bricked jailbroken PW2 on latest firmware

[bamboozilla]

Hi everyone, it's been years since I jailbreaked my PW2.

It was gathering dust in a drawer not so long ago, I plugged it, ended up on diag screen, exited the diag and... updated.

It restarted fine, I fiddled with KUAL and rebooted.

Now I am stuck on "boy under tree". Rebooting doesn't do anything, I resoldered my wires and have access to serial.

Is there anything I can do to unbrick my device?

Is it even possible to downgrade with a jailbroken device that can't boot?

Worst case scenario: can I unbrick it even with losing the jailbreak?

Thank you!

[bamboozilla]

I am wondering if it's even caused by the jailbreak. Is the flash memory just dead?

Here is a log if someone can help me out:

[ 58.887965] imx2-wdt imx2-wdt.0: Device shutdown: Expect reboot!
[ 58.895259] Restarting system.
HW


U-Boot 2009.08-lab126 (Dec 03 2021 - 04:34:48)

CPU: Freescale i.MX6 family TO0.0 at 996 MHz
Temperature: 29 C, calibration data 0x58950f5f
mx6sl pll1: 996MHz
mx6sl pll2: 528MHz
mx6sl pll3: 480MHz
mx6sl pll8: 50MHz
ipg clock : 66000000Hz
ipg per clock : 66000000Hz
uart clock : 80000000Hz
cspi clock : 60000000Hz
ahb clock : 132000000Hz
axi clock : 198000000Hz
emi_slow clock: 22000000Hz
ddr clock : 396000000Hz
usdhc1 clock : 198000000Hz
usdhc2 clock : 198000000Hz
usdhc3 clock : 198000000Hz
usdhc4 clock : 198000000Hz
MMC: FSL_ESDHC: 0,FSL_ESDHC: 1,FSL_ESDHC: 2
Board: Pinot WFO
Boot Reason: [ POR ]
Boot Device: NAND
Board Id: 0272201144330SEP
S/N: 9017220144640DN2
I2C: ready
DRAM: 256 MB
Using default environment

In: serial
Out: serial
Err: serial
Quick Memory Test 0x80000000, 0xfff0000
POST done in 57 ms
BOOTMODE OVERRIDE: DIAGS
Battery voltage: 3980 mV

Hit any key to stop autoboot: 0
## Booting kernel from Legacy Image at 80800000 ...
Image Name: Linux-3.0.35-lab126
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2420504 Bytes = 2.3 MB
Load Address: 80008000
Entry Point: 80008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK

Starting kernel ...

