Duplicate name: 'IMAGES/product.img'

[jourje]

When signing target_files for blueline, I get the following warning :
build/make/tools/releasetools/common.py:1200: UserWarning: Duplicate name: 'IMAGES/product.img'

And there is actually multiple entries for IMAGES/product.img in the zip.

Then i get this from avbtool :
Verifying image vbmeta.img using key at /home/jeremy/Android/keys/avb.pem
vbmeta: Successfully verified SHA256_RSA2048 vbmeta struct in vbmeta.img
system: Successfully verified chain partition descriptor matches expected data
vendor: Successfully verified sha1 hashtree of vendor.img for image of 792514560 bytes
hashtree of product.img does not match descriptor
/home/jeremy/Android/aosp/external/avb/avbtool: Error verifying descriptor.

Obviously avb is refusing to boot.
If I unzip the signed target files to remove duplicate product.img, it kinda pass avb verification but bootloops on the android splashscreen.

[jourje]

Precisions :
I get the same result when building & signing aosp the usual way.
This is branch android-9.0.0_r34
Everything is working fine when flashing unsigned images.