NetBSD Problem Report #60890
From www@netbsd.org Fri Oct 16 18:19:11 2026
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits)
client-signature RSA-PSS (2048 bits))
(Client CN "mail.netbsd.org", Issuer "YR1" (not verified))
by mollari.NetBSD.org (Postfix) with ESMTPS id CA1C11A923B
for <gnats-bugs@gnats.NetBSD.org>; Fri, 16 Oct 2026 18:19:11 +0000 (UTC)
Message-Id: <20261016181910.4DA281A923C@mollari.NetBSD.org>
Date: Fri, 16 Oct 2026 18:19:10 +0000 (UTC)
From: josch@debian.org
Reply-To: josch@debian.org
To: gnats-bugs@NetBSD.org
Subject: kernel panic when trying to boot NetBSD 11 aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588
X-Send-Pr-Version: www-1.0
X-From4GNATS: "josch@debian.org via gnats" <gnats-admin@NetBSD.org>
>Number: 60890
>Category: port-arm
>Synopsis: kernel panic when trying to boot NetBSD 11 aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: port-arm-maintainer
>State: closed
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Fri Oct 16 18:20:01 +0000 2026
>Closed-Date: Sat Oct 17 07:19:58 +0000 2026
>Last-Modified: Sat Oct 17 07:20:01 +0000 2026
>Originator: Johannes Schauer Marin Rodrigues
>Release: NetBSD-11-aarch64-20261014183245Z
>Organization:
>Environment:
>Description:
Hi,
I'm completely new to NetBSD (I come from Debian Linux) but I tried booting NetBSD-11-aarch64-20261014183245Z-generic.img.gz using barebox on a MNT Pocket Reform open hardware laptop with a Firefly iCore RK3588 SoM. Unfortunately it encounters a kernel panic and reboots. Maybe I'm doing something stupid, so I hope I'm not wasting your time. In any case, at the end of this message is the full output from serial. If you need any other debugging output, please advice!
Thank you so much in advance!
cheers, josch
DDR cb12b99cc23 hcy 25/10/17-18:57:13,fwver: v1.21
ch0 ttot10
ch0 ttot10
ch1 ttot10
ch2 ttot10
ch3 ttot10
ch0 ttot18
LPDDR4, 2112MHz
channel[0] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
ch1 ttot18
channel[1] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
ch2 ttot16
channel[2] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
ch3 ttot16
channel[3] BW=16 Col=10 Bk=8 CS0 Row=17 CS1 Row=17 CS=2 Die BW=16 Size=4096MB
Manufacturer ID:0xff
DQS rds:h1,h1
CH0 RX Vref:32.2%, TX Vref:13.2%,13.2%
DQ rds:h1 l0 l0 h1 h1 h3 h2 h7, h1 l0 l1 h1 h1 l0 h3 l0
DQS rds:h1,h1
CH1 RX Vref:34.4%, TX Vref:13.2%,13.2%
DQ rds:h2 h1 h1 h2 h1 h3 h1 h5, h3 h3 h7 h3 h2 h1 h3 h1
DQS rds:l0,h1
CH2 RX Vref:38.1%, TX Vref:13.2%,13.2%
DQ rds:h3 h4 h6 h5 h1 h5 h5 h7, h2 h3 h4 h2 h1 h2 h6 h4
DQS rds:l0,h1
CH3 RX Vref:37.7%, TX Vref:13.2%,13.2%
DQ rds:h6 h5 h1 h1 h1 h2 h3 h5, h1 h5 h2 h2 h4 h4 h3 h2
stride=0x2, ddr_config=0x4
hash ch_mask0-1 0x20 0x40, bank_mask0-3 0xa00 0x1400 0x2800 0x0, rank_mask0 0x401000
change to F1: 528MHz
ch0 ttot10
ch1 ttot10
ch2 ttot10
ch3 ttot10
change to F2: 1068MHz
ch0 ttot12
ch1 ttot12
ch2 ttot12
ch3 ttot12
change to F3: 1560MHz
ch0 ttot14
ch1 ttot14
ch2 ttot14
ch3 ttot14
change to F0: 2112MHz
ch0 ttot18
ch1 ttot18
ch2 ttot16
ch3 ttot16
out
NOTICE: BL31: v2.12.0(release):4ec2948
NOTICE: BL31: Built : 22:55:37, Jan 27 2026
[mnt-reform-series-rk3588] setup_usb()
environment load : No such file or directory
Maybe you have to create the partition.
