btrfs: free iov when btrfs_uring_read_extent fails

After btrfs_uring_read_extent(), the caller always jumped to out_acct.
That skips kfree(data->iov), which is only correct for -EIOCBQUEUED
where the deferred path owns the iov. On failure, fall through to
out_free instead.

Fixes: 34310c442e17 ("btrfs: add io_uring command for encoded reads (ENCODED_READ ioctl)")
Signed-off-by: Yang Xiuwei <yangxiuwei@kylinos.cn>
Signed-off-by: David Sterba <dsterba@suse.com>

diff --git a/fs/btrfs/ioctl.c b/fs/btrfs/ioctl.c
index 54960351fbd1713f9e853620a810e12b5068dd9f..64ccfa5fefdabf99f60a8b80aebce36e14519eb4 100644 (file)
--- a/fs/btrfs/ioctl.c
+++ b/fs/btrfs/ioctl.c
@@ -4865,8 +4865,8 @@ static int btrfs_uring_encoded_read(struct io_uring_cmd *cmd, unsigned int issue
                                              cached_state, disk_bytenr, disk_io_size,
                                              count, data->args.compression,
                                              data->iov, cmd);
-
-               goto out_acct;
+               if (ret == -EIOCBQUEUED)
+                       goto out_acct;
        }
 
 out_free: