Jump to content

Lynx R1 (lynx-r1)

From postmarketOS Wiki
Lynx R1
Lynx R1 showing fastfetch over ssh)
Lynx R1 showing fastfetch over ssh)
Manufacturer Lynx
Name R1
Codename lynx-r1
Released 2023
Type headset
Hardware
Chipset Qualcomm Snapdragon XR2 (SM8250)
CPU Octa-core (1x2.84 GHz Cortex-A77
3x2.42 GHz Cortex-A77
4x1.80 GHz Cortex-A55)
GPU Adreno 650
Display 3200x1600 (1600x1600 per eye)
Storage 128 GB UFS 3.1
Memory 6 GB LPDDR5
Architecture aarch64
Software
Original software
The software and version the device was shipped with.
Android 12
Extended version
The most recent supported version from the manufacturer.
Android
postmarketOS
Category testing
Mainline
Instead of a Linux kernel fork, it is possible to run (Close to) Mainline.
yes
Device package device-lynx-r1
Kernel package linux-lynx-r1
Features
Flashing
It is possible to flash the device with pmbootstrap flasher.
Broken
USB Networking
After connecting the device with USB to your PC, you can connect to it via telnet (initramfs) or SSH (booted system).
Works
Battery
Charging and battery level reporting works
Broken
Screen
Display works. Ideally with sleep mode and brightness control.
Partial
Multimedia
3D Acceleration
Broken
Audio
Audio playback, microphone, headset and buttons.
Broken
Camera
Broken
Connectivity
Bluetooth
Broken
Miscellaneous
USB OTG
USB On-The-Go or USB-C Role switching
Broken
Sensors
Accelerometer
Auto screen rotation works in desktops e.g. Phosh or Plasma Mobile
Broken

Contributors

Users owning this device

  • Ellyqw (Notes: Year of spatial Linux desktop???)
  • Kcxt (Notes: With JTAG breakout)


Table of hardware

Component Model Notes
SoC Qualcomm Snapdragon XR2 SM8250, codename "kona"
UFS WDC SDINFDK4-128G WD iNAND MC EU521, 128GB UFS 3.1
SD reader MMC SoC interface
Audio codec Qualcomm WCD9385
Speaker amplifier Qualcomm WSA8815
Displays JDI/BOE LPM021M528C (x2) DSI0/DSI1
Display backlight MPS MP3387LGRT
Wi-Fi Qualcomm QCA6390 PCI-E
Bluetooth Nordic Semi nRF52840 SPI
IR Cameras OmniVision OV9282 (x2)
Passtrough cameras OmniVision OV4689 (x2) CSI2/3
Accel/gyro TDK ICM42688 SPI
Magnetometer Bosch BMM150
Proximity SensorTek STK3X3X
Buck converter Texas Instruments LP3907 i2c1 0x61, Likely for fan PWM
Fan controller Analog Devices LTC1695 i2c1 0x74
USB-C MUX/Audio Switch Onsemi FSA4480 i2c15 0x43
Charging IC Qualcomm SMB1390 i2c15 0x10
Battery Compal 8600mAh

Flashing

Firmware on this device is *really* broken, fastboot doesn't work.

Do not attempt to switch active slots, it will hard-brick your device (requiring EDL recovery).

Thankfully, vendor of this device ships firehose EDL loader in publicly available image (link in section "Flashing stock firmware").

pmbootstrap install
pmbootstrap export
./edl --loader=prog_firehose_ddr.elf w dtbo_a /tmp/postmarketOS-export/dtbo.img
./edl --loader=prog_firehose_ddr.elf w boot_a /tmp/postmarketOS-export/boot.img
./edl --loader=prog_firehose_ddr.elf w userdata /tmp/postmarketOS-export/lynx-r1.img

Please make a full backup of device's storage using EDL first!

If anything would go wrong, you'll still be able to restore device-specific calibration data!

You will need ~128GB of free disk space: ./edl --loader=prog_firehose_ddr.elf rf flash.bin --memory=ufs

Developer notes

  1. UART is at address 0x00a90000 (&uart12)
  2. Firmware sets up framebuffer as 3200x1600 (reg = <0x0 0x9c000000 0x0 (3200 * 1600 * 4)>;).
  3. Reserved memory is almost the same as SoC default, with two exceptions:
    	reserved-memory {
    		res_xbl_uefi_log_region: memory@80880000 {
    			reg = <0x0 0x80880000 0x0 0x14000>;
    			no-map;
    		};
    
    		framebuffer: memory@9c000000 {
    			reg = <0x0 0x9c000000 0x0 0x2300000>;
    			no-map;
    		};
    	};
    
  4. Device-specific calibration data seems to be stored in persist, which corresponds to /dev/sda2.
  5. Firmware is stored in hyp_a, which corresponds to /dev/sde3. Use https://github.com/linux-msm/pil-squasher to combine elfs into mbn.

