Here's a dump. Note that I get a different symptom each time I boot the empeg...

Here's the dump...

empeg-car bootstrap v1.00 20000601 ([email protected])
If there is anyone present who wants to upgrade the flash, let them speak now,
or forever hold their peace...it seems not. Let fly the Penguins of Linux!

Copying kernel...
Calling linux kernel...
Uncompressing Linux.................................... done, booting the kernel
.
Linux version 2.2.14-rmk5-np17-empeg35 ([email protected]) (gcc vers
ion 2.95.2 19991024 (release)) #19 Fri Aug 4 15:58:47 BST 2000
Processor: Intel StrongARM-1100 revision 11
NetWinder Floating Point Emulator V0.94.1 (c) 1998 Corel Computer Corp.
empeg-car player (hardware revision 7, serial number 80000289)
Command line: mem=12m temp=48
Calibrating delay loop... 207.67 BogoMIPS
Memory: 11000k/12M available (968k code, 20k reserved, 292k data, 8k init)
Dentry hash table entries: 2048 (order 2, 16k)
Buffer cache hash table entries: 16384 (order 4, 64k)
Page cache hash table entries: 4096 (order 2, 16k)
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.2
Based upon Swansea University Computer Society NET3.039
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
TCP: Hash tables configured (ehash 16384 bhash 16384)
IrDA (tm) Protocols for Linux-2.2 (Dag Brattli)
Linux-IrDA: IrCOMM protocol ( revision:Tue May 18 03:11:39 1999 )
ircomm_tty: virtual tty driver for IrCOMM ( revision:Wed May 26 00:49:11 1999 )
Starting kswapd v 1.5
SA1100 serial driver version 4.27 with no serial options enabled
ttyS00 at 0xf8010000 (irq = 15) is a SA1100 UART
ttyS01 at 0xf8050000 (irq = 17) is a SA1100 UART
ttyS02 at 0xf8030000 (irq = 16) is a SA1100 UART
empeg display initialised.
empeg dspaudio driver initialized
empeg audio-in initialised, CS4231A revision a0
empeg infra-red support initialised.
empeg usb initialised, PDIUSBD12 id 1012
empeg state support initialised 0089/88c1 (save to d0004800).
empeg power-pic driver initialised (first boot)
RAM disk driver initialized: 16 RAM disks of 4096K size
empeg single channel IDE
Probing primary interface...
hdb: IBM-DARA-218000, ATA DISK drive
hda: IBM-DARA-218000, ATA DISK drive
hdb: IBM-DARA-218000, ATA DISK drive
ide0 at 0x000-0x007,0x038 on irq 6
hda: IBM-DARA-218000, 17301MB w/418kB Cache, CHS=35152/16/63
hdb: IBM-DARA-218000, 17301MB w/418kB Cache, CHS=35152/16/63
empeg-flash driver initialized
smc chip id/revision 0x3349
smc9194.c:v0.12 03/06/96 by Erik Stahlman ([email protected])

SMC9194: SMC91C94(r:9) at 0x4008000 IRQ:7 INTF:TP MEM:6144b MAC 00:02:d7:10:01:2
1
Partition check:
hda: hda1 < hda5 hda6 > hda2 hda3 hda4
hdb: hdb1 < hdb5 hdb6 > hdb2 hdb3 hdb4
RAMDISK: ext2 filesystem found at block 0
RAMDISK: Loading 320 blocks [1 disk] into ram disk... done.
VFS: Mounted root (ext2 filesystem).
empeg-pump v0.03 (19980601)
Press Ctrl-A to enter pump...VFS: Mounted root (ext2 filesystem) readonly.
change_root: old root has d_count=1
Trying to unmount old root ... okay
Freeing unused kernel memory: 8k initempeg-car 1.0.
player: memory violation at pc=0x020568c0, lr=0x0006f8cb (bad address=0x000545d8
, code 2)
pc : [<020568c0>] lr : [<0006f8cb>]
sp : be5ff8d4 ip : fffa3d34 fp : be5ffd48
r10: be5ffd00 r9 : 0006f800 r8 : 32ebc601
r7 : fffff2ab r6 : fffee865 r5 : be5ff9d0 r4 : 000517ac
r3 : 0005b39c r2 : 0009dc15 r1 : 0007b428 r0 : 000545df
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: D039517D Table: D039517D DAC: 00000015
Function entered at [<02044e58>] from [<020492c8>]
r10 = BFFFFF64 r9 = 0210D798 r8 = 020FD948 r7 = 0000280B
r6 = 0210D7B0 r5 = 0210D798 r4 = 00000000
Function entered at [<020492ac>] from [<0200a124>]
r4 = BE5FFD64
Function entered at [<0200a074>] from [<020632e0>]
r5 = 0000000B r4 = BE5FFE40
Function entered at [<02063220>] from [<0209a05c>]
r4 = 00000000
Function entered at [<02099060>] from [<02063064>]
r8 = 0210A7D4 r7 = 0210A7C0 r6 = 0200A074 r5 = 00000003
r4 = 00000001
Function entered at [<02062fb4>] from [<0209a05c>]
r5 = 00000000 r4 = 00000000
Function entered at [] from []
ננempeg-car 1.0.
Unable to handle kernel paging request at virtual address c0c00000
memmap = 00401FB1, pgd = ea0000bb
*pgd = 00ffff2a, *pmd = 50ffffe3, *pte = ef9f0000, *ppte = 000f0002
Internal error: Oops: 0
CPU: 0
pc : [] lr : []
sp : c0bfffd8 ip : 60000093 fp : c0ff1cf0
r10: 00000000 r9 : c0961da8 r8 : 00000000
r7 : 00000008 r6 : 00000001 r5 : c0112688 r4 : c0685140
r3 : 00000004 r2 : 00000002 r1 : c0685158 r0 : 00000002
Flags: nZCv IRQs off FIQs on Mode SVC_32 Segment user
Control: D039517D Table: D039517D DAC: 00000015
Process (pid: 0, stackpage=c0bff000)
Stack:
c0bfffc0: c00338e8 c000ad44 60000093 ffffffff 00000002 c06851
58
c0bfffe0: 00000002 00000004 c0685140 c0112688 00000001 00000008 00000000 c0961d
a8
Backtrace: invalid frame pointer c0ff1cf0
Code: 00000000 e24dd048 (e88d1fff) e59f2138 e28d0048
Aiee, killing interrupt handler
Kernel panic: Attempted to kill the idle task!
In interrupt handler - not syncing

On the phone with Tony now and he's trying to help - but thanks everyone for trying! Any help is welcome!

- Jon