Looks like there is a missing sbsync here [1], in addition to mbuf_removed that is not set correctly, this means we wreck pointers. [1] https://nxr.netbsd.org/xref/src/sys/kern/uipc_socket.c?r=1.269#1362