内核高手帮忙看下这个kernel oops

elelonger

板子是飞凌的TE9263， CPU是AT91SAM9263， kernel是linux-2.6.20, NFS挂载rootfs启动

我移植了tslib-1.4和Qt-4.5.3,
板子跑tslib的测试程序的时候， 不会有Oops, 但是如果跑QT4的话（我自己移植的）, 经常性的oops
高手帮忙看下什么原因。。？

Unable to handle kernel paging request at virtual address ae102170
pgd = c36c0000
[ae102170] *pgd=00000000<7>ads7846 spi0.3: DEactivate 75

Internal error: Oops: 0 [#1]
Modules linked in:
CPU: 0
PC is at 0xae102170
LR is at EmulateAll+0x34/0x58
pc : [<ae102170>]    lr : [<c003096c>]    Not tainted
sp : c367df6c  ip : c367dfa0  fp : c367df9c
r10: c367dfb0  r9 : c0026cc8  r8 : 00000100
r7 : 00000001  r6 : ee102170  r5 : 4038cf18  r4 : c0026c6c
r3 : 00023000  r2 : 0e000000  r1 : 00000002  r0 : c0026c69
Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  Segment user
Control: 5317F
Table: 236C0000  DAC: 00000015
Process hac (pid: 806, stack limit = 0xc367c250)
Stack: (0xc367df6c to 0xc367e000)
df60:                            c0030ad8 c0032a40 c0026c6c 4038cf18 ee102170
df80: 00000001 00000100 c0026cc8 c367dfb0 c367dfac c367dfa0 c003096c c0031294
dfa0: 00000000 c367dfb0 c0036e18 c0030948 ddddffff 0000e4e4 000000e4 00000000
dfc0: 0007c4c0 beddfb90 bede0b70 beddfb90 00000012 0007c4a0 40a4cee8 bede14b4
dfe0: 40a568e4 beddfb20 00000002 4038cf18 20000010 ffffffff 00000000 00000000
Backtrace:
[<c0031284>] (EmulateCPRT+0x0/0x620) from [<c003096c>] (EmulateAll+0x34/0x5
[<c0030938>] (EmulateAll+0x0/0x5 from [<c0036e18>] (emulate+0x4/0xc)
Code: bad PC value.
<7>ads7846 spi0.3: DEactivate 75
atmel_spi atmel_spi.0: xfer complete: 3 bytes transferred
atmel_spi atmel_spi.0: new message c3e485d8 submitted for spi0.3
atmel_spi atmel_spi.0:   xfer c3e4848c: len 1 tx c3e48430/23e48430 rx 00000000/ffffffff
atmel_spi atmel_spi.0:   xfer c3e484b0: len 2 tx 00000000/ffffffff rx c3e48438/23e48438
ads7846 spi0.3: activate 75
ads7846 spi0.3:   start xfer c3e4848c: len 1 tx c3e48430/23e48430 rx 00000000/ffffffff imr 018
ads7846 spi0.3:   start xfer c3e484b0: len 2 tx 00000000/ffffffff rx c3e48438/23e48438 imr 018
ads7846 spi0.3: DEactivate 75
atmel_spi atmel_spi.0: xfer complete: 3 bytes transferred
atmel_spi atmel_spi.0: new message c3e485d8 submitted for spi0.3
atmel_spi atmel_spi.0:   xfer c3e4848c: len 1 tx c3e48430/23e48430 rx 00000000/ffffffff
atmel_spi atmel_spi.0:   xfer c3e484b0: len 2 tx 00000000/ffffffff rx c3e48438/23e48438
ads7846 spi0.3: activate 75
ads7846 spi0.3:   start xfer c3e4848c: len 1 tx c3e48430/23e48430 rx 00000000/ffffffff imr 018
ads7846 spi0.3:   start xfer c3e484b0: len 2 tx 00000000/ffffffff rx c3e48438/23e48438 imr 018
ads7846 spi0.3: DEactivate 75
atmel_spi atmel_spi.0: xfer complete: 3 bytes transferred
atmel_spi atmel_spi.0: new message c3e48604 submitted for spi0.3
atmel_spi atmel_spi.0:   xfer c3e484d4: len 1 tx c3e48434/23e48434 rx 00000000/ffffffff
atmel_spi atmel_spi.0:   xfer c3e484f8: len 2 tx 00000000/ffffffff rx c3e48436/23e48436
ads7846 spi0.3: activate 75
ads7846 spi0.3:   start xfer c3e484d4: len 1 tx c3e48434/23e48434 rx 00000000/ffffffff imr 018
ads7846 spi0.3:   start xfer c3e484f8: len 2 tx 00000000/ffffffff rx c3e48436/23e48436 imr 018
ads7846 spi0.3: DEactivate 75
atmel_spi atmel_spi.0: xfer complete: 3 bytes transferred
evbug.c: Event. Dev: spi0.3/input0, Type: 3, Code: 0, Value: 1985
evbug.c: Event. Dev: spi0.3/input0, Type: 3, Code: 1, Value: 2327
