Magisk icon indicating copy to clipboard operation
Magisk copied to clipboard

Magisk manager freezes after rooting — error on AppInfo

Open Iey4iej3 opened this issue 5 months ago • 18 comments

Device: Onyx Boox Note Air 3C Android version: 12 Magisk version name: v30.2 Magisk version code: 30200

This happens only after upgrading the OS of Onyx Boox to 2025-08-28_17-13_4.1-rel_0827_fc8adf71a: Magisk App gets stuck at the splash after rooting, with the App failing to get information of installed Apps, if I understand correctly:

Logcat
09-06 22:50:35.275  8894  8894 D AndroidRuntime: >>>>>> START com.android.internal.os.RuntimeInit uid 0 <<<<<<
09-06 22:50:35.279  8894  8894 I AndroidRuntime: Using default boot image
09-06 22:50:35.279  8894  8894 I AndroidRuntime: Leaving lock profiling enabled
09-06 22:50:35.282  8894  8894 W com.topjohnwu.magisk:root:0: ART APEX data files are untrusted.
09-06 22:50:35.327  8860  8860 I AppCompatDelegate: The Activity's LayoutInflater already has a Factory installed so we can not install AppCompat's
09-06 22:50:35.351  8860  8860 I SystemUIConfig: the context is null, init mAppContext from ActivityThread::com.topjohnwu.magisk.core.App@f1d5a1b
09-06 22:50:35.382  8894  8894 D com.topjohnwu.magisk:root:0: Time zone APEX ICU file found: /apex/com.android.tzdata/etc/icu/icu_tzdata.dat
09-06 22:50:35.382  8894  8894 D com.topjohnwu.magisk:root:0: I18n APEX ICU file found: /apex/com.android.i18n/etc/icu/icudt68l.dat
09-06 22:50:35.400  8860  8860 W opjohnwu.magis: Accessing hidden method Landroid/view/ViewGroup;->makeOptionalFitsSystemWindows()V (unsupported, reflection, allowed)
09-06 22:50:35.403  8860  8896 W opjohnwu.magis: Accessing hidden method Landroid/app/Activity;->getLaunchedFromPackage()Ljava/lang/String; (blocked, linking, denied)
09-06 22:50:35.405  8860  8896 W opjohnwu.magis: Accessing hidden field Landroid/app/Activity;->mReferrer:Ljava/lang/String; (unsupported, reflection, allowed)
09-06 22:50:35.420  8894  8894 D ProcessState: Binder ioctl to enable oneway spam detection failed: Invalid argument
09-06 22:50:35.420  8894  8894 D AndroidRuntime: Calling main entry com.topjohnwu.superuser.internal.RootServerMain
09-06 22:50:35.434  8860  8860 V ActivityThread: reportTopResumedActivityChanged - > onActivityTopResumed
09-06 22:50:35.439   879  2256 E EpdcManager: DT 128
09-06 22:50:35.441   879  2256 E HWEpdcManager: ### EE 1
09-06 22:50:35.443   879   879 E HWEpdcManager: ### EUS, s 4 c 0
09-06 22:50:35.443   879  2256 E HWEpdcManager: ET 5
09-06 22:50:35.444   879  2256 E HWEpdcManager: ### AF 10
09-06 22:50:35.447  8574  8574 D EventBus: No subscribers registered for event class com.onyx.android.sdk.eac.event.EACTopComponentChangedEvent
09-06 22:50:35.447  8574  8574 D EventBus: No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent
09-06 22:50:35.454   879   879 E FrameTimeline: Cannot trace DisplayFrame with invalid token
09-06 22:50:35.466  1453  7777 D debugOrientation: ActivityRecord{e586e2c u0 com.topjohnwu.magisk/.ui.MainActivity t37}  computeOrientation :-1 user set rotation -1
09-06 22:50:35.470   879  1511 W ServiceManager: Permission failure: android.permission.ACCESS_SURFACE_FLINGER from uid=10127 pid=8860
09-06 22:50:35.470   879  1511 D PermissionCache: checking android.permission.ACCESS_SURFACE_FLINGER for uid=10127 => denied (359 us)
09-06 22:50:35.470   879  1511 W ServiceManager: Permission failure: android.permission.ROTATE_SURFACE_FLINGER from uid=10127 pid=8860
09-06 22:50:35.470   879  1511 D PermissionCache: checking android.permission.ROTATE_SURFACE_FLINGER for uid=10127 => denied (179 us)
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: QUALCOMM build                   : ec028f8cac, Ic8928a1631
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: Build Date                       : 08/23/22
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: OpenGL ES Shader Compiler Version: EV031.32.02.17
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: Local Branch                     : 
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: Remote Branch                    : 
