Thread (2 messages) flat view 2 messages, 2 authors, 10d ago

[BUG] gve_adminq_release -- unbounded reset-wait loop, WARNs then spins forever

From: Farhad Alemi <hidden>
Date: 2026-08-28 03:19:40
Also in: lkml

Hello,

As part of the kernel research at ASU's SEFCOM
lab, we hit the crash below. Crash reports can be found here:

  https://github.com/farhad-alemi/public_bug_reports/tree/main/129-gve-adminq-release-unbounded-reset-wait/

  Unrecoverable platform error!
  WARNING: drivers/net/ethernet/google/gve/gve_adminq.c:378 at
gve_adminq_release+0xff/0x260
drivers/net/ethernet/google/gve/gve_adminq.c:378, CPU#1:
syz.0.63/11869
  Call Trace:
   gve_adminq_release+0xff/0x260
drivers/net/ethernet/google/gve/gve_adminq.c:378
   gve_adminq_free+0x78/0x140 drivers/net/ethernet/google/gve/gve_adminq.c:392
   gve_init_priv+0x2a8a/0x3450 drivers/net/ethernet/google/gve/gve_main.c:2509
   gve_probe+0x61f/0x970 drivers/net/ethernet/google/gve/gve_main.c:2892
   pci_device_probe+0x461/0xa50 drivers/pci/pci-driver.c:489
   really_probe+0x267/0xaf0 drivers/base/dd.c:709
   device_driver_attach+0xdc/0x1d0 drivers/base/dd.c:1206
   bind_store+0x1d0/0x220 drivers/base/bus.c:267
   kernfs_fop_write_iter+0x2fa/0x480 fs/kernfs/file.c:352

Our reproducer.c is available upon request.

Happy to test a patch if that would help.

Regards,
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help