AIDL methods use codes 1..0x00ffffff. System transactions like PING_TRANSACTION (0x5f4e4750) fall above that range. Intercepting pings forces a full JNI round-trip to Java and back, adding enough latency for timing detectors to flag the ratio (3.85x vs 3.0x threshold). Early-return for codes above LAST_CALL_TRANSACTION eliminates this overhead while preserving all AIDL interception.