[ 0.000000] Linux version 3.0.35-lab126 (jenkins-official@sjc10-jbuild10) (co llect2: ld returned 1 exit status) #1 Wed Apr 23 16:52:30 PDT 2014
[ 0.000000] CPU: ARMv7 Processor [412fc09a] revision 10 (ARMv7), cr=10c53c7d
[ 0.000000] CPU: VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine: Freescale i.MX 6SoloLite based Wario Board
[ 0.000000] Ignoring unrecognised tag 0x54410011
[ 0.000000] Will try to place printk log at 8fffc000
[ 0.000000] Memory policy: ECC disabled, Data cache writeback
[ 0.000000] CPU identified as i.MX6SoloLite, silicon rev 1.2
[ 0.000000] On node 0 totalpages: 65536
[ 0.000000] free_area_init_node: node 0, pgdat c04dcc94, node_mem_map c200000 0
[ 0.000000] DMA zone: 64 pages used for memmap
[ 0.000000] DMA zone: 0 pages reserved
[ 0.000000] DMA zone: 8128 pages, LIFO batch:0
[ 0.000000] Normal zone: 448 pages used for memmap
[ 0.000000] Normal zone: 56896 pages, LIFO batch:15
[ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[ 0.000000] pcpu-alloc: [0] 0
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pag es: 65024
[ 0.000000] Kernel command line: rootwait log_pos_goal=0x8fffc000 console=tty mxc0,115200 root=/dev/mmcblk0p2 ro ip=off debug video=mxcepdcfb:E60,bpp=8,x_mem= 3M
[ 0.000000] Prink buffer will be relocated to physical address: 8fff2000
[ 0.000000] log_buf_len: 32768
[ 0.000000] early log buf free: 31286(95%)
[ 0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Memory: 256MB = 256MB total
[ 0.000000] Memory: 254652k/254652k available, 7492k reserved, 0K highmem
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
[ 0.000000] DMA : 0xfde00000 - 0xffe00000 ( 32 MB)
[ 0.000000] vmalloc : 0xd0800000 - 0xf2000000 ( 536 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xd0000000 ( 256 MB)
[ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB)
[ 0.000000] .init : 0xc0008000 - 0xc010b000 (1036 kB)
[ 0.000000] .text : 0xc010b000 - 0xc04aa000 (3708 kB)
[ 0.000000] .data : 0xc04aa000 - 0xc04dd7c0 ( 206 kB)
[ 0.000000] .bss : 0xc04dd7e4 - 0xc0504540 ( 156 kB)
[ 0.000000] SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, N odes=1
[ 0.000000] NR_IRQS:624
[ 0.000000] MXC GPIO hardware
[ 0.000000] sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 17895 6ms
[ 0.000000] arm_max_freq=1GHz
[ 0.000000] MXC_Early serial console at MMIO 0x2020000 (options '115200')
[ 0.000000] bootconsole [ttymxc0] enabled
[ 0.000000] Console: colour dummy device 80x30
[ 0.263655] Calibrating delay loop... 1987.37 BogoMIPS (lpj=9936896)
[ 0.321982] pid_max: default: 32768 minimum: 301
[ 0.326861] Mount-cache hash table entries: 512
[ 0.331766] CPU: Testing write buffer coherency: ok
[ 0.336793] hw perfevents: enabled with ARMv7 Cortex-A9 PMU driver, 7 counter s available
[ 0.351760] print_constraints: dummy:
[ 0.355711] NET: Registered protocol family 16
[ 0.363966] print_constraints: vddpu: 725 <--> 1300 mV at 700 mV fast normal
[ 0.371548] print_constraints: vddcore: 725 <--> 1300 mV at 1475 mV fast norm al
[ 0.379245] print_constraints: vddsoc: 725 <--> 1300 mV at 1475 mV fast norma l
[ 0.386914] print_constraints: vdd2p5: 2000 <--> 2775 mV at 2400 mV fast norm al
[ 0.394641] print_constraints: vdd1p1: 800 <--> 1400 mV at 1100 mV fast norma l
[ 0.402313] print_constraints: vdd3p0: 2625 <--> 3400 mV at 3000 mV fast norm al
[ 0.411212] LAB126 Board id - 0272201144330SEP
[ 0.419746] hw-breakpoint: found 6 breakpoint and 1 watchpoint registers.
[ 0.426588] hw-breakpoint: 1 breakpoint(s) reserved for watchpoint single-ste p.
[ 0.433922] hw-breakpoint: maximum watchpoint size is 4 bytes.
[ 0.439793] L310 cache controller enabled
[ 0.443818] l2x0: 16 ways, CACHE_ID 0x410000c8, AUX_CTRL 0x02030000, Cache si ze: 262144 B
[ 0.460052] bio: create slab <bio-0> at 0
[ 0.467671] max77696> regulator init
[ 0.472146] spi_imx imx6q-ecspi.0: probed
[ 0.476734] usbcore: registered new interface driver usbfs
[ 0.482343] usbcore: registered new interface driver hub
[ 0.487848] usbcore: registered new device driver usb
[ 0.494975] Reboot Reason - Standard Reporting
[ 0.499450] kernel: I max77696-irq:evtrcrd: evt=SFT_PRSTRT: Software Partial Restart
[ 0.507213] Reboot Reason - Metric Framework Reporting
[ 0.512372] kernel: kernel_metric_generic,counter,event_recorder,ercfl ags,SFT _PRSTRT,1,
[ 0.520395] Reboot Reason - Legacy Metric Reporting
[ 0.525287]
[ 0.528375] MAX77696 TOPSYS 1.0.0 Installed
[ 0.535203] max77696-gpio max77696-gpio.0: gpio#0 -- -- func-0 in
[ 0.542719] max77696-gpio max77696-gpio.0: gpio#1 -- -- func--1 in
[ 0.550459] max77696-gpio max77696-gpio.0: gpio#3 -- -- func-0 in
[ 0.558509] MAX77696 GPIO Driver 1.0.0 Installed
[ 0.564203] buck mode: 4