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: Remote Branch                    : 
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: Reconstruct Branch               : 
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: Build Config                     : S P 10.0.7 AArch64
09-06 22:50:35.474  8860  8892 I AdrenoGLES-0: Driver Path                      : /vendor/lib64/egl/libGLESv2_adreno.so
09-06 22:50:35.480  8860  8892 I AdrenoGLES-0: PFP: 0x016ee197, ME: 0x00000000
09-06 22:50:35.496   829  1068 I SDM     : HWCDisplay::GetColorModeCount: Supported color mode count = 1
09-06 22:50:35.496   829  1068 I SDM     : HWCDisplay::GetColorModes: Color mode = 0 is supported
09-06 22:50:35.496  8860  8892 D hw-ProcessState: Binder ioctl to enable oneway spam detection failed: Invalid argument
09-06 22:50:35.515  1453  3527 E ActivityManager: Activity Manager Crash. UID:0 PID:8894 TRANS:86
09-06 22:50:35.515  1453  3527 E ActivityManager: java.lang.NullPointerException: Attempt to read from field 'android.content.pm.ApplicationInfo com.android.server.am.ProcessRecord.info' on a null object reference
09-06 22:50:35.515  1453  3527 E ActivityManager: 	at com.android.server.am.ActivityManagerService.addPackageDependency(ActivityManagerService.java:3952)
09-06 22:50:35.515  1453  3527 E ActivityManager: 	at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:3534)
09-06 22:50:35.515  1453  3527 E ActivityManager: 	at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2568)
09-06 22:50:35.515  1453  3527 E ActivityManager: 	at android.os.Binder.execTransactInternal(Binder.java:1179)
09-06 22:50:35.515  1453  3527 E ActivityManager: 	at android.os.Binder.execTransact(Binder.java:1143)
09-06 22:50:35.515  8894  8894 E IPC     : Error in IPCMain
09-06 22:50:35.515  8894  8894 E IPC     : java.lang.NullPointerException: Attempt to read from field 'android.content.pm.ApplicationInfo com.android.server.am.ProcessRecord.info' on a null object reference
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.os.Parcel.createExceptionOrNull(Parcel.java:2432)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.os.Parcel.createException(Parcel.java:2410)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.os.Parcel.readException(Parcel.java:2393)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.os.Parcel.readException(Parcel.java:2335)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.app.IActivityManager$Stub$Proxy.addPackageDependency(IActivityManager.java:7761)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:808)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.app.LoadedApk.getClassLoader(LoadedApk.java:1062)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.app.ContextImpl.getClassLoader(ContextImpl.java:462)
09-06 22:50:35.515  8894  8894 E IPC     : 	at com.topjohnwu.superuser.internal.RootServerMain.<init>(SourceFile:0)
09-06 22:50:35.515  8894  8894 E IPC     : 	at com.topjohnwu.superuser.internal.RootServerMain.main(Unknown Source:23)
09-06 22:50:35.515  8894  8894 E IPC     : 	at com.android.internal.os.RuntimeInit.nativeFinishInit(Native Method)
09-06 22:50:35.515  8894  8894 E IPC     : 	at com.android.internal.os.RuntimeInit.main(RuntimeInit.java:355)
09-06 22:50:35.515  8894  8894 E IPC     : Caused by: android.os.RemoteException: Remote stack trace:
09-06 22:50:35.515  8894  8894 E IPC     : 	at com.android.server.am.ActivityManagerService.addPackageDependency(ActivityManagerService.java:3952)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:3534)
09-06 22:50:35.515  8894  8894 E IPC     : 	at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2568)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.os.Binder.execTransactInternal(Binder.java:1179)
09-06 22:50:35.515  8894  8894 E IPC     : 	at android.os.Binder.execTransact(Binder.java:1143)
09-06 22:50:35.515  8894  8894 E IPC     : 
09-06 22:50:35.515  1453  1492 I DropBoxManagerService: add tag=system_server_wtf isTagEnabled=true flags=0x2
09-06 22:50:35.516  8894  8894 I com.topjohnwu.magisk:root:0: System.exit called, status: 1
09-06 22:50:35.516  8894  8894 I AndroidRuntime: VM exiting with result code 1.

