEPKeyStore:321:0: starting (BUILT: Aug 12 2020 22:51:30)
AppleSEPKeyStore:545:0: _sep_enabled = 1
AppleCredentialManager: start: called, instance = <ptr>.
ACMRM: _publishIOResource: AppleUSBRestrictedModeTimeout = 259200.
AppleCredentialManager: start: initializing power management, instance = <ptr>.
AppleCredentialManager: start: started, instance = <ptr>.
AppleCredentialManager: start: returning, result = true, instance = <ptr>.
AppleS5L8940XI2CController::start: smc-i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c0 this: <ptr> _i2cBaseAddress: <ptr>
virtual bool AppleARMLightEmUp::start(IOService *): starting...
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
000006.545083 wlan0.A[1] start@968:Default options property found with value 4
Creating an object of AppleBCMWLANPlatformFunctionEmbeddedAMFM class
000006.640218 wlan0.A[2] start@1401: Raised adjustBusy(+1), getBusyState() -> 1
000006.641413 wlan0.A[3] start@1403:Setting up notifier for CoreAnalyticsHub
AppleS5L8960XUSBPhy::start: hsic disabled
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
000006.776887 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::prepareDefaults: model iPhone version 12.1
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

Identified Serial Port uart7 at 0x23521c000(<ptr>)
Identified Serial Port uart0 at 0x235200000(<ptr>)
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(SMC): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(SMC): Boot args override: wdt = -1
RTBuddy(SMC): Resuming...

RTBuddy(ANS2): start(<ptr>) - (Aug 12 2020@22:50:37)
Starting AppleSMC kext(<ptr>) - (Aug 12 2020@22:51:44)
RTBuddy(ANS2): Boot args override: wdt = -1
AppleSMCEmbedded::setPowerState(): ENTER powerStateOrdinal=1, _activeKeyCommand=17 newState=1
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

000007.699194 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_handleUSBCableConnect: cable connected, but don't have device configuration yet
RTBuddy(SIO): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(ANS2): Resuming...

