struct mlx5e_tir *tir = priv->indir_tir;
        struct mlx5_flow_destination dest = {};
        MLX5_DECLARE_FLOW_ACT(flow_act);
-       struct mlx5_flow_spec *spec;
        enum mlx5e_traffic_types tt;
        int err = 0;
 
-       spec = kvzalloc(sizeof(*spec), GFP_KERNEL);
-       if (!spec) {
-               err = -ENOMEM;
-               goto out;
-       }
-
        dest.type = MLX5_FLOW_DESTINATION_TYPE_TIR;
        tt = arfs_get_tt(type);
        if (tt == -EINVAL) {
                netdev_err(priv->netdev, "%s: bad arfs_type: %d\n",
                           __func__, type);
-               err = -EINVAL;
-               goto out;
+               return -EINVAL;
        }
 
        dest.tir_num = tir[tt].tirn;
 
-       arfs_t->default_rule = mlx5_add_flow_rules(arfs_t->ft.t, spec,
+       arfs_t->default_rule = mlx5_add_flow_rules(arfs_t->ft.t, NULL,
                                                   &flow_act,
                                                   &dest, 1);
        if (IS_ERR(arfs_t->default_rule)) {
                netdev_err(priv->netdev, "%s: add rule failed, arfs type=%d\n",
                           __func__, type);
        }
-out:
-       kvfree(spec);
+
        return err;
 }
 
 
                goto out;
        }
 
-       memset(spec, 0, sizeof(*spec));
        flow_act.action = MLX5_FLOW_CONTEXT_ACTION_DROP;
 
        /* Attach drop flow counter */
                dest_num++;
        }
        vport->ingress.legacy.drop_rule =
-               mlx5_add_flow_rules(vport->ingress.acl, spec,
+               mlx5_add_flow_rules(vport->ingress.acl, NULL,
                                    &flow_act, dst, dest_num);
        if (IS_ERR(vport->ingress.legacy.drop_rule)) {
                err = PTR_ERR(vport->ingress.legacy.drop_rule);
        struct mlx5_flow_destination drop_ctr_dst = {0};
        struct mlx5_flow_destination *dst = NULL;
        struct mlx5_flow_act flow_act = {0};
-       struct mlx5_flow_spec *spec;
        int dest_num = 0;
        int err = 0;
 
        if (err)
                return err;
 
-       /* Drop others rule (star rule) */
-       spec = kvzalloc(sizeof(*spec), GFP_KERNEL);
-       if (!spec)
-               goto out;
-
        flow_act.action = MLX5_FLOW_CONTEXT_ACTION_DROP;
 
        /* Attach egress drop flow counter */
                dest_num++;
        }
        vport->egress.legacy.drop_rule =
-               mlx5_add_flow_rules(vport->egress.acl, spec,
+               mlx5_add_flow_rules(vport->egress.acl, NULL,
                                    &flow_act, dst, dest_num);
        if (IS_ERR(vport->egress.legacy.drop_rule)) {
                err = PTR_ERR(vport->egress.legacy.drop_rule);
                         vport->vport, err);
                vport->egress.legacy.drop_rule = NULL;
        }
-out:
-       kvfree(spec);
+
        return err;
 }
 
        }
 
        /* Star rule to forward all traffic to uplink vport */
-       memset(spec, 0, sizeof(*spec));
        memset(&dest, 0, sizeof(dest));
        dest.type = MLX5_FLOW_DESTINATION_TYPE_VPORT;
        dest.vport.num = MLX5_VPORT_UPLINK;
        flow_act.action = MLX5_FLOW_CONTEXT_ACTION_FWD_DEST;
-       flow_rule = mlx5_add_flow_rules(esw->fdb_table.legacy.vepa_fdb, spec,
+       flow_rule = mlx5_add_flow_rules(esw->fdb_table.legacy.vepa_fdb, NULL,
                                        &flow_act, &dest, 1);
        if (IS_ERR(flow_rule)) {
                err = PTR_ERR(flow_rule);
 
                                                     struct mlx5_vport *vport)
 {
        u8 action[MLX5_UN_SZ_BYTES(set_action_in_add_action_in_auto)] = {};
-       static const struct mlx5_flow_spec spec = {};
        struct mlx5_flow_act flow_act = {};
        int err = 0;
        u32 key;
        flow_act.modify_hdr = vport->ingress.offloads.modify_metadata;
        vport->ingress.offloads.modify_metadata_rule =
                                mlx5_add_flow_rules(vport->ingress.acl,
-                                                   &spec, &flow_act, NULL, 0);
+                                                   NULL, &flow_act, NULL, 0);
        if (IS_ERR(vport->ingress.offloads.modify_metadata_rule)) {
                err = PTR_ERR(vport->ingress.offloads.modify_metadata_rule);
                esw_warn(esw->dev,
 
                              struct mlx5_flow_table *fdb,
                              struct mlx5_flow_table *next_fdb)
 {
-       static const struct mlx5_flow_spec spec = {};
        struct mlx5_eswitch *esw = fdb_chain->esw;
        struct mlx5_flow_destination dest = {};
        struct mlx5_flow_act act = {};
                act.action |= MLX5_FLOW_CONTEXT_ACTION_MOD_HDR;
        }
 
-       return mlx5_add_flow_rules(fdb, &spec, &act, &dest, 1);
+       return mlx5_add_flow_rules(fdb, NULL, &act, &dest, 1);
 }
 
 static int
 
                            struct mlx5_termtbl_handle *tt,
                            struct mlx5_flow_act *flow_act)
 {
-       static const struct mlx5_flow_spec spec = {};
        struct mlx5_flow_table_attr ft_attr = {};
        struct mlx5_flow_namespace *root_ns;
        int err;
                return -EOPNOTSUPP;
        }
 
-       tt->rule = mlx5_add_flow_rules(tt->termtbl, &spec, flow_act,
+       tt->rule = mlx5_add_flow_rules(tt->termtbl, NULL, flow_act,
                                       &tt->dest, 1);
 
        if (IS_ERR(tt->rule)) {
 
                    int num_dest)
 {
        struct mlx5_flow_root_namespace *root = find_root(&ft->node);
+       static const struct mlx5_flow_spec zero_spec = {};
        struct mlx5_flow_destination gen_dest = {};
        struct mlx5_flow_table *next_ft = NULL;
        struct mlx5_flow_handle *handle = NULL;
        u32 sw_action = flow_act->action;
        struct fs_prio *prio;
 
+       if (!spec)
+               spec = &zero_spec;
+
        fs_get_obj(prio, ft->node.parent);
        if (flow_act->action == MLX5_FLOW_CONTEXT_ACTION_FWD_NEXT_PRIO) {
                if (!fwd_next_prio_supported(ft))