#0 0x00007f59f4215425 in __GI_raise (sig=) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 resultvar = 0 pid = selftid = 22582 #1 0x00007f59f4218b8b in __GI_abort () at abort.c:91 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0, sa_sigaction = 0}, sa_mask = {__val = {0, 140024324447304, 140024380070368, 0, 0, 0, 0, 4294967295, 0, 0, 3000112, 2601408, 0, 140737077127536, 2, 140024347004928}}, sa_flags = -145811596, sa_restorer = 0x1} sigs = {__val = {32, 0 }} #2 0x00007f59f579f8ae in dump_core () at ../source3/lib/dumpcore.c:336 called = true __FUNCTION__ = "dump_core" #3 0x00007f59f578a5a5 in smb_panic_s3 (why=) at ../source3/lib/util.c:808 cmd = result = __FUNCTION__ = "smb_panic_s3" #4 0x00007f59f70aab3a in smb_panic (why=0x7f59f70b8365 "internal error") at ../lib/util/fault.c:159 No locals. #5 0x00007f59f70aae7b in fault_report (sig=6) at ../lib/util/fault.c:77 counter = 1 #6 sig_fault (sig=6) at ../lib/util/fault.c:88 No locals. #7 No symbol table info available. #8 0x00007f59f4215425 in __GI_raise (sig=) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 resultvar = 0 pid = selftid = 22582 #9 0x00007f59f4218b8b in __GI_abort () at abort.c:91 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0x3, sa_sigaction = 0x3}, sa_mask = {__val = {4, 140737077139471, 14, 140024325968631, 1, 140024325972875, 3, 140737077127340, 4, 140024325968578, 1, 140024325977575, 3, 140737077127316, 12, 140024325977579}}, sa_flags = 2, sa_restorer = 0x7f59f435b5eb} sigs = {__val = {32, 0 }} #10 0x00007f59f425339e in __libc_message (do_abort=2, fmt=0x7f59f435d748 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:201 ap = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fffe77d3210, reg_save_area = 0x7fffe77d3120}} ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fffe77d3210, reg_save_area = 0x7fffe77d3120}} fd = 2 on_2 = list = nlist = cp = written = #11 0x00007f59f425db96 in malloc_printerr (action=3, str=0x7f59f435d910 "free(): invalid next size (fast)", ptr=) at malloc.c:5039 buf = "00007f59f94fe030" cp = #12 0x00007f59f6799cd6 in _talloc_free_internal (ptr=0x7f59f94fe090, location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070") at ../lib/talloc/talloc.c:962 tc = 0x7f59f94fe030 #13 0x00007f59f679666d in _talloc_free_children_internal (location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070", ptr=0x7f59f9319470, tc=0x7f59f9319410) at ../lib/talloc/talloc.c:1374 child = 0x7f59f94fe090 new_parent = 0x7f59f8ea80a0 #14 _talloc_free_internal (location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070", ptr=0x7f59f9319470) at ../lib/talloc/talloc.c:904 No locals. #15 _talloc_free (ptr=0x7f59f9319470, location=0x7f59f6de7688 "../source3/smbd/smb2_server.c:3070") at ../lib/talloc/talloc.c:1489 No locals. #16 0x00007f59f6cc7459 in smbd_smb2_flush_send_queue (sconn=0x7f59f9efdcb0) at ../source3/smbd/smb2_server.c:3070 e = 0x7f59f9319488 ret = 0 err = retry = false #17 smbd_smb2_io_handler (sconn=0x7f59f9efdcb0, fde_flags=) at ../source3/smbd/smb2_server.c:3089 state = 0x7f59f9efde08 req = 0x0 min_recvfile_size = 4294967295 ret = err = retry = status = now = __FUNCTION__ = "smbd_smb2_io_handler" #18 0x00007f59f6cc8ccf in smbd_smb2_request_reply (req=0x7f59f9319470) at ../source3/smbd/smb2_server.c:2444 sconn = 0x7f59f9efdcb0 conn = 0x7f59f9cb0f30 outhdr = status = first_idx = 1 firsttf = outdyn = #19 smbd_smb2_request_done_ex (req=0x7f59f9319470, status=..., body=..., dyn=, location=) at ../source3/smbd/smb2_server.c:2584 outhdr = outbody_v = outdyn_v = 0x7f59f93197b0 next_command_ofs = __FUNCTION__ = "smbd_smb2_request_done_ex" #20 0x00007f59f6cd4da8 in smbd_smb2_request_ioctl_done (subreq=0x0) at ../source3/smbd/smb2_ioctl.c:357 req = 0x7f59f9319470 inbody = outbody = {data = 0x7f59f9319ce0 "1", length = } outdyn = {data = 0x7f59f94fe090 "E", length = 24} in_ctl_code = out_input_offset = 112 out_output_offset = 112 out_output_buffer = {data = 0x7f59f94fe090 "E", length = 24} status = {v = 0} error = disconnect = __FUNCTION__ = "smbd_smb2_request_ioctl_done" #21 0x00007f59f69a383e in _tevent_req_notify_callback (req=0x7f59f93198d0, location=) at ../lib/tevent/tevent_req.c:101 No locals. #22 0x00007f59f6cc8d27 in smbd_smb2_request_pending_queue (req=0x7f59f9319470, subreq=0x7f59f93198d0, defer_time=1000) at ../source3/smbd/smb2_server.c:1263 status = defer_endtime = {tv_sec = 140024409593280, tv_usec = -2538480328473264896} outhdr = 0x0 flags = #23 0x00007f59f6cd5630 in smbd_smb2_request_process_ioctl (req=0x7f59f9319470) at ../source3/smbd/smb2_ioctl.c:228 status = inbody = min_buffer_offset = max_buffer_offset = min_output_offset = allowed_length_in = allowed_length_out = in_fsp = 0x0 in_input_offset = in_input_length = in_input_buffer = {data = 0x7f59f9319638 "\177", length = 34} in_output_offset = in_output_length = in_output_buffer = data_length_in = data_length_out = data_length_tmp = data_length_max = subreq = 0x7f59f93198d0 #24 0x00007f59f6cc6d2d in smbd_smb2_request_dispatch (req=0x7f59f9319470) at ../source3/smbd/smb2_server.c:2194 conn = 0x7f59f9cb0f30 call = intf_v = inhdr = opcode = 11 flags = status = session_status = allowed_flags = return_value = x = 0x7f59f9e01870 signing_required = encryption_required = false __FUNCTION__ = "smbd_smb2_request_dispatch" #25 0x00007f59f6cc79e8 in smbd_smb2_io_handler (sconn=0x7f59f9efdcb0, fde_flags=) at ../source3/smbd/smb2_server.c:3253 state = 0x7f59f9efde08 req = 0x7f59f9319470 min_recvfile_size = 4294967295 ret = err = retry = false status = now = __FUNCTION__ = "smbd_smb2_io_handler" #26 0x00007f59f6cc7ae0 in smbd_smb2_connection_handler (ev=, fde=, flags=1, private_data=) at ../source3/smbd/smb2_server.c:3291 sconn = 0x7f59f9efdcb0 status = #27 0x00007f59f57a7cb9 in run_events_poll (ev=0x7f59f8eacab0, pollrtn=, pfds=0x7f59f97d5090, num_pfds=4) at ../source3/lib/events.c:257 pfd = flags = state = pollfd_idx = 0x7f59f8eacc40 fde = 0x7f59f9a75e30 __FUNCTION__ = "run_events_poll" #28 0x00007f59f57a7e19 in s3_event_loop_once (ev=0x7f59f8eacab0, location=) at ../source3/lib/events.c:326 state = 0x7f59f8eaae70 timeout = 46128 num_pfds = 4 ret = 1 poll_errno = 0 #29 0x00007f59f69a29bb in _tevent_loop_once (ev=0x7f59f8eacab0, location=0x7f59f6ddd660 "../source3/smbd/process.c:3626") at ../lib/tevent/tevent.c:530 ret = nesting_stack_ptr = 0x0 #30 0x00007f59f6cb368e in smbd_process (ev_ctx=0x7f59f8eacab0, msg_ctx=, sock_fd=, interactive=) at ../source3/smbd/process.c:3626 frame = 0x7f59f9e8e430 conn = sconn = ss = {ss_family = 2, __ss_align = 0, __ss_padding = '\000' , " vp\367Y\177\000\000\200\302\352\370\001\000\000\000\300T\353\370Y\177\000\000@C\353\370Y\177\000\000\265\240p\367Y\177", '\000' , "\001\000\000"} sa = 0x7fffe77d3890 sa_socklen = local_address = 0x7f59fa06f000 remote_address = 0x7f59f945d760 locaddr = remaddr = rhost = 0x0 ret = __FUNCTION__ = "smbd_process" #31 0x00007f59f77107c1 in smbd_accept_connection (ev=0x7f59f8eacab0, fde=, flags=, private_data=) at ../source3/smbd/server.c:621 status = {v = 0} s = 0x0 msg_ctx = 0x7f59f8eacba0 addr = {ss_family = 2, __ss_align = 0, __ss_padding = "\240:}\347\377\177\000\000\033\372\177\347\377\177\000\000p\256\352\370Y\177\000\000\006\000\000\000\000\000\000\000*\000\000\000\000\000\000\000e\032\n\367Y\177\000\000\065\000\000\000\000\000\000\000\214$\n\367Y\177\000\000\000\000\000\000\000\000\000\000 '\330\371Y\177\000\000\065\000\000\000\000\000\000\000\027\300\n\000\000\000\000\000\065\000\000\000\000\000\000\000p\256\352\370Y\177\000"} in_addrlen = 16 fd = 43 pid = 0 unique_id = 1524056098375570295 __FUNCTION__ = "smbd_accept_connection" #32 0x00007f59f57a7cb9 in run_events_poll (ev=0x7f59f8eacab0, pollrtn=, pfds=0x7f59f97d5090, num_pfds=6) at ../source3/lib/events.c:257 pfd = flags = state = pollfd_idx = 0x7f59f8eacc40 fde = 0x7f59f96b1210 __FUNCTION__ = "run_events_poll" #33 0x00007f59f57a7e19 in s3_event_loop_once (ev=0x7f59f8eacab0, location=) at ../source3/lib/events.c:326 state = 0x7f59f8eaae70 timeout = 53705 num_pfds = 6 ret = 1 poll_errno = 0 #34 0x00007f59f69a29bb in _tevent_loop_once (ev=0x7f59f8eacab0, location=0x7f59f7714b62 "../source3/smbd/server.c:943") at ../lib/tevent/tevent.c:530 ret = nesting_stack_ptr = 0x0 #35 0x00007f59f771260d in smbd_parent_loop (parent=, ev_ctx=0x7f59f8eacab0) at ../source3/smbd/server.c:943 ret = frame = 0x7f59f8eadc70 #36 main (argc=, argv=) at ../source3/smbd/server.c:1577 is_daemon = interactive = Fork = false no_process_group = 80 log_stdout = 160 ports = 0x0 profile_level = 0x0 opt = pc = print_build_options = long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f59f49b01a0, val = 0, descrip = 0x7f59f77144a9 "Help options:", argDescrip = 0x0}, { longName = 0x7f59f77144b7 "daemon", shortName = 68 'D', argInfo = 0, arg = 0x0, val = 1000, descrip = 0x7f59f77144be "Become a daemon (default)", argDescrip = 0x0}, { longName = 0x7f59f77144d8 "interactive", shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001, descrip = 0x7f59f7714fa8 "Run interactive (not a daemon)", argDescrip = 0x0}, {longName = 0x7f59f77144e4 "foreground", shortName = 70 'F', argInfo = 0, arg = 0x0, val = 1002, descrip = 0x7f59f7714fc8 "Run daemon in foreground (for daemontools, etc.)", argDescrip = 0x0}, {longName = 0x7f59f77144ef "no-process-group", shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 1003, descrip = 0x7f59f7715000 "Don't create a new process group", argDescrip = 0x0}, {longName = 0x7f59f7714500 "log-stdout", shortName = 83 'S', argInfo = 0, arg = 0x0, val = 1004, descrip = 0x7f59f771450b "Log to stdout", argDescrip = 0x0}, {longName = 0x7f59f7714519 "build-options", shortName = 98 'b', argInfo = 0, arg = 0x0, val = 98, descrip = 0x7f59f7714527 "Print build options", argDescrip = 0x0}, {longName = 0x7f59f771453b "port", shortName = 112 'p', argInfo = 1, arg = 0x7fffe77d3f90, val = 0, descrip = 0x7f59f7714540 "Listen on the specified ports", argDescrip = 0x0}, { longName = 0x7f59f771455e "profiling-level", shortName = 80 'P', argInfo = 1, arg = 0x7fffe77d3f98, val = 0, descrip = 0x7f59f771456e "Set profiling level", argDescrip = 0x7f59f7714582 "PROFILE_LEVEL"}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f59f5e186a0, val = 0, descrip = 0x7f59f7714590 "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x7f59f5e17ae0, val = 0, descrip = 0x7f59f7715028 "Build-time configuration overrides:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}} parent = frame = status = ev_ctx = 0x7f59f8eacab0 msg_ctx = server_id = {pid = 22532, task_id = 0, vnn = 4294967295, unique_id = 7336055648759535510} se = np_dir = smbd_shim_fns = {cancel_pending_lock_requests_by_fid = 0x7f59f6c9cd8b , send_stat_cache_delete_message = 0x7f59f6ca2ca1 , change_to_root_user = 0x7f59f6c8bf4d , contend_level2_oplocks_begin = 0x7f59f6cea875 , contend_level2_oplocks_end = 0x7f59f6cea9fa , become_root = 0x7f59f6c8c03a , unbecome_root = 0x7f59f6c8c062 , exit_server = 0x7f59f6ce395b , exit_server_cleanly = 0x7f59f6ce396c } __FUNCTION__ = "main"