00000000:
00000000:
00000000:
00000000:
00000000:
00000000:
Machine: MNT Pocket Reform with RCORE RK3588 Module
Boot Loader: 2026.06.0-00018-g9e309377ceec
Press m for menu or any key to interrupt boot: 0
\\-__,------,___.
\\ __,---` NetBSD/evbarm efiboot (arm64)
\\ `---,_. Revision 2.16 (Wed Oct 14 18:32:45 UTC 2026)
\\-,_____,.---`
\\
\\
\\
Press return to boot now, any other key for boot prompt
booting netbsd - starting in 0 seconds.
7773136+3586704+4319588+1740596 [657845+973704+727442]=0x1408308
PANIC: unable to handle NULL pointer dereference at address 0x0000000000000008
DABT (current EL) (ESR 0x9600000b)
elr: 00000003ffe731b0 lr : 00000003ffe8e160
x0 : 0000000000000000 x1 : 00000000eff973b0
x2 : 00000000eff97430 x3 : 00000000eff97460
x4 : 00000000eff974a0 x5 : 00000000ffffffc8
x6 : 00000000eff974e0 x7 : 00000000eff974e0
x8 : 00000000eff97460 x9 : 00000000ffffffc8
x10: 00000000eff974a0 x11: 00000000ffffffc8
x12: 646c2d3738336966 x13: 4950412d61746164
x14: ffffffffffffffff x15: ffffffffffffffff
x16: 00000000efccda18 x17: ffffffffffffffff
x18: 0000000000000000 x19: 00000003ffe99000
x20: 00000003ffe73180 x21: 00000000eff97600
x22: 00000000eff974e0 x23: 00000000eff974e0
x24: 00000000ffffffc8 x25: 00000003ffe94b78
x26: 00000003ffe98940 x27: 00000003ffe93000
x28: 00000000efd78000 x29: 00000000eff97390
Call trace:
[<3ffe731b0>] (0x3ffe731b0) from [<3ffe8e160>] (0x3ffe8e160)
[<3ffe8e160>] (0x3ffe8e160) from [<3ffe8e7d4>] (0x3ffe8e7d4)
[<3ffe8e7d4>] (0x3ffe8e7d4) from [<3ffe8df1c>] (0x3ffe8df1c)
[<3ffe8df1c>] (0x3ffe8df1c) from [<3ffe742ec>] (0x3ffe742ec)
[<3ffe742ec>] (0x3ffe742ec) from [<3ffe78ab0>] (0x3ffe78ab0)
[<3ffe78ab0>] (0x3ffe78ab0) from [<3ffe738e0>] (0x3ffe738e0)
[<3ffe738e0>] (0x3ffe738e0) from [<3ffe72c28>] (0x3ffe72c28)
[<3ffe72c28>] (0x3ffe72c28) from [<3ffe74278>] (0x3ffe74278)
[<3ffe74278>] (0x3ffe74278) from [<3ffe72030>] (0x3ffe72030)
[<3ffe72030>] (0x3ffe72030) from [<efcd0a7c>] (__efi_start_image+0x11c/0x148)
[<efcd0a7c>] (__efi_start_image+0x11c/0x148) from [<efcd21d4>] (efi_loader_bootm+0x3ec/0x4c0)
[<efcd21d4>] (efi_loader_bootm+0x3ec/0x4c0) from [<efc18614>] (bootm_boot_handler+0x110/0x124)
[<efc18614>] (bootm_boot_handler+0x110/0x124) from [<efc2b528>] (bootm_entry+0x38/0x48)
[<efc2b528>] (bootm_entry+0x38/0x48) from [<efcd19d8>] (esp_boot+0x7c/0xb0)
[<efcd19d8>] (esp_boot+0x7c/0xb0) from [<efc2aeb0>] (boot_entry+0x70/0xc8)
[<efc2aeb0>] (boot_entry+0x70/0xc8) from [<efc96354>] (do_boot+0x240/0x318)
[<efc96354>] (do_boot+0x240/0x318) from [<efc1932c>] (execute_command+0x4c/0x94)
[<efc1932c>] (execute_command+0x4c/0x94) from [<efc160ec>] (execute_binfmt+0x68/0xa0)
[<efc160ec>] (execute_binfmt+0x68/0xa0) from [<efc230c8>] (run_list_real+0x8ec/0x994)
[<efc230c8>] (run_list_real+0x8ec/0x994) from [<efc22608>] (parse_stream_outer+0x140/0x20c)
[<efc22608>] (parse_stream_outer+0x140/0x20c) from [<efc22780>] (parse_string_outer+0xac/0x108)
[<efc22780>] (parse_string_outer+0xac/0x108) from [<efc236b4>] (run_command+0x94/0xbc)
