Lynx R1 (lynx-r1)
Appearance
![]() Lynx R1 showing fastfetch over ssh) | |
Manufacturer | Lynx |
---|---|
Name | R1 |
Codename | lynx-r1 |
Released | 2023 |
Type | headset |
Hardware | |
Chipset | Qualcomm Snapdragon XR2 (SM8250) |
CPU |
Octa-core (1x2.84 GHz Cortex-A77 3x2.42 GHz Cortex-A77 4x1.80 GHz Cortex-A55) |
GPU | Adreno 650 |
Display | 3200x1600 (1600x1600 per eye) |
Storage | 128 GB UFS 3.1 |
Memory | 6 GB LPDDR5 |
Architecture | aarch64 |
Software | |
Original software The software and version the device was shipped with. |
Android 12 |
Extended version The most recent supported version from the manufacturer. |
Android |
postmarketOS | |
Category | testing |
Mainline Instead of a Linux kernel fork, it is possible to run (Close to) Mainline. |
yes |
Device package |
![]() |
Kernel package |
![]() |
Flashing It is possible to flash the device with pmbootstrap flasher . |
Broken
|
---|---|
USB Networking After connecting the device with USB to your PC, you can connect to it via telnet (initramfs) or SSH (booted system). |
Works
|
Battery Charging and battery level reporting works |
Broken
|
Screen Display works. Ideally with sleep mode and brightness control. |
Partial
|
Multimedia | |
3D Acceleration |
Broken
|
Audio Audio playback, microphone, headset and buttons. |
Broken
|
Camera |
Broken
|
Connectivity | |
Bluetooth |
Broken
|
Miscellaneous | |
USB OTG USB On-The-Go or USB-C Role switching |
Broken
|
Sensors | |
Accelerometer Auto screen rotation works in desktops e.g. Phosh or Plasma Mobile |
Broken
|
Contributors
Users owning this device
Table of hardware
Component | Model | Notes |
---|---|---|
SoC | Qualcomm Snapdragon XR2 | SM8250, codename "kona" |
UFS | WDC SDINFDK4-128G | WD iNAND MC EU521, 128GB UFS 3.1 |
SD reader | MMC SoC interface | |
Audio codec | Qualcomm WCD9385 | |
Speaker amplifier | Qualcomm WSA8815 | |
Displays | JDI/BOE LPM021M528C (x2) | DSI0/DSI1 |
Display backlight | MPS MP3387LGRT | |
Wi-Fi | Qualcomm QCA6390 | PCI-E |
Bluetooth | Nordic Semi nRF52840 | SPI |
IR Cameras | OmniVision OV9282 (x2) | |
Passtrough cameras | OmniVision OV4689 (x2) | CSI2/3 |
Accel/gyro | TDK ICM42688 | SPI |
Magnetometer | Bosch BMM150 | |
Proximity | SensorTek STK3X3X | |
Buck converter | Texas Instruments LP3907 | i2c1 0x61, Likely for fan PWM |
Fan controller | Analog Devices LTC1695 | i2c1 0x74 |
USB-C MUX/Audio Switch | Onsemi FSA4480 | i2c15 0x43 |
Charging IC | Qualcomm SMB1390 | i2c15 0x10 |
Battery | Compal 8600mAh |
Flashing
Firmware on this device is *really* broken, fastboot doesn't work.
Do not attempt to switch active slots, it will hard-brick your device (requiring EDL recovery).
Thankfully, vendor of this device ships firehose EDL loader in publicly available image (link in section "Flashing stock firmware").
pmbootstrap install
pmbootstrap export
./edl --loader=prog_firehose_ddr.elf w dtbo_a /tmp/postmarketOS-export/dtbo.img
./edl --loader=prog_firehose_ddr.elf w boot_a /tmp/postmarketOS-export/boot.img
./edl --loader=prog_firehose_ddr.elf w userdata /tmp/postmarketOS-export/lynx-r1.img
Please make a full backup of device's storage using EDL first!
If anything would go wrong, you'll still be able to restore device-specific calibration data!
You will need ~128GB of free disk space: ./edl --loader=prog_firehose_ddr.elf rf flash.bin --memory=ufs
Developer notes
- UART is at address
0x00a90000
(&uart12
) - Firmware sets up framebuffer as
3200x1600
(reg = <0x0 0x9c000000 0x0 (3200 * 1600 * 4)>;
). - Reserved memory is almost the same as SoC default, with two exceptions:
reserved-memory { res_xbl_uefi_log_region: memory@80880000 { reg = <0x0 0x80880000 0x0 0x14000>; no-map; }; framebuffer: memory@9c000000 { reg = <0x0 0x9c000000 0x0 0x2300000>; no-map; }; };
- Device-specific calibration data seems to be stored in
persist
, which corresponds to/dev/sda2
. - Firmware is stored in
hyp_a
, which corresponds to/dev/sde3
. Use https://github.com/linux-msm/pil-squasher to combineelfs
intombn
.
Bootloader log
Bootloader log
Format: Log Type - Time(microsec) - Message - Optional Info Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic S - QC_IMAGE_VERSION_STRING=BOOT.XF.3.2-00366-SM8250-1 S - IMAGE_VARIANT_STRING=Soc8250LAA S - OEM_IMAGE_VERSION_STRING=vBuild1GXV7 S - Boot Interface: UFS S - Secure Boot: Off S - Boot Config @ 0x00786070 = 0x00000001 S - JTAG ID @ 0x00786130 = 0x200ce0e1 S - OEM ID @ 0x00786138 = 0x00000000 S - Serial Number @ 0x00786134 = 0xb9fc008c S - OEM Config Row 0 @ 0x007841e0 = 0x0000000000000000 S - OEM Config Row 1 @ 0x007841e8 = 0x0000000000000000 S - Feature Config Row 0 @ 0x007841f8 = 0x0040200000000400 S - Feature Config Row 1 @ 0x00784200 = 0xc000000000000000 S - Core 0 Frequency, 1516 MHz S - PBL Patch Ver: 5 S - PBL freq: 600 MHZ D - 6209 - pbl_apps_init_timestamp D - 164460 - bootable_media_detect_timestamp D - 1054 - bl_elf_metadata_loading_timestamp D - 716 - bl_hash_seg_auth_timestamp D - 6613 - bl_elf_loadable_segment_loading_timestamp D - 5528 - bl_elf_segs_hash_verify_timestamp D - 7020 - bl_sec_hash_seg_auth_timestamp D - 820 - bl_sec_segs_hash_verify_timestamp D - 33 - pbl_populate_shared_data_and_exit_timestamp S - 192453 - PBL, End B - 206180 - SBL1, Start B - 207766 - SBL1 BUILD @ 21:12:41 on Feb 29 2024 B - 209321 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc D - 1647 - sbl1_hw_init D - 0 - boot_flash_init B - 407480 - UFS INQUIRY ID: WDC SDINFDK4-128G 1270 B - 410377 - UFS Boot LUN: 1 D - 884 - Auth Metadata D - 226828 - sbl1_xblconfig_init D - 31 - boot_config_data_table_default_init B - 436333 - Using default CDT D - 61 - boot_config_data_table_init B - 436363 - CDT Version:3,Platform ID:8,Major ID:1,Minor ID:0,Subtype:1 D - 7625 - sbl1_hw_platform_pre_ddr D - 0 - devcfg init B - 451949 - PM: PM 0=0x8000028000000080:0x0 B - 452010 - PM: PM 1=0x8000018000000040:0x0 B - 452071 - PM: PM 2=0x8000018000000020:0x0 B - 452132 - PM: PM 5=0x8000018000000040:0x0 B - 452193 - PM: POWER ON by KPDPWR, POWER OFF by PS_HOLD B - 455151 - PM: PMA_2 PON:KPD ON:PON OFF:DVDD B - 455151 - PM: PMA_3 PON:DC WR:KPD ON:PON POFF:KPD OFF:DVDD FAULT1:UVLO FAULT2:WD S3:WD B - 555039 - PM: SET_VAL:Skip B - 555588 - PM: PSI: b0x00_v0x53 B - 559126 - PM: Device Init # SPMI Transn: 5314 B - 568520 - PM: Driver Init # SPMI Transn: 560 B - 581482 - PM: battery Id: 100572 B - 581696 - PM: APSD result: 255 B - 581696 - PM: APSD in progress B - 581818 - PM: Vbatt: 3869; Ibatt: 255 B - 582001 - PM: CHG Init # SPMI Transn: 51 D - 138013 - pmic XBL init D - 27541 - vsense_railway_cpr init D - 165554 - sbl1_hw_pre_ddr_init D - 31 - boot_dload_handle_forced_dload_timeout D - 1738 - sbl1_load_ddr_training_data D - 1860 - sbl1_ddr_set_params B - 628513 - eCDT MRR - Data Starting Address: 0x09066D00 B - 630709 - DSF version = 156.8.18 B - 630709 - Manufacturer ID = 6, Device Type = 8 B - 630709 - Rank 0 size = 4096 MB, Rank 1 size = 4096 MB D - 19581 - sbl1_ddr_init D - 0 - boot_pre_ddi_entry B - 631014 - do_ddr_training, Start B - 658220 - DDR: Start of DDR Training Restore B - 667645 - Frequency = 1805 MHz B - 667645 - DDR: End of DDR Training Restore D - 36722 - do_ddr_training, Delta D - 36844 - sbl1_do_ddr_training D - 0 - sbl1_hand_control_to_devprog_ddr D - 976 - boot_ddi_entry B - 668834 - Pimem init cmd, entry D - 10736 - Pimem init cmd, exit D - 11041 - sbl1_post_ddr_init D - 31 - sbl1_hw_init_secondary B - 680211 - APDP Image Load, Start D - 824 - Auth Metadata D - 457 - Segments hash check D - 2531 - APDP Image Loaded, Delta - (8204 Bytes) D - 0 - boot_dload_dump_security_regions B - 684237 - usb: UFS Serial - 55b7d44c B - 684267 - usb: fedl, vbus_low D - 1525 - boot_dload_check D - 0 - boot_cache_set_memory_barrier D - 0 - boot_smem_debug_init D - 366 - boot_smem_init D - 0 - boot_smem_alloc_for_minidump B - 684786 - PM: SMEM Chgr Info Write Success D - 92 - boot_smem_store_pon_status D - 30 - sbl1_hw_platform_smem D - 61 - boot_ddr_share_data_to_aop D - 518 - boot_clock_init_rpm D - 0 - boot_vsense_copy_to_smem D - 31 - boot_share_flash_data D - 0 - boot_populate_ram_partition_table D - 61 - boot_populate_ddr_details_shared_table D - 0 - sbl1_tlmm_init D - 0 - sbl1_efs_handle_cookies D - 30 - boot_apt_test B - 685884 - OEM_MISC Image Load, Start D - 732 - Auth Metadata D - 274 - Segments hash check D - 2440 - OEM_MISC Image Loaded, Delta - (8080 Bytes) B - 688446 - QTI_MISC Image Load, Start D - 0 - QTI_MISC Image Loaded, Delta - (0 Bytes) B - 696101 - PM: PM Total Mem Allocated: 2940 D - 7655 - sbl1_pm_aop_pre_init_wrapper B - 696132 - AOP Image Load, Start D - 976 - Auth Metadata D - 1952 - Segments hash check D - 8998 - AOP Image Loaded, Delta - (198304 Bytes) B - 705099 - QSEE Dev Config Image Load, Start D - 915 - Auth Metadata D - 580 - Segments hash check D - 3599 - QSEE Dev Config Image Loaded, Delta - (45248 Bytes) B - 708698 - QSEE Image Load, Start D - 4361 - Auth Metadata D - 20313 - Segments hash check D - 94611 - QSEE Image Loaded, Delta - (3146373 Bytes) D - 183 - sbl1_hw_play_vibr B - 803705 - SEC Image Load, Start D - 0 - SEC Image Loaded, Delta - (0 Bytes) B - 803705 - CPUCPFW Image Load, Start D - 0 - CPUCPFW Image Loaded, Delta - (0 Bytes) B - 803736 - QHEE Image Load, Start D - 793 - Auth Metadata D - 2989 - Segments hash check D - 6649 - QHEE Image Loaded, Delta - (444216 Bytes) B - 810415 - OEM_HYP Image Load, Start D - 0 - OEM_HYP Image Loaded, Delta - (0 Bytes) B - 810415 - STI Image Load, Start D - 0 - STI Image Loaded, Delta - (0 Bytes) B - 810964 - APPSBL Image Load, Start D - 823 - Auth Metadata D - 13024 - Segments hash check D - 31751 - APPSBL Image Loaded, Delta - (2514944 Bytes) D - 0 - sbl1_appsbl_arch_determination B - 843142 - SBL1, End D - 636962 - SBL1, Delta S - Flash Throughput, 84000 KB/s (6441775 Bytes, 75988 us) S - DDR Frequency, 1555 MHz UEFI Start [ 1057] - 0x09FC01000 [ 1061] Sec.efi ASLR : ON DEP : ON (RTB) Timer Delta : +0 mS RAM Entry 0 : Base 0x080000000 Size 0x03B800000 RAM Entry 1 : Base 0x180000000 Size 0x100000000 RAM Entry 2 : Base 0x0C0000000 Size 0x0C0000000 Total RAM : 0x1FB800000 Multithread : ON (Lib ver 1.1) CPU Cores : 8 (init 1) CONF File : uefiplatLA.cfg UEFI Ver : 5.0.240229.BOOT.XF.3.2-00366-SM8250-1 Build Info : 64b Feb 29 2024 21:13:18 Boot Device : UFS PROD Mode : FALSE Retail : FALSE - 0x09B546000 [ 1139] DxeCore.efi Loading DxeCore at 0x009B546000 EntryPoint=0x009B547000 HOBLIST address in DXE = 0x9B336018 FV Hob 0x9FC00000 - 0x9FE65FFF FV Hob 0x9B580000 - 0x9BB3CFFF FV2 Hob 0x9B580000 - 0x9BB3CFFF 631008B0-B2D1-410A-8B49-2C5C4D8ECC7E - 9E21FD93-9C72-4C15-8C4B-E77F1DB2D792 - 0x09B4E5000 [ 1145] EnvDxe.efi - 0x09B4DB000 [ 1145] RscRtDxe.efi - 0x09B4D3000 [ 1146] SCHandlerRtDxe.efi - 0x09B00A000 [ 1146] RuntimeDxe.efi - 0x09B4C0000 [ 1146] ArmCpuDxe.efi - 0x09B4B7000 [ 1147] ArmGicDxe.efi - 0x09B4B0000 [ 1147] MetronomeDxe.efi - 0x09B4A8000 [ 1148] ArmTimerDxe.efi - 0x09B49E000 [ 1148] SmemDxe.efi - 0x09B44D000 [ 1148] DALSys.efi - 0x09B444000 [ 1149] HWIODxeDriver.efi - 0x09B439000 [ 1149] ChipInfo.efi - 0x09B431000 [ 1149] PlatformInfoDxeDriver.efi - 0x09B426000 [ 1149] HALIOMMU.efi - 0x09B412000 [ 1150] ULogDxe.efi - 0x09B40A000 [ 1150] CmdDbDxe.efi - 0x09B402000 [ 1150] PwrUtilsDxe.efi - 0x09B3EF000 [ 1151] NpaDxe.efi - 0x09B3DF000 [ 1151] RpmhDxe.efi - 0x09B3D7000 [ 1152] PdcDxe.efi - 0x09B3CB000 [ 1152] VcsDxe.efi - 0x09B396000 [ 1153] ClockDxe.efi >>> Cluster 0: 1516 MHz >>> Cluster 2: 1324 MHz - 0x09B38B000 [ 1162] SPMI.efi - 0x09B382000 [ 1167] ShmBridgeDxe.efi - 0x09B376000 [ 1168] ScmDxe.efi - 0x09B36D000 [ 1169] DALTLMM.efi - 0x09AFF6000 [ 1169] ResetRuntimeDxe.efi - 0x09B33D000 [ 1170] PmicDxe.efi PM0: 30, PM1: 32, PM2: 31, PM3: 33, PM5: 36, - 0x09AFEB000 [ 1200] DiskIoDxe.efi - 0x09AFDF000 [ 1200] PartitionDxe.efi - 0x09B002000 [ 1200] EnglishDxe.efi - 0x09AFD4000 [ 1200] FvSimpleFileSystem.efi - 0x09AFB9000 [ 1201] SdccDxe.efi - 0x09AF9C000 [ 1201] UFSDxe.efi UFS INQUIRY ID: WDC SDINFDK4-128G 1270 UFS Boot LUN: 1 - 0x09AF8C000 [ 1252] Fat.efi - 0x09AF7D000 [ 1252] TzDxe.efi - 0x09AF71000 [ 1256] VariableDxe.efi AppReg Init:12 mS Embedded Images Supported and Commonlibs loaded - 0x09AD69000 [ 1333] FeatureEnablerDxe.efi - 0x09AD61000 [ 1368] QcomWDogDxe.efi HW Wdog Setting from PCD : Disabled - 0x09AD57000 [ 1369] DDRInfoDxe.efi - 0x09AD13000 [ 1370] DisplayDxe.efi DisplayDxe: Initialize ABL! PanelInitSeq: Panel_CheckOverride: false PanelInitSeq: Select JDI since GPIO_141 is 0 PanelInitSeq: Panel_Default_PowerUp PanelInitSeq: GPIO_133 LOW PanelInitSeq: GPIO_133 HIGH DisplayDxe: MDP_PMIC_MODULE_CONTROLTYPE_IBB_LAB_LCD PanelInitSeq: MDPPlatformConfigure: MDPPLATFORM_CONFIG_POWERUP: Setup VSP & VSN to 5.7V PanelInitSeq: Panel_Default_Peripheral_Power: LCDB, IBB=5700, LAB=-5700 PanelInitSeq: GPIO_134 HIGH PanelInitSeq: GPIO_140 HIGH PanelInitSeq: GPIO_144 HIGH PanelInitSeq: Enter MDPPLATFORM_CONFIG_GETPANELCONFIG PanelInitSeq: Get the panel id 5 xml configurations DisplayDxe: Panel ID:0x00000000 [LCD] DisplayDxe: Resolution 3200x1600 (2 intf) PanelInitSeq: SetupPlatformPanelConfig PanelInitialized MDPLib: MDPDetect: MDPSetupDSCProperty Number of DSC encoders: 4 Layer mixer split enabled: 1 Block prediction enabled: 1 Bits per component: 8 Bits per pixel: 12 Compression Ratio: 2 DSC slice height: 40 DSC slice width: 400 DSC slice per packet: 2 PanelInitSeq: Reset GPIO 75 Assert State=0 PanelInitSeq: Panel_ResetStateExec GPIO 75 ResetAssertTime=3000us PanelInitSeq: Panel_ResetStateExec GPIO 75 state0=1, state1=0, state2=1 - 0x09AD0A000 [ 1450] PILProxyDxe.efi - 0x09ACF0000 [ 1451] PILDxe.efi PanelInitSeq: Sending initial code pil-abl Done t=31ms s=2ms a=6ms f=20ms pil-imagefv Done t=34ms s=3ms a=5ms f=25ms - 0x09ACE4000 [ 1530] SPSSDxe.efi SPSSDxe [spss_iar_main] I: IAR-STATE is NOT ACTIVATED [0x0], Exit now Overriding PIL cfg by caller pil-SPSS Done t=17ms s=5ms a=10ms f=0ms pil-SPSS Boot subsys, Done SPSSDxe_LogPoffReason :: Poff_reason :128 - 0x09AC41000 [ 1554] CPRDxe.efi - 0x09AC53000 [ 1556] WatchdogTimer.efi - 0x09AC2C000 [ 1556] ASN1X509Dxe.efi - 0x09AC22000 [ 1557] SecRSADxe.efi - 0x09AC01000 [ 1557] VerifiedBootDxe.efi - 0x09AC5A000 [ 1558] EmbeddedMonotonicCounter.efi PanelInitSeq: UpdateDisplayParams - 0x09AC19000 [ 1574] RealTimeClock.efi - 0x09AC11000 [ 1575] PrintDxe.efi - 0x09AB56000 [ 1575] DevicePathDxe.efi - 0x09ABF9000 [ 1576] CapsuleRuntimeDxe.efi - 0x09AB0D000 [ 1576] HiiDatabase.efi - 0x09AB4C000 [ 1577] FontDxe.efi - 0x09AA55000 [ 1582] QcomBds.efi - 0x09AB3A000 [ 1584] SPI.efi - 0x09AAE7000 [ 1584] I2C.efi - 0x09AADD000 [ 1585] AdcDxe.efi - 0x09AB6A000 [ 1585] UsbPwrCtrlDxe.efi - 0x09AA12000 [ 1586] QcomChargerDxeLA.efi - 0x09AB31000 [ 1596] ChargerExDxe.efi - 0x09AA3B000 [ 1597] UsbfnDwc3Dxe.efi - 0x09AAC6000 [ 1597] XhciPciEmulation.efi - 0x09A9FB000 [ 1598] XhciDxe.efi - 0x09A9E8000 [ 1598] UsbBusDxe.efi - 0x09AA94000 [ 1599] UsbKbDxe.efi - 0x09AAD1000 [ 1600] UsbMassStorageDxe.efi - 0x09A9B5000 [ 1600] UsbConfigDxe.efi UsbConfigLibOpenProtocols: PMI version (0x20) UsbConfigInit: Dual Role Enabled on Port Number: 0 UsbConfigInit: UsbConfigInit, not start on port: 0, mode 0 UsbConfigInit: Dual Role Enabled on Port Number: 1 UsbConfigInit: UsbConfigInit, not start on port: 1, mode 0 UsbConfigInit: UsbPwrCtrl No. of Ports = 2 - 0x09A9DE000 [ 1604] ButtonsDxe.efi - 0x09AAA7000 [ 1606] TsensDxe.efi - 0x09A992000 [ 1608] LimitsDxe.efi APC1 IDDQ WC 0 , L2:0, CPU[0]:175, CPU[1]:175, CPU[2]:175, CPU[3]:175 APC1 Total 700 LoadSys TIME 0ms tsens TIME 1ms scm TIME 2ms Load CPU 0 Slp: 0x69, Int: 0xFFFFFF96 Load CPU 1 Slp: 0xE0, Int: 0xFFFFFF65 Load CPU 2 Slp: 0x6A, Int: 0x142 Load CPU 3 Slp: 0x107, Int: 0xFFFFFFB1 Load GPU 0 Slp: 0x97, Int: 0xFFFFFFF6 adc_min:0x166 adc_max:0x168 Load NPU 0 Slp: 0x2C, Int: 0x13 LmhIsenseInit Pre CPU TIME 0ms GLD IDDQ WC 0 LmhIsenseSubSysEntry Post SubSysEntryCb TIME 0ms LmhIsenseSubSysEntry Post LmhIsenseSubSysInit TIME 0ms LmhIsenseInitSubSys Post SubSysEntry TIME 0ms LmhIsenseInitSubSys Post SubSysTrim TIME 0ms LmhIsenseInitSubSys Post SubSysExit TIME 0ms LmhIsenseInit Post CPU TIME 0ms GPU IDDQ 40 LmhIsenseSubSysEntry Post SubSysEntryCb TIME 0ms LmhIsenseSubSysEntry Post LmhIsenseSubSysInit TIME 0ms LmhIsenseInitSubSys Post SubSysEntry TIME 0ms LmhIsenseInitSubSys Post SubSysTrim TIME 0ms LmhIsenseInitSubSys Post SubSysExit TIME 0ms LmhIsenseInit Post GPU TIME 1ms Entering in func1 of NPU TIME 1ms NPU IDDQ 46 LmhIsenseSubSysEntry Post SubSysEntryCb TIME 0ms LmhIsenseSubSysEntry Post LmhIsenseSubSysInit TIME 0ms LmhIsenseInitSubSys Post SubSysEntry TIME 0ms LmhIsenseInitSubSys Post SubSysTrim TIME 0ms LmhIsenseInitSubSys Post SubSysExit TIME 0ms LmhIsenseInit Post NPU TIME 2ms isense TIME 5ms ISENSE TOTAL TIME 5ms - 0x09A3B8000 [ 1621] GpiDxe.efi - 0x09A385000 [ 1658] HashDxe.efi - 0x09A36D000 [ 1659] CipherDxe.efi - 0x09A355000 [ 1660] MacDxe.efi - 0x09A9AD000 [ 1661] RngDxe.efi - 0x09A9A5000 [ 1661] SimpleTextInOutSerial.efi - 0x09A3DB000 [ 1662] ConPlatformDxe.efi - 0x09A3AA000 [ 1663] ConSplitterDxe.efi - 0x09A3CF000 [ 1664] GraphicsConsoleDxe.efi - 0x09A33A000 [ 1664] SecurityStubDxe.efi - 0x09A347000 [ 1665] UsbMsdDxe.efi - 0x09A31F000 [ 1666] UsbDeviceDxe.efi - 0x09A332000 [ 