Assertion chan->state == CHANNEL_STATE_OPENING || chan->state == CHANNEL_STATE_OPEN || chan->state == CHANNEL_STATE_MAINT failed
I saw this while trying to reproduce legacy/trac#7267 (moved):
src/or/channel.c:1668 channel_write_cell_queue_entry: Assertion chan->state == CHANNEL_STATE_OPENING || chan->state == CHANNEL_STATE_OPEN || chan->state == CHANNEL_STATE_MAINT failed; aborting.
The stack trace is:
#0 0x00007ffff69619b5 in raise () from /lib64/libc.so.6 #1 0x00007ffff696305f in abort () from /lib64/libc.so.6 legacy/trac#2 (closed) 0x000000000047fbd9 in channel_write_cell_queue_entry (chan=0x1409340, q=0x7fffffffdd90) at src/or/channel.c:1666 legacy/trac#3 (closed) 0x00000000004801ef in channel_write_cell (chan=0x1409340, cell=0x7fffffffddf0) at src/or/channel.c:1748 legacy/trac#4 (closed) 0x00000000004831b6 in channel_send_destroy (circ_id=62492, chan=0x1409340, reason=8) at src/or/channel.c:2598 legacy/trac#5 (closed) 0x0000000000498a5f in circuit_mark_for_close_ (circ=0x198fe80, reason=8, line=1047, file=0x5753a9 "src/or/circuitlist.c") at src/or/circuitlist.c:1442 legacy/trac#6 (closed) 0x0000000000497996 in circuit_unlink_all_from_channel (chan=0x11a7720, reason=8) at src/or/circuitlist.c:1047 legacy/trac#7 (closed) 0x000000000047ec78 in channel_closed (chan=0x11a7720) at src/or/channel.c:1288 legacy/trac#8 (closed) 0x00000000004d50b8 in connection_or_about_to_close (or_conn=0x26e2c80) at src/or/connection_or.c:601 legacy/trac#9 (closed) 0x00000000004bf91a in connection_about_to_close_connection (conn=0x26e2c80) at src/or/connection.c:633 legacy/trac#10 (closed) 0x0000000000409108 in connection_unlink (conn=0x26e2c80) at src/or/main.c:385 legacy/trac#11 (closed) 0x000000000040aa69 in conn_close_if_marked (i=18) at src/or/main.c:932 legacy/trac#12 (closed) 0x000000000040a151 in close_closeable_connections () at src/or/main.c:702 legacy/trac#13 (closed) 0x000000000040be70 in run_scheduled_events (now=1352251511) at src/or/main.c:1535 legacy/trac#14 (closed) 0x000000000040c396 in second_elapsed_callback (timer=0xd7afc0, arg=0x0) at src/or/main.c:1691 legacy/trac#15 (closed) 0x000000000054f892 in periodic_timer_cb (fd=-1, what=1, arg=0xd7afc0) at src/common/compat_libevent.c:599 legacy/trac#16 (closed) 0x00007ffff772f930 in event_process_active (base=0x7e04d0, flags=) at event.c:395 legacy/trac#17 (closed) event_base_loop (base=0x7e04d0, flags=) at event.c:547 legacy/trac#18 (closed) 0x000000000040cbdd in do_main_loop () at src/or/main.c:1987 legacy/trac#19 (closed) 0x000000000040e19d in tor_main (argc=3, argv=0x7fffffffe638) at src/or/main.c:2699 legacy/trac#20 (closed) 0x00000000004087a4 in main (argc=3, argv=0x7fffffffe638) at src/or/tor_main.c:30