[Bug] Sometimes Zygisk leaks

[mmmpipi]

Steps to reproduce/复现步骤

1.安装以下模块和检测软件（我使用的是Native Detector（com.reveny.nativecheck）
2.多次启停，直到出现检测到zygisk

Expected behaviour/预期行为

不应该检测到zygisk

Actual behaviour/实际行为

检测到zygisk

Root implementation/Root 方案

ResukiSu 4.1.0 83cd225a

System Module List/系统模块列表

Hybrid Mount
Iconify
Intergrity Box
Susfs
TeeSimulator
Zram addon
Vector
NeoZygisk

NeoZygisk version/NeoZygisk 版本

2.3 280-756b7c7-debug

Android version/Android 版本

crdroid 16

Version requirement/版本要求

• I am using the latest debug build from GitHub Actions./我正在使用 GitHub Actions 中最新的调试版本。

Logs/日志

LSPosed_2026-03-07T17_21_13.852494.zip

KernelSU_bugreport_2026-03-07_17_19.tar.gz

[JingMatrix]

I know that this is happening. Is it also happening with other Zygisk implementations?

[mmmpipi]

I know that this is happening. Is it also happening with other Zygisk implementations?我知道这件事正在发生。其他 Zygisk 实现也有类似情况吗？

Rezygisk也会出现，需要我测试Zygisk Next么

[JingMatrix]

Okay, please also test ZygiskNext

[mmmpipi]

Okay, please also test ZygiskNext

Zygisk Next有与Rezygisk相同的现象

[JingMatrix]

If a detection vector is unstable, we'd better ignore it.

[mmmpipi]

If a detection vector is unstable, we'd better ignore it.如果探测向量不稳定，我们最好忽略它。

当我禁用Vector时，似乎无法被探测到Zygisk了，这会是Vector的问题吗

[JingMatrix]

From my experience, this detection is based on the booting time heuristically.
It is less likely to be triggered if you have fewer modules installed, and easily to be triggered in the next boot after installing a new module.

It is not a detection point of my Vector module.

[mmmpipi]

启动需要的时间越短，被发现的可能性就越低？

[JingMatrix]

Not sure about the actual detection mechanism, but it seems to be something similar to the detection described here: JingMatrix/Vector@0e457e3

[mmmpipi]

使用另一个检测软件，提供了更详细的检测描述：发现su list，这对该问题有帮助吗

[JingMatrix]

是 #119 这个吗？

[mmmpipi]

是 #119 这个吗？

不，不是这个
此检测似乎为侧信道检测