io_uring/net: don't pick multiple buffers for non-bundle send

commit 8fe8ac24adcd76b12edbfdefa078567bfff117d4 upstream.

If a send is issued marked with IOSQE_BUFFER_SELECT for selecting a
buffer, unless it's a bundle, it should not select multiple buffers.

Cc: stable@vger.kernel.org
Fixes: a05d1f625c7a ("io_uring/net: support bundles for send")
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

diff --git a/io_uring/net.c b/io_uring/net.c
index d1d69288e2c8dd128302dc526047817506ff96e8..09bb82bc209a10e7277ec19909fb816834222c56 100644 (file)
--- a/io_uring/net.c
+++ b/io_uring/net.c
@@ -591,17 +591,18 @@ retry_bundle:
                        .iovs = &kmsg->fast_iov,
                        .max_len = INT_MAX,
                        .nr_iovs = 1,
-                       .mode = KBUF_MODE_EXPAND,
                };
 
                if (kmsg->free_iov) {
                        arg.nr_iovs = kmsg->free_iov_nr;
                        arg.iovs = kmsg->free_iov;
-                       arg.mode |= KBUF_MODE_FREE;
+                       arg.mode = KBUF_MODE_FREE;
                }
 
                if (!(sr->flags & IORING_RECVSEND_BUNDLE))
                        arg.nr_iovs = 1;
+               else
+                       arg.mode |= KBUF_MODE_EXPAND;
 
                ret = io_buffers_select(req, &arg, issue_flags);
                if (unlikely(ret < 0))