--- sys/kern/uipc_socket.c	2026-10-12 23:59:41.452294599 +0000
+++ /tmp/opencode/v26/fixtree/sys/kern/uipc_socket.c	2026-10-24 16:33:07.877714441 +0000
@@ -1650,6 +1650,7 @@
 				sbappend(sio, m);
 				KKASSERT(resid >= (size_t)m->m_len);
 				resid -= (size_t)m->m_len;
+				m = m_free(m);		/* DF-2696 */
 			} while (resid > 0 && m);
 		} else {
 			do {