It says SIGSYS, which means a system call trapped by seccomp. Can you
get a coredump
and run gdb on it and get me a backtrace :) Or guess from the lists:
https://people.debian.org/~jak/syscalls-allowed.txt
https://people.debian.org/~jak/syscalls-trapped.txt (all syscalls I
found - first list)
Or play with the settings in the NEWS file,
APT::Sandbox::Seccomp "false"; to disable it
APT::Sandbox::Seccomp::Allow { "syscall1"; "syscall2"; }; to allow
more syscalls by name
I was wondering if we could install a SIGSYS signal handler to print
which syscall was blocked, but did not find anything yet.