given ra : 8002c0ac hrtimer_run_queues+0x160/0x1bc shouldn't it be that you tripped here: 8002c0a4. you can double check from hrtimer_run_queues+0x160 8002c098: 0c00aeaa jal 8002baa8 <__remove_hrtimer> 8002c09c: 00003821 move a3,zero 8002c0a0: 8e220020 lw v0,32(s1) 8002c0a4: 0040f809 jalr v0 <--- tripped here 8002c0a8: 02202021 move a0,s1 8002c0ac: 02002821 move a1,s0 <--- ra set to this ofcourse v0 is not *s1+32, but might need attention ??