Iey4iej3 avatar Sep 06 '25 21:09 Iey4iej3

My number is rooted

Amrit8090 avatar Oct 15 '25 13:10 Amrit8090

Hi @Amrit8090 , what do you mean by this?

petar-v avatar Nov 08 '25 02:11 petar-v

Also happens on NA4C, running su in adb shell works, but app wont load (magisk v29)

Here are the logs gotten from adb logcat

magisk-logcat.log

franchioping avatar Nov 09 '25 17:11 franchioping

I'm seeing this happen on my Note Air 3 running their "4.1" system update (Android 12) using Magisk v29.0. I've attached my non-debug build logs here (magisk-logcat-nondebug.log). It's definitely less noisy than the debug logs attached by @franchioping but something that stands out to me is the Unknown calling package name 'com.google.android.gms' and Failed to register com.google.android.gms.providerinstaller errors in the logs.

It might be unrelated, but based on a StackOverflow issue with a similar error I checked and it looks like I have two versions of gms:

NoteAir3:/ $ dumpsys package com.google.android.gms | grep versionName
    versionName=25.39.31 (190400-813878953)
    versionName=23.08.15 (190400-512743456)

For a bit more info, I grabbed the Android version and SDK version using getprop as shown below:

NoteAir3:/ $ getprop ro.build.version.release
12
NoteAir3:/ $ getprop ro.build.version.sdk
32

Please let me know what else I can do to help debug this!

EDIT: Presumably Magisk worked with the pre-4.0 versions of the BOOX firmware. I wonder if it would be worth searching for someone in the BOOX rooting community with pre-4.0 firmware to attach info such as gms versions, if we determine a potential culprit. There seem to be a lot of people in the BOOX rooting community over on the MobileRead forum that we could recruit if we think it necessary.

EDIT 2: I have access to this device and already have Magisk v29 open in Android Studio and running (but not functional). If any maintainer would like to do some debugging through me, please let me know.

FrederickGeek8 avatar Nov 09 '25 17:11 FrederickGeek8

I'm happy to test any previous firmware versions, but i cant seem to find download links for any? I'm sure someone has dumped theirs in the past. I'm currently on v4.1 as well

Also, similar situation regarding gms
NoteAir4C:/ # dumpsys package com.google.android.gms | grep versionName 
    versionName=25.42.32 (190400-820822052)
    versionName=23.37.17 (190400-570218080)
NoteAir4C:/ #  getprop ro.build.version.release
13
NoteAir4C:/ #  getprop ro.build.version.sdk
33

