[Google Pixel 4 XL Questions & Answers] bdt1995:
I was rooted back on Android 10, and had Edxposed installed, with I believe the sandhook riru hook. I then enrolled in the beta, and flashed the beta rom without the -w using the flash-all.bat thinking I could just patch the boot.img and be right back where I was with root. Nope.

Okay, it was just the beta, I figured, but nope.

Turns out, even with the current Android 11 build installed, patching the boot.img still results in a bootloop.

I've tried many things, except for a data wipe, as I don't want to go to that extreme if there's still a possibility of fixing it.

I've used the image-new.img from tulsadriver, both the one that removes magisk, and the one that puts it into core-only mode. No go. I've built my own using the technique. Still, a no go.

I've tried:

Clearing the data and cache on the Edxposed Manager

Uninstalling Edxposed Manager

Clearing data and cache on Magisk Manager

Uninstalling Magisk Manager

Used all different Magisk Managers available, with all possible option combinations

Used the most recent platform-tools

Flashing back to Android 10, which bootloops even without root unless I do a factory wipe (presumably)

Booting into TWRP, which asks for a password, as it's not designed for Android 11 and doesn't have access to the filesystem.

Probably a fair few other things I've forgotten over time.

Booting with a magisk_patched image, even with the latest magisk canary build, results in a bootloop. During that, I can run adb logcat, and see that magisk is definitely loading, as are riru-core and riru_edxposed, along with all my other modules that I have tried to remove many times.

In logcat, I can see something like this being repeated several times before it finally crashes:

09-11 11:09:07.476 1388 1388 I Riru : Riru v21.3 (36) in zygote

09-11 11:09:07.476 1388 1388 I Riru : config dir is /data/misc/riru

09-11 11:09:07.476 1388 1388 I Riru : system version 11 (api 30, preview_sdk 0)

09-11 11:09:07.476 1379 1379 I adsprpcd: vendor/qcom/proprietary/commonsys-intf/adsprpc/src/fastrpc_apps_user.c:895: remote_handle_open: Successfully opened handle 0x6 for '":;./\geteventfd on domain 0

09-11 11:09:07.478 1388 1388 I Riru : hook installed

09-11 11:09:07.479 1368 1368 I ThermalEngine: vdd_rstr_init: Could not read /sys/module/msm_thermal/vdd_restriction/enabled

09-11 11:09:07.479 1368 1368 E ThermalEngine: Error reading /sys/class/leds/lcd-backlight/max_brightness

09-11 11:09:07.480 1368 1368 E ThermalEngine: open/sys/class/power_supply/battery/system_temp_level failed13

09-11 11:09:07.480 1368 1368 E ThermalEngine: Unable to init battery charging mitigation to 0

09-11 11:09:07.492 1385 1385 W cnd : type=1400 audit(0.0:438): avc: denied { read write } for name="diag" dev="tmpfs" ino=14334 scontext=u:r:cnd:s0 tcontext=u:object_r:diag_device:s0 tclass=chr_file permissive=0

09-11 11:09:07.480 1433 1433 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstone

09-11 11:09:07.480 1388 1388 I Riru : module loaded: edxp (api 4)

09-11 11:09:07.480 1388 1388 V Riru : edxp: onModuleLoaded

09-11 11:09:07.480 1137 1137 I tombstoned: received crash request for pid 1386

09-11 11:09:07.480 1388 1388 I EdXposed: onModuleLoaded: welcome to EdXposed!

