[Fire HD 8 and HD 10 General] beyawh:
Hey, how did you get past this error? Looks like I am stuck at the same exact spot :( . See full output below:

./Matrix /data/local/tmp 2

<WSRoot><Command>0</Command></WSRoot>

<WSRoot><InitResource>0</InitResource></WSRoot>

Decrypt Success: /data/local/tmp/fileWork

Output File Name: /data/local/tmp/fileWork.

<WSRoot><Decrypt>0</Decrypt></WSRoot>

extracting: /data/local/tmp/Bridge_wsroot.sh

extracting: /data/local/tmp/krdirtyCow32

extracting: /data/local/tmp/krdirtyCow64

extracting: /data/local/tmp/libsupol.so

extracting: /data/local/tmp/my.sh

extracting: /data/local/tmp/mysupolicy

extracting: /data/local/tmp/patch_script.sh

extracting: /data/local/tmp/root3

<WSRoot><Decompression>0</Decompression></WSRoot>

execute string: /data/local/tmp/root3 /data/local/tmp/ 2

WARNING: linker: /data/local/tmp/root3: unused DT entry: type 0x6ffffffe arg 0x600

WARNING: linker: /data/local/tmp/root3: unused DT entry: type 0x6fffffff arg 0x1

ro.build.version.sdk :22

ro.product.cpu.abi :arm64-v8a

is x64

execute string: /data/local/tmp/krdirtyCow64 /data/local/tmp/ 2

WARNING: linker: /data/local/tmp/krdirtyCow64: unused DT entry: type 0x6ffffffe arg 0xd30

WARNING: linker: /data/local/tmp/krdirtyCow64: unused DT entry: type 0x6fffffff arg 0x1

path : /data/local/tmp/

path : /data/local/tmp

[*] path_script:/data/local/tmp/patch_script.sh /data/local/tmp

rm: /data/local/tmp/sepolicy: No such file or directory

rm: /data/local/tmp/load: No such file or directory

supolicy v2.76 (ndk:armeabi) - Copyright (C) 2014-2016 - Chainfire

Patching policy [/data/local/tmp/sepolicy] --> [/data/local/tmp/load] ...

-permissive:zygote=ok

-permissive:kernel=ok

-permissive:init=ok

-permissive:su=ok

-permissive:init_shell=ok

-permissive:shell=ok

-permissive:servicemanager=ok

- Success

find_opcode offset:2d0 opcode:aaffbbee

find ok star:7f9ffc2008 end:7f9ffc22d8 size:2d0

sh : /data/local/tmp/my.sh /data/local/tmp 2 fwrite is count 213278 /data/local/tmp/load1

fwrite is count 54816 /data/local/tmp/load2

find_opcode offset:2b4 opcode:eaeaeaea

find_opcode offset:2b8 opcode:ebebebeb

find_opcode offset:22d opcode:abababab

load = 4173e load1 = 3411e load2 = d620

find_opcode offset:2b0 opcode:efefefef

find_opcode offset:24d opcode:cdcdcdcd

find_opcode offset:2bc opcode:acacacac

init_shellcode

loadsize:268094

loadpath:/data/local/tmp/load

shpath:/data/local/tmp/my.sh /data/local/tmp 2

shpath:2bc

open /proc

PID:205

find logd pid : cd

_inject_start_s:0x7f9ffc2008

Copying /sepolicy to /data/local/tmp/cp_sepolicy

cow_exploit_mv_file_init: Overriding /sepolicy from /data/local/tmp/load1

size: 213278

[*] mmap 0x7f9fdb3000;

[*] exploit (patch)

[*] currently 0x7f9fdb3000=8f97cff8c

sched_setaffinity: Function not implemented[*] madvise = 0x7f9fdb3000 213278

checking the patch ... exploit

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

check done

sched_setaffinity: Function not implementedmadviseThread() done

procselfmemThread() done

[*] exploited 0x7f9fdb3000=f97cff8c

[main]p_vdso_addr:0x7f9ffc0000 p_vdso_buffer:0x400000

[*]set_ret_jmp

[*]set_ret_jmp 400410

[*]set_ret_jmp 400420

[main] write 1

Parent is over..status == 0

socket: No such file or directory

socket = 7

ret = ffffffff

connect

: No such file or directory

ret = ffffffff

find coe f

[main] write 2

Parent is over..status == 0

cow_exploit_mv_file_init: Overriding /sepolicy from /data/local/tmp/load2

warning: new file size (54816) and file old size (213278) differ

size: 54816

[*] mmap 0x7f9ff9a000;

[*] exploit (patch)

[*] currently 0x7f9ff9a000=8f97cff8c

sched_setaffinity: Function not implemented[*] madvise = 0x7f9ff9a000 54816

checking the patch ... exploit

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

exit fork(), loop time more then 30s

<WSRoot><Exploit>0x00000332</Exploit></WSRoot>

check done

sched_setaffinity: Function not implemented<WSRoot><Exploit>0x00000382</Exploit></WSRoot>

FAIL : load2 --> /sepolicy

<WSRoot><Exploit>0x00000342</Exploit></WSRoot>

<WSRoot><Exploit>0x00000881</Exploit></WSRoot>

<WSRoot><Done>0x00000172</Done></WSRoot>