Btrfs fixes for 6.18-rc3

Hi,

please pull a few btrfs fixes. Thanks.

- in send, fix duplicated rmdir operations when using extrefs (hardlinks), receive can fail with ENOENT

- fixup of error check when reading extent root in ref-verify and damaged roots are allowed by mount option (found by smatch)

- fix freeing partially initialized fs info (found by syzkaller)

- fix use-after-free when printing ref_tracking status of delayed inodes

----------------------------------------------------------------
The following changes since commit 8aec9dbf2db2e958de5bd20e23b8fbb8f2aa1fa6:

btrfs: send: fix -Wflex-array-member-not-at-end warning in struct send_ctx (2025-10-13 22:36:38 +0200)

are available in the Git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux.git tags/for-6.18-rc2-tag

for you to fetch changes up to ada7d45b568abe4f1fd9c53d66e05fbea300674b:

btrfs: ref-verify: fix IS_ERR() vs NULL check in btrfs_build_ref_tree() (2025-10-22 09:40:07 +0200)

----------------------------------------------------------------
Amit Dhingra (1):
btrfs: ref-verify: fix IS_ERR() vs NULL check in btrfs_build_ref_tree()

Dewei Meng (1):
btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()

Leo Martins (1):
btrfs: fix delayed_node ref_tracker use after free

Ting-Chang Hou (1):
btrfs: send: fix duplicated rmdir operations when using extrefs

 fs/btrfs/delayed-inode.c |  2 +-
 fs/btrfs/delayed-inode.h |  7 ++++++
 fs/btrfs/ref-verify.c    |  2 +-
 fs/btrfs/send.c          | 56 +++++++++++++++++++++++++++++++++++++++++-------
 fs/btrfs/super.c         |  8 ++++++-
 5 files changed, 64 insertions(+), 11 deletions(-)