b4db900931
long being DMA'ed 2 (or 1) bytes past the end of the mbuf and corrupting random kernel memory. I had forgotten about the 2 bytes of implict padding the firmware assumes. Sponsored by: Myricom Inc.