[Sony Cross-Device General] zdob:
1) I write unlock.ta

2) read TA 2050 - after 1st reboot to flashmode:

S - Format: Log Type - Time(microsec) - Message - Optional Info
S - Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.MXF.1.0-00589-LAHAINA-2
S - IMAGE_VARIANT_STRING=SocLahainaLAA
S - OEM_IMAGE_VERSION_STRING=ip-10-26-16-222
S - Boot Interface: UFS
S - Secure Boot: On
S - Boot Config @ 0x00786070 = 0x00000001
S - JTAG ID @ 0x00786130 = 0x301350e1
S - OEM ID @ 0x00786138 = 0x00780001
S - Serial Number @ 0x00786134 = 0x3dd46605
S - Feature Config Row 0 @ 0x00784148 = 0x0000000000000000
S - Feature Config Row 1 @ 0x00784150 = 0x0000000000000000
S - Core 0 Frequency, 1459 MHz
S - PBL Patch Ver: 3
D - 9307 - pbl_apps_init_timestamp
D - 50654 - bootable_media_detect_timestamp
D - 14099 - bl_elf_metadata_loading_timestamp
D - 25099 - bl_hash_seg_auth_timestamp
D - 14453 - bl_elf_loadable_segment_loading_timestamp
D - 4545 - bl_elf_segs_hash_verify_timestamp
D - 16957 - bl_sec_hash_seg_auth_timestamp
D - 815 - bl_sec_segs_hash_verify_timestamp
D - 25 - pbl_populate_shared_data_and_exit_timestamp
S - 135954 - PBL, End
B - 148230 - SBL1, Start
B - 281576 - SBL1 BUILD @ 10:29:24 on Sep 16 2021
B - 285724 - usb: usb2_rcal , 0xa
B - 289170 - usb: platform
B - 292647 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
B - 301401 - usb: eud_serial_upd , 0x3dd46605
D - 301736 - sbl1_hw_init
B - 501511 - UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
B - 503677 - UFS Boot LUN: 1
D - 218410 - boot_media_init
D - 0 - smss_load_cancel
B - 527741 - SMSS - Image Load, Start
D - 3111 - SMSS - Image Loaded, Delta - (0 Bytes)
D - 25955 - Auth Metadata
D - 27053 - sbl1_xblconfig_init
B - 564097 - XBL Config - Image Load, Start
D - 0 - shrm_load_cancel
B - 571966 - SHRM - Image Load, Start
D - 25559 - Auth Metadata
D - 1312 - Segments hash check
D - 34313 - SHRM - Image Loaded, Delta - (39808 Bytes)
D - 0 - boot_default_cdt_init
D - 213 - boot_cdt_init
B - 618814 - CDT - Image Load, Start
B - 621651 - CDT Version:3,Platform ID:8,Major ID:2,Minor ID:0,Subtype:0
D - 16927 - sbl1_hw_platform_pre_ddr
D - 0 - devcfg init
B - 648369 - PMIC A:2.0 B:2.2 C:2.2 D:2.0 E:2.3
B - 650229 - PM: PM2 0x40
B - 653218 - PM: UVLO on Palani
B - 655872 - PM: PON by SYSOK
B - 907161 - PM: SET_VAL:Skip
B - 907466 - PM: PSI: b0x00_v0x81
B - 912834 - PM: Device Init # SPMI Transn: 15139
D - 275018 - pm_device_init, Delta
B - 918446 - pm_driver_init, Start
B - 930524 - no SDI. gcc_reset_status=2
B - 932659 - S3_timer is set to 16sec

B - 934520 - PM: Driver Init # SPMI Transn: 598
D - 16379 - pm_driver_init, Delta
B - 945561 - PM: Battery ID: 15176Ohm
B - 946537 - PM: VBAT: 4343mV IBAT: 135mA
B - 1449909 - PM: VBAT: 4369mV IBAT: 0mA
B - 1450122 - PM: Charger port type: SDP
B - 1953525 - PM: Primary Charging loop exit
B - 1953952 - PM: CHG Init # SPMI Transn: 15852
B - 1957825 - vsense_init, Start
D - 0 - vsense_init, Delta
D - 1365973 - sbl1_hw_pre_ddr_init
D - 0 - boot_dload_handle_forced_dload_timeout
D - 3477 - sbl1_load_ddr_training_data
B - 2013000 - Pre_DDR_clock_init, Start
D - 91 - Pre_DDR_clock_init, Delta
D - 12901 - sbl1_ddr_set_params
B - 2024712 - sbl1_ddr_init, Start
B - 2028097 - LP5 DDR detected
B - 2047160 - eCDT MRR - Data Starting Address: 0x09066D00

D - 56211 - sbl1_ddr_init, Delta
B - 2084278 - DSF version = 247.8.15
B - 2087633 - Manufacturer ID = 1, Device Type = 8
B - 2091232 - Rank 0 size = 6144 MB, Rank 1 size = 6144 MB
B - 2096051 - DDR_INFO:LogVer=0002,type=0008,MR4=0x0000,0x0000,0x0000,0x0000,MR5=0x01,MR6=0x08,MR7=0x00,MR8=0x14
B - 2107275 - DDR_RANK:LogVer=0002
B - 2111942 - ** sdram0_cs0=1536MB,sdram0_cs1=1536MB
B - 2115327 - ** sdram1_cs0=1536MB,sdram1_cs1=1536MB
B - 2120512 - ** sdram2_cs0=1536MB,sdram2_cs1=1536MB
B - 2125697 - ** sdram3_cs0=1536MB,sdram3_cs1=1536MB
D - 106384 - sbl1_ddr_init
D - 0 - boot_pre_ddi_entry
B - 2138812 - do_ddr_training, Start
B - 2181421 - DDR: Start of DDR Training Restore
B - 2188710 - Current DDR Freq = 1709 MHz
B - 2188710 - Max enabled DDR Freq = 3196 MHz
B - 2192736 - DDR: End of DDR Training Restore
D - 55144 - do_ddr_training, Delta
D - 62983 - sbl1_do_ddr_training
D - 671 - boot_ddi_entry
B - 2208566 - Pimem init cmd, entry
D - 9119 - Pimem init cmd, exit
B - 2221132 - External heap init, Start
B - 2223999 - External heap init, End

UEFI Start [ 2971]
- 0x09FC01000 [ 2975] Sec.efi
ASLR : ON
DEP : ON (RTB)
Timer Delta : +17 mS
RAM Entry 0 : Base 0x0080000000 Size 0x0037500000
RAM Entry 1 : Base 0x0200000000 Size 0x0180000000
RAM Entry 2 : Base 0x00C0000000 Size 0x0140000000
RAM Entry 3 : Base 0x00B9900000 Size 0x0000000000
Total Available RAM : 12149 MB (0x02F7500000)
Total Installed RAM : 12288 MB (0x0300000000)
Multithread : ON (Lib ver 1.2)
CPU Cores : 8 (init 2)
Init 1 aux cores of 7
Init CPU core 1
> Scheduler up on Core 1
CONF File : uefiplatLA.cfg
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Build Info : 64b Sep 16 2021 10:29:57
Boot Device : UFS
PROD Mode : FALSE
Retail : TRUE
- 0x09ECC7000 [ 3034] DxeCore.efi
Loading DxeCore at 0x009ECC7000 EntryPoint=0x009ECC8000
HOBLIST address in DXE = 0x9EAB8018
FV Hob 0x9FC00000 - 0x9FEFFFFF
FV Hob 0x9ED06000 - 0x9F0AEFFF
FV2 Hob 0x9ED06000 - 0x9F0AEFFF
631008B0-B2D1-410A-8B49-2C5C4D8ECC7E - 00000000-0000-0000-0000-000000000000
- 0x09EC44000 [ 3037] XHwresetDxe.efi
- 0x09EC3D000 [ 3037] MazeDetDxe.efi
- 0x09EC64000 [ 3037] EnvDxe.efi
- 0x09EC5A000 [ 3038] RscRtDxe.efi
- 0x09EC52000 [ 3038] SCHandlerRtDxe.efi
- 0x09E78C000 [ 3038] RuntimeDxe.efi
- 0x09EC30000 [ 3038] ArmCpuDxe.efi
- 0x09EC27000 [ 3039] ArmGicDxe.efi
- 0x09EC20000 [ 3039] MetronomeDxe.efi
- 0x09EC18000 [ 3039] ArmTimerDxe.efi
- 0x09EC0E000 [ 3040] SmemDxe.efi
- 0x09EBAD000 [ 3040] DALSys.efi
- 0x09EBA5000 [ 3041] HWIODxeDriver.efi
- 0x09EB9A000 [ 3041] ChipInfo.efi
- 0x09EB92000 [ 3041] PlatformInfoDxeDriver.efi
- 0x09EB85000 [ 3041] HALIOMMU.efi
- 0x09EB71000 [ 3041] ULogDxe.efi
- 0x09EB69000 [ 3042] CmdDbDxe.efi
- 0x09EB61000 [ 3042] PwrUtilsDxe.efi
- 0x09EB4F000 [ 3043] NpaDxe.efi
- 0x09EB3F000 [ 3043] RpmhDxe.efi
- 0x09EB33000 [ 3043] VcsDxe.efi
- 0x09EB04000 [ 3044] ClockDxe.efi
>>> Cluster 0: 1497600000 Hz
>>> Cluster 2: 1248000000 Hz
- 0x09EAF7000 [ 3052] ICBDxe.efi
- 0x09EAEE000 [ 3054] ShmBridgeDxeLA.efi
- 0x09EADF000 [ 3055] ScmDxeLA.efi
- 0x09EAD4000 [ 3057] DiskIoDxe.efi
- 0x09EAC7000 [ 3057] PartitionDxe.efi
- 0x09EABF000 [ 3058] EnglishDxe.efi
- 0x09E781000 [ 3058] FvSimpleFileSystem.efi
- 0x09E760000 [ 3058] UFSDxe.efi
UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
UFS Boot LUN: 1
- 0x09D230000 [ 3086] Fat.efi
- 0x09D221000 [ 3087] TzDxeLA.efi
- 0x09D190000 [ 3089] VariableDxe.efi
LoadSecureApps: Load app from partition(tzxflattest): Status = 0x0, AppId = 2
<VariablePolicyInitialize:179> variable policy engine disabled
- 0x09CF68000 [ 3303] QcomWDogDxe.efi
HW Wdog Setting from PCD : Disabled
- 0x09CF5F000 [ 3304] ResetRuntimeDxe.efi
- 0x09CF57000 [ 3305] XGAdcDxe.efi
- 0x09CF50000 [ 3305] WatchdogTimer.efi
- 0x09CF35000 [ 3305] SecurityStubDxe.efi
- 0x09E407000 [ 3306] EmbeddedMonotonicCounter.efi
- 0x09CF2C000 [ 3307] RealTimeClock.efi
- 0x09CF05000 [ 3307] DevicePathDxe.efi
- 0x09CF24000 [ 3307] CapsuleRuntimeDxe.efi
- 0x09CEBE000 [ 3308] HiiDatabase.efi
- 0x09CF1B000 [ 3308] FontDxe.efi
- 0x09CDF0000 [ 3313] QcomBds.efi
- 0x09CE83000 [ 3321] VerifiedBootDxe.efi
- 0x09CEA9000 [ 3322] DALTLMM.efi
- 0x09CE79000 [ 3322] I2C.efi
- 0x09CE6F000 [ 3323] SPMI.efi
- 0x09CDA9000 [ 3327] PmicDxe.efi
PM0: 47, PM1: 48, PM2: 49, PM3: 50, PM4: 51,
app_pshold_cfg change: DVDD_SHUTDOWN -> NORMAL_SHUTDOWN
Module cannot re-initialize DAL module environment
- 0x09CDD4000 [ 3351] SdccDxe.efi
- 0x09CE3B000 [ 3352] DDRInfoDxe.efi
- 0x09CE48000 [ 3355] FeatureEnablerDxe.efi
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler_a)Failed: Status(0x800000000000000E), appId(0)
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler)Failed: Status(0x800000000000000E), appId(0)
Image partition label not found
LoadImageFromPartitionUsingGuid Failed: 14
EFI_QseecomStartApp: Load Failed: Status(0x800000000000000E)
Failed to start featenabler_a TA, status = 14
- 0x09CD04000 [ 3359] DisplayDxe.efi
- 0x09CD84000 [ 3360] FvDxe.efi
- 0x09CE66000 [ 3361] PILProxyDxe.efi
- 0x09CCE8000 [ 3361] PILDxe.efi
pil-abl Done t=87ms s=1ms a=45ms f=38ms
- 0x09CD78000 [ 3534] SPSSDxe.efi
SPSSDxe [spss_iar_main] I: IAR-STATE is NOT ACTIVATED [0x0], Exit now
Overriding PIL cfg by caller
pil-SPSS Failed to get MDT size
pil-SPSS Failed to load metadata
pil-SPSS Failed to boot subsys
SPSSDxe:: SPSSDxe_LoadSPSS ProcessPilImageExt = Load Error
Error: Image at 0009CD78000 start failed: Load Error
- 0x09CD7A000 [ 3545] IPCCDxe.efi
- 0x09CD5D000 [ 3545] GlinkDxe.efi
smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=13, size=32, flags=0x40000000. - 0x09CD72000 [ 3546] PrintDxe.efi
- 0x09CC9D000 [ 3546] SPI.efi
- 0x09CC84000 [ 3547] PmicGlinkDxe.efi
- 0x09CD96000 [ 3547] UsbPwrCtrlDxe.efi
- 0x09CC45000 [ 3548] QcomChargerDxeLA.efi
QcomChargerDxe:: ChargerPlatform_Init Enabled WDOG.
- 0x09CC7C000 [ 3569] ChargerExDxe.efi
- 0x09CC12000 [ 3569] UsbfnDwc3Dxe.efi
- 0x09CC71000 [ 3570] XhciPciEmulation.efi
- 0x09CBFB000 [ 3570] XhciDxe.efi
- 0x09CBE9000 [ 3571] UsbBusDxe.efi
- 0x09CC90000 [ 3571] UsbKbDxe.efi
- 0x09CC39000 [ 3572] UsbMassStorageDxe.efi
- 0x09CBBA000 [ 3573] UsbConfigDxe.efi
InitUsbClocks: ClockProtocol unavailable
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigInit: Aborting Host Mode Initialization due to dead battery
UsbConfigInit: Aborting Host Mode Initialization due to dead battery
UsbConfigInit: UsbPwrCtrl No. of Ports = 1

