Sean> I think that the send_handler in user_mad.c is broken. I don't see anything obviously wrong -- in Jay's log, the call to ib_free_send_mad() is crashing. When can it be wrong to do that from the send handler? - R.