Bootloader log

Bootloader log

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.XF.3.2-00366-SM8250-1
S - IMAGE_VARIANT_STRING=Soc8250LAA
S - OEM_IMAGE_VERSION_STRING=vBuild1GXV7
S - Boot Interface: UFS
S - Secure Boot: Off
S - Boot Config @ 0x00786070 = 0x00000001
S - JTAG ID @ 0x00786130 = 0x200ce0e1
S - OEM ID @ 0x00786138 = 0x00000000
S - Serial Number @ 0x00786134 = 0xb9fc008c
S - OEM Config Row 0 @ 0x007841e0 = 0x0000000000000000
S - OEM Config Row 1 @ 0x007841e8 = 0x0000000000000000
S - Feature Config Row 0 @ 0x007841f8 = 0x0040200000000400
S - Feature Config Row 1 @ 0x00784200 = 0xc000000000000000
S - Core 0 Frequency, 1516 MHz
S - PBL Patch Ver: 5
S - PBL freq: 600 MHZ
D -      6209 - pbl_apps_init_timestamp
D -    164460 - bootable_media_detect_timestamp
D -      1054 - bl_elf_metadata_loading_timestamp
D -       716 - bl_hash_seg_auth_timestamp
D -      6613 - bl_elf_loadable_segment_loading_timestamp
D -      5528 - bl_elf_segs_hash_verify_timestamp
D -      7020 - bl_sec_hash_seg_auth_timestamp
D -       820 - bl_sec_segs_hash_verify_timestamp
D -        33 - pbl_populate_shared_data_and_exit_timestamp
S -    192453 - PBL, End
B -    206180 - SBL1, Start
B -    207766 - SBL1 BUILD @ 21:12:41 on Feb 29 2024
B -    209321 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
D -      1647 - sbl1_hw_init
D -         0 - boot_flash_init
B -    407480 - UFS INQUIRY ID: WDC     SDINFDK4-128G   1270
B -    410377 - UFS Boot LUN: 1
D -       884 - Auth Metadata
D -    226828 - sbl1_xblconfig_init
D -        31 - boot_config_data_table_default_init
B -    436333 - Using default CDT
D -        61 - boot_config_data_table_init
B -    436363 - CDT Version:3,Platform ID:8,Major ID:1,Minor ID:0,Subtype:1
D -      7625 - sbl1_hw_platform_pre_ddr
D -         0 - devcfg init
B -    451949 - PM: PM 0=0x8000028000000080:0x0 
B -    452010 - PM: PM 1=0x8000018000000040:0x0 
B -    452071 - PM: PM 2=0x8000018000000020:0x0 
B -    452132 - PM: PM 5=0x8000018000000040:0x0 
B -    452193 - PM: POWER ON by KPDPWR, POWER OFF by PS_HOLD
B -    455151 - PM: PMA_2 PON:KPD ON:PON OFF:DVDD
B -    455151 - PM: PMA_3 PON:DC WR:KPD ON:PON POFF:KPD OFF:DVDD FAULT1:UVLO FAULT2:WD S3:WD
B -    555039 - PM: SET_VAL:Skip
B -    555588 - PM: PSI: b0x00_v0x53
B -    559126 - PM: Device Init # SPMI Transn: 5314
B -    568520 - PM: Driver Init # SPMI Transn: 560
B -    581482 - PM: battery Id: 100572
B -    581696 - PM: APSD result: 255
B -    581696 - PM: APSD in progress
B -    581818 - PM: Vbatt: 3869; Ibatt: 255
B -    582001 - PM: CHG Init # SPMI Transn: 51
D -    138013 - pmic XBL init
D -     27541 - vsense_railway_cpr init
D -    165554 - sbl1_hw_pre_ddr_init
D -        31 - boot_dload_handle_forced_dload_timeout
D -      1738 - sbl1_load_ddr_training_data
D -      1860 - sbl1_ddr_set_params
B -    628513 - eCDT MRR - Data Starting Address: 0x09066D00
B -    630709 - DSF version = 156.8.18
B -    630709 - Manufacturer ID = 6, Device Type = 8
B -    630709 - Rank 0 size = 4096 MB, Rank 1 size = 4096 MB
D -     19581 - sbl1_ddr_init
D -         0 - boot_pre_ddi_entry
B -    631014 - do_ddr_training, Start
B -    658220 - DDR: Start of DDR Training Restore
B -    667645 - Frequency = 1805 MHz
B -    667645 - DDR: End of DDR Training Restore
D -     36722 - do_ddr_training, Delta
D -     36844 - sbl1_do_ddr_training
D -         0 - sbl1_hand_control_to_devprog_ddr
D -       976 - boot_ddi_entry
B -    668834 - Pimem init cmd, entry
D -     10736 - Pimem init cmd, exit
D -     11041 - sbl1_post_ddr_init
D -        31 - sbl1_hw_init_secondary
B -    680211 - APDP Image Load, Start
D -       824 - Auth Metadata
D -       457 - Segments hash check
D -      2531 - APDP Image Loaded, Delta - (8204 Bytes)
D -         0 - boot_dload_dump_security_regions
B -    684237 - usb: UFS Serial - 55b7d44c
B -    684267 - usb: fedl, vbus_low
D -      1525 - boot_dload_check
D -         0 - boot_cache_set_memory_barrier
D -         0 - boot_smem_debug_init
D -       366 - boot_smem_init
D -         0 - boot_smem_alloc_for_minidump
B -    684786 - PM: SMEM Chgr Info Write Success
D -        92 - boot_smem_store_pon_status
D -        30 - sbl1_hw_platform_smem
D -        61 - boot_ddr_share_data_to_aop
D -       518 - boot_clock_init_rpm
D -         0 - boot_vsense_copy_to_smem
D -        31 - boot_share_flash_data
D -         0 - boot_populate_ram_partition_table
D -        61 - boot_populate_ddr_details_shared_table
D -         0 - sbl1_tlmm_init
D -         0 - sbl1_efs_handle_cookies
D -        30 - boot_apt_test
B -    685884 - OEM_MISC Image Load, Start
D -       732 - Auth Metadata
D -       274 - Segments hash check
D -      2440 - OEM_MISC Image Loaded, Delta - (8080 Bytes)
B -    688446 - QTI_MISC Image Load, Start
D -         0 - QTI_MISC Image Loaded, Delta - (0 Bytes)
B -    696101 - PM: PM Total Mem Allocated: 2940 
D -      7655 - sbl1_pm_aop_pre_init_wrapper
B -    696132 - AOP Image Load, Start
D -       976 - Auth Metadata
D -      1952 - Segments hash check
D -      8998 - AOP Image Loaded, Delta - (198304 Bytes)
B -    705099 - QSEE Dev Config Image Load, Start
D -       915 - Auth Metadata
D -       580 - Segments hash check
D -      3599 - QSEE Dev Config Image Loaded, Delta - (45248 Bytes)
B -    708698 - QSEE Image Load, Start
D -      4361 - Auth Metadata
D -     20313 - Segments hash check
D -     94611 - QSEE Image Loaded, Delta - (3146373 Bytes)
D -       183 - sbl1_hw_play_vibr
B -    803705 - SEC Image Load, Start
D -         0 - SEC Image Loaded, Delta - (0 Bytes)
B -    803705 - CPUCPFW Image Load, Start
D -         0 - CPUCPFW Image Loaded, Delta - (0 Bytes)
B -    803736 - QHEE Image Load, Start
D -       793 - Auth Metadata
D -      2989 - Segments hash check
D -      6649 - QHEE Image Loaded, Delta - (444216 Bytes)
B -    810415 - OEM_HYP Image Load, Start
D -         0 - OEM_HYP Image Loaded, Delta - (0 Bytes)
B -    810415 - STI Image Load, Start
D -         0 - STI Image Loaded, Delta - (0 Bytes)
B -    810964 - APPSBL Image Load, Start
D -       823 - Auth Metadata
D -     13024 - Segments hash check
D -     31751 - APPSBL Image Loaded, Delta - (2514944 Bytes)
D -         0 - sbl1_appsbl_arch_determination
B -    843142 - SBL1, End
D -    636962 - SBL1, Delta
S - Flash Throughput, 84000 KB/s  (6441775 Bytes,  75988 us)
S - DDR Frequency, 1555 MHz
UEFI Start     [ 1057]
 - 0x09FC01000 [ 1061] Sec.efi
ASLR        : ON
DEP         : ON (RTB)
Timer Delta : +0 mS
RAM Entry 0 : Base 0x080000000  Size 0x03B800000
RAM Entry 1 : Base 0x180000000  Size 0x100000000
RAM Entry 2 : Base 0x0C0000000  Size 0x0C0000000
Total RAM   : 0x1FB800000
Multithread : ON (Lib ver 1.1)
CPU Cores   : 8 (init 1)
CONF File   : uefiplatLA.cfg
UEFI Ver    : 5.0.240229.BOOT.XF.3.2-00366-SM8250-1
Build Info  : 64b Feb 29 2024 21:13:18
Boot Device : UFS
PROD Mode   : FALSE
Retail      : FALSE
 - 0x09B546000 [ 1139] DxeCore.efi
Loading DxeCore at 0x009B546000 EntryPoint=0x009B547000
HOBLIST address in DXE = 0x9B336018
FV Hob            0x9FC00000 - 0x9FE65FFF
FV Hob            0x9B580000 - 0x9BB3CFFF
FV2 Hob           0x9B580000 - 0x9BB3CFFF
                  631008B0-B2D1-410A-8B49-2C5C4D8ECC7E - 9E21FD93-9C72-4C15-8C4B-E77F1DB2D792
 - 0x09B4E5000 [ 1145] EnvDxe.efi
 - 0x09B4DB000 [ 1145] RscRtDxe.efi
 - 0x09B4D3000 [ 1146] SCHandlerRtDxe.efi
 - 0x09B00A000 [ 1146] RuntimeDxe.efi
 - 0x09B4C0000 [ 1146] ArmCpuDxe.efi
 - 0x09B4B7000 [ 1147] ArmGicDxe.efi
 - 0x09B4B0000 [ 1147] MetronomeDxe.efi
 - 0x09B4A8000 [ 1148] ArmTimerDxe.efi
 - 0x09B49E000 [ 1148] SmemDxe.efi
 - 0x09B44D000 [ 1148] DALSys.efi
 - 0x09B444000 [ 1149] HWIODxeDriver.efi
 - 0x09B439000 [ 1149] ChipInfo.efi
 - 0x09B431000 [ 1149] PlatformInfoDxeDriver.efi
 - 0x09B426000 [ 1149] HALIOMMU.efi
 - 0x09B412000 [ 1150] ULogDxe.efi
 - 0x09B40A000 [ 1150] CmdDbDxe.efi
 - 0x09B402000 [ 1150] PwrUtilsDxe.efi
 - 0x09B3EF000 [ 1151] NpaDxe.efi
 - 0x09B3DF000 [ 1151] RpmhDxe.efi
 - 0x09B3D7000 [ 1152] PdcDxe.efi
 - 0x09B3CB000 [ 1152] VcsDxe.efi
 - 0x09B396000 [ 1153] ClockDxe.efi
 >>> Cluster 0:     1516 MHz
 >>> Cluster 2:     1324 MHz
 - 0x09B38B000 [ 1162] SPMI.efi
 - 0x09B382000 [ 1167] ShmBridgeDxe.efi
 - 0x09B376000 [ 1168] ScmDxe.efi
 - 0x09B36D000 [ 1169] DALTLMM.efi
 - 0x09AFF6000 [ 1169] ResetRuntimeDxe.efi
 - 0x09B33D000 [ 1170] PmicDxe.efi
PM0: 30, PM1: 32, PM2: 31, PM3: 33, PM5: 36, 
 - 0x09AFEB000 [ 1200] DiskIoDxe.efi
 - 0x09AFDF000 [ 1200] PartitionDxe.efi
 - 0x09B002000 [ 1200] EnglishDxe.efi
 - 0x09AFD4000 [ 1200] FvSimpleFileSystem.efi
 - 0x09AFB9000 [ 1201] SdccDxe.efi
 - 0x09AF9C000 [ 1201] UFSDxe.efi
UFS INQUIRY ID: WDC     SDINFDK4-128G   1270
UFS Boot LUN: 1
 - 0x09AF8C000 [ 1252] Fat.efi
 - 0x09AF7D000 [ 1252] TzDxe.efi
 - 0x09AF71000 [ 1256] VariableDxe.efi
AppReg Init:12 mS
Embedded Images Supported and Commonlibs loaded
 - 0x09AD69000 [ 1333] FeatureEnablerDxe.efi
 - 0x09AD61000 [ 1368] QcomWDogDxe.efi
HW Wdog Setting from PCD : Disabled
 - 0x09AD57000 [ 1369] DDRInfoDxe.efi
 - 0x09AD13000 [ 1370] DisplayDxe.efi
DisplayDxe: Initialize ABL!
PanelInitSeq: Panel_CheckOverride: false
PanelInitSeq: Select JDI since GPIO_141 is 0
PanelInitSeq: Panel_Default_PowerUp
PanelInitSeq: GPIO_133 LOW
PanelInitSeq: GPIO_133 HIGH
DisplayDxe: MDP_PMIC_MODULE_CONTROLTYPE_IBB_LAB_LCD
PanelInitSeq: MDPPlatformConfigure: MDPPLATFORM_CONFIG_POWERUP: Setup VSP & VSN to 5.7V
PanelInitSeq: Panel_Default_Peripheral_Power: LCDB, IBB=5700, LAB=-5700
PanelInitSeq: GPIO_134 HIGH
PanelInitSeq: GPIO_140 HIGH
PanelInitSeq: GPIO_144 HIGH
PanelInitSeq: Enter MDPPLATFORM_CONFIG_GETPANELCONFIG
PanelInitSeq: Get the panel id 5 xml configurations
DisplayDxe: Panel ID:0x00000000 [LCD] 
DisplayDxe: Resolution 3200x1600 (2 intf)
PanelInitSeq: SetupPlatformPanelConfig PanelInitialized
MDPLib: MDPDetect: MDPSetupDSCProperty
Number of DSC encoders: 4
Layer mixer split enabled: 1
Block prediction enabled: 1
Bits per component: 8
Bits per pixel: 12
Compression Ratio: 2
DSC slice height: 40
DSC slice width: 400
DSC slice per packet: 2
PanelInitSeq: Reset GPIO 75 Assert State=0
PanelInitSeq: Panel_ResetStateExec GPIO 75 ResetAssertTime=3000us
PanelInitSeq: Panel_ResetStateExec GPIO 75 state0=1, state1=0, state2=1
 - 0x09AD0A000 [ 1450] PILProxyDxe.efi
 - 0x09ACF0000 [ 1451] PILDxe.efi
PanelInitSeq: Sending initial code
pil-abl Done t=31ms s=2ms a=6ms f=20ms
pil-imagefv Done t=34ms s=3ms a=5ms f=25ms
 - 0x09ACE4000 [ 1530] SPSSDxe.efi
SPSSDxe [spss_iar_main] I: IAR-STATE is NOT ACTIVATED [0x0], Exit now
Overriding PIL cfg by caller
pil-SPSS Done t=17ms s=5ms a=10ms f=0ms
pil-SPSS Boot subsys, Done
SPSSDxe_LogPoffReason :: Poff_reason :128
 - 0x09AC41000 [ 1554] CPRDxe.efi
 - 0x09AC53000 [ 1556] WatchdogTimer.efi
 - 0x09AC2C000 [ 1556] ASN1X509Dxe.efi
 - 0x09AC22000 [ 1557] SecRSADxe.efi
 - 0x09AC01000 [ 1557] VerifiedBootDxe.efi
 - 0x09AC5A000 [ 1558] EmbeddedMonotonicCounter.efi
PanelInitSeq: UpdateDisplayParams
 - 0x09AC19000 [ 1574] RealTimeClock.efi
 - 0x09AC11000 [ 1575] PrintDxe.efi
 - 0x09AB56000 [ 1575] DevicePathDxe.efi
 - 0x09ABF9000 [ 1576] CapsuleRuntimeDxe.efi
 - 0x09AB0D000 [ 1576] HiiDatabase.efi
 - 0x09AB4C000 [ 1577] FontDxe.efi
 - 0x09AA55000 [ 1582] QcomBds.efi
 - 0x09AB3A000 [ 1584] SPI.efi
 - 0x09AAE7000 [ 1584] I2C.efi
 - 0x09AADD000 [ 1585] AdcDxe.efi
 - 0x09AB6A000 [ 1585] UsbPwrCtrlDxe.efi
 - 0x09AA12000 [ 1586] QcomChargerDxeLA.efi
 - 0x09AB31000 [ 1596] ChargerExDxe.efi
 - 0x09AA3B000 [ 1597] UsbfnDwc3Dxe.efi
 - 0x09AAC6000 [ 1597] XhciPciEmulation.efi
 - 0x09A9FB000 [ 1598] XhciDxe.efi
 - 0x09A9E8000 [ 1598] UsbBusDxe.efi
 - 0x09AA94000 [ 1599] UsbKbDxe.efi
 - 0x09AAD1000 [ 1600] UsbMassStorageDxe.efi
 - 0x09A9B5000 [ 1600] UsbConfigDxe.efi
UsbConfigLibOpenProtocols: PMI version (0x20)
UsbConfigInit: Dual Role Enabled on Port Number: 0
UsbConfigInit: UsbConfigInit, not start on port: 0, mode 0
UsbConfigInit: Dual Role Enabled on Port Number: 1
UsbConfigInit: UsbConfigInit, not start on port: 1, mode 0
UsbConfigInit: UsbPwrCtrl No. of Ports = 2
 - 0x09A9DE000 [ 1604] ButtonsDxe.efi
 - 0x09AAA7000 [ 1606] TsensDxe.efi
 - 0x09A992000 [ 1608] LimitsDxe.efi
APC1 IDDQ WC 0 , L2:0, CPU[0]:175, CPU[1]:175, CPU[2]:175, CPU[3]:175
 APC1 Total 700
LoadSys  TIME 0ms
tsens  TIME 1ms
scm  TIME 2ms
Load CPU 0 Slp: 0x69, Int: 0xFFFFFF96
Load CPU 1 Slp: 0xE0, Int: 0xFFFFFF65
Load CPU 2 Slp: 0x6A, Int: 0x142
Load CPU 3 Slp: 0x107, Int: 0xFFFFFFB1
Load GPU 0 Slp: 0x97, Int: 0xFFFFFFF6 adc_min:0x166 adc_max:0x168
