Re: [PATCH] RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted

[quanyeyang]

On Thursday, September 3rd, 2026 at AM 12:48, Jinpu Wang <jinpu.wang@xxxxxxxxxxxxxxx> wrote:

> Hi Leon, hi Quanye,
> 
> I had a look at the report. The syzbot bug seems to be triggered with
> smbdirect (ib_dev[syz2] removed), so I'm not sure how this change in
> RTRS client would fix that issue.

Hi Jinpu,

The smbdirect line is from ib_client->remove() during disable_device(),
which always runs before ib_cq_pool_cleanup(). smbdirect just logs that
the IB device is going away; it does not use ib_cq_pool_get().

rtrs is not an ib_client, so it does not appear in that remove loop.
The leftover cqe_used comes from rtrs-clt borrowing pool credits in
ADDR_RESOLVED and then dropping the con without PUT, which we hit
locally with rnbd-client only (no smbdirect traffic): map_device with
path=ip:127.0.0.1, interrupt create_cm(), then rdma link delete.

The same "ib_dev[...] removed" line shows up in that repro right before
the WARN, for the same reason it shows up on syzbot.

Thanks,
Quanye

> 
> Thanks,
> Jinpu