default size for NAT_TABLE_MAX is just too much, when forced =20000 (and bumped NAT_TABLE_SZ to 20000 too - so static table no resizes) solved the problem. before that - kernel memory just got fully utilized and there was even no space to process NFS request.