[Bug] system freezes with repeated native crashes (lmkd SIGSEGV, commcenterd SIGABRT) on Android 16

Steps to reproduce/复现步骤

Steps to reproduce:

1. OnePlus 8T (KB2001IN), rooted: KernelSU (SukiSU ultra) + NeoZygisk + Vector.
2. Enable Vector and the installed Xposed modules (Oxygen Customizer nightly, CorePatch, disableflagsecure).
3. Use the device normally (open apps, USB, browsing). After a while the UI starts freezing /
   apps become "Not Responding" for ~15s, recurring throughout the day.
4. Attached Vector log zip contains many same-day ANRs for system_server plus repeated native
   daemon crashes.

Expected behaviour:
System stays stable. No native daemon crashes and no UI freezes with the installed module set.

Actual behaviour:
Repeated native SIGSEGV/SIGABRT crashes causing UI freezes and ANRs:

• /system/bin/lmkd : SIGSEGV (SEGV_MAPERR) on its HwBinder thread. Recurring multiple times on
  2026-08-17 (13:09, 15:02, 23:28, 23:40). Crash frame is unmapped ; the crashed
  thread's IPC buffer contains "Status(EX_TRANSACTION_FAILED): DEAD_OBJECT".
• /odm/bin/commcenterd : SIGABRT + SIGSEGV, also recurring (e.g. 2026-08-17 23:42).
• zygote64 : SIGSEGV (SEGV_ACCERR) - tombstone_00.
• android.hardware.usb@1.2-service-qti : SIGABRT (2026-08-14) - USB HAL crash.
  Result: system_server ANRs (9 on 2026-08-17, mostly "Blocked in handler on main thread for 15s"),
  UI freezes, unresponsive apps. Freeze recurred at 23:52 and 23:55 while capturing these logs.

Xposed Module List:

it.dhd.oxygencustomizer  (Oxygen Customizer nightly-206 #1977)
org.lsposed.corepatch
io.github.lsposed.disableflagsecure
Root implementation:
KernelSU (SukiSU ultra, package com.sukisu.ultra); root daemon also crashed with SIGABRT.
Installed via OrangeFox R12.1 recovery.
System Module List:
zygisk_vector    Vector v2.2 (3097-35b510cb-JingMatrix-Vector)
zygisksu         NeoZygisk v2.4 (290-c1b5e42-release)
OxygenCustomizer 0.0.60
playintegrityfix v4.7-1-inject-s
specter          1.4.4-17-g7d4ad6a
teesim           v4.0
Re-Malwack       v8.2-test (disabled: modules/Re-Malwack/disable)
Vector version:
v2.2 (3097-35b510cb-JingMatrix-Vector)
Android version:
Android 16 (SDK 36), security patch 2026-07-01
OnePlus 8T stock-based ColorOS/Oxygen android16 image
ro.build.fingerprint: OnePlus/KB2001IN/OnePlus8T:16/TP1A.220905.001/U.R4T3.e84bcb_160c4b6_160c4a0:user/release-keys
Version requirement:
- I am using the latest debug build from GitHub Actions (https://github.com/JingMatrix/Vector/actions?query=branch%3Amaster).
Logs:
Attached: Vector-logs-release-20260817-234739 (2).zip
(Newer capture at 23:54:38; includes the two most recent ANRs.)



[Vector-logs-release-20260817-234739 (2).zip](https://github.com/user-attachments/files/31150708/Vector-logs-release-20260817-234739.2.zip)

### Expected behaviour/预期行为

System stays stable. No native daemon crashes and no UI freezes with the installed module set.

### Actual behaviour/实际行为

Repeated native SIGSEGV/SIGABRT crashes causing UI freezes and ANRs:

- `/system/bin/lmkd`: SIGSEGV (SEGV_MAPERR) on its HwBinder thread, recurring multiple times on 2026-08-17 (13:09, 15:02, 23:28, 23:40). Crash frame unmapped `<unknown>`; IPC buffer contains `Status(EX_TRANSACTION_FAILED): DEAD_OBJECT`.
- `/odm/bin/commcenterd`: SIGABRT + SIGSEGV, recurring (e.g. 2026-08-17 23:42).
- `zygote64`: SIGSEGV (SEGV_ACCERR) — tombstone_00.
- `android.hardware.usb@1.2-service-qti`: SIGABRT (2026-08-14) — USB HAL.

Result: 9× system_server ANRs on 2026-08-17 ("Blocked in handler on main thread for 15s"), UI freezes, unresponsive apps. Freeze recurred at 23:52 and 23:55 while capturing these logs.

### Xposed Module List/Xposed 模块列表

```shell
it.dhd.oxygencustomizer  (Oxygen Customizer nightly-206 #1977)
org.lsposed.corepatch
io.github.lsposed.disableflagsecure

Root implementation/Root 方案

KernelSU (SukiSU ultra, package com.sukisu.ultra); root daemon also crashed with SIGABRT. Installed via OrangeFox R12.1 recovery.

System Module List/系统模块列表

zygisk_vector    Vector v2.2 (3097-35b510cb-JingMatrix-Vector)
zygisksu         NeoZygisk v2.4 (290-c1b5e42-release)
OxygenCustomizer 0.0.60
playintegrityfix v4.7-1-inject-s
specter          1.4.4-17-g7d4ad6a
teesim           v4.0
Re-Malwack       v8.2-test (disabled)

Vector version/Vector 版本

v2.2 (3097-35b510cb-JingMatrix-Vector)

Android version/Android 版本

Android 16 (SDK 36), security patch 2026-07-01 OnePlus 8T stock-based ColorOS/Oxygen android16 image ro.build.fingerprint: OnePlus/KB2001IN/OnePlus8T:16/TP1A.220905.001/U.R4T3.e84bcb_160c4b6_160c4a0:user/release-keys

Version requirement/版本要求

• I am using the latest debug build from GitHub Actions./我正在使用 GitHub Actions 中最新的调试版本。

Logs/日志

Vector-logs-release-20260817-234739 (2).zip

Start by examining the attached Vector log archives and the reported lmkd, commcenterd, zygote64, USB HAL, and root-daemon crashes. Reproduce with the listed Android 16 device and modules, then isolate whether Vector is involved by disabling modules one at a time. Done means identifying a reproducible Vector-related cause and a validated fix or clear evidence that the crashes are external.