port-arm/60890: kernel panic when trying to boot NetBSD 11 aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588

["josch%debian.org@localhost via gnats" <gnats-admin%NetBSD.org@localhost>]

>Number:         60890
>Category:       port-arm
>Synopsis:       kernel panic when trying to boot NetBSD 11 aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-arm-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Oct 16 18:20:01 +0000 2026
>Originator:     Johannes Schauer Marin Rodrigues
>Release:        NetBSD-11-aarch64-20261014183245Z
>Organization:
>Environment:
>Description:
Hi,

I'm completely new to NetBSD (I come from Debian Linux) but I tried booting NetBSD-11-aarch64-20261014183245Z-generic.img.gz using barebox on a MNT Pocket Reform open hardware laptop with a Firefly iCore RK3588 SoM. Unfortunately it encounters a kernel panic and reboots. Maybe I'm doing something stupid, so I hope I'm not wasting your time. In any case, at the end of this message is the full output from serial. If you need any other debugging output, please advice!
Thank you so much in advance!
cheers, josch

DDR cb12b99cc23 hcy 25/10/17-18:57:13,fwver: v1.21
ch0 ttot10
ch0 ttot10
ch1 ttot10
ch2 ttot10
ch3 ttot10
ch0 ttot18
LPDDR4, 2112MHz
channel[0] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
ch1 ttot18
channel[1] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
ch2 ttot16
channel[2] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
ch3 ttot16
channel[3] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
Manufacturer ID:0xff
DQS rds:h1,h1 
CH0 RX Vref:32.2%, TX Vref:13.2%,13.2%
DQ rds:h1 l0 l0 h1 h1 h3 h2 h7, h1 l0 l1 h1 h1 l0 h3 l0 

DQS rds:h1,h1 
CH1 RX Vref:34.4%, TX Vref:13.2%,13.2%
DQ rds:h2 h1 h1 h2 h1 h3 h1 h5, h3 h3 h7 h3 h2 h1 h3 h1 

DQS rds:l0,h1 
CH2 RX Vref:38.1%, TX Vref:13.2%,13.2%
DQ rds:h3 h4 h6 h5 h1 h5 h5 h7, h2 h3 h4 h2 h1 h2 h6 h4 

DQS rds:l0,h1 
CH3 RX Vref:37.7%, TX Vref:13.2%,13.2%
DQ rds:h6 h5 h1 h1 h1 h2 h3 h5, h1 h5 h2 h2 h4 h4 h3 h2 

stride=0x2, ddr_config=0x4
hash ch_mask0-1 0x20 0x40, bank_mask0-3 0xa00 0x1400 0x2800 0x0, rank_mask0 0x401000
change to F1: 528MHz
ch0 ttot10
ch1 ttot10
ch2 ttot10
ch3 ttot10
change to F2: 1068MHz
ch0 ttot12
ch1 ttot12
ch2 ttot12
ch3 ttot12
change to F3: 1560MHz
ch0 ttot14
ch1 ttot14
ch2 ttot14
ch3 ttot14
change to F0: 2112MHz
ch0 ttot18
ch1 ttot18
ch2 ttot16
ch3 ttot16
out
NOTICE:  BL31: v2.12.0(release):4ec2948
NOTICE:  BL31: Built : 22:55:37, Jan 27 2026




[mnt-reform-series-rk3588] setup_usb()
environment load : No such file or directory
Maybe you have to create the partition.
00000000:                                                    
00000000:                                                    
00000000:                                                    
00000000:                                                    
00000000:                                                    
00000000:                                                    
Machine: MNT Pocket Reform with RCORE RK3588 Module
Boot Loader: 2026.06.0-00018-g9e309377ceec
Press m for menu or any key to interrupt boot:    0


  \\-__,------,___.
   \\        __,---`  NetBSD/evbarm efiboot (arm64)
    \\       `---,_.  Revision 2.16 (Wed Oct 14 18:32:45 UTC 2026)
     \\-,_____,.---`
      \\
       \\
        \\