[<efc236b4>] (run_command+0x94/0xbc) from [<efc12948>] (run_init+0x174/0x2cc)
[<efc12948>] (run_init+0x174/0x2cc) from [<efc12788>] (start_barebox+0x4c/0x7c)
[<efc12788>] (start_barebox+0x4c/0x7c) from [<efcc5d38>] (psci_driver_register+0x0/0x1c)
[<efcc5d38>] (psci_driver_register+0x0/0x1c) from [<00b05334>] (0xb05334)
[<00b05334>] (0xb05334) from [<00b046e0>] (0xb046e0)
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
From: Nick Hudson <nick.hudson@gmx.co.uk>
To: gnats-bugs@netbsd.org
Cc: port-arm-maintainer@netbsd.org,
gnats-admin@netbsd.org,
netbsd-bugs@netbsd.org
Subject: Re: port-arm/60890: kernel panic when trying to boot NetBSD 11
aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588
Date: Sat, 17 Oct 2026 07:10:29 +0100
> On 16 Oct 2026, at 19:20, josch@debian.org via gnats =
<gnats-admin@NetBSD.org> wrote:
>=20
>> Number: 60890
>> Category: port-arm
>> Synopsis: kernel panic when trying to boot NetBSD 11 aarch64 =
generic image on MNT Pocket Reform with Firefly iCore RK3588
>> Confidential: no
>> Severity: serious
>> Priority: medium
>> Responsible: port-arm-maintainer
>> State: open
>> Class: sw-bug
>> Submitter-Id: net
>> Arrival-Date: Fri Oct 16 18:20:01 +0000 2026
>> Originator: Johannes Schauer Marin Rodrigues
>> Release: NetBSD-11-aarch64-20261014183245Z
>> Organization:
>> Environment:
>> Description:
> Hi,
>=20
> I'm completely new to NetBSD (I come from Debian Linux) but I tried =
booting NetBSD-11-aarch64-20261014183245Z-generic.img.gz using barebox =
on a MNT Pocket Reform open hardware laptop with a Firefly iCore RK3588 =
SoM. Unfortunately it encounters a kernel panic and reboots. Maybe I'm =
doing something stupid, so I hope I'm not wasting your time. In any =
case, at the end of this message is the full output from serial. If you =
need any other debugging output, please advice!
> Thank you so much in advance!
> cheers, josch
>=20
> DDR cb12b99cc23 hcy 25/10/17-18:57:13,fwver: v1.21
> ch0 ttot10
> ch0 ttot10
> ch1 ttot10
> ch2 ttot10
> ch3 ttot10
> ch0 ttot18
> LPDDR4, 2112MHz
> channel[0] BW=3D16 Col=3D10 Bk=3D8 CS0 Row=3D17 CS1 Row=3D17 CS=3D2 =
Die BW=3D16 Size=3D4096MB
> ch1 ttot18
> channel[1] BW=3D16 Col=3D10 Bk=3D8 CS0 Row=3D17 CS1 Row=3D17 CS=3D2 =
Die BW=3D16 Size=3D4096MB
> ch2 ttot16
> channel[2] BW=3D16 Col=3D10 Bk=3D8 CS0 Row=3D17 CS1 Row=3D17 CS=3D2 =
Die BW=3D16 Size=3D4096MB
> ch3 ttot16
> channel[3] BW=3D16 Col=3D10 Bk=3D8 CS0 Row=3D17 CS1 Row=3D17 CS=3D2 =
Die BW=3D16 Size=3D4096MB
> Manufacturer ID:0xff
> DQS rds:h1,h1=20
> CH0 RX Vref:32.2%, TX Vref:13.2%,13.2%
> DQ rds:h1 l0 l0 h1 h1 h3 h2 h7, h1 l0 l1 h1 h1 l0 h3 l0=20
>=20
> DQS rds:h1,h1=20
> CH1 RX Vref:34.4%, TX Vref:13.2%,13.2%
> DQ rds:h2 h1 h1 h2 h1 h3 h1 h5, h3 h3 h7 h3 h2 h1 h3 h1=20
>=20
> DQS rds:l0,h1=20
> CH2 RX Vref:38.1%, TX Vref:13.2%,13.2%
> DQ rds:h3 h4 h6 h5 h1 h5 h5 h7, h2 h3 h4 h2 h1 h2 h6 h4=20
>=20
> DQS rds:l0,h1=20
> CH3 RX Vref:37.7%, TX Vref:13.2%,13.2%
> DQ rds:h6 h5 h1 h1 h1 h2 h3 h5, h1 h5 h2 h2 h4 h4 h3 h2=20
