***************
   *** 872,877 ****
   --- 872,878 ----
			   sc->sc_arpcom.ac_if.if_ipackets++;
		   }

   + 		cdm->bcnt = -BUFSIZE;
		   cdm->mcnt = 0;
		   cdm->flags |= LE_OWN;
		   NEXTRDS;

One has to wonder if they changed the documented behavior of that
field, or if they just blew it.  Someone who has PCnet-32 docs and
more time than me might want to get a definitive answer.  Regardless,
the above patch is innocuous enough that I'm not going to argue with
it if it works.