LSPosed crashes on HyperOS 2.0.6.0

[Letus252]

Steps to reproduce/复现步骤

My device is Xiaomi Redmi Note 14 4G HyperOS 2.0.6.0 (MTK), KernelSU Next 1.0.9 with GKI kernel 5.10.209-android12-9-gf0826289c516-WKSU-13722-SUSFS-v1.5.9-Wild.

Expected behaviour/预期行为

Basically, the exspected behaviour is Lsposed working.

Actual behaviour/实际行为

Lsposed is showing up as Activated, but non of my modules work. But not the modules seem to be causing the problem - after disabling every singe of them and rebooting, the issue persists - in 'Verbose Logs' tab I'm able to see a lot of errors, mostly related to java.

Xposed Module List/Xposed 模块列表

The modules don't seem to be related, it crashes without any (so modules: non).

Root implementation/Root 方案

KernelSU Next, but I also tried KernelSU, with similar results.

System Module List/系统模块列表

ReZygisk and Zygisk - Lsposed

LSPosed version/LSPosed 版本

Version 1.10.2 (7189) debug

Android version/Android 版本

Android 15

Version requirement/版本要求

• I am using the latest debug build from GitHub Actions./我正在使用 GitHub Actions 中最新的调试版本。

Logs/日志

LSPosed_2025-09-04T00_45_39.855175[1].zip

[JingMatrix]

Please test with NeoZygisk, which should work, and then upload your LSPosed logs.

[Letus252]

Please test with NeoZygisk, which should work, and then upload your LSPosed logs.

Thank you for replay! I uninstalled ReZygisk, and installed NeoZygisk-v1.2-242-debug.zip. Unfortunally lsposed still doesn't work: java exception again. Maybe the issue is with the GKI kernel? The one I'm using is from this repo, and I installed it using the method from this guide . I don't understand what is the problem, if there is something I can test or information you need, just ask.

LSPosed_2025-09-05T03_44_19.767194.zip

[WaterErmine5046]

I think the problem is in lsposed and we need to wait for the crash fix

[Letus252]

I think the problem is in lsposed and we need to wait for the crash fix

I think you're right. I wanted to try and build the kernel myself, but xiaomi haven't released the kernel tree yet (they have been getting increasingly anti-consumer, unlocking bootloader took me few weeks because of their bullshit "request to unlock", and unlock per day cap).

[Letus252]

Please test with NeoZygisk, which should work, and then upload your LSPosed logs.

Hey, I have an update: the crash does not seem to be related to GKI Kernel or even KernelSU: I wiped my phone, and installed fresh Magisk with only Lsposed 1.10.2 (internal magisk zygisk), and it's still broken. Considering it was working before I swapped to KernelSU Next, I really have no idea what is responsible for the crash. Maybe it's a change in HyperOS?

[JingMatrix]

Crucial parts of your logs: SQLite not working

[ 2025-09-05T03:42:12.460        0:  1680:  1680 E/SQLiteLog       ] (1) duplicate column name: auto_include in "ALTER TABLE modules ADD COLUMN auto_include BOOLEAN DEFAULT 0 CHECK (auto_include IN (0, 1));"
[ 2025-09-05T03:42:12.461        0:  1680:  1680 E/SQLiteLog       ] (1) no such table: configs in "SELECT `group`, `key`, data FROM configs WHERE module_pkg_name = ? and user_id = ?"

resource not found

[ 2025-09-05T03:42:54.438        0:  1680:  3389 E/LSPosedService  ] performReceive: 
android.content.res.Resources$NotFoundException: Drawable org.lsposed.daemon:drawable/ic_notification with resource ID #0x7f010003
Caused by: java.lang.NullPointerException: Attempt to invoke virtual method 'boolean java.lang.Object.equals(java.lang.Object)' on a null object reference
	at com.mediatek.res.AsyncDrawableCache.putCacheList(AsyncDrawableCache.java:189)
	at com.mediatek.res.ResOptExtImpl.putCacheList(ResOptExtImpl.java:69)
	at android.content.res.ResourcesImpl.cacheDrawable(ResourcesImpl.java:934)
	at android.content.res.ResourcesImpl.loadDrawable(ResourcesImpl.java:870)
	at android.content.res.MiuiResourcesImpl.loadDrawable(MiuiResourcesImpl.java:334)
	at android.content.res.Resources.loadDrawable(Resources.java:1129)
	at android.content.res.Resources.getDrawableForDensity(Resources.java:1117)
	at android.content.res.Resources.getDrawable(Resources.java:1056)
	at org.lsposed.lspd.service.LSPNotificationManager.getBitmap(LSPNotificationManager.java:75)
	at org.lsposed.lspd.service.LSPNotificationManager.getNotificationIcon(LSPNotificationManager.java:94)
	at org.lsposed.lspd.service.LSPNotificationManager.notifyStatusNotification(LSPNotificationManager.java:160)
	at org.lsposed.lspd.service.LSPosedService.dispatchBootCompleted(LSPosedService.java:251)
	at org.lsposed.lspd.service.LSPosedService.$r8$lambda$KgxJH5sDIJjHr5j-GEYAD3BPRzI(Unknown Source:0)
	at org.lsposed.lspd.service.LSPosedService$$ExternalSyntheticLambda4.accept(D8$$SyntheticClass:0)
	at org.lsposed.lspd.service.LSPosedService$1.lambda$performReceive$0(LSPosedService.java:337)
	at org.lsposed.lspd.service.LSPosedService$1$$ExternalSyntheticLambda0.run(D8$$SyntheticClass:0)
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:524)
	at java.util.concurrent.FutureTask.run(FutureTask.java:317)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:651)
	at java.lang.Thread.run(Thread.java:1119)

[Letus252]

Is there a way I can fix it? I don't know much about SQLite. I removed /data/adb/lspd/ updated NeoZygisk to v2.0, and LSPosed to the latest artifact from Actions (7189), but it still broken D: .

LSPosed_2025-09-13T15_17_46.864911.zip

[JingMatrix]

Please detele the /data/adb/lspd directory again, flash and test the latest CI build #236, to see if your issue is fixed.

In any case, upload your logs after testing.

[Letus252]

Please detele the /data/adb/lspd directory again, flash and test the latest CI build #236, to see if your issue is fixed.

In any case, upload your logs after testing.

Thanks for quick reply. I deteled /data/adb/lspd, and flashed latest artifact from sql branch.

LSPosed_2025-09-13T18_06_35.962778.zip

[Letus252]

The most bizzare part is that lsposed was working on my device for few months with magisk. Then I switched to kernelsu, it was still running fine, then to kernelsu next (with gki kernel), and it broke. I wiped my phone, and flashed fresh firmware, installed magisk, but lsposed is still broken. I can't even guess what is the cause - if the kernelsu next or the gki kernel, reflashing the phone should have been the fix...

[Letus252]

Any update? It still doesn't work :( . Logs from latest (11.19) artifact.

LSPosed_2025-11-19T23_46_58.668574.zip

[JingMatrix]

Here is the crucial log:

