Our problem was solved by reducing the interface mtu from 9000 to 1500. I'm still trying to determine whether rx or the net was misbehaving. Rx knew the correct path mtu, according to the fields in the acks.