Error NVMe interBad ram pointer 0x200

[Aircool08]

Hi, i tried to install the emulator on my Laptop with Arch Linux. Ive done now the turotial 2 times and watched other people do it but i still can't figure out what i did wrong.
Specs:

OS: Arch Linux x86_64
Host: LIFEBOOK E556 (10601736731)
Kernel: Linux 6.16.0-arch1-1
Shell: bash 5.3.3
Display (BOE0665): 1366x768 @ 60 Hz in 16" [Built-in]
DE: KDE Plasma 6.4.3
WM: KWin (Wayland)
 Terminal: kitty 0.42.2
CPU: Intel(R) Core(TM) i5-6200U (4) @ 2.80 GHz
GPU: Intel HD Graphics 520 @ 1.00 GHz [Integrated]
Memory: 7.66 GiB
Swap: 3.83 GiB

RTBuddy(AOP): start(0xffffffe19bae8000) - (Aug 12 2020@22:50:37)
RTBuddy(ANS2): Boot args override: wdt = -1
RTBuddy(AOP): Boot args override: wdt = -1
RTBuddy(AOP): Resuming...

RTBuddy(ANS2): Resuming...

RTBuddy(SIO): start(0xffffffe19bb08000) - (Aug 12 2020@22:50:37)
RTBuddy(SIO): Boot args override: wdt = -1
RTBuddy(SIO): Resuming...

Starting AppleSMC kext(0xffffffe19b7f86b0) - (Aug 12 2020@22:51:44)
AppleSMCEmbedded::setPowerState(): ENTER powerStateOrdinal=1, _activeKeyCommand=13 newState=1
AppleA7IOPNub: withRegistryEntry, 47: allocated nub 0xffffffe19baa5d60

AppleAuthCPRelay:_sendCommandGated CMD=0x1 _receivedStatus ERROR ( status = 0xe00002e9 )
AppleAuthCPRelay:_getCert failed to send command kAuthCommandIDGetCert
AppleAuthCPRelay:start _getCert() failed (status = 0xe00002e9)
Failed to enable notifications (0x84)!

ERROR: Unable to enable notification interface (kSMCKeyNotFound).

