Re: port-arm/60890: kernel panic when trying to boot NetBSD 11 aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588

[Nick Hudson <nick.hudson%gmx.co.uk@localhost>]

> On 16 Oct 2026, at 19:20, josch%debian.org@localhost via gnats <gnats-admin%NetBSD.org@localhost> wrote:
> 
>> Number:         60890
>> Category:       port-arm
>> Synopsis:       kernel panic when trying to boot NetBSD 11 aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588
>> Confidential:   no
>> Severity:       serious
>> Priority:       medium
>> Responsible:    port-arm-maintainer
>> State:          open
>> Class:          sw-bug
>> Submitter-Id:   net
>> Arrival-Date:   Fri Oct 16 18:20:01 +0000 2026
>> Originator:     Johannes Schauer Marin Rodrigues
>> Release:        NetBSD-11-aarch64-20261014183245Z
>> Organization:
>> Environment:
>> Description:
> Hi,
> 
> I'm completely new to NetBSD (I come from Debian Linux) but I tried booting NetBSD-11-aarch64-20261014183245Z-generic.img.gz using barebox on a MNT Pocket Reform open hardware laptop with a Firefly iCore RK3588 SoM. Unfortunately it encounters a kernel panic and reboots. Maybe I'm doing something stupid, so I hope I'm not wasting your time. In any case, at the end of this message is the full output from serial. If you need any other debugging output, please advice!
> Thank you so much in advance!
> cheers, josch
> 
> DDR cb12b99cc23 hcy 25/10/17-18:57:13,fwver: v1.21
> ch0 ttot10
> ch0 ttot10
> ch1 ttot10
> ch2 ttot10
> ch3 ttot10
> ch0 ttot18
> LPDDR4, 2112MHz
> channel[0] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
> ch1 ttot18
> channel[1] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
> ch2 ttot16
> channel[2] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
> ch3 ttot16
> channel[3] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
> Manufacturer ID:0xff
> DQS rds:h1,h1 
> CH0 RX Vref:32.2%, TX Vref:13.2%,13.2%
> DQ rds:h1 l0 l0 h1 h1 h3 h2 h7, h1 l0 l1 h1 h1 l0 h3 l0 
> 
> DQS rds:h1,h1 
> CH1 RX Vref:34.4%, TX Vref:13.2%,13.2%
> DQ rds:h2 h1 h1 h2 h1 h3 h1 h5, h3 h3 h7 h3 h2 h1 h3 h1 
> 
> DQS rds:l0,h1 
> CH2 RX Vref:38.1%, TX Vref:13.2%,13.2%
> DQ rds:h3 h4 h6 h5 h1 h5 h5 h7, h2 h3 h4 h2 h1 h2 h6 h4 
> 
> DQS rds:l0,h1 
> CH3 RX Vref:37.7%, TX Vref:13.2%,13.2%
> DQ rds:h6 h5 h1 h1 h1 h2 h3 h5, h1 h5 h2 h2 h4 h4 h3 h2 
> 
> stride=0x2, ddr_config=0x4
> hash ch_mask0-1 0x20 0x40, bank_mask0-3 0xa00 0x1400 0x2800 0x0, rank_mask0 0x401000
> change to F1: 528MHz
> ch0 ttot10
> ch1 ttot10
> ch2 ttot10
> ch3 ttot10
> change to F2: 1068MHz
> ch0 ttot12
> ch1 ttot12
> ch2 ttot12
> ch3 ttot12
> change to F3: 1560MHz
> ch0 ttot14
> ch1 ttot14
> ch2 ttot14
> ch3 ttot14
> change to F0: 2112MHz
> ch0 ttot18
> ch1 ttot18
> ch2 ttot16
> ch3 ttot16
> out
> NOTICE:  BL31: v2.12.0(release):4ec2948
> NOTICE:  BL31: Built : 22:55:37, Jan 27 2026
> 
> 
> 
> 
> [mnt-reform-series-rk3588] setup_usb()
> environment load : No such file or directory
> Maybe you have to create the partition.
> 00000000:                                                    
> 00000000:                                                    
> 00000000:                                                    
> 00000000:                                                    
> 00000000:                                                    
> 00000000:                                                    
> Machine: MNT Pocket Reform with RCORE RK3588 Module
> Boot Loader: 2026.06.0-00018-g9e309377ceec
