CVE-2026-98964: nvmet: use the local P2P device on metadata allocation failure

In the Linux kernel, the following vulnerability has been resolved:

nvmet: use the local P2P device on metadata allocation failure

nvmetreqallocp2pmemsgls() assigns req->p2pdev only after the data and metadata SGL allocations succeed. If the data allocation succeeds but the metadata allocation fails, outfreesg passes req->p2pdev to pcip2pmemfreesgl() before that assignment has taken place.

Pass the local p2pdev argument instead, so cleanup uses the same PCI device as the successful data allocation.