AppleSPU::_handleReadyReport, serviceName (aop-audio) 
LPM state clear
pci (build 22:19:24 Aug 12 2020), flags 0x20c3008
LPM: Log data is NOT valid. 0x0 0x0
AppleDialogSPMIPMU::start: Primary PMU detected
AppleARMRTC started!#####
AppleDialogSPMIPMURTC started!******
Failed to read info-leg_scrpadAppleDialogSPMIPMURTC tick read!&&&&&&&
AppleDialogSPMIPMURTC ending!%%%
AppleSmartIO (RTBuddy-based)::start (0xffffffe19bb3d800) - (Aug 12 2020@22:19:30)
AppleARMRTC registering service!@@@@@@
AppleSPUFirmwareService: found node AOP
AppleARMRTC service registered!$$$$$
AppleARMRTC publishing service!^^^^^^
[ PCI configuration begin ]
[AOPAudio](debug) + Controller::start() {this: 0xffffffe19b86d800} built Aug 12 2020 22:19:38
[AOPAudio](debug) AppleAOPAudioService::create() got service controller 'aop '
[AOPAudio](debug) AppleAOPAudioService::create() service has 3 devices
[AOPAudio](debug) +-Controller::initForPM() -> 0x0
[ PCI configuration end, bridges 3, devices 0 ]
[AOPAudio](debug) + IOReporter::addIOReporters(0xffffffe19bb2a8a0)
[AOPAudio](debug) - IOReporter::addIOReporters(0xffffffe19bb2a8a0) -> 0x0
[AOPAudio](debug) + Controller::_publishBelow(0xffffffe19b98c200)
[AOPAudio](debug) +-DeviceNode::initWithRegistryEntry(from 0xffffffe19b61cf00, provider 0xffffffe19b86d800), IOReturn: 0x0
[AOPAudio](debug)  Controller::_publishBelow() attach and start 0xffffffe19baa4be0 (audio-lp-mic-in), class is AppleAOPAudioDeviceNode
[AOPAudio](debug) +-DeviceNode::initWithRegistryEntry(from 0xffffffe19b61cfa0, provider 0xffffffe19b86d800), IOReturn: 0x0
[AOPAudio](debug)  Controller::_publishBelow() attach and start 0xffffffe19baa4c80 (audio-mca0), class is AppleAOPAudioDeviceNode
[AOPAudio](debug) +-DeviceNode::initWithRegistryEntry(from 0xffffffe19b61d040, provider 0xffffffe19b86d800), IOReturn: 0x0
virtual bool AppleSEPManager::start(IOService *): 
[AOPAudio](debug)  Controller::_publishBelow() attach and start 0xffffffe19baa6620 (audio-mca1), class is AppleAOPAudioDeviceNode
virtual IOService *AppleANS2NVMeController::probe(IOService *, SInt32 *)::194:Found (ANS2) provider, returning score 100000
[AOPAudio](debug) +-DeviceNode::initWithRegistryEntry(from 0xffffffe19b61ea80, provider 0xffffffe19b86d800), IOReturn: 0x0
[AOPAudio](debug)  Controller::_publishBelow() attach and start 0xffffffe19baa7700 (audio-codecmclkmgr), class is AppleAOPAudioDeviceNode
virtual bool AppleSEPManager::start(IOService *): SEP memory IS coherent
[AOPAudio](debug) +-DeviceNode::initWithRegistryEntry(from 0xffffffe19b61f020, provider 0xffffffe19b86d800), IOReturn: 0x0
void AppleEmbeddedNVMeController::GetRestoreEnvironment()::444:Restore Environment!
[AOPAudio](debug)  Controller::_publishBelow() attach and start 0xffffffe19baa6b20 (audio-speaker), class is AppleAOPAudioDeviceNode
[AOPAudio](debug) +-DeviceNode::initWithRegistryEntry(from 0xffffffe19b61ef80, provider 0xffffffe19b86d800), IOReturn: 0x0
[AOPAudio](debug)  Controller::_publishBelow() attach and start 0xffffffe19baa4d20 (audio-hw-pcm-audiomgr), class is AppleAOPAudioDeviceNode
virtual bool AppleSEPManager::start(IOService *): control endpoints created
virtual bool AppleANS2NVMeController::start(IOService *)::394:Found the ANS2Endpoint1
void AppleEmbeddedNVMeController::GetRestoreEnvironment()::444:Restore Environment!
bool AppleEmbeddedNVMeController::SetNamespacesStruct()::186:Obtained 7 namespaces from DT
[AOPAudio](debug) +-DeviceNode::initWithRegistryEntry(from 0xffffffe19b61cd20, provider 0xffffffe19b86d800), IOReturn: 0x0
virtual IOFilterInterruptEventSource *AppleANS2NVMeController::CreateDeviceInterrupt(IOInterruptEventSource::Action, IOFilterInterruptEventSource::Filter, IOService *)::2719:ANS2 NVMe interBad ram pointer 0x200