09-11 11:09:07.480 1388 1388 I EdXposed: Start to install inline hooks

09-11 11:09:07.480 1388 1388 I EdXposed: Using api level 30

09-11 11:09:07.480 1204 1204 I QC2V4l2Driver: [c2.qti.avc.decoder] Device /dev/video32 opened with fd: 6

09-11 11:09:07.480 1433 1433 I crash_dump64: performing dump of process 1386 (target tid = 1386)

09-11 11:09:07.480 1368 1368 I ThermalEngine: sensors_manager_init: Init

09-11 11:09:07.480 1388 1388 I EdXposed: Start to install Riru hook

09-11 11:09:07.481 1368 1445 E ThermalEngine: socket creation success

09-11 11:09:07.482 1433 1433 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***

09-11 11:09:07.482 1433 1433 F DEBUG : Build fingerprint: 'google/coral/coral:11/RP1A.200720.009/6720564:user/release-keys'

09-11 11:09:07.482 1433 1433 F DEBUG : Revision: 'MP1.0'

09-11 11:09:07.482 1433 1433 F DEBUG : ABI: 'arm64'

09-11 11:09:07.483 1433 1433 F DEBUG : Timestamp: 2020-09-11 11:09:07-0400

09-11 11:09:07.483 1433 1433 F DEBUG : pid: 1386, tid: 1386, name: app_process64 >>> /system/bin/app_process64 <<<

09-11 11:09:07.483 1433 1433 F DEBUG : uid: 0

09-11 11:09:07.483 1433 1433 F DEBUG : signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0x7c36446f08

09-11 11:09:07.483 1433 1433 F DEBUG : x0 b4000079d0e4e290 x1 0000000000000101 x2 0000000000000000 x3 0000007c3601ed18

09-11 11:09:07.483 1433 1433 F DEBUG : x4 0000000000000000 x5 0000007c375d41a0 x6 f2a6c031d29dd811 x7 d61f0220f2c00f91

09-11 11:09:07.483 1433 1433 F DEBUG : x8 0000007c36447000 x9 0000000000000031 x10 b4000079d0e4e290 x11 0000000000000000

09-11 11:09:07.483 1433 1433 F DEBUG : x12 00000000000000c4 x13 6420ea00e9057037 x14 0144ffefc238c310 x15 0000000000000001

09-11 11:09:07.483 1433 1433 F DEBUG : x16 0000007c34c67130 x17 0000007c3601eec0 x18 00000079a0e21c50 x19 15f1a23f7ce4c891

09-11 11:09:07.483 1433 1433 F DEBUG : x20 b4000079d0e4e290 x21 b4000079d0e4e290 x22 0000007c3643f000 x23 0000007c3643f000

09-11 11:09:07.483 1433 1433 F DEBUG : x24 00000079a0d66508 x25 0000007c33bfbdc2 x26 0000007c33c17000 x27 b400007b00e4c093

09-11 11:09:07.483 1433 1433 F DEBUG : x28 0000007c33bfbda5 x29 0000007fd45eaca0

09-11 11:09:07.483 1433 1433 F DEBUG : lr 0000007c3601eef8 sp 0000007fd45eac40 pc 0000007c36446f08 pst 0000000000000000

Eventually, the system gets to the point where it gives up, after repeating 956 956 V Riru : zygote64 not started, wait 1s

09-11 11:10:07.471 3279 3279 I netdClient: Skipping libnetd_client init since *we* are netd

09-11 11:10:07.474 3279 3279 I netd : netd 1.0 starting

09-11 11:10:07.475 3278 3278 I EdXposed: Riru hooks installed

09-11 11:10:07.475 3278 3278 W linker : Warning: invalid soinfo version for "/system/lib/libandroid_runtime.so" (assuming inaccessible)

09-11 11:10:07.475 3278 3278 F libc : Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x3 in tid 3278 (app_process32), pid 3278 (app_process32)

09-11 11:10:07.477 3279 3279 D TetherController: Setting IP forward enable = 0

09-11 11:10:07.480 3279 3279 D FirewallController: Could not read /proc/self/uid_map, max uid defaulting to 4294967294

09-11 11:10:07.495 3290 3290 I crash_dump32: obtaining output fd from tombstoned, type: kDebuggerdTombstone

09-11 11:10:07.495 1137 1137 I tombstoned: received crash request for pid 3278

09-11 11:10:07.495 1137 1137 I tombstoned: enqueueing crash request for pid 3278

09-11 11:10:07.502 3279 3279 I netd : Creating child chains: 10977us

09-11 11:10:07.502 3279 3279 I netd : Setting up OEM hooks: 159us

09-11 11:10:07.503 3279 3279 I netd : Setting up FirewallController hooks: 43us

09-11 11:10:07.506 3279 3279 I netd : Setting up TetherController hooks: 3116us

09-11 11:10:07.509 3279 3279 I netd : Setting up BandwidthController hooks: 3306us

09-11 11:10:07.509 3279 3279 I netd : Setting up IdletimerController hooks: 89us

09-11 11:10:07.514 3279 3279 I netd : Setting up StrictController hooks: 5268us

09-11 11:10:07.515 3279 3279 I ClatdController: 4.9+ kernel and device shipped with Q+ - clat ebpf should work.

09-11 11:10:07.515 3279 3279 I netd : Initializing ClatdController: 218us

09-11 11:10:07.516 3279 3279 I netd : Initializing traffic control: 1642us

09-11 11:10:07.525 3279 3279 I netd : Enabling bandwidth control: 8528us

09-11 11:10:07.527 3279 3279 E Netd : Error adding route 0.0.0.0/0 -> (null) dummy0 to table 1003: File exists

09-11 11:10:07.527 3279 3279 I netd : Initializing RouteController: 1948us

09-11 11:10:07.527 3279 3279 D XfrmController: XfrmController::ipSecAddXfrmInterface, line=1377

09-11 11:10:07.535 3279 3279 D XfrmController: XfrmController::ipSecRemoveTunnelInterface, line=1590

09-11 11:10:07.535 3279 3279 D XfrmController: deviceName=ipsec_test

09-11 11:10:07.576 3279 3279 D XfrmController: Sending Netlink XFRM Message: XFRM_MSG_FLUSHSA

09-11 11:10:07.576 3279 3279 D XfrmController: Sending Netlink XFRM Message: XFRM_MSG_FLUSHPOLICY

09-11 11:10:07.576 3279 3279 I netd : Initializing XfrmController: 49355us

09-11 11:10:07.578 3279 3279 I libnetd_resolv: resolv_init: Initializing resolver

09-11 11:10:07.580 1430 1940 I QC-NETMGR-LIB: onRegistration(): Starting Netd getService thread

09-11 11:10:07.581 1430 3306 I QC-NETMGR-LIB: getServiceImpl(): INetd discovered

09-11 11:10:07.582 1430 3306 I QC-NETMGR-LIB: registerLinkToDeath(): Success registerLinkToDeath!

09-11 11:10:07.582 1430 1940 D QC-NETMGR-LIB: onRegistration(): netd restart detected

09-11 11:10:07.582 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRegisterNetwork(): Looking for Netd service

09-11 11:10:07.582 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRegisterNetwork(): register to create new OEM network

09-11 11:10:07.582 1430 1585 I QC-NETMGR-LIB: registerNetwork(): Attempting createOemNetwork

09-11 11:10:07.584 3282 3282 F DEBUG : backtrace:

09-11 11:10:07.584 3282 3282 F DEBUG : #00 pc 0000000000003f08 [anon:bionic_alloc_small_objects]

09-11 11:10:07.584 3282 3282 F DEBUG : #01 pc 0000000000043ef4 /system/lib64/libriru_edxp.so (BuildId: d98e5c9f8c1d97bd2b77af3c88464576d2f8999c)

09-11 11:10:07.584 3282 3282 F DEBUG : #02 pc 0000000000001020 /apex/com.android.runtime/lib64/bionic/libdl.so (dlopen+12) (BuildId: 0ef8b9fd3ba84892809321b735317a50)

09-11 11:10:07.584 3282 3282 F DEBUG : #03 pc 0000000000043d14 /system/lib64/libriru_edxp.so (BuildId: d98e5c9f8c1d97bd2b77af3c88464576d2f8999c)

