search

topjohnwu / Magisk

The Magic Mask for Android
GNU General Public License v3.0
47.59k stars 12.08k forks source link

Pixel 4a: Bootloop after flashing patched boot image #4002

Closed TheBestPessimist closed 3 years ago

TheBestPessimist commented 3 years ago

I downloaded the Factory image for my Pixel 4a from here: https://developers.google.com/android/images?hl=ru#sunfish, version: 11.0.0 (RQ2A.210305.006, Mar 2021)

Here's the boot image, patched boot image, the log generated by magisk, logcat during boot: https://drive.google.com/drive/folders/1Fv3-kZ4aIQLK2GejWGQuWbFXwd7kUDTt?usp=sharing

Magisk version: bf80b08b (22003)

Since this is my first bug report here, if i need to provide anything, please tell me.

required logs:

cat /proc/mounts

$ cat /proc/mounts
/dev/block/dm-8 / ext4 ro,seclabel,relatime 0 0
tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,size=2852132k,nr_inodes=713033,mode=755 0 0
devpts /dev/pts devpts rw,seclabel,relatime,mode=600,ptmxmode=000 0 0
none /dev/blkio cgroup rw,nosuid,nodev,noexec,relatime,blkio 0 0
none /dev/cpuctl cgroup rw,nosuid,nodev,noexec,relatime,cpu 0 0
none /dev/cpuset cgroup rw,nosuid,nodev,noexec,relatime,cpuset,noprefix,release_agent=/sbin/cpuset_release_agent 0 0
none /dev/memcg cgroup rw,nosuid,nodev,noexec,relatime,memory 0 0
none /dev/stune cgroup rw,nosuid,nodev,noexec,relatime,schedtune 0 0
adb /dev/usb-ffs/adb functionfs rw,relatime 0 0
mtp /dev/usb-ffs/mtp functionfs rw,relatime 0 0
ptp /dev/usb-ffs/ptp functionfs rw,relatime 0 0
proc /proc proc rw,relatime,gid=3009,hidepid=2 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
none /sys/fs/cgroup cgroup2 rw,nosuid,nodev,noexec,relatime 0 0
tracefs /sys/kernel/tracing tracefs rw,seclabel,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,seclabel,relatime 0 0
tracefs /sys/kernel/debug/tracing tracefs rw,seclabel,relatime 0 0
none /sys/fs/fuse/connections fusectl rw,relatime 0 0
bpf /sys/fs/bpf bpf rw,nosuid,nodev,noexec,relatime 0 0
pstore /sys/fs/pstore pstore rw,seclabel,relatime 0 0
tmpfs /mnt tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,size=2852132k,nr_inodes=713033,mode=755,gid=1000 0 0
tmpfs /mnt/installer tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,size=2852132k,nr_inodes=713033,mode=755,gid=1000 0 0
/dev/fuse /mnt/installer/0/emulated fuse rw,lazytime,nosuid,nodev,noexec,noatime,user_id=0,group_id=0,allow_other 0 0
/data/media /mnt/installer/0/emulated/0/Android/data sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_obb 0 0
/data/media /mnt/installer/0/emulated/0/Android/obb sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=7,derive_gid,default_normal,unshared_obb 0 0
tmpfs /mnt/androidwritable tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,size=2852132k,nr_inodes=713033,mode=755,gid=1000 0 0
/dev/fuse /mnt/androidwritable/0/emulated fuse rw,lazytime,nosuid,nodev,noexec,noatime,user_id=0,group_id=0,allow_other 0 0
/data/media /mnt/androidwritable/0/emulated/0/Android/data sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_obb 0 0
/data/media /mnt/androidwritable/0/emulated/0/Android/obb sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_obb 0 0
/dev/block/platform/soc/1d84000.ufshc/by-name/persist /mnt/vendor/persist ext4 rw,seclabel,nosuid,nodev,noatime,data=ordered 0 0
/data/media /mnt/runtime/default/emulated sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_obb 0 0
/data/media /mnt/runtime/read/emulated sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=23,derive_gid,default_normal,unshared_obb 0 0
/data/media /mnt/runtime/write/emulated sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=7,derive_gid,default_normal,unshared_obb 0 0
/data/media /mnt/runtime/full/emulated sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=7,derive_gid,default_normal,unshared_obb 0 0
/dev/fuse /mnt/user/0/emulated fuse rw,lazytime,nosuid,nodev,noexec,noatime,user_id=0,group_id=0,allow_other 0 0
/data/media /mnt/user/0/emulated/0/Android/data sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_obb 0 0
/data/media /mnt/user/0/emulated/0/Android/obb sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_obb 0 0
/data/media /mnt/pass_through/0/emulated sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=7,derive_gid,default_normal,unshared_obb 0 0
/dev/block/by-name/metadata /metadata ext4 rw,sync,seclabel,nosuid,nodev,noatime,discard,data=ordered 0 0
/dev/block/dm-9 /system_ext ext4 ro,seclabel,relatime 0 0
/dev/block/dm-10 /vendor ext4 ro,seclabel,relatime 0 0
/dev/block/bootdevice/by-name/modem_b /vendor/firmware_mnt vfat ro,context=u:object_r:firmware_file:s0,relatime,gid=1000,fmask=0337,dmask=0227,codepage=437,iocharset=iso8859-1,shortname=lower,errors=remount-ro 0 0
/dev/block/dm-11 /product ext4 ro,seclabel,relatime 0 0
tmpfs /apex tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,size=2852132k,nr_inodes=713033,mode=755 0 0
/dev/block/dm-13 /apex/com.android.media.swcodec@301600000 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-13 /apex/com.android.media.swcodec ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-14 /apex/com.android.mediaprovider@301501700 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-14 /apex/com.android.mediaprovider ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-15 /apex/com.android.conscrypt@301300300 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-15 /apex/com.android.conscrypt ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-16 /apex/com.android.sdkext@300901600 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-16 /apex/com.android.sdkext ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-17 /apex/com.android.adbd@301400200 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-17 /apex/com.android.adbd ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-18 /apex/com.android.neuralnetworks@300901600 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-18 /apex/com.android.neuralnetworks ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-19 /apex/com.android.tethering@301400200 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-19 /apex/com.android.tethering ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-20 /apex/com.android.ipsec@301500700 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-20 /apex/com.android.ipsec ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-21 /apex/com.android.resolv@301500700 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-21 /apex/com.android.resolv ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-22 /apex/com.android.extservices@301500700 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-22 /apex/com.android.extservices ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-23 /apex/com.android.tzdata@301500700 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-23 /apex/com.android.tzdata ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-24 /apex/com.android.wifi@301500700 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-24 /apex/com.android.wifi ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-25 /apex/com.android.permission@301501400 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-25 /apex/com.android.permission ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-26 /apex/com.android.cellbroadcast@301501400 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-26 /apex/com.android.cellbroadcast ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-27 /apex/com.android.media@301500800 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/dm-27 /apex/com.android.media ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop21 /apex/com.android.telephony@1 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop21 /apex/com.android.telephony ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop22 /apex/com.android.apex.cts.shim@1 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop22 /apex/com.android.apex.cts.shim ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop23 /apex/com.android.runtime@1 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop23 /apex/com.android.runtime ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop24 /apex/com.android.i18n@1 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop24 /apex/com.android.i18n ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop25 /apex/com.android.os.statsd@301401300 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop25 /apex/com.android.os.statsd ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop26 /apex/com.android.art@1 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop26 /apex/com.android.art ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop27 /apex/com.android.vndk.v30@1 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
/dev/block/loop27 /apex/com.android.vndk.v30 ext4 ro,dirsync,seclabel,nodev,noatime 0 0
tmpfs /linkerconfig tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,size=2852132k,nr_inodes=713033,mode=755 0 0
tmpfs /linkerconfig tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,size=2852132k,nr_inodes=713033,mode=755 0 0
none /acct cgroup rw,nosuid,nodev,noexec,relatime,cpuacct 0 0
none /config configfs rw,nosuid,nodev,noexec,relatime 0 0
/dev/block/dm-12 /data f2fs rw,lazytime,seclabel,nosuid,nodev,noatime,background_gc=on,discard,no_heap,user_xattr,inline_xattr,acl,inline_data,inline_dentry,flush_merge,extent_cache,mode=adaptive,active_logs=6,reserve_root=32768,resuid=0,resgid=1065,alloc_mode=default,fsync_mode=nobarrier 0 0
/dev/block/dm-12 /data/user/0 f2fs rw,lazytime,seclabel,nosuid,nodev,noatime,background_gc=on,discard,no_heap,user_xattr,inline_xattr,acl,inline_data,inline_dentry,flush_merge,extent_cache,mode=adaptive,active_logs=6,reserve_root=32768,resuid=0,resgid=1065,alloc_mode=default,fsync_mode=nobarrier 0 0
tmpfs /data_mirror tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,mode=700,gid=1000 0 0
/dev/block/dm-12 /data_mirror/data_ce/null f2fs rw,lazytime,seclabel,nosuid,nodev,noatime,background_gc=on,discard,no_heap,user_xattr,inline_xattr,acl,inline_data,inline_dentry,flush_merge,extent_cache,mode=adaptive,active_logs=6,reserve_root=32768,resuid=0,resgid=1065,alloc_mode=default,fsync_mode=nobarrier 0 0
/dev/block/dm-12 /data_mirror/data_ce/null/0 f2fs rw,lazytime,seclabel,nosuid,nodev,noatime,background_gc=on,discard,no_heap,user_xattr,inline_xattr,acl,inline_data,inline_dentry,flush_merge,extent_cache,mode=adaptive,active_logs=6,reserve_root=32768,resuid=0,resgid=1065,alloc_mode=default,fsync_mode=nobarrier 0 0
/dev/block/dm-12 /data_mirror/data_de/null f2fs rw,lazytime,seclabel,nosuid,nodev,noatime,background_gc=on,discard,no_heap,user_xattr,inline_xattr,acl,inline_data,inline_dentry,flush_merge,extent_cache,mode=adaptive,active_logs=6,reserve_root=32768,resuid=0,resgid=1065,alloc_mode=default,fsync_mode=nobarrier 0 0
/dev/block/dm-12 /data_mirror/cur_profiles f2fs rw,lazytime,seclabel,nosuid,nodev,noatime,background_gc=on,discard,no_heap,user_xattr,inline_xattr,acl,inline_data,inline_dentry,flush_merge,extent_cache,mode=adaptive,active_logs=6,reserve_root=32768,resuid=0,resgid=1065,alloc_mode=default,fsync_mode=nobarrier 0 0
tmpfs /storage tmpfs rw,seclabel,nosuid,nodev,noexec,relatime,size=2852132k,nr_inodes=713033,mode=755,gid=1000 0 0
/dev/fuse /storage/emulated fuse rw,lazytime,nosuid,nodev,noexec,noatime,user_id=0,group_id=0,allow_other 0 0
/data/media /storage/emulated/0/Android/data sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_obb 0 0
/data/media /storage/emulated/0/Android/obb sdcardfs rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid,default_normal,unshared_ok

