On Fri, Oct 09, 2020 at 12:03:56PM +0800, Ming Lei wrote: > We can't check ref->data->confirm_switch directly in __percpu_ref_exit(), since > ref->data may not be allocated in one not-initialized refcount. > > Fixes: 2b0d3d3e4fcf ("percpu_ref: reduce memory footprint of percpu_ref in fast path") > Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxx> Please don't forget: Reported-by: syzbot+fd15ff734dace9e16437@xxxxxxxxxxxxxxxxxxxxxxxxx