000007.801499 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_handleUSBCableConnect: cable connected, but don't have device configuration yet
RTBuddy(SIO): Boot args override: wdt = -1
LPM: Log data is NOT valid. 0x0 0x0
AppleDialogSPMIPMU::start: Primary PMU detected
virtual IOService *AppleANS2NVMeController::probe(IOService *, SInt32 *)::194:Found (ANS2) provider, returning score 100000
virtual bool AppleANS2NVMeController::start(IOService *)::394:Found the ANS2Endpoint1
bool AppleEmbeddedNVMeController::SetNamespacesStruct()::186:Obtained 7 namespaces from DT
virtual IOFilterInterruptEventSource *AppleANS2NVMeController::CreateDeviceInterrupt(IOInterruptEventSource::Action, IOFilterInterruptEventSource::Filter, IOService *)::2719:ANS2 NVMe interrupt index - 0x4
AppleARMRTC started!#####
AppleDialogSPMIPMURTC started!******
Failed to read info-leg_scrpadAppleDialogSPMIPMURTC tick read!&&&&&&&
AppleDialogSPMIPMURTC ending!%%%
/Library/Caches/com.apple.xbs/Sources/AppleSMC/AppleSMC-589.0.5/AppleSMCEmbeddedCharger/AppleSMCCharger.cpp:408 _setPowerStateGated() ENTER powerStateOrdinal=1, _powerState=1
AppleARMRTC registering service!@@@@@@
AppleARMRTC service registered!$$$$$
AppleARMRTC publishing service!^^^^^^
apfs_module_start:2411: load: com.apple.filesystems.apfs, v1677.0.5, apfs-1677.0.5, 2020/08/12
com.apple.AppleFSCompressionTypeZlib kmod start
apfs_sysctl_register:1253: done registering sysctls.
com.apple.AppleFSCompressionTypeZlib load succeeded
L2TP domain init
L2TP domain init complete
Load request for com.apple.nke.pptp failed: -603946998
Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOMedia</string><key>IOPropertyMatch</key><dict ID="2"><key>Partition ID</key><integer size="64" ID="3">0x1</integer></dict></dict>
virtual IOReturn IONVMeController::CreateSubmissionQueue(uint16_t, uint8_t)::2886:SQ index=0 entrysize=64
virtual IOReturn IONVMeController::CreateSubmissionQueue(uint16_t, uint8_t)::2886:SQ index=1 entrysize=128
ANS2: MMIO write to unknown vendor register, offset=0x1210 value=0x240024, returning
ANS2: MMIO write to unknown vendor register, offset=0x24004 value=0x1000, returning
ANS2: MMIO write to unknown vendor register, offset=0x24008 value=0x0, returning
ANS2: MMIO write to unknown vendor register, offset=0x24118 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24108 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24420 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24414 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x2441c value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24418 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24144 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24524 value=0x10002, returning
ANS2: MMIO write to unknown vendor register, offset=0x24508 value=0x102, returning
ANS2: MMIO write to unknown vendor register, offset=0x24504 value=0x10002, returning
virtual void AppleANS2NVMeController::SetModeselRegister(uint32_t)::1186:Setting modesel to 0
ANS2: MMIO write to unknown vendor register, offset=0x1304 value=0x0, returning
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1964:nvme: Vendor ID     : 0x1b36
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1965:nvme: Model Number  : QEMU NVMe Ctrl                          
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1966:nvme: Serial Number : QEMUT8030ANS        
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::1967:nvme: Firmware Rev  : 1.0     
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2000:nvme: S3E A0 Invalid 1x slc 1D 0 plane 128GB NAND
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2009:ECCVersion   : 0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2010:FTL Rev      : 0.0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2011:DM_Version   : 0
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2012:=======================
bool AppleEmbeddedNVMeController::IdentifyNamespaces()::2019:Found 16 namespaces in current NAND
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[1] as nstype[1]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[2] as nstype[2]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[3] as nstype[3]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[4] as nstype[4]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[5] as nstype[5]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[6] as nstype[6]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[7] as nstype[8]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[8] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[9] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[10] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[11] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[12] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[13] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[14] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[15] as nstype[0]
bool AppleEmbeddedNVMeController::DetermineNamespaces()::2435:Identified nsid[16] as nstype[0]