dmesg

As far as i understood from https://www.xda-developers.com/how-to-take-logs-in-android/, i could not take the dmesg logs.

logcat

Included in the google drive link.

topjohnwu commented 3 years ago

Do you have any modules installed?

TheBestPessimist commented 3 years ago

Not as far as i know, however I had 1 module installed before uninstalling magisk. I assume uninstalling magisk also uninstalls the modules.

I wanted to OTA, so i tried the OTA guide here: https://topjohnwu.github.io/Magisk/ota.html however it did not work. Therefore i uninstalled magisk + magisk app, rebooted my phone, then did all the OTA updates (dec, jan, feb, march) successfully.

After the OTAs were done, i downloaded the factory image for march, reinstalled magisk and tried to patch the boot image, which fails.

MrDemous commented 3 years ago

I'm facing the exact same problem. Magisk was working fine before the march security update. After the update, flashing patched boot image results in a boot loop.

I also don't have any modules installed. I made sure to remove them all with "adb shell magisk --remove-modules"

Here is a logcat during boot. Hope it helps you figure out what's wrong.

log.txt

topjohnwu commented 3 years ago

The crash is caused by the module Tulsadiver_Mods_For_Increasing_9_Tiles

MrDemous commented 3 years ago

I'm facing the exact same problem. Magisk was working fine before the march security update. After the update, flashing patched boot image results in a boot loop.

I also don't have any modules installed. I made sure to remove them all with "adb shell magisk --remove-modules"

Here is a logcat during boot. Hope it helps you figure out what's wrong.

log.txt

SmaliPatcher secure flag module was the culprit in my situation. I managed to fix my phone and now I'm on the march update with Magisk fully working.

TheBestPessimist commented 3 years ago

Thank you @topjohnwu. After uninstalling the module, via 

adb wait-for-device shell magisk --remove-modules

I can boot the patched image successfully.

I apologize for wasting your time, but from the logcat I could not figure out what was the issue. :(