Possible source of the issue

11-09 22:33:10.724  5281  5281 D AndroidRuntime: Calling main entry com.topjohnwu.superuser.internal.RootServerMain
11-09 22:33:10.752  1564  2685 D IntervalStats: Unable to parse usage stats packages: [166]
11-09 22:33:10.852  1564  3495 E ActivityManager: Activity Manager Crash. UID:0 PID:5281 TRANS:88
11-09 22:33:10.852  1564  3495 E ActivityManager: java.lang.NullPointerException: Attempt to read from field 'android.content.pm.ApplicationInfo com.android.server.am.ProcessRecord.info' on a null object reference in method 'void com.android.server.am.ActivityManagerService.addPackageDependency(java.lang.String)'
11-09 22:33:10.852  1564  3495 E ActivityManager: 	at com.android.server.am.ActivityManagerService.addPackageDependency(ActivityManagerService.java:4249)
11-09 22:33:10.852  1564  3495 E ActivityManager: 	at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:3314)
11-09 22:33:10.852  1564  3495 E ActivityManager: 	at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2674)
11-09 22:33:10.852  1564  3495 E ActivityManager: 	at android.os.Binder.execTransactInternal(Binder.java:1280)
11-09 22:33:10.852  1564  3495 E ActivityManager: 	at android.os.Binder.execTransact(Binder.java:1244)
11-09 22:33:10.853  5281  5281 E IPC     : Error in IPCMain
11-09 22:33:10.853  5281  5281 E IPC     : java.lang.NullPointerException: Attempt to read from field 'android.content.pm.ApplicationInfo com.android.server.am.ProcessRecord.info' on a null object reference in method 'void com.android.server.am.ActivityManagerService.addPackageDependency(java.lang.String)'
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.os.Parcel.createExceptionOrNull(Parcel.java:3017)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.os.Parcel.createException(Parcel.java:2995)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.os.Parcel.readException(Parcel.java:2978)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.os.Parcel.readException(Parcel.java:2920)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.app.IActivityManager$Stub$Proxy.addPackageDependency(IActivityManager.java:6583)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:871)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.app.LoadedApk.getClassLoader(LoadedApk.java:1126)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.app.ContextImpl.getClassLoader(ContextImpl.java:470)
11-09 22:33:10.853  5281  5281 E IPC     : 	at com.topjohnwu.superuser.internal.RootServerMain.<init>(SourceFile:0)
11-09 22:33:10.853  5281  5281 E IPC     : 	at com.topjohnwu.superuser.internal.RootServerMain.main(Unknown Source:23)
11-09 22:33:10.853  5281  5281 E IPC     : 	at com.android.internal.os.RuntimeInit.nativeFinishInit(Native Method)
11-09 22:33:10.853  5281  5281 E IPC     : 	at com.android.internal.os.RuntimeInit.main(RuntimeInit.java:355)
11-09 22:33:10.853  5281  5281 E IPC     : Caused by: android.os.RemoteException: Remote stack trace:
11-09 22:33:10.853  5281  5281 E IPC     : 	at com.android.server.am.ActivityManagerService.addPackageDependency(ActivityManagerService.java:4249)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:3314)
11-09 22:33:10.853  5281  5281 E IPC     : 	at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2674)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.os.Binder.execTransactInternal(Binder.java:1280)
11-09 22:33:10.853  5281  5281 E IPC     : 	at android.os.Binder.execTransact(Binder.java:1244)
11-09 22:33:10.853  5281  5281 E IPC     : 
11-09 22:33:10.854  5281  5281 I com.topjohnwu.magisk:root:0: System.exit called, status: 1
11-09 22:33:10.854  5281  5281 I AndroidRuntime: VM exiting with result code 1.
11-09 22:33:10.858  1564  3155 E AppOps  : Bad call made by uid 10067. Package "com.google.android.gms" does not belong to uid 10070.
11-09 22:33:10.859  3981  4180 E GoogleApiManager: Failed to get service from broker. 
11-09 22:33:10.859  3981  4180 E GoogleApiManager: java.lang.SecurityException: Unknown calling package name 'com.google.android.gms'.
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Parcel.createExceptionOrNull(Parcel.java:3011)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Parcel.createException(Parcel.java:2995)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Parcel.readException(Parcel.java:2978)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Parcel.readException(Parcel.java:2920)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at bcnb.a(:com.google.android.gms@[email protected] (190400-820822052):36)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at bclc.z(:com.google.android.gms@[email protected] (190400-820822052):143)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at bbro.run(:com.google.android.gms@[email protected] (190400-820822052):42)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Handler.handleCallback(Handler.java:942)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Handler.dispatchMessage(Handler.java:99)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at cogy.mq(:com.google.android.gms@[email protected] (190400-820822052):1)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at cogy.dispatchMessage(:com.google.android.gms@[email protected] (190400-820822052):5)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Looper.loopOnce(Looper.java:201)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.Looper.loop(Looper.java:288)
11-09 22:33:10.859  3981  4180 E GoogleApiManager: 	at android.os.HandlerThread.run(HandlerThread.java:67)

franchioping avatar Nov 09 '25 22:11 franchioping

Sorry for the spam, but tested with same firmware (v4.1) but latest Magisk (v30.4) debug.

