[Issue]: Super Monkey Ball (NTSC-U) Consistent Console Crash

[0xca01]

Describe the bug

When playing SMB (NTSC-U, redump confirmed), the console crashes consistently after the high score name entry screen. This is observed on r1336 but was working fine as recently as r1318 (also did not observe the crash when testing r1236 & r743).

Swiss was loaded via picoboot & SD2SP2. Only setting utilized beyond defaults was to force 480p.

Steps to reproduce

1. Load game via swiss from SD card.
2. Main game -> 1 player -> beginner stages.
3. Reach a score of 50k or higher.
4. Expend all lives.
5. Enter name @ high score screen.
6. Observe console crash.

Expected behavior

N/A

Relevant log output

No response

Add screenshots

No response

[Extrems]

This isn't that reproducible, but here's a OSReport dump from one time I did get it to crash.

Dolphin OS $Revision: 37 $.
Kernel built : Jul 19 2001 05:43:42
Console Type : Development HW3
Memory 24 MB
Arena : 0x80306c80 - 0x817f7840
locked cache size: 2572
app booted from bootrom
Warning: DVDOpen(): file 'st099.tpl' was not found under /test/st099/.
Warning: DVDOpen(): file 'st099.gma' was not found under /test/st099/.
RELOCATION SEL_NGC LOADED
RELOCATION SEL_NGC PURGED
Unhandled Exception 2
------------------------- Context 0x802c7288 -------------------------
r0   = 0x80206e48 (   -2145358264)  r16  = 0x00000000 (             0)
r1   = 0x80306b20 (   -2144310496)  r17  = 0x00000000 (             0)
r2   = 0x802fa800 (   -2144360448)  r18  = 0x00000000 (             0)
r3   = 0x970b7c8c (   -1760854900)  r19  = 0x00000000 (             0)
r4   = 0xe0000000 (    -536870912)  r20  = 0x00000000 (             0)
r5   = 0x00000001 (             1)  r21  = 0x00000000 (             0)
r6   = 0x00000000 (             0)  r22  = 0x00000000 (             0)
r7   = 0x00010000 (         65536)  r23  = 0x00000000 (             0)
r8   = 0x80184920 (   -2145892064)  r24  = 0x00000000 (             0)
r9   = 0x801f3d96 (   -2145436266)  r25  = 0x801eec20 (   -2145457120)
r10  = 0x801f3d8c (   -2145436276)  r26  = 0x801b7c84 (   -2145682300)
r11  = 0x801f3d98 (   -2145436264)  r27  = 0x00000000 (             0)
r12  = 0x8003b268 (   -2147241368)  r28  = 0x802059d8 (   -2145363496)
r13  = 0x802f81e0 (   -2144370208)  r29  = 0x80205e60 (   -2145362336)
r14  = 0x00000000 (             0)  r30  = 0x80306b9c (   -2144310372)
r15  = 0x00000000 (             0)  r31  = 0x80205e60 (   -2145362336)
LR   = 0x8003c0f4                   CR   = 0x46000000
SRR0 = 0x800078b4                   SRR1 = 0x0000b032

GQRs----------
gqr0 = 0x00000000        gqr4 = 0x00060006
gqr1 = 0x00000000        gqr5 = 0x00070007
gqr2 = 0x00040004        gqr6 = 0x00000000
gqr3 = 0x00050005        gqr7 = 0x00000000


FPRs----------
fr0     = 0      fr1    = 0
fr2     = 0      fr3    = 0
fr4     = 0      fr5    = 0
fr6     = 0      fr7    = 0
fr8     = 0      fr9    = 1
fr10    = 1      fr11   = 0
fr12    = 0      fr13   = 0
fr14    = 0      fr15   = 0
fr16    = 0      fr17   = 0
fr18    = 0      fr19   = 0
fr20    = 0      fr21   = 0
fr22    = 0      fr23   = 0
fr24    = 0      fr25   = 0
fr26    = 0      fr27   = 0
fr28    = 0      fr29   = 0
fr30    = 0      fr31   = 0


PSFs----------
ps0     = 0x0    ps1    = 0x0
ps2     = 0x0    ps3    = 0x0
ps4     = 0x0    ps5    = 0x0
ps6     = 0x0    ps7    = 0x0
ps8     = 0x0    ps9    = 0x0
ps10    = 0x0    ps11   = 0x0
ps12    = 0x0    ps13   = 0x0
ps14    = 0x0    ps15   = 0x0
ps16    = 0x0    ps17   = 0x0
ps18    = 0x0    ps19   = 0x0
ps20    = 0x0    ps21   = 0x0
ps22    = 0x0    ps23   = 0x0
ps24    = 0x0    ps25   = 0x0
ps26    = 0x0    ps27   = 0x0
ps28    = 0x0    ps29   = 0x0
ps30    = 0x0    ps31   = 0x0

Address:      Back Chain    LR Save
0x80306b20:   0x80306b90    0x8003c0f4
0x80306b90:   0x80306c00    0x8003b2d8
0x80306c00:   0x80306c58    0x80038220
0x80306c58:   0x80306c68    0x8000b2dc
0x80306c68:   0x80306c78    0x80006798
0x80306c78:   0xffffffff    0x800031ec

DSISR= 0x04000000                   DAR  = 0x970b7c8c

Instruction at 0x800078b4 (read from SRR0) attempted to access invalid address 0x970b7c8c (read from DAR)

[Sevenanths]

I also have this issue with Super Monkey Ball (PAL) when loaded from an SD2SP2 adapter. I also have the 480p option enabled. If I launch Super Monkey Ball from disc (but also with 480p enabled), no crash occurs. For me, the crash is consistent. It happens every time after I 'monkey in' my initials.

[robatw1]

I also have the crash on r1387 with picoboot and SD2SP2 after putting in the initials (after beating the whole normal/beginner-stage). It is the first game I tried with my new picoboot Gamecube and oh well.. :(

I use the NTSC Game on a Pal Gamecube.

help is appreciated

[robatw1]

Yo guys, I put on the version from last week (0.6r1400) today and played that beginner stage again (10 stages) and no crash after putting in the initials. so I guess the problem is solved! Used same gamecube, same iso etc.

TANKS, I love you

[Extrems]

I have no reason to believe the problem is solved.

[Sevenanths]

I'll try the new revision in the coming days and report my own findings to corroborate/disprove @robatw1's comment. In any case, thanks for checking this again @robatw1.

[robatw1]

well. I tried it a couple more times. after being successful 2 more times it crashed again on me today 2 times in a row :(