./ios2.sh: line 28:  3592 Aborted                    (core dumped) QEMUAppleSilicon/build/qemu-system-aarch64 -M t8030,trustcache=iPhone11_8_iPhone12_1_14.0_18A5351d_Restore/Firmware/038-44135-124.dmg.trustcache,ticket=root_ticket.der,sep-fw=sep-firmware.n104.RELEASE.new.img4,sep-rom=AppleSEPROM-Cebu-B1,kaslr-off=true,usb-conn-type=ipv4,usb-conn-addr=127.0.0.1,usb-conn-port=8030 -kernel iPhone11_8_iPhone12_1_14.0_18A5351d_Restore/kernelcache.research.iphone12b -dtb iPhone11_8_iPhone12_1_14.0_18A5351d_Restore/Firmware/all_flash/DeviceTree.n104ap.im4p -append "tlto_us=-1 mtxspin=-1 agm-genuine=1 agm-authentic=1 agm-trusted=1 serial=3 launchd_unsecure_cache=1 wdt=-1 -vm_compressor_wk_sw" -smp 7 -m 4G -serial mon:stdio -drive file=sep_nvram,if=pflash,format=raw -drive file=sep_ssc,if=pflash,format=raw -drive file=root,format=raw,if=none,id=root -device nvme-ns,drive=root,bus=nvme-bus.0,nsid=1,nstype=1,logical_block_size=4096,physical_block_size=4096 -drive file=firmware,format=raw,if=none,id=firmware -device nvme-ns,drive=firmware,bus=nvme-bus.0,nsid=2,nstype=2,logical_block_size=4096,physical_block_size=4096 -drive file=syscfg,format=raw,if=none,id=syscfg -device nvme-ns,drive=syscfg,bus=nvme-bus.0,nsid=3,nstype=3,logical_block_size=4096,physical_block_size=4096 -drive file=ctrl_bits,format=raw,if=none,id=ctrl_bits -device nvme-ns,drive=ctrl_bits,bus=nvme-bus.0,nsid=4,nstype=4,logical_block_size=4096,physical_block_size=4096 -drive file=nvram,if=none,format=raw,id=nvram -device apple-nvram,drive=nvram,bus=nvme-bus.0,nsid=5,nstype=5,id=nvram,logical_block_size=4096,physical_block_size=4096 -drive file=effaceable,format=raw,if=none,id=effaceable -device nvme-ns,drive=effaceable,bus=nvme-bus.0,nsid=6,nstype=6,logical_block_size=4096,physical_block_size=4096 -drive file=panic_log,format=raw,if=none,id=panic_log -device nvme-ns,drive=panic_log,bus=nvme-bus.0,nsid=7,nstype=8,logical_block_size=4096,physical_block_size=4096 -initrd iPhone11_8_iPhone12_1_14.0_18A5351d_Restore/038-44135-124.dmg -display gtk,zoom-to-fit=on,show-cursor=on```

[gallantcrusader]

I am also having this issue.

