io_uring/rsrc: don't put/free empty buffers

JIRA: https://issues.redhat.com/browse/RHEL-106845

commit 99d6af6
Author: Jens Axboe <[email protected]>
Date:   Thu Dec 12 08:01:52 2024 -0700

    io_uring/rsrc: don't put/free empty buffers

    If cloning of buffers fail and we have to put the ones already grabbed,
    check for NULL buffers and skip those. They used to be dummy ubufs, but
    now they are just NULL and that should be checked before reaping them.

    Reported-by: chase xd <[email protected]>
    Link: https://lore.kernel.org/io-uring/CADZouDQ7TcKn8gz8_efnyAEp1JvU1ktRk8PWz-tO0FXUoh8VGQ@mail.gmail.com/
    Fixes: d50f94d ("io_uring/rsrc: get rid of the empty node and dummy_ubuf")
    Signed-off-by: Jens Axboe <[email protected]>

Signed-off-by: Ming Lei <[email protected]>

Author: Ming Lei

io_uring/rsrc.c

@@ -1043,8 +1043,10 @@ static int io_clone_buffers(struct io_ring_ctx *ctx, struct io_ring_ctx *src_ctx
 out_put_free:
 	i = data.nr;
 	while (i--) {
-		io_buffer_unmap(src_ctx, data.nodes[i]);
-		kfree(data.nodes[i]);
+		if (data.nodes[i]) {
+			io_buffer_unmap(src_ctx, data.nodes[i]);
+			kfree(data.nodes[i]);
+		}
 	}
 out_unlock:
 	io_rsrc_data_free(ctx, &data);