Isolated processes being killed

[yujincheng08]

Describe the bug Isolated processes of applications being killed

Check required kernel modules

• grep binder /proc/filesystems:

nodev binder

• grep ashmem /proc/misc

58 ashmem

Host info

• uname -a

Linux VM-96-16-ubuntu 5.4.0-104-generic #118-Ubuntu SMP Wed Mar 2 19:03:41 UTC 2022 aarch64 aarch64 aarch64 GNU/Linux

• lscpu

Architecture: aarch64 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 2 On-line CPU(s) list: 0,1 Thread(s) per core: 1 Core(s) per socket: 1 Socket(s): 2 NUMA node(s): 2 Vendor ID: ARM Model: 1 Model name: Neoverse-N1 Stepping: r3p1 BogoMIPS: 50.00 L1d cache: 128 KiB L1i cache: 128 KiB L2 cache: 1 MiB L3 cache: 64 MiB NUMA node0 CPU(s): 0 NUMA node1 CPU(s): 1 Vulnerability Itlb multihit: Not affected Vulnerability L1tf: Not affected Vulnerability Mds: Not affected Vulnerability Meltdown: Not affected Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl Vulnerability Spectre v1: Mitigation; __user pointer sanitization Vulnerability Spectre v2: Mitigation; CSV2, BHB Vulnerability Srbds: Not affected Vulnerability Tsx async abort: Not affected Flags: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm lrcpc dcpop asimddp ssbs

• ls -al /dev/dri/ && cat /sys/kernel/debug/dri/*/name

total 0 drwxr-xr-x 3 root root 100 May 25 11:59 . drwxr-xr-x 18 root root 4020 May 25 12:12 .. drwxr-xr-x 2 root root 80 May 25 11:59 by-path crw-rw---- 1 root video 226, 0 May 25 11:59 card0 crw-rw---- 1 root render 226, 128 May 25 11:59 renderD128 virtio_gpu dev=virtio3 unique=pci:0000:05:00.0 virtio_gpu dev=virtio3 unique=pci:0000:05:00.0

• docker info

Client: Context: default Debug Mode: false Plugins: app: Docker App (Docker Inc., v0.9.1-beta3) buildx: Docker Buildx (Docker Inc., v0.8.2-docker) compose: Docker Compose (Docker Inc., v2.5.0)

Server: Containers: 1 Running: 1 Paused: 0 Stopped: 0 Images: 1 Server Version: 20.10.16 Storage Driver: overlay2 Backing Filesystem: extfs Supports d_type: true Native Overlay Diff: true userxattr: false Logging Driver: json-file Cgroup Driver: cgroupfs Cgroup Version: 1 Plugins: Volume: local Network: bridge host ipvlan macvlan null overlay Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog Swarm: inactive Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc Default Runtime: runc Init Binary: docker-init containerd version: 212e8b6fa2f44b9c21b2798135fc6fb7c53efc16 runc version: v1.1.1-0-g52de29d init version: de40ad0 Security Options: apparmor seccomp Profile: default Kernel Version: 5.4.0-104-generic Operating System: Ubuntu 20.04.2 LTS OSType: linux Architecture: aarch64 CPUs: 2 Total Memory: 1.93GiB Name: VM-96-16-ubuntu ID: KF2N:SO2C:ST5F:PFT4:ZFSP:ANLU:VMPF:KN7M:KVBV:FNKY:5NSM:PHUJ Docker Root Dir: /var/lib/docker Debug Mode: false Registry: https://index.docker.io/v1/ Labels: Experimental: false Insecure Registries: 127.0.0.0/8 Live Restore Enabled: false

WARNING: No swap limit support

• dmesg -T (suggest put into a text file) dmesg.txt

Container info

• running command: docker run ...

docker run -itd --rm --privileged --pull always -v ~/data:/data --name redroid12 -p 5555:5555 -p 5900:5900 redroid/redroid:12.0.0-arm64 redroid.vncserver=1 redroid.gpu.mode=guest

