RDMA/mlx5: Remove raw RSS QP restrack tracking

Raw RSS QP restrack tracking wasn't working to begin with as it was
only tracking the first raw RSS QP which was added, since at creation
the raw RSS QP number is reserved so the QP number for this qp type
was always zero.
The following raw RSS QP additions were always failing silently.

Since the fix isn't trivial and there were no users that required or
complained about this issue we are dropping this for now instead of fixing.

Fixes: 968f0b6f9c01 ("RDMA/mlx5: Consolidate into special function all create QP calls")
Link: https://patch.msgid.link/r/20260607-restrack-uaf-fix-v1-2-d72e45eb76c2@nvidia.com
Signed-off-by: Patrisious Haddad <phaddad@nvidia.com>
Reviewed-by: Michael Guralnik <michaelgur@nvidia.com>
Signed-off-by: Edward Srouji <edwards@nvidia.com>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>

diff --git a/drivers/infiniband/hw/mlx5/qp.c b/drivers/infiniband/hw/mlx5/qp.c
index a9575219cdd14e7674f3e439ccbb60f5e02309bf..d195131d06f27a25767c66f7c7941b7b16378d8d 100644 (file)
--- a/drivers/infiniband/hw/mlx5/qp.c
+++ b/drivers/infiniband/hw/mlx5/qp.c
@@ -3140,6 +3140,7 @@ static int create_qp(struct mlx5_ib_dev *dev, struct ib_pd *pd,
        int err;
 
        if (params->is_rss_raw) {
+               rdma_restrack_no_track(&qp->ibqp.res);
                err = create_rss_raw_qp_tir(dev, pd, qp, params);
                goto out;
        }