UsbConfigPortsQueryConnectionChange: usbport->connectstate: ATT
HandlePortPartnerXtach: Cable Attach core 0, portmode 1, dualmode 1
- 0x09CC2F000 [ 3577] ButtonsDxe.efi
ButtonsDxeTest: Keypress SDAM data payload 0
- 0x09CBA9000 [ 3578] CPRDxe.efi
- 0x09CB94000 [ 3598] GpiDxe.efi
- 0x09CA4C000 [ 3696] UCDxe.efi
- 0x09CB83000 [ 3702] RngDxe.efi
- 0x09CB7B000 [ 3703] SimpleTextInOutSerial.efi
- 0x09CA42000 [ 3704] ConPlatformDxe.efi
- 0x09CA34000 [ 3705] ConSplitterDxe.efi
- 0x09CA28000 [ 3706] GraphicsConsoleDxe.efi
- 0x09CA1E000 [ 3707] ASN1X509Dxe.efi
- 0x09CA14000 [ 3707] SecRSADxe.efi
- 0x09CA0B000 [ 3708] XResetReasonDxe.efi
invalid last_log info
- 0x09C9FF000 [ 3708] TaDxe.efi
- 0x09CB68000 [ 3709] XOemCertDxe.efi
- 0x09C9E8000 [ 3709] XBootPALDxe.efi
- 0x09CB70000 [ 3710] XProductIdDxe.efi
- 0x09C9F3000 [ 3710] UdonDxe.efi
- 0x09C9C6000 [ 3711] XGraphicImagesDxe.efi
- 0x09C9B1000 [ 3783] XPmicAccessDxe.efi
- 0x09C9A9000 [ 3784] ResetCfgDxe.efi
- 0x09C9B9000 [ 3784] MinidumpTADxe.efi
smem_get_addr: SMEM get addr failed! smem_type=628MinidumpTADxe: Minidump TA loading not enabled.
Error: Image at 0009C9B9000 start failed: Load Error
- 0x09C9A0000 [ 3789] TsensDxe.efi
- 0x09C985000 [ 3792] UsbMsdDxe.efi
- 0x09C978000 [ 3793] UsbDeviceDxe.efi
- 0x09C970000 [ 3794] UsbInitDxe.efi
- 0x09C967000 [ 3794] ParserDxe.efi
- 0x09C960000 [ 3795] SerialPortDxe.efi
BDS Entry [ 3795]
Disp init wait [ 3795]
rtc raw 5
-----------------------------
Platform Init [ 3808] BDS
Boot Cycle : 43590
Run Cycle : 43590
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Platform : MTP
Subtype : 0
Boot Device : UFS
Chip Name : SM_LAHAINA
Chip Ver : 2.1
Chip Serial Number : 0x3DD46605
Boot Core : 1497 MHz
-----------------------------
- 0x09C915000 [ 3828] QcomChargerApp.efi
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired Chg Fw Load not required boot to HLOS
ChargerLib:: no Turn Off LED
UEFI Total : 862 ms
POST Time [ 3833] OS Loader
- 0x09C7AF000 [ 3837] LinuxLoader.efi
Loader Build Info: Sep 16 2021 10:32:41
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
VB: RWDeviceState: Succeed using rpmb!
Boot counter is 44006
XBoot Init
Init XBootPALAPILib
Init TA API Lib
XBOOT (1322-1669_X_Boot_SM8350_LA1.0_R_31)
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
XBoot MakeDecisions
Check authenticated commands
[ERROR @ ta_interface.c:343]:
Unable to delete TA unit 2334
Make Decisions
PBA ID: V5034977A (1)
Vendor(0x00000000)->Sony(0x00000000)
Setting existing handle
Startup flags: [USB INSERTED]
Warmboot reason: [COLDBOOT]
[ERROR @ sony_boot_config_parser.c:740]:
None or incorrect vbus_pulse configuration!
SW service triggering key detected
Service mode detected: [SONY - USB]
Collect command line additions
Obtain backlight config
Verify OEM unlock flag Request
Generate authenticated channel nonce
Reading 325 bytes from RPMB, OK
Writing 325 bytes to RPMB OK
Booting Into Xperia Service
Enable XHwreset
S2 reset is enabled
Setting existing handle
Total DDR Size: 0x00000002F7500000
Slot _a is unbootable, trying alternate slot
Err: line:1700 FindBootableSlot() status: Load Error
Err: line:1741 LoadImageAndAuth() status: Load Error
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
VB: RWDeviceState: Succeed using rpmb!
Reading 325 bytes from RPMB, OK
Writing 325 bytes to RPMB OK
Launching fastboot
Fastboot Build Info: Sep 16 2021 10:32:39
UsbStartController: Starting Core 0 in mode: 4
UsbStartController: GetUsbAlwaysConnect failed on Core 14: Success
SSUsb1InitCommon: gNpaClientSS1Bus is NULL)
usb2_rcal: 10
platform: 8
usb_shared_hs_phy_init: hs phy cfg size: 12
usb_shared_ss_phy_init: ss phy cfg size: 155
ssusb_phy_init_success_lane_A: 0
ConfigUsb: CoreNum 0, Mode 4, USB_INIT_DONE 1
Fastboot: Initializing...
Reading 325 bytes from RPMB, OK
Fastboot: Processing commands
FastbootInitialize: 413: Vbus=1
UsbfnDwcCoreCableStatus: Cable Attached
Dev_Common_Speed: Dev Bus Speed: High, state 2
Handling Cmd: set_active:a
SetActiveSlot: _a already active slot
Handling Cmd: getvar:max-download-size
Handling Cmd: getvar:product
Handling Cmd: getvar:version
Handling Cmd: getvar:version-bootloader
Handling Cmd: getvar:version-baseband
Handling Cmd: getvar:serialno
Handling Cmd: getvar:secure
Handling Cmd: getvar:Sector-size
Handling Cmd: getvar:Loader-version
Handling Cmd: getvar:Phone-id
Handling Cmd: getvar:Device-id
Handling Cmd: getvar:Platform-id
Handling Cmd: getvar:Rooting-status
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
Handling Cmd: getvar:Ufs-info
Handling Cmd: getvar:Emmc-info
[ERROR @ fastboot_utils.c:743]:
fastboot_get_variable: Could not find variable Emmc-info
Emmc-info not supported
Handling Cmd: getvar:Default-security
Handling Cmd: getvar:Keystore-counter
Reading 325 bytes from RPMB, OK
Handling Cmd: getvar:Security-state
Reading 325 bytes from RPMB, OK
Handling Cmd: getvar:S1-root
Handling Cmd: getvar:Sake-root
Reading 325 bytes from RPMB, OK
Handling Cmd: Get-root-key-hash
Handling Cmd: getvar:slot-count
Handling Cmd: getvar:current-slot
Handling Cmd: getvar:Battery
Handling Cmd: download:00000001
Download Finished
Handling Cmd: Write-TA:2:10100
Handling Cmd: download:00000010
Download Finished
Handling Cmd: Write-TA:2:2226
Handling Cmd: Read-TA:2:2475
Handling Cmd: set_active:a
SetActiveSlot: _a already active slot
Handling Cmd: download:00000001
Download Finished
Handling Cmd: Write-TA:2:10100
Handling Cmd: Sync
XCmdSync()
Handling Cmd: reboot
rebooting the device

INFO: Received ResetSytem request.
INFO: Type :0x0
INFO: DataSize :0x19
INFO: String :RESET_PARAM Length: 0x18

Start EBS [120786]
UsbfnDwcCoreCableStatus: Cable Detached
BDS: LogFs sync skipped, Unsupported

and log after second reboot:

S - Format: Log Type - Time(microsec) - Message - Optional Info
S - Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.MXF.1.0-00589-LAHAINA-2
S - IMAGE_VARIANT_STRING=SocLahainaLAA
S - OEM_IMAGE_VERSION_STRING=ip-10-26-16-222
S - Boot Interface: UFS
S - Secure Boot: On
S - Boot Config @ 0x00786070 = 0x00000001
S - JTAG ID @ 0x00786130 = 0x301350e1
S - OEM ID @ 0x00786138 = 0x00780001
S - Serial Number @ 0x00786134 = 0x3dd46605
S - Feature Config Row 0 @ 0x00784148 = 0x0000000000000000
S - Feature Config Row 1 @ 0x00784150 = 0x0000000000000000
S - Core 0 Frequency, 1459 MHz
S - PBL Patch Ver: 3
D - 9307 - pbl_apps_init_timestamp
D - 49873 - bootable_media_detect_timestamp
D - 10521 - bl_elf_metadata_loading_timestamp
D - 25096 - bl_hash_seg_auth_timestamp
D - 22160 - bl_elf_loadable_segment_loading_timestamp
D - 4547 - bl_elf_segs_hash_verify_timestamp
D - 16949 - bl_sec_hash_seg_auth_timestamp
D - 819 - bl_sec_segs_hash_verify_timestamp
D - 25 - pbl_populate_shared_data_and_exit_timestamp
S - 139297 - PBL, End
B - 148230 - SBL1, Start
B - 278556 - SBL1 BUILD @ 10:29:24 on Sep 16 2021
B - 282613 - usb: usb2_rcal , 0xa
B - 285998 - usb: platform
B - 289384 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
B - 297924 - usb: eud_serial_upd , 0x3dd46605
D - 298259 - sbl1_hw_init
B - 693295 - UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
B - 695461 - UFS Boot LUN: 1
D - 412909 - boot_media_init
D - 0 - smss_load_cancel
B - 718610 - SMSS - Image Load, Start
D - 3020 - SMSS - Image Loaded, Delta - (0 Bytes)
D - 25346 - Auth Metadata
D - 26444 - sbl1_xblconfig_init
B - 754112 - XBL Config - Image Load, Start
D - 0 - shrm_load_cancel
B - 761798 - SHRM - Image Load, Start
D - 25010 - Auth Metadata
D - 1281 - Segments hash check
D - 33611 - SHRM - Image Loaded, Delta - (39808 Bytes)
D - 0 - boot_default_cdt_init
D - 214 - boot_cdt_init
B - 807640 - CDT - Image Load, Start
B - 810415 - CDT Version:3,Platform ID:8,Major ID:2,Minor ID:0,Subtype:0
D - 16562 - sbl1_hw_platform_pre_ddr
D - 0 - devcfg init
B - 836554 - PMIC A:2.0 B:2.2 C:2.2 D:2.0 E:2.3
B - 838384 - PM: Reset by PSHOLD
B - 841220 - PM: Reset Type: Hard Reset
B - 844514 - PM: PON by RTC
B - 848449 - PM: PON by SYSOK
B - 1099281 - PM: SET_VAL:Skip
B - 1099586 - PM: PSI: b0x00_v0x81
B - 1104954 - PM: Device Init # SPMI Transn: 15134
D - 278740 - pm_device_init, Delta
B - 1110535 - pm_driver_init, Start
B - 1122644 - no SDI. gcc_reset_status=2
B - 1124779 - S3_timer is set to 16sec

B - 1126639 - PM: Driver Init # SPMI Transn: 598
D - 16378 - pm_driver_init, Delta
B - 1136369 - PM: Battery ID: 15164Ohm
B - 1138656 - PM: VBAT: 4343mV IBAT: 170mA
B - 1642028 - PM: VBAT: 4384mV IBAT: -54mA
B - 1642242 - PM: Charger port type: SDP
B - 2145827 - PM: Primary Charging loop exit
B - 2146254 - PM: CHG Init # SPMI Transn: 15833
B - 2150128 - vsense_init, Start
D - 0 - vsense_init, Delta
D - 1369907 - sbl1_hw_pre_ddr_init
D - 0 - boot_dload_handle_forced_dload_timeout
D - 3538 - sbl1_load_ddr_training_data
B - 2205302 - Pre_DDR_clock_init, Start
D - 61 - Pre_DDR_clock_init, Delta
D - 12871 - sbl1_ddr_set_params
B - 2217014 - sbl1_ddr_init, Start
B - 2220400 - LP5 DDR detected
B - 2239462 - eCDT MRR - Data Starting Address: 0x09066D00

D - 56151 - sbl1_ddr_init, Delta
B - 2276489 - DSF version = 247.8.15
B - 2279875 - Manufacturer ID = 1, Device Type = 8
B - 2283443 - Rank 0 size = 6144 MB, Rank 1 size = 6144 MB
B - 2288293 - DDR_INFO:LogVer=0002,type=0008,MR4=0x0000,0x0000,0x0000,0x0000,MR5=0x01,MR6=0x08,MR7=0x00,MR8=0x14
B - 2299517 - DDR_RANK:LogVer=0002
B - 2304153 - ** sdram0_cs0=1536MB,sdram0_cs1=1536MB
B - 2307569 - ** sdram1_cs0=1536MB,sdram1_cs1=1536MB
B - 2312754 - ** sdram2_cs0=1536MB,sdram2_cs1=1536MB
B - 2317908 - ** sdram3_cs0=1536MB,sdram3_cs1=1536MB
D - 106323 - sbl1_ddr_init
D - 30 - boot_pre_ddi_entry
B - 2331023 - do_ddr_training, Start
B - 2373662 - DDR: Start of DDR Training Restore
B - 2380952 - Current DDR Freq = 1709 MHz
B - 2380952 - Max enabled DDR Freq = 3196 MHz
B - 2384978 - DDR: End of DDR Training Restore
D - 55144 - do_ddr_training, Delta
D - 63013 - sbl1_do_ddr_training
D - 671 - boot_ddi_entry
B - 2400777 - Pimem init cmd, entry
D - 9150 - Pimem init cmd, exit
B - 2413373 - External heap init, Start
B - 2416210 - External heap init, End

UEFI Start [ 3179]
- 0x09FC01000 [ 3182] Sec.efi
ASLR : ON
DEP : ON (RTB)
Timer Delta : +1 mS
RAM Entry 0 : Base 0x0080000000 Size 0x0037500000
RAM Entry 1 : Base 0x0200000000 Size 0x0180000000
RAM Entry 2 : Base 0x00C0000000 Size 0x0140000000
RAM Entry 3 : Base 0x00B9900000 Size 0x0000000000
Total Available RAM : 12149 MB (0x02F7500000)
Total Installed RAM : 12288 MB (0x0300000000)
Multithread : ON (Lib ver 1.2)
CPU Cores : 8 (init 2)
Init 1 aux cores of 7
Init CPU core 1
> Scheduler up on Core 1
CONF File : uefiplatLA.cfg
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Build Info : 64b Sep 16 2021 10:29:57
Boot Device : UFS
PROD Mode : FALSE
Retail : TRUE
- 0x09ECCA000 [ 3240] DxeCore.efi
Loading DxeCore at 0x009ECCA000 EntryPoint=0x009ECCB000
HOBLIST address in DXE = 0x9EABB018
FV Hob 0x9FC00000 - 0x9FEFFFFF
FV Hob 0x9ED09000 - 0x9F0B1FFF
FV2 Hob 0x9ED09000 - 0x9F0B1FFF
631008B0-B2D1-410A-8B49-2C5C4D8ECC7E - 00000000-0000-0000-0000-000000000000
- 0x09EC47000 [ 3243] XHwresetDxe.efi
- 0x09EC40000 [ 3244] MazeDetDxe.efi
- 0x09EC67000 [ 3244] EnvDxe.efi
- 0x09EC5D000 [ 3244] RscRtDxe.efi
- 0x09EC55000 [ 3244] SCHandlerRtDxe.efi
- 0x09E78F000 [ 3245] RuntimeDxe.efi
- 0x09EC33000 [ 3245] ArmCpuDxe.efi
- 0x09EC2A000 [ 3246] ArmGicDxe.efi
- 0x09EC23000 [ 3246] MetronomeDxe.efi
- 0x09EC1B000 [ 3246] ArmTimerDxe.efi
- 0x09EC11000 [ 3246] SmemDxe.efi
- 0x09EBB0000 [ 3247] DALSys.efi
- 0x09EBA8000 [ 3247] HWIODxeDriver.efi
- 0x09EB9D000 [ 3247] ChipInfo.efi
- 0x09EB95000 [ 3248] PlatformInfoDxeDriver.efi
- 0x09EB88000 [ 3248] HALIOMMU.efi
- 0x09EB74000 [ 3248] ULogDxe.efi
- 0x09EB6C000 [ 3248] CmdDbDxe.efi
- 0x09EB64000 [ 3249] PwrUtilsDxe.efi
- 0x09EB52000 [ 3249] NpaDxe.efi
- 0x09EB42000 [ 3250] RpmhDxe.efi
- 0x09EB36000 [ 3250] VcsDxe.efi
- 0x09EB07000 [ 3251] ClockDxe.efi
>>> Cluster 0: 1497600000 Hz
>>> Cluster 2: 1248000000 Hz
- 0x09EAFA000 [ 3259] ICBDxe.efi
- 0x09EAF1000 [ 3261] ShmBridgeDxeLA.efi
- 0x09EAE2000 [ 3261] ScmDxeLA.efi
- 0x09EAD7000 [ 3264] DiskIoDxe.efi
- 0x09EACA000 [ 3264] PartitionDxe.efi
- 0x09EAC2000 [ 3264] EnglishDxe.efi
- 0x09E784000 [ 3264] FvSimpleFileSystem.efi
- 0x09E763000 [ 3265] UFSDxe.efi
UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
UFS Boot LUN: 1
- 0x09D230000 [ 3293] Fat.efi
- 0x09D221000 [ 3293] TzDxeLA.efi
- 0x09D190000 [ 3296] VariableDxe.efi
LoadSecureApps: Load app from partition(tzxflattest): Status = 0x0, AppId = 2
<VariablePolicyInitialize:179> variable policy engine disabled
- 0x09E403000 [ 3509] QcomWDogDxe.efi
HW Wdog Setting from PCD : Disabled
- 0x09CF5D000 [ 3510] ResetRuntimeDxe.efi
- 0x09CF55000 [ 3511] XGAdcDxe.efi
- 0x09E40B000 [ 3511] WatchdogTimer.efi
- 0x09CF3A000 [ 3511] SecurityStubDxe.efi
- 0x09CF4D000 [ 3512] EmbeddedMonotonicCounter.efi
- 0x09CF31000 [ 3512] RealTimeClock.efi
- 0x09CF0A000 [ 3513] DevicePathDxe.efi
- 0x09CF29000 [ 3513] CapsuleRuntimeDxe.efi
- 0x09CEC3000 [ 3514] HiiDatabase.efi
- 0x09CF01000 [ 3514] FontDxe.efi
- 0x09CDD6000 [ 3519] QcomBds.efi
- 0x09CE90000 [ 3527] VerifiedBootDxe.efi
- 0x09CEBA000 [ 3528] DALTLMM.efi
- 0x09CEB0000 [ 3528] I2C.efi
- 0x09CE75000 [ 3528] SPMI.efi
- 0x09CDB3000 [ 3533] PmicDxe.efi
PM0: 47, PM1: 48, PM2: 49, PM3: 50, PM4: 51,
app_pshold_cfg change: DVDD_SHUTDOWN -> NORMAL_SHUTDOWN
Module cannot re-initialize DAL module environment
- 0x09CE1A000 [ 3557] SdccDxe.efi
- 0x09CE49000 [ 3558] DDRInfoDxe.efi
- 0x09CE41000 [ 3560] FeatureEnablerDxe.efi
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler_a)Failed: Status(0x800000000000000E), appId(0)
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler)Failed: Status(0x800000000000000E), appId(0)
Image partition label not found
LoadImageFromPartitionUsingGuid Failed: 14
EFI_QseecomStartApp: Load Failed: Status(0x800000000000000E)
Failed to start featenabler_a TA, status = 14
- 0x09CD0E000 [ 3565] DisplayDxe.efi
- 0x09CD8E000 [ 3566] FvDxe.efi
- 0x09CE38000 [ 3567] PILProxyDxe.efi
- 0x09CCF2000 [ 3567] PILDxe.efi
pil-abl Done t=87ms s=1ms a=45ms f=38ms
- 0x09CD82000 [ 3739] SPSSDxe.efi
SPSSDxe [spss_iar_main] I: IAR-STATE is NOT ACTIVATED [0x0], Exit now
Overriding PIL cfg by caller
pil-SPSS Failed to get MDT size
pil-SPSS Failed to load metadata
pil-SPSS Failed to boot subsys
SPSSDxe:: SPSSDxe_LoadSPSS ProcessPilImageExt = Load Error
Error: Image at 0009CD82000 start failed: Load Error
- 0x09CD79000 [ 3749] IPCCDxe.efi
- 0x09CCA3000 [ 3750] GlinkDxe.efi
smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=13, size=32, flags=0x40000000. - 0x09CD71000 [ 3751] PrintDxe.efi
- 0x09CD67000 [ 3751] SPI.efi
- 0x09CC8A000 [ 3752] PmicGlinkDxe.efi
- 0x09CC99000 [ 3752] UsbPwrCtrlDxe.efi
- 0x09CC4B000 [ 3753] QcomChargerDxeLA.efi
QcomChargerDxe:: ChargerPlatform_Init Enabled WDOG.
- 0x09CC82000 [ 3773] ChargerExDxe.efi
- 0x09CC18000 [ 3774] UsbfnDwc3Dxe.efi
- 0x09CD83000 [ 3774] XhciPciEmulation.efi
- 0x09CC34000 [ 3775] XhciDxe.efi
- 0x09CC06000 [ 3776] UsbBusDxe.efi
- 0x09CBF9000 [ 3776] UsbKbDxe.efi
- 0x09CBED000 [ 3777] UsbMassStorageDxe.efi
- 0x09CBD6000 [ 3777] UsbConfigDxe.efi
InitUsbClocks: ClockProtocol unavailable
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigInit: UsbConfigInit, not start on port: 0, mode 0
UsbConfigInit: UsbConfigInit, not start on port: 1, mode 0
UsbConfigInit: UsbPwrCtrl No. of Ports = 1

UsbConfigPortsQueryConnectionChange: usbport->connectstate: ATT
HandlePortPartnerXtach: Cable Attach core 0, portmode 1, dualmode 1
- 0x09CC6D000 [ 3781] ButtonsDxe.efi
ButtonsDxeTest: Keypress SDAM data payload 0
- 0x09CBB3000 [ 3783] CPRDxe.efi
- 0x09CB88000 [ 3803] GpiDxe.efi
- 0x09CA32000 [ 3901] UCDxe.efi
- 0x09CB80000 [ 3907] RngDxe.efi
- 0x09CB78000 [ 3907] SimpleTextInOutSerial.efi
- 0x09CA6F000 [ 3909] ConPlatformDxe.efi
- 0x09CA24000 [ 3909] ConSplitterDxe.efi
- 0x09CA56000 [ 3910] GraphicsConsoleDxe.efi
- 0x09CA1A000 [ 3911] ASN1X509Dxe.efi
- 0x09CA10000 [ 3912] SecRSADxe.efi
- 0x09CA07000 [ 3913] XResetReasonDxe.efi
invalid last_log info
- 0x09C9FB000 [ 3913] TaDxe.efi
- 0x09C9F3000 [ 3914] XOemCertDxe.efi
- 0x09C9E8000 [ 3914] XBootPALDxe.efi
- 0x09C9E0000 [ 3915] XProductIdDxe.efi
- 0x09C9D4000 [ 3915] UdonDxe.efi
- 0x09C9B3000 [ 3916] XGraphicImagesDxe.efi
- 0x09C9C3000 [ 3988] XPmicAccessDxe.efi
- 0x09C9AB000 [ 3988] ResetCfgDxe.efi
- 0x09C9CB000 [ 3989] MinidumpTADxe.efi
smem_get_addr: SMEM get addr failed! smem_type=628MinidumpTADxe: Minidump TA loading not enabled.
Error: Image at 0009C9CB000 start failed: Load Error
- 0x09C9A3000 [ 3993] TsensDxe.efi
- 0x09C988000 [ 3997] UsbMsdDxe.efi
- 0x09C97B000 [ 3997] UsbDeviceDxe.efi
- 0x09C973000 [ 3998] UsbInitDxe.efi
- 0x09C96A000 [ 3998] ParserDxe.efi
- 0x09C963000 [ 3999] SerialPortDxe.efi
BDS Entry [ 3999]
Disp init wait [ 4000]
rtc raw 126
-----------------------------
Platform Init [ 4012] BDS
Boot Cycle : 43591
Run Cycle : 43591
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Platform : MTP
Subtype : 0
Boot Device : UFS
Chip Name : SM_LAHAINA
Chip Ver : 2.1
Chip Serial Number : 0x3DD46605
Boot Core : 1497 MHz
-----------------------------
- 0x09C918000 [ 4031] QcomChargerApp.efi
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired Chg Fw Load not required boot to HLOS
ChargerLib:: no Turn Off LED
UEFI Total : 857 ms
POST Time [ 4036] OS Loader
- 0x09C7B2000 [ 4040] LinuxLoader.efi
Loader Build Info: Sep 16 2021 10:32:41
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
VB: RWDeviceState: Succeed using rpmb!
Boot counter is 44007
XBoot Init
Init XBootPALAPILib
Init TA API Lib
XBOOT (1322-1669_X_Boot_SM8350_LA1.0_R_31)
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
VB: RWDeviceState: Succeed using rpmb!
Bootloader unlock not allowed
XBoot MakeDecisions
Check authenticated commands
[ERROR @ ta_interface.c:343]:
Unable to delete TA unit 2334
Make Decisions
PBA ID: V5034977A (1)
Vendor(0x00000001)->Sony(0x77665501)
Setting existing handle
Startup flags: [USB INSERTED] [HARD RESET]
Warmboot reason: [NORMAL]
[ERROR @ sony_boot_config_parser.c:740]:
None or incorrect vbus_pulse configuration!
hwid0[1] hwid1[0] (productId:1)
Reset keys pressed but released before shutdown timer expired. Booting normally.
SW service triggering key detected
Service mode detected: [SONY - USB]
Collect command line additions
Obtain backlight config
Verify OEM unlock flag Request
Generate authenticated channel nonce
Reading 325 bytes from RPMB, OK
Writing 325 bytes to RPMB OK
Booting Into Xperia Service
Enable XHwreset
S2 reset is enabled
Setting existing handle
Total DDR Size: 0x00000002F7500000
A/B retry count NOT decremented
Booting from slot (_a)
LoadImageAndAuth: 1747: CurrentSlot.Suffix=_a
Load Image vbmeta_a total time: 1 ms
Load Image vbmeta_system_a total time: 1 ms
Load Image boot_a total time: 43 ms
Load Image dtbo_a total time: 5 ms
Load Image vendor_boot_a total time: 3 ms
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
VB: RWDeviceState: Succeed using rpmb!
Reading 325 bytes from RPMB, OK
Writing 325 bytes to RPMB OK
Launching fastboot
Fastboot Build Info: Sep 16 2021 10:32:39
UsbStartController: Starting Core 0 in mode: 4
UsbStartController: GetUsbAlwaysConnect failed on Core 14: Success
SSUsb1InitCommon: gNpaClientSS1Bus is NULL)
usb2_rcal: 10
platform: 8
usb_shared_hs_phy_init: hs phy cfg size: 12
usb_shared_ss_phy_init: ss phy cfg size: 155
ssusb_phy_init_success_lane_A: 0
ConfigUsb: CoreNum 0, Mode 4, USB_INIT_DONE 1
Fastboot: Initializing...
Reading 325 bytes from RPMB, OK
Fastboot: Processing commands
FastbootInitialize: 413: Vbus=1
UsbfnDwcCoreCableStatus: Cable Attached
Dev_Common_Speed: Dev Bus Speed: High, state 2
Handling Cmd: Read-TA:2:2226
[WARNING @ ta_interface.c:117]:
Unit 2226 does not exist
FAILUnit 2226 does not exist
Handling Cmd: Read-TA:2:2050
Handling Cmd: getvar:max-download-size
Handling Cmd: getvar:product
Handling Cmd: getvar:version
Handling Cmd: getvar:version-bootloader
Handling Cmd: getvar:version-baseband
Handling Cmd: getvar:serialno
Handling Cmd: getvar:secure
Handling Cmd: getvar:Sector-size
Handling Cmd: getvar:Loader-version
Handling Cmd: getvar:Phone-id
Handling Cmd: getvar:Device-id
Handling Cmd: getvar:Platform-id
Handling Cmd: getvar:Rooting-status
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
Handling Cmd: getvar:Ufs-info
Handling Cmd: getvar:Emmc-info
[ERROR @ fastboot_utils.c:743]:
fastboot_get_variable: Could not find variable Emmc-info
Emmc-info not supported
Handling Cmd: getvar:Default-security
Handling Cmd: getvar:Keystore-counter
Reading 325 bytes from RPMB, OK
Handling Cmd: getvar:Security-state
Reading 325 bytes from RPMB, OK
Handling Cmd: getvar:S1-root
Handling Cmd: getvar:Sake-root
Reading 325 bytes from RPMB, OK
Handling Cmd: Get-root-key-hash
Handling Cmd: getvar:slot-count
Handling Cmd: getvar:current-slot
Handling Cmd: getvar:Battery
Handling Cmd: download:00000001
Download Finished
Handling Cmd: Write-TA:2:10100
Handling Cmd: download:00000010
Download Finished
Handling Cmd: Write-TA:2:2226
Handling Cmd: Read-TA:2:2475
Handling Cmd: set_active:a
SetActiveSlot: _a already active slot
Handling Cmd: download:00000001
Download Finished
Handling Cmd: Write-TA:2:10100
Handling Cmd: Sync
XCmdSync()
Handling Cmd: continue
rebooting the device

INFO: Received ResetSytem request.
INFO: Type :0x0
INFO: DataSize :0x19
INFO: String :RESET_PARAM Length: 0x18

Start EBS [206251]
UsbfnDwcCoreCableStatus: Cable Detached
BDS: LogFs sync skipped, Unsupported

There is an error in log after second reboot to flashmode - "Bootloader unlock not allowed".

