Manuel Lauss wrote: > Hi, > > This is really embarrassing: The oops is what happens when you > ioremap(0x10) and write 0xffffffff at the resulting address (0xa0000010). > This pretty much implies that _CACHE_UNCACHED was passed in the flags value to ioremap, so it simply returned the kseg1 address. By any chance is physical page zero also referenced somewhere as cacheable? Kevin K.