Develop Bugs

[DEVs ONLY] Flash Galaxy S without computer : introducing redbend_ua

Hello there
This is a surprise, but software able to flash the phone without any computer intervention was already on it, since the beginning.
Searching for a way to install my future lag fix easily, I remember that there was an "OTA" boot mode.
I know, today nobody saw an OTA on any Galaxy S smartpone (except maybe One on the AT&T Captivate?), but the software is still there.
How does this work :
Basically Linux boots a ramdisk, loading kernel modules and running an init process who start the whole Android experience (bootmode=) or just the recovery mode (bootmode=2).
Other bootmodes are used for battery loading only and Over The Air updates.
In this case, init.rc ask init to start "/sbin/redbend_ua all".
By default this software search for software updates in /data/fota and on similar places in the /sdcard.
It could prove useful another day, but you still have to be root to ask your device to reboot in a specific bootmode
The nice part is that we can use redbend_ua manually too, to do many impossible things before :
command list, pretty comprehensive.
Code:
img [partition name] [delta file] [device node] [temp path]
fs [partition name] [delta file] [mount point] [temp path]
all
dump <source dev> <dest file>
restore <source file> <dest dev>
compare <dev1> <dev2>
png [png file name]
all
Possible usages :
- Flashing the kernel without Odin or any computer
- Backuping and Restoring a whole firmware, including stock one
- Doing more than one operation before automatic reboot through a list of commands in /data/fota/command (not tested yet)
- Messing with bootloaders and bricking your phone for good
Yeah, you must be really carefull this time. Samsung made some partitions read-only for a reason
Hopefully this new tool will be used by most ROM cooker, CyanogenMod, and ClockWorkMod
I'll make a update.zip + redbend_ua template soon if nobody comes up with one.
My Twitter for next news
Joined to this post : redbend_ua working binary. (some firmware ship a new binary that does not accept command line parameters)
-----
Old post, for the record :
Our Galaxy S in Eclair firmwares come with software able to provide update Over The Air.
This firmware is in /sbin directory, which means that it's in the kernel ramdisk.
Look at the output when running the binary without argument or appropriate file:
Code:
# redbend_ua
RedBend Update Agent 6,1,14,1
FOTA : Make Block Device Nodes
UA/(MakeBMLNodes): mknod path=/dev/block/bml4, dev_no=35076
UA/(MakeBMLNodes): mknod path=/dev/block/bml5, dev_no=35077
UA/(MakeBMLNodes): mknod path=/dev/block/bml7, dev_no=35079
UA/(MakeBMLNodes): mknod path=/dev/block/bml8, dev_no=35080
UA/(MakeBMLNodes): mknod path=/dev/block/bml11, dev_no=35083
lcd_init(498): start!
lcd_init(507): fb0 open success
lcd_init(514): width = 480, height = 800
UA/ check_existence: /data/fota/delta.Sbl
UA/(update_all): Check Delta : path_idx(0), part_idx(0), file_path((null)), cnt(0)
UA/ check_existence: /data/fota/delta.zImage
UA/(update_all): Check Delta : path_idx(0), part_idx(1), file_path((null)), cnt(0)
UA/ check_existence: /data/fota/delta.modem
UA/(update_all): Check Delta : path_idx(0), part_idx(2), file_path((null)), cnt(0)
UA/ check_existence: /data/fota/delta.platform
UA/(update_all): Check Delta : path_idx(0), part_idx(3), file_path((null)), cnt(0)
UA/ check_existence: /sdcard/Android/data/temp.fota.delta/delta.Sbl
UA/(update_all): Check Delta : path_idx(1), part_idx(0), file_path((null)), cnt(0)
UA/ check_existence: /sdcard/Android/data/temp.fota.delta/delta.zImage
UA/(update_all): Check Delta : path_idx(1), part_idx(1), file_path((null)), cnt(0)
UA/ check_existence: /sdcard/Android/data/temp.fota.delta/delta.modem
UA/(update_all): Check Delta : path_idx(1), part_idx(2), file_path((null)), cnt(0)
UA/ check_existence: /sdcard/Android/data/temp.fota.delta/delta.platform
UA/(update_all): Check Delta : path_idx(1), part_idx(3), file_path((null)), cnt(0)
fail!
Open /data/fota/fota.status
fsync after write: 0
And here is the result when you provide a fake zImage delta file:
Code:
RedBend Update Agent 6,1,14,1
FOTA : Make Block Device Nodes
UA/(MakeBMLNodes): mknod path=/dev/block/bml4, dev_no=35076
UA/(MakeBMLNodes): mknod path=/dev/block/bml5, dev_no=35077
UA/(MakeBMLNodes): mknod path=/dev/block/bml7, dev_no=35079
UA/(MakeBMLNodes): mknod path=/dev/block/bml8, dev_no=35080
UA/(MakeBMLNodes): mknod path=/dev/block/bml11, dev_no=35083
lcd_init(498): start!
lcd_init(507): fb0 open success
lcd_init(514): width = 480, height = 800
UA/ check_existence: /data/fota/delta.Sbl
UA/(update_all): Check Delta : path_idx(0), part_idx(0), file_path((null)), cnt(0)
UA/(update_all): Check Delta : path_idx(0), part_idx(1), file_path(/data/fota/delta.zImage), cnt(1)
UA/(update_all): Check Delta : path_idx(0), part_idx(1), file_path(/data/fota/delta.zImage), cnt(1)
UA/ check_existence: /data/fota/delta.modem
UA/(update_all): Check Delta : path_idx(0), part_idx(2), file_path((null)), cnt(1)
UA/ check_existence: /data/fota/delta.platform
UA/(update_all): Check Delta : path_idx(0), part_idx(3), file_path((null)), cnt(1)
page_msize: 4096, phy_unit_size: 262144
UA/ Sbl delta does NOT exist! Skip.
page_msize: 4096, phy_unit_size: 262144
UA/ check_existence: /data/fota/fota_zImage
page_msize: 4096, phy_unit_size: 262144
dev: /dev/block/bml8 partition size: 0x780000
40180008: ffff ffff ffff ffff ffff ffff ffff ffff ................
40180018: ffff ffff ffff ffff ffff ffff ffff ffff ................
40180028: ffff ffff ffff ffff ffff ffff ffff ffff ................
40180038: ffff ffff ffff ffff ffff ffff ffff ffff ................
signature: 0xffffffff
page_msize: 4096, phy_unit_size: 262144
common mark dev : /dev/block/bml8 partition size: 0x780000
0xffffffff
page_msize: 4096, phy_unit_size: 262144
page_msize: 4096, phy_unit_size: 262144
UA/(backup_devbml) src: /dev/block/bml7 partition size: 0x780000
UA/(backup_devbml) dst: /dev/block/bml8 partition size: 0x780000
UA/(backup_devbml) backup 128KB at 0x0
UA/(backup_devbml) backup 128KB at 0x40000
UA/(backup_devbml) backup 128KB at 0x80000
UA/(backup_devbml) backup 128KB at 0xc0000
UA/(backup_devbml) backup 128KB at 0x100000
UA/(backup_devbml) backup 128KB at 0x140000
UA/(backup_devbml) backup 128KB at 0x180000
UA/(backup_devbml) backup 128KB at 0x1c0000
UA/(backup_devbml) backup 128KB at 0x200000
UA/(backup_devbml) backup 128KB at 0x240000
UA/(backup_devbml) backup 128KB at 0x280000
UA/(backup_devbml) backup 128KB at 0x2c0000
UA/(backup_devbml) backup 128KB at 0x300000
UA/(backup_devbml) backup 128KB at 0x340000
UA/(backup_devbml) backup 128KB at 0x380000
UA/(backup_devbml) backup 128KB at 0x3c0000
UA/(backup_devbml) backup 128KB at 0x400000
UA/(backup_devbml) backup 128KB at 0x440000
UA/(backup_devbml) backup 128KB at 0x480000
UA/(backup_devbml) backup 128KB at 0x4c0000
UA/(backup_devbml) backup 128KB at 0x500000
UA/(backup_devbml) backup 128KB at 0x540000
UA/(backup_devbml) backup 128KB at 0x580000
UA/(backup_devbml) backup 128KB at 0x5c0000
UA/(backup_devbml) backup 128KB at 0x600000
UA/(backup_devbml) backup 128KB at 0x640000
UA/(backup_devbml) backup 128KB at 0x680000
UA/(backup_devbml) backup 128KB at 0x6c0000
UA/(backup_devbml) backup 128KB at 0x700000
UA/(backup_devbml) backup 128KB at 0x740000
page_msize: 4096, phy_unit_size: 262144
common mark dev : /dev/block/bml8 partition size: 0x780000
0xffffffff
page_msize: 4096, phy_unit_size: 262144
common mark dev : /dev/block/bml8 partition size: 0x780000
0xffffffff
UA/(RB_ImageUpdateMain): ++
UA/(RB_ImageUpdateMain) uPartitionName[zImage]
RB_GetBlockSize: returning 0x40000 (262144)
UA/(RB_UpdateImage): ++
UA/(RB_UpdateImage): Delta file name-/data/fota/delta.zImage
unicode_to_char : zImage
pDeviceDatum.pFirstPartitionData->partition_name: zImage
pDeviceDatum.pFirstPartitionData->partition_type: 0
pDeviceDatum.pFirstPartitionData->file_system_type: 0
unicode_to_char : /data/fota/delta.zImage
RB_OpenFile: Path:/data/fota/delta.zImage | Mode: RDONLY
Successful open() *pwHandle:4
[RB] Illegal field in the delta, or that the given delta is invalid
UA/(RB_UpdateImage) return value from RB_vRM_Update: 0x80000539
UA/(RB_UpdateImage): -- ret=-2147482311
UA/(RB_ImageUpdateMain) pCustomerPartData.updated = -1, rest = -1
UA/(RB_ImageUpdateMain): -- ret=-2147482311
page_msize: 4096, phy_unit_size: 262144
common mark dev : /dev/block/bml8 partition size: 0x780000
0xdeade002
UA/(update_all) Kernel update fail
fail!
Open /data/fota/fota.status
fsync after write: 0
Promising ! This software definitely has the ability to write on protected bml partitions.
Now wee need to find how to produce the .delta files

Sounds great Lets hope you guys can figure it all out.

I just send a message to Red Bend Software through their site.
Actually it may help to find any other delta file for their software. Without sample we won't go anywhere...
I hope they will be kind and answer!

