Vector daemon/CLI work but SELinux policy is not loaded and system_server is not injected on HyperOS 3 / Android 16 / KernelSU LKM #1053

Steps to reproduce/复现步骤

Description

Vector daemon appears to be running and cli status works, but the Manager reports Vector as not activated.

The Manager status page shows:

SELinux policy: Not loaded

System framework: Not injected

Xposed API: unavailable

However, Vector CLI reports the framework correctly.

Environment

Device: REDMI K90 Pro Max

ROM: HyperOS 3

Android: 16 / API 36

Architecture: arm64-v8a

Root: KernelSU, LKM mode

KernelSU version: 32680-5 (custom build)

NeoZygisk: v2.4 (289)

Vector: v2.2 Canary 3114

SELinux: Enforcing

NeoZygisk status

zygote64: injected daemon64: running Root: KernelSU Modules (1): zygisk_vector

Vector daemon

vectord is running.

Vector CLI status

Framework Version: 2.2 Version Code: 3114 API Version: 102 Enabled Modules: 2 Status Notification: true

Manager status

The standalone Vector Manager opens successfully, but remains red and reports Vector as not activated.

System status shows:

SELinux policy: Not loaded System framework: Not injected Xposed API: -

KernelSU module action

Launching Vector using the KernelSU module action does not open the Vector Manager.

Instead, it shows:

Starting: Intent { act=android.intent.action.MAIN cat=[org.matrix.vector.manager.LAUNCH_MANAGER] cmp=com.android.shell/.BugreportWarningActivity }

I also installed manager.apk directly from:

/data/adb/modules/zygisk_vector/manager.apk

but the Manager still reports Vector as not activated.

Relevant logs

Vector verbose log repeatedly contains:

I/KernelSU: ksud::cli: command: Profile { command: GetSepolicy { package: "org.matrix.vector.manager" } } E/KernelSU: ksud::cli: Error: No such file or directory (os error 2)

Kernel log also contains:

KernelSU: sepol: cmd #4 failed, cmd=1 subcmd=1 KernelSU: sepol: cmd #17 failed, cmd=1 subcmd=1

Expected behavior

Vector should load its SELinux policy, inject into system_server, expose the Xposed API, and the Manager should report the framework as activated.

Actual behavior

The Vector daemon and CLI are working, but:

SELinux policy is not loaded

system framework is not injected

Xposed API is unavailable in the Manager

KernelSU module action launches BugreportWarningActivity

Additional information

This setup uses KernelSU in LKM mode.

NeoZygisk successfully reports zygote injection, and Vector's daemon/CLI are both working, so the failure appears to happen later during SELinux policy loading or system_server injection.

Expected behaviour/预期行为

Vector should load its SELinux policy successfully, inject into system_server, expose the Xposed API, and show the framework as activated in the Manager.

Actual behaviour/实际行为

The Vector daemon and CLI work, but the Manager remains inactive. SELinux policy is reported as not loaded, system_server is not injected, and the Xposed API is unavailable. Launching Vector from the KernelSU module action opens com.android.shell/.BugreportWarningActivity instead of the Vector Manager.

Xposed Module List/Xposed 模块列表

HyperEars

Root implementation/Root 方案

KernelSU (LKM mode), custom build 32680-5

System Module List/系统模块列表

NeoZygisk v2.4
Vector v2.2 Canary 3114

Vector version/Vector 版本

3114

Android version/Android 版本

Android 16 (API 36) Xiaomi HyperOS 3 Device: REDMI K90 Pro Max

Version requirement/版本要求

• I am using the latest debug build from GitHub Actions./我正在使用 GitHub Actions 中最新的调试版本。

Logs/日志

Relevant logs

1. Vector CLI status

Framework Version: 2.2 Version Code: 3114 API Version: 102 Enabled Modules: 2 Status Notification: true

2. Vector Manager status

SELinux policy: Not loaded System framework: Not injected Xposed API: -

3. KernelSU logs

Error: No such file or directory (os error 2) KernelSU: sepol: cmd #4 failed KernelSU: sepol: cmd #17 failed

4. KernelSU module action

cmp=com.android.shell/.BugreportWarningActivity

Additional log files are attached.

KernelSU_bugreport_2026-11-02_11_08.tar.gz