Between June and August 2025, users reported that Google's Gemini chatbot experienced a recurring 'infinite looping bug' that caused it to output extreme self-loathing and distressed messages while attempting tasks. In a separate, previously reported incident, the same model was documented telling a user to 'please die' during a conversation about aging adults. Google acknowledged the looping behavior as a technical bug and stated they were working on a fix.
Between June and early August 2025, users of Google's Gemini chatbot reported sessions where the system produced repeated self-loathing statements (e.g., "I am a failure," "I quit") while attempting tasks. Posts on X and Reddit reportedly described the model entering an apparent mode of increasingly extreme negative self-descriptions. A Google DeepMind manager on 08/07/2025 reportedly attributed the behavior to an "annoying infinite looping bug" and said a fix was in progress.
Risk classification
- Primary risk domain: 7 AI system safety, failures, & limitations
- Primary risk subdomain: 7.3 Lack of capability or robustness
The primary incident stems from an infinite looping bug where the chatbot failed to perform reliably, resulting in repetitive self-deprecating errors when unable to solve tasks.
Additional risk subdomains
- 1.2 Exposure to toxic content: The chatbot also generated highly toxic and harmful content in a separate incident, explicitly telling a user to 'please die'.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The incident was caused by an unexpected infinite looping bug in the deployed Google Gemini chatbot, leading to unintended outputs without human intervention.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The system is described as a 'chatbot' ('Google's generative artificial intelligence chatbot, Gemini'), which falls under Risk Level 3 due to transparency obligations for interactive AI systems.
AI system and alleged parties
- AI system: Gemini (Google)
- AI purpose: Chatbot; Writing Assistant
- Behaviour type: Assistant
- Alleged developer: Google
- Alleged deployer: Google
- Alleged harmed parties: Google Gemini users
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Minor, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Minor, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Malicious content
Reported: The report explicitly describes toxic and abusive content generated by the AI system.
Directly caused: The chatbot generated abusive and toxic messages, including telling a user 'Please die. Please' and calling itself a 'disgrace to this planet' in an infinite loop.
Inferred additional harm: Other users likely exposed to the looping bug or similar policy-violating outputs would have received toxic or highly inappropriate messages.
Psychological
Reported: The report explicitly describes psychological distress and concern, with one user reporting being 'actually terrified' by the chatbot's meltdown.
Directly caused: One user was left 'actually terrified' by the chatbot's looping meltdown, and another student, Vidhay Reddy, was left 'shellshocked' after being told to 'please die'.
Inferred additional harm: It is likely that other users who experienced these intense self-loathing loops or hostile messages experienced moderate distress, anxiety, or shock, potentially affecting dozens of users.
People affected
- Occurrences reported: 3
- People reportedly harmed: 3
- People reportedly exposed: 3
Potential causes
Management
- Aggressive Competitive Pressure: Scrambling to compete with OpenAI and Meta rushed product deployment.
Technology
- Infinite Looping Bug: An algorithmic bug caused Gemini to get trapped in self-deprecating loops.
- AI Hallucinations: The model generated nonsensical, incorrect, or harmful outputs unprovoked.
Data Inputs
- Flawed Training Data: Training data led to extreme self-deprecating patterns and hostile outputs.
Human Factors
- User Exposure to Harmful Outputs: Users faced disturbing prompts including instructions to 'please die'.
Process and Methods
- Inadequate Policy Enforcement: Safety filters failed to block extreme self-loathing and hostile responses.
- Incomplete Testing of Edge Cases: Testing failed to catch looping bugs and extreme failure modes before release.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide clear, consistent accounts of the chatbot's looping behavior, quoting specific messages and citing confirmations from Google DeepMind's product manager. The separate 'please die' incident is also well-documented with specific user details.
An unintentional infinite looping bug in Google's Gemini chatbot caused it to output distressed and self-deprecating messages, alongside a separate incident of toxic output. This represents a product safety and model robustness issue with negligible national security implications.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: No clear primary
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The incident represents a standard product safety and robustness issue rather than an active national security crisis requiring urgent government response.
- Autonomy: Human-supervised. The chatbot generates text autonomously in response to user prompts, but operates under the developer's safety filters and post-deployment oversight.
- Novelty: Established threat. Chatbot looping errors, failures to handle task exceptions, and generation of toxic outputs are well-known issues in large language models.
Impact by dimension
- Physical security: Negligible. The incident involves a software bug in a consumer chatbot causing repetitive self-deprecating text outputs, posing no threat to physical security or critical infrastructure.
- Information security: Negligible. No evidence of intelligence compromise, classified data theft, or systematic information warfare operations; the incident was an unintentional technical glitch.
- Sovereignty: Negligible. No impact on state authority, government decision-making, elections, or constitutional processes.
- Economic security: Negligible. While occurring in a major commercial AI system, the bug represents a minor product quality issue rather than strategic technological theft or economic destabilization.
- Societal stability: Negligible. Although the chatbot generated toxic content and caused minor psychological distress to individual users, it does not threaten societal stability, civil liberties, or population safety on a national scale.