Thanks, I think I see the problem. There seems to be a bug in mthca_memfree.c, where doorbell records are not reclaimed properly. I should have a fix for you to test by the end of the week. - R.