Replicant

On that device, I installed Replicant 6.0 0003, and the device booted fine.

Then I installed Replicant 6.0 0004 and after reboot from the recovery, I've a black screen.

On the UART I've things like that:

====== VCELL : 405750, SOC : 96, nType : 4 ======
[Charger] nScaledVCELL : 405750000, nDesriedSOC, : 94, nMaxSOC : 114, nMinSOC : 74
* FB base addr = 0xbea70000!
* PANEL_S6E8AA0_ID_READ : 0x12, 0x8e, 0x9b.
[ omap_power_get_reset_source :47]     PRM_RSTST : 0x2
<hit enter twice to activate fiq debugger>

AST_POWERON

But then nothing appear after AST_POWERON...

As the recovery works, I looked at the load address and page size from it:

 unbootimg -i ../recovery-maguro.img
total image size:   8210432
kernel size:        4604340
kernel load addr:   0x80008000
ramdisk size:       3600734
ramdisk load addr:  0x81000000
2nd boot size:      0
2nd boot load addr: 0x80f00000
kernel tags addr:   0x80000100
page size:          2048
board:              `'
cmdline:            `androidboot.hardware=tuna'
id:                 e18e8c88256b849ef41ee369293b220cfcffe5a0000

But they look similar to the boot.img which is in the zip:

unbootimg -i boot.img 
total image size:   5619712
kernel size:        4604340
kernel load addr:   0x80008000
ramdisk size:       1009915
ramdisk load addr:  0x81000000
2nd boot size:      0
2nd boot load addr: 0x80f00000
kernel tags addr:   0x80000100
page size:          2048
board:              `'
cmdline:            `androidboot.hardware=tuna'
id:                 9b90141066f527ecd3909d2ab8e383ebd995fd40000

The boot.img addresses and size also don't overlap.

The extracted kernel image is the same (cmp sees no difference).

=> It'd be a good idea to see how to add loglevel=8 and look if adding it in the boot.img is taken into account by the bootloader.

I've booted the Replicant 6.0 0004 RC1 boot.img with Replicant 6.0 0003 and it boots fine.

I got the following log:

Kernel(boot.img) read success from partition no.8
Setting param.serialnr = 0x016b756d 0x14021016
Setting param.board_rev = 0x09
Setting param.cmdline = androidboot.hardware=tuna loglevel=8 fiq_debugger.console_enable=1 fiq_debugger.no_sleep=1 androidboot.serialno=016B756D14021016 androidboot.bootloader=PRIMELA03 androidboot.baseband=I9250XXLA2 lcd_bootfb=0xbea70000 mms_ts.panel_id=18 androidboot.macaddr=
Setting param.initrd_start = 0x82800000, param.initrd_size = 0xf7000