Load NPU 0 Slp: 0x2C, Int: 0x13
LmhIsenseInit Pre CPU  TIME 0ms
GLD IDDQ WC 0
LmhIsenseSubSysEntry Post SubSysEntryCb  TIME 0ms
LmhIsenseSubSysEntry Post LmhIsenseSubSysInit  TIME 0ms
LmhIsenseInitSubSys Post SubSysEntry  TIME 0ms
LmhIsenseInitSubSys Post SubSysTrim  TIME 0ms
LmhIsenseInitSubSys Post SubSysExit  TIME 0ms
LmhIsenseInit Post CPU  TIME 0ms
GPU IDDQ 40
LmhIsenseSubSysEntry Post SubSysEntryCb  TIME 0ms
LmhIsenseSubSysEntry Post LmhIsenseSubSysInit  TIME 0ms
LmhIsenseInitSubSys Post SubSysEntry  TIME 0ms
LmhIsenseInitSubSys Post SubSysTrim  TIME 0ms
LmhIsenseInitSubSys Post SubSysExit  TIME 0ms
LmhIsenseInit Post GPU  TIME 1ms
Entering in func1 of NPU  TIME 1ms
NPU IDDQ 46
LmhIsenseSubSysEntry Post SubSysEntryCb  TIME 0ms
LmhIsenseSubSysEntry Post LmhIsenseSubSysInit  TIME 0ms
LmhIsenseInitSubSys Post SubSysEntry  TIME 0ms
LmhIsenseInitSubSys Post SubSysTrim  TIME 0ms
LmhIsenseInitSubSys Post SubSysExit  TIME 0ms
LmhIsenseInit Post NPU  TIME 2ms
isense  TIME 5ms
ISENSE TOTAL TIME 5ms
 - 0x09A3B8000 [ 1621] GpiDxe.efi
 - 0x09A385000 [ 1658] HashDxe.efi
 - 0x09A36D000 [ 1659] CipherDxe.efi
 - 0x09A355000 [ 1660] MacDxe.efi
 - 0x09A9AD000 [ 1661] RngDxe.efi
 - 0x09A9A5000 [ 1661] SimpleTextInOutSerial.efi
 - 0x09A3DB000 [ 1662] ConPlatformDxe.efi
 - 0x09A3AA000 [ 1663] ConSplitterDxe.efi
 - 0x09A3CF000 [ 1664] GraphicsConsoleDxe.efi
 - 0x09A33A000 [ 1664] SecurityStubDxe.efi
 - 0x09A347000 [ 1665] UsbMsdDxe.efi
 - 0x09A31F000 [ 1666] UsbDeviceDxe.efi
 - 0x09A332000 [ 1667] UsbInitDxe.efi
BDS Entry      [ 1667] 
Disp init wait [ 1667] 
-----------------------------
Platform Init  [ 1800] BDS
Boot Cycle : 6
Run  Cycle : 6
UEFI Ver   : 5.0.240229.BOOT.XF.3.2-00366-SM8250-1
Platform           : MTP
Chip Name          : SM8250
Chip Ver           : 2.1
Chip Serial Number : 0xB9FC008C
Silver cluster Core 0 Freq: 1516 MHz
-----------------------------
 - 0x0998BE000 [ 1827] QcomChargerApp.efi
Loading Battery Profile for Fuel Gauge Start  : 1867881
2, PmicDxe:: PmicFgSram_LoadBattProfile StateOfCharge,Voltage,ChargerCurrent,Temp 
2, PmicDxe:: PmicFgSram_LoadBattProfile Battery Status 58,3903,2,17 
Loading Battery Profile for Fuel Gauge End  : 2550809
Successfully synced all UEFI tables
UEFI Total : 1559 ms
POST Time      [ 2616] OS Loader
 - 0x098DA0000 [ 2621] LinuxLoader.efi
Loader Build Info: Feb 29 2024 16:51:01
LinuxLoader Load Address to debug ABL: 0x98DA1000
LinuxLoaderEntry Address: 0x98DA13D8
SetThreadStackEnv () kernel version = 0x10005 
AllocateUnSafeStackPtr CurrentThread = 0x9BC0A598 with linktable 
BootStats: ID-0: BootStatClockCount:86010
VB: Non-secure device: Security State: (0xF7F)
VB: RWDeviceState: Succeed using devinfo!
Selected Lun : 0, handle: 0 does not have partition record, ignore
Selected Lun : 1, handle: 0 does not have partition record, ignore
Selected Lun : 2, handle: 0 does not have partition record, ignore
Selected Lun : 3, handle: 0 does not have partition record, ignore
Selected Lun : 4, handle: 0 does not have partition record, ignore
Selected Lun : 5, handle: 0 does not have partition record, ignore
Multi Slot boot is supported
GetActiveSlot: found active slot _a, priority 3
Key Stroke Read
ScanCode = (0x102), UnicodeChar =(0x0)
ShiftState=(0x0), ToggleState==(0x0)
Platform Info : 0x8
Total DDR Size: 0x00000001FB800000 
GPIO_125 = 1
GPIO_6 = 1
GPIO_7 = 0
Phase ID:0x6
GPIO_28 = 0
GPIO_29 = 1
GPIO_30 = 0
Project ID:0x2
Raw Chip Id   : 0x164
Chip Version  : 0x20001
Foundry Id    : 0x1
Chip BaseBand    : apq
Fusion Value    : 0
HLOS SubType    : 0x0
KeyPress:258, BootReason:0
Fastboot=0, Recovery:0
GetVmData: making ScmCall to get HypInfo
GetVmData: No Vm data present! Status = (0x3)
VM Hyp calls not present
GetActiveSlot: found active slot _a, priority 3
Active Slot _a is bootable
Get BootLun =1
Booting from slot (_a)
Booting Into Mission Mode
MultiSlot true, partition name boot_a
AVB version 2
GetActiveSlot: found active slot _a, priority 3
Slot suffix _a Part Attr 0x77000000000000
Slot _a is bootable
Slot: _a, allow verification error: true
GetActiveSlot: found active slot _a, priority 3
GetActiveSlot: found active slot _a, priority 3
Loading Image Start : 2640 ms
Loading Image Done : 2640 ms
Total Image Read size : 4096 Bytes
Header version  2
GetActiveSlot: found active slot _a, priority 3
Invalid vendor_boot partition. Skipping
avb_slot_verify.c:514: DEBUG: Loading vbmeta struct from partition 'vbmeta_a'.
read from vbmeta_a, 0x10000 bytes at Offset 0x0, partition size 0x10000
Load Image vbmeta_a total time: 1 ms 
ValidateVbmetaPublicKey PublicKeyLength 1032, PublicKeyMetadataLength 0
ValidateVbmetaPublicKey OutIsTrusted 1, UserKey 0
ReadRollbackIndex Location 0, RollbackIndex 0
avb_slot_verify.c:514: DEBUG: Loading vbmeta struct from partition 'vbmeta_system_a'.
read from vbmeta_system_a, 0x10000 bytes at Offset 0x0, partition size 0x10000
Load Image vbmeta_system_a total time: 1 ms 
ReadRollbackIndex Location 2, RollbackIndex 0
avb_slot_verify.c:184: DEBUG: boot_a: Loading entire partition.
BootStats: ID-4: Kernel Load Start:87879
BootStats: ID-4: BootStatClockCount:87879
read from boot_a, 0x6000000 bytes at Offset 0x0, partition size 0x6000000
Load Image boot_a total time: 114 ms 
BootStats: ID-5: Kernel Load Done:91623
avb_slot_verify.c:260: DEBUG: boot_a: success: Image verification completed
avb_slot_verify.c:184: DEBUG: dtbo_a: Loading entire partition.
read from dtbo_a, 0x1800000 bytes at Offset 0x0, partition size 0x1800000
Load Image dtbo_a total time: 27 ms 
avb_slot_verify.c:260: DEBUG: dtbo_a: success: Image verification completed
vbmeta_a uuid: f9ee474a-4ffa-0f3d-0b8c-257e7fc735b7
State: Unlocked, AvbSlotVerify returned OK, continue boot
Requested Partition: boot
Loaded Partition: boot
Requested Partition: dtbo
Loaded Partition: boot
Loaded Partition: dtbo
Total loaded partition 2
Boot Image Header Info...
Image Header version     : 0x2
Kernel Size 1            : 0x2DBE010
Kernel Size 2            : 0x0
Ramdisk Size             : 0x13BECB
DTB Size                 : 0x1870E9
keymaster app id 1
KeyMasterStartApp success AppId: 0x1, Major: 4
DateSupport: 1
keymaster app id 1
KeyMasterStartApp success AppId: 0x1, Major: 4
KeyMasterSetRotAndBootState success