09-11 11:10:07.584 3282 3282 F DEBUG : #04 pc 0000000000043740 /system/lib64/libriru_edxp.so (onModuleLoaded+44) (BuildId: d98e5c9f8c1d97bd2b77af3c88464576d2f8999c)

09-11 11:10:07.584 3282 3282 F DEBUG : #05 pc 000000000000933c /system/lib64/libmemtrack.so (BuildId: b057242d5c6d0ff1bc31a9c75ad7318f94273fe0)

09-11 11:10:07.584 3282 3282 F DEBUG : #06 pc 000000000004a0f0 /apex/com.android.runtime/bin/linker64!ld-android.so (offset 0x33000) (__dl__ZL10call_arrayIPFviPPcS1_EEvPKcPT_mbS5_+284) (BuildId: 3616c064c2d540887bd8b30030a981de)

09-11 11:10:07.584 3282 3282 F DEBUG : #07 pc 000000000004a2f0 /apex/com.android.runtime/bin/linker64!ld-android.so (offset 0x33000) (__dl__ZN6soinfo17call_constructorsEv+380) (BuildId: 3616c064c2d540887bd8b30030a981de)

09-11 11:10:07.584 3282 3282 F DEBUG : #08 pc 000000000004a1fc /apex/com.android.runtime/bin/linker64!ld-android.so (offset 0x33000) (__dl__ZN6soinfo17call_constructorsEv+136) (BuildId: 3616c064c2d540887bd8b30030a981de)

09-11 11:10:07.584 3282 3282 F DEBUG : #09 pc 000000000004a1fc /apex/com.android.runtime/bin/linker64!ld-android.so (offset 0x33000) (__dl__ZN6soinfo17call_constructorsEv+136) (BuildId: 3616c064c2d540887bd8b30030a981de)

09-11 11:10:07.584 3282 3282 F DEBUG : #10 pc 0000000000080e04 /apex/com.android.runtime/bin/linker64!ld-android.so (offset 0x33000) (__dl__ZL29__linker_init_post_relocationR19KernelArgumentBlockR6soinfo+4288) (BuildId: 3616c064c2d540887bd8b30030a981de)

09-11 11:10:07.584 3282 3282 F DEBUG : #11 pc 000000000007fd14 /apex/com.android.runtime/bin/linker64!ld-android.so (offset 0x33000) (__dl___linker_init+568) (BuildId: 3616c064c2d540887bd8b30030a981de)

09-11 11:10:07.584 3282 3282 F DEBUG : #12 pc 000000000004cad4 /apex/com.android.runtime/bin/linker64!ld-android.so (offset 0x33000) (__dl__start+4) (BuildId: 3616c064c2d540887bd8b30030a981de)

09-11 11:10:07.584 1430 1585 I QC-NETMGR-LIB: registerNetwork(): command completed!

09-11 11:10:07.584 1430 1585 I QC-NETMGR-LIB: registerNetwork(): createOemNetwork succeeded [packet mark : 0xf0001] [net id : 1] [network handle : 0x1cafed00d]

09-11 11:10:07.584 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRegisterNetwork(): [packet mark : 0xf0001] [network handle : 0x1cafed00d]

09-11 11:10:07.608 3282 3282 E crash_dump64: unable to connect to activity manager: Connection refused

09-11 11:10:07.608 1137 1137 E tombstoned: Tombstone written to: /data/tombstones/tombstone_15

09-11 11:10:07.608 3290 3290 I crash_dump32: performing dump of process 3278 (target tid = 3278)

09-11 11:10:07.613 3290 3290 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***

09-11 11:10:07.613 3290 3290 F DEBUG : Build fingerprint: 'google/coral/coral:11/RP1A.200720.009/6720564:user/release-keys'

09-11 11:10:07.613 3290 3290 F DEBUG : Revision: 'MP1.0'