Here is a list of interesting strings found in the binary :
Code:
UA/ Platform delta does NOT exist! Skip.
Can not open src file : %s
Can not open dst file : %s
UA/(%s) write %dbytes
UA/(%s) copy file %s->%s
fsync failed with return value: %d
fsync after write: %d
UA/ %s: %s
/dev/block/bml4
/data/fota/dump_sbl
/dev/block/bml7
/data/fota/dump_kernel
/dev/block/bml12
/data/fota/dump_modem
FOTA : Make Block Device Nodes
UA/(%s): mknod path=%s, dev_no=%u
Failed to open %s: %s
Open %s
lseek failed with return value: %d
read failed with return value: %d
success!
DONE
fail!
FAIL
FOTA
UA/ modem delta does NOT exist! Skip.
/data/fota/backup.modem
UA/ zImage delta does NOT exist! Skip.
/dev/block/bml8
UA/ Sbl delta does NOT exist! Skip.
UA/ERROR(%s) get dual sbl siginfo fail!!
/dev/block/bml5
UA/ERROR(%s) can't find vaild Sbl partitions
UA/ERROR(%s) SBL RAM partition alloc fail
UA/ERROR(%s) RB_ImageUpdateMain Fail ret=(0x%d)
/data/fota/command
/sdcard/Android/data/temp.fota.delta/command
UA/(%s) cache download
/cache/recovery
UA/(%s) create /cache/recovery directory
/cache/recovery/command
reboot recovery
UA/(%s): Check Delta : path_idx(%d), part_idx(%d), file_path(%s), cnt(%d)
SBL update fail
UA/(%s) %s
Kernel update fail
Modem update fail
Platform update fail
Post update fail
WARNNIG
Delta Not Exist
/data/fota
/sbin/images/fota.png
UA/(%s) test
Update Fail!!
/data/fota/fota.status
/data/fota/delta.Sbl
/data/fota/delta.zImage
/data/fota/delta.modem
/data/fota/delta.platform
/sdcard/Android/data/temp.fota.delta/delta.Sbl
/sdcard/Android/data/temp.fota.delta/delta.zImage
/sdcard/Android/data/temp.fota.delta/delta.modem
/sdcard/Android/data/temp.fota.delta/delta.platform
RedBend Update Agent %s
commands:
img [partition name] [delta file] [device node] [temp path]
fs [partition name] [delta file] [mount point] [temp path]
all
dump <source dev> <dest file>
restore <source file> <dest dev>
compare <dev1> <dev2>
png [png file name]
all
unknown
/data/fota/fota_Sbl
/data/fota/fota_zImage
Modem
/data/fota/fota_modem
/data/fota/fota_platform
/dev/block/bml11
OFNI
main
update_all
post_update
update_platform
update_modem
update_zImage
update_Sbl
file_copy
check_existence
MakeBMLNodes
UA/(%s): +
UA/(%s): %s (%lx %x)
UA/(%s): -
UA/(%s): %s (%lx %lx)
UA/(%s): memcpy(0x%x, 0x%x, 0x%x)
%07x:
%02x
%02x
BML_GET_DEV_INFO
page_msize: %d, phy_unit_size: %d
open device file
%s: bmldevice_open failed!
%s: bmldevice_info failed!
src: %s
dst: %s partition size: 0x%x
part_size: 0x%x
failed to read from %s (%s)
read finished
read %d bytes
src: %s partition size: 0x%x
dst: %s
failed to write to %s (%s)
done
UA/(%s) src: %s
UA/(%s) dst: %s partition size: 0x%x
UA/(%s) part_size: 0x%x
UA/(%s) read finished
UA/(%s) read %d bytes
UA/(%s) src: %s partition size: 0x%x
UA/(%s) dst: %s
UA/(%s) signature: 0x%x
*WARN* %s partition is already marked as invalid!
UA/(%s) done
page at 0x%x differ!
UA/(%s) backup 128KB at 0x%x
UA/(%s): ++
UA/(%s) 0x%x
UA/ERROR(%s) Valid partition signature is not invalid
UA/(%s): --
%s, invalide magic key(%x)!!
common mark dev : %s partition size: 0x%x
dev: %s partition size: 0x%x
signature: 0x%x
UA/(%s) dev: %s partition size: 0x%x
UA/ERROR(%s) Signature is not validate (%x)
UA/(%s) SBL, SBL2 partition are diffierent size, check your bml device node name
UA/ERROR(%s) Both partition has valid or invalid signature
UA/(%s) Valid Partition-%s, Update Partition-%s
restore_file
backup_block_file
restore_devbml
backup_devbml
store_dualsbl_partition
load_partition
mark_common_recovery
find_valid_partition
check_dualpartition_validation
ram_write_block
ram_read_block
nand_write_block
nand_read_block
bmldevice_get_size
Image size is bigger than partition!
reading NAND page
BML_UNLOCK_ALL
writing NAND page
6,1,14,1
RB_GetBlockSize
%s: returning 0x%x (%d)
RB_ReadBackupBlock
UA/(%s): %s: offset 0x%lx(%ld), size 0x%lx(%ld)
UA/ERROR(%s) open file %s failed.
UA/ open %s file success
UA/ERROR(%s) error in read size
RB_WriteBackupBlock
UA/(%s): offset 0x%lx(%ld), size 0x%lx(%ld)
UA/ERROR(%s) error in write size
RB_ImageUpdateMain
UA/(%s): ++
UA/(%s) uPartitionName[%s]
UA/(%s) pCustomerPartData.updated = %d, rest = %d
UA/(%s): -- ret=%d
RB_UpdateImage
UA/(%s): Delta file name-%s
pDeviceDatum.pFirstPartitionData->partition_name: %s
pDeviceDatum.pFirstPartitionData->partition_type: %d
pDeviceDatum.pFirstPartitionData->file_system_type: %d
UA/(%s) return value from RB_vRM_Update: 0x%x
unicode_to_char
%s : %s
RecursiveFolderCreater
%s path: %s
temppath: %s
mkdir result: %d errno: %d
RB_CopyFile
%s: %s -> %s
NULL file name find. Abort.
Open %s ENOENT %d
Open %s failed. Abort.
read %d, but write %d, abort.
RB_DeleteFile
%s: %s
unlink value: %d, errno: %d
RB_DeleteFolder
rmdir value: %d, errno: %d
RB_CreateFolder
%s: %s, mode:0x%x
RDONLY
WRONLY
RDWR
Unknown
RB_OpenFile
%s: Path:%s | Mode:
First open() with error %d
copy dir[]=%s
remove dir[]=%s
Fail create folder, Leave RB_OpenFile
After successful creating folder, fail open() with error %d
Successful open() *pwHandle:%ld
RB_ResizeFile
%s: handle %ld, dwSize %d
%s: ret %d handle %ld %d
RB_CloseFile
%s: wHandle = %ld
RB_WriteFile
%s: Handle:%ld , Pos:%ld , Size: %ld
lseek failed with return value: %d
Failed with return value: %d
Bytes Write: %d
fsync Failed with return value: %d
fsync after write: %d
RB_ReadFile
%s: Handle:%ld , Pos:%ld , Size: %ld
read failed with return value: %d
RB_GetFileSize
%s: %ld
lseek errno: %d
Returning Size = 0x%x
RB_Unlink
unlink failed with return value: %d
unlink with return value: %d
RB_Link
symlink failed with return value: %d, errno: %d
symlink with return value: %d
RB_VerifyLinkReference
readlink failed with return value: %d
not same linked path
same linked path
RB_GetFileType
stat failed with return value: %d errno: %d
sbuf.st_mode: %d
S_ISREG(sbuf.st_mode): %d
S_ISLNK(sbuf.st_mode): %d
stat->st_mode = symbolic link file
stat->st_mode = regular file
failed to lstat, err : %d
a2ch
%s : %d
Wrong attribute value: %d
a2ch : %c
chtoa
RB_SetFileAttributes
stat failed with return value: %d
sbuf.st_mode value: %d
ui8pAttribs value: %s
ui32AttribSize value: %ld
attrib_user value: %d
attrib_group value: %d
attrib_other value: %d
att_type value: %d
sbuf.st_mode | attrib: %d
chmod failed with return value: %d
chmod with return value: %d
pUserId value: %s
user_id value: %d
aGroupId value: %s
pGroupId value: %s
group_id value: %d
failed chown %d
success chown %d
RB_FSUpdateMain
UA/(%s) Partition name(%s), mount point(%s)
UA/(%s) pCustomerPartData.updated = %ld, rest = %ld
pDeviceDatum.pFirstPartitionData->partition_name: %s
pDeviceDatum.pFirstPartitionData->partition_type: %d
pDeviceDatum.pFirstPartitionData->file_system_type: %d
return value from RB_vRM_Update: 0x%x
%s/flagsFile
return value from unlink(%s): 0x%x
Installing software
Don't turn off the
phone and
connect the power
cable as possible.
System updated &
reboot now
gui_progress
UA/(%s): ++ uPercent(%d%), gv_delta_count=(%ld)
UA/(%s): -- Print Percent(%d%)
%3d %%
lcd_init
%s(%d): start!
/dev/graphics/fb0
%s(%d): fb0 open fail
%s(%d): fb0 open success
%s(%d): width = %d, height = %d
%s(%d): ioctl set info fail
%s(%d): Error: failed to map framebuffer device to memory.
%s(%d): ioctl start fail
Allocation error-
Current start: %d
Current finish: %d
Requested size: %d
Allocation error:
Current start: %d
Current finish: %d
Requested size: %d
It may accept commands somehow, like those :
img [partition name] [delta file] [device node] [temp path]
fs [partition name] [delta file] [mount point] [temp path]
all
dump <source dev> <dest file>
restore <source file> <dest dev>
compare <dev1> <dev2>
png [png file name]
all
I tried writing commands in /data/fota/command and /cache/recovery/command but the program does not follow my orders

ok it works when i flashed zImage
Code:
# redbend_ua restore /sdcard/jm5.zImage /dev/block/bml7
redbend_ua restore /sdcard/jm5.zImage /dev/block/bml7
RedBend Update Agent 6,1,14,1
FOTA : Make Block Device Nodes
lcd_init(498): start!
lcd_init(507): fb0 open success
lcd_init(514): width = 480, height = 800
page_msize: 4096, phy_unit_size: 262144
src: /sdcard/jm5.zImage
dst: /dev/block/bml7 partition size: 0x780000
part_size: 0x780000
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 247184 bytes
read finished

Wow, this is looking promising.

it seems like htc's flash_image,but much more difficult than it.

raspdeep said:
ok it works when i flashed zImage
Code:
# redbend_ua restore /sdcard/jm5.zImage /dev/block/bml7
redbend_ua restore /sdcard/jm5.zImage /dev/block/bml7
RedBend Update Agent 6,1,14,1
FOTA : Make Block Device Nodes
lcd_init(498): start!
lcd_init(507): fb0 open success
lcd_init(514): width = 480, height = 800
page_msize: 4096, phy_unit_size: 262144
src: /sdcard/jm5.zImage
dst: /dev/block/bml7 partition size: 0x780000
part_size: 0x780000
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 247184 bytes
read finished
Click to expand...
Click to collapse
Nice raspdeep
How did you do ? Every attempt fails here (in recovery or standard mode).
Which initramfs version do you use ?

Code:
redbend_ua restore zImage /dev/block/bml7
RedBend Update Agent 6,1,14,1
FOTA : Make Block Device Nodes
lcd_init(498): start!
lcd_init(507): fb0 open success
lcd_init(514): width = 480, height = 800
page_msize: 4096, phy_unit_size: 262144
src: zImage
dst: /dev/block/bml7 partition size: 0x780000
part_size: 0x780000
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 262144 bytes
read 247184 bytes
read finished
Ok yo don't respond but it works here to, booting on your OC kernel. Now i'll find what is different between our setups

supercurio, you are rapidly becoming one of my Android heros...

distortedloop said:
supercurio, you are rapidly becoming one of my Android heros...
Click to expand...
Click to collapse
Don't know if I can live with that
Code:
ll */*
-rwxr-xr-x 1 root curio 313888 2010-08-26 21:14 oc128uv1/redbend_ua*
-rwxr-xr-x 1 curio curio 314004 2010-08-26 21:16 XWJM5/redbend_ua*
md5sum */*
74f5793536c3cdc902ec269c3f51a165 oc128uv1/redbend_ua
b1ba258a5d673c537a95167267afd6b8 XWJM5/redbend_ua
Different binaries !
Edit : attached working redbend_ua

