------------[ cut here ]------------ WARNING: CPU: 0 PID: 17844 at kernel/workqueue.c:4442 pwq_busy kernel/workqueue.c:4394 [inline] WARNING: CPU: 0 PID: 17844 at kernel/workqueue.c:4442 destroy_workqueue+0xf8/0x2a4 kernel/workqueue.c:4442 Modules linked in: CPU: 0 PID: 17844 Comm: syz-executor.0 Not tainted 6.1.0-rc5-syzkaller-00241-gab290eaddc4c #0 Hardware name: linux,dummy-virt (DT) pstate: 204000c9 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : destroy_workqueue+0xf8/0x2a4 kernel/workqueue.c:4442 lr : destroy_workqueue+0xac/0x2a4 kernel/workqueue.c:4441 sp : ffff80000e55bc00 x29: ffff80000e55bc00 x28: 0000000000000004 x27: 0000000000000000 x26: 0000000045585401 x25: f9ff0000262e3b00 x24: 0000000000000000 x23: f4ff000019cf3220 x22: ffff80000a2ea240 x21: f4ff000019cf3200 x20: f9ff0000052a8a00 x19: f9ff0000052a8a28 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 00002c895206ea38 x14: 000000000000005d x13: ffff800009ed3c58 x12: ffff80000a2bfef0 x11: 0000000000000001 x10: 03d60bc81d819cc4 x9 : 55aa51cc85450bc6 x8 : 0000000000000000 x7 : 0000000000000001 x6 : 000000000006d4b0 x5 : f9ff000005e89900 x4 : 0000000000000000 x3 : fdff000002c14000 x2 : f9ff0000052a8a5c x1 : 0000000000000001 x0 : 0000000000000000 Call trace: pwq_busy kernel/workqueue.c:4394 [inline] destroy_workqueue+0xf8/0x2a4 kernel/workqueue.c:4442 nci_unregister_device+0x3c/0xec net/nfc/nci/core.c:1293 virtual_ncidev_close+0x6c/0x80 drivers/nfc/virtual_ncidev.c:166 __fput+0x78/0x260 fs/file_table.c:320 ____fput+0x10/0x20 fs/file_table.c:348 task_work_run+0x80/0xe0 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x218/0x13b0 arch/arm64/kernel/signal.c:1127 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0xb8/0xc0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581 ---[ end trace 0000000000000000 ]--- destroy_workqueue: nfc2_nci_cmd_wq has the following busy pwq pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 pending: nci_cmd_work workqueue nfc2_nci_cmd_wq: flags=0xe000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 in-flight: 13708:nci_cmd_work