Flash encryption booting failed - Fatal exception (28): LoadProhibited

[stevensun]

Project：examples\security\flash_encryption
ESP-IDF v4.1-dev-1572-g30372f5a4-dirty 2nd stage bootloader

no changes on the codes but with modified partition table and menuconfig. When the firmware boots, Fatal Exception (28) appears:

D (552) esp_image: reading image header @ 0x1000
D (557) bootloader_flash: mmu set block paddr=0x00000000 (was 0xffffffff)
D (564) esp_image: image header: 0xe9 0x04 0x02 0x02 4008072c
Fatal exception (28): LoadProhibited
epc1=0x4008104c, epc2=0x00000000, epc3=0x00000000, excvaddr=0x00000028, depc=0x00000000
0x4008104c: call_start_cpu1 at F:/Projects/esp/esp-idf/components/esp32/cpu_start.c:277

But in bootloader.map， 0x4008104c is related to bootloader_common_get_chip_revision：
.text.bootloader_common_get_chip_revision
0x4008104c 0x4d esp-idf/bootloader_support/libbootloader_support.a(bootloader_efuse_esp32.c.obj)
0x4008104c bootloader_common_get_chip_revision

Do you know what's wrong in my setting?