keymaster app id 1
KeyMasterStartApp success AppId: 0x1, Major: 4
VB2: Authenticate complete! boot state is: orange
VB2: boot state: orange(1)
No Ffbm cookie found, ignore: Not Found
Boot State is : 1
Display menu is not enabled!
Device is unlocked, Skipping boot verification
Sending Milestone Call
No Ffbm cookie found, ignore: Not Found
Memory Base Address: 0x80000000
Kernel Load Address: 0xA0080000
Kernel Size Actual: 0x2DBF000
Second Size Actual: 0x0
Ramdisk Load Address: 0xAFEC3000
Ramdisk Size Actual: 0x13C000
Ramdisk Offset: 0x2DC0000
Device Tree Load Address: 0xAFCC2000
Boardsocid = 164, Dtsocid = 164
BoardSocRev = 20001, DtSocRev =20001
BoardFoundry = 10000, DtFoundry = 0
BoardVariant = 8, DtVariant = 0
BoardSubtype = 1, DtSubType = 0
qcom,pmic-id does not exit
Bestmatch = CC00
Boardsocid = 164, Dtsocid = 164
BoardSocRev = 20001, DtSocRev =20000
BoardFoundry = 10000, DtFoundry = 0
BoardVariant = 8, DtVariant = 0
BoardSubtype = 1, DtSubType = 0
qcom,pmic-id does not exit
Bestmatch = CC00
Boardsocid = 164, Dtsocid = 164
BoardSocRev = 20001, DtSocRev =10000
BoardFoundry = 10000, DtFoundry = 0
BoardVariant = 8, DtVariant = 0
BoardSubtype = 1, DtSubType = 0
qcom,pmic-id does not exit
Bestmatch = CC00
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
qcom,board-id does not exist (or) (-1) is not a multiple of (8)
qcom,pmic-id does not exit
rtic-id (1)
MpData : (0) 
MpData : (0) 
MpData : (E0) 
MpData : (9) 
MpData : (80) 
MpData : (FF) 
MpData : (FF) 
MpData : (FF) 
MpData : (0) 
MpData : (0) 
MpData : (D8) 
MpData : (1) 
MpData : (0) 
MpData : (0) 
MpData : (0) 
MpData : (0) 
MpData : (88) 
MpData : (5) 
MpData : (0) 
MpData : (0) 
MpData : (EA) 
MpData : (67) 
MpData : (59) 
MpData : (99) 
MpData : (DE) 
MpData : (7A) 
MpData : (D7) 
MpData : (B8) 
MpData : (7) 
MpData : (5B) 
MpData : (F8) 
MpData : (5B) 
MpData : (60) 
MpData : (7C) 
MpData : (B7) 
MpData : (BF) 
MpData : (2C) 
MpData : (7E) 
MpData : (C9) 
MpData : (E7) 
MpData : (89) 
MpData : (7) 
MpData : (B6) 
MpData : (39) 
MpData : (4B) 
MpData : (83) 
MpData : (D8) 
MpData : (22) 
MpData : (CA) 
MpData : (DD) 
MpData : (DE) 
MpData : (3) 
Length of MpData (52)
MpData (9A32FB98) 
Kernel base address (A0080000)
Kernel mode check 32/64: KernelLoadAddr->magic_64 (644D5241) KERNEL64_HDR_MAGIC = 644D5241
Bestmatch = CC00
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 10001
qcom,board-id does not match
Board dt prop search failed.
Dtbo count = 0 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 10101
qcom,board-id does not match
Board dt prop search failed.
Dtbo count = 1 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1010008
BoardSubtype = 1, DtSubType = 1
qcom,pmic-id does not exit
Dtbo count = 2 LocalBoardDtMatch = 0x72000000001400
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1050008
qcom,board-id major version does not match
BoardSubtype = 1, DtSubType = 1
qcom,pmic-id does not exit
Dtbo count = 3 LocalBoardDtMatch = 0x72000000000400
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 10008
BoardSubtype = 1, DtSubType = 0
qcom,pmic-id does not exit
Dtbo count = 4 LocalBoardDtMatch = 0x68000000001400
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 3010008
BoardSubtype = 1, DtSubType = 3
subtype-id doesnot match
Board dt prop search failed.
Dtbo count = 5 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1001F
qcom,board-id does not match
Board dt prop search failed.
Dtbo count = 6 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1020008
qcom,board-id major version does not match
BoardSubtype = 1, DtSubType = 1
qcom,pmic-id does not exit
Dtbo count = 7 LocalBoardDtMatch = 0x72000000000400
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = B
qcom,board-id does not match
Board dt prop search failed.
Dtbo count = 8 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1000F
qcom,board-id does not match
Board dt prop search failed.
Dtbo count = 9 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 2010008
BoardSubtype = 1, DtSubType = 2
subtype-id doesnot match
Board dt prop search failed.
Dtbo count = 10 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1030008
qcom,board-id major version does not match
BoardSubtype = 1, DtSubType = 1
qcom,pmic-id does not exit
Dtbo count = 11 LocalBoardDtMatch = 0x72000000000400
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1020001
qcom,board-id does not match
Board dt prop search failed.
Dtbo count = 12 LocalBoardDtMatch = 0x1
qcom, msm-id does not exist (or) is (-1) not a multiple of (8)
BoardVariant = 8, DtVariant = 1040008
qcom,board-id major version does not match
BoardSubtype = 1, DtSubType = 1
qcom,pmic-id does not exit
Dtbo count = 13 LocalBoardDtMatch = 0x72000000000400
DTs list: NULL
Override DTB: GetBlkIOHandles failed loading user_dtbo!
Apply Overlay total time: 367 ms 
UpdateCmdLine VBCmdLine present len 440
VB: Non-secure device: Security State: (0xF7F)
VB: RWDeviceState: Succeed using devinfo!
PROJECT_ID = 2, ProjectName = GLV9
PHASE_ID = 6, PhaseName = PVT
GetActiveSlot: found active slot _a, priority 3
Succeed to append ProjectName into cmdline
Succeed to append PhaseName into cmdline
Cmdline: console=ttyMSM0,115200n8 earlycon=msm_geni_serial,0xa90000 androidboot.hardware=qcom androidboot.console=ttyMSM0 androidboot.memcg=1 lpm_levels.sleep_disabled=1 video=vfb:640x400,bpp=32,memsize=3072000 msm_rtb.filter=0x237 service_locator.enable=
RAM Partitions
Add Base: 0x0000000080000000 Available Length: 0x000000003B800000 
Add Base: 0x0000000180000000 Available Length: 0x0000000100000000 
Add Base: 0x00000000C0000000 Available Length: 0x00000000C0000000 
DDR Header Revision =0x30000
DDR deviceType:8
ddr_device_type is added to memory node
ddr_device_rank, HBB not supported in Revision=0x30000
Version=1
Addr=0x9C000000
Size=0x02300000
ERROR: Could not get splash memory region node
kaslr-Seed is added to chosen node
Start DT fstab node update: 3375 ms
Node: fstab found.
Property:status found for sub-node:vendor	Property:ok
Disabling node status :vendor
End DT fstab node update: 3376 ms
Failed to get CPU defective[1] part. Not Found
Update lpd property
Update Device Tree total time: 52 ms 
FreeVerifiedBootResource
Shutting Down UEFI Boot Services: 3393 ms

