FWIW, I think I fixed it: I have a small area (< 4kB) with a lot of UARTs and 3 interrupt controllers in it. An ioremap() was done for each uart and irq ctl area. Now there's one ioremap of the whole area and the oops is gone. I don't know why, but it seems fixed. (The oops appeared after one of the remapped areas was touched). Thanks! Manuel Lauss