Bug 89427

Open bug in launchpad.net
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1426588



Package: systemd 219-4ubuntu1



"root@file-control:~# systemctl disable vmware-USBArbitrator
Synchronizing state for vmware-USBArbitrator.service with sysvinit using update-rc.d...
Executing /usr/sbin/update-rc.d vmware-USBArbitrator defaults
insserv: Service localfs has to be enabled to start service vmware-USBArbitrator
insserv: exiting now!
update-rc.d: error: insserv rejected the script header
*** Error in `systemctl': double free or corruption (fasttop): 0x00007f4ad5bff910 ***
Aborted (core dumped)"



Backtrace:
#0  0x00007fa0498d9e37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
        resultvar = 0
        pid = 27161
        selftid = 27161
#1  0x00007fa0498db528 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x7ffdd4fcac60, sa_sigaction = 0x7ffdd4fcac60}, sa_mask = {__val = {25, 2, 32, 0, 140326405660588, 207000974387, 356482285568, 377957122134, 140326409213792, 4112, 0, 140326445517520, 140326445517328, 140326445517520, 140326405815688, 140728176781600}}, sa_flags = 4096, sa_restorer = 0xffff80022b0356b1}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007fa04991b7a4 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7fa049a247a0 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
        ap = {{gp_offset = 40, fp_offset = 32672, overflow_arg_area = 0x7ffdd4fcab60, reg_save_area = 0x7ffdd4fcaaf0}}
        fd = 4
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#3  0x00007fa049922db6 in malloc_printerr (ptr=<optimized out>, str=0x7fa049a24968 "double free or corruption (fasttop)", action=1) at malloc.c:4996
        buf = "00007fa04bf00910"
        cp = <optimized out>
#4  _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3840
        size = <optimized out>
        fb = <optimized out>
        nextchunk = <optimized out>
        nextsize = <optimized out>
        nextinuse = <optimized out>
        prevsize = <optimized out>
        bck = <optimized out>
        fwd = <optimized out>
        errstr = <optimized out>
        locked = <optimized out>
#5  0x00007fa04a0c1730 in freep () at ../src/shared/util.h:673
No locals.
#6  enable_sysv_units.lto_priv.393 (verb=0x6a19 <error: Cannot access memory at address 0x6a19>, args=0x7fa04bf00980) at ../src/systemctl/systemctl.c:5141
        p = 0x7fa04bf00be0 "/etc/init.d/vmware-USBArbitrator"
        status = {si_signo = 17, si_errno = 0, si_code = 1, _sifields = {_pad = {27162, 0, 1, 0 <repeats 25 times>}, _kill = {si_pid = 27162, si_uid = 0}, _timer = {si_tid = 27162, si_overrun = 0, si_sigval = {sival_int = 1, sival_ptr = 0x1}}, _rt = {si_pid = 27162, si_uid = 0, si_sigval = {sival_int = 1, sival_ptr = 0x1}}, _sigchld = {si_pid = 27162, si_uid = 0, si_status = 1, si_utime = 0, si_stime = 0}, _sigfault = {si_addr = 0x6a1a, si_addr_lsb = 1}, _sigpoll = {si_band = 27162, si_fd = 1}, _sigsys = {_call_addr = 0x6a1a, _syscall = 1, _arch = 0}}}
        l = 0x7fa04bf00910 ""
        argv = {0x7fa04a118cf6 "/usr/sbin/update-rc.d", 0x7fa04bf00bec "vmware-USBArbitrator", 0x7fa04a118d18 "defaults", 0x0, 0x0, 0x0}
        f = 4294967274
        paths = {unit_path = 0x7fa04bf00c60, sysvinit_path = 0x7fa04bf00c40, sysvrcnd_path = 0x7fa04bf00ab0}
        __func__ = "enable_sysv_units"
#7  0x00007fa04a0c194d in enable_unit.lto_priv.358 (bus=0x7fa04bf00020, args=0x7ffdd4fcb0e0) at ../src/systemctl/systemctl.c:5305
        names = 0x7fa04bf00980
        changes = 0x0
        n_changes = 0
        carries_install_info = -1
        __PRETTY_FUNCTION__ = "enable_unit"
        __func__ = "enable_unit"
#8  0x00007fa04a0ba16a in systemctl_main (bus_error=<optimized out>, argv=<optimized out>, argc=<optimized out>, bus=<optimized out>) at ../src/systemctl/systemctl.c:7265
        left = 2
