I think what we may have here is a data overflow somewhere interfering with adjacent mbufs in memory. I will commit some additional asserts to try to catch it earlier. I have gotten similar crashes. -Matt