Unable to boot after restore success

[suciptoid]

Describe the bug

• All step is run successfully (log included)
• After restore succees device reboot to recovery/restore mode

What is your macOS version?
macOS 12.2.1

What is the device you're trying to downgrade?
iPhone 5s

What is the LeetDown version you're using?
2.2_REV_A (1)

**Enable debugging in LeetDown's settings and copy and paste LDLog.txt here. **

[+]  Waiting for a device in DFU Mode
[+]  iPhone 5s (Global) is supported

============= DEVICE INFO =============

Model Name: iPhone 5s (Global)
Hardware Model: n53ap
ECID: 8299088845880
Serial Tag: iBoot-1704.10
APNonce:863a402ea7ea2188b14fe835bac75aa2209dd1b1
CPID: 8960
Destination Firmware: 10.3.3
Pwned: No

=====================================
[+]  Verifying iPSW
[+]  Checking md5 of the iPSW...
[+]  Successfully verified the iPSW
[+]  iPSW selected at /Users/sucipto/Documents/iOS-OTA-Downgrader/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw and being extracted to /var/folders/v5/30n9fn2n3b983y0zb1gjkr400000gn/T/iPSW
[+]  Extracting the iPSW please wait...
[+]  Successfully extracted the iPSW
[+]  Exploiting device...
[+]  Exploit succeeded!
[+]  Fetching OTA blob
[+]  Sending /dev/null
[+]  Successfully booted /dev/null
[+]  5 second cooldown, re-plug now if needed on Apple Silicon
[+]  Sending /var/folders/v5/30n9fn2n3b983y0zb1gjkr400000gn/T/iPSW/Firmware/DFU/iBSS.iphone6.RELEASE.im4p
[+]  Successfully booted /var/folders/v5/30n9fn2n3b983y0zb1gjkr400000gn/T/iPSW/Firmware/DFU/iBSS.iphone6.RELEASE.im4p
[+]  5 second cooldown, re-plug now if needed on Apple Silicon
[+]  Sending /var/folders/v5/30n9fn2n3b983y0zb1gjkr400000gn/T/iPSW/Firmware/DFU/iBEC.iphone6.RELEASE.im4p
[+]  Successfully booted /var/folders/v5/30n9fn2n3b983y0zb1gjkr400000gn/T/iPSW/Firmware/DFU/iBEC.iphone6.RELEASE.im4p
[+]  5 second cooldown, re-plug now if needed on Apple Silicon
[+]  Starting restore process
[+]  Restore succeeded!

Additional info (optional)

[rA9stuff]

Hi, I need some extra information to determine the issue. Please do:

• Specify your Mac model (by year and silicon).
• Run this command in terminal /Applications/LeetDown.app/Contents/MacOS/LeetDown then copy and paste the terminal log to ghostbin and send a link here.

[rA9stuff]

Also, does the restore actually start? Do you see the apple logo with the progress bar run?

[suciptoid]

@rA9stuff yes it is. Progressbar run and complete.

Maybe related to this too #89

[rA9stuff]

Huh, that’s interesting. Complete the steps in my initial comment and I’ll take a look at the logs.

[rA9stuff]

@rA9stuff yes it is. Progressbar run and complete.

Maybe related to this too #89

Version 2.1 was buggy on iPads, I don’t think it’s related with this issue.

[suciptoid]

@rA9stuff additional info:
Mac Model: MacBook Pro (13-inch, 2020, Two Thunderbolt 3 ports) / Intel

Full log from terminal:

