The repair step was a bit overeager to skip repairing so it missed the case where a group share exists without subshares but with an additional direct user share.