Skip to content

Vector daemon crashes with DeadSystemException (BR_DEAD_REPLY) #939

Description

@Krittzer

Steps to reproduce/复现步骤

  1. Flash KernelSU-Next (tethered/temporal root, bootloader locked) + Zygisk Next 1.4.5 + Vector canary-3107 on the device below.
  2. Soft reboot.

Expected behaviour/预期行为

VectorDaemon starts and establishes bridge into system_server

Actual behaviour/实际行为

VectorDaemon crashes with an uncaught DeadSystemException during a subset of boots, immediately after a libbinder transaction returns BR_DEAD_REPLY. Full sequence from verbose log:

10:43:07.246 E/SystemServiceRegistry: SemDisplayQualityFeature.ENABLED:true,PLATFORM:LSI
10:43:07.249 D/ShellFrameworkInitializer: initial SemPrivilegeManager
10:43:07.250 E/libbinder.IPCThreadState: Binder transaction failure. id: 606305, cmd: BR_DEAD_REPLY (29189), error: -3 (No such process)
10:43:07.250 W/libbinder.IPCThreadState: call to talkWithDriver in joinThreadPool returned error: -9 (Bad file descriptor), FD: -1
10:43:07.251 D/AndroidRuntime: Shutting down VM
10:43:07.251 E/AndroidRuntime: FATAL EXCEPTION: main
DeadSystemException: The system died; earlier logs will point to the root cause
10:43:07.251 E/VectorDaemon: Uncaught exception in Daemon
DeadSystemException: The system died; earlier logs will point to the root cause

DeadSystemException carries no further stack trace, only that some binder call the daemon made during this window came back dead.

Corresponding kmsg from the same boot:
[ 356.172023] !@Boot_EBS_F: start zygote from appmain
[ 356.1xx-356.3xx] init: Untracked pid received SIGKILL (repeated ~50x)
[ 356.302643] servicemanager: Service 'serial' originally registered from SID u:r:system_server:s0 but it is now being registered from SID u:r:ksu:s0. Multiple instances installed?

Xposed Module List/Xposed 模块列表

Crash occurs during daemon startup before any Xposed module can be scoped/loaded

Root implementation/Root 方案

Temporal root - Root my galaxy (CVE-2026-43499)

System Module List/系统模块列表

Zygisk Next 1.4.5 (836-b13d58a-release)
Vector canary-3107

Vector version/Vector 版本

canary-3107

Android version/Android 版本

Android 16 (API 36), Samsung Galaxy S24 (SM-S921B, Exynos 9945), firmware S921BXXSFDZF2, kernel 6.1.157-android14-11, stock OEM ROM (One UI)

Version requirement/版本要求

Logs/日志

vector-deadsystemexception-issue.md

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions