RPCS3 / rpcs3

PlayStation 3 emulator and debugger
https://rpcs3.net/
GNU General Public License v2.0
15.33k stars 1.91k forks source link

Taiko no Tatsujin(S111) [SCEEXE000] VM: Access violation reading location 0x0 (unmapped memory) #12842

Open brian218 opened 1 year ago

brian218 commented 1 year ago

Quick summary

When switching the stage in the game, the error VM: Access violation reading location 0x0 (unmapped memory) is highly likely to occur (there's a considerably rare chance that this error doesn't occur though), and Emu.Kill() is unable to stop the game successfully (please refer to the following screenshot). Picture

Details

No response

Attach a log file

RPCS3.log

Attach capture files for visual issues

No response

System configuration

11th Gen Intel(R) Core(TM) i7-1165G7 @ 2.80GHz | 8 Threads | 15.70 GiB RAM | TSC: 2.803GHz | AVX-512+ | FMA3 Operating system: Windows, Major: 10, Minor: 0, Build: 22000, Service Pack: none, Compatibility mode: 0 GPU: 'Intel(R) Iris(R) Xe Graphics' running on driver 0.402.713

Other details

No response

solarmystic commented 1 year ago

~~Please add the name of the game and game id in the title of your issue report. I am aware that the log should have it, but a quick glance at the issue list would leave one puzzled as to which game you are referring to. The title isn't mentioned in the body of the issue report either.~~

Thanks for the additions.

brian218 commented 1 year ago

Seems to have something to do with sys_cond_signal():

·W 0:01:19.912329 {PPU[0x1000000] Thread (main_thread) [0x005130c8]} SYS: Emulation has been frozen! You can either use debugger tools to inspect current emulation state or terminate it.
·! 0:01:19.913248 {PPU[0x1000000] Thread (main_thread) [0x005130c8]} VM: 
Type: PPU; State: 0x8224[w|s|mem|G-PAUSE]
Priority: 1001
Stack: 0xd0001000..0xd0040fff
Joiner: detached
Last function: sys_cond_signal
Waiting: 0.001623s