09-11 11:10:07.613 3290 3290 F DEBUG : ABI: 'arm'

09-11 11:10:07.613 3290 3290 F DEBUG : Timestamp: 2020-09-11 11:10:07-0400

09-11 11:10:07.613 3290 3290 F DEBUG : pid: 3278, tid: 3278, name: app_process32 >>> /system/bin/app_process32 <<<

09-11 11:10:07.613 3290 3290 F DEBUG : uid: 0

09-11 11:10:07.613 3290 3290 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x3

09-11 11:10:07.613 3290 3290 F DEBUG : Cause: null pointer dereference

09-11 11:10:07.613 3290 3290 F DEBUG : r0 00000003 r1 00000003 r2 00000000 r3 00000005

09-11 11:10:07.613 3290 3290 F DEBUG : r4 fff461c0 r5 ecc8a37c r6 00000300 r7 ec783790

09-11 11:10:07.613 3290 3290 F DEBUG : r8 00000003 r9 00000000 r10 ecc8a680 r11 ecc8a310

09-11 11:10:07.613 3290 3290 F DEBUG : ip 80000000 sp fff46148 lr ecbfd3f7 pc ecc66eba

09-11 11:10:07.614 3290 3290 F DEBUG : backtrace:

09-11 11:10:07.614 3290 3290 F DEBUG : #00 pc 00083eba /apex/com.android.runtime/bin/linker!ld-android.so (offset 0x1a000) (__dl_strlen_a15+22) (BuildId: b85b8ab66b065f42982eeb67cddcee9c)

09-11 11:10:07.614 3290 3290 F DEBUG : #01 pc 0001a3f3 /apex/com.android.runtime/bin/linker (__dl__ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2IDnEEPKc+18) (BuildId: b85b8ab66b065f42982eeb67cddcee9c)

09-11 11:10:07.647 3290 3290 E crash_dump32: unable to connect to activity manager: Connection refused

09-11 11:10:07.648 1137 1137 E tombstoned: Tombstone written to: /data/tombstones/tombstone_16

09-11 11:10:07.650 1399 1399 W iorapd : Reconnect to package manager service: 11 times

09-11 11:10:07.651 1399 1399 I ServiceManager: Waiting for service 'package_native' on '/dev/binder'...

09-11 11:10:07.670 3314 3314 I flags_health_check: ServerConfigurableFlagsReset reset_mode value: 1

09-11 11:10:07.670 3314 3314 I flags_health_check: ServerConfigurableFlagsReset updatable crashing detected, resetting flags.

09-11 11:10:07.685 3316 3316 I flags_health_check: ServerConfigurableFlagsReset reset_mode value: 1

09-11 11:10:07.685 3316 3316 I flags_health_check: ServerConfigurableFlagsReset updatable crashing detected, resetting flags.

09-11 11:10:07.741 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRegisterNetwork(): Looking for Netd service

09-11 11:10:07.741 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRegisterNetwork(): register to create new OEM network

09-11 11:10:07.741 1430 1585 I QC-NETMGR-LIB: registerNetwork(): Attempting createOemNetwork

09-11 11:10:07.741 1430 1585 E QC-NETMGR-LIB: registerNetwork(): HAL invocation failed!

09-11 11:10:07.741 1430 1585 E QC-NETMGR-LIB: registerNetwork(): Failure in createOemNetwork!

09-11 11:10:07.741 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRegisterNetwork(): [packet mark : 0x0] [network handle : 0x0]

09-11 11:10:07.741 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientAddInterfaceToOemNetwork(): Looking for Netd service

09-11 11:10:07.741 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientAddInterfaceToOemNetwork(): starting command

09-11 11:10:07.741 1430 1585 I QC-NETMGR-LIB: addInterfaceToOemNetwork(): Attempting addInterfaceToOemNetwork

09-11 11:10:07.741 1430 1585 E QC-NETMGR-LIB: addInterfaceToOemNetwork(): HAL invocation failed!

