mbuf strange behavior, panics using em driver

I've encountered some regular panics in
bus_dmamap_load_mbuf_sg() and also complaints from the
ethernet code about packets without packet headers.
I've traced it to mbufs that are "freed" in filter
code. 

Strangely, I set up a test where I steal packets (as
if pfil grabbed the packet) and return NULL without
freeing the mbuf. Yet the mbufs continue to be used
over and over again (I'm monitoring the mbuf addresses
in ether_input()). Its as if the em driver is using
the mbuf continuously whether its been freed or not.

I also don't see mbuf cluster in use count going up as
I should with a forced memory leak. What is going on?

Barney


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