OnePlus 3 (oneplus-oneplus3)

Unlocking the Bootloader
'''WARNING: Doing this will wipe ALL data on your device. Please backup all your personal data before continuing!'''
 * 1) Enable   by tapping the build number 7 times in   >
 * 2) Go to   and enable both   and
 * 3) Open a terminal window and type   to verify your device is visible.
 * 4) Type   to reboot your device into fastboot mode.
 * 5) Type   to verify once again that your device is visible.
 * 6) Type  . To navigate the on screen options use  and select an option with the  button.
 * 7) Congrats, your bootloader is now unlocked!

Enter Flashmode
You are now ready to flash.
 * 1) After the bootloader is unlocked press the  button and you should see the warning screen. Press  to open the boot options.
 * 2) Select   and press

UART
Start by removing the 2 T2 screws at the bottom which are holding the back cover together and then pry the back cover up from the bottom. The 2 points are located below the camera

Bootloader UART logs: Format: Log Type - Time(microsec) - Message - Optional Info Log Type: B - Since Boot(Power On Reset), D - Delta,  S - Statistic S - QC_IMAGE_VERSION_STRING=BOOT.XF.1.0-00316 S - IMAGE_VARIANT_STRING=M8996LAB S - OEM_IMAGE_VERSION_STRING=rd-build-193 S - Note XBL compiled at Nov 4 2019 21:08:39 S - Boot Interface: UFS S - Secure Boot: On S - Boot Config @ 0x00076044 = 0x000001c9 S - JTAG ID @ 0x000760f4 = 0x409470e1 S - OEM ID @ 0x000760f8 = 0x2a703db9 S - Serial Number @ 0x00074138 = 0x6abfe9f1 S - Feature Config Row 0 @ 0x000741a0 = 0x0050000010000100 S - Feature Config Row 1 @ 0x000741a8 = 0x0001000000000000 S - Core 0 Frequency, 1228 MHz B -        0 - PBL, Start B -    10414 - bootable_media_detect_entry, Start B -    45926 - bootable_media_detect_success, Start B -    45930 - elf_loader_entry, Start B -    46916 - auth_hash_seg_entry, Start B -    47896 - auth_hash_seg_exit, Start B -    79705 - elf_segs_hash_verify_entry, Start B -    82200 - PBL, End B -    84241 - SBL1, Start B -   174521 - usb: hs_phy_nondrive_start B -   174856 - usb: PLL lock success - 0x3 B -   177845 - usb: hs_phy_nondrive_finish B -   181993 - boot_flash_init, Start D -       30 - boot_flash_init, Delta B -   189100 - sbl1_ddr_set_default_params, Start D -       30 - sbl1_ddr_set_default_params, Delta B -   197060 - boot_config_data_table_init, Start B -   430782 - CDT not programmed, using default D -   229238 - boot_config_data_table_init, Delta - (54 Bytes) B -   434106 - CDT Version:3,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0 B -   439932 - Image Load, Start D -    22082 - PMIC Image Loaded, Delta - (37464 Bytes) B -   462014 - pm_device_init, Start B -   467748 - PON REASON:PM0:0x2000000a0 PM1:0x2000000a0 B -   504287 - PM_SET_VAL:Skip D -    40138 - pm_device_init, Delta B -   506208 - pm_driver_init, Start D -     2989 - pm_driver_init, Delta B -   512796 - pm_sbl_chg_init, Start D -      305 - pm_sbl_chg_init, Delta B -   519567 - vsense_init, Start D -        0 - vsense_init, Delta B -   527345 - Pre_DDR_clock_init, Start D -      366 - Pre_DDR_clock_init, Delta B -   533170 - ddr_initialize_device, Start B -   536861 - 8996 v3.x detected, Max frequency = 1.8 GHz B -   540917 - hw_self_refresh_enable = 0 B -   546285 - reboot_reason = 0x0 B -   555466 - hw_self_refresh_enable = 0 B -   555496 - reboot_reason = 0x0 B -   559095 - ddr_initialize_device, Delta B -   561566 - DDR ID, Rank 0, Rank 1, 0x1, 0x600, 0x600 B -   565653 - Basic DDR tests done B -   625860 - clock_init, Start D -      244 - clock_init, Delta B -   627873 - Image Load, Start D -     5856 - QSEE Dev Config Image Loaded, Delta - (48160 Bytes) B -   634217 - Image Load, Start D -     7320 - APDP Image Loaded, Delta - (7696 Bytes) B -   642879 - Image Load, Start D -    57004 - QSEE Image Loaded, Delta - (1704316 Bytes) B -   699914 - Image Load, Start D -      183 - SEC Image Loaded, Delta - (4096 Bytes) B -   707478 - sbl1_efs_handle_cookies, Start D -      305 - sbl1_efs_handle_cookies, Delta B -   715957 - Image Load, Start D -    14548 - QHEE Image Loaded, Delta - (262592 Bytes) B -   730536 - Image Load, Start D -    13969 - RPM Image Loaded, Delta - (223932 Bytes) B -   744840 - Image Load, Start D -     3630 - STI Image Loaded, Delta - (0 Bytes) B -   751642 - Image Load, Start D -    89151 - APPSBL Image Loaded, Delta - (1667588 Bytes) B -   840885 - SBL1, End D -   760883 - SBL1, Delta S - Flash Throughput, 115000 KB/s (3960114 Bytes,  34237 us) S - DDR Frequency, 1017 MHz Android Bootloader - UART_DM Initialized!!! [0] Note LK compiled at Nov 4 2019 21:18:46 [40] UFS init success [40] Inquiry buffer [40] [Oneplus]buf[0] = 0 [40] [Oneplus]buf[1] = 0 [40] [Oneplus]buf[2] = 6 [50] [Oneplus]buf[3] = 2 [50] [Oneplus]buf[4] = 1f [50] [Oneplus]buf[5] = 0 [50] [Oneplus]buf[6] = 0 [60] [Oneplus]buf[7] = 2 [60] [Oneplus]buf[8] = 53 [60] [Oneplus]buf[9] = 41 [60] [Oneplus]buf[10] = 4d [70] [Oneplus]buf[11] = 53 [70] [Oneplus]buf[12] = 55 [70] [Oneplus]buf[13] = 4e [70] [Oneplus]buf[14] = 47 [70] [Oneplus]buf[15] = 0 [80] [Oneplus]buf[16] = 4b [80] [Oneplus]buf[17] = 4c [80] [Oneplus]buf[18] = 55 [80] [Oneplus]buf[19] = 43 [90] [Oneplus]buf[20] = 47 [90] [Oneplus]buf[21] = 34 [90] [Oneplus]buf[22] = 4a [90] [Oneplus]buf[23] = 31 [100] [Oneplus]buf[24] = 43 [100] [Oneplus]buf[25] = 42 [100] [Oneplus]buf[26] = 2d [100] [Oneplus]buf[27] = 42 [110] [Oneplus]buf[28] = 30 [110] [Oneplus]buf[29] = 42 [110] [Oneplus]buf[30] = 31 [110] [Oneplus]buf[31] = 0 [120] [Oneplus]buf[32] = 30 [120] [Oneplus]buf[33] = 38 [120] [Oneplus]buf[34] = 30 [120] [Oneplus]buf[35] = 30 [130] end of buffer--- [130] ucs_scsi_send_inquiry_revision :0800 [130] FFU is successful! [140] get_param_by_index_and_offset[50] sid_index = 1  offset = 24 buf = 0x91e9d880 length = 4 [150] set_msm_boot_mode_by_gpio : enter [150] GPIO detect: MSM_BOOT_MODE__NORMAL [170] set_msm_boot_mode_by_share_memory_args : Reboot mode by mem args =0x0 [170] project name is null and use default 15801 [190] start_pwrkey_monitor_func : press [200] bq27541_dsi_i2c_read [200] get