As far as I understood I need to enter code *#*#7378423#*#* before writing TA 2226 to be able to unlock bootloader/enter oem unlock code.

Is it possibe to write some TA instead of entering *#*#7378423#*#* to make possible Bootloader unlock/enter unlock code?

Just in case:

log for the first boot with Sony Logo:

S - Format: Log Type - Time(microsec) - Message - Optional Info
S - Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.MXF.1.0-00589-LAHAINA-2
S - IMAGE_VARIANT_STRING=SocLahainaLAA
S - OEM_IMAGE_VERSION_STRING=ip-10-26-16-222
S - Boot Interface: UFS
S - Secure Boot: On
S - Boot Config @ 0x00786070 = 0x00000001
S - JTAG ID @ 0x00786130 = 0x301350e1
S - OEM ID @ 0x00786138 = 0x00780001
S - Serial Number @ 0x00786134 = 0x3dd46605
S - Feature Config Row 0 @ 0x00784148 = 0x0000000000000000
S - Feature Config Row 1 @ 0x00784150 = 0x0000000000000000
S - Core 0 Frequency, 1459 MHz
S - PBL Patch Ver: 3
D - 9307 - pbl_apps_init_timestamp
D - 52448 - bootable_media_detect_timestamp
D - 8718 - bl_elf_metadata_loading_timestamp
D - 25106 - bl_hash_seg_auth_timestamp
D - 26296 - bl_elf_loadable_segment_loading_timestamp
D - 4548 - bl_elf_segs_hash_verify_timestamp
D - 16942 - bl_sec_hash_seg_auth_timestamp
D - 816 - bl_sec_segs_hash_verify_timestamp
D - 24 - pbl_populate_shared_data_and_exit_timestamp
S - 144205 - PBL, End
B - 156404 - SBL1, Start
B - 289536 - SBL1 BUILD @ 10:29:24 on Sep 16 2021
B - 293684 - usb: usb2_rcal , 0xa
B - 297131 - usb: platform
B - 300608 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
B - 309331 - usb: eud_serial_upd , 0x3dd46605
D - 309666 - sbl1_hw_init
B - 481534 - UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
B - 483760 - UFS Boot LUN: 1
D - 189771 - boot_media_init
D - 0 - smss_load_cancel
B - 507032 - SMSS - Image Load, Start
D - 3111 - SMSS - Image Loaded, Delta - (0 Bytes)
D - 25986 - Auth Metadata
D - 27084 - sbl1_xblconfig_init
B - 543418 - XBL Config - Image Load, Start
D - 31 - shrm_load_cancel
B - 551257 - SHRM - Image Load, Start
D - 25468 - Auth Metadata
D - 1281 - Segments hash check
D - 34190 - SHRM - Image Loaded, Delta - (39808 Bytes)
D - 0 - boot_default_cdt_init
D - 244 - boot_cdt_init
B - 597952 - CDT - Image Load, Start
B - 600789 - CDT Version:3,Platform ID:8,Major ID:2,Minor ID:0,Subtype:0
D - 16927 - sbl1_hw_platform_pre_ddr
D - 0 - devcfg init
B - 627476 - PMIC A:2.0 B:2.2 C:2.2 D:2.0 E:2.3
B - 629337 - PM: PM2 0x40
B - 632326 - PM: UVLO on Palani
B - 634979 - PM: PON by SYSOK
B - 886299 - PM: SET_VAL:Skip
B - 886604 - PM: PSI: b0x00_v0x81
B - 892003 - PM: Device Init # SPMI Transn: 15139
D - 275049 - pm_device_init, Delta
B - 897584 - pm_driver_init, Start
B - 909662 - no SDI. gcc_reset_status=2
B - 911797 - S3_timer is set to 16sec

B - 913658 - PM: Driver Init # SPMI Transn: 598
D - 16379 - pm_driver_init, Delta
B - 923448 - PM: Battery ID: 15168Ohm
B - 925675 - PM: VBAT: 4345mV IBAT: 249mA
B - 1429077 - PM: VBAT: 4385mV IBAT: -42mA
B - 1429535 - PM: CHG Init # SPMI Transn: 15828
B - 1433195 - vsense_init, Start
D - 0 - vsense_init, Delta
D - 862205 - sbl1_hw_pre_ddr_init
D - 0 - boot_dload_handle_forced_dload_timeout
D - 3507 - sbl1_load_ddr_training_data
B - 1488339 - Pre_DDR_clock_init, Start
D - 61 - Pre_DDR_clock_init, Delta
D - 12871 - sbl1_ddr_set_params
B - 1500051 - sbl1_ddr_init, Start
B - 1503436 - LP5 DDR detected
B - 1522468 - eCDT MRR - Data Starting Address: 0x09066D00

D - 56120 - sbl1_ddr_init, Delta
B - 1559495 - DSF version = 247.8.15
B - 1562881 - Manufacturer ID = 1, Device Type = 8
B - 1566449 - Rank 0 size = 6144 MB, Rank 1 size = 6144 MB
B - 1571268 - DDR_INFO:LogVer=0002,type=0008,MR4=0x0000,0x0000,0x0000,0x0000,MR5=0x01,MR6=0x08,MR7=0x00,MR8=0x14
B - 1582523 - DDR_RANK:LogVer=0002
B - 1587159 - ** sdram0_cs0=1536MB,sdram0_cs1=1536MB
B - 1590575 - ** sdram1_cs0=1536MB,sdram1_cs1=1536MB
B - 1595729 - ** sdram2_cs0=1536MB,sdram2_cs1=1536MB
B - 1600914 - ** sdram3_cs0=1536MB,sdram3_cs1=1536MB
D - 106323 - sbl1_ddr_init
D - 0 - boot_pre_ddi_entry
B - 1614029 - do_ddr_training, Start
B - 1656668 - DDR: Start of DDR Training Restore
B - 1663927 - Current DDR Freq = 1709 MHz
B - 1663958 - Max enabled DDR Freq = 3196 MHz
B - 1667984 - DDR: End of DDR Training Restore
D - 55144 - do_ddr_training, Delta
D - 62983 - sbl1_do_ddr_training
D - 671 - boot_ddi_entry
B - 1683783 - Pimem init cmd, entry
D - 9150 - Pimem init cmd, exit
B - 1696379 - External heap init, Start
B - 1699216 - External heap init, End

UEFI Start [ 2447]
- 0x09FC01000 [ 2451] Sec.efi
ASLR : ON
DEP : ON (RTB)
Timer Delta : +15 mS
RAM Entry 0 : Base 0x0080000000 Size 0x0037500000
RAM Entry 1 : Base 0x0200000000 Size 0x0180000000
RAM Entry 2 : Base 0x00C0000000 Size 0x0140000000
RAM Entry 3 : Base 0x00B9900000 Size 0x0000000000
Total Available RAM : 12149 MB (0x02F7500000)
Total Installed RAM : 12288 MB (0x0300000000)
Multithread : ON (Lib ver 1.2)
CPU Cores : 8 (init 2)
Init 1 aux cores of 7
Init CPU core 1
> Scheduler up on Core 1
CONF File : uefiplatLA.cfg
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Build Info : 64b Sep 16 2021 10:29:57
Boot Device : UFS
PROD Mode : FALSE
Retail : TRUE
- 0x09ECC1000 [ 2509] DxeCore.efi
Loading DxeCore at 0x009ECC1000 EntryPoint=0x009ECC2000
HOBLIST address in DXE = 0x9EAB2018
FV Hob 0x9FC00000 - 0x9FEFFFFF
FV Hob 0x9ED00000 - 0x9F0A8FFF
FV2 Hob 0x9ED00000 - 0x9F0A8FFF
631008B0-B2D1-410A-8B49-2C5C4D8ECC7E - 00000000-0000-0000-0000-000000000000
- 0x09EC3E000 [ 2513] XHwresetDxe.efi
- 0x09EC37000 [ 2513] MazeDetDxe.efi
- 0x09EC5E000 [ 2513] EnvDxe.efi
- 0x09EC54000 [ 2513] RscRtDxe.efi
- 0x09EC4C000 [ 2514] SCHandlerRtDxe.efi
- 0x09E786000 [ 2514] RuntimeDxe.efi
- 0x09EC2A000 [ 2514] ArmCpuDxe.efi
- 0x09EC21000 [ 2515] ArmGicDxe.efi
- 0x09EC1A000 [ 2515] MetronomeDxe.efi
- 0x09EC12000 [ 2515] ArmTimerDxe.efi
- 0x09EC08000 [ 2515] SmemDxe.efi
- 0x09EBA7000 [ 2516] DALSys.efi
- 0x09EB9F000 [ 2516] HWIODxeDriver.efi
- 0x09EB94000 [ 2517] ChipInfo.efi
- 0x09EB8C000 [ 2517] PlatformInfoDxeDriver.efi
- 0x09EB7F000 [ 2517] HALIOMMU.efi
- 0x09EB6B000 [ 2517] ULogDxe.efi
- 0x09EB63000 [ 2517] CmdDbDxe.efi
- 0x09EB5B000 [ 2518] PwrUtilsDxe.efi
- 0x09EB49000 [ 2518] NpaDxe.efi
- 0x09EB39000 [ 2519] RpmhDxe.efi
- 0x09EB2D000 [ 2519] VcsDxe.efi
- 0x09EAFE000 [ 2520] ClockDxe.efi
>>> Cluster 0: 1497600000 Hz
>>> Cluster 2: 1248000000 Hz
- 0x09EAF1000 [ 2528] ICBDxe.efi
- 0x09EAE8000 [ 2530] ShmBridgeDxeLA.efi
- 0x09EAD9000 [ 2530] ScmDxeLA.efi
- 0x09EACE000 [ 2533] DiskIoDxe.efi
- 0x09EAC1000 [ 2533] PartitionDxe.efi
- 0x09EAB9000 [ 2533] EnglishDxe.efi
- 0x09E77B000 [ 2534] FvSimpleFileSystem.efi
- 0x09E75A000 [ 2534] UFSDxe.efi
UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
UFS Boot LUN: 1
- 0x09D230000 [ 2562] Fat.efi
- 0x09D221000 [ 2562] TzDxeLA.efi
- 0x09D180000 [ 2565] VariableDxe.efi
LoadSecureApps: Load app from partition(tzxflattest): Status = 0x0, AppId = 2
<VariablePolicyInitialize:179> variable policy engine disabled
- 0x09D197000 [ 2779] QcomWDogDxe.efi
HW Wdog Setting from PCD : Disabled
- 0x09E401000 [ 2780] ResetRuntimeDxe.efi
- 0x09CF4F000 [ 2781] XGAdcDxe.efi
- 0x09D18F000 [ 2781] WatchdogTimer.efi
- 0x09CF34000 [ 2782] SecurityStubDxe.efi
- 0x09CF57000 [ 2782] EmbeddedMonotonicCounter.efi
- 0x09CF46000 [ 2783] RealTimeClock.efi
- 0x09CF0D000 [ 2784] DevicePathDxe.efi
- 0x09CF23000 [ 2784] CapsuleRuntimeDxe.efi
- 0x09CEC6000 [ 2784] HiiDatabase.efi
- 0x09CF2B000 [ 2785] FontDxe.efi
- 0x09CDD9000 [ 2790] QcomBds.efi
- 0x09CE93000 [ 2798] VerifiedBootDxe.efi
- 0x09CEB3000 [ 2799] DALTLMM.efi
- 0x09CEBC000 [ 2799] I2C.efi
- 0x09CE6D000 [ 2800] SPMI.efi
- 0x09CDB6000 [ 2804] PmicDxe.efi
PM0: 47, PM1: 48, PM2: 49, PM3: 50, PM4: 51,
app_pshold_cfg change: DVDD_SHUTDOWN -> NORMAL_SHUTDOWN
Module cannot re-initialize DAL module environment
- 0x09CE1D000 [ 2828] SdccDxe.efi
- 0x09CE41000 [ 2829] DDRInfoDxe.efi
- 0x09CE39000 [ 2832] FeatureEnablerDxe.efi
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler_a)Failed: Status(0x800000000000000E), appId(0)
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler)Failed: Status(0x800000000000000E), appId(0)
Image partition label not found
LoadImageFromPartitionUsingGuid Failed: 14
EFI_QseecomStartApp: Load Failed: Status(0x800000000000000E)
Failed to start featenabler_a TA, status = 14
- 0x09CD11000 [ 2836] DisplayDxe.efi
- 0x09CD91000 [ 2837] FvDxe.efi
- 0x09CDAD000 [ 2838] PILProxyDxe.efi
- 0x09CCF5000 [ 2839] PILDxe.efi
pil-abl Done t=87ms s=1ms a=45ms f=38ms
- 0x09CD78000 [ 3013] SPSSDxe.efi
SPSSDxe [spss_iar_main] I: IAR-STATE is NOT ACTIVATED [0x0], Exit now
Overriding PIL cfg by caller
pil-SPSS Failed to get MDT size
pil-SPSS Failed to load metadata
pil-SPSS Failed to boot subsys
SPSSDxe:: SPSSDxe_LoadSPSS ProcessPilImageExt = Load Error
Error: Image at 0009CD78000 start failed: Load Error
- 0x09CD77000 [ 3023] IPCCDxe.efi
- 0x09CCA6000 [ 3024] GlinkDxe.efi
smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=13, size=32, flags=0x40000000. - 0x09CD6F000 [ 3025] PrintDxe.efi
- 0x09CC9C000 [ 3025] SPI.efi
- 0x09CD63000 [ 3026] PmicGlinkDxe.efi
- 0x09CC87000 [ 3026] UsbPwrCtrlDxe.efi
- 0x09CC48000 [ 3027] QcomChargerDxeLA.efi
QcomChargerDxe:: ChargerPlatform_Init Enabled WDOG.
- 0x09CC7F000 [ 3047] ChargerExDxe.efi
- 0x09CC15000 [ 3048] UsbfnDwc3Dxe.efi
- 0x09CC91000 [ 3049] XhciPciEmulation.efi
- 0x09CC31000 [ 3049] XhciDxe.efi
- 0x09CC03000 [ 3050] UsbBusDxe.efi
- 0x09CBF6000 [ 3050] UsbKbDxe.efi
- 0x09CBEA000 [ 3051] UsbMassStorageDxe.efi
- 0x09CBD3000 [ 3051] UsbConfigDxe.efi
InitUsbClocks: ClockProtocol unavailable
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigInit: UsbConfigInit, not start on port: 0, mode 0
UsbConfigInit: UsbConfigInit, not start on port: 1, mode 0
UsbConfigInit: UsbPwrCtrl No. of Ports = 1