> Press m for menu or any key to interrupt boot:    0
> 
> 
>  \\-__,------,___.
>   \\        __,---`  NetBSD/evbarm efiboot (arm64)
>    \\       `---,_.  Revision 2.16 (Wed Oct 14 18:32:45 UTC 2026)
>     \\-,_____,.---`
>      \\
>       \\
>        \\
> 
> Press return to boot now, any other key for boot prompt
> booting netbsd - starting in 0 seconds.     
> 7773136+3586704+4319588+1740596 [657845+973704+727442]=0x1408308
> PANIC: unable to handle NULL pointer dereference at address 0x0000000000000008
> DABT (current EL) (ESR 0x9600000b)
> elr: 00000003ffe731b0 lr : 00000003ffe8e160
> x0 : 0000000000000000 x1 : 00000000eff973b0
> x2 : 00000000eff97430 x3 : 00000000eff97460
> x4 : 00000000eff974a0 x5 : 00000000ffffffc8
> x6 : 00000000eff974e0 x7 : 00000000eff974e0
> x8 : 00000000eff97460 x9 : 00000000ffffffc8
> x10: 00000000eff974a0 x11: 00000000ffffffc8
> x12: 646c2d3738336966 x13: 4950412d61746164
> x14: ffffffffffffffff x15: ffffffffffffffff
> x16: 00000000efccda18 x17: ffffffffffffffff
> x18: 0000000000000000 x19: 00000003ffe99000
> x20: 00000003ffe73180 x21: 00000000eff97600
> x22: 00000000eff974e0 x23: 00000000eff974e0
> x24: 00000000ffffffc8 x25: 00000003ffe94b78
> x26: 00000003ffe98940 x27: 00000003ffe93000
> x28: 00000000efd78000 x29: 00000000eff97390
> 
> Call trace:
> [<3ffe731b0>] (0x3ffe731b0) from [<3ffe8e160>] (0x3ffe8e160)
> [<3ffe8e160>] (0x3ffe8e160) from [<3ffe8e7d4>] (0x3ffe8e7d4)
> [<3ffe8e7d4>] (0x3ffe8e7d4) from [<3ffe8df1c>] (0x3ffe8df1c)
> [<3ffe8df1c>] (0x3ffe8df1c) from [<3ffe742ec>] (0x3ffe742ec)
> [<3ffe742ec>] (0x3ffe742ec) from [<3ffe78ab0>] (0x3ffe78ab0)
> [<3ffe78ab0>] (0x3ffe78ab0) from [<3ffe738e0>] (0x3ffe738e0)
> [<3ffe738e0>] (0x3ffe738e0) from [<3ffe72c28>] (0x3ffe72c28)
> [<3ffe72c28>] (0x3ffe72c28) from [<3ffe74278>] (0x3ffe74278)
> [<3ffe74278>] (0x3ffe74278) from [<3ffe72030>] (0x3ffe72030)
> [<3ffe72030>] (0x3ffe72030) from [<efcd0a7c>] (__efi_start_image+0x11c/0x148)
> [<efcd0a7c>] (__efi_start_image+0x11c/0x148) from [<efcd21d4>] (efi_loader_bootm+0x3ec/0x4c0)
> [<efcd21d4>] (efi_loader_bootm+0x3ec/0x4c0) from [<efc18614>] (bootm_boot_handler+0x110/0x124)
> [<efc18614>] (bootm_boot_handler+0x110/0x124) from [<efc2b528>] (bootm_entry+0x38/0x48)
> [<efc2b528>] (bootm_entry+0x38/0x48) from [<efcd19d8>] (esp_boot+0x7c/0xb0)
> [<efcd19d8>] (esp_boot+0x7c/0xb0) from [<efc2aeb0>] (boot_entry+0x70/0xc8)
> [<efc2aeb0>] (boot_entry+0x70/0xc8) from [<efc96354>] (do_boot+0x240/0x318)
> [<efc96354>] (do_boot+0x240/0x318) from [<efc1932c>] (execute_command+0x4c/0x94)
> [<efc1932c>] (execute_command+0x4c/0x94) from [<efc160ec>] (execute_binfmt+0x68/0xa0)
> [<efc160ec>] (execute_binfmt+0x68/0xa0) from [<efc230c8>] (run_list_real+0x8ec/0x994)
> [<efc230c8>] (run_list_real+0x8ec/0x994) from [<efc22608>] (parse_stream_outer+0x140/0x20c)
> [<efc22608>] (parse_stream_outer+0x140/0x20c) from [<efc22780>] (parse_string_outer+0xac/0x108)
> [<efc22780>] (parse_string_outer+0xac/0x108) from [<efc236b4>] (run_command+0x94/0xbc)
> [<efc236b4>] (run_command+0x94/0xbc) from [<efc12948>] (run_init+0x174/0x2cc)
> [<efc12948>] (run_init+0x174/0x2cc) from [<efc12788>] (start_barebox+0x4c/0x7c)
> [<efc12788>] (start_barebox+0x4c/0x7c) from [<efcc5d38>] (psci_driver_register+0x0/0x1c)
> [<efcc5d38>] (psci_driver_register+0x0/0x1c) from [<00b05334>] (0xb05334)
> [<00b05334>] (0xb05334) from [<00b046e0>] (0xb046e0)]


This isn’t a NetBSD kernel panic.

Doing a bit of searching tells me it’s barebox. 


> 
>> How-To-Repeat:
> 
>> Fix:
>