BUG 800489 - panic in umount after repair

[pv@xxxxxxxxxxxxx (nathans@xxxxxxxxxxxx)]

View Incident: 
http://co-op.engr.sgi.com/BugWorks/code/bwxquery.cgi?search=Search&wlong=1&view_type=Bug&wi=800489

Submitter : nathans                   Submitter Domain : engr               
Assigned Engineer : nb                Assigned Domain : sgi.com             
Assigned Group : xfs-linux            Category : software                   
Customer Reported : F                 Priority : 1                          
Project : xfs-linux                   Status : open                         
Description :
After deliberate corruption followed by repair, we seem to trip
an assert in the unmount code.  I've just checked in a QA test
which can reproduce this (030), but it doesn't reliably reproduce
it (I've seen it only twice out of six/seven iterations).

My current test environment is using top-of-tree libxfs-mkfs and a
libsim-repair installed to / (I'm trying to verify the old repair
before checking in a bunch of changes to it).  The kernel I'm using
is a bit dated too (built 18 August) - might be part of the problem.
I'll update that later today & see if this still happens.


Start mounting filesystem: ide0(3,6)
Ending clean XFS mount for filesystem: ide0(3,6)
XFS assertion failed: i < xfs_uuidtab_size, file: xfs_mount.c, line: 1766
kernel BUG at xfs_debug.c:50!

Entering kdb (0xc1a00000) Panic: invalid operand
due to panic @ 0xc01d7349
eax = 0x0000001e ebx = 0x00000010 ecx = 0xc034de2c edx = 0x00000000 
esi = 0x00000002 edi = 0xc1a01e98 esp = 0xc1a01e6c eip = 0xc01d7349 
ebp = 0xc1a01e78  ss = 0x00000018  cs = 0x00000010 eflags = 0x00010246 
 ds = 0x00000018  es = 0x00000018 origeax = 0xffffffff &regs = 0xc1a01e38
kdb> bt
    EBP       EIP         Function(args)
0xc1a01e78 0xc01d7349 assfail+0x2d (0xc02a1dff, 0xc02a16b6, 0x6e6)
                               kernel .text 0xc0100000 0xc01d731c 0xc01d7350
0xc1a01e9c 0xc01bfece xfs_uuid_unmount+0xa6 (0xc5d6fc00)
                               kernel .text 0xc0100000 0xc01bfe28 0xc01bfee8
0xc1a01eb8 0xc01bf3be xfs_unmountfs+0xbe (0xc5d6fc00, 0x3, 0xc03b1f60)
                               kernel .text 0xc0100000 0xc01bf300 0xc01bf404
0xc1a01ee8 0xc01cb324 xfs_unmount+0x1fc (0xc5d6fc00, 0x0, 0xc03b1f60)
                               kernel .text 0xc0100000 0xc01cb128 0xc01cb338
0xc1a01f08 0xc01d79e8 fs_dounmount+0x7c (0xc5d6fc00, 0x0, 0x0, 0xc03b1f60, 
0xc345e340)
                               kernel .text 0xc0100000 0xc01d796c 0xc01d7a04
0xc1a01f38 0xc01dffe1 linvfs_put_super+0x59 (0xc503ea00)
                               kernel .text 0xc0100000 0xc01dff88 0xc01e0054
0xc1a01f50 0xc012e28a kill_super+0x7a (0xc503ea00, 0x0, 0xc5858f20, 0xffffffff, 
0xc47884c0)
                               kernel .text 0xc0100000 0xc012e210 0xc012e31c
0xc1a01f70 0xc012e641 do_umount+0x1ad (0xc5858f20, 0x0, 0x0)
                               kernel .text 0xc0100000 0xc012e494 0xc012e650
0xc1a01fac 0xc012e707 sys_umount+0xb7 (0x8052fd0, 0x0)
                               kernel .text 0xc0100000 0xc012e650 0xc012e72c
0xc1a01fbc 0xc012e73a sys_oldumount+0xe (0x8052fd0, 0x78, 0x8053008, 0x8052fd1, 
0x804d3e0)
                               kernel .text 0xc0100000 0xc012e72c 0xc012e740
           0xc0108e28 system_call+0x34