It looks like there might be minor race issue in the SA query code. ib_sa_path_rec_get() and ib_sa_mcmember_rec_query() both return query->sa_query.id. However, if a send completes quickly, I think that it's possible that query could have been freed. I don't think that this is affecting anyone. - Sean