Hi,
I am currently addressing a very similar problem myself. My configuration is: C6748, BIOS 6.33.1.25, BIOSPSP 3.0.1.0, UART driver. In interrupt mode it causes an exception.
After tracing through the code, I see that there's a problem in the GIO read/write module with respect to the way BIOSPSP 3 is implemented. Specifically, the IOMPacket reference passed from GIO_submit into the driver is located on the stack (in GIO_submit), but subsequently used and modified by the UART driver in the context of the tasklet at a later time. That's a recipe for disaster.
So, a quick solution to our problems may be to use the issue/reclaim model instead of read/write.
Fundamentally, the packet passed down by GIO_submit should be one that was allocated in the packets queue for the issue/reclaim model use, or at least located in the instance state.
How do I file a bug report for this?