>> step-by-step via Jtag, and get expected value before jumping to the kernel,
>> that is the address where to jump is pointed to the kernel entry.
>
> Where does it jump to?

And is it the exact instruction expected to run after all?  You have a JTAG tool
at hand.  Have you ever tried to run "plain" netbsd kernel image manually
downloaded at "gunzipped" RAM address?  If it runs ok, gzboot fails to work.

Toru Nishimura/ALKYL Technology