A diff between strings included in binaries (raw infos, not analyzed yet ^^)
Code:
--- not-working 2010-08-26 21:22:39.594984596 +0200
+++ working 2010-08-26 21:22:20.370634450 +0200
@@ -4,7 +4,6 @@
@F2A
bB,2
H{DYX
-/Q{;
/Qs;
/Qk;
/Qc;
@@ -452,71 +451,52 @@
%mB(
@ #!
!1C "
-reboot
-UA/ Platform delta does NOT exist! Skip.
-Can not open src file : %s
-Can not open dst file : %s
-UA/(%s) write %dbytes
-UA/(%s) copy file %s->%s
- fsync failed with return value: %d
- fsync after write: %d
-UA/ %s: %s
+/data/fota/delta.Sbl
/dev/block/bml4
-/data/fota/dump_sbl
+/dev/block/bml5
+/data/fota/fota_Sbl
+/data/fota/delta.zImage
/dev/block/bml7
-/data/fota/dump_kernel
+/data/fota/backup.zImage
+/data/fota/fota_zImage
+Modem
+/data/fota/delta.modem
/dev/block/bml12
+/data/fota/backup.modem
+/data/fota/fota_modem
+/data/fota/delta.platform
+/data/fota/backup.platform
+/data/fota/fota_platform
+platform delta does NOT exist! Skip.
+existence: s1[%d].existence; %d
+%s: %s
+/data/fota/dump_sbl
+/data/fota/dump_kernel
/data/fota/dump_modem
FOTA : Make Block Device Nodes
-UA/(%s): mknod path=%s, dev_no=%u
Failed to open %s: %s
Open %s
lseek failed with return value: %d
read failed with return value: %d
+ fsync failed with return value: %d
+ fsync after write: %d
success!
DONE
fail!
FAIL
FOTA
-UA/ modem delta does NOT exist! Skip.
-/data/fota/backup.modem
-UA/ zImage delta does NOT exist! Skip.
+modem delta does NOT exist! Skip.
+zImage delta does NOT exist! Skip.
/dev/block/bml8
-UA/ Sbl delta does NOT exist! Skip.
-UA/ERROR(%s) get dual sbl siginfo fail!!
-/dev/block/bml5
-UA/ERROR(%s) can't find vaild Sbl partitions
-UA/ERROR(%s) SBL RAM partition alloc fail
-UA/ERROR(%s) RB_ImageUpdateMain Fail ret=(0x%d)
-/data/fota/command
-/sdcard/Android/data/temp.fota.delta/command
-UA/(%s) cache download
-/cache/recovery
-UA/(%s) create /cache/recovery directory
-/cache/recovery/command
-reboot recovery
-UA/(%s): Check Delta : path_idx(%d), part_idx(%d), file_path(%s), cnt(%d)
-SBL update fail
-UA/(%s) %s
-Kernel update fail
-Modem update fail
-Platform update fail
-Post update fail
-WARNNIG
-Delta Not Exist
-/data/fota
-/sbin/images/fota.png
-UA/(%s) test
-Update Fail!!
+Sbl delta does NOT exist! Skip.
+get dual sbl siginfo fail!!
+can't find vaild Sbl partitions
+reboot
+gv_delta_count[%d]
+dump
+restore
+compare
/data/fota/fota.status
-/data/fota/delta.Sbl
-/data/fota/delta.zImage
-/data/fota/delta.modem
-/data/fota/delta.platform
-/sdcard/Android/data/temp.fota.delta/delta.Sbl
-/sdcard/Android/data/temp.fota.delta/delta.zImage
-/sdcard/Android/data/temp.fota.delta/delta.modem
-/sdcard/Android/data/temp.fota.delta/delta.platform
RedBend Update Agent %s
commands:
img [partition name] [delta file] [device node] [temp path]
@@ -527,29 +507,7 @@
compare <dev1> <dev2>
png [png file name]
all
-unknown
-/data/fota/fota_Sbl
-/data/fota/fota_zImage
-Modem
-/data/fota/fota_modem
-/data/fota/fota_platform
-/dev/block/bml11
OFNI
-main
-update_all
-post_update
-update_platform
-update_modem
-update_zImage
-update_Sbl
-file_copy
-check_existence
-MakeBMLNodes
-UA/(%s): +
-UA/(%s): %s (%lx %x)
-UA/(%s): -
-UA/(%s): %s (%lx %lx)
-UA/(%s): memcpy(0x%x, 0x%x, 0x%x)
%07x:
%02x
%02x
@@ -568,71 +526,67 @@
dst: %s
failed to write to %s (%s)
done
-UA/(%s) src: %s
-UA/(%s) dst: %s partition size: 0x%x
-UA/(%s) part_size: 0x%x
-UA/(%s) read finished
-UA/(%s) read %d bytes
-UA/(%s) src: %s partition size: 0x%x
-UA/(%s) dst: %s
-UA/(%s) signature: 0x%x
-*WARN* %s partition is already marked as invalid!
-UA/(%s) done
page at 0x%x differ!
-UA/(%s) backup 128KB at 0x%x
-UA/(%s): ++
-UA/(%s) 0x%x
-UA/ERROR(%s) Valid partition signature is not invalid
-UA/(%s): --
+signature: 0x%x
+*WARN* %s partition is already marked as invalid!
+backup 128KB at 0x%x
+backup 128KB at 0x%x without signature
+clear mark dev : %s partition size: 0x%x
%s, invalide magic key(%x)!!
-common mark dev : %s partition size: 0x%x
dev: %s partition size: 0x%x
-signature: 0x%x
-UA/(%s) dev: %s partition size: 0x%x
-UA/ERROR(%s) Signature is not validate (%x)
-UA/(%s) SBL, SBL2 partition are diffierent size, check your bml device node name
-UA/ERROR(%s) Both partition has valid or invalid signature
-UA/(%s) Valid Partition-%s, Update Partition-%s
-restore_file
-backup_block_file
-restore_devbml
-backup_devbml
-store_dualsbl_partition
-load_partition
+%s:clear:%s partition size: 0x%x
+%s : write and clear signature done
+%s:write:%s partition size: 0x%x
+%s: Signature is not validate (%x)
+%s signature: 0x%x
+%s +
+%s: SBL, SBL2 partition are diffierent size, check your bml device node name
+Both partition has valid or invalid signature
+Valid Partition-%s, Update Partition-%s
+Siginfo error partition $s (0x%x, 0x%x)
mark_common_recovery
+clear_dualpartition_signature
+write_dualpartition_signature
find_valid_partition
check_dualpartition_validation
-ram_write_block
-ram_read_block
-nand_write_block
-nand_read_block
bmldevice_get_size
Image size is bigger than partition!
reading NAND page
BML_UNLOCK_ALL
writing NAND page
6,1,14,1
+RB_Progress
+%s: (%lu %%)
+RB_GetDelta
+%s: offset 0x%lx(%ld), size 0x%lx(%ld)
+%s: open file %s failed.
+%s: error in read size
RB_GetBlockSize
%s: returning 0x%x (%d)
+RB_ReadImage
+%s: node-%s (%lx %lx)
+RB_WriteBlock
+%s: node-%s (%lx %x)
RB_ReadBackupBlock
-UA/(%s): %s: offset 0x%lx(%ld), size 0x%lx(%ld)
-UA/ERROR(%s) open file %s failed.
-UA/ open %s file success
-UA/ERROR(%s) error in read size
+%s: offset 0x%lx(%ld), size 0x%lx(%ld)
+%s: open file %s failed.
+%s: error in read size
RB_WriteBackupBlock
-UA/(%s): offset 0x%lx(%ld), size 0x%lx(%ld)
-UA/ERROR(%s) error in write size
+%s: error in write size
+RB_ImageUpdateCommon
+uPartitionName[%s]
+%s: pCustomerPartData.updated = %d, rest = %d
RB_ImageUpdateMain
-UA/(%s): ++
-UA/(%s) uPartitionName[%s]
-UA/(%s) pCustomerPartData.updated = %d, rest = %d
-UA/(%s): -- ret=%d
-RB_UpdateImage
-UA/(%s): Delta file name-%s
+%s: backup_file is %s
+%s: size of %s(%s) is %d bytes
+RB_ImageUpdateDualPartition
+%s: backup file(%s) / Valid Partition(%s) / Update Partition(%s)
+%s : RB Image Update Fail
+%s : RB Image Update Done %s
pDeviceDatum.pFirstPartitionData->partition_name: %s
pDeviceDatum.pFirstPartitionData->partition_type: %d
pDeviceDatum.pFirstPartitionData->file_system_type: %d
-UA/(%s) return value from RB_vRM_Update: 0x%x
+return value from RB_vRM_Update: 0x%x
unicode_to_char
%s : %s
RecursiveFolderCreater
@@ -726,8 +680,7 @@
failed chown %d
success chown %d
RB_FSUpdateMain
-UA/(%s) Partition name(%s), mount point(%s)
-UA/(%s) pCustomerPartData.updated = %ld, rest = %ld
+%s: pCustomerPartData.updated = %ld, rest = %ld
pDeviceDatum.pFirstPartitionData->partition_name: %s
pDeviceDatum.pFirstPartitionData->partition_type: %d
pDeviceDatum.pFirstPartitionData->file_system_type: %d
@@ -741,9 +694,9 @@
cable as possible.
System updated &
reboot now
-gui_progress
-UA/(%s): ++ uPercent(%d%), gv_delta_count=(%ld)
-UA/(%s): -- Print Percent(%d%)
+Update is ok.
+Update is failed.
+Restoring...
%3d %%
lcd_init
%s(%d): start!
@@ -962,12 +915,6 @@
insufficient memory
buffer error
incompatible version
-RB_Progress
-%s: (%lu %%)
-RB_GetDelta
-%s: offset 0x%lx(%ld), size 0x%lx(%ld)
-%s: open file %s failed.
-%s: error in read size
Pure virtual function called. Are you calling virtual methods from a destructor?
libc-abort
abort() called in pid %d
@@ -1120,6 +1067,7 @@
/dev/log/main
/dev/log/radio
/proc/self/exe
+unknown
/dev/urandom
stack corruption detected: aborted
ANDROID_PROPERTY_WORKSPACE

Whilst we're talking about retrieving information from binaries...
Does anyone know any good disassembly tools. I managed to compile objdump for ARM (ELF) and run it on the Galaxy S secondary bootloader but it only partially works. It doesn't look like it is handling the binary layout correctly. It's unsure how much of the binary is data and how much is actual instructions so it ends up converting the whole thing to instructions (most of which are obviously bogus).

Benjamin Dobell said:
Whilst we're talking about retrieving information from binaries...
Does anyone know any good disassembly tools. I managed to compile objdump for ARM (ELF) and run it on the Galaxy S secondary bootloader but it only partially works. It doesn't look like it is handling the binary layout correctly. It's unsure how much of the binary is data and how much is actual instructions so it ends up converting the whole thing to instructions (most of which are obviously bogus).
Click to expand...
Click to collapse
Under Linux i use the minimalist tool named "strings". You can learn so much just by reading strings extracted ^^.
Otherwise you have IDA Pro (Windows), which is very powerful.
Benjamin, like you i found objdump quite challenging to use.. and.. not that fun.

supercurio said:
Under Linux i use the minimalist tool named "strings". You can learn so much just by reading strings extracted ^^.
Otherwise you have IDA Pro (Windows), which is very powerful.
Benjamin, like you i found objdump quite challenging to use.. and.. not that fun.
Click to expand...
Click to collapse
Unfortunately IDA Pro doesn't seem to work either. IDA Pro Free doesn't support ARM at all and I tried with IDA Pro Advanced but it seemed to have similar issues to objdump, it couldn't determine the entry point etc.
If I could just get the assembler with comments next to it that indicate which pieces of data (strings in particular) are being referenced that would make my day.

Do you think Sbl.bin is a single unique binary ?
Considering everything that this Second Boot Loader is able to do, i would not be surprised if it's more complex than that.
Anyway I can't say much more about the tools, i'm just a rookie hacker

supercurio said:
Do you think Sbl.bin is a single unique binary ?
Considering everything that this Second Boot Loader is able to do, i would not be surprised if it's more complex than that.
Click to expand...
Click to collapse
It wouldn't be a very reliable boot loader if it depended on other binaries (other than data passed to it by the primary boot loader). However the information I'm after, the Loke protocol, is definitely in there cause I can see the handshake strings I send and receive with Heimdall.

working this into SRE RIGHT NOW!!!!
--edit
scripted, and working
release coming soon!!

designgears said:
working this into SRE RIGHT NOW!!!!
Click to expand...
Click to collapse
Nice
Remember being EXTRA careful manipulating raw bml partitions. You can easily brick your phone for good writing bad data in place of first and second bootloader.
NON-RECOVERABLE
please say that to every potential redbend_ua users
This was the required warning, now enjoy

supercurio said:
Nice
Remember being EXTRA careful manipulating raw bml partition. You can easily
brick your phone for good writing bad data in place of first and second bootloader.
NON-RECOVERABLE
please say that to every potential redbend_ua users
This was the required warning, now enjoy
Click to expand...
Click to collapse
I have borked bml17 before.. was able to go into download and restore stock.

Establishing a UART connection to the Ancora

As some of us here know, there are 3 ancora devices that are 100% known: The SGW, the Exhibit 2 and the Rugby Smart. For the last few weeks, I've been trying to establish a UART connection to the Rugby, being met with little to no success. (For those watching on G+, you've been privie to the information).
I know this is possible, since my TWRP image (using an arco68 based 2.6.35.14) for the Rugby can echo a kmsg to a serial monitor, but I haven't got 3.0.68 to do the same. So I'm calling in a global effort to get this cracked in the 3.0 kernel, that way we can deeper debug things.
What say the SGW and Exhibit 2 guys and gals?