info: iOS 14.0.0
info: Kernel virtual low: 0xfffffff004000000
info: Kernel virtual high: 0xfffffff00a4cd4f0
info: `bypass root authentication` patch applied in `__TEXT_EXEC`.
info: `allow mounting root as r/w` patch applied in `__TEXT_EXEC`.
info: `disable APFS snapshots` patch applied in `__TEXT`.
info: `allow SHA1 signatures in AMFI` patch applied in `__TEXT_EXEC`.
info: `increase SCOT size to 0x10000 to use it as TRAC` patch applied in `__TEXT_EXEC`.
info: `allow unsigned firmware in img4_firmware_evaluate` patch applied in `__TEXT_EXEC`.
info: ck_kp_tc_callback: found AMFI (Leaf)
info: `AMFI, all binaries in trustcache` patch applied in `__TEXT_EXEC`.
`allow remounting rootfs, union mounts (old)` patch did not apply in `__TEXT_EXEC`.
info: `allow remounting rootfs, union mounts (new)` patch applied in `__TEXT_EXEC`.
info: `force enable kprintf` patch applied in `__TEXT_EXEC`.
info: `disable AMX` patch applied in `__TEXT_EXEC`.
info: `bypass code signature checks` patch applied in `__TEXT_EXEC`.
`bypass code signature checks (alt)` patch did not apply in `__TEXT_EXEC`.
info: `enable hactivation` patch applied in `__TEXT`.
info: ck_kp_tc_callback: found AMFI (Routine)
info: `AMFI, all binaries in trustcache` patch applied in `__PPLTEXT`.
`AMFI, all binaries in trustcache (iOS 16)` patch did not apply in `__PPLTEXT`.
info: `bypass pmap_cs_enforce` patch applied in `__PPLTEXT`.
info: boot_mode: 0
info: auto-boot=true
info: Kernel virtual base: 0xfffffff004000000
info: Kernel physical base: 0x0000000800000000
info: Kernel virtual slide: 0x0000000000000000
info: Kernel physical slide: 0x0000000000000000
info: Kernel entry point: 0x00000008041204e8
info: Device tree physical base: 0x000000080d8ac000
info: Device tree virtual base: 0xfffffff0118ac000
info: Device tree size: 0x0000000000024000
info: mem_size: 0x00000000f7cc8000
info: Boot args: [tlto_us=-1 mtxspin=-1 agm-genuine=1 agm-authentic=1 agm-trusted=1 serial=3 launchd_unsecure_cache=1 wdt=-1 -vm_compressor_wk_sw]
iBoot version: ChefKiss QEMU Apple Silicon
corecrypto_kext_start called
FIPSPOST_KEXT [13461187] fipspost_post:158: PASSED: (3 ms) - fipspost_post_integrity
FIPSPOST_KEXT [13509022] fipspost_post:164: PASSED: (1 ms) - fipspost_post_hmac
FIPSPOST_KEXT [13526341] fipspost_post:165: PASSED: (0 ms) - fipspost_post_aes_ecb
FIPSPOST_KEXT [13545199] fipspost_post:166: PASSED: (0 ms) - fipspost_post_aes_cbc
FIPSPOST_KEXT [13979385] fipspost_post:167: PASSED: (17 ms) - fipspost_post_rsa_sig
FIPSPOST_KEXT [14256329] fipspost_post:168: PASSED: (11 ms) - fipspost_post_ecdsa
FIPSPOST_KEXT [14327300] fipspost_post:169: PASSED: (2 ms) - fipspost_post_ecdh
FIPSPOST_KEXT [14351609] fipspost_post:170: PASSED: (0 ms) - fipspost_post_drbg_ctr
FIPSPOST_KEXT [14385334] fipspost_post:171: PASSED: (0 ms) - fipspost_post_aes_ccm
FIPSPOST_KEXT [15356909] fipspost_post:173: PASSED: (39 ms) - fipspost_post_pbkdf
FIPSPOST_KEXT [15372761] fipspost_post:174: PASSED: (0 ms) - fipspost_post_kdf_ctr
FIPSPOST_KEXT [15402343] fipspost_post:175: PASSED: (0 ms) - fipspost_post_aes_gcm
FIPSPOST_KEXT [15426494] fipspost_post:176: PASSED: (0 ms) - fipspost_post_aes_xts
FIPSPOST_KEXT [15460036] fipspost_post:177: PASSED: (1 ms) - fipspost_post_tdes_cbc
FIPSPOST_KEXT [15484988] fipspost_post:178: PASSED: (0 ms) - fipspost_post_drbg_hmac
FIPSPOST_KEXT [15496875] fipspost_post:201: all tests PASSED (87 ms)
Darwin Image4 Validator Version 3.0.0: Wed Aug 12 22:19:21 PDT 2020; root:AppleImage4-106.0.4.0.1~129/AppleImage4/RELEASE_ARM64E
AppleImage4: failed to read nvram property: nonce-seeds: 2
AppleImage4: error reading seeds: 2
AMFI is running in RESEARCH mode!
AppleT803xIO::start: chip-revision: C0
AppleT803xIO::start: clock frequencies not published in device tree
AppleARMBacklight::start: Using new Backlight Architecture 1
AppleARMBacklight::start: no DBV offset data
AppleARMBacklight::start: no DBV max data
AppleARMBacklight::start: _calibratedMaxCurrent=15000
AppleARMBacklight::start: _calibratedMidCurrent=3750
AppleARMBacklight::start: mA2Nits2ndOrderCoef=-1
AppleARMBacklight::start: mA2Nits1stOrderCoef=63
AppleARMBacklight::start: mA2Nits0thOrderCoef=-3
AppleARMBacklight::start: nits2mAmps2ndOrderCoef=1357
AppleARMBacklight::start: nits2mAmps1stOrderCoef=15551
AppleARMBacklight::start: nits2mAmps0thOrderCoef=45
AppleARMBacklight::start: _lMaxProduct=42598400
AppleARMBacklight::start: _lMidProduct=10158080
AppleARMBacklight::start: _lMinProduct=183500
AppleARMBacklight::start: Backlight calibration data 0
AppleARMBacklight::start: No valid backlight cal data in syscfg.. Use defaults
AppleT803xIO::start: this: <ptr>, ACCE virt addr: <ptr>, phys addr: 0x210f00000
AppleT803xIO::start: this: <ptr>, ACCP virt addr: <ptr>, phys addr: 0x211f00000
AUC:[0xffffffe19b7170e0]::init(0xffffffe19b706940)

AUC:[0xffffffe19b7170e0]::probe(0xffffffe19b4ce300, 0xffffffe80805bdac)

AppleCredentialManager: init: called, instance = <ptr>.
ACMFirstResponderKernelService: init: called, .
ACMRM-S: init: called, starting PersistentStore service.
ACMRM-C: init: called, starting AccessoryCache service.
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache size = 16 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: acc-cache expiration = 2592000 (default).
ACMRM: init: called, starting TRM service.
ACMRM-A: init: called, starting TRM Analytics service.
ACMKernelService: initValueFromBootArgAliasesUInt32: analytics collection period = 86400 (default).
ACMKernelService: initValueFromBootArgAliasesUInt32: policy mode timeout = 259200 (default).
ACMRM-A: notifyStandardModeTimeoutChanged: called, value = 259200 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: (bounded) grace period timeout = 3600 (default).
ACMRM-A: notifyGracePeriodTimeoutChanged: called, value = 3600 (modified = YES).
ACMKernelService: initValueFromBootArgAliasesUInt32: enabled = 1 (default).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO* BtArg=NO LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO* LegHW=NO OSEnv=NO | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _loadDisabledByOSEnvironment: disabled by OSEnvironment: NO.
AppleARMBacklight::start: _calibratedMinCurrent=74 uA
AppleARMBacklight::start: _lMaxProduct=42598400, _lMidProduct=10158080, _lMinProduct=183500, _lMaxPanel=42598399, _lMidPanel=11169963, _lMinPanel=99640, _milliAmps2NitsScaleFactor=732648
AppleARMBacklight::start: dim-ramp-max-step=100
AppleARMBacklight::start: _minDACLevel=143 _maxDACLevel=1879
ACMRM: _disableBy: [TRM ENABLED=YES] (mask=0, DISABLED BY: Def=NO BtArg=NO LegHW=NO OSEnv=NO* | MngCo=NO DwnOS=NO ChkBd=NO coGSw=NO).
ACMRM: _mapAndPublishTRM: set TRM_PolicyTimeout = 259200.
ACMRM: _mapAndPublishTRM: sending kIOMessageServicePropertyChange(n=1) while DISABLED, TRM: 259200 -/ff 4294967295 -/ff miss=ff (CUR: 259200 -/ff 4294967295 -/ff).
AppleCredentialManager: init: returning, result = true, instance = <ptr>.
AppleARMBootPerf: Error: profile region not found (2)
AppleARMBootPerf: Error: failed to publish profile data (2)
virtual bool CoreAnalyticsHub::start(IOService *)::105:CoreAnalyticsHub start
AppleS8000AES::start: registers at phys:0x0x235008000/0x0x23d2d0000 virt:0x<ptr>/0x0x4000 / 0x<ptr>/0x0x4000
AppleS8000AES::start: aes-version: 3
AppleS8000AES::start: using-acg: no
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleGPIOICController::start: this: <ptr>, _gpioicBaseAddress: <ptr>
AppleInterruptController::start: _aicVersion = 2 _aicBaseAddress = 0x<ptr> _aicNumExtInts = 0x00000240 _aicNumIPIs = 0x0000000c
AppleInterruptController::start: Num Shared Timestamps == 0
AppleS5L8940XI2CController::start: smc-i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleSSE::start called
AppleS5L8940XI2CController::start: smc-i2c0 this: <ptr> _i2cBaseAddress: <ptr>
AppleSamsungSPIController::start: spi1: _spiBaseAddress = 0x235104000:<ptr>, _spiVersion = 1 _spiInternalCS = 0
AppleS5L8940XI2CController::start: i2c3 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c1 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c0 this: <ptr> _i2cBaseAddress: <ptr>
AppleS5L8940XI2CController::start: i2c2 this: <ptr> _i2cBaseAddress: <ptr>
AppleSamsungSPIController::start: spi3: _spiBaseAddress = 0x23510c000:<ptr>, _spiVersion = 1 _spiInternalCS = 0
AppleSSE::start returning, result = 1
000002.207658 AppleT8030TypeCPhy@0: AppleT8027TypeCPhy::start: usb3-phy-parent not specified
AppleEmbeddedAudioResourceManager: ByteOffset=43, ResourceID=0x10000_PCM , AKCIName=AOPAudioHWPCMAssetManagerInterface
AppleEmbeddedAudioResourceManager: Looking up service matching AKCI 'AOPAudioHWPCMAssetManagerInterface'
AUC:[0xffffffe19b7170e0]::start(0xffffffe19b4ce300)