evbug.c: Event. Dev: spi0.3/input0, Type: 0, Code: 0, Value: 0
ads7846 spi0.3: 1985/2327/7500
macb macb: start_xmit: len 150 head c3bb3800 data c3bb3802 tail c3bb3898 end c3bb38c0
macb macb: data: 00 04 23 86 99 a7 a0 32 87 cd 93 45 08 00 45 00
macb macb: Allocated ring entry 9
macb macb: Mapped skb data c3bb3802 to DMA addr 00303700
macb macb: macb_tx status = 21
macb macb: skb 9 (data c3bb3802) TX complete
macb macb: scheduling RX softirq
evbug.c: Event. Dev: spi0.3/input0, Type: 1, Code: 330, Value: 0
evbug.c: Event. Dev: spi0.3/input0, Type: 3, Code: 24, Value: 0
evbug.c: Event. Dev: spi0.3/input0, Type: 0, Code: 0, Value: 0
ads7846 spi0.3: UP
macb macb: poll: status = 00000002, budget = 300
macb macb: macb_rx_frame frags 98 - 99 (len 13
macb macb: received skb of length 124, csum: 00000000
macb macb: start_xmit: len 150 head c3bb3800 data c3bb3802 tail c3bb3898 end c3bb38c0
macb macb: data: 00 04 23 86 99 a7 a0 32 87 cd 93 45 08 00 45 00
macb macb: Allocated ring entry 10
macb macb: Mapped skb data c3bb3802 to DMA addr 00303d00
macb macb: macb_tx status = 21
macb macb: skb 10 (data c3bb3802) TX complete
macb macb: scheduling RX softirq
macb macb: poll: status = 00000002, budget = 300
macb macb: macb_rx_frame frags 100 - 101 (len 13
macb macb: received skb of length 124, csum: 00000000
macb macb: start_xmit: len 150 head c3bb3800 data c3bb3802 tail c3bb3898 end c3bb38c0
macb macb: data: 00 04 23 86 99 a7 a0 32 87 cd 93 45 08 00 45 00
macb macb: Allocated ring entry 11
macb macb: Mapped skb data c3bb3802 to DMA addr 00304300
macb macb: macb_tx status = 21
macb macb: skb 11 (data c3bb3802) TX complete
macb macb: scheduling RX softirq
macb macb: poll: status = 00000002, budget = 300
macb macb: macb_rx_frame frags 102 - 103 (len 13
macb macb: received skb of length 124, csum: 00000000
macb macb: start_xmit: len 150 head c358fc00 data c358fc02 tail c358fc98 end c358fcc0
macb macb: data: 00 04 23 86 99 a7 a0 32 87 cd 93 45 08 00 45 00
macb macb: Allocated ring entry 12
macb macb: Mapped skb data c358fc02 to DMA addr 00304900
macb macb: macb_tx status = 21
macb macb: skb 12 (data c358fc02) TX complete
macb macb: scheduling RX softirq
macb macb: poll: status = 00000002, budget = 300
macb macb: macb_rx_frame frags 104 - 105 (len 13
macb macb: received skb of length 124, csum: 00000000
macb macb: start_xmit: len 150 head c358fc00 data c358fc02 tail c358fc98 end c358fcc0
macb macb: data: 00 04 23 86 99 a7 a0 32 87 cd 93 45 08 00 45 00
macb macb: Allocated ring entry 13
macb macb: Mapped skb data c358fc02 to DMA addr 00304f00
macb macb: macb_tx status = 21
macb macb: skb 13 (data c358fc02) TX complete
macb macb: scheduling RX softirq
macb macb: poll: status = 00000002, budget = 300
macb macb: macb_rx_frame frags 106 - 107 (len 13
macb macb: received skb of length 124, csum: 00000000
Segmentation fault
[root@:/]# macb macb: start_xmit: len 42 head c3dec9c0 data c3dec9c2 tail c3dec9ec end c3deca00
macb macb: data: 00 04 23 86 99 a7 a0 32 87 cd 93 45 08 06 00 01
macb macb: Allocated ring entry 14
macb macb: Mapped skb data c3dec9c2 to DMA addr 00305500
macb macb: macb_tx status = 21
macb macb: skb 14 (data c3dec9c2) TX complete
macb macb: scheduling RX softirq
macb macb: poll: status = 00000002, budget = 300
macb macb: macb_rx_frame frags 108 - 108 (len 60)
macb macb: received skb of length 46, csum: 00000000

emmoblin

atmel_spi 去掉这个驱动试试