1667] UsbInitDxe.efi BDS Entry [ 1667] Disp init wait [ 1667] ----------------------------- Platform Init [ 1800] BDS Boot Cycle : 6 Run Cycle : 6 UEFI Ver : 5.0.240229.BOOT.XF.3.2-00366-SM8250-1 Platform : MTP Chip Name : SM8250 Chip Ver : 2.1 Chip Serial Number : 0xB9FC008C Silver cluster Core 0 Freq: 1516 MHz ----------------------------- - 0x0998BE000 [ 1827] QcomChargerApp.efi Loading Battery Profile for Fuel Gauge Start : 1867881 2, PmicDxe:: PmicFgSram_LoadBattProfile StateOfCharge,Voltage,ChargerCurrent,Temp 2, PmicDxe:: PmicFgSram_LoadBattProfile Battery Status 58,3903,2,17 Loading Battery Profile for Fuel Gauge End : 2550809 Successfully synced all UEFI tables UEFI Total : 1559 ms POST Time [ 2616] OS Loader - 0x098DA0000 [ 2621] LinuxLoader.efi Loader Build Info: Feb 29 2024 16:51:01 LinuxLoader Load Address to debug ABL: 0x98DA1000 LinuxLoaderEntry Address: 0x98DA13D8 SetThreadStackEnv () kernel version = 0x10005 AllocateUnSafeStackPtr CurrentThread = 0x9BC0A598 with linktable BootStats: ID-0: BootStatClockCount:86010 VB: Non-secure device: Security State: (0xF7F) VB: RWDeviceState: Succeed using devinfo! Selected Lun : 0, handle: 0 does not have partition record, ignore Selected Lun : 1, handle: 0 does not have partition record, ignore Selected Lun : 2, handle: 0 does not have partition record, ignore Selected Lun : 3, handle: 0 does not have partition record, ignore Selected Lun : 4, handle: 0 does not have partition record, ignore Selected Lun : 5, handle: 0 does not have partition record, ignore Multi Slot boot is supported GetActiveSlot: found active slot _a, priority 3 Key Stroke Read ScanCode = (0x102), UnicodeChar =(0x0) ShiftState=(0x0), ToggleState==(0x0) Platform Info : 0x8 Total DDR Size: 0x00000001FB800000 GPIO_125 = 1 GPIO_6 = 1 GPIO_7 = 0 Phase ID:0x6 GPIO_28 = 0 GPIO_29 = 1 GPIO_30 = 0 Project ID:0x2 Raw Chip Id : 0x164 Chip Version : 0x20001 Foundry Id : 0x1 Chip BaseBand : apq Fusion Value : 0 HLOS SubType : 0x0 KeyPress:258, BootReason:0 Fastboot=0, Recovery:0 GetVmData: making ScmCall to get HypInfo GetVmData: No Vm data present! Status = (0x3) VM Hyp calls not present GetActiveSlot: found active slot _a, priority 3 Active Slot _a is bootable Get BootLun =1 Booting from slot (_a) Booting Into Mission Mode MultiSlot true, partition name boot_a AVB version 2 GetActiveSlot: found active slot _a, priority 3 Slot suffix _a Part Attr 0x77000000000000 Slot _a is bootable Slot: _a, allow verification error: true GetActiveSlot: found active slot _a, priority 3 GetActiveSlot: found active slot _a, priority 3 Loading Image Start : 2640 ms Loading Image Done : 2640 ms Total Image Read size : 4096 Bytes Header version 2 GetActiveSlot: found active slot _a, priority 3 Invalid vendor_boot partition. Skipping avb_slot_verify.c:514: DEBUG: Loading vbmeta struct from partition 'vbmeta_a'. read from vbmeta_a, 0x10000 bytes at Offset 0x0, partition size 0x10000 Load Image vbmeta_a total time: 1 ms ValidateVbmetaPublicKey PublicKeyLength 1032, PublicKeyMetadataLength 0 ValidateVbmetaPublicKey OutIsTrusted 1, UserKey 0 ReadRollbackIndex Location 0, RollbackIndex 0 avb_slot_verify.c:514: DEBUG: Loading vbmeta struct from partition 'vbmeta_system_a'. read from vbmeta_system_a, 0x10000 bytes at Offset 0x0, partition size 0x10000 Load Image vbmeta_system_a total time: 1 ms ReadRollbackIndex Location 2, RollbackIndex 0 avb_slot_verify.c:184: DEBUG: boot_a: Loading entire partition. BootStats: ID-4: Kernel Load Start:87879 BootStats: ID-4: BootStatClockCount:87879 read from boot_a, 0x6000000 bytes at Offset 0x0, partition size 0x6000000 Load Image boot_a total time: 114 ms BootStats: ID-5: Kernel Load Done:91623 avb_slot_verify.c:260: DEBUG: boot_a: success: Image verification completed avb_slot_verify.c:184: DEBUG: dtbo_a: Loading entire partition. read from dtbo_a, 0x1800000 bytes at Offset 0x0, partition size 0x1800000 Load Image dtbo_a total time: 27 ms avb_slot_verify.c:260: DEBUG: dtbo_a: success: Image verification completed vbmeta_a uuid: f9ee474a-4ffa-0f3d-0b8c-257e7fc735b7 State: Unlocked, AvbSlotVerify returned OK, continue boot Requested Partition: boot Loaded Partition: boot Requested Partition: dtbo Loaded Partition: boot Loaded Partition: dtbo Total loaded partition 2 Boot Image Header Info... Image Header version : 0x2 Kernel Size 1 : 0x2DBE010 Kernel Size 2 : 0x0 Ramdisk Size : 0x13BECB DTB Size : 0x1870E9 keymaster app id 1 KeyMasterStartApp success AppId: 0x1, Major: 4 DateSupport: 1 keymaster app id 1 KeyMasterStartApp success AppId: 0x1, Major: 4 KeyMasterSetRotAndBootState success keymaster app id 1 KeyMasterStartApp success AppId: 0x1, Major: 4 VB2: Authenticate complete! boot state is: orange VB2: boot state: orange(1) No Ffbm cookie found, ignore: Not Found Boot State is : 1 Display menu is not enabled! Device is unlocked, Skipping boot verification Sending Milestone Call No Ffbm cookie found, ignore: Not Found Memory Base Address: 0x80000000 Kernel Load Address: 0xA0080000 Kernel Size Actual: 0x2DBF000 Second Size Actual: 0x0 Ramdisk Load Address: 0xAFEC3000 Ramdisk Size Actual: 0x13C000 Ramdisk Offset: 0x2DC0000 Device Tree Load Address: 0xAFCC2000 Boardsocid = 164, Dtsocid = 164 BoardSocRev = 20001, DtSocRev =20001 BoardFoundry = 10000, DtFoundry = 0 BoardVariant = 8, DtVariant = 0 BoardSubtype = 1, DtSubType = 0 qcom,pmic-id does not exit Bestmatch = CC00 Boardsocid = 164, Dtsocid = 164 BoardSocRev = 20001, DtSocRev =20000 BoardFoundry = 10000, DtFoundry = 0 BoardVariant = 8, DtVariant = 0 BoardSubtype = 1, DtSubType = 0 qcom,pmic-id does not exit Bestmatch = CC00 Boardsocid = 164, Dtsocid = 164 BoardSocRev = 20001, DtSocRev =10000 BoardFoundry = 10000, DtFoundry = 0 BoardVariant = 8, DtVariant = 0 BoardSubtype = 1, DtSubType = 0 qcom,pmic-id does not exit Bestmatch = CC00 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) qcom,board-id does not exist (or) (-1) is not a multiple of (8) qcom,pmic-id does not exit rtic-id (1) MpData : (0) MpData : (0) MpData : (E0) MpData : (9) MpData : (80) MpData : (FF) MpData : (FF) MpData : (FF) MpData : (0) MpData : (0) MpData : (D8) MpData : (1) MpData : (0) MpData : (0) MpData : (0) MpData : (0) MpData : (88) MpData : (5) MpData : (0) MpData : (0) MpData : (EA) MpData : (67) MpData : (59) MpData : (99) MpData : (DE) MpData : (7A) MpData : (D7) MpData : (B8) MpData : (7) MpData : (5B) MpData : (F8) MpData : (5B) MpData : (60) MpData : (7C) MpData : (B7) MpData : (BF) MpData : (2C) MpData : (7E) MpData : (C9) MpData : (E7) MpData : (89) MpData : (7) MpData : (B6) MpData : (39) MpData : (4B) MpData : (83) MpData : (D8) MpData : (22) MpData : (CA) MpData : (DD) MpData : (DE) MpData : (3) Length of MpData (52) MpData (9A32FB98) Kernel base address (A0080000) Kernel mode check 32/64: KernelLoadAddr->magic_64 (644D5241) KERNEL64_HDR_MAGIC = 644D5241 Bestmatch = CC00 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 10001 qcom,board-id does not match Board dt prop search failed. Dtbo count = 0 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 10101 qcom,board-id does not match Board dt prop search failed. Dtbo count = 1 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1010008 BoardSubtype = 1, DtSubType = 1 qcom,pmic-id does not exit Dtbo count = 2 LocalBoardDtMatch = 0x72000000001400 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1050008 qcom,board-id major version does not match BoardSubtype = 1, DtSubType = 1 qcom,pmic-id does not exit Dtbo count = 3 LocalBoardDtMatch = 0x72000000000400 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 10008 BoardSubtype = 1, DtSubType = 0 qcom,pmic-id does not exit Dtbo count = 4 LocalBoardDtMatch = 0x68000000001400 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 3010008 BoardSubtype = 1, DtSubType = 3 subtype-id doesnot match Board dt prop search failed. Dtbo count = 5 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1001F qcom,board-id does not match Board dt prop search failed. Dtbo count = 6 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1020008 qcom,board-id major version does not match BoardSubtype = 1, DtSubType = 1 qcom,pmic-id does not exit Dtbo count = 7 LocalBoardDtMatch = 0x72000000000400 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = B qcom,board-id does not match Board dt prop search failed. Dtbo count = 8 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1000F qcom,board-id does not match Board dt prop search failed. Dtbo count = 9 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 2010008 BoardSubtype = 1, DtSubType = 2 subtype-id doesnot match Board dt prop search failed. Dtbo count = 10 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1030008 qcom,board-id major version does not match BoardSubtype = 1, DtSubType = 1 qcom,pmic-id does not exit Dtbo count = 11 LocalBoardDtMatch = 0x72000000000400 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1020001 qcom,board-id does not match Board dt prop search failed. Dtbo count = 12 LocalBoardDtMatch = 0x1 qcom, msm-id does not exist (or) is (-1) not a multiple of (8) BoardVariant = 8, DtVariant = 1040008 qcom,board-id major version does not match BoardSubtype = 1, DtSubType = 1 qcom,pmic-id does not exit Dtbo count = 13 LocalBoardDtMatch = 0x72000000000400 DTs list: NULL Override DTB: GetBlkIOHandles failed loading user_dtbo! Apply Overlay total time: 367 ms UpdateCmdLine VBCmdLine present len 440 VB: Non-secure device: Security State: (0xF7F) VB: RWDeviceState: Succeed using devinfo! PROJECT_ID = 2, ProjectName = GLV9 PHASE_ID = 6, PhaseName = PVT GetActiveSlot: found active slot _a, priority 3 Succeed to append ProjectName into cmdline Succeed to append PhaseName into cmdline Cmdline: console=ttyMSM0,115200n8 earlycon=msm_geni_serial,0xa90000 androidboot.hardware=qcom androidboot.console=ttyMSM0 androidboot.memcg=1 lpm_levels.sleep_disabled=1 video=vfb:640x400,bpp=32,memsize=3072000 msm_rtb.filter=0x237 service_locator.enable= RAM Partitions Add Base: 0x0000000080000000 Available Length: 0x000000003B800000 Add Base: 0x0000000180000000 Available Length: 0x0000000100000000 Add Base: 0x00000000C0000000 Available Length: 0x00000000C0000000 DDR Header Revision =0x30000 DDR deviceType:8 ddr_device_type is added to memory node ddr_device_rank, HBB not supported in Revision=0x30000 Version=1 Addr=0x9C000000 Size=0x02300000 ERROR: Could not get splash memory region node kaslr-Seed is added to chosen node Start DT fstab node update: 3375 ms Node: fstab found. Property:status found for sub-node:vendor Property:ok Disabling node status :vendor End DT fstab node update: 3376 ms Failed to get CPU defective[1] part. Not Found Update lpd property Update Device Tree total time: 52 ms FreeVerifiedBootResource Shutting Down UEFI Boot Services: 3393 ms
Partition layout
LUN0 = sda, LUN1 = sdb, LUN2 = sdc, LUN3 = sdd, LUN4 = sde, LUN5 = sdf