Starting kernel at 0x81808000...
�<hit enter to activate fiq debugger>
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Linux version 3.0.101-replicant (replicant@lxc-f2a85m-pro-debian) (gcc version 5.4.1 20160919 (15:5.4.1+svn241155-1) ) #1 SMP PREEMPT Sat Jan 11 02:12:08 UTC 2020
[    0.000000] CPU: ARMv7 Processor [412fc09a] revision 10 (ARMv7), cr=10c5387d
[    0.000000] CPU: VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine: Tuna
[    0.000000] android_display: setting default resolution 720*1280, bpp=4
[    0.000000] android_display: tiler1d 29491200
[    0.000000] android_display: setting fb0.vram to 7864320
[    0.000000] android_display: setting vram to 7864320 at address 0xbea00000
[    0.000000] android_display: ion carveouts: 104726528 tiler2d, 0 nonsecure
[    0.000000] omap4_total_ram_size = 0x40000000
[    0.000000] omap4_smc_size = 0x300000
[    0.000000] omap4_ion_heap_secure_input_size = 0x900000
[    0.000000] omap4_ion_heap_secure_output_wfdhdcp_size = 0x0
[    0.000000] omap4_ducati_heap_size = 0x6900000
[    0.000000] omap4_ion_heap_tiler_mem_size = 0x0
[    0.000000] omap4_ion_heap_nonsec_tiler_mem_size  = 0x0
[    0.000000] omap4_smc_addr = 0xbfd00000
[    0.000000] omap4_ion_heap_secure_input_addr = 0xba300000
[    0.000000] omap4_ion_heap_secure_output_wfdhdcp_addr = 0xba300000
[    0.000000] omap4_ducati_heap_addr = 0xb3a00000
[    0.000000] omap4_ion_heap_tiler_mem_addr = 0xb3a00000
[    0.000000] omap4_ion_heap_nonsec_tiler_mem_addr  = 0xb3a00000
[    0.000000] Reserving CMA IPU + RPMSG region at address = 0xb3800000 with size = 0x7800000
[    0.000000] cma: CMA: reserved 120 MiB at b3800000
[    0.000000] CMA RPMSG region: address = 0xb3a00000, size = 0x8c000
[    0.000000] CMA IPU region: address = 0xb3a8c000, size = 0x7174000
[    0.000000] omap_ion_init: secure_input id=2 [ba300000-bac00000] size=900000
[    0.000000] omap_ion_init: secure_output_wfdhdcp id=5 [ba300000-ba300000] size=0
[    0.000000] omap_ion_init: tiler id=1 [b3a00000-b3a00000] size=0
[    0.000000] omap_ion_init: nonsecure_tiler id=3 [b3a00000-b3a00000] size=0
[    0.000000] omap_ion_init: system id=0 [0-0] size=0
[    0.000000] omap_ion_init: tiler_reservation id=4 [0-0] size=0
[    0.000000] Reserving 8388608 bytes SDRAM for VRAM
[    0.000000] Memory policy: ECC disabled, Data cache writealloc
[    0.000000] OMAP4460 ES1.1
[    0.000000] SRAM: Mapped pa 0x4030d000 to va 0xfe40d000 size: 0x1000
[    0.000000] On node 0 totalpages: 259584
[    0.000000] free_area_init_node: node 0, pgdat c0969220, node_mem_map c09f4000
[    0.000000]   Normal zone: 256 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32512 pages, LIFO batch:7
[    0.000000]   HighMem zone: 1792 pages used for memmap
[    0.000000]   HighMem zone: 225024 pages, LIFO batch:31
[    0.000000] PERCPU: Embedded 7 pages/cpu @c11fb000 s7744 r8192 d12736 u32768
[    0.000000] pcpu-alloc: s7744 r8192 d12736 u32768 alloc=8*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 257536
[    0.000000] Kernel command line: console=ttyFIQ0 androidboot.console=ttyFIQ0 mem=1G vmalloc=768M omap_wdt.timer_margin=30 no_console_suspend androidboot.hardware=tuna loglevel=8 fiq_debugger.console_enable=1 fiq_debugger.no_sleep=1 androidboot.serialno=016B756D14021016 androidboot.bootloader=PRIMELA03 androidboot.baseband=I9250XXLA2 lcd_bootfb=0xbea70000 mms_ts.panel_id=18 androidboot.macaddr=
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] allocated 4194304 bytes of page_cgroup
[    0.000000] please try 'cgroup_disable=memory' option if you don't want memory cgroups
[    0.000000] Memory: 512MB 488MB 14MB = 1014MB total
[    0.000000] Memory: 891796k/891796k available, 156780k reserved, 784384K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     DMA     : 0xff000000 - 0xffe00000   (  14 MB)
[    0.000000]     vmalloc : 0xc8800000 - 0xf8000000   ( 760 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .init : 0xc0008000 - 0xc0069000   ( 388 kB)
[    0.000000]       .text : 0xc0069000 - 0xc0900000   (8796 kB)
[    0.000000]       .data : 0xc0900000 - 0xc096b580   ( 430 kB)
[    0.000000]        .bss : 0xc096b5a4 - 0xc09f3e90   ( 547 kB)
[    0.000000] SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000] NR_IRQS:410
[    0.000000] omap_hwmod: dpll_mpu_m2_ck: missing clockdomain for dpll_mpu_m2_ck.
[    0.000000] OMAP clockevent source: GPTIMER1 at 32768 Hz
[    0.000000] sched_clock: 32 bits at 32kHz, resolution 30517ns, wraps every 131071999ms
[    0.000061] Calibrating delay loop... 1194.24 BogoMIPS (lpj=4665344)
[    0.023498] pid_max: default: 32768 minimum: 301
[    0.070648] Security Framework initialized
[    0.070648] SELinux:  Initializing.
[    0.070648] SELinux:  Starting in permissive mode
[    0.070770] Mount-cache hash table entries: 512
[    0.070770] Initializing cgroup subsys debug
[    0.071868] Initializing cgroup subsys cpuacct
[    0.071929] Initializing cgroup subsys memory
[    0.071929] Initializing cgroup subsys freezer
[    0.071929] Initializing cgroup subsys bfqio
[    0.072082] CPU: Testing write buffer coherency: ok
[    0.072082] ftrace: allocating 23617 entries in 70 pages
[    0.100219] hw perfevents: enabled with ARMv7 Cortex-A9 PMU driver, 7 counters available
[    0.100372] L310 cache controller enabled
[    0.100372] l2x0: 16 ways, CACHE_ID 0x410000c7, AUX_CTRL 0x5e470000, Cache size: 1048576 B