Logs
===== start of the issue =====
11-10 15:10:52.910  5073  5073 D AndroidRuntime: Calling main entry com.topjohnwu.superuser.internal.RootServerMain
11-10 15:10:52.936  4330  4330 W ThreadPoolForeg: type=1400 audit(0.0:279): avc: denied { write } for name="traced_producer" dev="tmpfs" ino=20875 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:traced_producer_socket:s0 tclass=sock_file permissive=0 app=com.google.android.gms
===== urelated logs - benchmarking  =====
11-10 15:10:52.956  1569  1658 D CompatibilityInfo: mCompatibilityFlags - 4
11-10 15:10:52.956  1569  1658 D CompatibilityInfo: applicationDensity - 300
11-10 15:10:52.956  1569  1658 D CompatibilityInfo: applicationScale - 1.0
11-10 15:10:52.958  1569  1704 D CompatibilityInfo: mCompatibilityFlags - 4
11-10 15:10:52.958  1569  1704 D CompatibilityInfo: applicationDensity - 300
11-10 15:10:52.958  1569  1704 D CompatibilityInfo: applicationScale - 1.0
11-10 15:10:52.961  1569  2150 D CompatibilityInfo: mCompatibilityFlags - 4
11-10 15:10:52.961  1569  2150 D CompatibilityInfo: applicationDensity - 300
11-10 15:10:52.961  1569  2150 D CompatibilityInfo: applicationScale - 1.0
11-10 15:10:52.963  1569  2150 D CompatibilityInfo: mCompatibilityFlags - 4
11-10 15:10:52.963  1569  2150 D CompatibilityInfo: applicationDensity - 300
11-10 15:10:52.963  1569  2150 D CompatibilityInfo: applicationScale - 1.0
11-10 15:10:52.965  1569  3456 D CompatibilityInfo: mCompatibilityFlags - 4
11-10 15:10:52.965  1569  3456 D CompatibilityInfo: applicationDensity - 300
11-10 15:10:52.966  1569  3456 D CompatibilityInfo: applicationScale - 1.0
11-10 15:10:53.004  1569  3456 D CompatibilityChangeReporter: Compat change id reported: 161145287; UID 10066; state: DISABLED
11-10 15:10:53.006  1569  3456 E ActivityManager: Activity Manager Crash. UID:0 PID:5073 TRANS:88
11-10 15:10:53.006  1569  3456 E ActivityManager: java.lang.NullPointerException: Attempt to read from field 'android.content.pm.ApplicationInfo com.android.server.am.ProcessRecord.info' on a null object reference in method 'void com.android.server.am.ActivityManagerService.addPackageDependency(java.lang.String)'
11-10 15:10:53.006  1569  3456 E ActivityManager: 	at com.android.server.am.ActivityManagerService.addPackageDependency(ActivityManagerService.java:4249)
11-10 15:10:53.006  1569  3456 E ActivityManager: 	at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:3314)
11-10 15:10:53.006  1569  3456 E ActivityManager: 	at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2674)
11-10 15:10:53.006  1569  3456 E ActivityManager: 	at android.os.Binder.execTransactInternal(Binder.java:1280)
11-10 15:10:53.006  1569  3456 E ActivityManager: 	at android.os.Binder.execTransact(Binder.java:1244)
11-10 15:10:53.007  5073  5073 E IPC     : Error in IPCMain
11-10 15:10:53.007  5073  5073 E IPC     : java.lang.NullPointerException: Attempt to read from field 'android.content.pm.ApplicationInfo com.android.server.am.ProcessRecord.info' on a null object reference in method 'void com.android.server.am.ActivityManagerService.addPackageDependency(java.lang.String)'
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.os.Parcel.createExceptionOrNull(Parcel.java:3017)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.os.Parcel.createException(Parcel.java:2995)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.os.Parcel.readException(Parcel.java:2978)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.os.Parcel.readException(Parcel.java:2920)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.app.IActivityManager$Stub$Proxy.addPackageDependency(IActivityManager.java:6583)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:871)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.app.LoadedApk.getClassLoader(LoadedApk.java:1126)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.app.ContextImpl.getClassLoader(ContextImpl.java:470)
11-10 15:10:53.007  5073  5073 E IPC     : 	at com.topjohnwu.superuser.internal.RootServerMain.<init>(SourceFile:0)
11-10 15:10:53.007  5073  5073 E IPC     : 	at com.topjohnwu.superuser.internal.RootServerMain.main(Unknown Source:23)
11-10 15:10:53.007  5073  5073 E IPC     : 	at com.android.internal.os.RuntimeInit.nativeFinishInit(Native Method)
11-10 15:10:53.007  5073  5073 E IPC     : 	at com.android.internal.os.RuntimeInit.main(RuntimeInit.java:355)
11-10 15:10:53.007  5073  5073 E IPC     : Caused by: android.os.RemoteException: Remote stack trace:
11-10 15:10:53.007  5073  5073 E IPC     : 	at com.android.server.am.ActivityManagerService.addPackageDependency(ActivityManagerService.java:4249)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:3314)
11-10 15:10:53.007  5073  5073 E IPC     : 	at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2674)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.os.Binder.execTransactInternal(Binder.java:1280)
11-10 15:10:53.007  5073  5073 E IPC     : 	at android.os.Binder.execTransact(Binder.java:1244)
11-10 15:10:53.007  5073  5073 E IPC     : 
11-10 15:10:53.008  5073  5073 I com.topjohnwu.magisk:root:0: System.exit called, status: 1