[ 0.567513] buck mode: 4
[ 0.570987] print_constraints: max77696_buck1: 900 <--> 1300 mV at 1250 mV fa st normal idle standby
[ 0.580596] buck mode: 4
[ 0.584072] print_constraints: max77696_buck1dvs: 600 <--> 1300 mV at 900 mV fast normal idle standby
[ 0.593872] buck mode: 4
[ 0.597140] buck mode: 4
[ 0.600612] print_constraints: max77696_buck2: 900 <--> 1300 mV at 1200 mV fa st normal idle standby
[ 0.610214] buck mode: 4
[ 0.613690] print_constraints: max77696_buck2dvs: 600 <--> 1300 mV at 900 mV fast normal idle standby
[ 0.623475] print_constraints: max77696_buck3: 600 <--> 3387 mV at 1300 mV fa st normal idle standby
[ 0.633266] buck mode: 4
[ 0.636534] buck mode: 4
[ 0.639802] print_constraints: max77696_buck4: 1200 mV fast normal idle stand by
[ 0.647656] buck mode: 4
[ 0.651131] print_constraints: max77696_buck5: 600 <--> 3387 mV at 1800 mV fa st normal idle standby
[ 0.660744] buck mode: 4
[ 0.664218] print_constraints: max77696_buck6: 600 <--> 3387 mV at 3200 mV fa st normal idle standby
[ 0.673326] MAX77696 Buck Regulators Driver 1.0.1 Installed
[ 0.679688] print_constraints: max77696_ldo1: 800 <--> 3950 mV at 3300 mV nor mal idle standby
[ 0.688816] print_constraints: max77696_ldo2: 800 <--> 3950 mV at 3000 mV nor mal idle standby
[ 0.697900] print_constraints: max77696_ldo3: 800 <--> 3950 mV at 2500 mV nor mal idle standby
[ 0.707017] print_constraints: max77696_ldo4: 800 <--> 2375 mV at 1800 mV nor mal idle standby
[ 0.716081] print_constraints: max77696_ldo5: 800 <--> 2375 mV at 1800 mV nor mal idle standby
[ 0.725195] print_constraints: max77696_ldo6: 800 <--> 3950 mV at 3200 mV nor mal idle standby
[ 0.734280] print_constraints: max77696_ldo7: 800 <--> 3950 mV at 3200 mV nor mal idle standby
[ 0.743390] print_constraints: max77696_ldo8: 800 <--> 2375 mV at 1100 mV nor mal idle standby
[ 0.752459] print_constraints: max77696_ldo9: 800 <--> 2375 mV at 1100 mV nor mal idle standby
[ 0.761583] print_constraints: max77696_ldo10: 2400 <--> 5550 mV at 5200 mV n ormal idle standby
[ 0.771088] MAX77696 Linear Regulators Driver 1.0.2 Installed
[ 0.777435] print_constraints: max77696_lsw1:
[ 0.782250] print_constraints: max77696_lsw2:
[ 0.787007] print_constraints: max77696_lsw3:
[ 0.791744] print_constraints: max77696_lsw4:
[ 0.796251] MAX77696 Load Switches Driver 1.0.0 Installed
[ 0.802877] print_constraints: max77696-display:
[ 0.808358] print_constraints: max77696-vcom:
[ 0.813133] print_constraints: max77696-vee:
[ 0.817853] print_constraints: max77696-vneg:
[ 0.822632] print_constraints: max77696-vpos:
[ 0.827392] print_constraints: max77696-vddh:
[ 0.832877]
[ 0.832881] EPD vreg probe complete!
[ 0.838520] print_constraints: max77696_vddq: 240 <--> 984 mV at 600 mV
[ 0.845301] MAX77696 LPDDR2 Termination Supply Driver 1.0.1 Installed
[ 0.853034] MAX77696 I2C Driver 1.0.0 Installed
[ 0.860116] i2c-core: driver [max17135] using legacy suspend method
[ 0.866404] i2c-core: driver [max17135] using legacy resume method
[ 0.872650] Switching to clocksource mxc_timer1
[ 0.887729] NET: Registered protocol family 2
[ 0.892186] IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.899278] TCP established hash table entries: 8192 (order: 4, 65536 bytes)
[ 0.906450] TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.912984] TCP: Hash tables configured (established 8192 bind 8192)
[ 0.919362] TCP reno registered
[ 0.922515] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.928379] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.934999] NET: Registered protocol family 1
[ 0.939730] RPC: Registered named UNIX socket transport module.
[ 0.945668] RPC: Registered udp transport module.
[ 0.950405] RPC: Registered tcp transport module.
[ 0.955122] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.965805] etb: probe of etb failed with error -2
[ 0.970854] etm: probe of etm.0 failed with error -2
[ 0.976087] Static Power Management for Freescale i.MX6
[ 0.981350] wait mode is enabled for i.MX6
[ 0.985632] cpaddr = d0820000 suspend_iram_base=d081c000
[ 0.991025] PM driver module loaded
[ 0.994779] IMX usb wakeup probe
[ 0.998051] the wakeup pdata is 0xce1387c0
[ 1.002490] IMX usb wakeup probe
[ 1.005738] the wakeup pdata is 0xce1388c0
[ 1.010046] cpu regulator mode:ldo_bypass
[ 1.014268] _regulator_get: get() with no identifier
[ 1.019262] mx6_cpu_regulator_init: failed to get pu regulator
[ 1.025309] i.MXC CPU frequency driver
[ 1.042211] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 1.049248] msgmni has been set to 497
[ 1.053359] io scheduler noop registered
[ 1.057396] io scheduler cfq registered (default)
[ 1.062605] MAX77696 Backlight Driver 1.0.0 Installed