Motorhead1991 said:
As some of us here know, there are 3 ancora devices that are 100% known: The SGW, the Exhibit 2 and the Rugby Smart. For the last few weeks, I've been trying to establish a UART connection to the Rugby, being met with little to no success. (For those watching on G+, you've been privie to the information).
I know this is possible, since my TWRP image (using an arco68 based 2.6.35.14) for the Rugby can echo a kmsg to a serial monitor, but I haven't got 3.0.68 to do the same. So I'm calling in a global effort to get this cracked in the 3.0 kernel, that way we can deeper debug things.
What say the SGW and Exhibit 2 guys and gals?
Click to expand...
Click to collapse
are you really trying to "UART", because you have adb, it also works when the phone is turned off.
for a really uart, we need a module, that enables a uart and make android a host.

adb kicks in too late for what I need, therefore I need to see what the SBL is doing with the kernel ant whatnot via UART.

Motorhead1991 said:
adb kicks in too late for what I need, therefore I need to see what the SBL is doing with the kernel ant whatnot via UART.
Click to expand...
Click to collapse
maybe you need some hardware mods, because you need to be listen before android starts, and the bootloader dont have specific code for that(i think).
unless you could mod you bootloader, try a jtag cable.

zezadas said:
maybe you need some hardware mods, because you need to be listen before android starts, and the bootloader dont have specific code for that(i think).
unless you could mod you bootloader, try a jtag cable.
Click to expand...
Click to collapse
As said in the OP, it works on 2.6.35.14 in recovery mode, just not 3.0.68 running the system. I don't even need the SBL log, as a kmsg would suffice.

What is UART?
Hi guys, What is UART?
I have google it already for the meaning,but i cant seem to understand its purpose or benefits on our device..
PS. Please no negative Feedback, i'm just asking!!

[iop]wah said:
Hi guys, What is UART?
I have google it already for the meaning,but i cant seem to understand its purpose or benefits on our device..
PS. Please no negative Feedback, i'm just asking!!
Click to expand...
Click to collapse
Using a UART connection on the ancora family (or any device) will help with kernel and filesystem debugging on boot, before adbd is even loaded, much less awake.

BTW, what you want to do with uart, beside log the bootloader?

AW: Establishing a UART connection to the Ancora
zezadas said:
BTW, what you want to do with uart, beside log the bootloader?
Click to expand...
Click to collapse
Obviously debugging.
Sent from my GT-I9001 using xda app-developers app

zezadas said:
BTW, what you want to do with uart, beside log the bootloader?
Click to expand...
Click to collapse
What XeLLaR* said... The Rugby 3.0 kernel is stuck without a camera because I have no idea what's killing the boot sequence. Initializing the cameras kills boot and it hangs on the second splash (ARIESVE.rle). I saw this with the a2220 chip also, which isn't something you guys have worked with (As far as I know).

Humm. Maybe you can post whay you have reached until now. Maybe we can help.
Also is always a interesting thread for me.
Sent from my GT-I8150 using xda app-developers app

Motorhead1991 said:
What XeLLaR* said... The Rugby 3.0 kernel is stuck without a camera because I have no idea what's killing the boot sequence. Initializing the cameras kills boot and it hangs on the second splash (ARIESVE.rle). I saw this with the a2220 chip also, which isn't something you guys have worked with (As far as I know).
Click to expand...
Click to collapse
I don't know if it helps or not, but Jocala (he started working on cm9 for ancora_tmo) used to use the a2220: https://github.com/Jocala/kernel.ancora_tmo.ics/blob/master/include/linux/a2220.h
However when it got official support from arco, it disappeared: https://github.com/arco/samsung-kernel-msm7x30/commit/4669dbff4ad08a084b11eabe350b3b6adb2f317e

any news about this project?

zezadas said:
any news about this project?
Click to expand...
Click to collapse
Not anything new I'm afraid... I'm still trying to figure it out however.

about the uart, can you already log bootloader?

zezadas said:
about the uart, can you already log bootloader?
Click to expand...
Click to collapse
I haven't got a bootloader response yet, just a kmsg, and only on 2.6.

1 year later...
Any progress?
On I9001 I can log something via UART cable... if I hold:
Code:
Volume -
and
Power on
http://forum.xda-developers.com/showpost.php?p=52944982&postcount=29
Some problems, because different speed... not 100 % managed yet...
But need also solution for I8150 Logging...
Thanx in advance.
Best Regards

bump...
I have now I8150 in my hands...
If I hold Volume - then I can see something...
Maybe wrong speed or some wrong settings... but something is send...
Maybe someone knows solution?
Thanx in advance.
Best Regards

adfree said:
bump...
I have now I8150 in my hands...
If I hold Volume - then I can see something...
Maybe wrong speed or some wrong settings... but something is send...
Maybe someone knows solution?
Thanx in advance.
Best Regards
Click to expand...
Click to collapse
Hello adfree
Good to know you have a i8150 from this moment :good:
İ couldnt understand good your problem but İf you want to enter into download mode : hold volume - and power on keys
Also i think we must revive this thread because seems mr.Blefish(who is maintaining ideos x5) ported lk bootloader into ideos x5 (so msm7x30/8x55)
Our devices(ancora and ariesve) are in same family with ideos x5 (msm7x30/8x55)
Here is the initial work on lk bootloader for msm7x30/8x55 devices:
https://github.com/Blefish/android_bootable_bootloader_lk/compare/973308d69a...7d422c985a
İf you are interested in lets start to PMing
Regards

