BUG: memory leak
unreferenced object 0xffff88810f6c6140 (size 64):
  comm "syz-executor.0", pid 5094, jiffies 4294991088 (age 8.480s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 62 6c 0f 81 88 ff ff  .........bl.....
    40 62 6c 0f 81 88 ff ff 00 20 52 00 00 00 00 00  @bl...... R.....
  backtrace:
    [<ffffffff8163331d>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff8163331d>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff8163331d>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff8163331d>] __kmem_cache_alloc_node+0x2dd/0x3f0 mm/slub.c:3517
    [<ffffffff8157e175>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1098
    [<ffffffff82137a60>] kmalloc include/linux/slab.h:600 [inline]
    [<ffffffff82137a60>] kzalloc include/linux/slab.h:721 [inline]
    [<ffffffff82137a60>] btrfs_add_delayed_tree_ref+0x550/0x5b0 fs/btrfs/delayed-ref.c:1045
    [<ffffffff82089a9b>] btrfs_alloc_tree_block+0x65b/0x7c0 fs/btrfs/extent-tree.c:5153
    [<ffffffff8206e73e>] btrfs_force_cow_block+0x1be/0xb30 fs/btrfs/ctree.c:563
    [<ffffffff8206f1d8>] btrfs_cow_block+0x128/0x3b0 fs/btrfs/ctree.c:741
    [<ffffffff82075be9>] btrfs_search_slot+0xa49/0x1770 fs/btrfs/ctree.c:2095
    [<ffffffff82077583>] btrfs_insert_empty_items+0x43/0xc0 fs/btrfs/ctree.c:4285
    [<ffffffff820bb014>] btrfs_create_new_inode+0x354/0xfe0 fs/btrfs/inode.c:6283
    [<ffffffff820bbfc7>] btrfs_create_common+0xf7/0x190 fs/btrfs/inode.c:6511
    [<ffffffff820bc1f2>] btrfs_create+0x72/0x90 fs/btrfs/inode.c:6551
    [<ffffffff816b639f>] lookup_open fs/namei.c:3477 [inline]
    [<ffffffff816b639f>] open_last_lookups fs/namei.c:3546 [inline]
    [<ffffffff816b639f>] path_openat+0x17df/0x1d60 fs/namei.c:3776
    [<ffffffff816b7541>] do_filp_open+0xd1/0x1c0 fs/namei.c:3809
    [<ffffffff81690324>] do_sys_openat2+0xf4/0x150 fs/open.c:1440
    [<ffffffff81690d0f>] do_sys_open fs/open.c:1455 [inline]
    [<ffffffff81690d0f>] __do_sys_openat fs/open.c:1471 [inline]
    [<ffffffff81690d0f>] __se_sys_openat fs/open.c:1466 [inline]
    [<ffffffff81690d0f>] __x64_sys_openat+0xaf/0x100 fs/open.c:1466
    [<ffffffff84b67d8f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b67d8f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82

BUG: memory leak
unreferenced object 0xffff88810f65eac0 (size 32):
  comm "syz-executor.0", pid 5094, jiffies 4294991089 (age 8.470s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 c8 ea 65 0f 81 88 ff ff  ..........e.....
    c8 ea 65 0f 81 88 ff ff 00 00 00 00 00 00 00 00  ..e.............
