From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id DAF47C43458 for ; Fri, 10 Jul 2026 08:12:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Type:MIME-Version: References:In-Reply-To:Subject:Cc:To:From:Message-ID:Date:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=h7nDO43+tKnnu6CxuyKnxlviLmUXS03CPGd8nFXhdng=; b=HBMZQ5B2RCazf854y9JHyKNdib c1YIa66n2OcwxAYklb1ItYXuhuKgwkBX3+z34hFywK3h2nWnIcOa7jCjL0ndKLdEgJy+Wjtm3IWKY Hf3aTV1dcO3jabK4oOLc2KToxybQTiBYGP6HTTfaJAS49yg65ab29oxHZfJWPzF/crAmg3iq+fXs3 lpWfLkKVdkES9WvqddfBMAQp6HJ+i4STedosaAgyuaUISNOOeb/SVPsCLijruLbVf1CtLOe2WuWPX yvHVAghN9+NeZo7/cdH5R5fAvVAmClluSgfaBhlmea6l+jy0HHtbnqLFOk6190wWL3h9R7t7l5SSp Y5M8oiuw==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1wi6LG-00000004Qt9-2glT; Fri, 10 Jul 2026 08:12:14 +0000 Received: from sea.source.kernel.org ([172.234.252.31]) by bombadil.infradead.org with esmtps (Exim 4.99.1 #2 (Red Hat Linux)) id 1wi6LG-00000004Qss-0j1g; Fri, 10 Jul 2026 08:12:14 +0000 Received: from smtp.kernel.org (quasi.space.kernel.org [100.103.45.18]) by sea.source.kernel.org (Postfix) with ESMTP id 9F30641634; Fri, 10 Jul 2026 08:12:13 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 7D23D1F000E9; Fri, 10 Jul 2026 08:12:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1783671133; bh=h7nDO43+tKnnu6CxuyKnxlviLmUXS03CPGd8nFXhdng=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=BP4bd7W6zNBoI3b8Ib5OZzb2TuuQl527kyh0lxT5H1eBurLMsZ17mx8X+/cD2lq/d D0PxqKmKSLjAiJTw5dBDbP4hjTSfU96lNIKZsD8HrgnmKxutHHtVASVcAQ/vUpEK6M cmDIFWwvV90wXoP9v3rQtXBuiXDWk3InlVaJGYuJBXgSykJS4V2gcx3kN8320jPG3Q yA5nWSurT6o/nvIIUXnqKo1+Yh0UXlO9kqujC5ap1uXeZHKpEQSqhyFyPuCzXPfgLt GJBWWFxIalOsLx8gE31Eww9QE8SP2mQDXOR2SfTleQNXdLSqNNxAjodwDJOfrpDK6b BFgkuoDzxpxVQ== Received: from sofa.misterjones.org ([185.219.108.64] helo=lobster-girl.misterjones.org) by disco-boy.misterjones.org with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wi6LD-00000003aiN-2BIe; Fri, 10 Jul 2026 08:12:11 +0000 Date: Fri, 10 Jul 2026 09:14:00 +0100 Message-ID: <87tsq75kjb.wl-maz@kernel.org> From: Marc Zyngier To: John Cc: Mark Rutland , Daniel Lezcano , Thomas Gleixner , Rob Herring , Krzysztof Kozlowski , Conor Dooley , Florian Fainelli , Broadcom internal kernel review list , "Ivan T. Ivanov" , Stefan Wahren , Andrea della Porta , Peter Robinson , Stanimir Varbanov , =?UTF-8?B?TWHDrXJh?= Canal , Gregor Herburger , "linux-arm-kernel@lists.infradead.org" , "linux-kernel@vger.kernel.org" , "devicetree@vger.kernel.org" , "linux-rpi-kernel@lists.infradead.org" Subject: Re: [REGRESSION] Raspberry Pi 5 (BCM2712) hangs at boot since d87773de9efe (arm_arch_timer: default to EL2 virtual timer under VHE) In-Reply-To: References: <86h5mcp4em.wl-maz@kernel.org> User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI-EPG/1.14.7 (Harue) FLIM-LB/1.14.9 (=?UTF-8?B?R29qxY0=?