UsbConfigPortsQueryConnectionChange: usbport->connectstate: ATT
HandlePortPartnerXtach: Cable Attach core 0, portmode 1, dualmode 1
- 0x09CC6A000 [ 3056] ButtonsDxe.efi
ButtonsDxeTest: Keypress SDAM data payload 0
- 0x09CBB0000 [ 3057] CPRDxe.efi
- 0x09CB85000 [ 3077] GpiDxe.efi
- 0x09CA35000 [ 3175] UCDxe.efi
- 0x09CBC1000 [ 3181] RngDxe.efi
- 0x09CA74000 [ 3182] SimpleTextInOutSerial.efi
- 0x09CA6A000 [ 3183] ConPlatformDxe.efi
- 0x09CA5C000 [ 3184] ConSplitterDxe.efi
- 0x09CA29000 [ 3185] GraphicsConsoleDxe.efi
- 0x09CA14000 [ 3185] ASN1X509Dxe.efi
- 0x09CA0A000 [ 3186] SecRSADxe.efi
- 0x09CA01000 [ 3187] XResetReasonDxe.efi
invalid last_log info
- 0x09C9E8000 [ 3187] TaDxe.efi
- 0x09C9F9000 [ 3188] XOemCertDxe.efi
- 0x09CA1E000 [ 3188] XBootPALDxe.efi
- 0x09C9D7000 [ 3189] XProductIdDxe.efi
- 0x09C9BE000 [ 3189] UdonDxe.efi
- 0x09C99D000 [ 3190] XGraphicImagesDxe.efi
- 0x09C9B6000 [ 3261] XPmicAccessDxe.efi
- 0x09C9AE000 [ 3262] ResetCfgDxe.efi
- 0x09C994000 [ 3262] MinidumpTADxe.efi
smem_get_addr: SMEM get addr failed! smem_type=628MinidumpTADxe: Minidump TA loading not enabled.
Error: Image at 0009C994000 start failed: Load Error
- 0x09C995000 [ 3267] TsensDxe.efi
- 0x09C9CA000 [ 3270] UsbMsdDxe.efi
- 0x09C979000 [ 3271] UsbDeviceDxe.efi
- 0x09C971000 [ 3272] UsbInitDxe.efi
- 0x09C98B000 [ 3272] ParserDxe.efi
- 0x09C962000 [ 3273] SerialPortDxe.efi
BDS Entry [ 3273]
Disp init wait [ 3273]
rtc raw 5
-----------------------------
Platform Init [ 3287] BDS
Boot Cycle : 43593
Run Cycle : 43593
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Platform : MTP
Subtype : 0
Boot Device : UFS
Chip Name : SM_LAHAINA
Chip Ver : 2.1
Chip Serial Number : 0x3DD46605
Boot Core : 1497 MHz
-----------------------------
- 0x09C917000 [ 3307] QcomChargerApp.efi
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired Chg Fw Load not required boot to HLOS
ChargerLib:: no Turn Off LED
UEFI Total : 865 ms
POST Time [ 3312] OS Loader
- 0x09C7B1000 [ 3316] LinuxLoader.efi
Loader Build Info: Sep 16 2021 10:32:41
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
VB: RWDeviceState: Succeed using rpmb!
Boot counter is 44009
XBoot Init
Init XBootPALAPILib
Init TA API Lib
XBOOT (1322-1669_X_Boot_SM8350_LA1.0_R_31)
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
XBoot MakeDecisions
Check authenticated commands
[ERROR @ ta_interface.c:343]:
Unable to delete TA unit 2334
Make Decisions
PBA ID: V5034977A (1)
Vendor(0x00000000)->Sony(0x00000000)
Setting existing handle
Startup flags: [USB INSERTED]
Warmboot reason: [COLDBOOT]
[ERROR @ sony_boot_config_parser.c:740]:
None or incorrect vbus_pulse configuration!
Service mode detected: [NONE]
Collect command line additions
Obtain backlight config
Verify OEM unlock flag Request
Generate authenticated channel nonce
Booting Into Mission Mode
Enable XHwreset
S2 reset is enabled
Setting existing handle
Total DDR Size: 0x00000002F7500000
Active Slot _a is bootable, retry count 6
Booting from slot (_a)
LoadImageAndAuth: 1747: CurrentSlot.Suffix=_a
Load Image vbmeta_a total time: 1 ms
Load Image vbmeta_system_a total time: 1 ms
Load Image boot_a total time: 43 ms
Load Image dtbo_a total time: 6 ms
Load Image vendor_boot_a total time: 4 ms
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
VB2: Authenticate complete! boot state is: green
VB2: boot state: green(0)
Reading 325 bytes from RPMB, OK
VB: RWDeviceState: Succeed using rpmb!
HwconfRevData is empty, not setting data
Reading 325 bytes from RPMB, OK
Hyp version: 1
Memory Base Address: 0x80000000
DisplayUtils: Not enough room available for strcat: will truncate <sam_oled_dual_dsc_4k_amb650yl01_cmd> avail 30 reqd 35
DisplayUtils: Not enough room available for strcat: will truncate <,> avail 0 reqd 1
DisplayUtils: Not enough room available for strcat: will truncate <sam_oled_dual_dsc_4k_amb650yl01_pvt_cmd> avail 0 reqd 39
DisplayUtils: Not enough room available for strcat: will truncate <,> avail 0 reqd 1
DisplayUtils: Not enough room available for strcat: will truncate <sam_oled_dual_dsc_4k_amb650yl01_pdx217_cmd> avail 0 reqd 42
DisplayUtils: Not enough room available for strcat: will truncate <,> avail 0 reqd 1
DisplayUtils: Not enough room available for strcat: will truncate <dummy_for_panelid_detection> avail 0 reqd 27
CheckValue: ADC value = 607525
ADC value = 607525
PanelId = 6
DisplayDxe: Resolution 1096x2560 (2 intf)
IDCF image path = fv1:\logo_sony_1096_2560.bmp.gz
Apply Overlay total time: 446 ms
@@@ UpdateCmdLine mode = 0
Cmdline: console=ttyMSM0,115200n8 androidboot.hardware=qcom androidboot.console=ttyMSM0 androidboot.memcg=1 lpm_levels.sleep_disabled=1 video=vfb:640x400,bpp=32,memsize=3072000 msm_rtb.filter=0x237 service_locator.enable=1 androidboot.usbcontroller=a60000
cmdline: "console=ttyMSM0,115200n8 androidboot.hardware=qcom androidbo"\
"ot.console=ttyMSM0 androidboot.memcg=1 lpm_levels.sleep_disa"\
"bled=1 video=vfb:640x400,bpp=32,memsize=3072000 msm_rtb.filt"\
"er=0x237 service_locator.enable=1 androidboot.usbcontroller="\
"a600000.dwc3 swiotlb=0 loop.max_part=7 cgroup.memory=nokmem,"\
"nosocket pcie_ports=compat loop.max_part=7 iptable_raw.raw_b"\
"efore_defrag=1 ip6table_raw.raw_before_defrag=1 buildproduct"\
"=pdx217 buildid=SAGAMI2-1.0.0-OIS-211222-0422 buildvariant=u"\
"ser androidboot.verifiedbootstate=green androidboot.keymast"\
"er=1 androidboot.vbmeta.device=PARTUUID=87ea1d55-4627-4a22-b"\
"fe0-7860349b4659 androidboot.vbmeta.avb_version=1.0 androidb"\
"oot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=s"\
"ha256 androidboot.vbmeta.size=9152 androidboot.vbmeta.digest"\
"=891a54717032693468342f805eda2e30b28baab313a0f44e7ed4dd48633"\
"48e05 androidboot.vbmeta.invalidate_on_error=yes androidboot"\
".veritymode=enforcing androidboot.bootdevice=1d84000.ufshc a"\
"ndroidboot.fstab_suffix=default androidboot.boot_devices=soc"\
"/1d84000.ufshc androidboot.baseband=msm msm_drm.dsi_display0"\
"=somc,6_panel: androidboot.slot_suffix=_a rootwait ro init=/"\
"init androidboot.dtbo_idx=9 androidboot.dtb_idx=0 androidboo"\
"t.force_normal_boot=1 androidboot.bootloader=xboot oemandro"\
"idboot.xboot=1322-1669_X_Boot_SM8350_LA1.0_R_31 androidboot."\
"serialno=DA78090Y1Q startup=0x00000004 warmboot=0x00000000 o"\
"emandroidboot.babe09a9=00 oemandroidboot.babe137e=87 oemandr"\
"oidboot.babe087b=63303031363738 oemandroidboot.imei=35249442"\
"025090 oemandroidboot.securityflags=0x00000002".
RAM Partitions
Add Base: 0x0000000080000000 Available Length: 0x0000000037500000
Add Base: 0x0000000200000000 Available Length: 0x0000000180000000
Add Base: 0x00000000C0000000 Available Length: 0x0000000140000000
Add Base: 0x00000000B9900000 Available Length: 0x0000000000000000
Update Device Tree total time: 44 ms

