I guess I should have looked at it for more than three seconds :-) Those errors were from a kill sent to exim when it was stopped and restarted. I have a ton of connections to a site that is down right now and these got logged when exim shut down. Sorry to have jumped the gun but I am "spring loaded" to blame libc at this point for any weirdies I see.