franchioping avatar Nov 10 '25 15:11 franchioping

I've had my Go Color 7 (2) rooted with Magisk on 4.1 firmware for a while, and after restarting after turning on magisk safe mode, the same thing is happening. I have done a lot of troubleshooting including factory resetting, transferring /data/adb of my Go Color 7 (1) to the Go Color 7 (2), switching the boot image back to factory and rooting again, switching to apatch and then switching back to magisk. When the factory image was there, the magisk app worked fine though.

Gropinou avatar Nov 10 '25 17:11 Gropinou

Through this link you can get access to the latest full update.upx released by boox for each device, just make sure to change the model in the url. Currently, v4.0 is the latest

I will try my best to install firmware v4.0 for testing. If anyone has an old link for firmware v3.* please do reply with it.

franchioping avatar Nov 10 '25 20:11 franchioping

I will try my best to install firmware v4.0 for testing. If anyone has an old link for firmware v3.* please do reply with it.

Through the same API you can get a 3.5.4 version for NoteAir3. The 4.1 version I installed is from data.onyx-international.cn rather than data.boox.com. Unfortunately, at least for my model, you cannot downgrade your firmware version via update.upx -- a custom recovery is necessary to rollback (at least based on research on the MobileReads forum). [^1]

It would be much cleaner, in my opinion, to find someone that already has a v3.* firmware installed with Magisk working.

Or better yet, it would be great if a Magisk maintainer familiar with the GMS, like @topjohnwu or @vvb2060, could chime in on whether there is a better path forward to debugging this issue.

[^1]: I updated this after franchioping's comment below to indicate I'm talking about update.upx. I have not downgrading via edl based on the update.upx resources, and I'm not sure that's something I'd like to mess with.

FrederickGeek8 avatar Nov 10 '25 21:11 FrederickGeek8

Agreed, i might be wasting my time for no reason. In any case, what's stopping you from downgrading through edl? Does the system not boot older images? I might encounter the same then.

franchioping avatar Nov 10 '25 21:11 franchioping

I do not think that GMS is relevant. I disabled GMS via pm uninstall --user, and it worked before this firmware update.

Iey4iej3 avatar Nov 11 '25 10:11 Iey4iej3

As a follow up to my previous post, I downgraded through a custom recovery to version 3.5.4, did a (necessary) factory reset, and flashed Magisk via edl. Magisk worked fine after rooting on 3.5.4. Reverting back to the clean 3.5.4 image, I upgraded to 4.1, did the flashing procedure, and Magisk was broken again.

Checking the GMS version, there is only one listed. So that rules out the duplicate version theory:

NoteAir3:/ $ dumpsys package com.google.android.gms | grep versionName
    versionName=23.08.15 (190400-512743456)

Right now I'm a bit stumped, but I'll continue playing with the Android Studio debugger and see if anything feels off. At least now I have a good method of switching versions and a clean system to work with.

FrederickGeek8 avatar Nov 15 '25 00:11 FrederickGeek8

As a follow up to my previous post, I downgraded through a custom recovery to version 3.5.4

Sorry as this is a bit unrelated, but what custom recovery did you use/where did you find it?

Thanks

franchioping avatar Nov 15 '25 23:11 franchioping

I think he created it (custom)

Gropinou avatar Nov 16 '25 03:11 Gropinou

Having the same issue on a Boox go7 black & white with firmware 4.1.1 Android 13.0 Installed Magisk v30.6 without incident Patched bootloader. Xferred patched code to go7 via edl.
Boox Go7 seems to run patched firmware just fine. But now Magisk v30.6 locks-up on app splash screen and will not run.

Reverted back to stock firmware 4.1.1. Magisk v30.6 app now runs again.

Please let me know if additional information is needed or if there is an updated version of Magisk to test.

codeboy62 avatar Dec 10 '25 21:12 codeboy62

APatch is working for me now (Go Color 7 II, 4.1 firmware). Previously, the superuser tab would hang (the only way to grant apps superuser), but now it works. It also has a built in WebUI (like WebUI X, and KsuWebUIStandalone). Plus, it supports Magisk modules, and KernelSU modules, and is harder to detect. Installation is also just as easy as with Magisk. Only downside is that it has no built in Zygisk, although ReZigisk works fine. I'm annoyed that I didn't make the switch earlier.