bool AppleEmbeddedNVMeController::SetSwapWriteLimit(uint32_t)::2192: Swap limit set to 2147483648bytes, 2GB
uint32_t AppleEmbeddedNVMeNVRAM::GetNVRAMSize()::745:NVRAM size is 8192 bytes
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1578:allocateAll 1
dev_init:297: disk0 device accelerated crypto: 0 (compiled @ Aug 12 2020 22:19:57)
dev_init:300: disk0 device_handle block size 4096 block count 2097141 features 0 internal 
nx_kernel_mount:1134: disk0 initializing cache w/hash_size 4096 and cache size 10064
nx_kernel_mount:1402: disk0 checkpoint search: largest xid 170, best xid 170 @ 67
nx_kernel_mount:1404: disk0 reloading after unclean unmount, checkpoint xid 170, superblock xid 163
import_iboot_forwarded_roothash:2577: importing root hash ...
apfs_extract_root_hash_arm:10001: could not retrieve system-volume-auth-blob from device tree
import_iboot_forwarded_roothash:2580: apfs_extract_root_hash_and_manifest failed with error: No such file or directory (2)
Got boot device = IOService:/AppleARMPE/arm-io@10F00000/AppleT803xIO/ans@77400000/AppleASCWrapV2/iop-ans-nub/RTBuddyV2/RTBuddyService/AppleANS2NVMeController/NS_01@1/IOBlockStorageDriver/QEMU NVMe Ctrl Media/IOGUIDPartitionScheme/Container@1
BSD root: disk0s1, major 1, minor 1
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 2, NSTYPE - 2
apfs_vfsop_mountroot:2188: apfs: mountroot called!
dev_init:297: disk0s1 device accelerated crypto: 3 (compiled @ Aug 12 2020 22:19:57)
dev_init:300: disk0s1 device_handle block size 4096 block count 2097141 features 22 internal solidstate
nx_kernel_mount:1134: disk0s1 initializing cache w/hash_size 4096 and cache size 10064
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 3, NSTYPE - 3
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 6, NSTYPE - 6
[effaceable:ERR ] unable to find content
[effaceable:INIT] started
nx_kernel_mount:1402: disk0s1 checkpoint search: largest xid 170, best xid 170 @ 67
nx_kernel_mount:1404: disk0s1 reloading after unclean unmount, checkpoint xid 170, superblock xid 163
virtual bool AppleEmbeddedNVMeController::AllocateNodes(bool)::1605:Creating blockdevice with NSID - 7, NSTYPE - 8
virtual IOReturn AppleNVMeNamespaceDevice::GetDeviceProperties()::269: Logical Blocks Size = 4096 
 virtual IOReturn AppleNVMeNamespaceDevice::GetDeviceProperties()::272: Block Count = 256 
 virtual bool AppleNVMeNamespaceDevice::start(IOService *)::111:NVMe Namespace Device registration done for NSID: 7, NSTYPE: 8
virtual bool AppleEmbeddedNVMeController::StartController()::1547:Setting NAND status to Ready
apfs_vfsop_mount:1848: Promoter has been locked for disk0s1
apfs_vfsop_mount:1998: disk0s1s1:0 Rooting from snapshot with xid 159.
handle_snapshot_mount:844: mounting snapshot w/snap_xid 159 and sblock oid 0x1f0006
handle_snapshot_mount:1000: setting dev block size to 4096 from 512
handle_mount:627: vol-uuid: DB5E5127-915A-4F0E-9BF6-1C49E3FB4851 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.12)
nx_volume_group_update:6634: Volume com.apple.os.update-5118EA8F39FF61D152BA7E1F92591910CDE7A2B09B867D8D58DC37E2CDC0B7C98DD296D4BF57862D143413DD17012D70 is not in a volume group
apfs_vfsop_mount:2171: disk0s1s1:0 mounted volume: System
dyld: setting comm page to 0x0
Sun May 22 08:53:29 2022  com.apple.xpc.launchd[1] <Notice>: hello
Darwin Bootstrapper Version 7.0.0: Mon Aug 10 04:09:14 PDT 2020; root:libxpc_executables-2038.0.13~13/launchd/RELEASE_ARM64E
boot-args = wdt=-1 debug=0x14e kextlog=0xffff serial=3 -v
Sun May 22 08:53:29 2022  com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.system) <Notice>: entering ondemand mode
Sun May 22 08:53:29 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: fsck
** Checking the container superblock.
** Checking the object map.
** Checking volume.
** Checking the APFS volume superblock.
** The volume System was formatted by newfs_apfs (945.200.129.100.10) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Data was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Hardware was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Preboot was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** Checking volume.
** Checking the APFS volume superblock.
** The volume Update was formatted by newfs_apfs (1677.0.5) and last modified by apfs_kext (1677.0.5).
** QUICKCHECK ONLY; FILESYSTEM CLEAN
Sun May 22 08:53:33 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: mount-phase-1
mount: found boot container: /dev/disk0s1, data volume: /dev/disk0s1s2 env: 1
com.apple.os.update-5118EA8F39FF61D152BA7E1F92591910CDE7A2B09B867D8D58DC37E2CDC0B7C98DD296D4BF57862D143413DD17012D70@/dev/disk0s1s1 on / (apfs, local, nosuid, read-only, journaled, noatime)
handle_mount:627: vol-uuid: F5DEACDF-4954-4120-BAF2-7E092DD4E684 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6628: Volume Preboot role 10 Not a System or data volume
apfs_vfsop_mount:2171: disk0s1s4:0 mounted volume: Preboot
