There is a (not enabled) paniclog driver in the kernel source, which writes a kernel panic log (oops) to a specific address in MTD flash. Check the soucre at "drivers/misc/ezx-log.c" "drivers/misc/log.c"