patched Boot.img too large for Google Pixel 1 XL

[divinity76]

Google Pixel 1 XL has a boot partition size of 33,554,432 bytes, the magisk 30.7 patched boot.img is 34,481,450 bytes, roughly 927kb bigger than the boot partition, resulting in:

$ fastboot flash boot magisk_patched-30700_JgwLs.img
Warning: skip copying boot_b image avb footer (boot_b partition size: 33554432, boot_b image size: 34481450).
Sending 'boot_b' (33673 KB)                        OKAY [  0.936s]
Writing 'boot_b'                                   FAILED (remote: 'size too large')
fastboot: error: Command failed

the original boot.img is 31,712,486 bytes, leaving 1.8MB free space for patches, but the Magisk 30.7 patch is 2.7MB.

When using magisk Debug build, the boot.img is even larger at 35,419,434 bytes. Uploaded the debug patched boot.img and non-debug patched boot.img and original boot.img.

Device: Google Pixel 1 XL 128GB model 2PW2100
Android version: 10.0.0 (QP1A.191005.007.A3, Dec 2019)
Magisk version name: v30.7 (2026.2.23)
Magisk version code: 30700

boot.img.gz

magisk_patched-30700_JgwLs.img.gz

debug_magisk_patched-30700_h5btr.img.gz

[divinity76]

v30.7 patched size: 34,481,450 bytes
v30.6 patched size: 31,995,178 bytes
v30.5 patched size: 31,995,178 bytes
v30.0 patched size: 31,962,410 bytes

The issue is with v30.7 specifically, v30.6 works fine 🤔
(I just successfully rooted my Pixel 1 with v30.6 👍 )

[divinity76]

At least 3 separate Pixel 1 owners hit this specific issue, ref master-hax/pixel-backup-gang#57

[yujincheng08]

pls post patch log.

[divinity76]

pls post patch log.

do you want a debug build log or not debug? debug is bigger

[divinity76]

pls post patch log.

here is 30.7 not-debug patch log

- Device platform: arm64-v8a
- Installing: 30.7 (30700)
- Copying image to cache
- Unpacking boot image
Parsing boot image: [/data/user_de/0/com.topjohnwu.magisk/install/boot.img]
HEADER_VER      [0]
KERNEL_SZ       [21159184]
RAMDISK_SZ      [10545317]
SECOND_SZ       [0]
EXTRA_SZ        [0]
OS_VERSION      [10.0.0]
OS_PATCH_LEVEL  [2019-10]
PAGESIZE        [4096]
NAME            []
CMDLINE         [console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=marlin user_debug=31 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 cma=32M@0-0xffffffff loop.max_part=7 buildvariant=user veritykeyid=id:34e81e2c57675086f628c1b2e4b4ade8e0a1941d]
CHECKSUM        [2efafbd30f4d993dfd38cec26a6350e05d03c1b1000000000000000000000000]
KERNEL_DTB_SZ   [7817574]
KERNEL_FMT      [lz4]
RAMDISK_FMT     [gzip]
AVB1_SIGNED
- Checking ramdisk status
Loading cpio: [ramdisk.cpio]
- Stock boot image detected
- Patching ramdisk
- Pre-init storage partition: userdata
Loading cpio: [ramdisk.cpio]
Add file [init] (100750)
Create directory [overlay.d] (0750)
Create directory [overlay.d/sbin] (0750)
Add file [overlay.d/sbin/magisk.xz] (100644)
Add file [overlay.d/sbin/stub.xz] (100644)
Add file [overlay.d/sbin/init-ld.xz] (100644)
Patch with flag KEEPVERITY=[true] KEEPFORCEENCRYPT=[true]
Loading cpio: [ramdisk.cpio.orig]
Backup [init] -> [.backup/init]
Record new entry: [overlay.d] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin/init-ld.xz] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin/magisk.xz] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin/stub.xz] -> [.backup/.rmlist]
Create directory [.backup] (0000)
Add file [.backup/.magisk] (100000)
Dumping cpio: [ramdisk.cpio]
Loading dtbs from [kernel_dtb]
Loading dtbs from [kernel_dtb]
Failed to patch
Failed to patch
Failed to patch
Patch @ 0x017853F6 [736B69705F696E697472616D667300] -> [77616E745F696E697472616D667300]
- Repacking boot image
Parsing boot image: [/data/user_de/0/com.topjohnwu.magisk/install/boot.img]
HEADER_VER      [0]
KERNEL_SZ       [21159184]
RAMDISK_SZ      [10545317]
SECOND_SZ       [0]
EXTRA_SZ        [0]
OS_VERSION      [10.0.0]
OS_PATCH_LEVEL  [2019-10]
PAGESIZE        [4096]
NAME            []
CMDLINE         [console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=marlin user_debug=31 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 cma=32M@0-0xffffffff loop.max_part=7 buildvariant=user veritykeyid=id:34e81e2c57675086f628c1b2e4b4ade8e0a1941d]
CHECKSUM        [2efafbd30f4d993dfd38cec26a6350e05d03c1b1000000000000000000000000]
KERNEL_DTB_SZ   [7817574]
KERNEL_FMT      [lz4]
RAMDISK_FMT     [gzip]
AVB1_SIGNED
Repack to boot image: [new-boot.img]
HEADER_VER      [0]
KERNEL_SZ       [23624090]
RAMDISK_SZ      [10846232]
SECOND_SZ       [0]
EXTRA_SZ        [0]
OS_VERSION      [10.0.0]
OS_PATCH_LEVEL  [2019-10]
PAGESIZE        [4096]
NAME            []
CMDLINE         [console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=marlin user_debug=31 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 cma=32M@0-0xffffffff loop.max_part=7 buildvariant=user veritykeyid=id:34e81e2c57675086f628c1b2e4b4ade8e0a1941d]
CHECKSUM        [34615884f1edac445feeb2f2b47df034bc75f4db000000000000000000000000]

****************************
 Output file is written to 
 /storage/emulated/0/Download/magisk_patched-30700_TtrYs.img 
****************************
- All done!

