Startup failed: ... is usually only the outer message. The actual cause follows the colon or appears in the last core| entry in the startup log.
Export startup logs
mihomo configuration documentation
Submit an issue
Start with these four steps
Record the exact error
parse source yaml:, rules[n], and proxy [...] not found.Temporarily disable overrides
Distinguish the runtime mode
VPN Service first. If only Root Tun / TPROXY fails, check Root authorization, SELinux, routing, and iptables.Export logs
core.log.Configuration and core errors
The errors below come from the current Rust configuration compiler, Android startup path, and mihomo core. Names and indexes vary with the configuration.parse source yaml / yaml: unmarshal errors
parse source yaml / yaml: unmarshal errors
- Open the source configuration and enabled overrides in the app editor, then fix the reported line and column.
- Confirm that the top level is a YAML object, not an array or a single string.
- Disable all overrides and try again to determine whether the error comes from the subscription or an override.
compiled root config must be an object
compiled root config must be an object
- item, or when a JavaScript override returns an array, string, or null.The top level of the YAML should look like this:main(profile) must return an object or a Promise that resolves to an object.rules[n] ... format invalid
rules[n] ... format invalid
n is missing a type, match value, or target policy group. Use the complete rule in the error to check the number and order of commas.proxy [name] not found
proxy [name] not found
dialer-proxy, or tunnel references a proxy or policy group that does not exist. Names are case-sensitive and must exactly match proxies[].name or proxy-groups[].name.If an override adds the name, check the order in which overrides are applied. When deleting a policy group, also update every rule that references it.rule set [name] not found
rule set [name] not found
Policy group format error / unsupported type / use or proxies missing
Policy group format error / unsupported type / use or proxies missing
name or type, uses a type unsupported by the current core, or has no proxy source.select, url-test, fallback, or load-balance.Age decryption failed
Age decryption failed
- Use a private key/identity, not a recipient public key.
- Put each key on a separate line and remove leading or trailing spaces.
- Import the configuration again and provide the key; renaming an existing configuration does not add a missing key.
- Never post the private key in an issue, group chat, or screenshot.
HTTP 401 / 403 / 404 / 5xx
HTTP 401 / 403 / 404 / 5xx
401/403 usually indicates a token, User-Agent, or access-policy problem. 404 usually indicates an invalid path. 5xx indicates a temporary server-side failure.Provider download failed / external proxies are empty
Provider download failed / external proxies are empty
proxy-providers and rule-providers during import. The core also fetches missing resources after it starts. If a download fails, check the following fields:http.Compiled provider path escaped profile scope
Compiled provider path escaped profile scope
path escaped the current configuration’s private providers/rules or providers/proxies directory. This check prevents different subscriptions from overwriting each other’s resources.Remove absolute paths, ../, legacy ./ruleset/ paths, and paths containing /clash/ from overrides. Let YumeBox generate an isolated path from the provider name.unsupported override extension / override execution failed
unsupported override extension / override execution failed
.yaml, .yml, and .js.main(profile) and return an object; an asynchronous function must resolve within a finite time. See the YAML API and JavaScript API for syntax details.mihomo: parse compiled config
mihomo: parse compiled config
VPN, Root, and startup errors
VPN permission denied / Establish VPN rejected by system
VPN permission denied / Establish VPN rejected by system
- Accept the system VPN permission dialog.
- Stop other VPNs, work-profile VPNs, or always-on VPNs.
- Revoke YumeBox’s VPN permission in system settings, then grant it again.
- If the device vendor restricts background startup, allow YumeBox to run in the background.
root core launch failed
root core launch failed
Tun and TPROXY runtime modes require a working su. Confirm that the Root manager has authorized the currently installed package and that permission is not set to “Only once.” After an update or signing-key change, the Root manager may treat the app as a new client and require authorization again.permission denied / operation not permitted
permission denied / operation not permitted
- Under
VPN Service: check system VPN permission and vendor background restrictions. - Under Root
Tun: checksuauthorization, SELinux policy, and/dev/net/tun. - Under
TPROXY: confirm that the kernel supports TPROXY and the system has the relevant iptables modules. - Only with a self-built APK: confirm that all four native files for the target ABI were packaged.
runtime activation timed out / startup remains in progress
runtime activation timed out / startup remains in progress
VPN Service. If it still fails, export logs immediately. Do not tap the start button repeatedly in quick succession, because that makes stale state harder to diagnose.Common symptoms
The configuration imported successfully, but the policy group has no proxies
The configuration imported successfully, but the policy group has no proxies
- Inline proxies belong in top-level
proxies. - External proxies belong in
proxy-providersand must be referenced through a policy group’susefield. - Provider names are case-sensitive.
- If the provider download failed, check the URL, headers, file format, and current network.
The proxy protocol is shown as Unknown
The proxy protocol is shown as Unknown
/providers/proxies, while ordinary proxies come from /proxies. Confirm that the core is running and the provider loaded successfully, then refresh the Proxies page.If only a new protocol is shown as Unknown, record the type returned by /providers/proxies or export logs, then submit an issue with the YumeBox and core versions. Do not include proxy credentials.What is the difference between external and builtin Geo?
What is the difference between external and builtin Geo?
external APK does not contain Geo data. It is smaller but depends on the network during first use. A builtin APK contains GeoIP, GeoSite, ASN, and BundleMRS data. It is larger but does not require an initial download. Both use the same app features and core code.How do I submit an actionable issue report?
How do I submit an actionable issue report?