Parsing Lun 0: GPT Table: ------------- ssd: Offset 0x0000000000006000, Length 0x0000000000002000, Flags 0x0000000000000000, UUID a8a793f8-e91c-ce6a-7faa-f2e87f26f0d4, Type 0x2c86e742, Active False persist: Offset 0x0000000000008000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID 3f239b9e-2997-e960-6602-9e6b735e2377, Type 0x6c95e238, Active False misc: Offset 0x0000000002008000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID 75ef8d1c-44d0-38f1-56ea-6fdb0f62438d, Type 0x82acc91f, Active False keystore: Offset 0x0000000002108000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID dcdf88f0-7815-ecf3-6c84-4f19c005d871, Type 0xde7d4029, Active False frp: Offset 0x0000000002188000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 2608dc72-0827-06cc-ac44-feae93a3cc64, Type 0x91b72d4d, Active False super: Offset 0x0000000002208000, Length 0x0000000180000000, Flags 0x0000000000000000, UUID d0dc466f-fcd8-9892-4bde-98ffe4348ad0, Type 0x89a12de1, Active False recovery_a: Offset 0x0000000182208000, Length 0x0000000006400000, Flags 0x0000000000000000, UUID fda893c5-e8f4-e31a-9344-b3de1c9b57e2, Type 0xd504d6db, Active False recovery_b: Offset 0x0000000188608000, Length 0x0000000006400000, Flags 0x0000000000000000, UUID 04c0a0ea-5942-bb4d-a015-02c682813641, Type 0x352b8083, Active False vbmeta_system_a: Offset 0x000000018ea08000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID 1d2357cf-de33-d84e-66d9-772de53410cb, Type 0x1344859d, Active False vbmeta_system_b: Offset 0x000000018ea18000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID df636f99-e58a-dc89-31da-758e4e1b88b0, Type 0xfe3ab853, Active False metadata: Offset 0x000000018ea28000, Length 0x0000000001000000, Flags 0x0000000000000000, UUID b8e1a041-83a5-24a1-94bf-1cac69527307, Type 0x988a98c9, Active False vm-system_a: Offset 0x000000018fa28000, Length 0x0000000008000000, Flags 0x0000000000000000, UUID 6bf1f713-35e3-df13-db48-3cd80af4fcbc, Type 0xc5f681cc, Active False vm-system_b: Offset 0x0000000197a28000, Length 0x0000000008000000, Flags 0x0000000000000000, UUID 853b754a-ff72-aad4-f746-cf4823ba79fa, Type 0x77036cd4, Active False rawdump: Offset 0x000000019fa28000, Length 0x0000000008000000, Flags 0x0000000000000000, UUID ecbbd8f3-ca63-cf99-e0f9-2f4bdac4021b, Type 0x66c9b323, Active False userdata: Offset 0x00000001a7a28000, Length 0x0000001ba05d3000, Flags 0x0000000000000000, UUID 235e7f77-8987-c13e-89f2-f664582cb738, Type 0x1b81e7e6, Active False Total disk size:0x0000001d48000000, sectors:0x0000000001d48000 Parsing Lun 1: GPT Table: ------------- xbl_a: Offset 0x0000000000006000, Length 0x0000000000380000, Flags 0x1000000000000000, UUID 25f47e27-9709-6ffe-1d08-420a773b8f4a, Type 0xdea0ba2c, Active False xbl_config_a: Offset 0x0000000000386000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID d03a0ca1-0577-066d-7afa-d19e024c9cb8, Type 0x5a325ae4, Active False Total disk size:0x0000000000800000, sectors:0x0000000000000800 Parsing Lun 2: GPT Table: ------------- xbl_b: Offset 0x0000000000006000, Length 0x0000000000380000, Flags 0x1000000000000000, UUID feab6a6b-b18c-4b0d-040d-0ba485a8e684, Type 0xdea0ba2c, Active False xbl_config_b: Offset 0x0000000000386000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID abd70d59-dafc-c032-d5f5-0917b12c3cfa, Type 0x5a325ae4, Active False Total disk size:0x0000000000800000, sectors:0x0000000000000800 Parsing Lun 3: GPT Table: ------------- ALIGN_TO_128K_1: Offset 0x0000000000006000, Length 0x000000000001a000, Flags 0x1000000000000000, UUID 758ff0a5-018e-e561-a193-1e9cd9a436e0, Type 0xfde1604b, Active False cdt: Offset 0x0000000000020000, Length 0x0000000000020000, Flags 0x1000000000000000, UUID ac466ec1-ff63-40d9-258b-711d85641464, Type 0xa19f205f, Active False ddr: Offset 0x0000000000040000, Length 0x0000000000200000, Flags 0x1000000000000000, UUID ace980dc-e61f-1520-0e66-50fab3f59d06, Type 0x20a0c19c, Active False mdmddr: Offset 0x0000000000240000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID 0bade780-3473-36e4-c8dd-99c9a758247e, Type 0x433ee193, Active False Total disk size:0x0000000002000000, sectors:0x0000000000002000 Parsing Lun 4: GPT Table: ------------- aop_a: Offset 0x0000000000006000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 3e16fee8-b525-f2a8-a39b-2f95470e95c5, Type 0xd69e90a5, Active False tz_a: Offset 0x0000000000086000, Length 0x0000000000400000, Flags 0x1000000000000000, UUID ffb68830-8360-5f31-88aa-a03a66cbd945, Type 0xa053aa7f, Active False hyp_a: Offset 0x0000000000486000, Length 0x0000000000800000, Flags 0x0000000000000000, UUID 4e39fd67-b915-21c4-5b6f-fe3e596905bc, Type 0xe1a6a689, Active False modem_a: Offset 0x0000000000c86000, Length 0x0000000018b00000, Flags 0x1000000000000000, UUID fdd21b19-2d2e-a85e-95bf-08a2e01ad402, Type EFI_BASIC_DATA, Active False bluetooth_a: Offset 0x0000000019786000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID 7e7c1ca4-b875-89a6-b9d8-6a39fa798235, Type 0x6cb747f1, Active False mdtpsecapp_a: Offset 0x0000000019886000, Length 0x0000000000400000, Flags 0x1000000000000000, UUID 36622a16-831e-50e6-cec8-a1c8c2b41ada, Type 0xea02d680, Active False mdtp_a: Offset 0x0000000019c86000, Length 0x0000000002000000, Flags 0x1000000000000000, UUID 0f102be7-9eba-8d95-82db-916e55fdfadb, Type 0x3878408a, Active False abl_a: Offset 0x000000001bc86000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID 35b7ac75-c622-db4d-9f69-90919ad8b402, Type 0xbd6928a1, Active False dsp_a: Offset 0x000000001bd86000, Length 0x0000000004000000, Flags 0x1000000000000000, UUID 8e450342-9d99-6e63-f0e4-332a6621571a, Type 0x7efe5010, Active False keymaster_a: Offset 0x000000001fd86000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID f0e24957-c41f-111f-6e1e-66840862f555, Type 0xa11d2a7c, Active False boot_a: Offset 0x000000001fe06000, Length 0x0000000006000000, Flags 0x0000000000000000, UUID b226cfd6-cbfb-4728-a246-c2dd65d4a96a, Type 0x20117f86, Active False cmnlib_a: Offset 0x0000000025e06000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 0ab3b383-3b8f-b50d-b884-3e3bd96f9e40, Type 0x73471795, Active False cmnlib64_a: Offset 0x0000000025e86000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 68593eab-b664-14b1-5242-afcd734c64ad, Type 0x8ea64893, Active False devcfg_a: Offset 0x0000000025f06000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 