(In reply to Michel Dänzer from comment #7)
> So, it looks like the value for the R_028A3C_VGT_GROUP_VECT_1_FMT_CNTL
> register and the following PKT3_SET_CONTEXT_REG header were scribbled over
> with the value 0x0000000b00000000. Looks like memory corruption to me.

Yeah, agree that strongly looks like a memory corruption. Which would also
explain all the crashes.