port-arm/53001: NetBSD/evbarm RPI2 8.0_BETA cannot boot with recent firmware

[oshima-ya%yagoto-urayama.jp@localhost]

>Number:         53001
>Category:       port-arm
>Synopsis:       NetBSD/evbarm RPI2 8.0_BETA cannot boot with recent firmware
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    port-arm-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Feb 10 01:35:00 +0000 2018
>Originator:     Yasushi Oshima
>Release:        NetBSD/evbarm 8.0_BETA
>Organization:
>Environment:
NetBSD rpi2 8.0_BETA NetBSD 8.0_BETA (RPI2) #0: Fri Feb  9 00:30:03 JST 2018  oshima@ryzenbuild:/export/netbsd-8/20180208/obj/evbearmv7hf-el/sys/arch/evbarm/compile/RPI2 evbarm
>Description:
When booting NetBSD/evbarm RPI2 with a recent RPI firmware, a kernel panic occurs.

NetBSD/evbarm (rpi) booting ...
rpi_bootstrap: warning: cpu1 failed to hatch
rpi_bootstrap: warning: cpu2 failed to hatch
rpi_bootstrap: warning: cpu3 failed to hatch
[ Kernel symbol table missing! ]
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 8.0_BETA (RPI2) #0: Fri Feb  9 00:30:03 JST 2018
        oshima@sudachi:/export/netbsd-8/20180208/obj/evbearmv7hf-el/sys/arch/evb
arm/compile/RPI2
total memory = 948 MB
avail memory = 927 MB
sysctl_createv: sysctl_create(machine_arch) returned 17
mainbus0 (root)
cpu0 at mainbus0 core 0: 600 MHz Cortex-A7 r0p5 (Cortex V7A core)
cpu0: DC enabled IC enabled WB disabled EABT branch prediction enabled
cpu0: 32KB/32B 2-way L1 VIPT Instruction cache
cpu0: 32KB/64B 4-way write-back-locking-C L1 PIPT Data cache
cpu0: 512KB/64B 8-way write-through L2 PIPT Unified cache
vfp0 at cpu0: NEON MPE (VFP 3.0+), rounding, NaN propagation, denormals
cpu1 at mainbus0 core 1
cpu2 at mainbus0 core 2
cpu3 at mainbus0 core 3
obio0 at mainbus0
bcmicu0 at obio0: Multiprocessor
armgtmr0 at obio0: ARMv7 Generic 64-bit Timer (19200 kHz)
armgtmr0: interrupting on irq 3
bcmmbox0 at obio0 intr 193: VC mailbox
vcmbox0 at bcmmbox0
vchiq0 at obio0 intr 194: BCM2835 VCHIQ
bcmpm0 at obio0: Power management, Reset and Watchdog controller
bcmdmac0 at obio0: DMA0 DMA2 DMA4 DMA5 DMA8 DMA9 DMA10
bcmrng0 at obio0: RNG
plcom0 at obio0 intr 185
plcom0: txfifo disabled
plcom0: console
genfb0 at obio0
wsdisplay0 at genfb0 kbdmux 1
sdhc0 at obio0 intr 190: SDHC controller
sdhc0: interrupting on intr 190
dwctwo0 at obio0 intr 137: USB controller
bcmspi0 at obio0 intr 182: SPI
spi0 at bcmspi0: SPI bus
bsciic0 at obio0 intr 181: BSC0
iic0 at bsciic0: I2C bus
bsciic1 at obio0 intr 181: BSC1
iic1 at bsciic1: I2C bus
bcmgpio0 at obio0: GPIO [0...31]
gpio0 at bcmgpio0: 32 pins
bcmgpio1 at obio0: GPIO [32...53]
gpio1 at bcmgpio1: 22 pins
bcmcm at obio0 not configured
bcmpwm at obio0 not configured
usb0 at dwctwo0: USB revision 2.0
sdhc0: SDHC 3.0, rev 153, platform DMA, 250000 kHz, HS 3.3V, re-tuning mode 1, 1
024 byte blocks
sdmmc0 at sdhc0 slot 0
uhub0 at usb0: vendor 0000 (0000) DWC2 root hub (0000), class 9/0, rev 2.00/1.00
, addr 1
panic: kernel diagnostic assertion "cold || sent_p" failed: file "/export/netbsd
/src/sys/arch/arm/pic/pic.c", line 209
Stopped in pid 0.7 (system) at  netbsd:cpu_Debugger+0x4:        bx      r14
db{0}>

This occurs with firmware-1.20170811 and 1.20171029, but does not occur with firmware-1.20170703 or before.
>How-To-Repeat:
1. Extract RPI firmware from https://github.com/raspberrypi/firmware/archive/1.20171029.tar.gz and rm boot/kernel*.img.
2. Copy netbsd.bin to boot/kernel.img.
3. Write to msdos boot partition on mSD.
4. Boot up RPI2

>Fix:
unknown