0bd31431-f895-2039-012a-74378c367523, Type 0xf65d4b16, Active False qupfw_a: Offset 0x0000000025f26000, Length 0x0000000000014000, Flags 0x0000000000000000, UUID 4ff03feb-1ef8-47f0-a413-9f55e0b1a8a5, Type 0x21d1219f, Active False vbmeta_a: Offset 0x0000000025f3a000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID 8bb32c8a-e014-89bc-9800-2c8a42b86a9f, Type 0x4b7a15d6, Active False dtbo_a: Offset 0x0000000025f4a000, Length 0x0000000001800000, Flags 0x0000000000000000, UUID 2a0c324d-43fc-345f-d082-953c26a435bb, Type 0x24d0d418, Active False uefisecapp_a: Offset 0x000000002774a000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID 36e24b78-7542-dce5-dd79-35759ede1925, Type 0xbe8a7e08, Active False multiimgoem_a: Offset 0x000000002794a000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 190951d9-aaee-0a85-5982-769aca6f0b35, Type 0xe126a436, Active False multiimgqti_a: Offset 0x0000000027952000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 2a3a1151-8e4b-6679-140a-a03554f4e2e8, Type 0x846c6f05, Active False vm-linux_a: Offset 0x000000002795a000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID 42521e52-ea48-2a58-a5f8-d47f82e8aaa1, Type 0xcb67e78c, Active False featenabler_a: Offset 0x000000002995a000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 8238bcde-5fb3-46b0-4348-5b7c50937fa7, Type 0x741813d2, Active False imagefv_a: Offset 0x000000002997a000, Length 0x0000000000200000, Flags 0x0000000000000001, UUID 0acc22c6-5433-36c7-b5f7-96dfc63af564, Type 0x17911177, Active False aop_b: Offset 0x0000000029b7a000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 7c39c6bf-fbc1-3f2e-f5a1-f0609cdd18eb, Type 0x77036cd4, Active False tz_b: Offset 0x0000000029bfa000, Length 0x0000000000400000, Flags 0x0000000000000000, UUID 79635f6d-537d-83c1-6964-baa9bccc92b1, Type 0x77036cd4, Active False hyp_b: Offset 0x0000000029ffa000, Length 0x0000000000800000, Flags 0x0000000000000000, UUID ae41863e-e211-36c4-77ca-70acd4ba2c0f, Type 0x77036cd4, Active False modem_b: Offset 0x000000002a7fa000, Length 0x0000000018b00000, Flags 0x1000000000000000, UUID 1a437920-0e41-a2e3-2cfc-841f1b4f63bf, Type 0x77036cd4, Active False bluetooth_b: Offset 0x00000000432fa000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID 640a8dcc-9cb7-70b2-fd4a-8c3b239fb5a9, Type 0x77036cd4, Active False mdtpsecapp_b: Offset 0x00000000433fa000, Length 0x0000000000400000, Flags 0x1000000000000000, UUID 8283c0e9-1b34-bf62-a20f-5c0fe8f9a8eb, Type 0x77036cd4, Active False mdtp_b: Offset 0x00000000437fa000, Length 0x0000000002000000, Flags 0x1000000000000000, UUID 5eaae248-c516-9b47-f17e-1de2c8e44f7c, Type 0x77036cd4, Active False abl_b: Offset 0x00000000457fa000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID f97d0b8c-f96a-0122-1ab4-9f19c9d3a044, Type 0x77036cd4, Active False dsp_b: Offset 0x00000000458fa000, Length 0x0000000004000000, Flags 0x1000000000000000, UUID 9b70e01f-ccbd-8ec6-31b2-c9773bc74d96, Type 0x77036cd4, Active False keymaster_b: Offset 0x00000000498fa000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 2a183404-1d11-6b44-6aba-d46261564ba8, Type 0x77036cd4, Active False boot_b: Offset 0x000000004997a000, Length 0x0000000006000000, Flags 0x0000000000000000, UUID 0c9882a3-1ef8-d221-a03c-2ed12d6d92b1, Type 0x77036cd4, Active False cmnlib_b: Offset 0x000000004f97a000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID f27b704a-104d-6010-7028-dd42f00cfcf1, Type 0x77036cd4, Active False cmnlib64_b: Offset 0x000000004f9fa000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 61abb087-a294-f441-54f5-43487b8132fc, Type 0x77036cd4, Active False devcfg_b: Offset 0x000000004fa7a000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 0294b780-4ce7-e3f1-2d4f-cf0a6a2b772e, Type 0x77036cd4, Active False qupfw_b: Offset 0x000000004fa9a000, Length 0x0000000000014000, Flags 0x0000000000000000, UUID 2b4e7d0f-8be8-8980-bcd6-fb5af4bdd2b9, Type 0x77036cd4, Active False vbmeta_b: Offset 0x000000004faae000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID e48a0a7c-573d-d470-b8a0-3ab54eab5951, Type 0x77036cd4, Active False dtbo_b: Offset 0x000000004fabe000, Length 0x0000000001800000, Flags 0x0000000000000000, UUID 7d496821-c59f-28df-09be-b05d22640ae8, Type 0x77036cd4, Active False uefisecapp_b: Offset 0x00000000512be000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID 574633db-42be-75fc-9aa6-d49fa4e1f2d0, Type 0x77036cd4, Active False multiimgoem_b: Offset 0x00000000514be000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 91722262-7eb8-194b-45e6-5458953f8936, Type 0x77036cd4, Active False multiimgqti_b: Offset 0x00000000514c6000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 5b58289c-a104-f846-c7a8-5050273b300b, Type 0x77036cd4, Active False vm-linux_b: Offset 0x00000000514ce000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID 920e9461-93f4-8d90-8f95-0f367701ed02, Type 0x77036cd4, Active False featenabler_b: Offset 0x00000000534ce000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 258c6960-c612-e3a8-24aa-1b1afd31cf63, Type 0x77036cd4, Active False imagefv_b: Offset 0x00000000534ee000, Length 0x0000000000200000, Flags 0x0000000000000001, UUID 5658e448-f517-088e-8758-de7f87d649ec, Type 0x77036cd4, Active False devinfo: Offset 0x00000000536ee000, Length 0x0000000000001000, Flags 0x1000000000000000, UUID 738a5451-2cfb-3cfc-6aad-533bb5194fa4, Type 0x65addcf4, Active False dip: Offset 0x00000000536ef000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID c6df84ca-b6b6-e231-b8c6-c8b9418ca80d, Type 0x4114b077, Active False apdp: Offset 0x00000000537ef000, Length 0x0000000000040000, Flags 0x0000000000000000, UUID 6aadcc03-5034-893b-0420-c6eee0338f26, Type 0xe6e98da2, Active False msadp: Offset 0x000000005382f000, Length 