        verbs = {{verb = 0x7fa04a119a34 "list-units", argc_cmp = MORE, argc = 0, dispatch = 0x7fa04a0d6ad0 <list_units.lto_priv.337>, bus = (unknown: 0)}, {verb = 0x7fa04a119a3f "list-unit-files", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0d8550 <list_unit_files.lto_priv.338>, bus = NOBUS}, {verb = 0x7fa04a119a4f "list-sockets", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0d7560 <list_sockets.lto_priv.339>, bus = (unknown: 0)}, {verb = 0x7fa04a119a5c "list-timers", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0d7f10 <list_timers.lto_priv.340>, bus = (unknown: 0)}, {verb = 0x7fa04a119a68 "list-jobs", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0bb1e0 <list_jobs.lto_priv.341>, bus = (unknown: 0)}, {verb = 0x7fa04a119a72 "list-machines", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0bc030 <list_machines.lto_priv.342>, bus = (unknown: 0)}, {verb = 0x7fa04a118b5d "clear-jobs", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0bf130 <daemon_reload.lto_priv.343>, bus = (unknown: 0)}, {verb = 0x7fa04a118b68 "cancel", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0baf10 <cancel_job.lto_priv.344>, bus = (unknown: 0)}, {verb = 0x7fa04a117e6e "start", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e46 "stop", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e42 "condstop", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117ec6 "reload", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e6c "restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e92 "try-restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e62 "reload-or-restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e88 "reload-or-try-restart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117ec0 "force-reload", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117eb5 "condreload", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117e56 "condrestart", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a117c86 "isolate", argc_cmp = EQUAL, argc = 2, dispatch = 0x7fa04a0bd940 <start_unit.lto_priv.345>, bus = (unknown: 0)}, {verb = 0x7fa04a119a80 "kill", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c39c0 <kill_unit.lto_priv.346>, bus = (unknown: 0)}, {verb = 0x7fa04a119a85 "is-active", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c3e10 <check_unit_active.lto_priv.347>, bus = (unknown: 0)}, {verb = 0x7fa04a119a8f "check", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c3e10 <check_unit_active.lto_priv.347>, bus = (unknown: 0)}, {verb = 0x7fa04a119a95 "is-failed", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c3e30 <check_unit_failed.lto_priv.348>, bus = (unknown: 0)}, {verb = 0x7fa04a118cdc "show", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0c0980 <show.lto_priv.349>, bus = (unknown: 0)}, {verb = 0x7fa04a119a9f "cat", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c2cf0 <cat.lto_priv.350>, bus = NOBUS}, {verb = 0x7fa04a127ee5 "status", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0c0980 <show.lto_priv.349>, bus = (unknown: 0)}, {verb = 0x7fa04a1198c3 "help", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c0980 <show.lto_priv.349>, bus = (unknown: 0)}, {verb = 0x7fa04a118c70 "snapshot", argc_cmp = LESS, argc = 2, dispatch = 0x7fa04a0c0420 <snapshot.lto_priv.351>, bus = (unknown: 0)}, {verb = 0x7fa04a119aa3 "delete", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bff30 <delete_snapshot.lto_priv.352>, bus = (unknown: 0)}, {verb = 0x7fa04a119aaa "daemon-reload", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0bf130 <daemon_reload.lto_priv.343>, bus = (unknown: 0)}, {verb = 0x7fa04a118b6f "daemon-reexec", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0bf130 <daemon_reload.lto_priv.343>, bus = (unknown: 0)}, {verb = 0x7fa04a119ab8 "show-environment", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0bfdb0 <show_environment.lto_priv.353>, bus = (unknown: 0)}, {verb = 0x7fa04a119acb "set-environment", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bf4b0 <set_environment.lto_priv.354>, bus = (unknown: 0)}, {verb = 0x7fa04a119ac9 "unset-environment", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bf4b0 <set_environment.lto_priv.354>, bus = (unknown: 0)}, {verb = 0x7fa04a119adb "import-environment", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0bf680 <import_environment.lto_priv.355>, bus = (unknown: 0)}, {verb = 0x7fa04a118b8a "halt", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = FORCE}, {verb = 0x7fa04a118b8f "poweroff", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = FORCE}, {verb = 0x7fa04a118b98 "reboot", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = FORCE}, {verb = 0x7fa04a118b9f "kexec", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119aee "suspend", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119af6 "hibernate", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b00 "hybrid-sleep", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b57 "default", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b0d "rescue", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a119b14 "emergency", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a118ba5 "exit", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0c68e0 <start_special.lto_priv.356>, bus = (unknown: 0)}, {verb = 0x7fa04a118b7d "reset-failed", argc_cmp = MORE, argc = 1, dispatch = 0x7fa04a0c01b0 <reset_failed.lto_priv.357>, bus = (unknown: 0)}, {verb = 0x7fa04a118e18 "enable", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0 <enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a118cee "disable", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0 <enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a118d7b "is-enabled", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a109440 <unit_is_enabled.lto_priv.359>, bus = NOBUS}, {verb = 0x7fa04a118e16 "reenable", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0 <enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a125fe9 "preset", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0 <enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a119b1e "preset-all", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a109810 <preset_all.lto_priv.360>, bus = NOBUS}, {verb = 0x7fa04a118e48 "mask", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0 <enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a118e46 "unmask", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0 <enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a12ba91 "link", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0c18d0 <enable_unit.lto_priv.358>, bus = NOBUS}, {verb = 0x7fa04a119b29 "switch-root", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a0bf9f0 <switch_root.lto_priv.361>, bus = (unknown: 0)}, {verb = 0x7fa04a119b35 "list-dependencies", argc_cmp = LESS, argc = 2, dispatch = 0x7fa04a0bd570 <list_dependencies.lto_priv.362>, bus = (unknown: 0)}, {verb = 0x7fa04a119b47 "set-default", argc_cmp = EQUAL, argc = 2, dispatch = 0x7fa04a0bee10 <set_default.lto_priv.363>, bus = NOBUS}, {verb = 0x7fa04a119b53 "get-default", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a0bb9c0 <get_default.lto_priv.364>, bus = NOBUS}, {verb = 0x7fa04a119b5f "set-property", argc_cmp = MORE, argc = 3, dispatch = 0x7fa04a0c06e0 <set_property.lto_priv.365>, bus = (unknown: 0)}, {verb = 0x7fa04a119b6c "is-system-running", argc_cmp = EQUAL, argc = 1, dispatch = 0x7fa04a109370 <is_system_running.lto_priv.366>, bus = (unknown: 0)}, {verb = 0x7fa04a119b7e "add-wants", argc_cmp = MORE, argc = 3, dispatch = 0x7fa04a109f20 <add_dependency.lto_priv.367>, bus = NOBUS}, {verb = 0x7fa04a119b88 "add-requires", argc_cmp = MORE, argc = 3, dispatch = 0x7fa04a109f20 <add_dependency.lto_priv.367>, bus = NOBUS}, {verb = 0x7fa04a119b95 "edit", argc_cmp = MORE, argc = 2, dispatch = 0x7fa04a108a70 <edit.lto_priv.368>, bus = NOBUS}, {verb = 0x0, argc_cmp = MORE, argc = 0, dispatch = 0x0, bus = (unknown: 0)}}
        verb = 0x7fa04a3393e0 <verbs+1568>
#9  main (argc=2, argv=0x7ffdd4fcb0d8) at ../src/systemctl/systemctl.c:7532
        bus = 0x7fa04bf00020
        r = 0
        __func__ = "main"
        __PRETTY_FUNCTION__ = "main"