The crash seems to happen just after this call
I've fixed a possible memory overflow in r3502. Could you check if this helps here?
Code:
23:22:29 INFO hle.sceUtility - user_main - sceUtilitySavedataInitStart 0x09B1FB74-0x09B20174: Address 0x09B1FB74, mode=12(FILES), gameName=ULJM06290, saveName=_SAVEDATA, fileName=DATA0.BIN, secureVersion=0
Always include a complete log file at INFO level in your reports. Thanks! How to post a log