--- drivers/infiniband/core/cm.c

+++ drivers/infiniband/core/cm.c

@@ -2986,6 +2986,7 @@ static int cm_sidr_req_handler(struct cm

goto out; /* No match. */

}

atomic_inc(&cur_cm_id_priv->refcount);

+ atomic_inc(&cm_id_priv->refcount);

spin_unlock_irq(&cm.lock);

cm_id_priv->id.cm_handler = cur_cm_id_priv->id.cm_handler;