After setting SELinux to permissive mode, I clicked the Jailbreak button in KernelSU; a few seconds later, the phone froze and automatically rebooted.
> fastboot oem set-gpu-preemption 0 androidboot.selinux=permissive
OKAY [ 0.001s]
Finished. Total time: 0.001s
> fastboot reboot
Jailbreak successfully.
05-15 21:19:40.795 2944 3543 D InputDispatcher: [MotionEvent] publisher action=0x0, deviceId=3, channel 29dacf6 me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity (server)
05-15 21:19:40.859 5814 7802 W ric.quicksearch: ApkAssets: Deleting an ApkAssets object '<empty> and /data/app/~~K13HH8Fzxkddezbbzx0oGg==/me.weishu.kernelsu-4SEXgROK1sI01pBkU-dSeg==/base.apk' with 1 weak references
05-15 21:19:40.867 2944 3543 D InputDispatcher: [MotionEvent] publisher action=0x1, deviceId=3, channel 29dacf6 me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity (server)
05-15 21:19:40.869 2944 3778 I AMS.Freeze: takeoutByProcessLocked name:me.weishu.kernelsu:me.weishu.kernelsu.magica.MagicaService uid:90000, at removeProcessNameLocked
05-15 21:19:40.883 9703 9703 E kernelsu_zygote: Unknown bits set in runtime_flags: 0x4000000
05-15 21:19:40.884 6614 6614 D WindowOnBackDispatcher: App: me.weishu.kernelsu requestsPredictiveBack=false
05-15 21:19:40.884 9703 9703 I kernelsu_zygote: Using CollectorTypeCMC GC.
05-15 21:19:40.884 6614 6614 D WindowOnBackDispatcher: App: me.weishu.kernelsu requestsPredictiveBack=false
05-15 21:19:40.885 2944 5906 I SmartScenes: updateFocusWindow from me.weishu.kernelsu
05-15 21:19:40.886 6614 6614 D OnBackInvokedDispatcher: ViewRootImpl.registerBackCallbackOnWindow. Dispatcher:android.window.WindowOnBackInvokedDispatcher@739f87 Package:me.weishu.kernelsu IWindow:android.view.ViewRootImpl$W@5403eb4 Session:android.view.IWindowSession$Stub$Proxy@aca72a2
05-15 21:19:40.888 6614 6614 D WindowOnBackDispatcher: App: me.weishu.kernelsu requestsPredictiveBack=false
05-15 21:19:40.888 6614 6614 D WindowOnBackDispatcher: App: me.weishu.kernelsu requestsPredictiveBack=false
05-15 21:19:40.889 2944 3778 I WindowManager: Relayout Window{1c5ef77 u0 me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity}: oldVis=0 newVis=0. java.lang.RuntimeException
05-15 21:19:40.890 6614 6614 I ExtViewRootImplImpl: setScaleInfo, ViewRootImpl[me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity] scaleChanged=true(from 1.0 to 1.0), byServer=false, isHwui=true, isHwuiChanged=true
05-15 21:19:40.890 6614 9713 D weishu.kernelsu: setSvpTask pid 0 tid 9713 pri 8 packageName NULL fg 0 startType 0
05-15 21:19:40.885 6614 6614 I RenderThread: type=1400 audit(0.0:7666): avc: denied { sendto } for path="/dev/socket/syseventsw" scontext=u:r:untrusted_app:s0:c198,c256,c512,c768 tcontext=u:r:event_trackerd:s0 tclass=unix_dgram_socket permissive=1 app=me.weishu.kernelsu
05-15 21:19:40.891 2944 6800 D CoreBackPreview: Window{1c5ef77 u0 me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity}: Setting back callback OnBackInvokedCallbackInfo{mCallback=android.window.IOnBackInvokedCallback$Stub$Proxy@f4a7849, mPriority=0, mIsAnimationCallback=false}
05-15 21:19:40.891 2944 3778 D WindowManager: updateResolutionScaleToServer window=Window{1c5ef77 u0 me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity}
05-15 21:19:40.892 6614 6614 I ExtViewRootImplImpl: setScaleInfo, ViewRootImpl[me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity] scaleChanged=false, byServer=false, isHwui=true, isHwuiChanged=false
05-15 21:19:40.893 2944 3107 I WindowManager: window first visible. w=Window{1c5ef77 u0 me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity} uid=10198 freeze=false
05-15 21:19:40.893 2944 5906 I WindowManager: Relayout Window{1c5ef77 u0 me.weishu.kernelsu/me.weishu.kernelsu.ui.MainActivity}: oldVis=0 newVis=0. java.lang.RuntimeException
05-15 21:19:40.905 6614 6614 V InputMethodManager: checkFocus: view=com.android.internal.policy.DecorView{ccf49f9 V.E...... R....... 0,0-1264,2800 aid=0}[MainActivity] next=com.android.internal.policy.DecorView{21a436b V.E...... R....... 0,0-1264,2800}[MainActivity] force=false package=me.weishu.kernelsu
05-15 21:19:40.906 2944 3551 I ImeTracker: me.weishu.kernelsu:49caa526: onRequestHide at ORIGIN_SERVER reason HIDE_UNSPECIFIED_WINDOW fromUser false
05-15 21:19:40.906 2944 3551 I ImeTracker: me.weishu.kernelsu:49caa526: onCancelled at PHASE_SERVER_SHOULD_HIDE
05-15 21:19:40.908 6545 6545 D InlineSuggestionSessionController: notifyOnStartInput: me.weishu.kernelsu, 0
05-15 21:19:40.908 6545 7103 I ImeService: onStartInput. packageName is me.weishu.kernelsu, restarting:false
05-15 21:19:40.934 9703 9703 I AppZygoteInit: Beginning application preload for me.weishu.kernelsu
05-15 21:19:40.935 9703 9703 D nativeloader: Configuring clns-7 for other apk /data/app/~~K13HH8Fzxkddezbbzx0oGg==/me.weishu.kernelsu-4SEXgROK1sI01pBkU-dSeg==/base.apk. target_sdk_version=36, uses_libraries=, library_path=/data/app/~~K13HH8Fzxkddezbbzx0oGg==/me.weishu.kernelsu-4SEXgROK1sI01pBkU-dSeg==/lib/arm64:/data/app/~~K13HH8Fzxkddezbbzx0oGg==/me.weishu.kernelsu-4SEXgROK1sI01pBkU-dSeg==/base.apk!/lib/arm64-v8a, permitted_path=/data:/mnt/expand
05-15 21:19:40.936 9703 9703 D nativeloader: Load /data/app/~~K13HH8Fzxkddezbbzx0oGg==/me.weishu.kernelsu-4SEXgROK1sI01pBkU-dSeg==/lib/arm64/libkernelsu.so using ns clns-7 from class loader (caller=/data/app/~~K13HH8Fzxkddezbbzx0oGg==/me.weishu.kernelsu-4SEXgROK1sI01pBkU-dSeg==/base.apk): ok
05-15 21:19:40.936 9703 9703 D KernelSUMagica: executing magica ...
05-15 21:19:40.941 9717 9717 I kernelsu_zygote: type=1400 audit(0.0:7667): avc: denied { execute_no_trans } for path="/data/app/~~K13HH8Fzxkddezbbzx0oGg==/me.weishu.kernelsu-4SEXgROK1sI01pBkU-dSeg==/lib/arm64/libksud.so" dev="dm-68" ino=34653 scontext=u:r:app_zygote:s0:c512,c768 tcontext=u:object_r:apk_data_file:s0 tclass=file permissive=1
05-15 21:19:40.955 9717 9717 I KernelSU: ksud::cli: command: LateLoad { magica: Some(5555), post_magica: false, kmi: None, package_name: "me.weishu.kernelsu" }
05-15 21:19:40.956 9717 9717 I KernelSU: ksud::magica: ro.debuggable context: u:object_r:userdebug_or_eng_prop:s0
05-15 21:19:40.956 9717 9717 I KernelSU: ksud::magica: ro.adb.secure context: u:object_r:build_prop:s0
05-15 21:19:40.956 9717 9717 I KernelSU: ksud::magica: Executing: chmod 0644 /dev/__properties__/properties_serial
05-15 21:19:40.956 9703 9703 W kernelsu_zygote: Waiting for a thread to finish unregistering
05-15 21:19:40.961 9717 9717 I KernelSU: ksud::magica: Executing: chmod 0644 /dev/__properties__/u:object_r:userdebug_or_eng_prop:s0
05-15 21:19:40.965 9717 9717 I KernelSU: ksud::magica: Executing: chmod 0644 /dev/__properties__/u:object_r:build_prop:s0
05-15 21:19:40.969 2944 3136 I ActivityManager: Start proc 9720:me.weishu.kernelsu:me.weishu.kernelsu.magica.MagicaService/u0ai0 for {me.weishu.kernelsu/me.weishu.kernelsu.magica.MagicaService}
05-15 21:19:40.970 9717 9717 I KernelSU: ksud::magica: Executing: resetprop -n ro.debuggable 1
05-15 21:19:40.970 9717 9717 I KernelSU: ksud::magica: Executing: resetprop -n ro.adb.secure 0
05-15 21:19:40.970 9717 9717 I KernelSU: ksud::magica: Executing: chmod 0444 /dev/__properties__/properties_serial
05-15 21:19:40.975 9720 9720 D ARTLockMonitor: me.weishu.kernelsu:me.weishu.kernelsu.magica.MagicaService: isSystemApp=false
05-15 21:19:40.977 9717 9717 I KernelSU: ksud::magica: Executing: chmod 0444 /dev/__properties__/u:object_r:userdebug_or_eng_prop:s0
05-15 21:19:40.983 9717 9717 I KernelSU: ksud::magica: Executing: chmod 0444 /dev/__properties__/u:object_r:build_prop:s0
05-15 21:19:40.987 9717 9717 I KernelSU: ksud::magica: Executing: setprop service.adb.root 1
05-15 21:19:40.990 9717 9717 I KernelSU: ksud::magica: Executing: setprop service.adb.tcp.port 5555
05-15 21:19:40.993 9717 9717 I KernelSU: ksud::magica: Executing: setprop ctl.restart adbd
Please check before submitting an issue
Describe the bug
After setting SELinux to permissive mode, I clicked the Jailbreak button in KernelSU; a few seconds later, the phone froze and automatically rebooted.
To Reproduce
Expected behavior
Jailbreak successfully.
Screenshots
Logs
Device info
6.6.56-android15-8-gd424c3cf0f45-ab22-4k kleaf@build-host #1 Wed Nov 19 08:12:24 UTC 2025Additional context
The complete log is as follows:
doubao_kernelsu.log