MFC r273967:

Only trigger a panic when forced operation is done.  Convert direct
panic() call into KASSERT().