/dev/disk0s1s4 on /private/preboot (apfs, local, nodev, nosuid, read-only, journaled, noatime, nobrowse)
Sun May 22 08:53:34 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: data-protection
init_data_protection: No SEP present on this device
Sun May 22 08:53:35 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: finish-obliteration
Obliterator: In INIT check
IORegistryEntryGetProperty failed, may be does not exist
Obliterator: No obliteration needed, continue booting, returning 0
Sun May 22 08:53:36 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: commit-boot-mode
Sun May 22 08:53:36 2022 localhost com.apple.xpc.launchd[1] <Notice>: boot-mode committed: (null)
Sun May 22 08:53:36 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: restore-datapartition
Sun May 22 08:53:36 2022 localhost com.apple.xpc.launchd[1] <Notice>: restore-datapartition: optional boot task not present
Sun May 22 08:53:36 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: mount-phase-2
mount: found boot container: /dev/disk0s1, data volume: /dev/disk0s1s2 env: 1
spaceman_metazone_init:189: disk0s1 metazone for device 0 of size 131072 blocks (encrypted: 1966069-2031605 unencrypted: 2031605-2097141)
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 1 blocks starting at paddr 32768
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 2 blocks starting at paddr 65536
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 3 blocks starting at paddr 98304
spaceman_datazone_init:442: disk0s1 allocation zone on dev 0 for allocations of 4 blocks starting at paddr 131072
dev_dump:256: Aggregate constructed: dev=<ptr> di=0 dv_num_slice=8 dv_num_slice_blk=262144 dv_num_lslice_blk=262133
migrate_media_keys_if_needed:1206: no media keys to migrate for container = disk0s1
mount: failed to migrate Media Keys, error = c002
spaceman_trim_free_blocks:3361: disk0s1 scan took 0.120083 s, trims took 0.009791 s
spaceman_trim_free_blocks:3369: disk0s1 245325 blocks free in 162 extents
spaceman_trim_free_blocks:3377: disk0s1 245325 blocks trimmed in 162 extents (60 us/trim, 16545 trims/s)
spaceman_trim_free_blocks:3380: disk0s1 trim distribution 1:97 2+:41 4+:12 16+:4 64+:0 256+:8
handle_mount:627: vol-uuid: 946E93CE-C991-4E1A-B650-7685AF0B9095 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6634: Volume Data is not in a volume group
apfs_vfsop_mount:2171: disk0s1s2:0 mounted volume: Data
/dev/disk0s1s2 on /private/var (apfs, local, nodev, nosuid, journaled, noatime)
handle_mount:627: vol-uuid: 180F6F92-F4A0-4E37-9B94-D2E6CB4607D9 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6628: Volume Update role c0 Not a System or data volume
apfs_vfsop_mount:2171: disk0s1s5:0 mounted volume: Update
/dev/disk0s1s5 on /private/var/MobileSoftwareUpdate (apfs, local, nodev, nosuid, journaled, noatime, nobrowse)
handle_mount:627: vol-uuid: 521EEEEA-7A6E-4FD6-B067-55BBA3533710 block size: 4096 block count: 2097141 (unencrypted; flags: 0x1; features: 8.0.2)
handle_mount:640: setting dev block size to 4096 from 512
nx_volume_group_update:6628: Volume Hardware role 140 Not a System or data volume
apfs_vfsop_mount:2171: disk0s1s3:0 mounted volume: Hardware
/dev/disk0s1s3 on /private/var/hardware (apfs, local, nodev, nosuid, journaled, noatime, nobrowse)
Sun May 22 01:53:38 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: init-with-data-volume
Sun May 22 01:53:38 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: MSUEarlyBootTask
main: MSUEarlyBootTask running
main: Content from the ramdisk will be present at /private/var/MobileSoftwareUpdate/5118ea8f39ff61d152ba7e1f92591910cde7a2b09b867d8d58dc37e2cdc0b7c98dd296d4bf57862d143413dd17012d70-MSUData if it exists
MSUEarlyBootTask: I have nothing to do. Goodbye!!
Sun May 22 01:53:39 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: fips
Tracing: disabled
FIPSPOST_USER [541662503] fipspost_post:158: PASSED: (26 ms) - fipspost_post_integrity
FIPSPOST_USER [541920147] fipspost_post:164: PASSED: (8 ms) - fipspost_post_hmac
FIPSPOST_USER [541984635] fipspost_post:165: PASSED: (1 ms) - fipspost_post_aes_ecb
FIPSPOST_USER [542045791] fipspost_post:166: PASSED: (1 ms) - fipspost_post_aes_cbc
FIPSPOST_USER [543775059] fipspost_post:167: PASSED: (70 ms) - fipspost_post_rsa_sig
FIPSPOST_USER [544707315] fipspost_post:168: PASSED: (37 ms) - fipspost_post_ecdsa
FIPSPOST_USER [544953505] fipspost_post:169: PASSED: (8 ms) - fipspost_post_ecdh
FIPSPOST_USER [545022575] fipspost_post:170: PASSED: (1 ms) - fipspost_post_drbg_ctr
FIPSPOST_USER [545110023] fipspost_post:171: PASSED: (2 ms) - fipspost_post_aes_ccm
FIPSPOST_USER [548125262] fipspost_post:173: PASSED: (124 ms) - fipspost_post_pbkdf
FIPSPOST_USER [548195571] fipspost_post:174: PASSED: (0 ms) - fipspost_post_kdf_ctr
FIPSPOST_USER [549749726] fipspost_post:175: PASSED: (63 ms) - fipspost_post_aes_gcm
FIPSPOST_USER [549828193] fipspost_post:176: PASSED: (1 ms) - fipspost_post_aes_xts
FIPSPOST_USER [549937474] fipspost_post:177: PASSED: (3 ms) - fipspost_post_tdes_cbc