 /Applications/LeetDown.app/Contents/MacOS/LeetDown
initial device scan started
attempting to connect 1/5
connected 1/5
2022-02-16 21:27:46.583 LeetDown[74227:2302841] 8299088845880
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
[main] Waiting for device in DFU mode...
[io_get_serial] Found serial number!
[main] CONNECTED
[main] CPID: 0x8960, BDID: 0x02, STRG: [iBoot-1704.10]
** exploiting with checkm8
[checkm8_s5l8960x] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[checkm8_s5l8960x] running set_global_state()
[set_global_state] (1/3) sent: 0, val: 5c0
[set_global_state] (2/3) e000404f
[set_global_state] running heap_spray()
[heap_spray] (1/3) e000404f
[heap_spray] (2/3) 0
[heap_spray] (3/3) e0004051
[set_global_state] (3/3) e00002ed
[checkm8_s5l8960x] reconnecting
[checkm8_s5l8960x] USBDeviceReEnumerate: 0
[checkm8_s5l8960x] running heap_occupation()
[heap_occupation] (1/3) e000404f
[heap_occupation] (2/3) e0004051
[heap_occupation] (3/3) e000404f
[checkm8_s5l8960x] reconnecting
[checkm8_s5l8960x] USBDeviceReEnumerate: 0
[io_get_serial] Found serial number!
[checkm8_s5l8960x] pwned!
attempting to connect 1/5
connected 1/5
attempting to connect 1/5
connected 1/5
Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355
[TSSC] manually specified ECID to use, parsed "8299088845880" to dec:8299088845880 hex:78c483e1c38
[TSSC] manually specified ApNonce to use, parsed "99b5e22d771c0f1c81f70c394e9907993a2db435" to hex:99b5e22d771c0f1c81f70c394e9907993a2db435
[TSSC] opening /Applications/LeetDown.app/Contents/Resources/LDResources/Buildmanifests/iPhone6,2.plist
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... success
also requesting APTicket for update installing
[Error] [TSSR] Error: could not get id0 for installType=Update
[WARNING] [TSSR] faild to build tssrequest for alternative installType
[TSSR] User specified not to request a baseband ticket.
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... failure
[Error] ERROR: TSS request failed (status=128, message=An internal error occurred.)
Saved signing tickets!

iOS 10.3.3 for device iPhone6,2 IS being signed!
printing dev info line 1012
SERIAL TAG -> iBoot-1704.10
HARDWARE MODEL -> n53ap
inside restore64(), printing dev info
printing dev info line 657
SERIAL TAG -> iBoot-1704.10
HARDWARE MODEL -> n53ap
inside patchFiles(), printing dev info
printing dev info line 372
SERIAL TAG -> iBoot-1704.10
HARDWARE MODEL -> n53ap
[!] reconnect requested, freeing pointer and calling openConnection()
attempting to connect 1/5
connected 1/5
[!] reconnect requested, freeing pointer and calling openConnection()
attempting to connect 1/5
connected 1/5
line 672
[!] reconnect requested, freeing pointer and calling openConnection()
attempting to connect 1/5
attempting to connect 2/5
connected 2/5
Version: 0ab9df3209ee599f581532d05d331e6abe0f53f3 - 194
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f
libipatcher version: 0.82-0b2f79ff0917ef9b8a92475d93d9466b23fc2322
Odysseus for 32-bit support: yes
Odysseus for 64-bit support: yes
INFO: device serial number is [redacted]
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket /Applications/LeetDown.app/Contents/Resources/LDResources/SHSH/blob.shsh is done
[TSSC] opening /Applications/LeetDown.app/Contents/Resources/LDResources/BuildManifests/iPhone6,2.plist
[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity for request
[TSSR] User specified to not request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Did set SEP+baseband path and firmware
ERROR: Unable to connect to device?!
ERROR: Unable to get FirmwarePreflightInfo
[WARNING] failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] using tsschecker's fallback to get BasebandGoldCertID. This might result in invalid baseband signing status information
[TSSC] opening /Applications/LeetDown.app/Contents/Resources/LDResources/BuildManifests/iPhone6,2.plist
[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity for request
[TSSR] User specified to request only a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Downloading the latest firmware components...
[TSSC] opening firmwares.json
[DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed
[TSSC] selecting latest firmware version: 12.5.5
[TSSC] got firmwareurl for iOS 12.5.5 build 16H62
100 [===================================================================================================>]
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
Finished downloading the latest firmware components!
Found device in Recovery mode
Device already in recovery mode
Found device in Recovery mode
Identified device as n53ap, iPhone6,2
Extracting BuildManifest from iPSW
Product version: 10.3.3
Product build: 14G60 Major: 14
Device supports Image4: true
Got ApNonce from device: 99 b5 e2 2d 77 1c 0f 1c 81 f7 0c 39 4e 99 07 99 3a 2d b4 35
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Checking BuildIdentity 2
[TSSR] Selected BuildIdentity for request
[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity for request
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
[IMG4TOOL] checking buildidentity 0:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 1:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 2:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "AppleLogo"               OK (found "logo" with matching hash)
[IMG4TOOL] checking hash for "BasebandFirmware"        IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "BatteryCharging0"        OK (found "chg0" with matching hash)
[IMG4TOOL] checking hash for "BatteryCharging1"        OK (found "chg1" with matching hash)
[IMG4TOOL] checking hash for "BatteryFull"             OK (found "batF" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow0"             OK (found "bat0" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow1"             OK (found "bat1" with matching hash)
[IMG4TOOL] checking hash for "BatteryPlugin"           OK (found "glyP" with matching hash)
[IMG4TOOL] checking hash for "DeviceTree"              OK (found "dtre" with matching hash)
[IMG4TOOL] checking hash for "KernelCache"             OK (found "krnl" with matching hash)
[IMG4TOOL] checking hash for "LLB"                     OK (found "illb" with matching hash)
[IMG4TOOL] checking hash for "OS"                      OK (found "rosi" with matching hash)
[IMG4TOOL] checking hash for "RecoveryMode"            OK (found "recm" with matching hash)
[IMG4TOOL] checking hash for "RestoreDeviceTree"       OK (found "rdtr" with matching hash)
[IMG4TOOL] checking hash for "RestoreKernelCache"      OK (found "rkrn" with matching hash)
[IMG4TOOL] checking hash for "RestoreLogo"             OK (found "rlgo" with matching hash)
[IMG4TOOL] checking hash for "RestoreRamDisk"          BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreSEP"              OK (found "rsep" with matching hash)
[IMG4TOOL] checking hash for "SEP"                     OK (found "sepi" with matching hash)
[IMG4TOOL] checking hash for "iBEC"                    OK (found "ibec" with matching hash)
[IMG4TOOL] checking hash for "iBSS"                    OK (found "ibss" with matching hash)
[IMG4TOOL] checking hash for "iBoot"                   OK (found "ibot" with matching hash)

