I think we may need similar logic to PacketTunnelPktSetup() here. Like tunnel packets, defrag packets use the tunnel refcnt logic. So on failure this too needs to be handled.