To try to reproduce your report I built a mps2_defconfig kernel and then run the qemu command line manually extraced from your script below, using a mainline qemu built for arm-softmmu, but it crashes with the following message even for the baseline kernel. qemu: fatal: Lockup: can't escalate 3 to HardFault (current priority -1) R00=00000000 R01=00000000 R02=00000000 R03=00000000 R04=00000000 R05=00000000 R06=00000000 R07=00000000 R08=00000000 R09=00000000 R10=00000000 R11=00000000 R12=00000000 R13=ffffffe0 R14=fffffff9 R15=00000000 XPSR=40000003 -Z-- A handler FPSCR: 00000000 Does anyone have an idea what this means? --- /opt/qemu/bin/qemu-system-arm \ -M mps2-an385 \ -cpu cortex-m3 \ -dtb arch/arm/boot/dts/mps2-an385.dtb \ -kernel vmlinux \ -no-reboot \ -snapshot -m 16 \ -initrd ~/images/rootfs-arm-m3.cpio \ -append 'panic=-1' \ -bios ~/images/mps2-boot.axf \ -nographic -monitor null -serial stdio