FIPSPOST_USER [550006703] fipspost_post:178: PASSED: (2 ms) - fipspost_post_drbg_hmac
FIPSPOST_USER [551212645] fipspost_post:180: PASSED: (49 ms) - fipspost_post_ffdh
FIPSPOST_USER [552561254] fipspost_post:181: PASSED: (54 ms) - fipspost_post_rsa_enc_dec
FIPSPOST_USER [552601014] fipspost_post:201: all tests PASSED (481 ms)
Sun May 22 01:53:39 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: keybag
****** DIAGNOSTICS MODE ENABLED, SKIP INIT ****
Sun May 22 01:53:40 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: usermanagerd
Sun May 22 01:53:40 2022 localhost com.apple.xpc.launchd[1] <Notice>: usermanagerd: optional boot task not present
Sun May 22 01:53:40 2022 localhost com.apple.xpc.launchd[1] <Notice>: launchd logging initialized
Sun May 22 01:53:40 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: xpcroleaccountd
Sun May 22 01:53:40 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: init_featureflags
init_featureflags: skipping directory: /System/Library/FeatureFlags/Domain
init_featureflags: skipping directory: /Library/Preferences/FeatureFlags/Domain
Sun May 22 01:53:41 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: fud
objc[20]: Class UARPManifestProperties is implemented in both /System/Library/PrivateFrameworks/CoreUARP.framework/CoreUARP and /System/Library/PrivateFrameworks/MobileAccessoryUpdater.framework/Support/fud. One of the two will be used. Which one is undefined.
fud: -[FudEarlyBoot doFUDEarlyBoot:](): Starting Early Boot
fud: No Early Boot Accessories
fud: -[FudEarlyBoot doFUDEarlyBoot:](): End Early Boot
Sun May 22 01:53:43 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: tzinit
000026.633426 wlan0.A[4] initWithProvider@120:amfm not matched
000026.639257 wlan0.A[5] deferredStart@1730: Lowered adjustBusy(-1), getBusyState() -> 4
Sun May 22 01:53:43 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: finish-restore
Sun May 22 01:53:43 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: finish-demo-restore
Sun May 22 01:53:43 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: sysstatuscheck
Sun May 22 01:53:44 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: prng_seedctl
PRNG diagnostics:
0 user reseeds, 1 scheduled reseeds, 83 max samples in a scheduled reseed, 268 max samples in an entropy input
generator 0: 2 rekeys, 396 requests, 4232 total bytes requested, 64 max bytes requested in a request, 2048 bytes requested since rekey, 2184 max bytes requested between rekeys
generator 1: 2 rekeys, 127 requests, 2216 total bytes requested, 64 max bytes requested in a request, 2200 bytes requested since rekey, 2200 max bytes requested between rekeys
generator 2: 2 rekeys, 16 requests, 388 total bytes requested, 64 max bytes requested in a request, 340 bytes requested since rekey, 340 max bytes requested between rekeys
generator 3: 2 rekeys, 11 requests, 108 total bytes requested, 16 max bytes requested in a request, 76 bytes requested since rekey, 76 max bytes requested between rekeys
pool 0: 0 samples, 1 drains, 83 max samples
pool 1: 268 samples, 0 drains, 268 max samples
pool 2: 37 samples, 0 drains, 37 max samples
pool 3: 69 samples, 0 drains, 69 max samples
pool 4: 85 samples, 0 drains, 85 max samples
pool 5: 113 samples, 0 drains, 113 max samples
pool 6: 32 samples, 0 drains, 32 max samples
pool 7: 57 samples, 0 drains, 57 max samples
pool 8: 88 samples, 0 drains, 88 max samples
pool 9: 54 samples, 0 drains, 54 max samples
pool 10: 51 samples, 0 drains, 51 max samples
pool 11: 37 samples, 0 drains, 37 max samples
pool 12: 40 samples, 0 drains, 40 max samples
pool 13: 45 samples, 0 drains, 45 max samples
pool 14: 122 samples, 0 drains, 122 max samples
pool 15: 70 samples, 0 drains, 70 max samples
pool 16: 0 samples, 0 drains, 0 max samples
pool 17: 0 samples, 0 drains, 0 max samples
pool 18: 0 samples, 0 drains, 0 max samples
pool 19: 0 samples, 0 drains, 0 max samples
pool 20: 0 samples, 0 drains, 0 max samples
pool 21: 0 samples, 0 drains, 0 max samples
pool 22: 0 samples, 0 drains, 0 max samples
pool 23: 0 samples, 0 drains, 0 max samples
pool 24: 0 samples, 0 drains, 0 max samples
pool 25: 0 samples, 0 drains, 0 max samples
pool 26: 0 samples, 0 drains, 0 max samples
pool 27: 0 samples, 0 drains, 0 max samples
pool 28: 0 samples, 0 drains, 0 max samples
pool 29: 0 samples, 0 drains, 0 max samples
pool 30: 0 samples, 0 drains, 0 max samples
pool 31: 0 samples, 0 drains, 0 max samples
failed to load virtual random: (-147) (-536870212)
Sun May 22 01:53:44 2022 localhost com.apple.xpc.launchd[1] <Notice>: Doing boot task: launchd_cache_loader
0 Found valid port: 2307 Valid: 1
1 Found valid port: 0 Valid: 0
2 Found valid port: 0 Valid: 0
Using default cache paths
Code: /System/Library/xpc/launchd.plist Sig: /System/Library/xpc/launchd.plist.sig
static IOReturn AppleMobileFileIntegrityUserClient::isCdhashInTrustCache(OSObject *, void *, IOExternalMethodArguments *): Process 26 is checking if a cdhash is in the trust cache
