RDMA/erdma: Hold CQ references when processing EQ events

Browse source

EQ handlers look up CQs from dev->cq_xa and invoke CQ completion or
error callbacks outside the xarray lock. erdma_destroy_cq() can erase the
CQ from the xarray and free its queue buffer and doorbell record while a
previously scheduled EQ handler is still using the CQ.

Add a CQ refcount and take a reference under the xarray lock with
refcount_inc_not_zero(). Remove the CQ from the xarray before dropping
the destroy-path reference, then wait for in-flight EQ users before
releasing CQ resources.

Fixes: 1550557717 ("RDMA/erdma: Add verbs implementation")
Signed-off-by: Cheng Xu <chengyou@linux.alibaba.com>
Link: https://patch.msgid.link/20260730124357.12976-1-chengyou@linux.alibaba.com
Signed-off-by: Leon Romanovsky <leon@kernel.org>

...

This commit is contained in:

Cheng Xu 2026-07-30 20:43:53 +08:00 • committed by Leon Romanovsky

parent 6aad80a1d4

commit 98df2aee14

3 changed files with 37 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

6

drivers/infiniband/hw/erdma/erdma_eq.c

View file

12

drivers/infiniband/hw/erdma/erdma_verbs.c

View file

25

drivers/infiniband/hw/erdma/erdma_verbs.h

View file