kern/42147: mbuf leak with in nfsserver with udp clients

[leo%marco.de@localhost]

>Number:         42147
>Category:       kern
>Synopsis:       mbuf leak with in nfsserver with udp clients
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Oct 02 13:20:01 +0000 2009
>Originator:     leo%marco.de@localhost
>Release:        NetBSD 5.0_STABLE
>Organization:
Matthias Pfaller                            Software Entwicklung
marco Systemanalyse und Entwicklung GmbH    Tel   +49 8131 5161 41
Hans-Böckler-Str. 2, D 85221 Dachau         Fax   +49 8131 5161 66
http://www.marco.de/                        Email leo%marco.de@localhost
>Environment:
        
        
System: NetBSD zork 5.0_STABLE NetBSD 5.0_STABLE (ZORK) #15: Wed Sep 30 
09:10:09 CEST 2009 leo@slug:/usr/src-5.0/sys/arch/i386/compile/ZORK i386
Architecture: i386
Machine: i386
>Description:
        We are using a netbsd machine for the nfs service. When a linux client
        mounts a filesystem from this server using an udp connection the
        kernel starts to allocate mbufs it never frees. After some time
        you will get "WARNING: mclpool limit reached; increase NMBCLUSTERS"
        messages and nfs service will more or less stop.
        A dmesg output is appended. The file systems are mounted via fxp0.
>How-To-Repeat:
        reboot a netbsd-5 machine, do a netstat -m. mount a file system from
        this machine and do a "cat large_file_from_nfs_server >/dev/null"
        (e.g. 2-4gb of data). Do a netstat -m again.
>Fix:
        Use a tcp mount.

Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 5.0_STABLE (ZORK) #15: Wed Sep 30 09:10:09 CEST 2009
        leo@slug:/usr/src-5.0/sys/arch/i386/compile/ZORK
total memory = 510 MB
avail memory = 497 MB
timecounter: Timecounters tick every 10.000 msec
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
Compaq  
mainbus0 (root)
cpu0 at mainbus0 apid 0: Intel 686-class, 996MHz, id 0x68a
ioapic0 at mainbus0 apid 8: pa 0xfec00000, version 20, 24 pins
acpi0 at mainbus0: Intel ACPICA 20080321
acpi0: X/RSDT: OemId <COMPAQ,CPQ0005 ,20010405>, AslId <    ,00000000>
acpi0: SCI interrupting at int 9
acpi0: fixed-feature power button present
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
ACPI-Fast 24-bit timer
npx0 at acpi0 (NCP, PNP0C04): io 0xf0-0xff irq 13
npx0: reported by CPUID; using exception 16
attimer0 at acpi0 (TIME, PNP0100): io 0x40-0x43 irq 0
pcppi0 at acpi0 (SPKR, PNP0800): io 0x61
midi0 at pcppi0: PC speaker (CPU-intensive output)
sysbeep0 at pcppi0
pckbc0 at acpi0 (PS2M, PNP0F13) (aux port): irq 12
pckbc1 at acpi0 (KBD, PNP0303) (kbd port): io 0x60,0x64 irq 1
APIC (PNP0003) at acpi0 not configured
acpibut0 at acpi0 (PBTN, PNP0C0C): ACPI Power Button
apm0 at acpi0: Power Management spec V1.2
attimer0: attached to pcppi0
pckbd0 at pckbc1 (kbd slot)
pckbc1: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0
pchb0: vendor 0x8086 product 0x1130 (rev. 0x04)
agp0 at pchb0: aperture at 0x44000000, size 0x4000000
vga0 at pci0 dev 2 function 0: vendor 0x8086 product 0x1132 (rev. 0x04)
wsdisplay0 at vga0 kbdmux 1: console (80x25, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
drm at vga0 not configured
ppb0 at pci0 dev 30 function 0: vendor 0x8086 product 0x244e (rev. 0x02)
pci1 at ppb0 bus 2
pci1: i/o space, memory space enabled
uhci0 at pci1 dev 4 function 0: vendor 0x1106 product 0x3038 (rev. 0x61)
uhci0: interrupting at ioapic0 pin 16
usb0 at uhci0: USB revision 1.0
uhci1 at pci1 dev 4 function 1: vendor 0x1106 product 0x3038 (rev. 0x61)
uhci1: interrupting at ioapic0 pin 18
usb1 at uhci1: USB revision 1.0
ehci0 at pci1 dev 4 function 2: vendor 0x1106 product 0x3104 (rev. 0x63)
ehci0: interrupting at ioapic0 pin 21
ehci0: dropped intr workaround enabled
ehci0: EHCI version 1.0
ehci0: companion controllers, 2 ports each: uhci0 uhci1
usb2 at ehci0: USB revision 2.0
fxp0 at pci1 dev 8 function 0: Intel i82562 Ethernet, rev 1
fxp0: interrupting at ioapic0 pin 20
fxp0: Ethernet address 00:02:a5:ab:ac:6b
inphy0 at fxp0 phy 1: i82562EM 10/100 media interface, rev. 0
inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp1 at pci1 dev 9 function 0: i82559 Ethernet, rev 8
fxp1: interrupting at ioapic0 pin 18
fxp1: Ethernet address 00:50:8b:b4:7d:7d
inphy1 at fxp1 phy 1: i82555 10/100 media interface, rev. 4
inphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
wm0 at pci1 dev 11 function 0: Intel i82541PI 1000BASE-T Ethernet, rev. 5
wm0: interrupting at ioapic0 pin 22
wm0: 32-bit 33MHz PCI bus
wm0: 64 word (6 address bits) MicroWire EEPROM
wm0: Ethernet address 00:0e:0c:c4:43:51
igphy0 at wm0 phy 1: Intel IGP01E1000 Gigabit PHY, rev. 0
igphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 
1000baseT-FDX, auto
ichlpcib0 at pci0 dev 31 function 0
ichlpcib0: vendor 0x8086 product 0x2440 (rev. 0x02)
timecounter: Timecounter "ichlpcib0" frequency 3579545 Hz quality 1000
ichlpcib0: 24-bit timer
ichlpcib0: TCO (watchdog) timer configured.
piixide0 at pci0 dev 31 function 1
piixide0: Intel 82801BA IDE Controller (ICH2) (rev. 0x02)
piixide0: bus-master DMA support present
piixide0: primary channel wired to compatibility mode
piixide0: primary channel interrupting at ioapic0 pin 14
atabus0 at piixide0 channel 0
piixide0: secondary channel wired to compatibility mode
piixide0: secondary channel interrupting at ioapic0 pin 15
atabus1 at piixide0 channel 1
uhci2 at pci0 dev 31 function 4: vendor 0x8086 product 0x2444 (rev. 0x02)
uhci2: interrupting at ioapic0 pin 23
usb3 at uhci2: USB revision 1.0
auich0 at pci0 dev 31 function 5: i82801BA (ICH2) AC-97 Audio
auich0: interrupting at ioapic0 pin 17
auich0: ac97: Analog Devices AD1885 codec; headphone, Analog Devices Phat Stereo
auich0: ac97: ext id 1<VRA>
isa0 at ichlpcib0
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
auich0: measured ac97 link rate at 55134 Hz, will use 55000 Hz
audio0 at auich0: full duplex, mmap, independent
uhub0 at usb0: vendor 0x1106 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhub1 at usb1: vendor 0x1106 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhub2 at usb2: vendor 0x1106 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 4 ports with 4 removable, self powered
uhub3 at usb3: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
umass0 at uhub3 port 1 configuration 1 interface 0
umass0: USBest Technology USB Mass Storage Device, rev 2.00/1.00, addr 2
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets, 1 lun per target
sd0 at scsibus0 target 0 lun 0: <UDISK, PDU15_8G 8BI2.0, 0.00> disk removable
sd0: 7712 MB, 500 cyl, 8 head, 32 sec, 512 bytes/sect x 15794176 sectors
wd0 at atabus0 drive 0: <ST3500641A>
wd0: quirks 2<FORCE_LBA48>
wd0: drive supports 16-sector PIO transfers, LBA48 addressing
wd0: 465 GB, 969021 cyl, 16 head, 63 sec, 512 bytes/sect x 976773168 sectors
wd0: 32-bit data port
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd0(piixide0:0:0): using PIO mode 4, Ultra-DMA mode 5 (Ultra/100) (using DMA)
wd2 at atabus1 drive 0: <SAMSUNG HD300LD>
wd2: drive supports 16-sector PIO transfers, LBA48 addressing
wd2: 279 GB, 581421 cyl, 16 head, 63 sec, 512 bytes/sect x 586072368 sectors
wd2: 32-bit data port
wd2: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd3 at atabus1 drive 1: <SAMSUNG HD300LD>
wd3: drive supports 16-sector PIO transfers, LBA48 addressing
wd3: 279 GB, 581421 cyl, 16 head, 63 sec, 512 bytes/sect x 586072368 sectors
wd3: 32-bit data port
wd3: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd2(piixide0:1:0): using PIO mode 4, Ultra-DMA mode 5 (Ultra/100) (using DMA)
wd3(piixide0:1:1): using PIO mode 4, Ultra-DMA mode 5 (Ultra/100) (using DMA)
Kernelized RAIDframe activated
raid0: RAID Level 1
raid0: Components: /dev/wd2a /dev/wd3a
raid0: Total Sectors: 586072192 (286168 MB)
boot device: wd0
root on sd0a dumps on sd0b
root file system type: ffs
pppoe0: connected to ac2.muc1
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 3 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)
fxp0: device timeout

>Unformatted: