Btrfs: fix use after free in O_DIRECT