failed verification with error:
[exception]:
what=verification failed!
code=84279308
line=1286
file=img4tool.cpp
commit count=197:
commit sha  =aca6cf005c94caf135023263cbb5c61a0081804f:
[IMG4TOOL] checking buildidentity 3:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "AppleLogo"               OK (found "logo" with matching hash)
[IMG4TOOL] checking hash for "BasebandFirmware"        IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "BatteryCharging0"        OK (found "chg0" with matching hash)
[IMG4TOOL] checking hash for "BatteryCharging1"        OK (found "chg1" with matching hash)
[IMG4TOOL] checking hash for "BatteryFull"             OK (found "batF" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow0"             OK (found "bat0" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow1"             OK (found "bat1" with matching hash)
[IMG4TOOL] checking hash for "BatteryPlugin"           OK (found "glyP" with matching hash)
[IMG4TOOL] checking hash for "DeviceTree"              OK (found "dtre" with matching hash)
[IMG4TOOL] checking hash for "KernelCache"             OK (found "krnl" with matching hash)
[IMG4TOOL] checking hash for "LLB"                     OK (found "illb" with matching hash)
[IMG4TOOL] checking hash for "OS"                      OK (found "rosi" with matching hash)
[IMG4TOOL] checking hash for "RecoveryMode"            OK (found "recm" with matching hash)
[IMG4TOOL] checking hash for "RestoreDeviceTree"       OK (found "rdtr" with matching hash)
[IMG4TOOL] checking hash for "RestoreKernelCache"      OK (found "rkrn" with matching hash)
[IMG4TOOL] checking hash for "RestoreLogo"             OK (found "rlgo" with matching hash)
[IMG4TOOL] checking hash for "RestoreRamDisk"          BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreSEP"              OK (found "rsep" with matching hash)
[IMG4TOOL] checking hash for "SEP"                     OK (found "sepi" with matching hash)
[IMG4TOOL] checking hash for "iBEC"                    OK (found "ibec" with matching hash)
[IMG4TOOL] checking hash for "iBSS"                    OK (found "ibss" with matching hash)
[IMG4TOOL] checking hash for "iBoot"                   OK (found "ibot" with matching hash)

failed verification with error:
[exception]:
what=verification failed!
code=84279308
line=1286
file=img4tool.cpp
commit count=197:
commit sha  =aca6cf005c94caf135023263cbb5c61a0081804f:
[IMG4TOOL] checking buildidentity 4:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 5:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 6:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 7:
[IMG4TOOL] checking buildidentity matches board ... NO
Failed to get exact match for build identity, using fallback to ignore certain values
[IMG4TOOL] checking buildidentity 0:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 1:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 2:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "AppleLogo"               OK (found "logo" with matching hash)
[IMG4TOOL] checking hash for "BasebandFirmware"        IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "BatteryCharging0"        OK (found "chg0" with matching hash)
[IMG4TOOL] checking hash for "BatteryCharging1"        OK (found "chg1" with matching hash)
[IMG4TOOL] checking hash for "BatteryFull"             OK (found "batF" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow0"             OK (found "bat0" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow1"             OK (found "bat1" with matching hash)
[IMG4TOOL] checking hash for "BatteryPlugin"           OK (found "glyP" with matching hash)
[IMG4TOOL] checking hash for "DeviceTree"              OK (found "dtre" with matching hash)
[IMG4TOOL] checking hash for "KernelCache"             OK (found "krnl" with matching hash)
[IMG4TOOL] checking hash for "LLB"                     OK (found "illb" with matching hash)
[IMG4TOOL] checking hash for "OS"                      OK (found "rosi" with matching hash)
[IMG4TOOL] checking hash for "RecoveryMode"            OK (found "recm" with matching hash)
[IMG4TOOL] checking hash for "RestoreDeviceTree"       OK (found "rdtr" with matching hash)
[IMG4TOOL] checking hash for "RestoreKernelCache"      OK (found "rkrn" with matching hash)
[IMG4TOOL] checking hash for "RestoreLogo"             OK (found "rlgo" with matching hash)
[IMG4TOOL] checking hash for "RestoreRamDisk"          BAD! (but ignoring due to whitelist)
[IMG4TOOL] checking hash for "RestoreSEP"              OK (found "rsep" with matching hash)
[IMG4TOOL] checking hash for "SEP"                     OK (found "sepi" with matching hash)
[IMG4TOOL] checking hash for "iBEC"                    OK (found "ibec" with matching hash)
[IMG4TOOL] checking hash for "iBSS"                    OK (found "ibss" with matching hash)
[IMG4TOOL] checking hash for "iBoot"                   OK (found "ibot" with matching hash)
Verified APTicket to be valid for this restore
[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity for request
Variant: Customer Erase Install (IPSW)
This restore will erase your device data.
Using cached filesystem from '/var/folders/v5/30n9fn2n3b983y0zb1gjkr400000gn/T/iPSW/058-74917-062.dmg'
Extracting iBEC.iphone6.RELEASE.im4p...
Personalizing IMG4 component iBEC...
Sending iBEC (653333 bytes)...
waiting for device to reconnect... Getting SepNonce in recovery mode... f2 0e 21 57 e5 33 fa f2 a6 d3 05 2e 5d af 6d d6 69 f1 54 7b
Getting ApNonce in recovery mode... 99 b5 e2 2d 77 1c 0f 1c 81 f7 0c 39 4e 99 07 99 3a 2d b4 35
[WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly
Recovery Mode Environment:
iBoot build-version=iBoot-3406.60.10
iBoot build-style=RELEASE
Sending RestoreLogo...
Extracting applelogo@2x~iphone.s5l8960x.im4p...
Personalizing IMG4 component RestoreLogo...
Sending RestoreLogo (11640 bytes)...
ramdisk-size=0x10000000
Extracting 058-74940-063.dmg...
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (41583638 bytes)...
Extracting DeviceTree.n53ap.im4p...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (107919 bytes)...
Extracting sep-firmware.n53.RELEASE.im4p...
Personalizing IMG4 component RestoreSEP...
Sending RestoreSEP (4789385 bytes)...
Extracting kernelcache.release.iphone6...
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (12178427 bytes)...
getting SEP ticket
Trying to fetch new SHSH blob
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received SHSH blobs
About to restore device...
Connecting now...
Connected to com.apple.mobile.restored, version 14
Device 15ea1cf7ba12f6a0312d575699c62f747c9c675f has successfully entered restore mode
Hardware Information:
BoardID: 2
ChipID: 35168
UniqueChipID: 8299088845880
ProductionMode: true
Starting FDR listener thread
About to send NORData...
Found firmware path Firmware/all_flash
Getting firmware manifest from build identity