r0 : 0x5130c8   -> nop
r1 : 0xd003e1a0 -> 00 00 00 00 d0 03 e3 60 
r2 : 0x1037a88  -> 00 ef 30 f0 00 ef 30 f8 
r3 : 0x0       
r4 : 0xd003e224 -> d0 03 e4 40 34 35 a4 f8 
r5 : 0xd003e220 -> 00 00 00 00 d0 03 e4 40 
r6 : 0xa0369    -> 63 00 20 80 9f 1e 0c 7c 
r7 : 0x126c9f0  -> 3f 80 00 00 00 00 00 00 
r8 : 0x147ec00  -> ff ff ff ff 00 00 00 00 
r9 : 0x0       
r10: 0x0       
r11: 0x0       
r12: 0x16e0308  -> func(at=0x16c512c, toc=0x16e8ab0)
r13: 0x20007060 -> 00 00 00 00 00 00 00 00 
r14: 0xd003f528 -> 00 00 00 00 d0 03 f9 70 
r15: 0xd003f4a8 -> 30 04 ae 00 30 04 6e 00 
r16: 0x30046de0 -> 00 00 00 00 30 04 6e 00 
r17: 0x0       
r18: 0xe1      
r19: 0x30049bc0 -> 00 00 00 00 00 0a 03 69 
r20: 0x4       
r21: 0xd003e570 -> 42 40 00 00 43 48 00 00 
r22: 0x148f1a0  -> bf 80 00 00 bf 80 00 00 
r23: 0x335eecc0 -> 00 f8 6a 48 30 04 7d cc 
r24: 0x3449a404 -> 3f 80 00 00 00 00 00 00 
r25: 0xe1      
r26: 0x10      
r27: 0x13f6000  -> 00 00 00 01 01 48 29 c0 
r28: 0x13f6000  -> 00 00 00 01 01 48 29 c0 
r29: 0x13f6000  -> 00 00 00 01 01 48 29 c0 
r30: 0x147eb80  -> 00 00 00 01 00 00 00 00 
r31: 0xa0369    -> 63 00 20 80 9f 1e 0c 7c 
f0 : 0            [                  ] (f32=0x0)
f1 : 200          [0x4069000000000000] (f32=0x43480000)
f2 : -48          [0xc048000000000000] (f32=0xc2400000)
f3 : 0            [                  ] (f32=0x0)
f4 : -200         [0xc069000000000000] (f32=0xc3480000)
f5 : 48           [0x4048000000000000] (f32=0x42400000)
f6 : 0            [                  ] (f32=0x0)
f7 : 200          [0x4069000000000000] (f32=0x43480000)
f8 : 48           [0x4048000000000000] (f32=0x42400000)
f9 : 0            [                  ] (f32=0x0)
f10: 0            [                  ] (f32=0x0)
f11: 0            [                  ] (f32=0x0)
f12: 0            [                  ] (f32=0x0)
f13: 0            [                  ] (f32=0x0)
f14: 0            [                  ] (f32=0x0)
f15: 0            [                  ] (f32=0x0)
f16: 0            [                  ] (f32=0x0)
f17: 0            [                  ] (f32=0x0)
f18: 0            [                  ] (f32=0x0)
f19: 0            [                  ] (f32=0x0)
f20: 0            [                  ] (f32=0x0)
f21: 0            [                  ] (f32=0x0)
f22: 0            [                  ] (f32=0x0)
f23: 0            [                  ] (f32=0x0)
f24: 0            [                  ] (f32=0x0)
f25: 0            [                  ] (f32=0x0)
f26: 0            [                  ] (f32=0x0)
f27: 0            [                  ] (f32=0x0)
f28: 0            [                  ] (f32=0x0)
f29: 0            [                  ] (f32=0x0)
f30: -200         [0xc069000000000000] (f32=0xc3480000)
f31: -48          [0xc048000000000000] (f32=0xc2400000)
v0 : 3f800000 3f800000 3f800000 00000000 [x: 1 y: 1 z: 1 w: 0]
v1 : 00000000 [x: 0]
v2 : c4718000 437d0000 c58929bd 3f800000 [x: -966 y: 253 z: -4389.22 w: 1]
v3 : 3f800000 00000000 00000000 00000000 [x: 1 y: 0 z: 0 w: 0]
v4 : 00000000 [x: 0]
v5 : 00000000 [x: 0]
v6 : 00000000 [x: 0]
v7 : c4718000 437d0000 c58931bd 3f800000 [x: -966 y: 253 z: -4390.22 w: 1]
v8 : 00000000 00000000 bf800000 00000000 [x: 0 y: 0 z: -1 w: 0]
v9 : 3f800000 00000000 00000000 00000000 [x: 1 y: 0 z: 0 w: 0]
v10: 00000000 00000000 bf800000 00000000 [x: 0 y: 0 z: -1 w: 0]
v11: 00000000 [x: 0]
v12: 3f800000 3f800000 3f800000 00000000 [x: 1 y: 1 z: 1 w: 0]
v13: 3f800000 3f800000 3f800000 00000000 [x: 1 y: 1 z: 1 w: 0]
v14: 3f800000 [x: 1]
v15: 3f800000 [x: 1]
v16: c37d0000 [x: -253]
v17: c4718000 437d0000 80000000 00000000 [x: -966 y: 253 z: -0 w: 0]
v18: c4718000 437d0000 80000000 80000000 [x: -966 y: 253 z: -0 w: -0]
v19: 3f800000 00000000 00000000 00000000 [x: 1 y: 0 z: 0 w: 0]
v20: 00000000 [x: 0]
v21: 00000000 [x: 0]
v22: 00000000 [x: 0]
v23: 00000000 [x: 0]
v24: 00000000 [x: 0]
v25: 00000000 [x: 0]
v26: 00000000 [x: 0]
v27: 00000000 [x: 0]
v28: 3f800000 00000000 00000000 00000000 [x: 1 y: 0 z: 0 w: 0]
v29: 00000000 3f800000 00000000 00000000 [x: 0 y: 1 z: 0 w: 0]
v30: 00000000 00000000 3f800000 00000000 [x: 0 y: 0 z: 1 w: 0]
v31: c4350000 c2300000 00000000 3f800000 [x: -724 y: -44 z: 0 w: 1]
CR: 0x22002022
LR: 0x5130c8
CTR: 0x16c512c
VRSAVE: 0xffffffff
XER: [CA=0 | OV=0 | SO=0 | CNT=0]
VSCR: [SAT=709105600 | NJ=1]
FPSCR: [FL=0 | FG=0 | FE=1 | FU=0]
Reservation Addr: none
Reservation Data (entire cache line):
[0x00] 01000000 00000000 01000000 00000000
[0x10] 01000000 00000000 01000000 00000000
[0x20] 01000000 00000000 01000000 00000000
[0x30] 00000000 00000000 01000000 00000000
[0x40] 01000000 00000000 00000001 335efb80
[0x50] 00f90c78 00000002 00000001 0110a568
[0x60] 00f90c78 00000002 00000001 0110a568
[0x70] 01000000 00000000 01000000 00000000

