stable/10 kassert on unlocked pipe in pipeunlock

[Sean Bruno]

not sure how $work is able to do this, but this panic floated in on the
breeze from the weekend.

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: Unlocked pipe passed to pipeunlock
cpuid = 3
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe048c6957e0
kdb_backtrace() at kdb_backtrace+0x39/frame 0xfffffe048c695890
vpanic() at vpanic+0x126/frame 0xfffffe048c6958d0
kassert_panic() at kassert_panic+0x136/frame 0xfffffe048c695940
pipe_write() at pipe_write+0xa00/frame 0xfffffe048c6959f0
dofilewrite() at dofilewrite+0x85/frame 0xfffffe048c695a40
kern_writev() at kern_writev+0x65/frame 0xfffffe048c695a90
sys_write() at sys_write+0x63/frame 0xfffffe048c695ae0
ia32_syscall() at ia32_syscall+0x255/frame 0xfffffe048c695bf0
Xint0x80_syscall() at Xint0x80_syscall+0x95/frame 0xfffffe048c695bf0
--- syscall (4, FreeBSD ELF32, sys_write), rip = 0x22430824, rsp = 0xffff3fd8, rbp = 0xffff4004 ---
Uptime: 32d1h5m4s
Dumping 1975 out of 16358 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%


------------

(kgdb) whe
#0  doadump (textdump=1) at pcpu.h:219
#1  0xffffffff805fb2a7 in kern_reboot (howto=260) at ../../../kern/kern_shutdown.c:452
#2  0xffffffff805fb7b5 in vpanic (fmt=<value optimized out>, ap=<value optimized out>) at ../../../kern/kern_shutdown.c:759
#3  0xffffffff805fb646 in kassert_panic (fmt=<value optimized out>) at ../../../kern/kern_shutdown.c:647
#4  0xffffffff8064fe10 in pipe_write (fp=0xfffff802d63445f0, uio=0xfffffe048c695ab0, active_cred=0x0, flags=0, td=0x0) at ../../../kern/sys_pipe.c:616
#5  0xffffffff8064cbc5 in dofilewrite (td=0xfffff801bb3ab920, fd=20, fp=0xfffff802d63445f0, auio=0xfffffe048c695ab0, offset=<value optimized out>, flags=0) at file.h:303
#6  0xffffffff8064c8d5 in kern_writev (td=0xfffff801bb3ab920, fd=20, auio=0xfffffe048c695ab0) at ../../../kern/sys_generic.c:467
#7  0xffffffff8064c863 in sys_write (td=<value optimized out>, uap=<value optimized out>) at ../../../kern/sys_generic.c:382
#8  0xffffffff80a332b5 in ia32_syscall (frame=0xfffffe048c695c00) at subr_syscall.c:135
#9  0xffffffff8095cdc5 in Xint0x80_syscall () at ia32_exception.S:73
#10 0x0000000022430824 in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: This is a digitally signed message part
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20140505/f529f1dc/attachment.sig>