Undecimus: Error: RootFS already mounted: fs_snapshot_list: Invalid argument

[TheChatty]

Describe the bug
When trying to jailbreak and trying to restore RootFS on an iPhone X @ iOS 12.1.2 & iPad Air @ iOS 12.1.1b3 unc0ver fails because RootFS is already mounted.
There is no OTA file on the iPhone/iPad.
Creating restore point succeeded in a run before but not the jailbreak.
unc0ver was installed via Siri shortcut.

Why does it say "shapshotSystemVersion"? This string is not in the source?

Screenshots

Device (please complete the following information):

• iOS Version: 12.1.2 / 12.1.1b3
• iOS Device: iPhone X / iPad Air
• unc0ver Version: b38

Place an "x" between the brackets if true:

• [x] this is a bug others will be able to reproduce
• [x] this issue is present with all tweaks uninstalled(except for default packages) or disabled
• [x] this issue is present after a rootfs restore
• [x] this issue is present on the latest version of unc0ver

Logs
unc0ver.log

[Cryptiiiic]

@TheChatty can you post the diagnostics file.

[TheChatty]

Is that file located at Settings/Privacy/Analytics/Analytics Data? What is the name of the file you're interested in?

[penbob3]

iPad Mini 4 on iOS 12.0, also getting this glitch. Deleted OTA and restarted multiple times. WIll try with old Unc0ver versions soon.

[Cryptiiiic]

@TheChatty Share Diagnostics button in unc0ver.

[pwn20wndstuff]

Oh no.
I found something extremely interesting in the diagnostics log.
PLEASE PLEASE PLEASE DO NOT RESTORE OR UPDATE THIS DEVICE.
I will soon send you a new build for testing. - Please wait.

[sbingner]

@TheChatty Definitely don't run an older version - odds are it would bootloop if it didn't fail on this check.

Can you run https://www.bingner.com/Undecimus-VersionLog.ipa and post the diags output from that? It will show what the actual mismatch is in logs as well as what is in that hardware directory.

[TheChatty]

@pwn20wndstuff: I won't
@sbingner: If @pwn20wndstuff confirms running your IPA is safe.

[pwn20wndstuff]

@TheChatty Of course it is.
You can trust sbingner with anything about this.

[TheChatty]

unc0ver-b38+8.log

[penbob3]

Heres mine https://pastebin.com/q6pzg5Lj looks pretty different...

[sbingner]

Relevant info from @TheChatty log:

[*] snapshot VersionPlist: {
    BuildID = "DD55DC62-E71B-11E8-8FEF-63FF0EBD289E";
    ProductBuildVersion = 16C5050a;
    ProductCopyright = "1983-2018 Apple Inc.";
    ProductName = "iPhone OS";
    ProductVersion = "12.1.1";
    ReleaseType = Beta;
    SystemImageID = "18DBD841-E050-45FF-8559-D1627CBC0353";
}
[*] rootfs VersionPlist: {
    BuildID = "523EBB10-28F9-11E9-ABB4-920B8C797186";
    ProductBuildVersion = 16D57;
    ProductCopyright = "1983-2019 Apple Inc.";
    ProductName = "iPhone OS";
    ProductVersion = "12.1.4";
    SystemImageID = "2A007BB8-37DA-478A-AB1B-C12685FE17CF";
}
[*] list(/private/var/hardware): (
)

That confirms that your rootfs has 12.1.4 while your snapshot is on 12.1.1 Beta(3?) . If it had continued you would 100% bootloop. Rebooting should have reverted rootfs, but maybe there's some setting somewhere that is keeping it from reverting rootfs to your snapshot. You made sure that the update was deleted from Storage and ran unc0ver immediately after reboot, correct?

and @penbob3 has a completely different and unrelated issue. Please open a new issue and attach that diags.

[sbingner]

@TheChatty I updated the version at https://www.bingner.com/Undecimus-VersionLog.ipa to error out AFTER listing snapshots in this situation, can you run it again and send logs again please? (commit https://github.com/pwn20wndstuff/Undecimus/commit/874aa584d564c4a1abf852dc0989b1e10f2a11ad)

[penbob3]

@sbingner Ah I see, doing it rn.

[TheChatty]

There is no OTA file. And I rebooted this time and ran unc0ver immediately. No obvious change?
unc0ver-b38+9.log

[iBrandon]

I'm having the same exact problem

_{Sent with GitHawk}

[pwn20wndstuff]

>
[] Snapshots on newly mounted RootFS:
[] com.apple.os.update-652104D92792E4B4730CBA05965A3D079EF3BDC2
[*] com.apple.os.update-MSUPrepareUpdate

So this is extremely unusual. - I will soon send a new build to gather more info about this issue. - Please wait.

[sbingner]

So what is happening is that it already applied the update to your rootfs and is not reverting on reboot. This is sensible because reapplying the update after every reboot as it did before was a waste of resources and not really great for your NAND. Presumably we could just delete the snapshot and it would revert to the current snapshot as it used to.... but it may also make it brick. I think pwn will make a build for you that logs what the contents of nvram is as well.... then one of us may need to look at what it does a bit. Would like to avoid bricking it :D

[TheChatty]

That’s much appreciated 😁

[pwn20wndstuff]

@TheChatty Try this: https://www.dropbox.com/s/3866nay8jsbcg26/Undecimus.ipa?dl=0

[Veradictus]

@pwn20wndstuff Testing it now...