http://forum.xda-developers.com/showpost.php?p=52944982&postcount=29
My goal is to see something like this with I8150...
Code:
AST_POWERON
[1810] 0' Partition Information
[1810] dstatus = 0
[1810] dtype = 12
[1810] dfirstsec = 1
[1810] dsize = 212991
[1810] name = modem
size=5[1810] *********************************************************************
[1810] 1' Partition Information
[1810] dstatus = 128
[1810] dtype = 77
[1810] dfirstsec = 212992
[1810] dsize = 1000
[1810] name = dbl
size=3[1810] *********************************************************************
[1810] 2' Partition Information
[1810] dstatus = 0
[1810] dtype = 70
[1810] dfirstsec = 213992
[1810] dsize = 7192
[1810] name = osbl
size=4[1820] *********************************************************************
[1820] 3' Partition Information
[1820] dstatus = 0
[1820] dtype = 5
[1820] dfirstsec = 221184
[1820] dsize = 30883840
[1820] name =
size=0[1820] *********************************************************************
[1820] 4' Partition Information
[1820] dstatus = 0
[1830] dtype = 71
[1830] dfirstsec = 229376
[1830] dsize = 10240
[1830] name = emmcboot
size=8[1830] *********************************************************************
[1830] 5' Partition Information
[1830] dstatus = 0
[1830] dtype = 73
[1830] dfirstsec = 245760
[1830] dsize = 40000
[1830] name = amss
size=4[1830] *********************************************************************
[1840] 6' Partition Information
[1840] dstatus = 0
[1840] dtype = 88
[1840] dfirstsec = 286720
[1840] dsize = 6144
[1840] name =
size=0[1840] *********************************************************************
[1840] 7' Partition Information
[1840] dstatus = 0
[1840] dtype = 72
[1840] dfirstsec = 294912
[1850] dsize = 10240
[1850] name = boot
size=4[1850] *********************************************************************
[1850] 8' Partition Information
[1850] dstatus = 0
[1850] dtype = 80
[1850] dfirstsec = 311296
[1850] dsize = 14000
[1850] name = adsp
size=4[1850] *********************************************************************
[1860] 9' Partition Information
[1860] dstatus = 0
[1860] dtype = 74
[1860] dfirstsec = 327680
[1860] dsize = 6144
[1860] name = modem_st1
size=9[1860] *********************************************************************
[1860] 10' Partition Information
[1860] dstatus = 0
[1860] dtype = 75
[1860] dfirstsec = 335872
[1870] dsize = 6144
[1870] name = modem_st2
size=9[1870] *********************************************************************
[1870] 11' Partition Information
[1870] dstatus = 0
[1870] dtype = 144
[1870] dfirstsec = 344064
[1870] dsize = 16384
[1870] name = persist
size=7[1870] *********************************************************************
[1880] 12' Partition Information
[1880] dstatus = 0
[1880] dtype = 145
[1880] dfirstsec = 360448
[1880] dsize = 15360
[1880] name = recovery
size=8[1880] *********************************************************************
[1880] 13' Partition Information
[1880] dstatus = 0
[1880] dtype = 146
[1880] dfirstsec = 376832
[1880] dsize = 10240
[1890] name = parameter
size=9[1890] *********************************************************************
[1890] 14' Partition Information
[1890] dstatus = 0
[1890] dtype = 147
[1890] dfirstsec = 393216
[1890] dsize = 1064960
[1890] name = system
size=6[1890] *********************************************************************
[1900] 15' Partition Information
[1900] dstatus = 0
[1900] dtype = 148
[1900] dfirstsec = 1458176
[1900] dsize = 204800
[1900] name = cache
size=5[1900] *********************************************************************
[1900] 16' Partition Information
[1900] dstatus = 0
[1900] dtype = 149
[1900] dfirstsec = 1662976
[1900] dsize = 2826240
[1910] name = userdata
size=8[1910] *********************************************************************
[1910] 17' Partition Information
[1910] dstatus = 0
[1910] dtype = 150
[1910] dfirstsec = 4489216
[1910] dsize = 409600
[1910] name = preload
size=7[1910] *********************************************************************
[1910] 18' Partition Information
[1920] dstatus = 0
[1920] dtype = 151
[1920] dfirstsec = 4898816
[1920] dsize = 1000
[1920] name = dbl_backup
size=10[1920] *********************************************************************
[1920] 19' Partition Information
[1920] dstatus = 0
[1920] dtype = 152
[1920] dfirstsec = 4907008
[1920] dsize = 7192
[1930] name = osbl_backup
size=11[1930] *********************************************************************
[1930] 20' Partition Information
[1930] dstatus = 0
[1930] dtype = 153
[1930] dfirstsec = 4915200
[1930] dsize = 10240
[1930] name = emmcboot_backup
size=15[1930] *********************************************************************
[1940] 21' Partition Information
[1940] dstatus = 0
[1940] dtype = 154
[1940] dfirstsec = 4931584
[1940] dsize = 40000
[1940] name = amss_backup
size=11[1940] *********************************************************************
[1940] 22' Partition Information
[1940] dstatus = 0
[1940] dtype = 155
[1940] dfirstsec = 4972544
[1940] dsize = 10240
[1950] name = boot_backup
size=11[1950] *********************************************************************
[1950] 23' Partition Information
[1950] dstatus = 0
[1950] dtype = 156
[1950] dfirstsec = 4988928
[1950] dsize = 14000
[1950] name = adsp_backup
size=11[1950] *********************************************************************
[1960] 24' Partition Information
[1960] dstatus = 0
[1960] dtype = 157
[1960] dfirstsec = 5005312
[1960] dsize = 10240
[1960] name = recovery_backup
size=15[1960] *********************************************************************
[1960] 25' Partition Information
[1960] dstatus = 0
[1960] dtype = 158
[1960] dfirstsec = 5021696
[1970] dsize = 10240
[1970] name =
size=0[1970] *********************************************************************
[1970] 26' Partition Information
[1970] dstatus = 0
[1970] dtype = 159
[1970] dfirstsec = 5038080
[1970] dsize = 10240
[1970] name =
size=0[1970] *********************************************************************
[1970] 27' Partition Information
[1980] dstatus = 0
[1980] dtype = 160
[1980] dfirstsec = 5054464
[1980] dsize = 26050560
[1980] name =
size=0[1980] *********************************************************************
[1980] fsa_i2c_init ENTRY !!!
[2010] fsa_i2c_write done.
[2060] fsa_i2c_read done.
[2060] GPIO i2c init SUCCESS i2c_data : 1e
[2060] KEY_VOLUMEDOWN detected! start with no console mode.
[2060] charger_attached ENTRY !!!
[2190] dtype =0x0 dtype2=0x8 !!!
[2190] charger_attached check [[ 0 ]] !!!
[2190] boot_chg check [[ 0 ]] !!!
magic_key_offset : 2551183360
Load boot partition.
[2380] cmdline = 'console=ttyMSM2,115200 androidboot.hardware=qcom androidboot.emmc=true hw=7'
[2380]
Booting Linux
[2380] cmdline: console=ttyMSM2,115200 androidboot.hardware=qcom androidboot.emmc=true hw=7
[2380] Backlight off
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Linux version 2.6.35.7-1207170 ([email protected]) (gcc version 4.4.0 (GCC) ) #1 PREEMPT Tue Oct 30 12:33:11 KST 2012
[ 0.000000] CPU: ARMv7 Processor [511f00f2] revision 2 (ARMv7), cr=10c53c7d
[ 0.000000] CPU: VIPT nonaliasing data cache, VIVT ASID tagged instruction cache
[ 0.000000] Machine: GT-I9001 Board
[ 0.000000] AriesVE H/W revision : 0x07
[ 0.000000] Memory policy: ECC disabled, Data cache writeback
[ 0.000000] allocating 10772480 bytes at c10a4000 (14a4000 physical) for fb
[ 0.000000] allocating 2097152 bytes at c1aea000 (1eea000 physical) for audio pmem arena
[ 0.000000] allocating 6291456 bytes at c1d00000 (2100000 physical) for kernel ebi1 pmem arena
[ 0.000000] allocating 31457280 bytes at c7600000 (7a00000 physical) for sf pmem arena
[ 0.000000] allocating 30212096 bytes at c9400000 (9800000 physical) for adsp pmem arena
[ 0.000000] allocating 5242880 bytes at cb0d0000 (b4d0000 physical) for hdmi pmem arena
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 112136
[ 0.000000] Kernel command line: console=ttyMSM2,115200 androidboot.hardware=qcom androidboot.emmc=true hw=7
[ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Memory: 58MB 134MB 256MB = 448MB total
[ 0.000000] Memory: 359932k/359932k available, 98820k reserved, 0K highmem
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
<5>[ 0.000000] DMA : 0xff000000 - 0xffe00000 ( 14 MB)
[ 0.000000] vmalloc : 0xe0800000 - 0xf0000000 ( 248 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xe0000000 ( 512 MB)
[ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB)
[ 0.000000] .init : 0xc0008000 - 0xc0036000 ( 184 kB)
[ 0.000000] .text : 0xc0036000 - 0xc072f000 (7140 kB)
[ 0.000000] .data : 0xc075e000 - 0xc07dcc20 ( 508 kB)
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU-based detection of stalled CPUs is disabled.
[ 0.000000] Verbose stalled-CPUs detection is disabled.
[ 0.000000] NR_IRQS:566
[ 0.000000] sched_clock: 32 bits at 32kHz, resolution 30517ns, wraps every 131071999ms
[ 0.000000] Console: colour dummy device 80x30
[ 0.000122] Calibrating delay loop... 933.88 BogoMIPS (lpj=4669440)
[ 0.250244] pid_max: default: 32768 minimum: 301
[ 0.250366] Mount-cache hash table entries: 512
[ 0.250579] Initializing cgroup subsys cpuacct
[ 0.250579] Initializing cgroup subsys freezer
[ 0.250610] CPU: Testing write buffer coherency: ok
[ 0.270660] NET: Registered protocol family 16
[ 0.290863] socinfo_init: v4, id=74, ver=2.1, raw_id=1402, raw_ver=1402, hw_plat=2, hw_plat_ver=65536
[ 0.290863] Clock ownership
[ 0.290893] GLBL : 07d82110
[ 0.290893] APPS : 00000000 00000000 00000000
[ 0.290893] ROW : 00000000 00000000
[ 0.291046] acpu_clock_init()
[ 0.291687] ACPU running at 1401600 KHz
[ 0.293090] msm_wlan_gpio_init: msm_wlan_gpio_init
[ 0.293182] msm7x30_init_mmc: Initialized wlan GPIO's
[ 0.294128] snddev_poweramp_gpio_init
[ 0.294158] aux_pcm_gpio_init
[ 0.294281] fsa9480_gpio_init
[ 0.294433] [TSP] M1 TSP LDO init
[ 0.300292] yda165:register yamaha amp device
[ 0.300292] si4709:register fm radio si4709 device
[ 0.300292] i2c_register_board_info 12
[ 0.300292] i2c_register_board_info 8
[ 0.300323] i2c_register_board_info 10
[ 0.300354] i2c_register_board_info 17
[ 0.300354] bt_power_init
[ 0.300354] bluetooth_gpio_init on system_rev:0
[ 0.300781] touch_keypad_gpio_init.
[ 0.300781] Boot Reason = 0x04
[ 0.300781] hw perfevents: enabled with ARMv7 Scorpion PMU driver, 5 counters available
[ 0.300903] Scorpion registered PMU device
[ 0.300964] pm8058_init: i2c_add_driver: rc = 0
[ 0.301330] pm8058_probe: PMIC revision: E3
[ 0.302734] pm8058_gpio_probe: gpiochip_add(): rc=0
[ 0.302917] pm8058_mpp_probe: gpiochip_add(): rc=0
[ 0.306365] bio: create slab <bio-0> at 0
[ 0.306610] pmic8058_pwm_probe: OK
[ 0.306854] SCSI subsystem initialized
[ 0.307006] usbcore: registered new interface driver usbfs
[ 0.307037] usbcore: registered new interface driver hub
[ 0.307128] usbcore: registered new device driver usb
[ 0.307281] i2c-gpio i2c-gpio.9: using pins 171 (SDA) and 170 (SCL)
[ 0.307342] i2c-gpio i2c-gpio.19: using pins 123 (SDA) and 122 (SCL)
[ 0.307403] i2c-gpio: probe of i2c-gpio.14 failed with error -16
[ 0.307464] i2c-gpio i2c-gpio.20: using pins 125 (SDA) and 124 (SCL)
[ 0.307556] i2c-gpio i2c-gpio.10: using pins 55 (SDA) and 89 (SCL)
[ 0.307617] i2c-gpio i2c-gpio.13: using pins 165 (SDA) and 164 (SCL)
[ 0.307708] i2c-gpio i2c-gpio.17: using pins 173 (SDA) and 172 (SCL)
[ 0.307800] i2c-gpio i2c-gpio.8: using pins 149 (SDA) and 148 (SCL)
[ 0.307861] i2c-gpio i2c-gpio.12: using pins 88 (SDA) and 86 (SCL)
[ 0.307952] i2c-gpio i2c-gpio.11: using pins 169 (SDA) and 168 (SCL)
[ 0.308013] msm_i2c_probe
[ 0.308074] msm_i2c_probe: clk_ctl 35d, 100000 Hz
[ 0.308349] msm_i2c_probe
[ 0.308410] msm_i2c_probe: clk_ctl 35d, 100000 Hz
[ 0.308807] Advanced Linux Sound Architecture Driver Version 1.0.23.
[ 0.360412] Bluetooth: Core ver 2.15
[ 0.360443] NET: Registered protocol family 31
[ 0.360473] Bluetooth: HCI device and connection manager initialized
[ 0.360473] Bluetooth: HCI socket layer initialized
[ 0.360534] Switching to clocksource gp_timer
[ 0.363250] NET: Registered protocol family 2
[ 0.380584] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.460723] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
[ 0.460906] TCP bind hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.460998] TCP: Hash tables configured (established 16384 bind 16384)
[ 0.460998] TCP reno registered
[ 0.461029] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.461029] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.461120] NET: Registered protocol family 1
[ 0.461273] RPC: Registered udp transport module.
[ 0.461273] RPC: Registered tcp transport module.
[ 0.461273] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.461395] Trying to unpack rootfs image as initramfs...
[ 0.488372] Freeing initrd memory: 652K
<6>[ 0.488494] PMU: registered new PMU device of type 0
[ 0.488891] sdio_al:SDIO-AL SW version 1.30
[ 0.489135] smd probe
[ 0.489166] smd_core_init()
[ 0.489196] smd_core_init() done
[ 0.489196] smd_alloc_loopback_channel: 'local_loopback' cid=100
[ 0.489349] get_nand_partitions: no flash partition table in shared memory
[ 0.489776] smd_alloc_channel() 'DS' cid=0
[ 0.489837] smd_alloc_channel() 'RPCCALL' cid=2
[ 0.489868] smd_alloc_channel() 'DATA1' cid=7
[ 0.489929] smd_alloc_channel() 'DATA2' cid=8
[ 0.489959] smd_alloc_channel() 'DATA3' cid=9
[ 0.490020] smd_alloc_channel() 'DATA4' cid=10
[ 0.490051] smd_alloc_channel() 'DATA5' cid=11
[ 0.490081] smd_alloc_channel() 'DATA6' cid=12
[ 0.490112] smd_alloc_channel() 'DATA7' cid=13
[ 0.490173] smd_alloc_channel() 'DATA8' cid=14
[ 0.490203] smd_alloc_channel() 'DATA9' cid=15
[ 0.490264] smd_alloc_channel() 'DATA11' cid=17
[ 0.490295] smd_alloc_channel() 'DATA12' cid=18
[ 0.490325] smd_alloc_channel() 'DATA13' cid=19
[ 0.490356] smd_alloc_channel() 'DATA14' cid=20
[ 0.490417] smd_alloc_channel() 'DAL00' cid=38
[ 0.490447] smd_alloc_channel() 'BRG_0' cid=39
[ 0.490509] smd_alloc_channel() 'DATA5_CNTL' cid=40
[ 0.490539] smd_alloc_channel() 'DATA6_CNTL' cid=41
[ 0.490600] smd_alloc_channel() 'DATA7_CNTL' cid=42
[ 0.490631] smd_alloc_channel() 'DATA8_CNTL' cid=43
[ 0.490692] smd_alloc_channel() 'DATA9_CNTL' cid=44
[ 0.490753] smd_alloc_channel() 'DATA12_CNTL' cid=45
[ 0.490783] smd_alloc_channel() 'DATA13_CNTL' cid=46
[ 0.490814] smd_alloc_channel() 'DATA14_CNTL' cid=47
[ 0.490875] smd_alloc_channel() 'DATA40' cid=48
[ 0.490905] smd_alloc_channel() 'DATA40_CNTL' cid=49
[ 0.492126] SMD Packet Port Driver Initialized.
[ 0.492156] Notify: smsm init
[ 0.492309] Notify: general
[ 0.492340] Notify: general
[ 0.492340] Notify: general
[ 0.492340] Notify: general
[ 0.492340] Notify: general
[ 0.492340] Notify: general
[ 0.492340] Notify: general
[ 0.492340] Notify: general
[ 0.492340] Notify: general
[ 0.492370] Notify: general
[ 0.492370] Notify: general
[ 0.492614] SMD: ch 2 0 -> 1
[ 0.492828] [afe.c:afe_init] AFE driver init
[ 0.492950] SMD: ch 2 1 -> 2
[ 0.493194] [audpp.c:audpp_probe] Number of decoder supported 5
[ 0.493225] [audpp.c:audpp_probe] Number of concurrency supported 7
[ 0.493225] [audpp.c:audpp_probe] module_name:AUDPLAY4TASK
[ 0.493225] [audpp.c:audpp_probe] queueid:17
<6>[ 0.493225] [audpp.c:audpp_probe] decid:4
[ 0.493255] [audpp.c:audpp_probe] nr_codec_support:1
[ 0.493255] [audpp.c:audpp_probe] module_name:AUDPLAY3TASK
[ 0.493255] [audpp.c:audpp_probe] queueid:16
[ 0.493255] [audpp.c:audpp_probe] decid:3
[ 0.493255] [audpp.c:audpp_probe] nr_codec_support:11
[ 0.493286] [audpp.c:audpp_probe] module_name:AUDPLAY2TASK
[ 0.493286] [audpp.c:audpp_probe] queueid:15
[ 0.493286] [audpp.c:audpp_probe] decid:2
[ 0.493286] [audpp.c:audpp_probe] nr_codec_support:11
[ 0.493286] [audpp.c:audpp_probe] module_name:AUDPLAY1TASK
[ 0.493286] [audpp.c:audpp_probe] queueid:14
[ 0.493316] [audpp.c:audpp_probe] decid:1
[ 0.493316] [audpp.c:audpp_probe] nr_codec_support:11
[ 0.493316] [audpp.c:audpp_probe] module_name:AUDPLAY0TASK
[ 0.493316] [audpp.c:audpp_probe] queueid:13
<6>[ 0.493316] [audpp.c:audpp_probe] decid:0
Example from I9001...
Now Question how to set right settings for I8150...
LK sounds interesting... because I am playing with GT-S8600 here:
http://forum.xda-developers.com/showthread.php?t=2116846
Best Regards

