As the XXX comments say, I'm not quite sure this is sufficient identify check, nor whether it is possible that we need to handle `B_REMFREE` (e.g., if we spuriously got a reused buf with that flag) — `BUF_UNLOCK()` asserts on `B_REMFREE`.
Quite surprisingly to me, it doesn't seem to immediately panic. So I'm probably missing something.