Re: [BUG] gve_adminq_release -- unbounded reset-wait loop, WARNs then spins forever

[Farhad Alemi]

Attaching the reproducer; thanks!

On Fri, Aug 28, 2026 at 1:53 PM Harshitha Ramamurthy
<hramamurthy@xxxxxxxxxx> wrote:
>
> On Thu, Aug 27, 2026 at 9:23 PM Farhad Alemi <farhad.alemi@xxxxxxxxxxxx> wrote:
> >
> > Hello,
> >
> > As part of the kernel research at ASU's SEFCOM
> > lab, we hit the crash below. Crash reports can be found here:
> >
> >   https://github.com/farhad-alemi/public_bug_reports/tree/main/129-gve-adminq-release-unbounded-reset-wait/
> >
> >   Unrecoverable platform error!
> >   WARNING: drivers/net/ethernet/google/gve/gve_adminq.c:378 at
> > gve_adminq_release+0xff/0x260
> > drivers/net/ethernet/google/gve/gve_adminq.c:378, CPU#1:
> > syz.0.63/11869
> >   Call Trace:
> >    gve_adminq_release+0xff/0x260
> > drivers/net/ethernet/google/gve/gve_adminq.c:378
> >    gve_adminq_free+0x78/0x140 drivers/net/ethernet/google/gve/gve_adminq.c:392
> >    gve_init_priv+0x2a8a/0x3450 drivers/net/ethernet/google/gve/gve_main.c:2509
> >    gve_probe+0x61f/0x970 drivers/net/ethernet/google/gve/gve_main.c:2892
> >    pci_device_probe+0x461/0xa50 drivers/pci/pci-driver.c:489
> >    really_probe+0x267/0xaf0 drivers/base/dd.c:709
> >    device_driver_attach+0xdc/0x1d0 drivers/base/dd.c:1206
> >    bind_store+0x1d0/0x220 drivers/base/bus.c:267
> >    kernfs_fop_write_iter+0x2fa/0x480 fs/kernfs/file.c:352
> >
> > Our reproducer.c is available upon request.
>
> Hi,
>
> Thanks for the report. Could you please share the reproducer too?
>
> It's a good catch. The driver shouldn't spin infinitely if the
> hypervisor is unresponsive/misbehaving. I will send out a patch to fix
> this. Would be great if you could help test it also.
> >
> > Happy to test a patch if that would help.
> >
> > Regards,

Attachment: reproducer.c
Description: Binary data