=) APEL-LB/10.8 EasyPG/1.0.0 Emacs/30.1 (aarch64-unknown-linux-gnu) MULE/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII X-SA-Exim-Connect-IP: 185.219.108.64 X-SA-Exim-Rcpt-To: therealgraysky@proton.me, mark.rutland@arm.com, daniel.lezcano@kernel.org, tglx@kernel.org, robh@kernel.org, krzk+dt@kernel.org, conor+dt@kernel.org, florian.fainelli@broadcom.com, bcm-kernel-feedback-list@broadcom.com, iivanov@suse.de, wahrenst@gmx.net, andrea.porta@suse.com, pbrobinson@gmail.com, svarbanov@suse.de, mcanal@igalia.com, gregor.herburger@linutronix.de, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, devicetree@vger.kernel.org, linux-rpi-kernel@lists.infradead.org X-SA-Exim-Mail-From: maz@kernel.org X-SA-Exim-Scanned: No (on disco-boy.misterjones.org); SAEximRunCond expanded to false X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org On Mon, 06 Jul 2026 16:20:13 +0100, John wrote: > > On Monday, July 6th, 2026 at 10:40 AM, Marc Zyngier wrote: > > > On Mon, 06 Jul 2026 15:13:27 +0100, > > John wrote: > > > > > > Since commit d87773de9efe ("clocksource/drivers/arm_arch_timer: Default to EL2 virtual timer when running VHE"), the Raspberry Pi 5 (BCM2712, arm64) hangs during boot on v7.2-rc1 and later. Reverting that commit on top of v7.2-rc2 boots reliably. Found by bisection. > > > > > > Environment: - Raspberry Pi 5 Model B, arm64, device-tree boot (no ACPI) - CPUs start at EL2 with VHE - Mainline v7.2-rc1 and v7.2-rc2 > > > > > > Symptom: - Silent hang early in driver probe; no panic or oops. Boot banner shows > > > "arch_timer: cp15 timer running at 54.00MHz (hyp-virt)". The first blocking, timer-backed wait during probe never returns because the EL2 virtual timer's interrupt is not delivered on this SoC, so clockevents are dead. The softlockup/hung-task detectors can't fire either, since they depend on the same dead timer. > > > > > > > Is that a guess? Or do you know something we don't? Or worse, is this > > report entirely AI generated? > > Hi Marc - I'm not a programmer, but I can use git. I performed the bisect, and verification steps by hand. I am convinced the bisect is correct based on the restoration of booting. > > My RPi5B freezes when booting into d87773de9e and reverting it gives a clean boot. > > I used Opus to analyze the result of the bisect in concert with the logs I captured from the serial console. I also used it to summarize everything into a concise bug report. I can't vouch for the accuracy of the interpretation, but I can confirm the problematic commit and restoration of function. > > > > Again, how do you know it isn't functional? Could it be, for example, > > that the firmware has not configured the interrupt correctly? > > I cannot. In the future, when I use these tools, I will scope the ask to just factual content, rather than allowing them to speculate. > > > A proposed fix has been posted at [1]. Until we hear from the > > implementer about the state of the HW, it is difficult to do anything. > > > > M. > > > > [1] https://lore.kernel.org/all/878q898ulx.wl-maz@kernel.org/ > > Thank you for linking that! I applied it on top of 7.2-rc2 (with d87773de9efe intact) and got a clean boot. FWIW, and in the absence of any feedback from the SoC manufacturer, I've posted this patch[2]. There isn't much else I can do for this stuff. M. [2] https://lore.kernel.org/all/20260710080958.491620-1-maz@kernel.org/ -- Jazz isn't dead. It just smells funny.