M3 Normal mode not enabled on Fastsim
virtual bool IOMobileFramebufferLegacy::start(IOService *)
IOMFB: driver commit: 
AppleSEPKeyStore:321:0: starting (BUILT: Aug 12 2020 22:51:30)
AppleSEPKeyStore:545:0: _sep_enabled = 1
AppleCredentialManager: start: called, instance = <ptr>.
ACMRM: _publishIOResource: AppleUSBRestrictedModeTimeout = 259200.
AppleCredentialManager: start: initializing power management, instance = <ptr>.
AppleCredentialManager: start: started, instance = <ptr>.
AppleCredentialManager: start: returning, result = true, instance = <ptr>.
virtual bool AppleARMLightEmUp::start(IOService *): starting...
AppleEmbeddedPCIE::start this = <ptr>, gAPCIEdebugFlags = 0x80000001
AppleS5L8960XWatchDogTimer::start: _wdtBaseAddress: <ptr> _wdtResetCount=0xe4e1c00 _useSMCEnforcedWatchdog=0
watchdog disabled by boot-argIdentified Serial Port uart0 at 0x235200000(<ptr>)
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

Identified Serial Port uart7 at 0x23521c000(<ptr>)
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(ANS2): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(ANS2): Boot args override: wdt = -1
RTBuddy(SMC): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(SMC): Boot args override: wdt = -1
RTBuddy(SMC): Resuming...

RTBuddy(ANS2): Resuming...

virtual IOService *AppleANS2NVMeController::probe(IOService *, SInt32 *)::194:Found (ANS2) provider, returning score 100000
virtual IOService *AppleANS2NVMeController::probe(IOService *, SInt32 *)::194:Found (ANS2) provider, returning score 100000
Starting AppleSMC kext(<ptr>) - (Aug 12 2020@22:51:44)
AppleSMCEmbedded::setPowerState(): ENTER powerStateOrdinal=1, _activeKeyCommand=17 newState=1
virtual bool AppleANS2NVMeController::start(IOService *)::394:Found the ANS2Endpoint1
virtual bool AppleANS2NVMeController::start(IOService *)::394:Found the ANS2Endpoint1
bool AppleEmbeddedNVMeController::SetNamespacesStruct()::186:Obtained 7 namespaces from DT
bool AppleEmbeddedNVMeController::SetNamespacesStruct()::186:Obtained 7 namespaces from DT
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

AppleDialogSPMIPMU::start: spmi-pmu _pmuNub: <ptr> built 22:52:54 Aug 12 2020
virtual IOFilterInterruptEventSource *AppleANS2NVMeController::CreateDeviceInterrupt(IOInterruptEventSource::Action, IOFilterInterruptEventSource::Filter, IOService *)::2719:ANS2 NVMe interrupt index - 0x4
virtual IOFilterInterruptEventSource *AppleANS2NVMeController::CreateDeviceInterrupt(IOInterruptEventSource::Action, IOFilterInterruptEventSource::Filter, IOService *)::2719:ANS2 NVMe interrupt index - 0x4
Failed to enable notifications (0x84)!