0x0000000000040000, Flags 0x0000000000000000, UUID 4861e35e-89d7-c71a-7c31-863fec3a07cb, Type 0xed9e8101, Active False spunvm: Offset 0x000000005386f000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID ade7eac0-032a-0956-8437-04d8281779e3, Type 0xe42e2b4c, Active False limits: Offset 0x000000005586f000, Length 0x0000000000001000, Flags 0x1000000000000000, UUID 13763098-175b-e83e-e705-f8b13f246b7b, Type 0x10a0c19c, Active False limits-cdsp: Offset 0x0000000055870000, Length 0x0000000000001000, Flags 0x1000000000000000, UUID 15a949d0-2996-6e9b-c359-5723d947b7a0, Type 0x545d3707, Active False logfs: Offset 0x0000000055871000, Length 0x0000000000800000, Flags 0x0000000000000000, UUID 54a533bb-913a-0155-9c6d-4991af7707e2, Type 0xbc0330eb, Active False logdump: Offset 0x0000000056071000, Length 0x0000000004000000, Flags 0x0000000000000000, UUID 01e1f151-d3df-c902-7ad8-ead2d756214e, Type 0x5af80809, Active False storsec: Offset 0x000000005a071000, Length 0x0000000000020000, Flags 0x1000000000000000, UUID 2e5c44eb-349b-a86c-9c83-9d90c79cc8c1, Type 0x2db45fe, Active False uefivarstore: Offset 0x000000005a091000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID fa86c3ac-b153-11c1-cdad-33f6dd7dca56, Type 0x165bd6bc, Active False secdata: Offset 0x000000005a111000, Length 0x0000000000007000, Flags 0x1000000000000000, UUID d7a61a73-1c4f-526e-633d-bbc2a06488eb, Type 0x76cfc7ef, Active False vm-keystore: Offset 0x000000005a118000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID cbd6c1ff-6b1e-47ab-df17-2d4114a757e0, Type 0x665fe2a8, Active False vm-data: Offset 0x000000005a138000, Length 0x0000000000400000, Flags 0x0000000000000000, UUID bec3623a-b133-cd5f-907e-20fb1ce6a142, Type 0xc9bb2aa8, Active False Total disk size:0x0000000080000000, sectors:0x0000000000080000 Parsing Lun 5: GPT Table: ------------- ALIGN_TO_128K_2: Offset 0x0000000000006000, Length 0x000000000001a000, Flags 0x1000000000000000, UUID 8be3057b-358f-e385-7bdc-438fccd15329, Type 0x6891a3b7, Active False modemst1: Offset 0x0000000000020000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID bece0f7e-9775-688b-c675-17973b186328, Type 0xebbeadaf, Active False modemst2: Offset 0x0000000000220000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID dd2b343d-0c24-aea7-ca95-c271b3f8536f, Type 0xa288b1f, Active False fsg: Offset 0x0000000000420000, Length 0x0000000000200000, Flags 0x1000000000000000, UUID 79c5aa1b-5984-ed64-9af9-56e509d94fb8, Type 0x638ff8e2, Active False fsc: Offset 0x0000000000620000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 1edbb2a6-63c3-b357-2802-f992c7137312, Type 0x57b90a16, Active False mdm1m9kefs3: Offset 0x0000000000640000, Length 0x0000000000200000, Flags 0x1000000000000000, UUID be178c05-4190-b0be-94da-021930d35aa1, Type 0xbf64fb9c, Active False mdm1m9kefs1: Offset 0x0000000000840000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID 09019f9d-560f-9a31-9cb5-98609495dbec, Type 0x2290be64, Active False mdm1m9kefs2: Offset 0x0000000000a40000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID c7b11387-09a4-4232-cb99-63634dfd38de, Type 0x346c26d1, Active False mdm1m9kefsc: Offset 0x0000000000c40000, Length 0x0000000000001000, Flags 0x0000000000000000, UUID 29d044b8-38a3-6c6e-f1d5-6b94515d3212, Type 0x5cb43a64, Active False Total disk size:0x0000000002000000, sectors:0x0000000000002000
Entering EDL mode
Hold power and both volume buttons for ~15 seconds.
Rooting, running ADB as root
- Download stock firmware from https://portal.lynx-r.com/downloads/firmware/lynx-r-1/
- Download OTA extractor from https://github.com/StevenDoesStuffs/android-ota-extractor
- Download Magisk from https://github.com/topjohnwu/Magisk/releases
- Download/build https://github.com/tiann/adb_root
---
- Install Magisk on the headset using ADB, copy boot.img to internal storage and patch it.
- Download patched boot.img
- Flash it using Qualcomm EDL mode
- After flashing it, copy adb_root Magisk module to internal storage and install it.
- You may use ADB as root now (to dump partitions etc). This module breaks scrcpy.
Flashing stock firmware/unbricking
- Download newest firmware package from Lynx: https://portal.lynx-r.com/api/public/ota/firmware/download/latest-qfil
- Download EDL tool: https://github.com/bkerler/edl
- Reboot to EDL by holding
vol+up
andvol+down
(both, do not press the power button) for 15 seconds. Connect USB cable to your workstation. - Flash the headset using the following commands:
edl --loader=prog_firehose_ddr.elf qfil rawprogram_unsparse0.xml patch0.xml . edl --loader=prog_firehose_ddr.elf qfil rawprogram1.xml patch1.xml . edl --loader=prog_firehose_ddr.elf qfil rawprogram2.xml patch2.xml . edl --loader=prog_firehose_ddr.elf qfil rawprogram3.xml patch3.xml . edl --loader=prog_firehose_ddr.elf qfil rawprogram4.xml patch4.xml . edl --loader=prog_firehose_ddr.elf qfil rawprogram5.xml patch5.xml .
- Reboot the device by issuing command
edl --loader=prog_firehose_ddr.elf reset
or holding power button for 15 seconds.
Essentially, it boils down to:
#!/usr/bin/env bash
mkdir -p ~/Desktop/lynx
cd ~/Desktop/lynx
wget https://portal.lynx-r.com/api/public/ota/firmware/download/latest-qfil
git clone https://github.com/bkerler/edl.git
unzip *.zip
cd lynx-pvt-user*
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram_unsparse0.xml patch0.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram1.xml patch1.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram2.xml patch2.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram3.xml patch3.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram4.xml patch4.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram5.xml patch5.xml .
./edl/edl --loader=prog_firehose_ddr.elf reset