>=20
> stride=3D0x2, ddr_config=3D0x4
> hash ch_mask0-1 0x20 0x40, bank_mask0-3 0xa00 0x1400 0x2800 0x0, =
rank_mask0 0x401000
> change to F1: 528MHz
> ch0 ttot10
> ch1 ttot10
> ch2 ttot10
> ch3 ttot10
> change to F2: 1068MHz
> ch0 ttot12
> ch1 ttot12
> ch2 ttot12
> ch3 ttot12
> change to F3: 1560MHz
> ch0 ttot14
> ch1 ttot14
> ch2 ttot14
> ch3 ttot14
> change to F0: 2112MHz
> ch0 ttot18
> ch1 ttot18
> ch2 ttot16
> ch3 ttot16
> out
> NOTICE: BL31: v2.12.0(release):4ec2948
> NOTICE: BL31: Built : 22:55:37, Jan 27 2026
>=20
>=20
>=20
>=20
> [mnt-reform-series-rk3588] setup_usb()
> environment load : No such file or directory
> Maybe you have to create the partition.
> 00000000: =20
> 00000000: =20
> 00000000: =20
> 00000000: =20
> 00000000: =20
> 00000000: =20
> Machine: MNT Pocket Reform with RCORE RK3588 Module
> Boot Loader: 2026.06.0-00018-g9e309377ceec
> Press m for menu or any key to interrupt boot: 0
>=20
>=20
> \\-__,------,___.
> \\ __,---` NetBSD/evbarm efiboot (arm64)
> \\ `---,_. Revision 2.16 (Wed Oct 14 18:32:45 UTC 2026)
> \\-,_____,.---`
> \\
> \\
> \\
>=20
> Press return to boot now, any other key for boot prompt
> booting netbsd - starting in 0 seconds. =20
> 7773136+3586704+4319588+1740596 [657845+973704+727442]=3D0x1408308
> PANIC: unable to handle NULL pointer dereference at address =
0x0000000000000008
> DABT (current EL) (ESR 0x9600000b)
> elr: 00000003ffe731b0 lr : 00000003ffe8e160
> x0 : 0000000000000000 x1 : 00000000eff973b0
> x2 : 00000000eff97430 x3 : 00000000eff97460
> x4 : 00000000eff974a0 x5 : 00000000ffffffc8
> x6 : 00000000eff974e0 x7 : 00000000eff974e0
> x8 : 00000000eff97460 x9 : 00000000ffffffc8
> x10: 00000000eff974a0 x11: 00000000ffffffc8
> x12: 646c2d3738336966 x13: 4950412d61746164
> x14: ffffffffffffffff x15: ffffffffffffffff
> x16: 00000000efccda18 x17: ffffffffffffffff
> x18: 0000000000000000 x19: 00000003ffe99000
> x20: 00000003ffe73180 x21: 00000000eff97600
> x22: 00000000eff974e0 x23: 00000000eff974e0
> x24: 00000000ffffffc8 x25: 00000003ffe94b78
> x26: 00000003ffe98940 x27: 00000003ffe93000
> x28: 00000000efd78000 x29: 00000000eff97390
>=20
> Call trace:
> [<3ffe731b0>] (0x3ffe731b0) from [<3ffe8e160>] (0x3ffe8e160)
> [<3ffe8e160>] (0x3ffe8e160) from [<3ffe8e7d4>] (0x3ffe8e7d4)
> [<3ffe8e7d4>] (0x3ffe8e7d4) from [<3ffe8df1c>] (0x3ffe8df1c)
> [<3ffe8df1c>] (0x3ffe8df1c) from [<3ffe742ec>] (0x3ffe742ec)
> [<3ffe742ec>] (0x3ffe742ec) from [<3ffe78ab0>] (0x3ffe78ab0)
> [<3ffe78ab0>] (0x3ffe78ab0) from [<3ffe738e0>] (0x3ffe738e0)
> [<3ffe738e0>] (0x3ffe738e0) from [<3ffe72c28>] (0x3ffe72c28)
> [<3ffe72c28>] (0x3ffe72c28) from [<3ffe74278>] (0x3ffe74278)
> [<3ffe74278>] (0x3ffe74278) from [<3ffe72030>] (0x3ffe72030)
> [<3ffe72030>] (0x3ffe72030) from [<efcd0a7c>] =
(__efi_start_image+0x11c/0x148)
> [<efcd0a7c>] (__efi_start_image+0x11c/0x148) from [<efcd21d4>] =
(efi_loader_bootm+0x3ec/0x4c0)
> [<efcd21d4>] (efi_loader_bootm+0x3ec/0x4c0) from [<efc18614>] =
(bootm_boot_handler+0x110/0x124)