static IOReturn AppleMobileFileIntegrityUserClient::isCdhashInTrustCache(OSObject *, void *, IOExternalMethodArguments *): Returning IOReturn 0x0 to process 26
cdhash: {length = 20, bytes = 0x1f926e82fb7151558f895e958a422ee5c570b6bc} is trusted
Attached signature to file, checking ...
Trying to send bytes to launchd: 2307 16384
Sending validated cache to launchd
Cache sent to launchd successfully
Sun May 22 01:53:46 2022 localhost com.apple.xpc.launchd[1] <Notice>: launchd UUID: 4C2464F5-9F87-31DE-B252-584E3391D4FA
Sun May 22 01:53:46 2022 localhost com.apple.xpc.launchd[1] <Notice>: Early boot complete. Continuing system boot.
AppleCredentialManagerUserClient: start: edu_mode = No, persona = No, user_id = ffffffff -> session_uid = ffffffff.
ACMRM: _onDaemonStarted: called, allowedByMC=YES, alreadyStarted=NO.
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO LegHW=NO OSEnv=NO | MngCo=NO* DwnOS=NO ChkBd=NO coGSw=NO).
AppleCredentialManager: getSEPEndpoint: Initializing SEP endpoint.
Invalid denylist
000329.673123 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: PTP
000329.686266 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: PTP
000329.690284 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: iPod USB Interface
000329.842814 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: USBAudioControl
000329.846233 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: USBAudioStreaming
000329.851305 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: IapOverUsbHid
000329.881349 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: PTP + Apple Mobile Device
000330.051322 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: PTP
000330.052537 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000330.057671 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: PTP + Apple Mobile Device + Apple USB Ethernet
000330.059117 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: PTP
000330.067067 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000330.071895 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBEthernet
000330.074517 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: PTP + Apple Mobile Device + Valeria
000330.078182 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: PTP
000330.081464 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000330.308869 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: Valeria
000330.312238 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: Apple Mobile Device + Interdevice Audio
000330.318805 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000330.321693 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: USBAudio2Control
000330.326343 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: USBAudio2StreamIN
000330.327711 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: USBAudio2StreamOUT
000330.331504 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: IDAMInterface
000330.334999 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: interface association: Interdevice Audio Interfaces (First: 1, Count: 4)
000330.343508 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice: configuration: PTP + Apple Mobile Device + NCM
000330.344764 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: PTP
000330.345715 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBMux
000330.346827 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBNCMControl
000330.348057 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::createUSBDevice:    interface: AppleUSBNCMData
000330.522411 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function USBAudioControl
IOAccessoryPortUSB::start
000330.565806 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function USBAudioStreaming
000330.578352 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function IapOverUsbHid
000330.606810 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function AppleUSBEthernet
000330.667445 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function USBAudio2StreamIN
000330.686621 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function USBAudio2Control
000330.839363 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function USBAudio2StreamOUT
AppleUSBDeviceMux build: Aug 12 2020 22:50:42
000330.890479 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function AppleUSBMux
000330.943300 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function IDAMInterface
000330.973641 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function AppleUSBNCMControl
000331.018014 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function AppleUSBNCMData
000331.778037 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function Valeria
000332.732198 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::gated_registerFunction: register function PTP
000332.748430 AppleNubSynopsysOTG3Device@: IOUSBDeviceController::startUSBStack: starting usb stack
qemu-system-aarch64: usb_tcp_host_attach: failed to connect to server: -1

