dovecot - Sep 2014 - Panic: file index-status.c: line 131 (index_storage_get_open_status): assertion failed: (status_r->recent <= status_r->messages)

Hi,

Got a new one on 2.2.13:

Sep 19 04:11:39 moxi dovecot: imap(cen at cor.ed): Error: Log 
synchronization error at seq=3,offset=144 for 
/Maildir/.Spam/dovecot.index: Extension record update for invalid uid=494
Sep 19 04:11:39 moxi dovecot: imap(cen at cor.ed): Warning: fscking index 
file /Maildir/.Spam/dovecot.index
Sep 19 04:11:39 moxi dovecot: imap(cen at cor.ed): Panic: file 
index-status.c: line 131 (index_storage_get_open_status): assertion 
failed: (status_r->recent <= status_r->messages)
Sep 19 04:11:39 moxi dovecot: imap(cen at cor.ed): Error: Raw backtrace: 
/usr/lib/dovecot/libdovecot.so.0 [0x1f2c1f] -> 
/usr/lib/dovecot/libdovecot.so.0 [0x1f2c9d] -> 
/usr/lib/dovecot/libdovecot.so.0 [0x1f2514] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_open_status+0x4d1) 
[0xcee761] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x42) 
[0xcee7f2] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0xcd7b3a] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_open_status+0x4c) 
[0xcbe7ac] -> dovecot/imap [0x806485a] -> 
dovecot/imap(imap_sync_more+0x5cd) [0x8064edd] -> dovecot/imap 
[0x8065192] -> dovecot/imap(cmd_sync_delayed+0x1de) [0x80655de] -> 
dovecot/imap(client_handle_input+0x1c8) [0x805baa8] -> 
dovecot/imap(client_input+0x71) [0x805bd71] -> 
/usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x204d88] -> 
/usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xff) 
[0x20675f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x1e) 
[0x204
Sep 19 04:11:39 moxi dovecot: imap(cen at cor.ed): Fatal: master: 
service(imap): child 17680 killed with signal 6 (core dumped)

(gdb) bt full
#0  0x00b8f402 in __kernel_vsyscall ()
No symbol table info available.
#1  0x0070af30 in raise () from /lib/i686/nosegneg/libc.so.6
No symbol table info available.
#2  0x0070c911 in abort () from /lib/i686/nosegneg/libc.so.6
No symbol table info available.
#3  0x001f2c14 in default_fatal_finish (type=<value optimized out>, 
status=0) at failures.c:193
         backtrace = 0x8760180 "/usr/lib/dovecot/libdovecot.so.0 
[0x1f2c1f] -> /usr/lib/dovecot/libdovecot.so.0 [0x1f2c9d] -> 
/usr/lib/dovecot/libdovecot.so.0 [0x1f2514] -> 
/usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_"...
#4  0x001f2c9d in i_internal_fatal_handler (ctx=0xbf827d74, 
format=0xd219b0 "file %s: line %d (%s): assertion failed: (%s)", 
args=0xbf827d94 "\225??") at failures.c:657
         status = 0
#5  0x001f2514 in i_panic (format=0xd219b0 "file %s: line %d (%s): 
assertion failed: (%s)") at failures.c:267
         ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0}
         args = 0xbf827d94 "\225??"
#6  0x00cee761 in index_storage_get_open_status (box=0x877c968, 
items=<value optimized out>, status_r=0x87adaa8) at index-status.c:131
         hdr = (const struct mail_index_header *) 0x87aabd0
         __FUNCTION__ = "index_storage_get_open_status"
#7  0x00cee7f2 in index_storage_get_status (box=0x877c968, items=139, 
status_r=0x87adaa8) at index-status.c:48
No locals.
#8  0x00cd7b3a in index_list_get_status (box=0x877c968, items=139, 
status_r=0x87adaa8) at mailbox-list-index-status.c:165
No locals.
#9  0x00cbe7ac in mailbox_get_open_status (box=0x877c968, items=139, 
status_r=0x87adaa8) at mail-storage.c:1539
         __FUNCTION__ = "mailbox_get_open_status"
#10 0x0806485a in imap_sync_finish (ctx=0x87ada90, aborting=false) at 
imap-sync.c:321
         client = (struct client *) 0x877d9d0
         ret = 0
#11 0x08064edd in imap_sync_more (ctx=0x87ada90) at imap-sync.c:621
         str = (string_t *) 0x8760030
         ret = 1
         __FUNCTION__ = "imap_sync_more"
#12 0x08065192 in cmd_sync_continue (sync_cmd=0x877e438) at imap-sync.c:659
         cmd = <value optimized out>
         prev = <value optimized out>
         client = (struct client *) 0x877d9d0
         ctx = (struct imap_sync_context *) 0x87ada90
         ret = <value optimized out>
         __FUNCTION__ = "cmd_sync_continue"
#13 0x080655de in cmd_sync_delayed (client=0x877d9d0) at imap-sync.c:749
         _data_stack_cur_id = 3
#14 0x0805baa8 in client_handle_input (client=0x877d9d0) at 
imap-client.c:904
         remove_io = false
         handled_commands = true
         __FUNCTION__ = "client_handle_input"
#15 0x0805bd71 in client_input (client=0x877d9d0) at imap-client.c:931
         cmd = <value optimized out>
         output = (struct ostream *) 0x877e320
         bytes = 216
         __FUNCTION__ = "client_input"
#16 0x00204d88 in io_loop_call_io (io=0x877e3b8) at ioloop.c:441
         ioloop = (struct ioloop *) 0x8768498
         t_id = 2
         __FUNCTION__ = "io_loop_call_io"
#17 0x0020675f in io_loop_handler_run_internal (ioloop=0x8768498) at 
ioloop-epoll.c:220
         ctx = <value optimized out>
         event = (const struct epoll_event *) 0x8769650
         list = (struct io_list *) 0x8769f48
         io = (struct io_file *) 0x6
         tv = {tv_sec = 1787, tv_usec = 891154}
         msecs = <value optimized out>
         ret = 1
         i = 0
         j = 0
         call = false
         __FUNCTION__ = "io_loop_handler_run_internal"
#18 0x00204e2e in io_loop_handler_run (ioloop=0x8768498) at ioloop.c:488
No locals.
#19 0x00204eb8 in io_loop_run (ioloop=0x8768498) at ioloop.c:465
         __FUNCTION__ = "io_loop_run"
#20 0x001ab42d in master_service_run (service=0x87683c0, 
callback=0x8066000 <client_connected>) at master-service.c:566
No locals.
#21 0x08065e9f in main (argc=Cannot access memory at address 0x0
) at main.c:400
         login_set = {auth_socket_path = 0x8760038 "P", 
postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 
0x80660c0 <login_client_connected>, failure_callback = 0x8066060 
<login_client_failed>, request_auth_token = 1}
         service_flags = <value optimized out>
         storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT
         username = 0x0
         c = <value optimized out>
         set_roots = {0x806daa0, 0x0}