ERROR: Unable to enable notification interface (kSMCKeyNotFound).

pci (build 22:19:24 Aug 12 2020), flags 0x20c3008
pci (build 22:19:24 Aug 12 2020), flags 0x20c3008
[ PCI configuration begin ]
AppleSMCSensorDispatcher::start: Found 8 sensors from the device tree
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(AOP): start(<ptr>) - (Aug 12 2020@22:50:37)
AppleSMCSensorDispatcher::start: Start success

RTBuddy(AOP): Boot args override: wdt = -1
RTBuddy(AOP): Resuming...

AppleS8000AES::start: using DART Mapper: <ptr>
LPM: Log data is NOT valid. 0x0 0x0
AppleDialogSPMIPMU::start: Primary PMU detected
[ PCI configuration end, bridges 3, devices 0 ]
apcie[2:pci-bridge2]::_mapRIDToSID no mapper defined and device <ptr> (0:2:0) does not support hot-plug
AppleARMRTC startapcie[ed3!:baseband-pcie]::_mapRIDToSID no mapper defined and device <ptr> (0:3:0) does not support hot-plug
#####
AppleAuthCPRelay:_sendCommandGated CMD=0x1 _receivedStatus ERROR ( status = 0xe00002e9 )
AppleAuthCPRelay:_getCert failed to send command kAuthCommandIDGetCert
AppleAuthCPRelay:start _getCert() failed (status = 0xe00002e9)
AppleDialogSPMIPMURTC started!******
Failed to read info-leg_scrpadAppleDialogSPMIPMURTC::handleStart: ro=0 nvram=0 helper=0 AppleDialogSPMIPMU _pmuNub: <ptr> 0x1102:0x9f04-0x9f15 built 22:52:53 Aug 12 2020
AppleDialogSPMIPMURTC tick read!&&&&&&&
AppleDialogSPMIPMURTC ending!%%%
AppleARMRTC registering service!@@@@@@
AppleARMRTC service registered!$$$$$
AppleARMRTC publishing service!^^^^^^
virtual bool AppleSEPManager::start(IOService *): 
AppleSPUFirmwareService: found node AOP
virtual bool AppleSEPManager::start(IOService *): SEP memory IS coherent
AppleDisplayPMU::start: display-pmu _pmuIICNub: <ptr> built 22:19:31 Aug 12 2020
virtual bool AppleSEPManager::start(IOService *): control endpoints created
virtual bool AppleSEPManager::start(IOService *): PM init done
AppleSPU::_handleReadyReport, serviceName (aop-audio) 
virtual bool AppleSEPManager::start(IOService *): registered
IOReturn AppleSEPManager::_setPowerState(unsigned long *): power state 0 -> 2
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

Bad ram pointer 0x200
[1]    83811 killed     QEMUAppleSilicon/build/qemu-system-aarch64 -M  -kernel  -dtb  -append  -smp 7

[chris-pcguy]

yeah I tried that as well, not even a window was opened. i think lldb was taking a while to load or something?

Just use gdb then. After you see it crashing, run the bt command.

[gallantcrusader]

AppleS8000AES::start: using DART Mapper: <ptr>
Identified Serial Port uart0 at 0x235200000(<ptr>)
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(SIO): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(SIO): Boot args override: wdt = -1
RTBuddy(SIO): Resuming...