[    0.178405] CPU1: Booted secondary processor
[    0.209655] Brought up 2 CPUs
[    0.209655] SMP: Total of 2 processors activated (2388.48 BogoMIPS).
[    0.213928] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for emif_fw
[    0.213928] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for l3_instr
[    0.213958] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for l3_main_1
[    0.213958] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for l3_main_2
[    0.213989] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for l4_abe
[    0.213989] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for l4_cfg
[    0.214019] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for l4_per
[    0.214019] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for l4_wkup
[    0.214050] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for mpu_private
[    0.214050] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for sl2if
[    0.214233] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for thermal_sensor
[    0.214233] omap_hwmod: _populate_mpu_rt_base found no _mpu_rt_va for usbhs_ehci
[    0.214263] omap_hwmod: l3_div_ck: missing clockdomain for l3_div_ck.
[    0.214263] omap_hwmod: l4_div_ck: missing clockdomain for l4_div_ck.
[    0.217437] _omap4_module_wait_ready: Timeout waiting for module enable (mcpdm_fck: clkctrl = 0x30002)
[    0.219512] omap_hwmod: mcpdm: cannot be enabled (3)
[    0.225250] print_constraints: dummy: 
[    0.225250] NET: Registered protocol family 16
[    0.231384] GPMC revision 6.0
[    0.231384] EMIF0 is enabled with IRQ142
[    0.231384] EMIF1 is enabled with IRQ143
[    0.232910] Last reset was warm software reset (PRM_RSTST=0x2)
[    0.233062] HSI: device registered as omap_hwmod: hsi
[    0.233306] OMAP GPIO hardware version 0.1
[    0.234497] omap_mux_init: Add partition: #1: core, flags: 2
[    0.236022] omap_mux_init: Add partition: #2: wkup, flags: 2
[    0.236267] Tuna HW revision: 09 (Maguro 8th Sample), cpu OMAP4460 ES1.1 
[    0.240264] Using 
[    0.241973] _omap_mux_init_gpio: Multiple gpio paths (2) for gpio102
[    0.242004] omap_mux_init_gpio: Could not set gpio102
[    0.242462] _omap_mux_init_gpio: Multiple gpio paths (2) for gpio101
[    0.242492] omap_mux_init_gpio: Could not set gpio101
[    0.242492] _omap_mux_init_gpio: Multiple gpio paths (2) for gpio100
[    0.242492] omap_mux_init_gpio: Could not set gpio100
[    0.243347] hw-breakpoint: found 6 breakpoint and 1 watchpoint registers.
[    0.243377] hw-breakpoint: 1 breakpoint(s) reserved for watchpoint single-step.
[    0.243377] hw-breakpoint: maximum watchpoint size is 4 bytes.
[    0.248138] OMAP DMA hardware revision 0.0
[    0.248687] omap_rproc_get_pool: carveout memory is unavailable: 0x0, 0x0
[    0.258239] bio: create slab <bio-0> at 0
[    0.258605] print_constraints: vwl1271: 2000 mV 
[    0.258605] i2c-core: driver [twl] using legacy suspend method
[    0.259429] i2c-core: driver [twl] using legacy resume method
[    0.259429] SCSI subsystem initialized
[    0.260681] usbcore: registered new interface driver usbfs
[    0.261138] usbcore: registered new interface driver hub
[    0.261230] usbcore: registered new device driver usb
[    0.261291] i2c-gpio i2c-gpio.5: using pins 98 (SDA) and 99 (SCL)
[    0.262451] omap_i2c omap_i2c.1: bus 1 rev4.0 at 400 kHz
[    0.262542] Skipping twl internal clock init and using bootloader value (unknown osc rate)
[    0.266784] twl6030: PIH (irq 39) chaining IRQs 368..387
[    0.268859] print_constraints: VUSB: 3300 mV normal standby
[    0.269470] print_constraints: VMMC: 1800 mV normal standby
[    0.270324] print_constraints: VPP: 1800 <--> 2500 mV at 1900 mV normal standby
[    0.270690] print_constraints: VUSIM: 2200 mV normal standby
[    0.270690] print_constraints: VCXIO: 1800 mV normal standby
[    0.271301] print_constraints: VDAC: 1800 mV normal standby
[    0.272186] print_constraints: VAUX1_6030: 3000 mV normal standby
[    0.272918] print_constraints: VAUX2_6030: 1200 <--> 2800 mV at 1800 mV normal standby
[    0.272918] print_constraints: VAUX3_6030: 3100 mV normal standby
[    0.274261] print_constraints: VDD3: 
[    0.274963] print_constraints: VMEM: at 1250 mV 
[    0.275787] print_constraints: V2V1: 2100 mV normal standby
[    0.276519] print_constraints: VANA: 2100 mV normal standby
[    0.277435] print_constraints: CLK32KG: 
[    0.278320] print_constraints: CLK32KAUDIO: 
[    0.278503] omap_i2c omap_i2c.2: bus 2 rev4.0 at 400 kHz
[    0.278869] omap_i2c omap_i2c.3: bus 3 rev4.0 at 400 kHz
[    0.279174] omap_i2c omap_i2c.4: bus 4 rev4.0 at 400 kHz
[    0.279937] omap-rproc omap-rproc.0: dsp is available
[    0.279937] omap-rproc omap-rproc.1: ipu is available
[    0.279937] Advanced Linux Sound Architecture Driver Version 1.0.24.
[    0.279937] Bluetooth: Core ver 2.16
[    0.281524] NET: Registered protocol family 31
[    0.281524] Bluetooth: HCI device and connection manager initialized
[    0.281616] Bluetooth: HCI socket layer initialized
[    0.281616] Bluetooth: L2CAP socket layer initialized
[    0.281677] Bluetooth: SCO socket layer initialized
[    0.282135] cfg80211: Calling CRDA to update world regulatory domain
[    0.282287] Switching to clocksource 32k_counter
[    0.287750] Switched to NOHz mode on CPU #0
[    0.287780] Switched to NOHz mode on CPU #1
