crash in rpi_firmware_property

Start with drivers/firmware/raspberrypi.c at rpi_firmware_property_list, then follow the call trace through rpi_firmware_property, bcm2835_set_clock, and mmc_rescan. Review the linked Mesa CI job and the timeout details to determine why the firmware transaction fails randomly. Done means the cause is identified and the timeout no longer produces the reported failure, with validation for the affected path.

Describe the bug

(see below)

Steps to reproduce the behaviour

N/A, happens randomly

Device (s)

Raspberry Pi 3 Mod. B+

System

package 1.20250430

Logs

[  423.740983] ------------[ cut here ]------------
[  423.745642] Firmware transaction 0x00038042 timeout
[  423.745711] WARNING: CPU: 0 PID: 9 at drivers/firmware/raspberrypi.c:131 rpi_firmware_property_list+0x21c/0x288
[  423.760686] Modules linked in: nbd i2c_bcm2835 i2c_brcmstb snd_soc_hdmi_codec v3d drm_shmem_helper gpu_sched vc4 snd_soc_core snd_pcm_dmaengine snd_compress snd_pcm snd_timer snd drm_dma_helper drm_kms_helper cec drm_display_helper drm backlight drm_panel_orientation_quirks overlay
[  423.785726] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.12.25-v8+ #1875
[  423.793123] Hardware name: Raspberry Pi 3 Model B Plus Rev 1.3 (DT)
[  423.799387] Workqueue: events_freezable mmc_rescan
[  423.804184] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  423.811146] pc : rpi_firmware_property_list+0x21c/0x288
[  423.816374] lr : rpi_firmware_property_list+0x21c/0x288
[  423.821601] sp : ffffffc080063bc0
[  423.824910] x29: ffffffc080063bc0 x28: ffffffe2a1f569c0 x27: ffffff8002b73740
[  423.832055] x26: 00000000ffffff92 x25: ffffffc08069e008 x24: 0000000000001000
[  423.839199] x23: ffffff8008ebc4c0 x22: ffffffe2a20ff490 x21: 0000000000000018
[  423.846343] x20: ffffff8002b73700 x19: ffffffc08069e000 x18: ffffffffffffffff
[  423.853488] x17: 0000000000000000 x16: 0000000000000000 x15: ffffffe2a2195028
[  423.860632] x14: 0000000000000008 x13: ffffffe2a219501a x12: 61736e6172742065
[  423.867776] x11: fffffffffffe0000 x10: ffffffe2a1fd6f40 x9 : ffffffe2a091c3b8
[  423.874920] x8 : 00000000ffffefff x7 : ffffffe2a1fd5398 x6 : 0000000000001ba8
[  423.882064] x5 : ffffff803b1673c8 x4 : 0000000000000000 x3 : 0000000000000027
[  423.889208] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffffff8002244200
[  423.896352] Call trace:
[  423.898792]  rpi_firmware_property_list+0x21c/0x288
[  423.903673]  rpi_firmware_property+0x78/0xc8
[  423.907945]  bcm2835_set_clock+0x88/0x238
[  423.911955]  bcm2835_set_ios+0x4c/0xb0
[  423.915704]  mmc_set_initial_state+0x90/0xa8
[  423.919974]  mmc_power_up.part.0+0x5c/0x180
[  423.924156]  mmc_rescan+0x184/0x330
[  423.927644]  process_one_work+0x15c/0x3c0
[  423.931657]  worker_thread+0x2e4/0x3f0
[  423.935406]  kthread+0x120/0x130
[  423.938634]  ret_from_fork+0x10/0x20
[  423.942211] ---[ end trace 0000000000000000 ]---

the rest of the log can be found in this ci job: https://gitlab.freedesktop.org/mesa/mesa/-/jobs/81777346#L2136

Additional context

No response