fs: prevent out-of-bounds array speculation when closing a file descriptor

stable inclusion
from stable-v5.10.175
commit a759905de9cd6ec9ca08ceadf0920272772ed830
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I8711T

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=a759905de9cd6ec9ca08ceadf0920272772ed830



--------------------------------

commit 609d5444 upstream.

Google-Bug-Id: 114199369
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: sanglipeng <sanglipeng1@jd.com>