[    0.298980] musb-hdrc: version 6.0, musb-dma, otg (peripheral+host)
[    0.304687] musb-hdrc: ConfigData=0xde (UTMI-8, dyn FIFOs, bulk combine, bulk split, HB-ISO Rx, HB-ISO Tx, SoftConn)
[    0.304718] musb-hdrc: MHDRC RTL version 2.0 
[    0.304718] musb-hdrc: setup fifo_mode 4
[    0.304748] musb-hdrc: 28/31 max ep, 16384/16384 memory
[    0.304748] musb-hdrc musb-hdrc: USB OTG mode controller at fc0ab000 using DMA, IRQ 124
[    0.305389] NET: Registered protocol family 2
[    0.305389] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.305389] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
[    0.307220] TCP bind hash table entries: 16384 (order: 5, 196608 bytes)
[    0.307220] TCP: Hash tables configured (established 16384 bind 16384)
[    0.307220] TCP reno registered
[    0.307586] UDP hash table entries: 128 (order: 0, 4096 bytes)
[    0.307586] UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
[    0.308135] NET: Registered protocol family 1
[    0.308502] Trying to unpack rootfs image as initramfs...
[    0.388702] Freeing initrd memory: 988K
[    0.823394] PHOENIX_LAST_TURNOFF_STS: 0x01
[    1.944763] console [ttyFIQ0] enabled
[    1.948577] Registered FIQ tty driver c7909b40
[    1.953826] ram_console: got buffer at a0000000, size 200000
[    1.953826] ram_console: uncorrectable error in header
[    1.964935] ram_console: no valid data in buffer (sig = 0xc0c0c0c0)
[    1.996185] console [ram-1] enabled
[    2.010070] omap-iommu omap-iommu.0: ducati registered
[    2.010070] omap-iommu omap-iommu.1: tesla registered
[    2.021270] audit: initializing netlink socket (disabled)
[    2.021270] type=2000 audit(1.984:1): initialized
[    2.032714] highmem bounce pool size: 64 pages
[    2.054565] NTFS driver 2.1.30 [Flags: R/O].
[    2.058990] fuse init (API version 7.16)
[    2.064697] msgmni has been set to 451
[    2.068786] SELinux:  Registering netfilter hooks
[    2.076049] io scheduler noop registered
[    2.080230] io scheduler deadline registered
[    2.084716] io scheduler cfq registered (default)
[    2.088012] io scheduler bfq registered
[    2.093963] BFQ I/O-scheduler: v7r8
[    2.098297] OMAP DSS rev 4.0
[    2.103820] Keyboard driver not present
[    2.108398] dsscomp: initializing.
[    2.112396] misc dsscomp: display0=s6e8aa0
[    2.114013] misc dsscomp: display1=hdmi_panel
[    2.121185] misc dsscomp: found 2 displays and 4 overlays, WB overlay 1
[    2.128295] could not allocate slot
[    2.143157] omap-rproc omap-rproc.1: powering up ipu
[    2.148986] virtio_rpmsg_bus virtio0: rpmsg backend virtproc probed successfully
[    2.148986] virtio_rpmsg_bus virtio1: rpmsg backend virtproc probed successfully
[    2.148986] omap_uart.0: ttyO0 at MMIO 0x4806a000 (irq = 104) is a OMAP UART0
[    2.173004] omap_uart.1: ttyO1 at MMIO 0x4806c000 (irq = 105) is a OMAP UART1
[    2.180877] omap_uart.3: ttyO3 at MMIO 0x4806e000 (irq = 102) is a OMAP UART3
[    2.188720] omap_ion_probe: adding heap secure_input of type 2 with ba300000@900000
[    2.196868] omap_ion_probe: adding heap secure_output_wfdhdcp of type 2 with ba300000@0
[    2.205139] omap_ion_probe: adding heap tiler of type 4 with b3a00000@0
[    2.211914] omap_ion_probe: adding heap nonsecure_tiler of type 4 with b3a00000@0
[    2.219665] omap_ion_probe: adding heap system of type 0 with 0@0
[    2.225921] omap_ion_probe: adding heap tiler_reservation of type 5 with 0@0
[    2.239837] brd: module loaded
[    2.246307] loop: module loaded
[    2.250122] zram: Created 1 device(s) ...
[    2.255310] input: barometer as /devices/virtual/input/input0
[    2.261413] sec_jack_probe : Registering jack driver
[    2.267211] i2c i2c-4: mpu_probe: 0
[    2.332611] i2c i2c-4: Installing irq using 205
[    2.332611] i2c i2c-4: Module Param interface = mpuirq
[    2.332611] i2c-core: driver [mpu3050] using legacy suspend method
[    2.349304] i2c-core: driver [mpu3050] using legacy resume method
[    2.355651] mpu_init: Probe name mpu3050
[    2.355651] i2c i2c-4: bma250_mod_probe: bma250
[    2.355651] i2c i2c-4: Installing Accel irq using 282
[    2.414550] i2c i2c-4: mpu3050: +bma250
[    2.418609] bma250_mod_init: Probe name bma250_mod
[    2.423614] i2c i2c-4: yas530_mod_probe: yas530
[    2.423614] i2c i2c-4: Installing Compass irq using 336
[    2.457702] i2c i2c-4: mpu3050: +yas530
[    2.457702] yas530_mod_init: Probe name yas530_mod
HSI driver version 0.4.3
[    3.393310] omap_hsi omap_hsi.0: Registering IRQ hsi_p1_mpu (99)
[    3.399475] omap_hsi omap_hsi.0: HSI port 1 initialized
[    3.404998] omap_hsi omap_hsi.0: Registering IRQ hsi_dma_mpu (103)
[    3.411529] omap_hsi omap_hsi.0: HSI Hardware REVISION 0x50043101
[    3.419830] omap_hsi omap_hsi.0: Cannot set HSI FClk to default value: 96000000. Will retry on next open
[    3.433929] Tuna ASoC init
[    3.442474] twl6040-codec twl6040-codec: couldn't get VDDHF regulator -19
[    3.478118] asoc: null-codec-dai <-> MultiMedia1 mapping ok
[    3.485260] asoc: null-codec-dai <-> MultiMedia2 mapping ok
[    3.492828] asoc: null-codec-dai <-> Voice mapping ok
[    3.499694] asoc: null-codec-dai <-> Tones mapping ok
[    3.506530] asoc: null-codec-dai <-> Vibra mapping ok
[    3.512664] asoc: null-codec-dai <-> MODEM mapping ok
[    3.518737] asoc: null-codec-dai <-> MultiMedia1 LP mapping ok
[    3.526702] asoc: FM Digital <-> omap-mcbsp-dai.1 mapping ok
[    3.533935] asoc: twl6040-dl1 <-> mcpdm-dl mapping ok
[    3.540588] asoc: dit-hifi <-> omap-mcasp-dai mapping ok
[    3.548553] twl6040-codec twl6040-codec: ASoC: Failed to create Aux/FM Stereo In debugfs file
[    3.558349] asoc: twl6040-dl1 <-> mcpdm-dl1 mapping ok
[    3.564697] asoc: twl6040-ul <-> mcpdm-ul1 mapping ok
[    3.570800] asoc: twl6040-dl2 <-> mcpdm-dl2 mapping ok
[    3.576690] mmc0: new high speed MMC card at address 0001
[    3.577239] asoc: twl6040-vib <-> mcpdm-vib mapping ok
[    3.578216] asoc: Bluetooth <-> omap-mcbsp-dai.0 mapping ok
[    3.579193] asoc: Bluetooth <-> omap-mcbsp-dai.0 mapping ok
[    3.580230] asoc: FM Digital <-> omap-mcbsp-dai.1 mapping ok
[    3.581237] asoc: MODEM <-> omap-mcbsp-dai.1 mapping ok
[    3.582214] asoc: null-codec-dai <-> omap-abe-vxrec-dai mapping ok
[    3.584197] input: Tuna Headset Jack as /devices/platform/soc-audio/sound/card0/input5
[    3.625152] mmcblk0: mmc0:0001 VYL00M 14.6 GiB 
[    3.626800] asoc: hdmi-audio-codec <-> hdmi-audio-dai mapping ok
[    3.627349] ALSA device list:
[    3.627380]   #0: TI OMAP4 Board
[    3.627380]   #1: OMAP4HDMI
[    3.627502] GACT probability NOT on
[    3.627532] Mirror/redirect action on
[    3.627532] u32 classifier
[    3.627563]     Actions configured
[    3.627563] Netfilter messages via NETLINK v0.30.
[    3.627655] nf_conntrack version 0.5.0 (15869 buckets, 63476 max)
[    3.629364] ctnetlink v0.93: registering with nfnetlink.
[    3.629394] NF_TPROXY: Transparent proxy support initialized, version 4.1.0
[    3.629425] NF_TPROXY: Copyright (c) 2006-2007 BalaBit IT Ltd.
[    3.629943] xt_time: kernel timezone is -0000
[    3.632751] ip_tables: (C) 2000-2006 Netfilter Core Team
[    3.632965] arp_tables: (C) 2002 David S. Miller
[    3.633026] TCP bic registered
[    3.633026] TCP cubic registered
[    3.633056] TCP westwood registered
[    3.633056] TCP htcp registered
[    3.633056] Initializing XFRM netlink socket
[    3.634368] NET: Registered protocol family 10
[    3.643707] Mobile IPv6
[    3.643737] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    3.644134] IPv6 over IPv4 tunneling driver
[    3.651977] NET: Registered protocol family 17
[    3.652008] NET: Registered protocol family 15
[    3.652282] Bluetooth: RFCOMM TTY layer initialized
[    3.652313] Bluetooth: RFCOMM socket layer initialized
[    3.652343] Bluetooth: RFCOMM ver 1.11
[    3.652343] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[    3.652374] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[    3.652557] NET: Registered protocol family 35
[    3.653320] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
[    3.785461] ThumbEE CPU extension supported.
[    3.785522] mmcblk0boot0: mmc0:0001 VYL00M partition 1 512 KiB
[    3.795959] Registering SWP/SWPB emulation handler
[    3.795989] mmcblk0boot1: mmc0:0001 VYL00M partition 2 512 KiB
[    3.806945] Registering SDIV/UDIV emulation handler
[    3.817657]  mmcblk0: p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 p13
[    3.825714] Reprogramming LPDDR2 timings to 400000000 Hz
[    3.831481] sr_init: No PMIC hook to init smartreflex
[    3.836730]  mmcblk0boot1: unknown partition table
[    3.836883] smartreflex smartreflex.0: omap_sr_probe: SmartReflex driver initialized
[    3.837066] smartreflex smartreflex.1: omap_sr_probe: SmartReflex driver initialized
[    3.837249] smartreflex smartreflex.2: omap_sr_probe: SmartReflex driver initialized
[    3.865386] SmartReflex class 1.5 driver: initialized (86400000ms)
[    3.872161]  mmcblk0boot0: unknown partition table
[    3.872436] Power Management for TI OMAP4.
[    3.872589] OMAP4 PM: Static dependency added between MPUSS and DUCATI <-> L4_PER/CFG and L3_1.
[    3.890350] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:0 (mask:ff)
[    3.899749] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:1 (mask:ff)
[    3.909057] sr_class1p5_calib_work: mpu: Calibration complete: Voltage:Nominal=1203000 Calib=990000 margin=0
[    3.919219] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:2 (mask:ff)
[    3.928619] sr_class1p5_calib_work: core: Calibration complete: Voltage:Nominal=1127000 Calib=1063480 margin=13000
[    3.939300] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:3 (mask:ff)
[    3.948699] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:4 (mask:ff)
[    3.957916] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:5 (mask:ff)
[    3.967224] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:6 (mask:ff)
[    3.976501] HSI DRIVER BUS : hsi_bus_match SUCCESS : ctrl:0 (mask:ffffffff), port:0, ch:7 (mask:ff)
[    3.985717] sr_class1p5_calib_work: iva Stop sampling: Voltage Nominal=950000 samples=3
[    3.994049] sr_class1p5_calib_work: iva: Calibration complete: Voltage:Nominal=950000 Calib=860920 margin=13000
[    4.016998] clock: disabling unused clocks to save power
[    4.023468] cannot apply mgr(lcd) on inactive device
[    4.028625] omapfb omapfb: failed to apply dispc config
[    4.033996] cannot apply mgr(tv) on inactive device
[    4.039001] omapfb omapfb: failed to apply dispc config
[    4.044372] cannot apply mgr(lcd2) on inactive device
[    4.049530] omapfb omapfb: failed to apply dispc config
[    4.057800] regulator_init_complete: VDAC: disabling
[    4.063873] regulator_init_complete: VUSB: disabling
[    4.070251] fsa9480 4-0025: cable detect change, from 'unknown/none' to 'jig'

AST_POWERON

By following this howto: https://redmine.replicant.us/projects/replicant/wiki/GalaxyNexusI9250SerialConsole#Without-patching-the-kernel-on-Replicant-6

As expected, installing the 0004 RC1, and using the 0003 boot.img didn't boot.

Given all the above, it's probably safe to assume that the problem is not in the kernel and build a kernel with the patches to get a real serial console as per https://redmine.replicant.us/projects/replicant/wiki/GalaxyNexusI9250SerialConsole#Real-serial-console-by-patching-the-kernel

I assume this doesn't help very much, but just in case you'd like to obtain some logs from LineageOS in order to compare them to the rc-1 image here's the most reliable source for maguro LOS Roms that I know of: https://web.archive.org/web/20180125105715/https://download.lineageos.org/maguro

I didn't see it posted elsewhere on redmine.

I see a similar black screen with espressowifi. Let me know if there is any information I can gather which would be useful.

Thanks a lot to putti on IRC for giving me the way more simple idea of building an -eng image.
While it takes a lot of time to recompile an image, it's way easier to debug since we now have adb root during boot, including logcat etc.

So adb logcat -b main gives:

01-01 00:08:21.297  1106  1106 E RadioService: couldn't load radio module radio.primary (No such file or directory)
01-01 00:08:21.350   135   135 I ServiceManager: service 'media.audio_flinger' died
01-01 00:08:21.350   135   135 I ServiceManager: service 'media.player' died
01-01 00:08:21.350   135   135 I ServiceManager: service 'media.resource_manager' died
01-01 00:08:21.350   135   135 I ServiceManager: service 'media.camera' died
01-01 00:08:21.350   135   135 I ServiceManager: service 'media.audio_policy' died
01-01 00:08:21.350   135   135 I ServiceManager: service 'media.sound_trigger_hw' died
01-01 00:08:21.350   135   135 I ServiceManager: service 'media.radio' died
01-01 00:08:25.463  1152  1152 I Netd    : Netd 1.0 starting
01-01 00:08:25.464  1152  1152 I QtiConnectivityAdapter: Failed to open libconnctrl, some features may not be present.
01-01 00:08:25.464  1152  1152 D TetherController: Setting IP forward enable = 0
01-01 00:08:25.535  1153  1153 I SurfaceFlinger: SurfaceFlinger is starting
01-01 00:08:25.535  1153  1153 I SurfaceFlinger: SurfaceFlinger's main thread ready to run. Initializing graphics H/W...
01-01 00:08:25.535  1153  1153 D libEGL  : UID:1000 EUID:1000
01-01 00:08:25.535  1153  1153 D libEGL  : ro.zygote.disable_gl_preload not set, EGL overrides disabled
01-01 00:08:25.540  1153  1153 D libEGL  : loaded /system/lib/egl/libGLES_mesa.so
01-01 00:08:25.679  1153  1153 W gralloc : page flipping not supported (yres_virtual=1280, requested=2560)
01-01 00:08:25.679  1153  1153 I gralloc : using (fd=12)
01-01 00:08:25.679  1153  1153 I gralloc : id           = omapfb
01-01 00:08:25.679  1153  1153 I gralloc : xres         = 720 px
01-01 00:08:25.679  1153  1153 I gralloc : yres         = 1280 px
01-01 00:08:25.679  1153  1153 I gralloc : xres_virtual = 720 px
01-01 00:08:25.679  1153  1153 I gralloc : yres_virtual = 1280 px
01-01 00:08:25.679  1153  1153 I gralloc : bpp          = 16
01-01 00:08:25.679  1153  1153 I gralloc : r            = 11:5
01-01 00:08:25.679  1153  1153 I gralloc : g            =  5:6
01-01 00:08:25.679  1153  1153 I gralloc : b            =  0:5
01-01 00:08:25.679  1153  1153 I gralloc : width        = 58 mm (315.310333 dpi)
01-01 00:08:25.679  1153  1153 I gralloc : height       = 102 mm (318.745087 dpi)
01-01 00:08:25.679  1153  1153 I gralloc : refresh rate = 59.14 Hz
01-01 00:08:25.684  1153  1153 E ti_hwc  : Composer HAL failed to load compatible Graphics HAL
01-01 00:08:25.684  1153  1153 E SurfaceFlinger: composer device failed to initialize (Invalid argument)
01-01 00:08:25.684  1153  1153 I SurfaceFlinger: EGL information:
01-01 00:08:25.684  1153  1153 I SurfaceFlinger: vendor    : Android
01-01 00:08:25.684  1153  1153 I SurfaceFlinger: version   : 1.4 Android META-EGL
01-01 00:08:25.684  1153  1153 I SurfaceFlinger: extensions: EGL_KHR_get_all_proc_addresses EGL_ANDROID_presentation_time EGL_KHR_swap_buffers_with_damage EGL_KHR_image_base EGL_KHR_gl_texture_2D_image EGL_KHR_gl_texture_3D_image EGL_KHR_gl_texture_cubemap_image EGL_KHR_gl_renderbuffer_image EGL_KHR_reusable_sync EGL_KHR_fence_sync EGL_KHR_create_context EGL_KHR_surfaceless_context EGL_ANDROID_image_native_buffer EGL_KHR_wait_sync EGL_ANDROID_recordable 
01-01 00:08:25.684  1153  1153 I SurfaceFlinger: Client API: OpenGL_ES
01-01 00:08:25.684  1153  1153 I SurfaceFlinger: EGLSurface: 5-6-5-0, config=0xb56ed740
01-01 00:08:25.685  1153  1153 F SurfaceFlinger: EGLContext creation failed
01-01 00:08:25.686   141   141 I DEBUG   : property debug.db.uid not set; NOT waiting for gdb.
01-01 00:08:25.686   141   141 I DEBUG   : HINT: adb shell setprop debug.db.uid 100000
01-01 00:08:25.686   141   141 I DEBUG   : HINT: adb forward tcp:5039 tcp:5039
01-01 00:08:26.100  1154  1154 V MediaUtils: physMem: 1040437248
01-01 00:08:26.100  1154  1154 V MediaUtils: requested limit: 676284180
01-01 00:08:26.100  1154  1154 V MediaUtils: actual limit: 676284180
01-01 00:08:26.101  1154  1154 V MediaUtils: original limits: 4294967295/4294967295
01-01 00:08:26.101  1154  1154 V MediaUtils: new limits: 676284180/4294967295
01-01 00:08:26.109  1154  1154 I mediaserver: ServiceManager: 0xb5fce120
01-01 00:08:26.109  1154  1154 I AudioFlinger: Using default 3000 mSec as standby time.
01-01 00:08:26.110  1154  1154 E BatteryNotifier: batterystats service unavailable!
01-01 00:08:26.110  1154  1154 E BatteryNotifier: batterystats service unavailable!
01-01 00:08:26.110  1154  1154 I CameraService: CameraService started (pid=1154)
01-01 00:08:26.110  1154  1154 I CameraService: CameraService process starting
01-01 00:08:26.110  1154  1154 E BatteryNotifier: batterystats service unavailable!
01-01 00:08:26.110  1154  1154 E BatteryNotifier: batterystats service unavailable!
01-01 00:08:26.111  1154  1154 E CameraService: Could not load camera HAL module: -2 (No such file or directory)
01-01 00:08:26.117  1154  1154 I AudioPolicyService: AudioPolicyService CSTOR in new mode
01-01 00:08:26.118  1154  1154 I APM::ConfigParsingUtils: loadAudioPolicyConfig() loaded /system/etc/audio_policy.conf
01-01 00:08:26.148  1154  1154 D Audio-RIL-Interface: OpenClient_RILD()
01-01 00:08:26.148  1154  1154 D Audio-RIL-Interface: RegisterUnsolicitedHandler(0xb5fc6450, 11017, 0xb6072ee1)
01-01 00:08:26.148  1154  1154 I AudioFlinger: loadHwModule() Loaded primary audio interface from Tuna audio HW HAL (audio) handle 1
01-01 00:08:26.148  1154  1154 I AudioFlinger: openOutput(), module 1 Device 2, SamplingRate 44100, Format 0x000001, Channels 3, flags 2
01-01 00:08:26.148  1154  1154 I AudioFlinger: AudioStreamOut::open(), mHalFormatIsLinearPcm = 1
01-01 00:08:26.148  1154  1154 I AudioFlinger: HAL output buffer size 144 frames, normal sink buffer size 896 frames
01-01 00:08:26.159  1154  1154 I BufferProvider: found effect "Multichannel Downmix To Stereo" from The Android Open Source Project
01-01 00:08:26.171  1154  1154 E MonoPipe: Failed to fetch local time frequency when constructing a MonoPipe (res = -32).  getNextWriteTimestamp calls will be non-functional
01-01 00:08:26.171  1154  1154 I AudioFlinger: Using module 1 has the primary audio interface
01-01 00:08:26.179  1154  1185 I AudioFlinger: AudioFlinger's thread 0xb4480000 ready to run
01-01 00:08:26.180  1154  1185 E AudioFlinger: no wake lock to update!
01-01 00:08:26.181  1154  1154 I AudioFlinger: openOutput(), module 1 Device 2, SamplingRate 44100, Format 0x000001, Channels 3, flags 8
01-01 00:08:26.181  1154  1154 I AudioFlinger: AudioStreamOut::open(), mHalFormatIsLinearPcm = 1
01-01 00:08:26.181  1154  1154 I AudioFlinger: HAL output buffer size 896 frames, normal sink buffer size 896 frames
01-01 00:08:26.187  1154  1186 I AudioFlinger: AudioFlinger's thread 0xb4040000 ready to run
01-01 00:08:26.189  1154  1186 E AudioFlinger: no wake lock to update!
01-01 00:08:26.195  1154  1187 I AudioFlinger: AudioFlinger's thread 0xb3ec0000 ready to run
01-01 00:08:26.197  1154  1154 I bt_a2dp_hw: adev_open:  adev_open in A2dp_hw module
01-01 00:08:26.197  1154  1154 I AudioFlinger: loadHwModule() Loaded a2dp audio interface from A2DP Audio HW HAL (audio) handle 5
01-01 00:08:26.198  1154  1154 I r_submix: adev_open(name=audio_hw_if)
01-01 00:08:26.198  1154  1154 I r_submix: adev_init_check()
01-01 00:08:26.198  1154  1154 I AudioFlinger: loadHwModule() Loaded r_submix audio interface from Wifi Display audio HAL (audio) handle 6
01-01 00:08:26.198  1154  1154 D r_submix: adev_open_input_stream(addr=0)
01-01 00:08:26.198  1154  1154 D r_submix: submix_audio_device_create_pipe_l(addr=0, idx=9)
01-01 00:08:26.198  1154  1154 D r_submix:   now using address 0 for route 9
01-01 00:08:26.199  1154  1188 I AudioFlinger: AudioFlinger's thread 0xb3ec0000 ready to run
01-01 00:08:26.199  1154  1154 D r_submix: adev_close_input_stream()
01-01 00:08:26.199  1154  1154 D r_submix: submix_audio_device_release_pipe_l(idx=9) addr=0
01-01 00:08:26.199  1154  1154 D r_submix: submix_audio_device_destroy_pipe_l(): pipe destroyed
01-01 00:08:26.201  1154  1154 I AudioFlinger: loadHwModule() Loaded usb audio interface from USB audio HW HAL (audio) handle 8
01-01 00:08:26.202  1154  1154 E SoundTriggerHwService: couldn't load sound trigger module sound_trigger.primary (No such file or directory)
01-01 00:08:26.210  1154  1154 I RadioService: RadioService
01-01 00:08:26.210  1154  1154 I RadioService: onFirstRef
01-01 00:08:26.210  1154  1154 E RadioService: couldn't load radio module radio.primary (No such file or directory)
01-01 00:08:26.231   135   135 I ServiceManager: service 'media.audio_flinger' died
01-01 00:08:26.231   135   135 I ServiceManager: service 'media.player' died
01-01 00:08:26.231   135   135 I ServiceManager: service 'media.resource_manager' died
01-01 00:08:26.231   135   135 I ServiceManager: service 'media.camera' died
01-01 00:08:26.232   135   135 I ServiceManager: service 'media.audio_policy' died
01-01 00:08:26.232   135   135 I ServiceManager: service 'media.sound_trigger_hw' died
01-01 00:08:26.232   135   135 I ServiceManager: service 'media.radio' died

Maybe this is due to some wrong rebase?
Note that after enabling Ethernet, the built images booted on maguro at that time.

#!/bin/sh
# In the cases where this work is copyrightable, it falls under the AGPLv3
# or later license that is available here:
# https://www.gnu.org/licenses/agpl-3.0.txt
# with the following attribution(s):
# Copyright (C) 2020 Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>

repos=" 
build \
manifest \
bootable/recovery \
external/boringssl \
external/heimdall \
frameworks/av \
frameworks/base \
frameworks/native \
hardware/broadcom/wlan \
hardware/libhardware \
hardware/libhardware_legacy \
hardware/ti/omap4 \
libcore \
packages/apps/Browser \
packages/apps/LegacyCamera \
packages/apps/RepWifi \
packages/apps/ReplicantWallpapers \
packages/apps/Settings \
packages/apps/SetupWizard \
packages/apps/ThemeChooser \
packages/providers/ContactsProvider \
system/core \
vendor/replicant \
vendor/cmsdk \
external/drm_gralloc \
external/llvm \
external/mesa3d \
external/parameter-framework \
external/protobuf \
prebuilts/ndk \
prebuilts/sdk \
sdk \
toolchain/src/binutils \
toolchain/src/gcc \
toolchain/src/jack \
toolchain/src/jill \
kernel/samsung/smdk4412 \
kernel/samsung/tuna \
kernel/samsung/espresso10 \
device/samsung/i9100 \
device/samsung/n7000 \
device/samsung/i9300 \
device/samsung/i9305 \
device/samsung/n7100 \
device/samsung/n5100 \
device/samsung/n5110 \
device/samsung/maguro \
device/samsung/tuna \
device/samsung/espressowifi \
device/samsung/espresso3g \
device/samsung/galaxys2-common \
device/samsung/smdk4412-common \
device/samsung/kona-common \
hardware/tinyalsa-audio \
" 

# repos=" 
# ${repos} \
# hardware/ril/samsung-ril \
# external/libsamsung-ipc \
# " 

repos=" 
${repos} \
hardware/replicant/libsamsung-ril \
hardware/replicant/libsamsung-ipc \
" 

