On Sun, Apr 25, 2021 at 04:44:55PM +0300, Leon Romanovsky wrote: > > > The proposed prepare/abort/finish flow is much harder to implement correctly. > > > Let's take as an example ib_destroy_qp_user(), we called to rdma_rw_cleanup_mrs(), > > > but didn't restore them after .destroy_qp() failure. > > > > I think it is a bug we call rdma_rw code in a a user path. > > It was an example of a flow that wasn't restored properly. > The same goes for ib_dealloc_pd_user(), release of __internal_mr. > > Of course, these flows shouldn't fail because of being kernel flows, but it is not clear > from the code. Well, exactly, user flows are not allowed to do extra stuff before calling the driver destroy So the arrangement I gave is reasonable and make sense, it is certainly better than the hodge podge of ordering that we have today Jason