EDIT: Now it goes all the way to 16/38 and yields the same error.

EDIT2: https://pastebin.com/eXab7CBe

EDIT3: Error occurs on line 1233 of JailbreakViewController.m

[TheChatty]

b38+15 was able to delete the snapshot, after reboot trying to jailbreak again I get to the assertion "12.1.1" vs. "12.1.4" again.
unc0ver-b38+15.log

[mickeybitz]

I’m having the same 1194 error with no resolve..no OTA updates etc..

[jamieboy05]

There was one thing that I noticed with my device ( iPhone X 12.1.2, unc0ver installed via impactor, airplane mode on, restore rootfs selected, tweaks disabled/enabled both). I kept my device in airplane mode with wifi disabled before I deleted the OTA update file, and kept it on through the restart and reattempt to jb). However I noticed on my device that the notification icon for settings indicating that there's an update shows up about 15 seconds after boot (this is while the device has remained in airplane mode with no connectvitiy). I can verify the update file has been deleted. fs_snapshot_list returns invalid argument

[TheChatty]

Hm, this time I was unable to restore my RootFS after a fresh reboot with both b38+15 and b39.
unc0ver-b39.log
@pwn20wndstuff: Is it time to restore to 12.1.1b3? It won't be long till...

[Gerardo323]

@pwn20wndstuff

_{Sent with GitHawk}

[iBrandon]

I fixed my problem by downloading the recent update but not installing it. Then delete the update you downloaded.
Then install the unc0ver ipa. And go to settings and check the restore rootfs. Then finish by doing the jailbreak.
My device rebooted a few times but after the final reboot Cydia showed up and everything is running fine.

iPhone 8 plus
IOS 12.1

_{Sent with GitHawk}

[Veradictus]

This error seems to disappear if you update to 12.1.1b3 and attempt to jailbreak.

[Gerardo323]

Would I lose my data if I update yo 12.1.1b3

_{Sent with GitHawk}

[Veradictus]

@Gerardo323 Download 12.1.1b3 from http://www.ipodhacks142.com/download-ios-12-1-1-beta-3-for-free-ipsw-direct-download-links-over-the-air-profile/

And connect your iPhone to iTunes and option click on Update so that it prompts for an ISPW. Then select the 12.1.1b3 you've just downloaded and it should work. It didn't reset anything on my phone, still have all my data.

[Veradictus]

Tried a bit more and now I'm successfully jailbroken. Upgrade to 12.1.1b3 pronto before Apple stops signing it.

[Gerardo323]

@Veradictus i have a topic opened #676
should i still update
iphone 8 plus
ios 12.1

i went from #629 3.0.0b37 to #676 3.0.0b39

[Gerardo323]

I updated from iOS 12.1 to 12.1.1b3 and still no ota update to erase should proceed to jailbreak with latest unc0ver app

_{Sent with GitHawk}

[TheChatty]

@Gerardo323, @Veradictus: Could you please all stop cluttering my issue with your non-related posts? In fact, I'd appreciate if you could kindly remove your posts from this issue.

[Gerardo323]

My problem has been fixed with updating from iOS 12.1 to 12.1.1b3 jailbroken with 3.0.0b40
Closing

_{Sent with GitHawk}

[TheChatty]

Well, since @pwn20wndstuff didn't answer yet I updated to 12.1.1b3 again hoping my RootFS gets restored that way.
Then I installed b40 and tried to jb again. The first phase succeeded, after reboot I initiated the second phase which errored out at installing ncurses due to missing dependencies.
unc0ver-b40.log
On the second attempt unc0ver succeeded in extracting BootStrap.
After many attempts for a successful kernel exploitation unc0ver succeeded to install the last phase. I now have working Cydia on my iPad Air. Congrats, @pwn20wndstuff

My iPhone X still has the incompatible RootFS snapshot which even b40 can't delete. I would like to keep the iPhone on 12.1.2... so restore is not an option.
unc0ver-b40-iPhoneX.log

[Veradictus]

@TheChatty Thought you wanted us to not clutter your thread, yet you do it yourself. Regardless, keep attempting to re-jailbreak until it works. It took me around 4-5 tries. Keep flipping reinstall Cydia and reinstall OpenSSH on and off with every re-jailbreak, try different combinations.

[TheChatty]

https://github.com/pwn20wndstuff/Undecimus/issues/629#issuecomment-469200109 and https://github.com/pwn20wndstuff/Undecimus/issues/629#issuecomment-469227290 are two examples of very rude comments. Full log as text instead of attachment. After cluttering this issue he just opens another issue abandoning this issue devastated.

[iBrandon]

@TheChatty I had the same exact issue as you are having is why I responded... Just trying to help you mate

_{Sent with GitHawk}

[TheChatty]

Issue continued in https://github.com/pwn20wndstuff/Undecimus/issues/707

[shourve]

same problem

[hamidmirza]

Please anyone help me I’m having the same issue. Getting same error. I don’t want to restore to the latest version. Is there any way to sort this issue?

[TheChatty]

Read #707!

[CallumDavis]

Hello I’m using a iPad mini 4 and tried using uncover jailbreak but it got to step ten and said this [] RootFS already mounted, delete OTA file from Settings - Storage if present and reboot. But I have already deleted the software update from my storage and I retried the app and it still says the same thing .[] RootFS already mounted, delete OTA file from Settings - Storage if present and reboot.

[CallumDavis]

Any help would be really appreciated