• docker exec <container> ps -A

LABEL USER PID PPID VSZ RSS WCHAN ADDR S NAME unconfined root 1 0 10848444 7408 ep_poll 0 S init unconfined root 8 1 10786872 4396 do_sys_poll 0 S init unconfined root 10 1 10870056 4544 do_sys_poll 0 S ueventd unconfined logd 24 1 10962380 5856 sigsuspend 0 S logd unconfined lmkd 25 1 10823312 2460 ep_poll 0 S lmkd unconfined system 26 1 10813604 4948 ep_poll 0 S servicemanager unconfined system 27 1 10823544 6008 ep_poll 0 S hwservicemanager unconfined shell 28 1 10787080 3080 wait_woken 0 S sh unconfined root 29 1 10900720 6700 binder_thread_read 0 S vold unconfined system 37 1 10853612 5124 binder_thread_read 0 S [email protected] unconfined keystore 38 1 10930744 11708 binder_thread_read 0 S keystore2 unconfined nobody 41 1 10863944 6556 binder_thread_read 0 S [email protected] unconfined tombstoned 51 1 10781256 2140 ep_poll 0 S tombstoned unconfined system 71 1 10821120 4312 binder_thread_read 0 S [email protected] unconfined audioserver 72 1 32184 4256 binder_thread_read 0 S android.hardware.audio.service unconfined media 73 1 22096 3340 binder_thread_read 0 S [email protected] unconfined system 74 1 10849672 4456 binder_thread_read 0 S [email protected] unconfined system 75 1 10880720 5036 binder_thread_read 0 S [email protected] unconfined system 76 1 10959540 9512 binder_thread_read 0 S [email protected] unconfined system 77 1 10890020 4896 ep_poll 0 S [email protected] unconfined wifi 78 1 10901320 5012 binder_thread_read 0 S [email protected] unconfined nobody 80 1 10919620 4564 binder_thread_read 0 S android.hardware.power-service.example unconfined audioserver 81 1 11272084 18472 binder_thread_read 0 S audioserver unconfined credstore 82 1 10873664 4996 binder_thread_read 0 S credstore unconfined gpu_service 83 1 10901840 6368 binder_thread_read 0 S gpuservice unconfined system 87 1 11649244 87500 ep_poll 0 S surfaceflinger unconfined root 95 1 11288372 72156 futex_wait_queue_me 0 S vncserver unconfined shell 106 1 11086948 7992 ep_poll 0 S adbd unconfined nobody 108 1 10868376 3080 do_sys_poll 0 S traced_probes unconfined nobody 110 1 10801924 3448 do_sys_poll 0 S traced unconfined root 113 1 14684136 144348 do_sys_poll 0 S zygote64 unconfined root 114 1 1779400 106256 do_sys_poll 0 S zygote unconfined cameraserver 116 1 11185524 18704 binder_thread_read 0 S cameraserver unconfined incidentd 124 1 10875300 4696 ep_poll 0 S incidentd unconfined root 128 1 10879668 5260 binder_thread_read 0 S installd unconfined mediaex 139 1 11272320 23672 binder_thread_read 0 S media.extractor unconfined media 140 1 10929168 6760 binder_thread_read 0 S media.metrics unconfined media 141 1 87316 14292 binder_thread_read 0 S mediaserver unconfined root 146 1 11077784 8240 binder_thread_read 0 S netd unconfined root 147 1 10915416 4856 binder_thread_read 0 S storaged unconfined wifi 148 1 10977628 5488 ep_poll 0 S wificond unconfined mediacodec 149 1 64020 10076 binder_thread_read 0 S media.codec unconfined radio 150 1 10836704 4188 hrtimer_nanosleep 0 S rild unconfined mediacodec 153 1 11215432 14260 binder_thread_read 0 S media.swcodec unconfined statsd 154 1 10927640 4808 ep_poll 0 S statsd unconfined mdnsr 155 1 8674092 876 do_select 0 S mdnsd unconfined system 157 1 10807888 5596 binder_thread_read 0 S gatekeeperd unconfined llkd 160 1 10800160 3540 hrtimer_nanosleep 0 S llkd unconfined root 163 146 10822460 2068 pipe_wait 0 S iptables-restore unconfined root 164 146 10783548 2032 pipe_wait 0 S ip6tables-restore unconfined system 347 113 17961376 298392 ep_poll 0 S system_server unconfined u0_a62 507 113 15330828 281348 ep_poll 0 S com.android.systemui unconfined network_stack 627 113 14615672 125808 ep_poll 0 S com.android.networkstack.process unconfined webview_zygote 674 114 1719616 67376 do_sys_poll 0 S webview_zygote unconfined secure_element 686 113 14474196 84100 ep_poll 0 S com.android.se unconfined radio 703 113 14731628 120136 ep_poll 0 S com.android.phone unconfined u0_a59 752 113 15133888 279500 ep_poll 0 S com.android.launcher3 unconfined u0_a63 903 113 14437712 82996 ep_poll 0 S com.android.smspush unconfined u0_a57 972 113 14604132 104208 ep_poll 0 S com.android.inputmethod.latin unconfined u0_a69 973 113 14491228 86108 ep_poll 0 S android.ext.services unconfined u0_a68 1056 113 14669504 138796 ep_poll 0 S com.android.providers.media.module unconfined u0_a27 1170 113 14426368 84756 ep_poll 0 S com.android.managedprovisioning unconfined u0_a15 1452 113 14423184 83336 ep_poll 0 S com.android.packageinstaller unconfined shell 1491 113 14438080 80968 ep_poll 0 S com.android.shell unconfined u0_a16 1506 113 14474812 87924 ep_poll 0 S com.android.statementservice unconfined shell 1614 106 10799860 2548 __skb_wait_for_more_packets 0 S logcat unconfined shell 1992 106 10869052 3864 unix_stream_read_generic 0 S abb unconfined root 2896 0 10840968 3184 0 0 R ps

• docker exec <container> logcat -d (suggest put into a text file) logcat.txt

[zhouziyang]

you are reporting io.github.vvb2060.mahoshojo cannot run, right? it seems a penetration related tools, maybe not work as expected.

[yujincheng08]

Not a penetration tool. It's an environment test tool.