Partition layout

LUN0 = sda, LUN1 = sdb, LUN2 = sdc, LUN3 = sdd, LUN4 = sde, LUN5 = sdf

Parsing Lun 0:

GPT Table:
-------------
ssd:                 Offset 0x0000000000006000, Length 0x0000000000002000, Flags 0x0000000000000000, UUID a8a793f8-e91c-ce6a-7faa-f2e87f26f0d4, Type 0x2c86e742, Active False
persist:             Offset 0x0000000000008000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID 3f239b9e-2997-e960-6602-9e6b735e2377, Type 0x6c95e238, Active False
misc:                Offset 0x0000000002008000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID 75ef8d1c-44d0-38f1-56ea-6fdb0f62438d, Type 0x82acc91f, Active False
keystore:            Offset 0x0000000002108000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID dcdf88f0-7815-ecf3-6c84-4f19c005d871, Type 0xde7d4029, Active False
frp:                 Offset 0x0000000002188000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 2608dc72-0827-06cc-ac44-feae93a3cc64, Type 0x91b72d4d, Active False
super:               Offset 0x0000000002208000, Length 0x0000000180000000, Flags 0x0000000000000000, UUID d0dc466f-fcd8-9892-4bde-98ffe4348ad0, Type 0x89a12de1, Active False
recovery_a:          Offset 0x0000000182208000, Length 0x0000000006400000, Flags 0x0000000000000000, UUID fda893c5-e8f4-e31a-9344-b3de1c9b57e2, Type 0xd504d6db, Active False
recovery_b:          Offset 0x0000000188608000, Length 0x0000000006400000, Flags 0x0000000000000000, UUID 04c0a0ea-5942-bb4d-a015-02c682813641, Type 0x352b8083, Active False
vbmeta_system_a:     Offset 0x000000018ea08000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID 1d2357cf-de33-d84e-66d9-772de53410cb, Type 0x1344859d, Active False
vbmeta_system_b:     Offset 0x000000018ea18000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID df636f99-e58a-dc89-31da-758e4e1b88b0, Type 0xfe3ab853, Active False
metadata:            Offset 0x000000018ea28000, Length 0x0000000001000000, Flags 0x0000000000000000, UUID b8e1a041-83a5-24a1-94bf-1cac69527307, Type 0x988a98c9, Active False
vm-system_a:         Offset 0x000000018fa28000, Length 0x0000000008000000, Flags 0x0000000000000000, UUID 6bf1f713-35e3-df13-db48-3cd80af4fcbc, Type 0xc5f681cc, Active False
vm-system_b:         Offset 0x0000000197a28000, Length 0x0000000008000000, Flags 0x0000000000000000, UUID 853b754a-ff72-aad4-f746-cf4823ba79fa, Type 0x77036cd4, Active False
rawdump:             Offset 0x000000019fa28000, Length 0x0000000008000000, Flags 0x0000000000000000, UUID ecbbd8f3-ca63-cf99-e0f9-2f4bdac4021b, Type 0x66c9b323, Active False
userdata:            Offset 0x00000001a7a28000, Length 0x0000001ba05d3000, Flags 0x0000000000000000, UUID 235e7f77-8987-c13e-89f2-f664582cb738, Type 0x1b81e7e6, Active False

Total disk size:0x0000001d48000000, sectors:0x0000000001d48000


Parsing Lun 1:

GPT Table:
-------------
xbl_a:               Offset 0x0000000000006000, Length 0x0000000000380000, Flags 0x1000000000000000, UUID 25f47e27-9709-6ffe-1d08-420a773b8f4a, Type 0xdea0ba2c, Active False
xbl_config_a:        Offset 0x0000000000386000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID d03a0ca1-0577-066d-7afa-d19e024c9cb8, Type 0x5a325ae4, Active False

Total disk size:0x0000000000800000, sectors:0x0000000000000800


Parsing Lun 2:

GPT Table:
-------------
xbl_b:               Offset 0x0000000000006000, Length 0x0000000000380000, Flags 0x1000000000000000, UUID feab6a6b-b18c-4b0d-040d-0ba485a8e684, Type 0xdea0ba2c, Active False
xbl_config_b:        Offset 0x0000000000386000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID abd70d59-dafc-c032-d5f5-0917b12c3cfa, Type 0x5a325ae4, Active False

Total disk size:0x0000000000800000, sectors:0x0000000000000800


Parsing Lun 3:

GPT Table:
-------------
ALIGN_TO_128K_1:     Offset 0x0000000000006000, Length 0x000000000001a000, Flags 0x1000000000000000, UUID 758ff0a5-018e-e561-a193-1e9cd9a436e0, Type 0xfde1604b, Active False
cdt:                 Offset 0x0000000000020000, Length 0x0000000000020000, Flags 0x1000000000000000, UUID ac466ec1-ff63-40d9-258b-711d85641464, Type 0xa19f205f, Active False
ddr:                 Offset 0x0000000000040000, Length 0x0000000000200000, Flags 0x1000000000000000, UUID ace980dc-e61f-1520-0e66-50fab3f59d06, Type 0x20a0c19c, Active False
mdmddr:              Offset 0x0000000000240000, Length 0x0000000000100000, Flags 0x0000000000000000, UUID 0bade780-3473-36e4-c8dd-99c9a758247e, Type 0x433ee193, Active False

Total disk size:0x0000000002000000, sectors:0x0000000000002000


Parsing Lun 4:

GPT Table:
-------------
aop_a:               Offset 0x0000000000006000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 3e16fee8-b525-f2a8-a39b-2f95470e95c5, Type 0xd69e90a5, Active False
tz_a:                Offset 0x0000000000086000, Length 0x0000000000400000, Flags 0x1000000000000000, UUID ffb68830-8360-5f31-88aa-a03a66cbd945, Type 0xa053aa7f, Active False
hyp_a:               Offset 0x0000000000486000, Length 0x0000000000800000, Flags 0x0000000000000000, UUID 4e39fd67-b915-21c4-5b6f-fe3e596905bc, Type 0xe1a6a689, Active False
modem_a:             Offset 0x0000000000c86000, Length 0x0000000018b00000, Flags 0x1000000000000000, UUID fdd21b19-2d2e-a85e-95bf-08a2e01ad402, Type EFI_BASIC_DATA, Active False
bluetooth_a:         Offset 0x0000000019786000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID 7e7c1ca4-b875-89a6-b9d8-6a39fa798235, Type 0x6cb747f1, Active False
mdtpsecapp_a:        Offset 0x0000000019886000, Length 0x0000000000400000, Flags 0x1000000000000000, UUID 36622a16-831e-50e6-cec8-a1c8c2b41ada, Type 0xea02d680, Active False
mdtp_a:              Offset 0x0000000019c86000, Length 0x0000000002000000, Flags 0x1000000000000000, UUID 0f102be7-9eba-8d95-82db-916e55fdfadb, Type 0x3878408a, Active False
abl_a:               Offset 0x000000001bc86000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID 35b7ac75-c622-db4d-9f69-90919ad8b402, Type 0xbd6928a1, Active False
dsp_a:               Offset 0x000000001bd86000, Length 0x0000000004000000, Flags 0x1000000000000000, UUID 8e450342-9d99-6e63-f0e4-332a6621571a, Type 0x7efe5010, Active False
keymaster_a:         Offset 0x000000001fd86000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID f0e24957-c41f-111f-6e1e-66840862f555, Type 0xa11d2a7c, Active False
boot_a:              Offset 0x000000001fe06000, Length 0x0000000006000000, Flags 0x0000000000000000, UUID b226cfd6-cbfb-4728-a246-c2dd65d4a96a, Type 0x20117f86, Active False
cmnlib_a:            Offset 0x0000000025e06000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 0ab3b383-3b8f-b50d-b884-3e3bd96f9e40, Type 0x73471795, Active False
cmnlib64_a:          Offset 0x0000000025e86000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 68593eab-b664-14b1-5242-afcd734c64ad, Type 0x8ea64893, Active False
devcfg_a:            Offset 0x0000000025f06000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 0bd31431-f895-2039-012a-74378c367523, Type 0xf65d4b16, Active False
qupfw_a:             Offset 0x0000000025f26000, Length 0x0000000000014000, Flags 0x0000000000000000, UUID 4ff03feb-1ef8-47f0-a413-9f55e0b1a8a5, Type 0x21d1219f, Active False
vbmeta_a:            Offset 0x0000000025f3a000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID 8bb32c8a-e014-89bc-9800-2c8a42b86a9f, Type 0x4b7a15d6, Active False
dtbo_a:              Offset 0x0000000025f4a000, Length 0x0000000001800000, Flags 0x0000000000000000, UUID 2a0c324d-43fc-345f-d082-953c26a435bb, Type 0x24d0d418, Active False
uefisecapp_a:        Offset 0x000000002774a000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID 36e24b78-7542-dce5-dd79-35759ede1925, Type 0xbe8a7e08, Active False
multiimgoem_a:       Offset 0x000000002794a000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 190951d9-aaee-0a85-5982-769aca6f0b35, Type 0xe126a436, Active False
multiimgqti_a:       Offset 0x0000000027952000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 2a3a1151-8e4b-6679-140a-a03554f4e2e8, Type 0x846c6f05, Active False
vm-linux_a:          Offset 0x000000002795a000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID 42521e52-ea48-2a58-a5f8-d47f82e8aaa1, Type 0xcb67e78c, Active False
featenabler_a:       Offset 0x000000002995a000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 8238bcde-5fb3-46b0-4348-5b7c50937fa7, Type 0x741813d2, Active False
imagefv_a:           Offset 0x000000002997a000, Length 0x0000000000200000, Flags 0x0000000000000001, UUID 0acc22c6-5433-36c7-b5f7-96dfc63af564, Type 0x17911177, Active False
aop_b:               Offset 0x0000000029b7a000, Length 0x0000000000080000, Flags 0x0000000000000000, UUID 7c39c6bf-fbc1-3f2e-f5a1-f0609cdd18eb, Type 0x77036cd4, Active False
tz_b:                Offset 0x0000000029bfa000, Length 0x0000000000400000, Flags 0x0000000000000000, UUID 79635f6d-537d-83c1-6964-baa9bccc92b1, Type 0x77036cd4, Active False
hyp_b:               Offset 0x0000000029ffa000, Length 0x0000000000800000, Flags 0x0000000000000000, UUID ae41863e-e211-36c4-77ca-70acd4ba2c0f, Type 0x77036cd4, Active False
modem_b:             Offset 0x000000002a7fa000, Length 0x0000000018b00000, Flags 0x1000000000000000, UUID 1a437920-0e41-a2e3-2cfc-841f1b4f63bf, Type 0x77036cd4, Active False
bluetooth_b:         Offset 0x00000000432fa000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID 640a8dcc-9cb7-70b2-fd4a-8c3b239fb5a9, Type 0x77036cd4, Active False
mdtpsecapp_b:        Offset 0x00000000433fa000, Length 0x0000000000400000, Flags 0x1000000000000000, UUID 8283c0e9-1b34-bf62-a20f-5c0fe8f9a8eb, Type 0x77036cd4, Active False
mdtp_b:              Offset 0x00000000437fa000, Length 0x0000000002000000, Flags 0x1000000000000000, UUID 5eaae248-c516-9b47-f17e-1de2c8e44f7c, Type 0x77036cd4, Active False
abl_b:               Offset 0x00000000457fa000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID f97d0b8c-f96a-0122-1ab4-9f19c9d3a044, Type 0x77036cd4, Active False
dsp_b:               Offset 0x00000000458fa000, Length 0x0000000004000000, Flags 0x1000000000000000, UUID 9b70e01f-ccbd-8ec6-31b2-c9773bc74d96, Type 0x77036cd4, Active False
keymaster_b:         Offset 0x00000000498fa000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 2a183404-1d11-6b44-6aba-d46261564ba8, Type 0x77036cd4, Active False
boot_b:              Offset 0x000000004997a000, Length 0x0000000006000000, Flags 0x0000000000000000, UUID 0c9882a3-1ef8-d221-a03c-2ed12d6d92b1, Type 0x77036cd4, Active False
cmnlib_b:            Offset 0x000000004f97a000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID f27b704a-104d-6010-7028-dd42f00cfcf1, Type 0x77036cd4, Active False
cmnlib64_b:          Offset 0x000000004f9fa000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID 61abb087-a294-f441-54f5-43487b8132fc, Type 0x77036cd4, Active False
devcfg_b:            Offset 0x000000004fa7a000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 0294b780-4ce7-e3f1-2d4f-cf0a6a2b772e, Type 0x77036cd4, Active False
qupfw_b:             Offset 0x000000004fa9a000, Length 0x0000000000014000, Flags 0x0000000000000000, UUID 2b4e7d0f-8be8-8980-bcd6-fb5af4bdd2b9, Type 0x77036cd4, Active False
vbmeta_b:            Offset 0x000000004faae000, Length 0x0000000000010000, Flags 0x1000000000000000, UUID e48a0a7c-573d-d470-b8a0-3ab54eab5951, Type 0x77036cd4, Active False
dtbo_b:              Offset 0x000000004fabe000, Length 0x0000000001800000, Flags 0x0000000000000000, UUID 7d496821-c59f-28df-09be-b05d22640ae8, Type 0x77036cd4, Active False
uefisecapp_b:        Offset 0x00000000512be000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID 574633db-42be-75fc-9aa6-d49fa4e1f2d0, Type 0x77036cd4, Active False
multiimgoem_b:       Offset 0x00000000514be000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 91722262-7eb8-194b-45e6-5458953f8936, Type 0x77036cd4, Active False
multiimgqti_b:       Offset 0x00000000514c6000, Length 0x0000000000008000, Flags 0x1000000000000000, UUID 5b58289c-a104-f846-c7a8-5050273b300b, Type 0x77036cd4, Active False
vm-linux_b:          Offset 0x00000000514ce000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID 920e9461-93f4-8d90-8f95-0f367701ed02, Type 0x77036cd4, Active False
featenabler_b:       Offset 0x00000000534ce000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 258c6960-c612-e3a8-24aa-1b1afd31cf63, Type 0x77036cd4, Active False
imagefv_b:           Offset 0x00000000534ee000, Length 0x0000000000200000, Flags 0x0000000000000001, UUID 5658e448-f517-088e-8758-de7f87d649ec, Type 0x77036cd4, Active False
devinfo:             Offset 0x00000000536ee000, Length 0x0000000000001000, Flags 0x1000000000000000, UUID 738a5451-2cfb-3cfc-6aad-533bb5194fa4, Type 0x65addcf4, Active False
dip:                 Offset 0x00000000536ef000, Length 0x0000000000100000, Flags 0x1000000000000000, UUID c6df84ca-b6b6-e231-b8c6-c8b9418ca80d, Type 0x4114b077, Active False
apdp:                Offset 0x00000000537ef000, Length 0x0000000000040000, Flags 0x0000000000000000, UUID 6aadcc03-5034-893b-0420-c6eee0338f26, Type 0xe6e98da2, Active False
msadp:               Offset 0x000000005382f000, Length 0x0000000000040000, Flags 0x0000000000000000, UUID 4861e35e-89d7-c71a-7c31-863fec3a07cb, Type 0xed9e8101, Active False
spunvm:              Offset 0x000000005386f000, Length 0x0000000002000000, Flags 0x0000000000000000, UUID ade7eac0-032a-0956-8437-04d8281779e3, Type 0xe42e2b4c, Active False
limits:              Offset 0x000000005586f000, Length 0x0000000000001000, Flags 0x1000000000000000, UUID 13763098-175b-e83e-e705-f8b13f246b7b, Type 0x10a0c19c, Active False
limits-cdsp:         Offset 0x0000000055870000, Length 0x0000000000001000, Flags 0x1000000000000000, UUID 15a949d0-2996-6e9b-c359-5723d947b7a0, Type 0x545d3707, Active False
logfs:               Offset 0x0000000055871000, Length 0x0000000000800000, Flags 0x0000000000000000, UUID 54a533bb-913a-0155-9c6d-4991af7707e2, Type 0xbc0330eb, Active False
logdump:             Offset 0x0000000056071000, Length 0x0000000004000000, Flags 0x0000000000000000, UUID 01e1f151-d3df-c902-7ad8-ead2d756214e, Type 0x5af80809, Active False
storsec:             Offset 0x000000005a071000, Length 0x0000000000020000, Flags 0x1000000000000000, UUID 2e5c44eb-349b-a86c-9c83-9d90c79cc8c1, Type 0x2db45fe, Active False
uefivarstore:        Offset 0x000000005a091000, Length 0x0000000000080000, Flags 0x1000000000000000, UUID fa86c3ac-b153-11c1-cdad-33f6dd7dca56, Type 0x165bd6bc, Active False
secdata:             Offset 0x000000005a111000, Length 0x0000000000007000, Flags 0x1000000000000000, UUID d7a61a73-1c4f-526e-633d-bbc2a06488eb, Type 0x76cfc7ef, Active False
vm-keystore:         Offset 0x000000005a118000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID cbd6c1ff-6b1e-47ab-df17-2d4114a757e0, Type 0x665fe2a8, Active False
vm-data:             Offset 0x000000005a138000, Length 0x0000000000400000, Flags 0x0000000000000000, UUID bec3623a-b133-cd5f-907e-20fb1ce6a142, Type 0xc9bb2aa8, Active False

