BUG 795382 - crash on disk full (non-kio, unwritten=0)

[pv@xxxxxxxxxxxxxxxxxxxxxx (dxm@xxxxxxxxxxxx)]

View Incident: 
http://co-op.engr.sgi.com/BugWorks/code/bwxquery.cgi?search=Search&wlong=1&view_type=Bug&wi=795382

Submitter : dxm                       Submitter Domain : engr               
Assigned Engineer : btg               Assigned Domain : sgi.com             
Assigned Group : xfs-linux            Category : software                   
Customer Reported : F                 Priority : 3                          
Project : xfs-linux                   Status : open                         
Description :
I've seen this one several times before - pagebuf cracks it
when the disk fills:

> dd if=/dev/zero of=x

XFS assertion failed: offset_fsb >= imap[nimaps].br_startoff + 
imap[i].br_blockcount, file: xfs_lrw.c, line: 1681
kernel BUG at xfs_debug.c:50!

Entering kdb (0xc1ca4000) Panic: invalid operand
due to panic @ 0xc4884469
eax = 0x0000001e ebx = 0xc1c6b641 ecx = 0xc02c4c74 edx = 0xc1e3df78 
esi = 0x0000c3e0 edi = 0xc1ca5ae8 esp = 0xc1ca5a48 eip = 0xc4884469 
ebp = 0xc1ca5a54  ss = 0x00000018  cs = 0x00000010 eflags = 0x00010292 
 ds = 0x00000018  es = 0x00000018 origeax = 0xffffffff &regs = 0xc1ca5a14
kdb> bt
    EBP       EIP         Function(args)
0xc1ca5a54 0xc4884469 [xfs]assfail+0x2d (0xc48a84c0, 0xc48a7944, 0x691)
                               xfs .text 0xc4816060 0xc488443c 0xc4884470
0xc1ca5b54 0xc488b32e [xfs]xfs_iomap_write_convert+0x74e (0xc1c5f4ac, 
0xc3df000, 0x0, 0x1000, 0xc1ca5cf0)
                               xfs .text 0xc4816060 0xc488abe0 0xc488b4a4
0xc1ca5c14 0xc4889c7f [xfs]xfs_iomap_write+0x12b (0xc1c5f4ac, 0xc3df000, 0x0, 
0x1000, 0xc1ca5cf0)
                               xfs .text 0xc4816060 0xc4889b54 0xc4889d8c
0xc1ca5c54 0xc488969a [xfs]xfs_bmap+0x26e (0xc1c5f378, 0xc3df000, 0x0, 0x1000, 
0x10002)
                               xfs .text 0xc4816060 0xc488942c 0xc4889764
0xc1ca5ca0 0xc48870df [xfs]linvfs_pb_bmap+0x117 (0xc3319d80, 0xc3df000, 0x0, 
0x1000, 0xc1ca5cf0)
                               xfs .text 0xc4816060 0xc4886fc8 0xc48870fc
0xc1ca5d08 0xc480ec8d [pagebuf]pagebuf_delalloc_convert+0x61 (0xc10c4b84, 0x0, 
0x1)
                               pagebuf .text 0xc480a060 0xc480ec2c 0xc480edc0
0xc1ca5d30 0xc480ca9c [pagebuf]pagebuf_flush+0x64 (0xc3319d80, 0x0, 0x0, 0x0)
                               pagebuf .text 0xc480a060 0xc480ca38 0xc480caf4
0xc1ca5d4c 0xc4884dd8 [xfs]fs_flush_pages+0x70 (0xc1c5f378, 0x0, 0x0, 0x0, 0x0)
                               xfs .text 0xc4816060 0xc4884d68 0xc4884de4
0xc1ca5d84 0xc48896ef [xfs]xfs_bmap+0x2c3 (0xc1c5f378, 0xc3e0000, 0x0, 0x10000, 
0x2)
                               xfs .text 0xc4816060 0xc488942c 0xc4889764
0xc1ca5dd0 0xc48870df [xfs]linvfs_pb_bmap+0x117 (0xc3319d80, 0xc3e0000, 0x0, 
0x10000, 0xc1ca5e34)
                               xfs .text 0xc4816060 0xc4886fc8 0xc48870fc
0xc1ca5e4c 0xc480e5e7 [pagebuf]_pagebuf_file_write+0xeb (0xc11c4060, 0x8053000, 
0x200, 0xc1ca5eb8, 0x2)
                               pagebuf .text 0xc480a060 0xc480e4fc 0xc480e6d0
more> 
0xc1ca5ed8 0xc480e8ab [pagebuf]pagebuf_generic_file_write+0x1db (0xc11c4060, 
0x8053000, 0x200, 0xc1ca5f8c)
                               pagebuf .text 0xc480a060 0xc480e6d0 0xc480ea94
0xc1ca5f08 0xc4888244 [xfs]xfs_rdwr+0xa4 (0xc1c5f378, 0xc11c4060, 0x8053000, 
0x200, 0xc1ca5f8c)
                               xfs .text 0xc4816060 0xc48881a0 0xc4888270
0xc1ca5f58 0xc488937a [xfs]xfs_write+0x14a (0xc1c5f378, 0xc11c4060, 0x8053000, 
0x200, 0xc1ca5f8c)
                               xfs .text 0xc4816060 0xc4889230 0xc488942c
0xc1ca5f94 0xc488483d [xfs]linvfs_write+0x139 (0xc11c4060, 0x8053000, 0x200, 
0xc11c4080, 0xc1ca4000)
                               xfs .text 0xc4816060 0xc4884704 0xc48848a8
0xc1ca5fbc 0xc0132c3e sys_write+0xc2 (0x1, 0x8053000, 0x200, 0x200, 0x8053000)
                               kernel .text 0xc0100000 0xc0132b7c 0xc0132c64
           0xc0109968 system_call+0x34
                               kernel .text 0xc0100000 0xc0109934 0xc010996c
kdb>