[Q] [KK] ION_IOC_ALLOC failed with error - Out of memory

I consistently get an out of memory issue when running either the Evervolv or CM11 kitkat ROMs. The trigger seems to be the use of Feedly, combined with either rotating the screen or dragging down the status bar. Once my phone gets in this state, it usually takes a reboot to recover. The lockscreen will come on/off, status bar appears/disappears...
Feedly works on my other KitKat devices and I didn't have this issue before moving to KitKat on my inc. Is this a known issue? A limitation of our device?
Code:
W/InputMethodManagerService( 518): Window already focused, ignoring focus gain of: [email protected] attribute=null, token = [email protected]
I/auditd ( 3354): Starting up
E/auditd ( 3354): Failed on audit_set_pid with error: Protocol not supported
I/auditd ( 3354): Exiting
I/InputReader( 518): Reconfiguring input devices. changes=0x00000004
I/InputReader( 518): Device reconfigured: id=4, name='atmel-touchscreen', size 480x800, orientation 1, mode 1, display id 0
I/ActivityManager( 518): Config changes=480 {1.0 310mcc12mnc en_US ldltr sw320dp w533dp h294dp 240dpi nrml long land finger -keyb/v/h tball/v s.10 themeResource=null}
D/PhoneStatusBar( 1023): mSettingsPanelGravity = 55
I/MODAL ( 3199): draw
I/ActivityManager( 518): Timeline: Activity_windows_visible id: ActivityRecord{42061248 u0 com.devhd.feedly/.Main t3} time:620191
I/WindowManager( 518): Screen frozen for +661ms due to Window{421c2630 u0 StatusBar}
E/memalloc( 3199): ION_IOC_ALLOC failed with error - Out of memory
E/gralloc ( 3199): gralloc failed err=Out of memory
W/GraphicBufferAllocator( 3199): alloc(512, 384, 1, 00000133, ...) failed -12 (Out of memory)
E/memalloc( 3199): ION_IOC_ALLOC failed with error - Out of memory
E/gralloc ( 3199): gralloc failed err=Out of memory
W/GraphicBufferAllocator( 3199): alloc(512, 384, 1, 00000133, ...) failed -12 (Out of memory)
I/ActivityManager( 518): Config changes=480 {1.0 310mcc12mnc en_US ldltr sw320dp w320dp h508dp 240dpi nrml long port finger -keyb/v/h tball/v s.11 themeResource=null}
I/InputReader( 518): Reconfiguring input devices. changes=0x00000004
I/InputReader( 518): Device reconfigured: id=4, name='atmel-touchscreen', size 480x800, orientation 0, mode 1, display id 0
D/PhoneStatusBar( 1023): mSettingsPanelGravity = 55
I/MODAL ( 3199): draw
I/ActivityManager( 518): Timeline: Activity_windows_visible id: ActivityRecord{42061248 u0 com.devhd.feedly/.Main t3} time:622236
E/memalloc( 88): ION_IOC_ALLOC failed with error - Out of memory
E/gralloc ( 88): gralloc failed err=Out of memory
W/GraphicBufferAllocator( 88): alloc(480, 800, 1, 00000b03, ...) failed -12 (Out of memory)
D/GraphicBufferAllocator( 88): Allocated buffers:
D/GraphicBufferAllocator( 88): 0x416318e8: 2300.00 KiB | 720 ( 736) x 800 | 2 | 0x00000933
D/GraphicBufferAllocator( 88): 0x4163fb60: 1500.00 KiB | 480 ( 480) x 800 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): 0x41641660: 1500.00 KiB | 480 ( 480) x 800 | 1 | 0x00000b33
D/GraphicBufferAllocator( 88): 0x41644308: 1500.00 KiB | 480 ( 480) x 800 | 2 | 0x00001a03
D/GraphicBufferAllocator( 88): 0x41644dc0: 1500.00 KiB | 480 ( 480) x 800 | 2 | 0x00001a03
D/GraphicBufferAllocator( 88): 0x41666018: 1500.00 KiB | 800 ( 800) x 480 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): 0x416660a0: 118.75 KiB | 800 ( 800) x 38 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): 0x416667a8: 118.75 KiB | 800 ( 800) x 38 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): Total allocated (estimate): 10037.50 KB
E/ ( 88): GraphicBufferAlloc::createGraphicBuffer(w=480, h=800) failed (Out of memory), handle=0x0
E/BufferQueue( 88): [com.devhd.feedly/com.devhd.feedly.Main] dequeueBuffer: SurfaceComposer::createGraphicBuffer failed
W/Adreno200-EGLSUB( 3199): <DequeueBuffer:461>: dequeue native buffer fail: Out of memory
W/Adreno200-ES20( 3199): <gl2_surface_swap:43>: GL_OUT_OF_MEMORY
W/Adreno200-EGL( 3199): <eglSwapBuffers:3498>: EGL_BAD_ALLOC
W/HardwareRenderer( 3199): EGL error: EGL_BAD_ALLOC
W/HardwareRenderer( 3199): Mountain View, we've had a problem here. Switching back to software rendering.
E/memalloc( 88): ION_IOC_ALLOC failed with error - Out of memory
E/gralloc ( 88): gralloc failed err=Out of memory
W/GraphicBufferAllocator( 88): alloc(480, 800, 1, 00000933, ...) failed -12 (Out of memory)
D/GraphicBufferAllocator( 88): Allocated buffers:
D/GraphicBufferAllocator( 88): 0x416318e8: 2300.00 KiB | 720 ( 736) x 800 | 2 | 0x00000933
D/GraphicBufferAllocator( 88): 0x4163fb60: 1500.00 KiB | 480 ( 480) x 800 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): 0x41641660: 1500.00 KiB | 480 ( 480) x 800 | 1 | 0x00000b33
D/GraphicBufferAllocator( 88): 0x41644308: 1500.00 KiB | 480 ( 480) x 800 | 2 | 0x00001a03
D/GraphicBufferAllocator( 88): 0x41644dc0: 1500.00 KiB | 480 ( 480) x 800 | 2 | 0x00001a03
D/GraphicBufferAllocator( 88): 0x41666018: 1500.00 KiB | 800 ( 800) x 480 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): 0x416660a0: 118.75 KiB | 800 ( 800) x 38 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): 0x416667a8: 118.75 KiB | 800 ( 800) x 38 | 1 | 0x00000b03
D/GraphicBufferAllocator( 88): Total allocated (estimate): 10037.50 KB
E/ ( 88): GraphicBufferAlloc::createGraphicBuffer(w=480, h=800) failed (Out of memory), handle=0x0
E/BufferQueue( 88): [com.devhd.feedly/com.devhd.feedly.Main] dequeueBuffer: SurfaceComposer::createGraphicBuffer failed
E/Surface ( 3199): dequeueBuffer failed (Out of memory)
E/ViewRootImpl( 3199): OutOfResourcesException initializing HW surface
E/ViewRootImpl( 3199): android.view.Surface$OutOfResourcesException
E/ViewRootImpl( 3199): at android.view.Surface.nativeLockCanvas(Native Method)
E/ViewRootImpl( 3199): at android.view.Surface.lockCanvas(Surface.java:243)
E/ViewRootImpl( 3199): at android.view.ViewRootImpl.drawSoftware(ViewRootImpl.java:2435)
E/ViewRootImpl( 3199): at android.view.ViewRootImpl.draw(ViewRootImpl.java:2409)
E/ViewRootImpl( 3199): at android.view.ViewRootImpl.performDraw(ViewRootImpl.java:2253)
E/ViewRootImpl( 3199): at android.view.ViewRootImpl.performTraversals(ViewRootImpl.java:1883)
E/ViewRootImpl( 3199): at android.view.ViewRootImpl.doTraversal(ViewRootImpl.java:1000)
E/ViewRootImpl( 3199): at android.view.ViewRootImpl$TraversalRunnable.run(ViewRootImpl.java:5670)
E/ViewRootImpl( 3199): at android.view.Choreographer$CallbackRecord.run(Choreographer.java:761)
E/ViewRootImpl( 3199): at android.view.Choreographer.doCallbacks(Choreographer.java:574)
E/ViewRootImpl( 3199): at android.view.Choreographer.doFrame(Choreographer.java:544)
E/ViewRootImpl( 3199): at android.view.Choreographer$FrameDisplayEventReceiver.run(Choreographer.java:747)
E/ViewRootImpl( 3199): at android.os.Handler.handleCallback(Handler.java:733)
E/ViewRootImpl( 3199): at android.os.Handler.dispatchMessage(Handler.java:95)
E/ViewRootImpl( 3199): at android.os.Looper.loop(Looper.java:136)
E/ViewRootImpl( 3199): at android.app.ActivityThread.main(ActivityThread.java:5081)
E/ViewRootImpl( 3199): at java.lang.reflect.Method.invokeNative(Native Method)
E/ViewRootImpl( 3199): at java.lang.reflect.Method.invoke(Method.java:515)
E/ViewRootImpl( 3199): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:791)
E/ViewRootImpl( 3199): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:607)
E/ViewRootImpl( 3199): at dalvik.system.NativeStart.main(Native Method)
I/WindowManager( 518): Out of memory for surface! Looking for leaks...
W/WindowManager( 518): No leaked surfaces; killing applicatons!
W/ActivityManager( 518): Killing processes Free memory at adjustment 5
W/WindowManager( 518): Due to memory failure, waiting a bit for next layout
I/Process ( 3199): Sending signal. PID: 3199 SIG: 9
W/ViewRootImpl( 3199): No processes killed for memory; killing self
I/ActivityManager( 518): Process com.devhd.feedly (pid 3199) has died.
W/ActivityManager( 518): Force removing ActivityRecord{42061248 u0 com.devhd.feedly/.Main t3}: app died, no saved state
W/InputDispatcher( 518): channel '42200248 com.devhd.feedly/com.devhd.feedly.Main (server)' ~ Consumer closed input channel or an error occurred. events=0x9
E/InputDispatcher( 518): channel '42200248 com.devhd.feedly/com.devhd.feedly.Main (server)' ~ Channel is unrecoverably broken and will be disposed!
W/InputDispatcher( 518): Attempted to unregister already unregistered input channel '42200248 com.devhd.feedly/com.devhd.feedly.Main (server)'
I/WindowState( 518): WIN DEATH: Window{42200248 u0 com.devhd.feedly/com.devhd.feedly.Main}
I/WindowManager( 518): Screen frozen for +676ms due to Window{421c2630 u0 StatusBar}
W/InputMethodManagerService( 518): Got RemoteException sending setActive(false) notification to pid 3199 uid 10068
W/Binder ( 1140): Caught a RuntimeException from the binder stub implementation.
W/Binder ( 1140): java.lang.NullPointerException
W/Binder ( 1140): at android.inputmethodservice.IInputMethodWrapper.setSessionEnabled(IInputMethodWrapper.java:280)
W/Binder ( 1140): at com.android.internal.view.IInputMethod$Stub.onTransact(IInputMethod.java:129)
W/Binder ( 1140): at android.os.Binder.execTransact(Binder.java:404)
W/Binder ( 1140): at dalvik.system.NativeStart.run(Native Method)
I/ActivityManager( 1183): Timeline: Activity_idle id: [email protected] time:623239
I/ActivityManager( 518): Timeline: Activity_windows_visible id: ActivityRecord{42191898 u0 com.cyanogenmod.trebuchet/com.android.launcher3.Launcher t1} time:623244

I've not heard of this issue before. It wouldn't surprise me if part of it is due to lack of resources or the rest poor app coding.
Sent from my One using Tapatalk