[yujincheng08]

Try artifacts of https://github.com/topjohnwu/Magisk/actions/runs/22605559559/attempts/1 and see if the KERNEL_SZ become normal?

[divinity76]

@yujincheng08 That artifact self-identify as v30.6, and we have discovered that the problem is introduced in v30.7

When patching with that artifact, the boot.img size is 31,995,178 bytes, exactly the size as when patching with the v30.6 release from https://github.com/topjohnwu/Magisk/releases/tag/v30.6

The patch log is:

- Device platform: arm64-v8a
- Installing: 30.6 (30600)
- Copying image to cache
- Unpacking boot image
Parsing boot image: [/data/user_de/0/com.topjohnwu.magisk/install/boot.img]
HEADER_VER      [0]
KERNEL_SZ       [21159184]
RAMDISK_SZ      [10545317]
SECOND_SZ       [0]
EXTRA_SZ        [0]
OS_VERSION      [10.0.0]
OS_PATCH_LEVEL  [2019-10]
PAGESIZE        [4096]
NAME            []
CMDLINE         [console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=marlin user_debug=31 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 cma=32M@0-0xffffffff loop.max_part=7 buildvariant=user veritykeyid=id:34e81e2c57675086f628c1b2e4b4ade8e0a1941d]
CHECKSUM        [2efafbd30f4d993dfd38cec26a6350e05d03c1b1000000000000000000000000]
KERNEL_DTB_SZ   [7817574]
KERNEL_FMT      [lz4]
RAMDISK_FMT     [gzip]
AVB1_SIGNED
- Checking ramdisk status
Loading cpio: [ramdisk.cpio]
- Stock boot image detected
- Patching ramdisk
Loading cpio: [ramdisk.cpio]
- Pre-init storage partition: userdata
Add file [init] (100750)
Create directory [overlay.d] (0750)
Create directory [overlay.d/sbin] (0750)
Add file [overlay.d/sbin/magisk.xz] (100644)
Add file [overlay.d/sbin/stub.xz] (100644)
Add file [overlay.d/sbin/init-ld.xz] (100644)
Patch with flag KEEPVERITY=[true] KEEPFORCEENCRYPT=[true]
Loading cpio: [ramdisk.cpio.orig]
Backup [init] -> [.backup/init]
Record new entry: [overlay.d] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin/init-ld.xz] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin/magisk.xz] -> [.backup/.rmlist]
Record new entry: [overlay.d/sbin/stub.xz] -> [.backup/.rmlist]
Create directory [.backup] (0000)
Add file [.backup/.magisk] (100000)
Dumping cpio: [ramdisk.cpio]
Loading dtbs from [kernel_dtb]
Loading dtbs from [kernel_dtb]
Failed to patch
Failed to patch
Failed to patch
Patch @ 0x017853F6 [736B69705F696E697472616D667300] -> [77616E745F696E697472616D667300]
- Repacking boot image
Parsing boot image: [/data/user_de/0/com.topjohnwu.magisk/install/boot.img]
HEADER_VER      [0]
KERNEL_SZ       [21159184]
RAMDISK_SZ      [10545317]
SECOND_SZ       [0]
EXTRA_SZ        [0]
OS_VERSION      [10.0.0]
OS_PATCH_LEVEL  [2019-10]
PAGESIZE        [4096]
NAME            []
CMDLINE         [console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=marlin user_debug=31 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 cma=32M@0-0xffffffff loop.max_part=7 buildvariant=user veritykeyid=id:34e81e2c57675086f628c1b2e4b4ade8e0a1941d]
CHECKSUM        [2efafbd30f4d993dfd38cec26a6350e05d03c1b1000000000000000000000000]
KERNEL_DTB_SZ   [7817574]
KERNEL_FMT      [lz4]
RAMDISK_FMT     [gzip]
AVB1_SIGNED
Repack to boot image: [new-boot.img]
HEADER_VER      [0]
KERNEL_SZ       [21157703]
RAMDISK_SZ      [10826822]
SECOND_SZ       [0]
EXTRA_SZ        [0]
OS_VERSION      [10.0.0]
OS_PATCH_LEVEL  [2019-10]
PAGESIZE        [4096]
NAME            []
CMDLINE         [console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=marlin user_debug=31 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 cma=32M@0-0xffffffff loop.max_part=7 buildvariant=user veritykeyid=id:34e81e2c57675086f628c1b2e4b4ade8e0a1941d]
CHECKSUM        [48fba59acb8fe116e48b61dd631d62a90a59bd67000000000000000000000000]

****************************
 Output file is written to 
 /storage/emulated/0/Download/magisk_patched-30600_xT8AL.img 
****************************
- All done!

[divinity76]

@yujincheng08 umm... when installing that apk, it did insist on "downloading full magisk", whatever that means, hope that was intended to happen (i even tried to install it without internet connection, but then it full refused to start, saying internet connection was required)

[yujincheng08]

this means your current magisk is not debug version and thus the one in artifact cannot be installed and your test is not meaningful.

[divinity76]

@yujincheng08 Am I doing anything wrong here? https://www.youtube.com/watch?v=P181KXMxtVE

[yujincheng08]

this means your current magisk is not debug version