do_one_ref(): null_sha1 check is not about broken ref