WiFi toggle stuck

Lately my G2 ls980 is having WiFi toggle stuck problem I wanted to know if its hardware problem or software? I'm on ls980zve
Logcat :
E/Parcel ( 558): Reading a NULL string not supported here.
E/Parcel ( 558): Reading a NULL string not supported here.
D/PhoneInterfaceManager( 1511): [PhoneIntfMgr] sigLevel = 6
D/PhoneApp( 1511): getIsInUseVoLTE : false
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1864] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004807000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1864] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1865] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004907000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1865] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
E/Parcel ( 558): Reading a NULL string not supported here.
E/Parcel ( 558): Reading a NULL string not supported here.
D/BubblePopupHelper( 1157): isShowingBubblePopup : false
D/PhoneInterfaceManager( 1511): [PhoneIntfMgr] sigLevel = 6
D/PhoneApp( 1511): getIsInUseVoLTE : false
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1866] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004a07000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1866] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1867] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004b07000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1867] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1868] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004c07000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1868] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1869] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004d07000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1869] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1870] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004e07000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1870] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1871] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
D/dalvikvm( 958): GC_EXPLICIT freed 3211K, 16% free 41183K/48968K, paused 14ms+
33ms, total 284ms
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000004f07000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1871] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
I/Vold ( 260): [LGE][VOLD][NetlinkHandler.cpp][onEvent()] subsys:cpu, action
:0
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
I/Vold ( 260): [LGE][VOLD][NetlinkHandler.cpp][onEvent()] subsys:cpu, action
:0
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1872] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000005007000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1872] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
E/Parcel ( 558): Reading a NULL string not supported here.
E/Parcel ( 558): Reading a NULL string not supported here.
D/BubblePopupHelper( 1157): isShowingBubblePopup : false
D/PhoneInterfaceManager( 1511): [PhoneIntfMgr] sigLevel = 6
D/PhoneApp( 1511): getIsInUseVoLTE : false
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1873] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000005107000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1873] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
E/ThermalEngine( 288): [GPU_MON] 0 percent. Current Sampling Time is 4 sec
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1874] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000005207000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1874] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1875] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000005307000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [1875] < OEM_HOOK_RAW error: com.android.internal.telepho
ny.CommandException: GENERIC_FAILURE
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 2
D/QC_RIL_OEM_HOOK( 1538): sendOemRilRequestRaw returns value = -2
D/BubblePopupHelper( 1157): isShowingBubblePopup : false
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
E/Parcel ( 558): Reading a NULL string not supported here.
E/Parcel ( 558): Reading a NULL string not supported here.
D/PhoneInterfaceManager( 1511): [PhoneIntfMgr] sigLevel = 6
D/PhoneApp( 1511): getIsInUseVoLTE : false
W/ProcessCpuTracker( 958): Skipping unknown process pid 14933
W/ProcessCpuTracker( 958): Skipping unknown process pid 14934
D/QcrilMsgTunnelIfaceManager( 1655): handleMessage what = 1
D/QcrilMsgTunnelSocket( 1655): [1876] > OEM_HOOK_RAW[514f454d484f4f4b04100900040
000002a230000]
I/rmt_storage( 572): rmt_storage_connect_cb: clnt_h=0x7 conn_h=0xb7caf178
I/rmt_storage( 572): rmt_storage_rw_iovec_cb: /boot/modem_fs1: clnt_h=0x1: req_
h=0xb msg_id=3: R/W request received
I/rmt_storage( 572): wakelock acquired: 1, error no: 42
I/rmt_storage( 572): rmt_storage_client_thread: /boot/modem_fs1: clnt_h=0x1 Unb
lock worker thread (th_id: -1211437336)
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] Enter qcci_qmi_lge_nv_send_cmd().....
E/QMI_FW ( 268): [LGE_VSS_QCCI][AP] NV sendind MSG = 0x600
W/wpa_supplicant( 5136): wlan0: Failed to initiate AP scan
D/QcrilMsgTunnelSocket( 1655): readRilMessage: Buffer = [[email protected] HexData = [0
00000005407000002000000ffffffff]
D/QcrilMsgTunnelSocket( 1655): Rcvd SOLICITED response with 12 bytes data for SU
B0
D/QcRilRequest( 1655): [187

Install Magisk - bootloop

Hey there,
After unlocked the bootloader of my Google Pixel 3 XL and installed TWRP i'v tried to install any version of Magisk with no success. (Latest factory img)
Everytime i'm getting back to a bootloop and the only way to fix it is to flash uninstallation of Magisk through TWRP/ADB.
I have debugged it for a while and here the logs:
Magisk.log -
Code:
--------- beginning of main
--------- beginning of system
08-27 16:04:24.445 804 804 I Magisk : Magisk v19.4-736729f5(19307) daemon started
08-27 16:04:24.445 804 804 I Magisk : * Device API level: 28
08-27 16:04:24.496 804 805 I Magisk : ** post-fs-data mode running
08-27 16:04:24.498 804 805 I Magisk : * Initializing Magisk environment
08-27 16:04:24.500 804 805 I Magisk : * Mounting mirrors
08-27 16:04:24.500 804 805 I Magisk : mount: /sbin/.magisk/mirror/product
08-27 16:04:24.500 804 805 I Magisk : mount: /sbin/.magisk/mirror/vendor
08-27 16:04:24.500 804 805 I Magisk : mount: /sbin/.magisk/mirror/data
08-27 16:04:24.500 804 805 I Magisk : link: /sbin/.magisk/mirror/system
08-27 16:04:24.501 804 805 I Magisk : * Setting up internal busybox
08-27 16:04:24.526 804 805 I Magisk : * Running post-fs-data.d scripts
08-27 16:04:24.529 804 805 I Magisk : * Running module post-fs-data scripts
08-27 16:04:24.529 804 805 I Magisk : * Loading modules
08-27 16:04:24.541 804 822 I Magisk : * Starting MagiskHide
08-27 16:04:24.541 804 822 I Magisk : hide_policy: Hiding sensitive props
08-27 16:04:24.542 804 822 I Magisk : hide_list init: [com.google.android.gms/com.google.android.gms.unstable]
08-27 16:04:24.559 804 822 I Magisk : hide_list init: [org.microg.gms.droidguard/com.google.android.gms.unstable]
08-27 16:04:25.001 804 1059 I Magisk : ** late_start service mode running
08-27 16:04:25.002 804 1059 I Magisk : * Running service.d scripts
08-27 16:04:25.002 804 1059 I Magisk : * Running module service scripts
--------- beginning of crash
Kernel Log -
Code:
[ 3.214915] F2FS-fs (dm-0): Reduce reserved blocks for root = 26387
[ 3.271699] F2FS-fs (dm-0): Mounted with checkpoint version = 60866e1
[ 3.360081] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360107] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360602] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360637] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360648] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360813] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360821] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360833] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.360863] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 3.510326] google_charger: l=17 vb=3691 vc=3687 c=560 fv=4200000 t=429 s=Fast usb=1 wlc=0
[ 3.510346] google_charger: failed to get POWER_SUPPLY_PROP_VOLTAGE_NOW from 'usb', ret=-61
[ 3.510444] google_charger: usbchg=USB usbv=0 usbc=368 usbMv=5000 usbMc=75
[ 3.510453] google_charger: MSC_DSG vbatt_idx:0->0 vbatt=3691093 ibatt=560000 fv_uv=4200000 cv_cnt=3 ov_cnt=0
[ 4.026738] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.026792] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.026800] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.026890] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.026897] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.026978] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.027134] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.124868] SELinux: Context u:object_r:magisk_file:s0 is not valid (left unmapped).
[ 4.126428] SELinux: Context is not valid (left unmapped).
[ 4.205874] EXT4-fs (sdf2): mounted filesystem with ordered data mode. Opts:
[ 4.212381] F2FS-fs (dm-0): Reduce reserved blocks for root = 26387
[ 4.236052] F2FS-fs (dm-0): Mounted with checkpoint version = 60866e4
[ 4.267088] EXT4-fs (sda5): mounted filesystem without journal. Opts: barrier=1
[ 4.271580] EXT4-fs (sda5): mounted filesystem without journal. Opts: barrier=1
[ 4.278003] EXT4-fs (sda9): mounted filesystem without journal. Opts: barrier=1
[ 4.346748] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.346771] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.347347] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.347381] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.347391] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.347544] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.347552] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.347562] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.347594] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 4.823193] EXT4-fs (sdf2): mounted filesystem with ordered data mode. Opts:
[ 5.013394] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.013459] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.013467] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.013586] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.013594] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.013688] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.013873] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.333403] logbuffer: Fmt is empty. Aborting after printing RTC timestamp
[ 5.601618] google_charger: l=17 vb=3674 vc=3656 c=665 fv=4200000 t=429 s=Fast usb=1 wlc=0
[ 5.601639] google_charger: failed to get POWER_SUPPLY_PROP_VOLTAGE_NOW from 'usb', ret=-61
[ 5.601782] google_charger: usbchg=USB usbv=0 usbc=414 usbMv=5000 usbMc=75
[ 5.601791] google_charger: MSC_DSG vbatt_idx:0->0 vbatt=3674062 ibatt=665937 fv_uv=4200000 cv_cnt=3 ov_cnt=0
[ 6.042616] EXT4-fs (sdf2): mounted filesystem with ordered data mode. Opts:
[ 6.051742] selinux: avc: denied { set } for property=sys.usb.config pid=660 uid=0 gid=0 scontext=u:r:recovery:s0 tcontext=u:object_r:exported_system_radio_prop:s0 tclass=property_service permissive=1\x0a
[ 6.051843] init: processing action (sys.usb.config=none && sys.usb.configfs=1) from (/init.recovery.sdm845.rc:154)
[ 6.052280] init: Command 'write /config/usb_gadget/g1/UDC none' action=sys.usb.config=none && sys.usb.configfs=1 (/init.recovery.sdm845.rc:155) took 0ms and failed: Unable to write to file '/config/usb_gadget/g1/UDC': Unable to write file contents: No such device
[ 6.052385] init: Sending signal 9 to service 'adbd' (pid 665) process group...
[ 6.055652] oom_reaper: reaped process 665 (adbd), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB
[ 6.084519] libprocessgroup: Successfully killed process cgroup uid 0 pid 665 in 32ms
[ 6.085045] init: Service 'adbd' (pid 665) received signal 9
[ 6.085831] init: processing action (sys.usb.config=mtp,adb && sys.usb.configfs=1) from (/init.recovery.sdm845.rc:189)
[ 6.085856] init: starting service 'adbd'...
[ 6.087685] init: Created socket '/dev/socket/adbd', mode 660, user 1000, group 1000
[ 6.090276] EXT4-fs (sda5): mounted filesystem without journal. Opts: barrier=1
[ 6.092247] read descriptors
[ 6.092270] read strings
[ 6.256916] sec_ts 2-0048: [sec_input] get_tsp_nvm_data: offset:0 data:FF
[ 6.486899] sec_ts 2-0048: [sec_input] get_tsp_nvm_data: offset:1 data:01
[ 6.716907] sec_ts 2-0048: [sec_input] get_tsp_nvm_data: offset:54 data:FF
[ 6.859608] read descriptors
[ 6.859626] read strings
[ 6.860352] init: processing action (sys.usb.config=mtp,adb && sys.usb.configfs=1 && sys.usb.ffs.mtp.ready=1 && sys.usb.ffs.ready=1) from (/init.recovery.sdm845.rc:192)
[ 6.946922] sec_ts 2-0048: [sec_input] get_tsp_nvm_data: offset:55 data:FF
[ 6.947115] sec_ts 2-0048: [sec_input] sec_ts_read_info_work: fac_nv:FF, cal_count:01
[ 7.134705] msm-dwc3 a600000.ssusb: Avail curr from USB = 100
[ 7.176917] sec_ts 2-0048: [sec_input] get_tsp_nvm_data: offset:3 data:01
[ 7.182755] android_work: sent uevent USB_STATE=CONNECTED
[ 7.233548] configfs-gadget gadget: high-speed config #1: b
[ 7.233740] msm-dwc3 a600000.ssusb: Avail curr from USB = 500
[ 7.233936] android_work: sent uevent USB_STATE=CONFIGURED
[ 7.406899] sec_ts 2-0048: [sec_input] get_tsp_nvm_data: offset:4 data:12
[ 7.407083] sec_ts 2-0048: [sec_input] sec_ts_read_info_work: tune_fix_ver [0112]
[ 7.407815] sec_ts 2-0048: [sec_input] sec_ts_read_info_work: left: -1, center: -1, right: -1
[ 7.408372] sec_ts 2-0048: [sec_input] execute_selftest: Self test start!
[ 7.734875] google_charger: l=17 vb=3723 vc=3691 c=28 fv=4200000 t=429 s=Fast usb=1 wlc=0
[ 7.734888] google_charger: failed to get POWER_SUPPLY_PROP_VOLTAGE_NOW from 'usb', ret=-61
[ 7.735017] google_charger: usbchg=USB usbv=0 usbc=414 usbMv=5000 usbMc=500
[ 7.735027] google_charger: MSC_DSG vbatt_idx:0->0 vbatt=3723906 ibatt=28125 fv_uv=4200000 cv_cnt=3 ov_cnt=0
[ 8.087223] sec_ts 2-0048: [sec_input] sec_ts_wait_for_ready_with_count: 1D, 41, 00, 00, 00, 00, 00, 00 [14]
[ 8.087234] sec_ts 2-0048: [sec_input] execute_selftest: Self test done!
[ 8.127211] [sec_input] sec_ts : SIG 46, 4C, 45, 53 [sec_input] sec_ts : VER 0, 0, 2, 20
[ 8.127231] [sec_input] sec_ts : SIZ 0, 0, 8, 50 [sec_input] sec_ts : CRC A6, 38, D3, AC
[ 8.127248] [sec_input] sec_ts : RES 0, 0, 0, 0 [sec_input] sec_ts : COU 0, 0, 0, 21
[ 8.127265] [sec_input] sec_ts : PAS 0, 0, 0, 21 [sec_input] sec_ts : FAI 0, 0, 0, 0
[ 8.127283] [sec_input] sec_ts : CHA 0, 0, 12, 25 [sec_input] sec_ts : AMB 2, AD, 1, E3
[ 8.127300] [sec_input] sec_ts : RXS 0, 0, 0, 0 [sec_input] sec_ts : TXS 0, 0, 0, 0
[ 8.127317] [sec_input] sec_ts : RXO 0, 0, 0, 0 [sec_input] sec_ts : TXO 0, 0, 0, 0
[ 8.127333] [sec_input] sec_ts : RXG 0, 0, 0, 0 [sec_input] sec_ts : TXG 0, 0, 0, 0
[ 8.127350] [sec_input] sec_ts : RXR 0, 0, 0, 0 [sec_input] sec_ts : TXT 0, 0, 0, 0
[ 8.127368] [sec_input] sec_ts : RXT 0, 0, 0, 0 [sec_input] sec_ts : TXR 0, 0, 0, 0
[ 8.127402] sec_ts 2-0048: [sec_input] sec_ts_read_info_work: 00 00 00 00
[ 8.480068] sec_ts 2-0048: [sec_input] sec_ts_read_raw_data: 3, ALL
[ 8.480077] sec_ts 2-0048: [sec_input] sec_ts_fix_tmode
[ 8.526723] sec_ts 2-0048: [sec_input] sec_ts_read_frame
[ 8.618379] sec_ts 2-0048: [sec_input] sec_ts_print_frame
[ 8.618397] sec_ts 2-0048: [sec_input] TX 00 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17
[ 8.618406] sec_ts 2-0048: [sec_input] +------------------------------------------------------------------------
[ 8.618423] sec_ts 2-0048: [sec_input] Rx00 | 18 21 20 18 15 15 14 13 16 14 14 12 12 11 13 14 19 15
[ 8.618438] sec_ts 2-0048: [sec_input] Rx01 | 29 16 9 5 5 1 -3 -1 1 -1 0 -1 -3 1 -2 3 10 24
[ 8.618452] sec_ts 2-0048: [sec_input] Rx02 | 35 15 3 -1 -2 -3 -11 -8 -7 -9 -9 -9 -9 -8 -8 -4 8 30
[ 8.618467] sec_ts 2-0048: [sec_input] Rx03 | 34 12 -4 -4 -8 -10 -12 -14 -12 -12 -12 -10 -14 -12 -14 -8 5 27
[ 8.618482] sec_ts 2-0048: [sec_input] Rx04 | 32 8 -2 -8 -9 -10 -15 -15 -13 -14 -14 -14 -16 -18 -14 -10 1 27
[ 8.618497] sec_ts 2-0048: [sec_input] Rx05 | 34 7 -5 -6 -9 -11 -17 -13 -14 -12 -13 -14 -15 -16 -17 -12 1 23
[ 8.618512] sec_ts 2-0048: [sec_input] Rx06 | 33 7 -5 -7 -9 -11 -15 -15 -13 -13 -13 -13 -15 -17 -18 -10 0 23
[ 8.618526] sec_ts 2-0048: [sec_input] Rx07 | 29 8 -4 -8 -7 -11 -13 -13 -12 -11 -13 -15 -13 -15 -17 -7 0 22
[ 8.618541] sec_ts 2-0048: [sec_input] Rx08 | 31 5 -5 -7 -9 -13 -17 -15 -13 -13 -12 -13 -16 -15 -17 -13 -3 21
[ 8.618555] sec_ts 2-0048: [sec_input] Rx09 | 29 9 -5 -7 -9 -9 -15 -12 -11 -11 -11 -12 -16 -15 -17 -11 1 21
[ 8.618570] sec_ts 2-0048: [sec_input] Rx10 | 29 5 -5 -9 -10 -10 -16 -14 -12 -10 -10 -11 -16 -15 -19 -16 -2 21
[ 8.618584] sec_ts 2-0048: [sec_input] Rx11 | 27 1 -7 -11 -13 -10 -15 -15 -13 -13 -13 -13 -18 -18 -21 -15 -5 17
[ 8.618599] sec_ts 2-0048: [sec_input] Rx12 | 24 3 -9 -13 -13 -14 -21 -15 -14 -15 -13 -18 -20 -20 -22 -18 -6 16
[ 8.618614] sec_ts 2-0048: [sec_input] Rx13 | 23 -3 -11 -13 -15 -16 -22 -20 -16 -18 -16 -16 -23 -24 -26 -20 -8 17
[ 8.618628] sec_ts 2-0048: [sec_input] Rx14 | 20 -2 -12 -13 -16 -18 -19 -17 -17 -17 -17 -17 -24 -24 -24 -20 -8 15
[ 8.618643] sec_ts 2-0048: [sec_input] Rx15 | 21 -5 -11 -16 -17 -18 -20 -20 -21 -19 -17 -20 -22 -24 -28 -22 -9 15
[ 8.618657] sec_ts 2-0048: [sec_input] Rx16 | 20 -3 -16 -18 -17 -20 -24 -22 -20 -20 -19 -21 -27 -25 -28 -25 -11 12
[ 8.618671] sec_ts 2-0048: [sec_input] Rx17 | 17 -8 -18 -17 -18 -24 -26 -23 -24 -20 -20 -26 -28 -30 -30 -24 -11 11
[ 8.618685] sec_ts 2-0048: [sec_input] Rx18 | 15 -7 -18 -20 -21 -21 -24 -25 -23 -22 -21 -23 -28 -28 -30 -24 -12 10
[ 8.618700] sec_ts 2-0048: [sec_input] Rx19 | 15 -7 -17 -21 -21 -23 -27 -26 -22 -24 -25 -23 -29 -29 -33 -26 -14 12
[ 8.618715] sec_ts 2-0048: [sec_input] Rx20 | 17 -7 -17 -21 -21 -23 -27 -27 -23 -23 -23 -25 -31 -31 -35 -27 -14 9
[ 8.618729] sec_ts 2-0048: [sec_input] Rx21 | 13 -6 -18 -20 -22 -26 -28 -30 -25 -27 -27 -29 -32 -32 -30 -28 -15 9
[ 8.618743] sec_ts 2-0048: [sec_input] Rx22 | 14 -9 -21 -24 -27 -25 -29 -31 -27 -29 -27 -31 -33 -33 -37 -31 -16 8
[ 8.618757] sec_ts 2-0048: [sec_input] Rx23 | 13 -10 -20 -25 -28 -28 -32 -33 -29 -27 -31 -31 -34 -33 -36 -30 -14 8
[ 8.618772] sec_ts 2-0048: [sec_input] Rx24 | 13 -13 -21 -25 -29 -29 -33 -33 -32 -32 -30 -32 -38 -40 -37 -31 -18 9
[ 8.618786] sec_ts 2-0048: [sec_input] Rx25 | 13 -13 -23 -27 -30 -31 -36 -37 -33 -33 -34 -34 -39 -39 -39 -31 -20 6
[ 8.618801] sec_ts 2-0048: [sec_input] Rx26 | 11 -14 -27 -31 -33 -35 -37 -41 -38 -36 -35 -35 -39 -41 -41 -33 -16 5
[ 8.618816] sec_ts 2-0048: [sec_input] Rx27 | 9 -13 -26 -33 -33 -37 -38 -41 -38 -36 -38 -36 -41 -41 -43 -32 -19 9
[ 8.618831] sec_ts 2-0048: [sec_input] Rx28 | 11 -18 -29 -33 -37 -39 -42 -41 -42 -40 -41 -38 -43 -45 -44 -36 -21 7
[ 8.618845] sec_ts 2-0048: [sec_input] Rx29 | 4 -19 -32 -36 -38 -42 -44 -44 -43 -42 -40 -42 -45 -45 -45 -37 -24 6
[ 8.618859] sec_ts 2-0048: [sec_input] Rx30 | 7 -19 -31 -39 -42 -44 -46 -43 -40 -42 -42 -42 -48 -46 -46 -40 -23 5
[ 8.618873] sec_ts 2-0048: [sec_input] Rx31 | 8 -21 -30 -37 -40 -41 -45 -43 -41 -39 -39 -41 -46 -46 -45 -41 -23 5
[ 8.618886] sec_ts 2-0048: [sec_input] Rx32 | 3 -19 -31 -34 -40 -40 -40 -36 -36 -36 -35 -39 -42 -45 -43 -37 -26 2
[ 8.618900] sec_ts 2-0048: [sec_input] Rx33 | 6 -17 -31 -32 -36 -34 -30 -28 -29 -27 -25 -29 -38 -40 -39 -36 -23 1
[ 8.618914] sec_ts 2-0048: [sec_input] Rx34 | -2 -18 -28 -32 -28 -23 -20 -26 -23 -24 -24 -14 -25 -32 -38 -33 -22 -1
[ 8.618927] sec_ts 2-0048: [sec_input] Rx35 | -24 -26 -34 -32 -32 -26 -14 -18 -18 -18 -15 -14 -27 -35 -43 -42 -38 -27
[ 8.618941] sec_ts 2-0048: [sec_input] Rx36 | -41 -19 -21 -21 -29 -41 -11 -11 -11 -13 -11 -13 -41 -34 -30 -34 -43 -42
[ 8.619339] sec_ts 2-0048: [sec_input] sec_ts_release_tmode
[ 9.868305] google_charger: l=17 vb=3721 vc=3686 c=48 fv=4200000 t=429 s=Fast usb=1 wlc=0
[ 9.868329] google_charger: failed to get POWER_SUPPLY_PROP_VOLTAGE_NOW from 'usb', ret=-61
[ 9.868460] google_charger: usbchg=USB usbv=0 usbc=483 usbMv=5000 usbMc=500
[ 9.868469] google_charger: MSC_DSG vbatt_idx:0->0 vbatt=3721562 ibatt=48750 fv_uv=4200000 cv_cnt=3 ov_cnt=0
[ 10.933377] sec_ts 2-0048: [sec_input] sec_ts_fw_update_work: Beginning firmware update after probe.
[ 10.933775] sec_ts 2-0048: [sec_input] sec_ts_read_calibration_report: count:6, pass count:6, fail count:0, status:0xA2
[ 10.933779] sec_ts 2-0048: [sec_input] sec_ts_firmware_update_on_probe: initial firmware update s6sy761.fw, cal:A2
[ 10.935781] ueventd: firmware: loading 's6sy761.fw' for '/devices/platform/soc/888000.i2c/i2c-2/2-0048/firmware/s6sy761.fw'
[ 10.936020] ueventd: firmware: could not find firmware for s6sy761.fw
[ 10.936086] sec_ts 2-0048: [sec_input] sec_ts_firmware_update_on_probe: firmware is not available
[ 10.936107] sec_ts 2-0048: [sec_input] sec_ts_fw_update_work: firmware update was unsuccessful.
[ 10.936113] ueventd: loading /devices/platform/soc/888000.i2c/i2c-2/2-0048/firmware/s6sy761.fw took 0ms
There's a line at the Kernel that i think is connected to the problem -
[ 4.124868] SELinux: Context ubject_r:magisk_file:s0 is not valid (left unmapped).
Click to expand...
Click to collapse
But have no idea how to fix it, i have tried almost everything, any ideas?

Do you have the current Platform Tools?