bq27541 DCAP_H=0xe [200] get_hw_version=16,bat_type=11,HW_VERSION__28=28 [210] FG: gain -20 raw_vbat 4173 calibrated_vbat 3964 errFlag = 0 [210] stored_soc[0x0], shutdown_soc[-1] [220] Qseecom Init Done in Appsbl version is 0x1001000 [220] secure app region addr=0x86600000 size=0x2200000[230] TZ App region notif returned with status:0 addr:86600000 size:35651584 [230] TZ App log region register returned with status:0 addr:91edb000 size:4096 [240] Qseecom TZ Init Done in Appsbl [270] Loading cmnlib done [300] <8>keymaster: "\"KEYMASTER Init \"" [300] <8>keymaster: "\"Error: qsee_cfg_getpropval in get_enable_set_bandwidth failed for enable_set_bandwidth, ret_size = 0\" [310] <8>keymaster: "\"open_add_km_partition status:0\"" [330] RPMB is enable [330] RPMB is enable, we do not change enable_dm_verity value in devinfo. [330] get_param_by_index_and_offset[50] sid_index = 12  offset = 416 buf = 0x91ed0950 length = 4 [400] start_pwrkey_monitor_func : press [890] Not able to search the panel: [900] init_panel_data: SAMSUNG_S6E3FA3_1080P_CMD_PANEL [900] Return value from recv_data: 14 [910] Return value from recv_data: 14 [920] Return value from recv_data: 14 [940] is_usb_present: FALSE [940] LOGO: MSM_BOOT_MODE__NORMAL [1020] read the LCD ID register is 0x4  [1020] match s6e3fa3 id successfully [1130] set samsung brightness 68  [1140] Device is unlocked! Skipping verification... [1190] Loading (boot) image (10977280): done [6400] is_usb_present: FALSE [6410] LOGO: MSM_BOOT_MODE__NORMAL [6420] Return value from recv_data: 14 [6430] Return value from recv_data: 14 [6440] Return value from recv_data: 14 [6450] <8>keymaster: "\"len: 48\"" [6450] <8>keymaster: "\"boot state: 48\"" [6460] <8>keymaster: "\"is_unlocked: 1\"" [6460] <8>keymaster: "\"color: 1\"" [6460] <8>keymaster: "\"system_version: 0\"" [6470] <8>keymaster: "\"system_security_level 0\"" [6470] Sending Root of Trust to trustzone: end [6770] set_msm_boot_mode_by_uart : enter [6920] COLD: power_on_reason is KPADPWR_N [0xa0] [6920] COLD: power_off_reason is PS_HOLD [0x2] [6930] get_param_by_index_and_offset[50] sid_index = 0  offset = 76 buf = 0x91ed0720 length = 28 [6940] get_param_by_index_and_offset[50] sid_index = 12  offset = 412 buf = 0x91ed0708 length = 4 [6950] get_param_by_index_and_offset[50] sid_index = 10  offset = 128 buf = 0x91ed0704 length = 4 [6950] get_param_by_index_and_offset[50] sid_index = 12  offset = 408 buf = 0x91ed06e8 length = 4 [6960] boot_stage:0x9012 [6970] get_param_by_index_and_offset[50] sid_index = 12  offset = 412 buf = 0x91ed06e8 length = 4 [6970] data_stage:0x1234 [6980] RPMB is enable [6980] get_param_by_index_and_offset[50] sid_index = 12  offset = 424 buf = 0x91ed0708 length = 4 [6990] get_param_by_index_and_offset[50] sid_index = 0  offset = 76 buf = 0x91ed0728 length = 28 [7000] Failed to get parent node: fstab error: -1 [7000] ERROR: Cannot update fstab node [7010] Success [7010] Return value from recv_data: 14 [7020] Qseecom De-Init Done in Appsbl
 * 1) # # [6920] COLD: power_on_reason  is PON1 [0xa0]