[ 1.068459] imx-sdma imx-sdma: loaded firmware 1.1
[ 1.077840] imx-sdma imx-sdma: initialized
[ 1.253007] Serial: IMX driver
[ 1.385156] console [ttymxc0] enabled, bootconsole disabled
[ 1.385156] console [ttymxc0] enabled, bootconsole disabled
[ 1.400675] loop: module loaded
[ 1.403883] MAX77696 32kHz Oscillator Driver 1.0.0 Installed
[ 1.410236] input: max77696-onkey as /devices/platform/imx-i2c.0/i2c-0/0-003c /max77696-onkey.0/input/input0
[ 1.423430] MAX77696 ONKEY Driver 1.0.0 Installed
[ 1.448596] max77696-rtc max77696-rtc.0: rtc core: registered max77696-rtc.0 as rtc0
[ 1.468559] max77696-rtc max77696-rtc.0: rtc core: registered max77696-rtc.1 as rtc1
[ 1.497863] MAX77696 RTC Driver 1.0.2 Installed
[ 1.503275] snvs_rtc snvs_rtc.0: rtc core: registered snvs_rtc as rtc2
[ 1.510008] i2c /dev entries driver
[ 1.517865] max77696-battery max77696-battery.0: Voltage alert 3400mV ... 4260mV
[ 1.526017] max77696-battery max77696-battery.0: SOC alert (disabled)
[ 1.534067] MAX77696 Fuel Gauge Driver 1.0.0 Installed
[ 1.540956] MAX77696 USB Interface Circuit Driver 1.0.0 Installed
[ 1.549401] max77696-adc max77696-adc.0: ADC average rate: 32 sample(s)
[ 1.556020] max77696-adc max77696-adc.0: ADC delay: 0 nsec
[ 1.561523] max77696-adc max77696-adc.0: ADC cur src: 50 uA
[ 1.567100] MAX77696 ADC Driver 1.0.1 Installed
[ 1.572309] imx2-wdt imx2-wdt.0: IMX2+ Watchdog Timer enabled. timeout=60s (n owayout=1)
[ 1.580727] sdhci: Secure Digital Host Controller Interface driver
[ 1.586912] sdhci: Copyright(c) Pierre Ossman
[ 1.591397] mmc0: no vmmc regulator found
[ 1.596712] mmc0: SDHCI controller on platform [sdhci-esdhc-imx.1] using DMA
[ 1.604847] mmc1: no vmmc regulator found
[ 1.611245] mmc1: SDHCI controller on platform [sdhci-esdhc-imx.2] using DMA
[ 1.619005] Registered led device: max77696-leds.0
[ 1.623807] MAX77696 LED Driver #0 1.0.0 Installed
[ 1.632892] Registered led device: max77696-leds.1
[ 1.637705] MAX77696 LED Driver #1 1.0.0 Installed
[ 1.643027] nf_conntrack version 0.5.0 (3978 buckets, 15912 max)
[ 1.651737] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 1.657108] TCP cubic registered
[ 1.660365] NET: Registered protocol family 17
[ 1.664823] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
[ 1.672628] LPDDR2 MfgId: 0x3 [Elpida]
[ 1.676692] Bus freq driver module loaded
[ 1.682742] Bus freq driver Enabled
[ 1.687257] mxc_dvfs_core_probe
[ 1.694819] DVFS driver module loaded
[ 1.717913] regulator_init_complete: max77696_ldo10: incomplete constraints, leaving on
[ 1.733160] regulator_init_complete: max77696_ldo7: incomplete constraints, l eaving on
[ 1.750517] regulator_init_complete: max77696_ldo6: incomplete constraints, l eaving on
[ 1.765724] regulator_init_complete: max77696_buck6: incomplete constraints, leaving on
[ 1.773951] regulator_init_complete: max77696_buck5: incomplete constraints, leaving on
[ 1.782667] regulator_init_complete: max77696_buck2dvs: incomplete constraint s, leaving on
[ 1.791020] emmc: I def:mmcpartinfo:vendor=toshiba, host=mmc0:
[ 1.800255] regulator_init_complete: max77696_buck1dvs: incomplete constraint s, leaving on
[ 1.839384] mmc0: new high speed DDR MMC card at address 0001
[ 1.845532] mmcblk0: mmc0:0001 004GE0 3.68 GiB
[ 1.850221] mmcblk0boot0: mmc0:0001 004GE0 partition 1 2.00 MiB
[ 1.856269] mmcblk0boot1: mmc0:0001 004GE0 partition 2 2.00 MiB
[ 1.862853] max77696-rtc max77696-rtc.0: setting system clock to 2000-01-01 0 1:13:10 UTC (946689190)
[ 1.872262] mmcblk0: p1 p2 p3 p4
[ 1.878610] mmcblk0boot1: unknown partition table
[ 1.885656] mmcblk0boot0: unknown partition table
[ 1.896755] KERNEL: I pmic:charger chgina::charger connected
[ 1.912390] MAX77696 Main Charger Driver 1.0.0 Installed
[ 1.921094] MAX77696 Energy Harvester Driver 1.0.0 Installed
[ 1.927710] Freeing init memory: 1036K
3.0.35-lab126 #1 Wed Apr 23 16:52:30 PDT 2014 armv7l
[ 1.957746] INFO:Loaded module /lib/modules/mxc_epdc_eink.ko (10304 bytes)
[ 2.397230] add wake up source irq 104
[ 3.527245] KERNEL: I pmic:fg battery id check::wario_battery_valid=1
[ 5.176887] INFO:Loaded module /lib/modules/mxc_epdc_fb.ko (83340 bytes)
[ 5.469635] INFO:eink initialized... (786432 bytes)
[ 5.474579] INFOIAGS MODE
Press [ENTER] for recovery menu... 0 /[ 6.483987] INFO:!!! Checking MBR /dev/mmcblk0 !!!!
[ 6.494124] INFOartition 2, start sector is 782336
[ 6.499238] INFOartition 3, start sector is 913408
[ 6.504286] INFOartition 4, start sector is 1044480
[ 6.509425] INFO:maximizing partition 6688768 sectors
[ 6.514520] INFO:*** Partition table verified for /dev/mmcblk0 ***
/dev/mmcblk0p4:[ 6.522835] INFO:Setup loop device /dev/loop0 for /dev/mmcblk0 p4 + 8192