Gropinou avatar Dec 11 '25 00:12 Gropinou

Thanks @Gropinou tried your recommendation and this is working on my boox go7 black and white with firmware 4.1.1 (now patched with APatch). Will monitor Magisk github for future releases that are compatible.

codeboy62 avatar Dec 12 '25 19:12 codeboy62

No problem.

Gropinou avatar Dec 14 '25 01:12 Gropinou

APatch is working for me now (Go Color 7 II, 4.1 firmware). Previously, the superuser tab would hang (the only way to grant apps superuser), but now it works. It also has a built in WebUI (like WebUI X, and KsuWebUIStandalone). Plus, it supports Magisk modules, and KernelSU modules, and is harder to detect. Installation is also just as easy as with Magisk. Only downside is that it has no built in Zygisk, although ReZigisk works fine. I'm annoyed that I didn't make the switch earlier.

@Gropinou Did you make any changes to make the Superuser tab work again? I am tried APatch 11107 and 11142 on Go Color 7 Gen2, 4.1 firmware but the tab still hangs. Root is working just fine (ADB Shell), but i can't grant su access to any apps due to the infinite loading in superuser tab

MarvMarvman avatar Jan 06 '26 11:01 MarvMarvman

APatch is working for me now (Go Color 7 II, 4.1 firmware). Previously, the superuser tab would hang (the only way to grant apps superuser), but now it works. It also has a built in WebUI (like WebUI X, and KsuWebUIStandalone). Plus, it supports Magisk modules, and KernelSU modules, and is harder to detect. Installation is also just as easy as with Magisk. Only downside is that it has no built in Zygisk, although ReZigisk works fine. I'm annoyed that I didn't make the switch earlier.

@Gropinou Did you make any changes to make the Superuser tab work again? I am tried APatch 11107 and 11142 on Go Color 7 Gen2, 4.1 firmware but the tab still hangs. Root is working just fine (ADB Shell), but i can't grant su access to any apps due to the infinite loading in superuser tab

Having the same issue as @MarvMarvman. Getting a bit off-topic from the original thread but Apatch 11142 is working without crashing on my Go 7 Gen2 (black & white) 4.1.1 firmware but I'm unable to grant SU access to any apps with it (which defeats the purpose of installing it!). ....so Apatch doesn't crash the Go 7 but doesn't work and Magisk locks-up when I attempt to run the app. No new Magisk releases as of today (1/6/25) since I tried v30.6 last month so I haven't tried anything else.

codeboy62 avatar Jan 06 '26 13:01 codeboy62

I met the same question as you. My device is Boox Leaf5 (Chinese verson). with the latest firmware and magisk app. If any people know how to solve the problem(especially if you know Chinese or you are a 中国人), please contact me by emai : gregsons334(at)gmail.com Thank you very much.

kevinboox avatar Jan 07 '26 15:01 kevinboox

Same situation as @codeboy62 and @MarvMarvman: I'm on a GoColor7_2 with firmware 4.1, apatch seems to work (adb shell then su has an exitcode of 0), and apatch hangs on the superuser tab.

The most relevant issue seems to be https://github.com/bmax121/APatch/issues/400 and there is a fork with a possible fix. Here's the diff off of main at the time of the fork.

  • APatch breaks on release 11142
  • APatch breaks on nightly (APatch_11173_5b9bccb_main-release-signed.apk).

@Gropinou it would be nice to know if you have any modules installed, if you started from a clean slate, or if it "just happened to start working" as your comment seems to suggest.

EDIT: After playing around with this, I seemed to have soft-bricked my device (the bootloader always goes into fastboot mode). I'm waiting on an EDL cable to make progress now : ) I will point out that I did successfully flash all builds above (11142,11173,+fork apk via google drive) but I bricked my device while starting a personal fork to bring update @ventureoo's work to the latest apatch. Next update, I'll also migrate this discussion to apatch's issues.

EDIT: back in business. EDL cables are so weird.

EDIT: I tried to fork APatch and add in the ventureoo commits, but this seems to break APatch completely. Retriggering the ventureoo build from CI doesn't seem to build a compilable artifact, so my trust in the shared google drive apk is very low. I am not an android/kotlin developer, though so it is possible I am missing some kind of dependency.

stites avatar Jan 17 '26 17:01 stites