[ 2025-11-19T23:45:50.075        0:  1837:  2161 I/LSPosedLogcat   ] start running
[ 2025-11-19T23:45:50.077        0:  1837:  1837 D/ThemeCompatibility ] END loading: version=140 size=71
[ 2025-11-19T23:45:50.077        0:  1837:  2161 I/LSPosedLogcat   ] New log file: /data/adb/lspd/log/verbose_2025-11-19T23:45:50.077557.log
[ 2025-11-19T23:45:50.079        0:  1837:  2161 I/LSPosedLogcat   ] New log file: /data/adb/lspd/log/modules_2025-11-19T23:45:50.07896.log
[ 2025-11-19T23:45:50.092        0:  1837:  1837 D/nativeloader    ] Load libjavacrypto.so using APEX ns com_android_conscrypt for caller /apex/com.android.conscrypt/javalib/conscrypt.jar: ok
[ 2025-11-19T23:45:50.119        0:  1837:  1837 W/OverlayConfig   ] partition_order.xml does not exist.
[ 2025-11-19T23:45:50.372        0:  1837:  1837 W/MiuiStubRegistry ] Failed to collect stub providers in com.miui.autoui.MIUIAutoUIStub$$: /system_ext/framework/miui-framework.autoui.jar not exist
[ 2025-11-19T23:45:50.372        0:  1837:  1837 W/MiuiStubRegistry ] Failed to collect stub providers in android.hovermode.MiuiHoverModeStub$$: /system_ext/framework/miui-framework.hovermode.jar not exist
[ 2025-11-19T23:45:50.373        0:  1837:  1837 W/MiuiFrameworkImpl ] MiuiFrameworkImpl already collected
[ 2025-11-19T23:45:50.374        0:  1837:  1837 W/MiuiStubRegistry ] Failed to collect stub providers
java.lang.ClassNotFoundException: android.powerconsumption.MiuiDrawableStub$$
	at java.lang.Class.classForName(Native Method)
	at java.lang.Class.forName(Class.java:597)
	at com.miui.base.MiuiStubRegistry.collectStubProviders(MiuiStubRegistry.java:149)
	at com.miui.base.MiuiStubRegistry.init(MiuiStubRegistry.java:82)
	at com.miui.base.MiuiStubRegistry.init(MiuiStubRegistry.java:56)
	at android.powerconsumption.MiuiDrawableStub.<clinit>(MiuiDrawableStub.java:13)
	at com.miui.base.MiuiFrameworkRouter.init(MiuiFrameworkRouter.java:48)
	at com.miui.base.MiuiStubRegistry.<clinit>(MiuiStubRegistry.java:52)
	at com.miui.base.MiuiStubUtil.getInstance(MiuiStubUtil.java:50)
	at android.content.res.AssetManagerStub.<clinit>(AssetManagerStub.java:12)
	at android.content.res.AssetManager.createSystemAssetsInZygoteLocked(AssetManager.java:291)
	at android.content.res.AssetManager.getSystem(AssetManager.java:312)
	at android.content.res.MiuiResources.<init>(MiuiResources.java:59)
	at android.content.res.IMiuiResourceImpl.createResources(IMiuiResourceImpl.java:15)
	at android.content.res.ThemeManagerStub.createMiuiResources(ThemeManagerStub.java:65)
	at android.content.res.Resources.getSystem(Resources.java:286)
	at android.database.sqlite.SQLiteGlobal.getWALConnectionPoolSize(SQLiteGlobal.java:145)
	at android.database.sqlite.SQLiteConnectionPool.setMaxConnectionPoolSizeLocked(SQLiteConnectionPool.java:1072)
	at android.database.sqlite.SQLiteConnectionPool.<init>(SQLiteConnectionPool.java:181)
	at android.database.sqlite.SQLiteConnectionPool.open(SQLiteConnectionPool.java:213)
	at android.database.sqlite.SQLiteDatabase.openInner(SQLiteDatabase.java:1163)
	at android.database.sqlite.SQLiteDatabase.open(SQLiteDatabase.java:1143)
	at android.database.sqlite.SQLiteDatabase.openDatabase(SQLiteDatabase.java:1007)
	at android.database.sqlite.SQLiteDatabase.openDatabase(SQLiteDatabase.java:996)
	at org.lsposed.lspd.service.ConfigManager.openDb(ConfigManager.java:189)
	at org.lsposed.lspd.service.ConfigManager.<init>(ConfigManager.java:96)
	at org.lsposed.lspd.service.ConfigManager.getInstance(ConfigManager.java:332)
	at org.lsposed.lspd.service.ServiceManager.start(ServiceManager.java:122)
	at org.lsposed.lspd.Main.main(Main.java:8)
	at com.android.internal.os.RuntimeInit.nativeFinishInit(Native Method)
	at com.android.internal.os.RuntimeInit.main(RuntimeInit.java:425)
Caused by: java.lang.ClassNotFoundException: android.powerconsumption.MiuiDrawableStub$$
	... 31 more
[ 2025-11-19T23:45:50.375        0:  1837:  1837 E/BoostFramework  ] BoostFramework() : Exception_1 = java.lang.ClassNotFoundException: com.qualcomm.qti.Performance
[ 2025-11-19T23:45:50.376        0:  1837:  1837 E/BoostFramework  ] BoostFramework() Ux Perf: Exception = java.lang.ClassNotFoundException: com.qualcomm.qti.UxPerformance
[ 2025-11-19T23:45:50.385        0:  1837:  1837 I/AssetManagerImpl  ] Load libmiui_runtime
[ 2025-11-19T23:45:50.386        0:  1837:  1837 D/nativeloader    ] Load libmiui_runtime.so using system ns (caller=/system_ext/framework/miui-framework.jar): ok
[ 2025-11-19T23:45:50.386        0:  1837:  1837 E/lspd            ] register_android_view_SurfaceRuntimeShader  
[ 2025-11-19T23:45:50.386        0:  1837:  1837 E/lspd            ] register_android_view_SurfaceRuntimeShader  0
[ 2025-11-19T23:45:50.454        0:  1837:  2212 I/MessageMonitor  ] Load libmiui_runtime
[ 2025-11-19T23:45:50.475        0:  1837:  1837 I/LSPosedLogcat   ] !!start_watchdog!!
[LogWatchDog started]

The crash seems linked to your OS framework with MIUI modules. There is nothing we can change in the LSPosed part.
I suggest you disabling all modules and test again.