Extracting LLB.iphone6.RELEASE.im4p...
Personalizing IMG4 component LLB...
Extracting applelogo@2x~iphone.s5l8960x.im4p...
Personalizing IMG4 component AppleLogo...
Extracting batterycharging0@2x~iphone.s5l8960x.im4p...
Personalizing IMG4 component BatteryCharging0...
Extracting batterycharging1@2x~iphone.s5l8960x.im4p...
Personalizing IMG4 component BatteryCharging1...
Extracting batteryfull@2x~iphone.s5l8960x.im4p...
Personalizing IMG4 component BatteryFull...
Extracting batterylow0@2x~iphone.s5l8960x.im4p...
Personalizing IMG4 component BatteryLow0...
Extracting batterylow1@2x~iphone.s5l8960x.im4p...
Personalizing IMG4 component BatteryLow1...
Extracting glyphplugin@1136~iphone-lightning.s5l8960x.im4p...
Personalizing IMG4 component BatteryPlugin...
Extracting DeviceTree.n53ap.im4p...
Personalizing IMG4 component DeviceTree...
Extracting recoverymode@1136~iphone-lightning.s5l8960x.im4p...
Personalizing IMG4 component RecoveryMode...
Extracting iBoot.iphone6.RELEASE.im4p...
Personalizing IMG4 component iBoot...
Personalizing IMG4 component RestoreSEP...
Personalizing IMG4 component SEP...
Sending NORData now...
Done sending NORData
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
Waiting for NAND (28)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
ERROR: Unable to receive message from FDR 0x600002bd4340 (-2). 0/2 bytes
Unmounting filesystems (29)
Unmounting filesystems (29)
Creating partition map (11)
Creating filesystem (12)
About to send filesystem...
Connected to ASR
Validating the filesystem
Filesystem validated
Sending filesystem now...
[==================================================] 100.0%
Done sending filesystem
Verifying restore (14)
[==================================================] 100.0%
Checking filesystems (15)
Checking filesystems (15)
Mounting filesystems (16)
Mounting filesystems (16)
About to send KernelCache...
Extracting kernelcache.release.iphone6...
Personalizing IMG4 component KernelCache...
Sending KernelCache now...
Done sending KernelCache
Installing kernelcache (27)
Flashing firmware (18)
[==================================================] 100.0%
Updating gas gauge software (47)
Updating gas gauge software (47)
Updating Stockholm (55)
About to send FUDImageData...
Sending IsFUDFirmware now...
Done sending IsFUDFirmware
About to send FUDImageData...
Sending IsFUDFirmware now...
Done sending IsFUDFirmware
Updating baseband (19)
About to send BasebandData...
sending request without baseband nonce
Sending Baseband TSS request...
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received Baseband SHSH blobs
Sending BasebandData now...
Done sending BasebandData
Updating baseband (19)
Updating baseband (19)
Updating baseband (19)
Updating baseband (19)
Updating Baseband in progress...
About to send BasebandData...
Sending Baseband TSS request...
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received Baseband SHSH blobs
Sending BasebandData now...
Done sending BasebandData
Updating Baseband in progress...
About to send BasebandData...
Sending BasebandData now...
Done sending BasebandData
Updating baseband (19)
Updating baseband (19)
Updating baseband (19)
Updating Baseband in progress...
About to send BasebandData...
Sending BasebandData now...
Done sending BasebandData
Updating baseband (19)
Updating baseband (19)
Updating baseband (19)
Updating baseband (19)
Updating baseband (19)
ERROR: Unable to receive message from FDR 0x600002bd8060 (-2). 0/2 bytes
ERROR: Could not read data (-256). Aborting.
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

code=68026385
line=1038
file=futurerestore.cpp
commit count=194:
commit sha  =0ab9df3209ee599f581532d05d331e6abe0f53f3:
Done: restoring failed!

After progressbar full, screen flash to blue and then reboot to recovery mode

[rA9stuff]

Is your baseband working on iOS 12.5.5?

[suciptoid]

Yes, previously it's iOS 12.5.5 from OTA update, no issue with baseband.

[rA9stuff]

I've never seen this issue before. I can suggest nothing but trying with a different adapter/cable/port.

[miniexploit]

it's definitely caused by your cable, try using another one

[suciptoid]

@Mini-Exploit Yeah, another tool (LukeZGD/iOS-OTA-Downgrader) wiki also mentioned that using USB-C to lightning cause problem on restore. I only have 2 USB-c ports so it's not possible using this mac to downgrade?

I also try to use a USB hub (USB-C -> USB 3.0 -> Lightning), also does not work.

With LukeZGD/iOS-OTA-Downgrader I've tried on a Linux laptop using the original iPhone cable to USB 2.0 & USB 3.0, but still got the same error (stuck after progress bar restores full).