dbcheck would fail to fix up attributes where the extended DN's GUID is correct, but the DN itself is incorrect. The code failed attempting to remove the old/incorrect DN (patch under development)
Fixed in master by 22208f52e6096fbe9413b8ff339d9446851e0874 for Samba 4.9