tx_flush:1075: disk0s1 xid 190 tx stats: # 20 finish 20 enter 467 wait 0 0us close 12us flush 52870us
apfs_is_valid_class:2253: rejecting class open (class 2) because we're not content protected
virtual bool CoreAnalyticsUserClient::initWithTask(task_t, void *, UInt32, OSDictionary *)::165:success
IOReturn CoreAnalyticsHub::setClientGated(CoreAnalyticsUserClient *)::287:adding userClient
IOReturn CoreAnalyticsHub::__newUserClientGated(task_t, void *, UInt32, OSDictionary *, IOUserClient **)::257:Successfully opened
virtual IOReturn CoreAnalyticsUserClient::clientMemoryForType(UInt32, IOOptionBits *, IOMemoryDescriptor **)::269: got memory descriptor with 16432
tx_flush:1075: disk0s1 xid 210 tx stats: # 40 finish 40 enter 894 wait 0 0us close 71us flush 55400us
tx_flush:1075: disk0s1 xid 230 tx stats: # 60 finish 60 enter 1197 wait 4 18175us close 98us flush 51610us
static IOReturn AppleMobileFileIntegrityUserClient::isCdhashInTrustCache(OSObject *, void *, IOExternalMethodArguments *): Process 421 is checking if a cdhash is in the trust cache
static IOReturn AppleMobileFileIntegrityUserClient::isCdhashInTrustCache(OSObject *, void *, IOExternalMethodArguments *): Returning IOReturn 0x0 to process 421
tx_flush:1075: disk0s1 xid 250 tx stats: # 80 finish 80 enter 1391 wait 4 18175us close 110us flush 53892us
tx_flush:1075: disk0s1 xid 270 tx stats: # 100 finish 100 enter 1514 wait 5 21778us close 98us flush 54782us
tx_flush:1075: disk0s1 xid 290 tx stats: # 120 finish 120 enter 1308 wait 6 23472us close 82us flush 54797us

You can see the log and re-run it here. I created a Google Colab notebook to run this (yeah I know Colab is not a place for running QEMU :)).

Any ideas? Or do I have to be more patient? Thanks!

[TrungNguyen1909]

That result is as expected since you haven't configure launchd cache and copy the bootstrap over yet

[raspiduino]

I don't own a Mac, so it's rather difficult to run MacOS to use hdiutil. Can you give me an image nvme.1 with shell access? Thanks!

I tried mounting the image nvme.1 on Windows using APFS for Windows but it cannot rename snapshot :(

[TrungNguyen1909]

I'm sorry but I'm unable to do that.

[raspiduino]

Okay thanks for your kind help! I will try emulating MacOS on arm64 using this :)

[TrungNguyen1909]

@raspiduino Try remove ,ticket-filename=root_ticket.der from your run script (you still need that for restoring btw). I think it could remove the need of renaming snapshot.

[raspiduino]

Thank you! I will try this and report the result soon!