09-11 11:10:07.751 1399 1399 I ServiceManager: Waiting for service 'package_native' on '/dev/binder'...

09-11 11:10:07.759 1430 1940 E QC-NETMGR-LIB: serviceDied(): Netd service died

09-11 11:10:07.851 1399 1399 I ServiceManager: Waiting for service 'package_native' on '/dev/binder'...

09-11 11:10:07.896 640 755 W HidlServiceManagement: Waited one second for android.frameworks.sensorservice@1.0::ISensorManager/default

09-11 11:10:07.897 589 589 I hwservicemanager: Since android.frameworks.sensorservice@1.0::ISensorManager/default is not registered, trying to start it as a lazy HAL.

09-11 11:10:07.898 1508 1508 W HidlServiceManagement: Waited one second for android.frameworks.cameraservice.service@2.1::ICameraService/default

09-11 11:10:07.898 589 3331 W libc : Unable to set property "ctl.interface_start" to "android.frameworks.sensorservice@1.0::ISensorManager/default": error code: 0x20

09-11 11:10:07.899 640 755 I HidlServiceManagement: getService: Trying again for android.frameworks.sensorservice@1.0::ISensorManager/default...

09-11 11:10:07.899 589 589 I hwservicemanager: Since android.frameworks.cameraservice.service@2.1::ICameraService/default is not registered, trying to start it as a lazy HAL.

09-11 11:10:07.900 1508 1508 I HidlServiceManagement: getService: Trying again for android.frameworks.cameraservice.service@2.1::ICameraService/default...

09-11 11:10:07.900 589 3332 W libc : Unable to set property "ctl.interface_start" to "android.frameworks.cameraservice.service@2.1::ICameraService/default": error code: 0x20

09-11 11:10:07.952 1399 1399 I ServiceManager: Waiting for service 'package_native' on '/dev/binder'...

09-11 11:10:08.052 1399 1399 I ServiceManager: Waiting for service 'package_native' on '/dev/binder'...

09-11 11:10:08.104 1354 1373 I PerMgrSrv: QMI service exited

09-11 11:10:08.105 1354 1354 D PerMgrSrv: modem shut down

09-11 11:10:08.105 1354 1354 D PerMgrSrv: modem new state: going off-line

09-11 11:10:08.105 1354 1354 D PerMgrSrv: slpi shut down

09-11 11:10:08.105 1354 1354 D PerMgrSrv: spss shut down

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Shared memory initialised successfully.

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Registering modemst1: 0x4a /boot/modem_fs1

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Registering modemst2: 0x4b /boot/modem_fs2

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Registering fsc: 0xff /boot/modem_fsc

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Registering fsg: 0x58 /boot/modem_fsg

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: 4 GPT partitions found

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Multisim configs: radio: dsds, modem:dsds

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Multisim configs unchanged. Skip

09-11 11:10:08.109 3338 3338 I vendor.rmt_storage: Capset success!

09-11 11:10:08.109 1228 1228 E MSM-irqbalance: Error waiting for fd: -1

09-11 11:10:08.109 1228 1228 E MSM-irqbalance: Failed to sleep for 5 seconds

09-11 11:10:08.109 1228 1228 I MSM-irqbalance: msm-irq_balance End

09-11 11:10:08.109 1464 1464 I cnss-daemon: Caught Signal: 15

09-11 11:10:08.109 1464 1464 I cnss-daemon: nl_loop_terminate called

09-11 11:10:08.109 1464 1464 I cnss-daemon: Error polling sockets

09-11 11:10:08.109 1464 1757 I cnss-daemon: wlfw_service_request: Pthread exiting

09-11 11:10:08.131 588 588 E servicemanager: Could not find android.hardware.light.ILights/default in the VINTF manifest.