CHS=4/16/104512 size=3424649216 bytes
flag type first [ 6.533196] INFO:Checking for updates... (auto-pilot mode)
last lba first lba size
Pa[ 6.541812] INFO:No update*.bin found; no update needed.
rtition p1:
0x00 0x0b 16 <large> 16 6688752
CHS: 0/1/1 - <large>
Par[ 6.557552] INFO:no updates found.
tition p2:
Partition p3:
Partition p4:
BOOTING DEFAULT.
IP-Config: no devices to configure
[ 7.523407] EXT3-fs: barriers not enabled
[ 7.528157] kjournald starting. Commit interval 5 seconds
[ 7.533704] EXT3-fs (mmcblk0p2): mounted filesystem with writeback data mode
kinit: Mounted root (ext3 filesystem) readonly.
kinit: init not found!

[eddie.t.h]

I don't see any signs of Flash memory corruption in the log. Simply stop the kernel from booting and reinstall the system.

[bamboozilla]

Originally Posted by eddie.t.h

I don't see any signs of Flash memory corruption in the log. Simply stop the kernel from booting and reinstall the system.

Is there any guide you can suggest for me to reinstall the system? Again, apart from interacting with the serial connection, I can’t do much with it.

[bamboozilla]

I added update_kindle_paperwhite_v2_5.12.2.2.bin. From what I gather it installed successfully.

Sadly no change, still stuck with the same screen.
Is it beyond help?

[bamboozilla]

I had to set the bootmode to main in fastboot in order to exit the diagnostic mode.

I have no clue why I am getting the boy under tree in diags though...

Maybe the update broke my diags? Any way to reflash it? Should it be fine just with the update I ran?

Also: Any way to edit messages on this board?

[eddie.t.h]

And after sharing the FAT partition to USB, can you see all
your files from the reader on computer?
You can try to restore it to factory settings by creating an empty DO_FACTORY_RESTORE file in the root directory of the user partition.

[raphamotta]

I have the same problem! Did you solve it somehow?I have the same problem! Did you solve it somehow?