The always-appreciated Stanford Checker found a memory leak in
net/socket.c :: sock_fasync.  It was a bit tricky since the memory was
only conditionally allocated, so must only conditionally be freed.