IB/hns: Cq has not been freed

Cq has not been freed when fail to ib_copy_to_udata, so need to
free it.

Signed-off-by: Lijun Ou <oulijun@huawei.com>
Signed-off-by: Peter Chen <luck.chen@huawei.com>
Reviewed-by:  Wei Hu (Xavier) <xavier.huwei@huawei.com>
Signed-off-by: Salil Mehta <salil.mehta@huawei.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>

1 files changed, 4 insertions, 1 deletions

diff --git a/drivers/infiniband/hw/hns/hns_roce_cq.c b/drivers/infiniband/hw/hns/hns_roce_cq.c
index 3095f06099e6..097365932b09 100644
--- a/drivers/infiniband/hw/hns/hns_roce_cq.c
+++ b/drivers/infiniband/hw/hns/hns_roce_cq.c
@@ -357,12 +357,15 @@ struct ib_cq *hns_roce_ib_create_cq(struct ib_device *ib_dev,
         if (context) {
                 if (ib_copy_to_udata(udata, &hr_cq->cqn, sizeof(u64))) {
                         ret = -EFAULT;
-                        goto err_mtt;
+                        goto err_cqc;
                 }
         }
 
         return &hr_cq->ib_cq;
 
+err_cqc:
+        hns_roce_free_cq(hr_dev, hr_cq);
+
 err_mtt:
         hns_roce_mtt_cleanup(hr_dev, &hr_cq->hr_buf.hr_mtt);
         if (context)