09-11 11:10:08.133 956 956 V Riru : zygote64 not started, wait 1s

09-11 11:10:08.134 643 643 E qdlights: write_int failed to open /sys/class/leds/red/brightness, errno = 2

09-11 11:10:08.134 643 643 D qdlights: set_speaker_light_locked mode=0, colorRGB=00000000, onMS=0, offMS=0, rc=-2

09-11 11:10:08.134 643 643 I chatty : uid=1000(system) light@1.1-servi identical 1 line

09-11 11:10:08.134 643 643 D qdlights: set_speaker_light_locked mode=0, colorRGB=00000000, onMS=0, offMS=0, rc=-2

09-11 11:10:08.135 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRemoveInterfaceFromOemNetwork(): Looking for Netd service

09-11 11:10:08.135 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRemoveInterfaceFromOemNetwork(): starting command

09-11 11:10:08.135 1430 1585 E QC-NETMGR-LIB: removeInterfaceFromOemNetwork(): mService is NULL

09-11 11:10:08.140 1491 1491 I update_engine: [INFO:main.cc(71)] A/B Update Engine terminating with exit code 0

09-11 11:10:08.140 1491 1491 I update_engine: [INFO:cleanup_previous_update_action.cc(88)] Stopping/suspending CleanupPreviousUpdateAction

09-11 11:10:08.140 1491 1491 I update_engine: [INFO:action_processor.cc(61)] ActionProcessor: aborted CleanupPreviousUpdateAction

09-11 11:10:08.152 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRemoveInterfaceFromOemNetwork(): Looking for Netd service

09-11 11:10:08.152 1430 1585 I QC-NETMGR-LIB: NetmgrNetdClientRemoveInterfaceFromOemNetwork(): starting command

09-11 11:10:08.152 1430 1585 E QC-NETMGR-LIB: removeInterfaceFromOemNetwork(): mService is NULL

09-11 11:10:08.160 1511 1511 I CHRE : Client 3 disconnected

09-11 11:10:08.168 622 628 E NetlinkListener: recvmsg failed (No buffer space available)

09-11 11:10:08.170 1148 1148 I statsd : StatsService::Terminating

09-11 11:10:08.173 1148 1148 W statsd : statsd terminated on receiving signal 15.

09-11 11:10:08.173 1148 1148 D RefBase : RefBase: Explicit destruction, weak count = 0 (in 0x59214a5d90)

09-11 11:10:08.173 1148 1148 W RefBase : CallStack::getCurrentInternal not linked, returning null

09-11 11:10:08.173 1148 1148 W RefBase : CallStack::logStackInternal not linked

09-11 11:10:08.370 1511 1511 I CHRE : Client 2 disconnected

09-11 11:10:08.371 1511 1511 I CHRE : Client 1 disconnected

09-11 11:10:09.144 956 956 V Riru : zygote64 not started, wait 1s

09-11 11:10:09.362 1248 1248 I vendor.rmt_storage: rmt_storage_connect_cb: clnt_h=0xa conn_h=0xb4000073c402d3d0

09-11 11:10:09.362 1248 1248 I vendor.rmt_storage: rmt_storage_rw_iovec_cb: /boot/modem_fs1: req_h=0xa msg_id=3: R/W request received (wr_count 1)

09-11 11:10:09.362 1248 1248 I vendor.rmt_storage: wakelock acquired: 1, error no: 11

09-11 11:10:09.362 1248 1750 I vendor.rmt_storage: rmt_storage_client_thread: /boot/modem_fs1: Unblock worker thread (th_id: 494791457984)

09-11 11:10:09.387 1248 1750 I vendor.rmt_storage: rmt_storage_client_thread: /boot/modem_fs1: req_h=0xa msg_id=3: Bytes written = 2097152, wr_count 1

09-11 11:10:09.387 1248 1750 I vendor.rmt_storage: rmt_storage_client_thread: /boot/modem_fs1: req_h=0xa msg_id=3: Send response: res=0 err=0, wr_count 1

