From owner-freebsd-net@FreeBSD.ORG  Wed Nov 30 02:50:30 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AA7E616A420
	for <freebsd-net@freebsd.org>; Wed, 30 Nov 2005 02:50:30 +0000 (GMT)
	(envelope-from nielsen-list@memberwebs.com)
Received: from mail.npubs.com (mail.writemehere.com [209.66.100.224])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 55C9F43D8C
	for <freebsd-net@freebsd.org>; Wed, 30 Nov 2005 02:50:11 +0000 (GMT)
	(envelope-from nielsen-list@memberwebs.com)
Message-ID: <438CE0A8.4010205@memberwebs.com>
From: Nate Nielsen <nielsen-list@memberwebs.com>
User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051013)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-net@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV using ClamSMTP
Date: Wed, 30 Nov 2005 03:04:43 +0000 (GMT)
Subject: Memory leak in net80211 on FBSD 6.0
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: nielsen@memberwebs.com
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2005 02:50:30 -0000

I'm experiencing a memory leak in the net80211 code. I have two atheros
5213-A cards on two embedded systems running FreeBSD 6.0. They are setup
as IBSS (adhoc) stations. After roughly 15 seconds of ~14Mbps TCP
traffic (single stream) I promptly run out of memory:

> login: panic: kmem_malloc(4096): kmem_map too small: 25165824 total allocated
> Uptime: 3m0s
> Cannot dump. No dump device defined.
> Automatic reboot in 5 seconds - press a key on the console to abort
> Rebooting...

The boxes have 64MB of memory each.
vmstat -m reports the following just before the panic:

>          Type InUse MemUse HighUse Requests  Size(s)
> <snip>
>     80211node 20554 20554K       -    20559  512,1024

The cards are configured as follows (in other words, nothing special):

> ath0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         inet 10.2.2.5 netmask 0xffffff00 broadcast 10.2.2.255
>         ether 00:15:6d:10:19:21
>         media: IEEE 802.11 Wireless Ethernet OFDM/24Mbps mode 11g <adhoc>
>         status: associated
>         ssid jumper channel 3 bssid 02:15:6d:10:19:21
>         authmode OPEN privacy OFF txpowmax 56 protmode CTS bintval 100

I've got this sorta thing in my kernel:

> device          wlan            # 802.11 support
> device          wlan_wep
> device          wlan_ccmp
> device          wlan_tkip
> device          wlan_xauth
> device          wlan_acl
> device          ath             # Atheros
> device          ath_hal
> device          ath_rate_onoe

I'll continue to hack away at this problem, but I don't have much
experience with the FreeBSD kernel. If anyone has any ideas, I'd love to
hear from you.

Cheers,
Nate