Total disk size:0x0000000080000000, sectors:0x0000000000080000


Parsing Lun 5:

GPT Table:
-------------
ALIGN_TO_128K_2:     Offset 0x0000000000006000, Length 0x000000000001a000, Flags 0x1000000000000000, UUID 8be3057b-358f-e385-7bdc-438fccd15329, Type 0x6891a3b7, Active False
modemst1:            Offset 0x0000000000020000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID bece0f7e-9775-688b-c675-17973b186328, Type 0xebbeadaf, Active False
modemst2:            Offset 0x0000000000220000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID dd2b343d-0c24-aea7-ca95-c271b3f8536f, Type 0xa288b1f, Active False
fsg:                 Offset 0x0000000000420000, Length 0x0000000000200000, Flags 0x1000000000000000, UUID 79c5aa1b-5984-ed64-9af9-56e509d94fb8, Type 0x638ff8e2, Active False
fsc:                 Offset 0x0000000000620000, Length 0x0000000000020000, Flags 0x0000000000000000, UUID 1edbb2a6-63c3-b357-2802-f992c7137312, Type 0x57b90a16, Active False
mdm1m9kefs3:         Offset 0x0000000000640000, Length 0x0000000000200000, Flags 0x1000000000000000, UUID be178c05-4190-b0be-94da-021930d35aa1, Type 0xbf64fb9c, Active False
mdm1m9kefs1:         Offset 0x0000000000840000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID 09019f9d-560f-9a31-9cb5-98609495dbec, Type 0x2290be64, Active False
mdm1m9kefs2:         Offset 0x0000000000a40000, Length 0x0000000000200000, Flags 0x0000000000000000, UUID c7b11387-09a4-4232-cb99-63634dfd38de, Type 0x346c26d1, Active False
mdm1m9kefsc:         Offset 0x0000000000c40000, Length 0x0000000000001000, Flags 0x0000000000000000, UUID 29d044b8-38a3-6c6e-f1d5-6b94515d3212, Type 0x5cb43a64, Active False

Total disk size:0x0000000002000000, sectors:0x0000000000002000

Entering EDL mode

Hold power and both volume buttons for ~15 seconds.

Rooting, running ADB as root

  1. Download stock firmware from https://portal.lynx-r.com/downloads/firmware/lynx-r-1/
  2. Download OTA extractor from https://github.com/StevenDoesStuffs/android-ota-extractor
  3. Download Magisk from https://github.com/topjohnwu/Magisk/releases
  4. Download/build https://github.com/tiann/adb_root

---

  1. Install Magisk on the headset using ADB, copy boot.img to internal storage and patch it.
  2. Download patched boot.img
  3. Flash it using Qualcomm EDL mode
  4. After flashing it, copy adb_root Magisk module to internal storage and install it.
  5. You may use ADB as root now (to dump partitions etc). This module breaks scrcpy.

Flashing stock firmware/unbricking

  1. Download newest firmware package from Lynx: https://portal.lynx-r.com/api/public/ota/firmware/download/latest-qfil
  2. Download EDL tool: https://github.com/bkerler/edl
  3. Reboot to EDL by holding vol+up and vol+down (both, do not press the power button) for 15 seconds. Connect USB cable to your workstation.
  4. Flash the headset using the following commands:
    edl --loader=prog_firehose_ddr.elf qfil rawprogram_unsparse0.xml patch0.xml .
    edl --loader=prog_firehose_ddr.elf qfil rawprogram1.xml patch1.xml .
    edl --loader=prog_firehose_ddr.elf qfil rawprogram2.xml patch2.xml .
    edl --loader=prog_firehose_ddr.elf qfil rawprogram3.xml patch3.xml .
    edl --loader=prog_firehose_ddr.elf qfil rawprogram4.xml patch4.xml .
    edl --loader=prog_firehose_ddr.elf qfil rawprogram5.xml patch5.xml .
    
  5. Reboot the device by issuing command edl --loader=prog_firehose_ddr.elf reset or holding power button for 15 seconds.

Essentially, it boils down to:

#!/usr/bin/env bash
mkdir -p ~/Desktop/lynx
cd ~/Desktop/lynx
wget https://portal.lynx-r.com/api/public/ota/firmware/download/latest-qfil
git clone https://github.com/bkerler/edl.git
unzip *.zip
cd lynx-pvt-user*
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram_unsparse0.xml patch0.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram1.xml patch1.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram2.xml patch2.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram3.xml patch3.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram4.xml patch4.xml .
./edl/edl --loader=prog_firehose_ddr.elf qfil rawprogram5.xml patch5.xml .
./edl/edl --loader=prog_firehose_ddr.elf reset

See also