09-11 11:10:09.387 1248 1750 I vendor.rmt_storage: rmt_storage_client_thread: /boot/modem_fs1: About to block rmt_storage client thread (th_id: 494791457984) wakelock released: 1, error no: 0

09-11 11:10:09.387 1248 1750 I vendor.rmt_storage:

09-11 11:10:09.439 1354 1574 D PerMgrSrv: modem new state: is off-line

09-11 11:10:09.439 1354 1354 D PerMgrSrv: modem turned off

09-11 11:10:09.439 1354 1377 E PerMgrSrv: PM-PROXY-THREAD registered for modem has died

09-11 11:10:09.439 1354 1377 I PerMgrSrv: modem client PM-PROXY-THREAD unvote ignored, shutdown in progress

09-11 11:10:09.439 1354 1377 D PerMgrSrv: modem state: is off-line, remove client PM-PROXY-THREAD

09-11 11:10:09.439 1354 1354 D PerMgrSrv: slpi turned off

09-11 11:10:09.439 1354 1354 D PerMgrSrv: spss turned off

09-11 11:10:09.439 1354 1354 I PerMgrSrv: Peripheral Mananager service exited

09-11 11:10:09.439 1354 1738 E PerMgrSrv: QCRIL registered for modem has died

09-11 11:10:09.440 1354 1738 I PerMgrSrv: modem client QCRIL unvote ignored, shutdown in progress

09-11 11:10:09.440 1354 1738 D PerMgrSrv: modem state: is off-line, remove client QCRIL

09-11 11:10:09.440 1354 1739 E PerMgrSrv: QCRIL registered for modem has died

09-11 11:10:09.440 1354 1739 I PerMgrSrv: modem client QCRIL unvote ignored, shutdown in progress

09-11 11:10:09.440 1354 1739 D PerMgrSrv: modem state: is off-line, remove client QCRIL

09-11 11:10:09.440 1464 1464 D PerMgrLib: cnss-daemon unvoting for modem

09-11 11:10:09.440 1354 1739 D PerMgrSrv: cnss-daemon removing vote for modem

09-11 11:10:09.440 1354 1739 I PerMgrSrv: modem client cnss-daemon unvote ignored, shutdown in progress

09-11 11:10:09.440 1354 1574 E PerMgrSrv: modem timer stop failed: Invalid argument

09-11 11:10:09.440 1464 1464 D PerMgrLib: cnss-daemon unregistering from peripheral manager

09-11 11:10:09.440 1354 1739 I PerMgrSrv: modem client cnss-daemon unvote ignored, shutdown in progress

09-11 11:10:09.440 1354 1739 D PerMgrSrv: cnss-daemon unregistered

09-11 11:10:09.440 1354 1739 D PerMgrSrv: modem state: is off-line, remove client cnss-daemon

09-11 11:10:09.440 1464 1464 E cnss-daemon: pm_release_vote: pm_handle is NULL

09-11 11:10:10.110 1464 1464 E cnss-daemon: terminate: 1Could not terminate loop in 2 seconds! Some bug???

09-11 11:10:10.161 956 956 V Riru : zygote64 not started, wait 1s

There are lots of messages in the logs I don't understand, but I really don't get why, even when I boot into it, using adb wait-for-device shell magisk --remove modules that the modules are still there! I've tried slightly tweaking the overlay.d file when building my own version of tulsadriver's core-only image so that it'll do various things, from using pkill and kill-all on magisk, edxposed, and riru, but nothing succeeds. I've tried using that to remove the magisk modules. Nope. I don't know what I'm doing wrong. I'll include the logcats for both the image-new.img and magisk_patched.img, so anyone who is willing to help can look at it in full.

I would greatly appreciate any help or advice. I would very much so prefer not to wipe, almost to the point of literally waiting until TWRP releases a workable version for Android 11 that I can potentially use.

Thanks for your time!