Shutting Down UEFI Boot Services: 4731 ms
EFI_UdonStop Detected SIM tray
EFI_UdonStop Stop DebugPort for anti-corroding
Start EBS [ 4940]
BDS: LogFs sync skipped, Unsupported

after several reboots with Sony logo it crashes to "Your devices is corrupt.." . Log

S - Format: Log Type - Time(microsec) - Message - Optional Info
S - Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.MXF.1.0-00589-LAHAINA-2
S - IMAGE_VARIANT_STRING=SocLahainaLAA
S - OEM_IMAGE_VERSION_STRING=ip-10-26-16-222
S - Boot Interface: UFS
S - Secure Boot: On
S - Boot Config @ 0x00786070 = 0x00000001
S - JTAG ID @ 0x00786130 = 0x301350e1
S - OEM ID @ 0x00786138 = 0x00780001
S - Serial Number @ 0x00786134 = 0x3dd46605
S - Feature Config Row 0 @ 0x00784148 = 0x0000000000000000
S - Feature Config Row 1 @ 0x00784150 = 0x0000000000000000
S - Core 0 Frequency, 1459 MHz
S - PBL Patch Ver: 3
D - 9307 - pbl_apps_init_timestamp
D - 49369 - bootable_media_detect_timestamp
D - 9403 - bl_elf_metadata_loading_timestamp
D - 25101 - bl_hash_seg_auth_timestamp
D - 22243 - bl_elf_loadable_segment_loading_timestamp
D - 4549 - bl_elf_segs_hash_verify_timestamp
D - 16951 - bl_sec_hash_seg_auth_timestamp
D - 814 - bl_sec_segs_hash_verify_timestamp
D - 25 - pbl_populate_shared_data_and_exit_timestamp
S - 137762 - PBL, End
B - 146644 - SBL1, Start
B - 276940 - SBL1 BUILD @ 10:29:24 on Sep 16 2021
B - 280996 - usb: usb2_rcal , 0xa
B - 284351 - usb: platform
B - 287737 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
B - 296277 - usb: eud_serial_upd , 0x3dd46605
D - 296612 - sbl1_hw_init
B - 650290 - UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
B - 652486 - UFS Boot LUN: 1
D - 371185 - boot_media_init
D - 0 - smss_load_cancel
B - 675270 - SMSS - Image Load, Start
D - 3019 - SMSS - Image Loaded, Delta - (0 Bytes)
D - 25345 - Auth Metadata
D - 26413 - sbl1_xblconfig_init
B - 710741 - XBL Config - Image Load, Start
D - 0 - shrm_load_cancel
B - 718397 - SHRM - Image Load, Start
D - 25010 - Auth Metadata
D - 1251 - Segments hash check
D - 33519 - SHRM - Image Loaded, Delta - (39808 Bytes)
D - 0 - boot_default_cdt_init
D - 244 - boot_cdt_init
B - 764147 - CDT - Image Load, Start
B - 766922 - CDT Version:3,Platform ID:8,Major ID:2,Minor ID:0,Subtype:0
D - 16531 - sbl1_hw_platform_pre_ddr
D - 0 - devcfg init
B - 793030 - PMIC A:2.0 B:2.2 C:2.2 D:2.0 E:2.3
B - 794860 - PM: Reset by PSHOLD
B - 797697 - PM: Reset Type: Shutdown
B - 800991 - PM: PON by SYSOK
B - 1052738 - PM: SET_VAL:Skip
B - 1053043 - PM: PSI: b0x00_v0x81
B - 1058411 - PM: Device Init # SPMI Transn: 15134
D - 275720 - pm_device_init, Delta
B - 1063992 - pm_driver_init, Start
B - 1076101 - no SDI. gcc_reset_status=2
B - 1078236 - S3_timer is set to 16sec

B - 1080096 - PM: Driver Init # SPMI Transn: 598
D - 16378 - pm_driver_init, Delta
B - 1099982 - PM: Battery ID: 15155Ohm
B - 1100074 - PM: VBAT: 4344mV IBAT: 203mA
B - 1603476 - PM: VBAT: 4368mV IBAT: 0mA
B - 1603690 - PM: Charger port type: Float charger
B - 2107092 - PM: Primary Charging loop exit
B - 2107519 - PM: CHG Init # SPMI Transn: 15849
B - 2111393 - vsense_init, Start
D - 0 - vsense_init, Delta
D - 1373628 - sbl1_hw_pre_ddr_init
D - 0 - boot_dload_handle_forced_dload_timeout
D - 3538 - sbl1_load_ddr_training_data
B - 2165561 - Pre_DDR_clock_init, Start
D - 92 - Pre_DDR_clock_init, Delta
D - 12871 - sbl1_ddr_set_params
B - 2177242 - sbl1_ddr_init, Start
B - 2180658 - LP5 DDR detected
B - 2199690 - eCDT MRR - Data Starting Address: 0x09066D00

D - 56211 - sbl1_ddr_init, Delta
B - 2236809 - DSF version = 247.8.15
B - 2240194 - Manufacturer ID = 1, Device Type = 8
B - 2243763 - Rank 0 size = 6144 MB, Rank 1 size = 6144 MB
B - 2248582 - DDR_INFO:LogVer=0002,type=0008,MR4=0x0000,0x0000,0x0000,0x0000,MR5=0x01,MR6=0x08,MR7=0x00,MR8=0x14
B - 2259836 - DDR_RANK:LogVer=0002
B - 2264472 - ** sdram0_cs0=1536MB,sdram0_cs1=1536MB
B - 2267858 - ** sdram1_cs0=1536MB,sdram1_cs1=1536MB
B - 2273043 - ** sdram2_cs0=1536MB,sdram2_cs1=1536MB
B - 2278228 - ** sdram3_cs0=1536MB,sdram3_cs1=1536MB
D - 106415 - sbl1_ddr_init
D - 0 - boot_pre_ddi_entry
B - 2291343 - do_ddr_training, Start
B - 2333982 - DDR: Start of DDR Training Restore
B - 2341241 - Current DDR Freq = 1709 MHz
B - 2341271 - Max enabled DDR Freq = 3196 MHz
B - 2345297 - DDR: End of DDR Training Restore
D - 55144 - do_ddr_training, Delta
D - 62982 - sbl1_do_ddr_training
D - 671 - boot_ddi_entry
B - 2361096 - Pimem init cmd, entry
D - 9150 - Pimem init cmd, exit
B - 2373662 - External heap init, Start
B - 2376529 - External heap init, End