Press return to boot now, any other key for boot prompt
booting netbsd - starting in 0 seconds.     
7773136+3586704+4319588+1740596 [657845+973704+727442]=0x1408308
PANIC: unable to handle NULL pointer dereference at address 0x0000000000000008
DABT (current EL) (ESR 0x9600000b)
elr: 00000003ffe731b0 lr : 00000003ffe8e160
x0 : 0000000000000000 x1 : 00000000eff973b0
x2 : 00000000eff97430 x3 : 00000000eff97460
x4 : 00000000eff974a0 x5 : 00000000ffffffc8
x6 : 00000000eff974e0 x7 : 00000000eff974e0
x8 : 00000000eff97460 x9 : 00000000ffffffc8
x10: 00000000eff974a0 x11: 00000000ffffffc8
x12: 646c2d3738336966 x13: 4950412d61746164
x14: ffffffffffffffff x15: ffffffffffffffff
x16: 00000000efccda18 x17: ffffffffffffffff
x18: 0000000000000000 x19: 00000003ffe99000
x20: 00000003ffe73180 x21: 00000000eff97600
x22: 00000000eff974e0 x23: 00000000eff974e0
x24: 00000000ffffffc8 x25: 00000003ffe94b78
x26: 00000003ffe98940 x27: 00000003ffe93000
x28: 00000000efd78000 x29: 00000000eff97390

Call trace:
[<3ffe731b0>] (0x3ffe731b0) from [<3ffe8e160>] (0x3ffe8e160)
[<3ffe8e160>] (0x3ffe8e160) from [<3ffe8e7d4>] (0x3ffe8e7d4)
[<3ffe8e7d4>] (0x3ffe8e7d4) from [<3ffe8df1c>] (0x3ffe8df1c)
[<3ffe8df1c>] (0x3ffe8df1c) from [<3ffe742ec>] (0x3ffe742ec)
[<3ffe742ec>] (0x3ffe742ec) from [<3ffe78ab0>] (0x3ffe78ab0)
[<3ffe78ab0>] (0x3ffe78ab0) from [<3ffe738e0>] (0x3ffe738e0)
[<3ffe738e0>] (0x3ffe738e0) from [<3ffe72c28>] (0x3ffe72c28)
[<3ffe72c28>] (0x3ffe72c28) from [<3ffe74278>] (0x3ffe74278)
[<3ffe74278>] (0x3ffe74278) from [<3ffe72030>] (0x3ffe72030)
[<3ffe72030>] (0x3ffe72030) from [<efcd0a7c>] (__efi_start_image+0x11c/0x148)
[<efcd0a7c>] (__efi_start_image+0x11c/0x148) from [<efcd21d4>] (efi_loader_bootm+0x3ec/0x4c0)
[<efcd21d4>] (efi_loader_bootm+0x3ec/0x4c0) from [<efc18614>] (bootm_boot_handler+0x110/0x124)
[<efc18614>] (bootm_boot_handler+0x110/0x124) from [<efc2b528>] (bootm_entry+0x38/0x48)
[<efc2b528>] (bootm_entry+0x38/0x48) from [<efcd19d8>] (esp_boot+0x7c/0xb0)
[<efcd19d8>] (esp_boot+0x7c/0xb0) from [<efc2aeb0>] (boot_entry+0x70/0xc8)
[<efc2aeb0>] (boot_entry+0x70/0xc8) from [<efc96354>] (do_boot+0x240/0x318)
[<efc96354>] (do_boot+0x240/0x318) from [<efc1932c>] (execute_command+0x4c/0x94)
[<efc1932c>] (execute_command+0x4c/0x94) from [<efc160ec>] (execute_binfmt+0x68/0xa0)
[<efc160ec>] (execute_binfmt+0x68/0xa0) from [<efc230c8>] (run_list_real+0x8ec/0x994)
[<efc230c8>] (run_list_real+0x8ec/0x994) from [<efc22608>] (parse_stream_outer+0x140/0x20c)
[<efc22608>] (parse_stream_outer+0x140/0x20c) from [<efc22780>] (parse_string_outer+0xac/0x108)
[<efc22780>] (parse_string_outer+0xac/0x108) from [<efc236b4>] (run_command+0x94/0xbc)
[<efc236b4>] (run_command+0x94/0xbc) from [<efc12948>] (run_init+0x174/0x2cc)
[<efc12948>] (run_init+0x174/0x2cc) from [<efc12788>] (start_barebox+0x4c/0x7c)
[<efc12788>] (start_barebox+0x4c/0x7c) from [<efcc5d38>] (psci_driver_register+0x0/0x1c)
[<efcc5d38>] (psci_driver_register+0x0/0x1c) from [<00b05334>] (0xb05334)
[<00b05334>] (0xb05334) from [<00b046e0>] (0xb046e0)

>How-To-Repeat:

>Fix: