UPSTREAM: io_uring: have io_kill_timeout() honor the request references

No upstream commit exists for this patch.

Don't free the request unconditionally, if the request is issued async
then someone else may be holding a submit reference to it.

Bug: 278721720
Reported-and-tested-by: Lee Jones <lee@kernel.org>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 9ba28194)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I05b6b0959befa4825aba60c397a115701e9b64ee