AppleDisplayPMU::start: display-pmu _pmuIICNub: <ptr> built 22:19:31 Aug 12 2020
AppleA7IOPNub: withRegistryEntry, 47: allocated nub <ptr>

RTBuddy(SMC): start(<ptr>) - (Aug 12 2020@22:50:37)
RTBuddy(SMC): Boot args override: wdt = -1
virtual bool AppleSEPManager::start(IOService *): 
RTBuddy(SMC): Resuming...

virtual bool AppleSEPManager::start(IOService *): SEP memory IS coherent
AppleSmartIO (RTBuddy-based)::start (<ptr>) - (Aug 12 2020@22:19:30)
virtual bool AppleSEPManager::start(IOService *): control endpoints created
Starting AppleSMC kext(<ptr>) - (Aug 12 2020@22:51:44)
AppleSMCEmbedded::setPowerState(): ENTER powerStateOrdinal=1, _activeKeyCommand=0 newState=1
virtual bool AppleSEPManager::start(IOService *): PM init done
virtual bool AppleSEPManager::start(IOService *): registered
IOReturn AppleSEPManager::_setPowerState(unsigned long *): power state 0 -> 2
Bad ram pointer 0x200
(dart-sep) AppleT8020DART::_fatalException: DART(DART exception ERROR_STATUS 0x80000001 ERROR_ADDRESS 0x00000000

Thread 16 "qemu-system-aar" received signal SIGABRT, Aborted.
[Switching to Thread 0x7ffe727fc6c0 (LWP 180337)]
0x00007ffff4a255df in abort () from /usr/lib/libc.so.6
(gdb) bt all
No symbol "all" in current context.
(gdb) bt
#0  0x00007ffff4a255df in abort () from /usr/lib/libc.so.6
#1  0x0000555555c96c10 in ?? ()
#2  0x0000000000000000 in ?? ()
(gdb) 

[chris-pcguy]

(gdb) bt
#0  0x00007ffff4a255df in abort () from /usr/lib/libc.so.6
#1  0x0000555555c96c10 in ?? ()
#2  0x0000000000000000 in ?? ()

And this time, please use the argument --extra-cflags="-O0" for the configure script.

[gallantcrusader]

Bad ram pointer 0x200
(dart-sep) AppleT8020DART:
Thread 16 "qemu-system-aar" received signal SIGABRT, Aborted.
[Switching to Thread 0x7ffe727fc6c0 (LWP 195465)]
0x00007ffff4a255df in abort () from /usr/lib/libc.so.6
(gdb) bt
#0  0x00007ffff4a255df in abort () from /usr/lib/libc.so.6
#1  0x0000555555e12246 in ?? ()
#2  0x00007ffe727fa1c0 in ?? ()
#3  0x0000000000000200 in ?? ()
#4  0x00007ffe727fa1a0 in ?? ()
#5  0xffffffffffffffff in ?? ()
#6  0x00007ffe727fa1c0 in ?? ()
#7  0x0000555555f1afa7 in ?? ()
#8  0x00000012727fa1a0 in ?? ()
#9  0x0000000000000000 in ?? ()
(gdb) 

[VisualEhrmanntraut]

yeah I tried that as well, not even a window was opened. i think lldb was taking a while to load or something?

did you type r to run the program

[chris-pcguy]

Maybe try a variation of -O0, -Og, -g. Maybe try using clang. I can't do much here without symbols.

[gallantcrusader]

Yes

…

On Mon, Sep 1, 2025 at 7:17 AM, Visual Ehrmanntraut < ***@***.***(mailto:On Mon, Sep 1, 2025 at 7:17 AM, Visual Ehrmanntraut <<a href=)> wrote: > yeah I tried that as well, not even a window was opened. i think lldb was taking a while to load or something? did you type r to run the program — Reply to this email directly, [view it on GitHub](#185 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AJ5GLRRBBBLK4LTOQZOVGIL3QQ2PFAVCNFSM6AAAAACFHN325GVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTIMRXGU3TEOI). You are receiving this because you commented.Message ID: ***@***.***>