Call stack:
=========
0x005130c8 (0x0) called
> from 0x005130c8 (sp=0xd003e1a0)
> from 0x00512318 (sp=0xd003e360)
> from 0x00287890 (sp=0xd003e400)
> from 0x003daf48 (sp=0xd003e6c0)
> from 0x003d7af0 (sp=0xd003e790)
> from 0x003dfeb8 (sp=0xd003e840)
> from 0x003d7c1c (sp=0xd003e8f0)
> from 0x003dfeb8 (sp=0xd003e9a0)
> from 0x003d7af0 (sp=0xd003ea50)
> from 0x003dfeb8 (sp=0xd003eb00)
> from 0x003d7af0 (sp=0xd003ebb0)
> from 0x003dfeb8 (sp=0xd003ec60)
> from 0x003d7af0 (sp=0xd003ed10)
> from 0x003dfeb8 (sp=0xd003edc0)
> from 0x003d7af0 (sp=0xd003ee70)
> from 0x003dfeb8 (sp=0xd003ef20)
> from 0x0038b5fc (sp=0xd003efd0)
> from 0x00387a50 (sp=0xd003f050)
> from 0x0028c708 (sp=0xd003f0d0)
> from 0x008d2908 (sp=0xd003f370)
> from 0x008e40e0 (sp=0xd003f3f0)
> from 0x0027086c (sp=0xd003f660)
> from 0x00010710 (sp=0xd003f720)
> from 0x00017140 (sp=0xd003f790)
> from 0x0035ebf0 (sp=0xd003f8c0)
> from 0x0035d4e0 (sp=0xd00409a0)
> from 0x0035dc08 (sp=0xd0040a60)
> from 0x000104e8 (sp=0xd0040cb0)
> from 0x00010260 (sp=0xd0040d50)

[00513078]  fa c1 01 70: std        r22,0x170(r1)
[0051307c]  fa e1 01 78: std        r23,0x178(r1)
[00513080]  fb 01 01 80: std        r24,0x180(r1)
[00513084]  fb 41 01 90: std        r26,0x190(r1)
[00513088]  fb 61 01 98: std        r27,0x198(r1)
[0051308c]  7c 95 23 78: mr         r21,r4
[00513090]  7c b4 2b 78: mr         r20,r5
[00513094]  7c df 33 78: mr         r31,r6
[00513098]  7c f9 3b 78: mr         r25,r7
[0051309c]  48 00 b3 61: bl         0x51e3fc
[005130a0]  60 00 00 00: nop
[005130a4]  83 c2 6d 4c: lwz        r30,0x6d4c(r2)
[005130a8]  7f bc eb 78: mr         r28,r29
[005130ac]  80 1e 00 00: lwz        r0,0(r30)
[005130b0]  2f 80 00 00: cmpwi      cr7,r0,0
[005130b4]  41 9e 03 58: beq        cr7,0x51340c 
[005130b8]  7b e4 00 20: clrldi     r4,r31,32
[005130bc]  38 a1 00 70: addi       r5,0x70(r1)
[005130c0]  7f c3 f3 78: mr         r3,r30
[005130c4]  48 02 59 69: bl         0x538a2c
[005130c8]  60 00 00 00: nop
[005130cc]  81 41 00 70: lwz        r10,0x70(r1)
[005130d0]  38 81 00 84: addi       r4,0x84(r1)
[005130d4]  7d 43 53 78: mr         r3,r10
[005130d8]  38 a1 00 80: addi       r5,0x80(r1)
[005130dc]  81 2a 00 00: lwz        r9,0(r10)
[005130e0]  81 69 00 14: lwz        r11,0x14(r9)
[005130e4]  80 0b 00 00: lwz        r0,0(r11)
[005130e8]  f8 41 00 28: std        r2,0x28(r1)
[005130ec]  7c 09 03 a6: mtctr      r0

·F 0:01:19.913280 {PPU[0x1000000] Thread (main_thread) [0x005130c8]} VM: Access violation reading location 0x0 (unmapped memory)