> [<efc18614>] (bootm_boot_handler+0x110/0x124) from [<efc2b528>] =
(bootm_entry+0x38/0x48)
> [<efc2b528>] (bootm_entry+0x38/0x48) from [<efcd19d8>] =
(esp_boot+0x7c/0xb0)
> [<efcd19d8>] (esp_boot+0x7c/0xb0) from [<efc2aeb0>] =
(boot_entry+0x70/0xc8)
> [<efc2aeb0>] (boot_entry+0x70/0xc8) from [<efc96354>] =
(do_boot+0x240/0x318)
> [<efc96354>] (do_boot+0x240/0x318) from [<efc1932c>] =
(execute_command+0x4c/0x94)
> [<efc1932c>] (execute_command+0x4c/0x94) from [<efc160ec>] =
(execute_binfmt+0x68/0xa0)
> [<efc160ec>] (execute_binfmt+0x68/0xa0) from [<efc230c8>] =
(run_list_real+0x8ec/0x994)
> [<efc230c8>] (run_list_real+0x8ec/0x994) from [<efc22608>] =
(parse_stream_outer+0x140/0x20c)
> [<efc22608>] (parse_stream_outer+0x140/0x20c) from [<efc22780>] =
(parse_string_outer+0xac/0x108)
> [<efc22780>] (parse_string_outer+0xac/0x108) from [<efc236b4>] =
(run_command+0x94/0xbc)
> [<efc236b4>] (run_command+0x94/0xbc) from [<efc12948>] =
(run_init+0x174/0x2cc)
> [<efc12948>] (run_init+0x174/0x2cc) from [<efc12788>] =
(start_barebox+0x4c/0x7c)
> [<efc12788>] (start_barebox+0x4c/0x7c) from [<efcc5d38>] =
(psci_driver_register+0x0/0x1c)
> [<efcc5d38>] (psci_driver_register+0x0/0x1c) from [<00b05334>] =
(0xb05334)
> [<00b05334>] (0xb05334) from [<00b046e0>] (0xb046e0)]
This isn=E2=80=99t a NetBSD kernel panic.
Doing a bit of searching tells me it=E2=80=99s barebox.=20
>=20
>> How-To-Repeat:
>=20
>> Fix:
>=20
State-Changed-From-To: open->closed
State-Changed-By: skrll@NetBSD.org
State-Changed-When: Sat, 17 Oct 2026 07:19:58 +0000
State-Changed-Why:
Submitter request
From: Johannes Schauer Marin Rodrigues <josch@debian.org>
To: Nick Hudson via gnats <gnats-admin@NetBSD.org>, gnats-admin@netbsd.org, gnats-bugs@netbsd.org, netbsd-bugs@netbsd.org, port-arm-maintainer@netbsd.org
Cc:
Subject: Re: port-arm/60890: kernel panic when trying to boot NetBSD 11 aarch64 generic image on MNT Pocket Reform with Firefly iCore RK3588
Date: Sat, 17 Oct 2026 09:18:32 +0200
--===============2402602784600877052==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Quoting Nick Hudson via gnats (2026-10-17 08:15:02)
> This isn't a NetBSD kernel panic.
> =20
> Doing a bit of searching tells me it's barebox.
Oh shoot! Thank you so much for doing the digging for me. <3
I'll approach the barebox folks with this issue. Please close this bug and
sorry for the noise!
I hope I'll be back soon. :)
cheers, josch
--===============2402602784600877052==
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Description: signature
Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"
-----BEGIN PGP SIGNATURE-----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=QA3G
-----END PGP SIGNATURE-----
--===============2402602784600877052==--
>Unformatted:
(Contact us)
$NetBSD: query-full-pr,v 1.51 2026/08/10 02:28:17 riastradh Exp $
$NetBSD: gnats_config.sh,v 1.10 2026/05/13 22:00:09 riastradh Exp $
Copyright © 1994-2026
The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.