fake "reboot recovery" (recovery boot up from boot.img)