# external/chromium-webview \

for repo in $repos ; do
  echo "${repo}: $(git -C ${repo} diff replicant-6.0-0003..replicant-6.0-0004-rc1 | wc -l)" 
done

build: 289
manifest: 509
bootable/recovery: 0
external/boringssl: 0
external/heimdall: 0
frameworks/av: 1410
frameworks/base: 106989
frameworks/native: 623
hardware/broadcom/wlan: 0
hardware/libhardware: 0
hardware/libhardware_legacy: 0
hardware/ti/omap4: 0
libcore: 0
packages/apps/Browser: 1452
packages/apps/LegacyCamera: 0
packages/apps/RepWifi: 0
packages/apps/ReplicantWallpapers: 0
packages/apps/Settings: 10677
packages/apps/SetupWizard: 106
packages/apps/ThemeChooser: 108
packages/providers/ContactsProvider: 135
system/core: 245
vendor/replicant: 338
vendor/cmsdk: 438
external/drm_gralloc: 35
external/llvm: 0
external/mesa3d: 0
external/parameter-framework: 0
external/protobuf: 0
prebuilts/ndk: 0
prebuilts/sdk: 0
sdk: 0
toolchain/src/binutils: 0
toolchain/src/gcc: 4021
toolchain/src/jack: 0
toolchain/src/jill: 0
kernel/samsung/smdk4412: 25791
kernel/samsung/tuna: 36
kernel/samsung/espresso10: 26
device/samsung/i9100: 0
device/samsung/n7000: 0
device/samsung/i9300: 18
device/samsung/i9305: 0
device/samsung/n7100: 18
device/samsung/n5100: 19
device/samsung/n5110: 0
device/samsung/maguro: 18
device/samsung/tuna: 0
device/samsung/espressowifi: 0
device/samsung/espresso3g: 51
device/samsung/galaxys2-common: 18
device/samsung/smdk4412-common: 0
device/samsung/kona-common: 0
hardware/tinyalsa-audio: 0
hardware/replicant/libsamsung-ril: 742
hardware/replicant/libsamsung-ipc: 799

And we have:

$ repo grep sound_trigger | sed 's#:.*##' | sort -u
external/sepolicy/service_contexts
frameworks/av/include/soundtrigger/ISoundTrigger.h
frameworks/av/include/soundtrigger/ISoundTriggerHwService.h
frameworks/av/include/soundtrigger/SoundTriggerCallback.h
frameworks/av/include/soundtrigger/SoundTrigger.h
frameworks/av/services/soundtrigger/SoundTriggerHwService.cpp
frameworks/av/services/soundtrigger/SoundTriggerHwService.h
frameworks/av/soundtrigger/ISoundTrigger.cpp
frameworks/av/soundtrigger/ISoundTriggerHwService.cpp
frameworks/av/soundtrigger/SoundTrigger.cpp
frameworks/base/core/java/android/hardware/soundtrigger/SoundTrigger.java
frameworks/base/core/jni/android_hardware_SoundTrigger.cpp
hardware/libhardware/include/hardware/sound_trigger.h
hardware/libhardware/modules/soundtrigger/Android.mk
hardware/libhardware/modules/soundtrigger/sound_trigger_hw.c
hardware/qcom/audio/default/hal/Android.mk
hardware/qcom/audio/default/hal/audio_extn/audio_extn.h
hardware/qcom/audio/default/hal/audio_extn/soundtrigger.c
hardware/qcom/audio/default/hal/audio_extn/sound_trigger_prop_intf.h
hardware/qcom/audio/default/hal/audio_hw.c
hardware/qcom/audio/default/msm8909/hal/Android.mk
hardware/qcom/audio/default/msm8909/hal/audio_extn/audio_extn.c
hardware/qcom/audio/default/msm8909/hal/audio_extn/audio_extn.h
hardware/qcom/audio/default/msm8909/hal/audio_extn/soundtrigger.c
hardware/qcom/audio/default/msm8909/hal/audio_hw.c
hardware/qcom/audio/default/msm8909/hal/msm8916/platform.c
hardware/qcom/audio/default/msm8909/hal/msm8960/platform.c
hardware/qcom/audio/default/msm8909/hal/msm8974/platform.c
hardware/qcom/audio/default/msm8909/hal/platform_api.h
system/media/audio/include/system/sound_trigger.h

I've attached the log of a first boot with a patched (for adb root) boot.img

The fact that the display is black + the fact that this happens very early:

01-01 00:40:21.958   136   136 E ti_hwc  : Composer HAL failed to load compatible Graphics HAL

01-01 00:40:21.958   136   136 E SurfaceFlinger: composer device failed to initialize (Invalid argument)

seem to indicate some issue with graphics.

I'll try to patch the boot.img to use libagl by default to see if it changes something.

It might also be related to a color format:

01-01 00:40:21.959   136   136 I SurfaceFlinger: EGLSurface: 5-6-5-0, config=0xb56ed740

01-01 00:40:21.959   136   136 F SurfaceFlinger: EGLContext creation failed

Going back to libagl like that:

$ adb root
$ adb shell
root@maguro:/ # androidsw.sh                                                                                             
Remounting system partition as writable...
Enabling Android software renderer...
Syncing filesystem...
Remounting system partition as read-only...
Syncing filesystem...
Android software renderer will be enabled after we reboot now...
Error type 2
android.util.AndroidException: Can't connect to activity manager; is the system running?
    at com.android.commands.am.Am.onRun(Am.java:353)
    at com.android.internal.os.BaseCommand.run(BaseCommand.java:47)
    at com.android.commands.am.Am.main(Am.java:100)
    at com.android.internal.os.RuntimeInit.nativeFinishInit(Native Method)
    at com.android.internal.os.RuntimeInit.main(RuntimeInit.java:258)
root@maguro:/ # reboot

is sufficent to make the device boot.

Not sure if this helps at all, but I'm relaying it from the replicant irc in the assumption that it applies to this ticket:

David said that, on Replicant 6, RGB555 is used throughout the entire stack.

Denis said we probably need RGB565 instead of RGB555 on Replicant 6 because neither omap nor exynos have the RGB555 DRM database format.

https://drmdb.emersion.fr/formats?driver=omapdrm
https://drmdb.emersion.fr/formats?driver=exynos

Denis then said that for Replicant 6 his recent patches probably unbroke booting on the Galaxy Nexus but broke booting on other devices.

The 6.0 0004 rc2 Roms, which have this fix included in them, can be obtained here: https://ftp.osuosl.org/pub/replicant/images/replicant-6.0/0004-rc2/