RDMA/mlx5: Fix number of allocated XLT entries
Subsystems (2)
PATCH RESEND 1/2 RDMA/mlx5: Fix number of allocated XLT entries
In commit 8010d74b9965b ("RDMA/mlx5: Split the WR setup out of mlx5_ib_update_xlt()") the allocation logic was split out of mlx5_ib_update_xlt() and the logic was changed to enable better OOM handling. Sadly this change introduced a miscalculation of the number of entries that were actually allocated when under memory pressure where it can actually become 0 which on s390 lets dma_map_single() fail.
It can also lead to corruption of the free pages list when the wrong number of entries is used in the calculation of sg->length which is used as argument for free_pages().
Fix this by using the allocation size instead of misusing get_order(size).
--- drivers/infiniband/hw/mlx5/mr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
drivers/infiniband/hw/mlx5/mr.c +1 -1
@@ -1024,7 +1024,7 @@ static void *mlx5_ib_alloc_xlt(size_t *nents, size_t ent_size, gfp_t gfp_mask)if (size >MLX5_SPARE_UMR_CHUNK ) { size =MLX5_SPARE_UMR_CHUNK ; - *nents =get_order (size) / ent_size; + *nents = size / ent_size; res = (void *)__get_free_pages (gfp_mask | __GFP_NOWARN,get_order (size));if (res)
Signature · 1 line
2.25.1
PATCH RESEND 2/2 RDMA/mlx5: Fix xlt_chunk_align calculation
The XLT chunk alignment depends on ent_size not sizeof(ent_size) aka sizeof(size_t).
--- drivers/infiniband/hw/mlx5/mr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
drivers/infiniband/hw/mlx5/mr.c +1 -1
@@ -995,7 +995,7 @@ static struct mlx5_ib_mr *alloc_cacheable_mr(struct ib_pd *pd,static void *mlx5_ib_alloc_xlt (size_t *nents,size_t ent_size,gfp_t gfp_mask) {const size_t xlt_chunk_align = -MLX5_UMR_MTT_ALIGNMENT /sizeof (ent_size); +MLX5_UMR_MTT_ALIGNMENT / ent_size;size_t size;void *res =NULL ;
Signature · 1 line
2.25.1
Jason Gunthorpe
maintainerQuoted 14 lines · Niklas Schnelle
In commit
8010d74b9965b("RDMA/mlx5: Split the WR setup out ofmlx5_ib_update_xlt()") the allocation logic was split out ofmlx5_ib_update_xlt()and the logic was changed to enable better OOM handling. Sadly this change introduced a miscalculation of the number of entries that were actually allocated when under memory pressure where it can actually become 0 which on s390 letsdma_map_single()fail.It can also lead to corruption of the free pages list when the wrong number of entries is used in the calculation of
sg->lengthwhich is used as argument forfree_pages().Fix this by using the allocation size instead of misusing
get_order(size).
Quoted 6 lines
Fixes 8010d74b9965b ("RDMA/mlx5: Split the WR setup out of mlx5_ib_update_xlt()")Signed-off-by Niklas Schnelle <[email protected]>--- drivers/infiniband/hw/mlx5/mr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
Both patches applied to for-rc, thanks
Jason