  backtrace:
    [<ffffffff8163331d>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff8163331d>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff8163331d>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff8163331d>] __kmem_cache_alloc_node+0x2dd/0x3f0 mm/slub.c:3517
    [<ffffffff8157e175>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1098
    [<ffffffff8215c950>] kmalloc include/linux/slab.h:600 [inline]
    [<ffffffff8215c950>] ulist_alloc+0x40/0xc0 fs/btrfs/ulist.c:99
    [<ffffffff82157543>] btrfs_find_all_roots_safe+0x163/0x1c0 fs/btrfs/backref.c:1762
    [<ffffffff821577bb>] btrfs_find_all_roots+0x8b/0xd0 fs/btrfs/backref.c:1808
    [<ffffffff821633ee>] btrfs_qgroup_trace_extent_post+0xce/0x1c0 fs/btrfs/qgroup.c:1975
    [<ffffffff8213792e>] btrfs_add_delayed_tree_ref+0x41e/0x5b0 fs/btrfs/delayed-ref.c:1096
    [<ffffffff82089a9b>] btrfs_alloc_tree_block+0x65b/0x7c0 fs/btrfs/extent-tree.c:5153
    [<ffffffff8206e73e>] btrfs_force_cow_block+0x1be/0xb30 fs/btrfs/ctree.c:563
    [<ffffffff8206f1d8>] btrfs_cow_block+0x128/0x3b0 fs/btrfs/ctree.c:741
    [<ffffffff82075be9>] btrfs_search_slot+0xa49/0x1770 fs/btrfs/ctree.c:2095
    [<ffffffff82077583>] btrfs_insert_empty_items+0x43/0xc0 fs/btrfs/ctree.c:4285
    [<ffffffff820bb014>] btrfs_create_new_inode+0x354/0xfe0 fs/btrfs/inode.c:6283
    [<ffffffff820bbfc7>] btrfs_create_common+0xf7/0x190 fs/btrfs/inode.c:6511
    [<ffffffff820bc1f2>] btrfs_create+0x72/0x90 fs/btrfs/inode.c:6551
    [<ffffffff816b639f>] lookup_open fs/namei.c:3477 [inline]
    [<ffffffff816b639f>] open_last_lookups fs/namei.c:3546 [inline]
    [<ffffffff816b639f>] path_openat+0x17df/0x1d60 fs/namei.c:3776

BUG: memory leak
unreferenced object 0xffff88810f6c6180 (size 64):
  comm "syz-executor.0", pid 5094, jiffies 4294991089 (age 8.470s)
  hex dump (first 32 bytes):
    40 62 6c 0f 81 88 ff ff 00 00 00 00 00 00 00 00  @bl.............
    00 00 00 00 00 00 00 00 00 30 50 00 00 00 00 00  .........0P.....
  backtrace:
    [<ffffffff8163331d>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff8163331d>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff8163331d>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff8163331d>] __kmem_cache_alloc_node+0x2dd/0x3f0 mm/slub.c:3517
    [<ffffffff8157e175>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1098
    [<ffffffff82137a60>] kmalloc include/linux/slab.h:600 [inline]
    [<ffffffff82137a60>] kzalloc include/linux/slab.h:721 [inline]
    [<ffffffff82137a60>] btrfs_add_delayed_tree_ref+0x550/0x5b0 fs/btrfs/delayed-ref.c:1045
    [<ffffffff82086561>] btrfs_free_tree_block+0x131/0x450 fs/btrfs/extent-tree.c:3432
    [<ffffffff8206ec58>] btrfs_force_cow_block+0x6d8/0xb30 fs/btrfs/ctree.c:618
    [<ffffffff8206f1d8>] btrfs_cow_block+0x128/0x3b0 fs/btrfs/ctree.c:741
    [<ffffffff82075be9>] btrfs_search_slot+0xa49/0x1770 fs/btrfs/ctree.c:2095
    [<ffffffff82077583>] btrfs_insert_empty_items+0x43/0xc0 fs/btrfs/ctree.c:4285
    [<ffffffff820bb014>] btrfs_create_new_inode+0x354/0xfe0 fs/btrfs/inode.c:6283
    [<ffffffff820bbfc7>] btrfs_create_common+0xf7/0x190 fs/btrfs/inode.c:6511
    [<ffffffff820bc1f2>] btrfs_create+0x72/0x90 fs/btrfs/inode.c:6551
    [<ffffffff816b639f>] lookup_open fs/namei.c:3477 [inline]
    [<ffffffff816b639f>] open_last_lookups fs/namei.c:3546 [inline]
    [<ffffffff816b639f>] path_openat+0x17df/0x1d60 fs/namei.c:3776
    [<ffffffff816b7541>] do_filp_open+0xd1/0x1c0 fs/namei.c:3809
    [<ffffffff81690324>] do_sys_openat2+0xf4/0x150 fs/open.c:1440
    [<ffffffff81690d0f>] do_sys_open fs/open.c:1455 [inline]
    [<ffffffff81690d0f>] __do_sys_openat fs/open.c:1471 [inline]
    [<ffffffff81690d0f>] __se_sys_openat fs/open.c:1466 [inline]
    [<ffffffff81690d0f>] __x64_sys_openat+0xaf/0x100 fs/open.c:1466
    [<ffffffff84b67d8f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b67d8f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82