I am running this on Debian/testing.  I used to have samba working just fine,
but because I use it infrequently, can not pin-point the exact time
when it stopped working and generating the panics.  It has been at least 6 months
if not more since it sopped working.

Let me know if I can do anything to help or provide more information.

I have marked it as Major because without it starting up, I can not do anything
with regards to sharing between my Linux server and the Windows laptops that
my wife and kids use.

First compile with debug flags. ./configure.developer instead of ./configure should do that for you. Then a "bt full" would be interesting. As a next step, maybe a run under valgrind shows some more.

Dumb question but what is "bt full" ?  

I can certainly pull down the Debian source package and
modify it so that it builds the way you are asking.

I'll try a run under valgrind just now, to see what it does, 
as I've got the samba-dbg package installed.

(In reply to comment #3)
> Dumb question but what is "bt full" ?  
> 
> I can certainly pull down the Debian source package and
> modify it so that it builds the way you are asking.
> 
> I'll try a run under valgrind just now, to see what it does, 
> as I've got the samba-dbg package installed.

Instead of "bt" in gdb run "bt full".

Created attachment 7357 [details]
smbd output using '-d 5'

I ran the following command:


 smbd -s /etc/samba/smb.conf.maybe.not.good  -FS -d 5 | tee /tmp/samba-debug5.log


and have attached the output to this comment.

I dont know how to get the output of "bt full" in gdb into a text file, so I am cut and pasting it here.


# gdb /usr/sbin/smbd /var/log/samba/cores/smbd/core
GNU gdb (GDB) 7.4-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "powerpc-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/sbin/smbd...Reading symbols from /usr/lib/debug/.build-id/d7/f9b8fd1832ebd3f0066b1057a91c94e507e97c.debug...done.
done.
[New LWP 25424]

