From: Randy Dunlap <rdunlap@xxxxxxxxxxxxx> fill_super() conditionally allocates a jdev string if "jdev=x" is specified. put_super() should free that memory. Reported-by: syzbot+1c6756baf4b16b94d2a6@xxxxxxxxxxxxxxxxxxxxxxxxx Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx> --- fs/reiserfs/super.c | 1 + 1 file changed, 1 insertion(+) --- linux-next-20191213.orig/fs/reiserfs/super.c +++ linux-next-20191213/fs/reiserfs/super.c @@ -629,6 +629,7 @@ static void reiserfs_put_super(struct su reiserfs_write_unlock(s); mutex_destroy(&REISERFS_SB(s)->lock); destroy_workqueue(REISERFS_SB(s)->commit_wq); + kfree(REISERFS_SB(s)->s_jdev); kfree(s->s_fs_info); s->s_fs_info = NULL; }