UEFI Start [ 3126]
- 0x09FC01000 [ 3130] Sec.efi
ASLR : ON
DEP : ON (RTB)
Timer Delta : +1 mS
RAM Entry 0 : Base 0x0080000000 Size 0x0037500000
RAM Entry 1 : Base 0x0200000000 Size 0x0180000000
RAM Entry 2 : Base 0x00C0000000 Size 0x0140000000
RAM Entry 3 : Base 0x00B9900000 Size 0x0000000000
Total Available RAM : 12149 MB (0x02F7500000)
Total Installed RAM : 12288 MB (0x0300000000)
Multithread : ON (Lib ver 1.2)
CPU Cores : 8 (init 2)
Init 1 aux cores of 7
Init CPU core 1
> Scheduler up on Core 1
CONF File : uefiplatLA.cfg
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Build Info : 64b Sep 16 2021 10:29:57
Boot Device : UFS
PROD Mode : FALSE
Retail : TRUE
- 0x09ECC5000 [ 3189] DxeCore.efi
Loading DxeCore at 0x009ECC5000 EntryPoint=0x009ECC6000
HOBLIST address in DXE = 0x9EAB6018
FV Hob 0x9FC00000 - 0x9FEFFFFF
FV Hob 0x9ED04000 - 0x9F0ACFFF
FV2 Hob 0x9ED04000 - 0x9F0ACFFF
631008B0-B2D1-410A-8B49-2C5C4D8ECC7E - 00000000-0000-0000-0000-000000000000
- 0x09EC42000 [ 3192] XHwresetDxe.efi
- 0x09EC3B000 [ 3193] MazeDetDxe.efi
- 0x09EC62000 [ 3193] EnvDxe.efi
- 0x09EC58000 [ 3193] RscRtDxe.efi
- 0x09EC50000 [ 3193] SCHandlerRtDxe.efi
- 0x09E78A000 [ 3193] RuntimeDxe.efi
- 0x09EC2E000 [ 3193] ArmCpuDxe.efi
- 0x09EC25000 [ 3194] ArmGicDxe.efi
- 0x09EC1E000 [ 3195] MetronomeDxe.efi
- 0x09EC16000 [ 3195] ArmTimerDxe.efi
- 0x09EC0C000 [ 3195] SmemDxe.efi
- 0x09EBAB000 [ 3196] DALSys.efi
- 0x09EBA3000 [ 3196] HWIODxeDriver.efi
- 0x09EB98000 [ 3196] ChipInfo.efi
- 0x09EB90000 [ 3196] PlatformInfoDxeDriver.efi
- 0x09EB83000 [ 3197] HALIOMMU.efi
- 0x09EB6F000 [ 3197] ULogDxe.efi
- 0x09EB67000 [ 3197] CmdDbDxe.efi
- 0x09EB5F000 [ 3197] PwrUtilsDxe.efi
- 0x09EB4D000 [ 3198] NpaDxe.efi
- 0x09EB3D000 [ 3198] RpmhDxe.efi
- 0x09EB31000 [ 3199] VcsDxe.efi
- 0x09EB02000 [ 3199] ClockDxe.efi
>>> Cluster 0: 1497600000 Hz
>>> Cluster 2: 1248000000 Hz
- 0x09EAF5000 [ 3208] ICBDxe.efi
- 0x09EAEC000 [ 3210] ShmBridgeDxeLA.efi
- 0x09EADD000 [ 3210] ScmDxeLA.efi
- 0x09EAD2000 [ 3213] DiskIoDxe.efi
- 0x09EAC5000 [ 3213] PartitionDxe.efi
- 0x09EABD000 [ 3213] EnglishDxe.efi
- 0x09E77F000 [ 3213] FvSimpleFileSystem.efi
- 0x09E75E000 [ 3213] UFSDxe.efi
UFS INQUIRY ID: MICRON MT512GAXAT8U31 0102
UFS Boot LUN: 1
- 0x09D230000 [ 3242] Fat.efi
- 0x09D221000 [ 3242] TzDxeLA.efi
- 0x09D190000 [ 3245] VariableDxe.efi
LoadSecureApps: Load app from partition(tzxflattest): Status = 0x0, AppId = 2
<VariablePolicyInitialize:179> variable policy engine disabled
- 0x09CF68000 [ 3458] QcomWDogDxe.efi
HW Wdog Setting from PCD : Disabled
- 0x09CF5F000 [ 3459] ResetRuntimeDxe.efi
- 0x09CF57000 [ 3460] XGAdcDxe.efi
- 0x09CF50000 [ 3460] WatchdogTimer.efi
- 0x09CF35000 [ 3460] SecurityStubDxe.efi
- 0x09E405000 [ 3460] EmbeddedMonotonicCounter.efi
- 0x09CF2C000 [ 3461] RealTimeClock.efi
- 0x09CF05000 [ 3462] DevicePathDxe.efi
- 0x09CF24000 [ 3462] CapsuleRuntimeDxe.efi
- 0x09CEBE000 [ 3463] HiiDatabase.efi
- 0x09CF1B000 [ 3463] FontDxe.efi
- 0x09CDE4000 [ 3468] QcomBds.efi
- 0x09CE77000 [ 3476] VerifiedBootDxe.efi
- 0x09CEB5000 [ 3477] DALTLMM.efi
- 0x09CE6D000 [ 3477] I2C.efi
- 0x09CE63000 [ 3477] SPMI.efi
- 0x09CD9D000 [ 3482] PmicDxe.efi
PM0: 47, PM1: 48, PM2: 49, PM3: 50, PM4: 51,
app_pshold_cfg change: DVDD_SHUTDOWN -> NORMAL_SHUTDOWN
Module cannot re-initialize DAL module environment
- 0x09CDC8000 [ 3506] SdccDxe.efi
- 0x09CE3A000 [ 3507] DDRInfoDxe.efi
- 0x09CE5B000 [ 3509] FeatureEnablerDxe.efi
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler_a)Failed: Status(0x800000000000000E), appId(0)
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
Image partition label not found
EFI_QseecomStartApp: Load from partition (featenabler)Failed: Status(0x800000000000000E), appId(0)
Image partition label not found
LoadImageFromPartitionUsingGuid Failed: 14
EFI_QseecomStartApp: Load Failed: Status(0x800000000000000E)
Failed to start featenabler_a TA, status = 14
- 0x09CCF8000 [ 3514] DisplayDxe.efi
- 0x09CD8B000 [ 3515] FvDxe.efi
- 0x09CE31000 [ 3516] PILProxyDxe.efi
- 0x09CD52000 [ 3516] PILDxe.efi
pil-abl Done t=87ms s=1ms a=45ms f=38ms
- 0x09CD72000 [ 3688] SPSSDxe.efi
SPSSDxe [spss_iar_main] I: IAR-STATE is NOT ACTIVATED [0x0], Exit now
Overriding PIL cfg by caller
pil-SPSS Failed to get MDT size
pil-SPSS Failed to load metadata
pil-SPSS Failed to boot subsys
SPSSDxe:: SPSSDxe_LoadSPSS ProcessPilImageExt = Load Error
Error: Image at 0009CD72000 start failed: Load Error
- 0x09CD76000 [ 3698] IPCCDxe.efi
- 0x09CC9A000 [ 3699] GlinkDxe.efi
smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=13, size=32, flags=0x40000000. - 0x09CD6E000 [ 3700] PrintDxe.efi
- 0x09CCAD000 [ 3700] SPI.efi
- 0x09CC81000 [ 3701] PmicGlinkDxe.efi
- 0x09CC90000 [ 3701] UsbPwrCtrlDxe.efi
- 0x09CC42000 [ 3702] QcomChargerDxeLA.efi
QcomChargerDxe:: ChargerPlatform_Init Enabled WDOG.
- 0x09CD4A000 [ 3722] ChargerExDxe.efi
- 0x09CC29000 [ 3723] UsbfnDwc3Dxe.efi
- 0x09CC6A000 [ 3723] XhciPciEmulation.efi
- 0x09CBFA000 [ 3724] XhciDxe.efi
- 0x09CBE8000 [ 3724] UsbBusDxe.efi
- 0x09CBDB000 [ 3725] UsbKbDxe.efi
- 0x09CC75000 [ 3725] UsbMassStorageDxe.efi
- 0x09CBC4000 [ 3726] UsbConfigDxe.efi
InitUsbClocks: ClockProtocol unavailable
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigInit: Aborting Host Mode Initialization due to dead battery
UsbConfigInit: Aborting Host Mode Initialization due to dead battery
UsbConfigInit: UsbPwrCtrl No. of Ports = 1

UsbConfigPortsQueryConnectionChange: usbport->connectstate: ATT
HandlePortPartnerXtach: Cable Attach core 0, portmode 1, dualmode 1
- 0x09CC14000 [ 3730] ButtonsDxe.efi
ButtonsDxeTest: Keypress SDAM data payload 0
- 0x09CBA1000 [ 3731] CPRDxe.efi
- 0x09CA6A000 [ 3752] GpiDxe.efi
- 0x09CA23000 [ 3850] UCDxe.efi
- 0x09CBB3000 [ 3856] RngDxe.efi
- 0x09CB85000 [ 3856] SimpleTextInOutSerial.efi
- 0x09CA60000 [ 3858] ConPlatformDxe.efi
- 0x09CA15000 [ 3858] ConSplitterDxe.efi
- 0x09CA54000 [ 3859] GraphicsConsoleDxe.efi
- 0x09CA4A000 [ 3860] ASN1X509Dxe.efi
- 0x09CA0B000 [ 3861] SecRSADxe.efi
- 0x09CA02000 [ 3861] XResetReasonDxe.efi
invalid last_log info
- 0x09C9F6000 [ 3862] TaDxe.efi
- 0x09C9EE000 [ 3863] XOemCertDxe.efi
- 0x09C9E3000 [ 3863] XBootPALDxe.efi
- 0x09C9DB000 [ 3863] XProductIdDxe.efi
- 0x09C9CF000 [ 3864] UdonDxe.efi
- 0x09C9AE000 [ 3865] XGraphicImagesDxe.efi
- 0x09C9BE000 [ 3935] XPmicAccessDxe.efi
- 0x09C9A6000 [ 3936] ResetCfgDxe.efi
- 0x09C9C6000 [ 3936] MinidumpTADxe.efi
smem_get_addr: SMEM get addr failed! smem_type=628MinidumpTADxe: Minidump TA loading not enabled.
Error: Image at 0009C9C6000 start failed: Load Error
- 0x09C99E000 [ 3941] TsensDxe.efi
- 0x09C983000 [ 3944] UsbMsdDxe.efi
- 0x09C976000 [ 3945] UsbDeviceDxe.efi
- 0x09C96E000 [ 3945] UsbInitDxe.efi
- 0x09C965000 [ 3946] ParserDxe.efi
- 0x09C95E000 [ 3947] SerialPortDxe.efi
BDS Entry [ 3947]
Disp init wait [ 3947]
rtc raw 579
-----------------------------
Platform Init [ 3959] BDS
Boot Cycle : 43611
Run Cycle : 43611
UEFI Ver : 6.0.210916.BOOT.MXF.1.0-00589-LAHAINA-2
Platform : MTP
Subtype : 0
Boot Device : UFS
Chip Name : SM_LAHAINA
Chip Ver : 2.1
Chip Serial Number : 0x3DD46605
Boot Core : 1497 MHz
-----------------------------
- 0x09C913000 [ 3979] QcomChargerApp.efi
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired Chg Fw Load not required boot to HLOS
ChargerLib:: no Turn Off LED
UEFI Total : 858 ms
POST Time [ 3984] OS Loader
- 0x09C7AD000 [ 3988] LinuxLoader.efi
Loader Build Info: Sep 16 2021 10:32:41
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
VB: RWDeviceState: Succeed using rpmb!
Boot counter is 44027
XBoot Init
Init XBootPALAPILib
Init TA API Lib
XBOOT (1322-1669_X_Boot_SM8350_LA1.0_R_31)
Reading 325 bytes from RPMB, OK
Reading 325 bytes from RPMB, OK
XBoot MakeDecisions
Check authenticated commands
[ERROR @ ta_interface.c:343]:
Unable to delete TA unit 2334
Make Decisions
PBA ID: V5034977A (1)
Vendor(0x00000041)->Sony(0xABADBABE)
Setting existing handle
Startup flags: [CHARGER INSERTED]
Warmboot reason: [CLEARED]
[ERROR @ sony_boot_config_parser.c:740]:
None or incorrect vbus_pulse configuration!
SW service triggering key detected
VBUS not detected
Service mode detected: [NONE]
Collect command line additions
Obtain backlight config
Verify OEM unlock flag Request
Generate authenticated channel nonce
Booting Into Ramdumper
Enable XHwreset
S2 reset is enabled
Setting existing handle
Total DDR Size: 0x00000002F7500000
no check attributes (Mode 6)
LoadImageAndAuth: 1747: CurrentSlot.Suffix=_a
Setting existing handle
Sony(0xABADBABE)->Vendor(0x00000062)
Load Image vbmeta_a total time: 1 ms
Load Image vbmeta_system_a total time: 1 ms
Load Image dtbo_a total time: 4 ms
Load Image rdimage_a total time: 1 ms
Load Image vendor_boot_a total time: 2 ms
Invalid boot image header
Invalid boot image header:No Media
LoadImageAndAuth failed: No Media
Failed to boot Ramdumper kernel, Restarting to invoke appropriate kernel
Setting existing handle
Sony(0xABADBABE)->Vendor(0x00000048)

INFO: Received ResetSytem request.
INFO: Type :0x0
INFO: DataSize :0x0

Start EBS [ 4670]
BDS: LogFs sync skipped, Unsupported

read TA -2226 after writing unlock.ta:

c:\Sony\sw\ta flash>newflasher Read-TA:2:2226
--------------------------------------------------------
newflasher v57 by Munjeni @ 2017/2023
--------------------------------------------------------

Determining available free space by GetDiskFreeSpaceEx:

Available space to caller = 31115 MB
Total space on current drive = 510975 MB
Free space on drive = 31115 MB
Device path: \\?\usb#vid_0fce&pid_b00b#5&4267132&0&1#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Class Description: SOMC Flash Device
Device Instance Id: USB\VID_0FCE&PID_B00B\5&4267132&0&1

update.xml not exist in current folder!
Writing command: Read-TA:2:2226
got first reply[0x20]:

00000000 46 41 49 4C 46 41 49 4C 55 6E 69 74 20 32 32 32 FAILFAILUnit 222
00000010 36 20 64 6F 65 73 20 6E 6F 74 20 65 78 69 73 74 6 does not exist

got fail reply: FAILFAILUnit 2226 does not exist
Closing device.