warning: Can't read pathname for load map: Input/output error.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/powerpc-linux-gnu/libthread_db.so.1".
Core was generated by `smbd -s /etc/samba/smb.conf.maybe.not.good -FS -d 5'.
Program terminated with signal 6, Aborted.
#0  0x1fc0b98c in raise () from /lib/powerpc-linux-gnu/libc.so.6
(gdb) bt full
#0  0x1fc0b98c in raise () from /lib/powerpc-linux-gnu/libc.so.6
No symbol table info available.
#1  0x1fc11040 in abort () from /lib/powerpc-linux-gnu/libc.so.6
No symbol table info available.
#2  0x207aeb6c in dump_core () at lib/fault.c:391
        called = true
        __FUNCTION__ = "dump_core"
#3  0x207c12d8 in smb_panic (why=<optimized out>) at lib/util.c:1133
        cmd = <optimized out>
        result = 0
        __FUNCTION__ = "smb_panic"
#4  0x207ae454 in fault_report (sig=11) at lib/fault.c:53
        counter = 1
#5  sig_fault (sig=11) at lib/fault.c:76
No locals.
#6  <signal handler called>
No symbol table info available.
#7  0x1fc628e4 in strlen () from /lib/powerpc-linux-gnu/libc.so.6
No symbol table info available.
#8  0x207a093c in tdb_pack_va (buf=0x212c1847 "p!+\206h!,\027P", bufsize=1, fmt=0x20be55b9 "", ap=0xbfddc104) at lib/util_tdb.c:178
        bt = <optimized out>
        w = <optimized out>
        d = <optimized out>
        i = <optimized out>
        p = <optimized out>
        len = <optimized out>
        s = 0x7f7f7f7f <Address 0x7f7f7f7f out of bounds>
        c = 80 'P'
        buf0 = 0x212c1820 ""
        fmt0 = 0x20be55b4 "ddPPP"
        bufsize0 = 40
        __FUNCTION__ = "tdb_pack_va"
#9  0x207a0ee4 in tdb_pack (buf=<optimized out>, bufsize=<optimized out>, fmt=<optimized out>) at lib/util_tdb.c:218
        ap = {{gpr = 8 '\b', fpr = 0 '\000', reserved = 35088, overflow_arg_area = 0xbfddc118, reg_save_area = 0xbfddc0a0}}
        result = <error reading variable result (value has been optimized out)>
#10 0x20782e94 in printer_list_set_printer (mem_ctx=<optimized out>, name=0x212b8910 "home-printer", comment=<optimized out>, location=<optimized out>, 
    last_refresh=3471600) at printing/printer_list.c:193
        db = 0x212af648
        key = 0x212b98b8 "PRINTERLIST/PRN/home-printer"
        data = {dptr = 0x212c1820 "", dsize = 40}
        time_64 = 3471600
        time_h = 0
        time_l = 3471600
        str = 0x212b8da0 "HP OfficeJet 6300"
        str2 = <optimized out>
        status = <optimized out>
        len = 40
        __FUNCTION__ = "printer_list_set_printer"
#11 0x2077a1b0 in pcap_cache_add (name=0x212b8910 "home-printer", comment=0x212b8da0 "HP OfficeJet 6300", location=0x0) at printing/pcap.c:91
        status = <optimized out>
        t = 3471600
#12 0x2077a280 in pcap_cache_replace (pcache=<optimized out>) at printing/pcap.c:116
        p = 0x212c2aa0
        status = <optimized out>
        __FUNCTION__ = "pcap_cache_replace"
#13 0x2077ca58 in cups_async_callback (event_ctx=<optimized out>, event=<optimized out>, flags=<optimized out>, p=0x212bc078) at printing/print_cups.c:503
        frame = 0x212a9780
        cb_args = 0x212bc078
        tmp_pcap_cache = 0x212c2aa0
        ret_ok = <optimized out>
        pcap_data = {status = {v = 0}, count = 2, printers = 0x212bad70}
        pcap_blob = {data = 0x212bb680 "\002", length = 173}
        ndr_ret = <optimized out>
        i = <optimized out>
        __FUNCTION__ = "cups_async_callback"
#14 0x207d3e18 in run_events_poll (num_pfds=10, pfds=0x212b8840, pollrtn=<optimized out>, ev=0x212a7ad8) at lib/events.c:286
        pfd = <optimized out>
        flags = <optimized out>
        state = <optimized out>
        fde = 0x212c2a60
        pollfd_idx = 0x212b35e8
        now = {tv_sec = 1330892710, tv_usec = 673854}
#15 run_events_poll (ev=0x212a7ad8, pollrtn=<optimized out>, pfds=0x212b8840, num_pfds=10) at lib/events.c:184
No locals.
#16 0x207d3fcc in s3_event_loop_once (ev=0x212a7ad8, location=<optimized out>) at lib/events.c:349
        state = 0x212a94b0
        timeout = 59999
        num_pfds = <error reading variable num_pfds (value has been optimized out)>
        ret = <optimized out>
#17 0x207d5080 in _tevent_loop_once (ev=0x212a7ad8, location=0x20c77bdc "smbd/server.c:844") at ../lib/tevent/tevent.c:494
        ret = <optimized out>
        nesting_stack_ptr = 0x0
#18 0x204314c0 in smbd_parent_loop (parent=<optimized out>) at smbd/server.c:844
        ret = <optimized out>
        frame = 0x212a7df8
#19 main (argc=<optimized out>, argv=<optimized out>) at smbd/server.c:1326
        is_daemon = <optimized out>
        interactive = <optimized out>
        Fork = <optimized out>
        no_process_group = <optimized out>
        log_stdout = <optimized out>
        ports = 0x0
        profile_level = 0x0
        opt = <optimized out>
        pc = <optimized out>
        print_build_options = <optimized out>
        long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x1fe32870, val = 0, descrip = 0x20c77488 "Help options:", argDescrip = 0x0}, {
            longName = 0x20b8926c "daemon", shortName = 68 'D', argInfo = 0, arg = 0x0, val = 1000, descrip = 0x20c77498 "Become a daemon (default)", 
            argDescrip = 0x0}, {longName = 0x20c774b4 "interactive", shortName = 105 'i', argInfo = 0, arg = 0x0, val = 1001, 
            descrip = 0x20c774c0 "Run interactive (not a daemon)", argDescrip = 0x0}, {longName = 0x20c774e0 "foreground", shortName = 70 'F', argInfo = 0, 
            arg = 0x0, val = 1002, descrip = 0x20c774ec "Run daemon in foreground (for daemontools, etc.)", argDescrip = 0x0}, {
            longName = 0x20c77520 "no-process-group", shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 1003, 
            descrip = 0x20c77534 "Don't create a new process group", argDescrip = 0x0}, {longName = 0x20c77558 "log-stdout", shortName = 83 'S', argInfo = 0, 
            arg = 0x0, val = 1004, descrip = 0x20c77564 "Log to stdout", argDescrip = 0x0}, {longName = 0x20c77574 "build-options", shortName = 98 'b', 
            argInfo = 0, arg = 0x0, val = 98, descrip = 0x20c77584 "Print build options", argDescrip = 0x0}, {longName = 0x20b234dc "port", shortName = 112 'p', 
            argInfo = 1, arg = 0xbfddc484, val = 0, descrip = 0x20c77598 "Listen on the specified ports", argDescrip = 0x0}, {
            longName = 0x20c775b8 "profiling-level", shortName = 80 'P', argInfo = 1, arg = 0xbfddc488, val = 0, descrip = 0x20c775c8 "Set profiling level", 
            argDescrip = 0x20c775dc "PROFILE_LEVEL"}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x20ce05b4, val = 0, 
            descrip = 0x20c775ec "Common samba options:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 4, arg = 0x20c97bb8, val = 0, 
            descrip = 0x20c77604 "Build-time configuration overrides:", argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo = 0, arg = 0x0, val = 0, 
            descrip = 0x0, argDescrip = 0x0}}
        parent = 0x212baf20
        frame = <optimized out>
        status = <optimized out>
        unique_id = 10031798127858623614
        __FUNCTION__ = "main"
(gdb)

I assume this is by now!? If you still have that setup and still see issues with recent samba versions, please reopen the bug.